Vous êtes sur la page 1sur 1080

dfsvc.

exe (events: 7)
12/16/2009 7:02:15 AM Process
12/14/2009 4:09:32 PM Process
12/14/2009 4:09:32 PM Process
12/10/2009 2:42:15 PM Process
12/10/2009 2:42:15 PM Process
12/10/2009 4:49:12 AM Process
12/10/2009 4:08:57 AM Process
12/10/2009 4:08:57 AM Process
12/9/2009 3:23:35 AM
Process
12/9/2009 3:23:35 AM
Process
12/8/2009 1:20:42 PM
Process
12/6/2009 12:47:12 AM Process
12/5/2009 2:24:47 AM
Process
12/4/2009 6:51:08 PM
Process
12/3/2009 4:07:07 AM
Process
12/2/2009 7:36:39 PM
Process
12/1/2009 3:13:44 AM
Process
12/1/2009 3:13:44 AM
Process
11/30/2009 7:34:03 PM Process
11/30/2009 5:55:17 PM Process
11/30/2009 3:32:32 PM Process
11/26/2009 3:19:48 AM Process
11/24/2009 2:45:18 PM Process
11/24/2009 2:45:18 PM Process
11/21/2009 7:25:24 PM Process
11/21/2009 12:32:51 PM Process
11/20/2009 11:59:17 AM Process
11/19/2009 4:27:58 AM Process
11/18/2009 7:16:14 PM Process
11/18/2009 12:50:54 PM Process
11/18/2009 12:50:54 PM Process
11/18/2009 11:18:18 AM Process
11/17/2009 10:33:09 PM Process
11/17/2009 2:48:51 PM Process
dfsvc.exe (events: 7)
12/16/2009 8:03:27 AM Process
persky Anti-Virus 2009\avp.exe
12/16/2009 8:02:48 AM Process
persky Anti-Virus 2009\avp.exe
12/16/2009 7:02:15 AM Process
persky Anti-Virus 2009\avp.exe
12/16/2009 7:02:15 AM Process
persky Anti-Virus 2009\avp.exe
12/16/2009 7:02:15 AM
12/16/2009 7:00:12 AM Process
persky Anti-Virus 2009\avp.exe
12/16/2009 5:55:59 AM Process
persky Anti-Virus 2009\avp.exe
12/16/2009 5:55:21 AM Process
persky Anti-Virus 2009\avp.exe
12/16/2009 3:35:43 AM Process
persky Anti-Virus 2009\avp.exe
12/16/2009 3:35:06 AM Process
persky Anti-Virus 2009\avp.exe
12/16/2009 1:15:45 AM Process
persky Anti-Virus 2009\avp.exe
12/16/2009 1:15:06 AM Process
persky Anti-Virus 2009\avp.exe
12/15/2009 10:55:19 PM Process

start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start

System
System
System
System
System
System
System
System
System
System
System
System
System
System
System
System
System
System
System
System
System
System
System
System
System
System
System
System
System
System
System
System
System
System

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

Proactive Defense
Task started
exit
C:\Program Files (x86)\Kaspersky Lab\Kas
exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

persky Anti-Virus 2009\avp.exe


12/15/2009 10:54:51 PM Process
persky Anti-Virus 2009\avp.exe
12/15/2009 8:35:20 PM Process
persky Anti-Virus 2009\avp.exe
12/15/2009 8:34:51 PM Process
persky Anti-Virus 2009\avp.exe
12/15/2009 6:15:19 PM Process
persky Anti-Virus 2009\avp.exe
12/15/2009 6:14:51 PM Process
persky Anti-Virus 2009\avp.exe
12/15/2009 3:55:29 PM Process
persky Anti-Virus 2009\avp.exe
12/15/2009 3:54:51 PM Process
persky Anti-Virus 2009\avp.exe
12/15/2009 1:35:32 PM Process
persky Anti-Virus 2009\avp.exe
12/15/2009 1:34:51 PM Process
persky Anti-Virus 2009\avp.exe
12/15/2009 11:15:30 AM Process
persky Anti-Virus 2009\avp.exe
12/15/2009 11:14:44 AM Process
persky Anti-Virus 2009\avp.exe
12/15/2009 7:30:06 AM Process
persky Anti-Virus 2009\avp.exe
12/15/2009 7:29:27 AM Process
persky Anti-Virus 2009\avp.exe
12/15/2009 5:10:08 AM Process
persky Anti-Virus 2009\avp.exe
12/15/2009 5:09:27 AM Process
persky Anti-Virus 2009\avp.exe
12/15/2009 2:50:05 AM Process
persky Anti-Virus 2009\avp.exe
12/15/2009 2:49:27 AM Process
persky Anti-Virus 2009\avp.exe
12/15/2009 12:30:04 AM Process
persky Anti-Virus 2009\avp.exe
12/15/2009 12:29:27 AM Process
persky Anti-Virus 2009\avp.exe
12/14/2009 10:10:07 PM Process
persky Anti-Virus 2009\avp.exe
12/14/2009 10:09:27 PM Process
persky Anti-Virus 2009\avp.exe
12/14/2009 7:49:37 PM Process
persky Anti-Virus 2009\avp.exe
12/14/2009 7:48:57 PM Process
persky Anti-Virus 2009\avp.exe
12/14/2009 5:33:21 PM Process
persky Anti-Virus 2009\avp.exe
12/14/2009 5:30:54 PM Process
persky Anti-Virus 2009\avp.exe
12/14/2009 4:09:33 PM Process
persky Anti-Virus 2009\avp.exe
12/14/2009 4:09:33 PM Process
persky Anti-Virus 2009\avp.exe
12/14/2009 4:09:32 PM
12/14/2009 3:47:51 PM Process
persky Anti-Virus 2009\avp.exe
12/14/2009 3:09:12 PM Process
persky Anti-Virus 2009\avp.exe

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

Proactive Defense
Task started
exit
C:\Program Files (x86)\Kaspersky Lab\Kas
exit

C:\Program Files (x86)\Kaspersky Lab\Kas

12/14/2009 3:08:21 PM Process


persky Anti-Virus 2009\avp.exe
12/14/2009 10:12:29 AM Process
persky Anti-Virus 2009\avp.exe
12/14/2009 10:11:44 AM Process
persky Anti-Virus 2009\avp.exe
12/14/2009 4:06:53 AM Process
persky Anti-Virus 2009\avp.exe
12/14/2009 4:06:09 AM Process
persky Anti-Virus 2009\avp.exe
12/13/2009 11:57:48 PM Process
persky Anti-Virus 2009\avp.exe
12/13/2009 11:57:10 PM Process
persky Anti-Virus 2009\avp.exe
12/13/2009 7:44:30 PM Process
persky Anti-Virus 2009\avp.exe
12/13/2009 7:43:50 PM Process
persky Anti-Virus 2009\avp.exe
12/13/2009 4:18:33 PM Process
persky Anti-Virus 2009\avp.exe
12/13/2009 4:17:52 PM Process
persky Anti-Virus 2009\avp.exe
12/13/2009 1:58:41 PM Process
persky Anti-Virus 2009\avp.exe
12/13/2009 1:57:52 PM Process
persky Anti-Virus 2009\avp.exe
12/13/2009 4:42:02 AM Process
persky Anti-Virus 2009\avp.exe
12/13/2009 4:41:12 AM Process
persky Anti-Virus 2009\avp.exe
12/12/2009 8:13:20 PM Process
persky Anti-Virus 2009\avp.exe
12/12/2009 8:12:38 PM Process
persky Anti-Virus 2009\avp.exe
12/12/2009 5:53:17 PM Process
persky Anti-Virus 2009\avp.exe
12/12/2009 5:52:38 PM Process
persky Anti-Virus 2009\avp.exe
12/12/2009 3:33:00 PM Process
persky Anti-Virus 2009\avp.exe
12/12/2009 3:32:17 PM Process
persky Anti-Virus 2009\avp.exe
12/12/2009 11:04:09 AM Process
persky Anti-Virus 2009\avp.exe
12/12/2009 11:03:22 AM Process
persky Anti-Virus 2009\avp.exe
12/12/2009 6:24:50 AM Process
persky Anti-Virus 2009\avp.exe
12/12/2009 6:24:05 AM Process
persky Anti-Virus 2009\avp.exe
12/11/2009 9:08:08 PM Process
persky Anti-Virus 2009\avp.exe
12/11/2009 9:07:41 PM Process
persky Anti-Virus 2009\avp.exe
12/11/2009 6:48:23 PM Process
persky Anti-Virus 2009\avp.exe
12/11/2009 6:47:41 PM Process
persky Anti-Virus 2009\avp.exe
12/11/2009 4:28:08 PM Process
persky Anti-Virus 2009\avp.exe

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

12/11/2009 4:27:22 PM Process


persky Anti-Virus 2009\avp.exe
12/11/2009 1:52:21 PM Process
persky Anti-Virus 2009\avp.exe
12/11/2009 1:50:24 PM Process
persky Anti-Virus 2009\avp.exe
12/11/2009 11:31:01 AM Process
persky Anti-Virus 2009\avp.exe
12/11/2009 11:30:09 AM Process
persky Anti-Virus 2009\avp.exe
12/11/2009 9:09:55 AM Process
persky Anti-Virus 2009\avp.exe
12/11/2009 9:09:13 AM Process
persky Anti-Virus 2009\avp.exe
12/11/2009 5:59:51 AM Process
persky Anti-Virus 2009\avp.exe
12/11/2009 5:59:09 AM Process
persky Anti-Virus 2009\avp.exe
12/11/2009 3:56:42 AM Process
persky Anti-Virus 2009\avp.exe
12/11/2009 3:55:51 AM Process
persky Anti-Virus 2009\avp.exe
12/10/2009 6:08:15 PM Process
persky Anti-Virus 2009\avp.exe
12/10/2009 6:07:35 PM Process
persky Anti-Virus 2009\avp.exe
12/10/2009 4:03:05 PM Process
persky Anti-Virus 2009\avp.exe
12/10/2009 4:03:05 PM
12/10/2009 4:02:27 PM Process
persky Anti-Virus 2009\avp.exe
12/10/2009 2:42:15 PM
12/10/2009 2:42:15 PM Process
persky Anti-Virus 2009\avp.exe
12/10/2009 2:42:15 PM Process
persky Anti-Virus 2009\avp.exe
12/10/2009 2:22:48 PM Process
persky Anti-Virus 2009\avp.exe
12/10/2009 1:58:45 PM Process
persky Anti-Virus 2009\avp.exe
12/10/2009 1:57:57 PM Process
persky Anti-Virus 2009\avp.exe
12/10/2009 4:49:52 AM Process
persky Anti-Virus 2009\avp.exe
12/10/2009 4:49:35 AM Process
persky Anti-Virus 2009\avp.exe
12/10/2009 4:49:32 AM Process
persky Anti-Virus 2009\avp.exe
12/10/2009 4:49:12 AM Process
persky Anti-Virus 2009\avp.exe
12/10/2009 4:49:12 AM
12/10/2009 4:46:55 AM Process
persky Anti-Virus 2009\avp.exe
12/10/2009 4:11:04 AM Process
persky Anti-Virus 2009\avp.exe
12/10/2009 4:09:11 AM Process
persky Anti-Virus 2009\avp.exe
12/10/2009 4:08:57 AM Process
persky Anti-Virus 2009\avp.exe
12/10/2009 4:08:57 AM Process

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

Proactive Defense
Task started
start C:\Program Files (x86)\Kaspersky Lab\Kas
Proactive Defense
Task started
start C:\Program Files (x86)\Kaspersky Lab\Kas
start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

Proactive Defense
Task started
exit
C:\Program Files (x86)\Kaspersky Lab\Kas
exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

persky Anti-Virus 2009\avp.exe


12/10/2009 4:08:57 AM
12/9/2009 3:25:20 AM
Process
persky Anti-Virus 2009\avp.exe
12/9/2009 3:23:52 AM
Process
persky Anti-Virus 2009\avp.exe
12/9/2009 3:23:35 AM
Process
persky Anti-Virus 2009\avp.exe
12/9/2009 3:23:35 AM
Process
persky Anti-Virus 2009\avp.exe
12/9/2009 3:23:35 AM
12/8/2009 9:15:51 PM
Process
persky Anti-Virus 2009\avp.exe
12/8/2009 9:08:27 PM
Process
persky Anti-Virus 2009\avp.exe
12/8/2009 9:07:42 PM
Process
persky Anti-Virus 2009\avp.exe
12/8/2009 3:41:46 PM
Process
persky Anti-Virus 2009\avp.exe
12/8/2009 3:41:13 PM
Process
persky Anti-Virus 2009\avp.exe
12/8/2009 1:22:29 PM
Process
persky Anti-Virus 2009\avp.exe
12/8/2009 1:20:58 PM
Process
persky Anti-Virus 2009\avp.exe
12/8/2009 1:20:42 PM
12/8/2009 1:20:42 PM
Process
persky Anti-Virus 2009\avp.exe
12/8/2009 1:20:42 PM
Process
persky Anti-Virus 2009\avp.exe
12/8/2009 11:34:16 AM Process
persky Anti-Virus 2009\avp.exe
12/8/2009 10:51:40 AM Process
persky Anti-Virus 2009\avp.exe
12/8/2009 10:50:26 AM Process
persky Anti-Virus 2009\avp.exe
12/8/2009 4:27:45 AM
Process
persky Anti-Virus 2009\avp.exe
12/8/2009 4:26:27 AM
Process
persky Anti-Virus 2009\avp.exe
12/8/2009 2:26:01 AM
Process
persky Anti-Virus 2009\avp.exe
12/8/2009 2:24:38 AM
Process
persky Anti-Virus 2009\avp.exe
12/7/2009 11:37:45 PM Process
persky Anti-Virus 2009\avp.exe
12/7/2009 11:36:28 PM Process
persky Anti-Virus 2009\avp.exe
12/7/2009 4:27:24 PM
Process
persky Anti-Virus 2009\avp.exe
12/7/2009 4:26:07 PM
Process
persky Anti-Virus 2009\avp.exe
12/7/2009 2:07:22 PM
Process
persky Anti-Virus 2009\avp.exe
12/7/2009 2:05:59 PM
Process
persky Anti-Virus 2009\avp.exe
12/7/2009 6:22:42 AM
Process
persky Anti-Virus 2009\avp.exe
12/7/2009 6:21:26 AM
Process
persky Anti-Virus 2009\avp.exe

Proactive Defense
Task started
exit
C:\Program Files (x86)\Kaspersky Lab\Kas
start

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

Proactive Defense
Task started
exit
C:\Program Files (x86)\Kaspersky Lab\Kas
exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

Proactive Defense
Task started
start C:\Program Files (x86)\Kaspersky Lab\Kas
start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

12/7/2009 4:02:43 AM
Process
persky Anti-Virus 2009\avp.exe
12/7/2009 4:01:39 AM
Process
persky Anti-Virus 2009\avp.exe
12/6/2009 4:26:22 PM
Process
persky Anti-Virus 2009\avp.exe
12/6/2009 4:25:06 PM
Process
persky Anti-Virus 2009\avp.exe
12/6/2009 2:05:55 PM
Process
persky Anti-Virus 2009\avp.exe
12/6/2009 2:04:41 PM
Process
persky Anti-Virus 2009\avp.exe
12/6/2009 5:28:49 AM
Process
persky Anti-Virus 2009\avp.exe
12/6/2009 5:28:12 AM
Process
persky Anti-Virus 2009\avp.exe
12/6/2009 3:08:52 AM
Process
persky Anti-Virus 2009\avp.exe
12/6/2009 3:08:12 AM
Process
persky Anti-Virus 2009\avp.exe
12/6/2009 12:49:25 AM Process
persky Anti-Virus 2009\avp.exe
12/6/2009 12:47:57 AM Process
persky Anti-Virus 2009\avp.exe
12/6/2009 12:47:12 AM
12/6/2009 12:47:12 AM Process
persky Anti-Virus 2009\avp.exe
12/6/2009 12:47:12 AM Process
persky Anti-Virus 2009\avp.exe
12/5/2009 7:28:55 PM
Process
persky Anti-Virus 2009\avp.exe
12/5/2009 7:05:52 PM
Process
persky Anti-Virus 2009\avp.exe
12/5/2009 6:53:50 PM
Process
persky Anti-Virus 2009\avp.exe
12/5/2009 4:53:00 PM
Process
persky Anti-Virus 2009\avp.exe
12/5/2009 4:52:20 PM
Process
persky Anti-Virus 2009\avp.exe
12/5/2009 2:49:55 PM
Process
persky Anti-Virus 2009\avp.exe
12/5/2009 2:49:15 PM
Process
persky Anti-Virus 2009\avp.exe
12/5/2009 12:29:07 PM Process
persky Anti-Virus 2009\avp.exe
12/5/2009 12:28:20 PM Process
persky Anti-Virus 2009\avp.exe
12/5/2009 2:26:19 AM
Process
persky Anti-Virus 2009\avp.exe
12/5/2009 2:24:54 AM
Process
persky Anti-Virus 2009\avp.exe
12/5/2009 2:24:47 AM
12/5/2009 2:24:47 AM
Process
persky Anti-Virus 2009\avp.exe
12/5/2009 2:24:47 AM
Process
persky Anti-Virus 2009\avp.exe
12/4/2009 10:43:14 PM Process
persky Anti-Virus 2009\avp.exe
12/4/2009 9:11:57 PM
Process
persky Anti-Virus 2009\avp.exe

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

Proactive Defense
Task started
start C:\Program Files (x86)\Kaspersky Lab\Kas
start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

Proactive Defense
Task started
start C:\Program Files (x86)\Kaspersky Lab\Kas
start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

12/4/2009 9:11:16 PM
Process
persky Anti-Virus 2009\avp.exe
12/4/2009 6:52:34 PM
Process
persky Anti-Virus 2009\avp.exe
12/4/2009 6:51:11 PM
Process
persky Anti-Virus 2009\avp.exe
12/4/2009 6:51:08 PM
Process
persky Anti-Virus 2009\avp.exe
12/4/2009 6:51:08 PM
Process
persky Anti-Virus 2009\avp.exe
12/4/2009 6:51:08 PM
12/4/2009 4:27:46 PM
Process
persky Anti-Virus 2009\avp.exe
12/4/2009 2:20:11 PM
Process
persky Anti-Virus 2009\avp.exe
12/4/2009 2:19:29 PM
Process
persky Anti-Virus 2009\avp.exe
12/4/2009 12:00:02 PM Process
persky Anti-Virus 2009\avp.exe
12/4/2009 11:59:18 AM Process
persky Anti-Virus 2009\avp.exe
12/4/2009 4:19:05 AM
Process
persky Anti-Virus 2009\avp.exe
12/4/2009 4:18:01 AM
Process
persky Anti-Virus 2009\avp.exe
12/3/2009 2:06:46 PM
Process
persky Anti-Virus 2009\avp.exe
12/3/2009 2:06:00 PM
Process
persky Anti-Virus 2009\avp.exe
12/3/2009 4:08:52 AM
Process
persky Anti-Virus 2009\avp.exe
12/3/2009 4:07:19 AM
Process
persky Anti-Virus 2009\avp.exe
12/3/2009 4:07:12 AM
Process
persky Anti-Virus 2009\avp.exe
12/3/2009 4:07:07 AM
Process
persky Anti-Virus 2009\avp.exe
12/3/2009 4:07:07 AM
12/2/2009 8:42:06 PM
Process
persky Anti-Virus 2009\avp.exe
12/2/2009 7:38:47 PM
Process
persky Anti-Virus 2009\avp.exe
12/2/2009 7:36:45 PM
Process
persky Anti-Virus 2009\avp.exe
12/2/2009 7:36:40 PM
12/2/2009 7:36:39 PM
Process
persky Anti-Virus 2009\avp.exe
12/2/2009 7:36:39 PM
Process
persky Anti-Virus 2009\avp.exe
12/2/2009 3:43:08 PM
Process
persky Anti-Virus 2009\avp.exe
12/2/2009 1:50:42 PM
Process
persky Anti-Virus 2009\avp.exe
12/2/2009 1:50:04 PM
Process
persky Anti-Virus 2009\avp.exe
12/2/2009 11:30:34 AM Process
persky Anti-Virus 2009\avp.exe
12/2/2009 11:29:54 AM Process
persky Anti-Virus 2009\avp.exe
12/2/2009 5:52:37 AM
Process

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

Proactive Defense
Task started
exit
C:\Program Files (x86)\Kaspersky Lab\Kas
exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

Proactive Defense
Task started
exit
C:\Program Files (x86)\Kaspersky Lab\Kas
exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

Proactive Defense
Task started
start C:\Program Files (x86)\Kaspersky Lab\Kas
start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

persky Anti-Virus 2009\avp.exe


12/2/2009 5:51:54 AM
Process
persky Anti-Virus 2009\avp.exe
12/2/2009 3:09:13 AM
Process
persky Anti-Virus 2009\avp.exe
12/2/2009 3:06:53 AM
Process
persky Anti-Virus 2009\avp.exe
12/1/2009 6:24:28 PM
Process
persky Anti-Virus 2009\avp.exe
12/1/2009 6:23:48 PM
Process
persky Anti-Virus 2009\avp.exe
12/1/2009 4:07:22 PM
Process
persky Anti-Virus 2009\avp.exe
12/1/2009 4:06:37 PM
Process
persky Anti-Virus 2009\avp.exe
12/1/2009 1:47:22 PM
Process
persky Anti-Virus 2009\avp.exe
12/1/2009 1:46:28 PM
Process
persky Anti-Virus 2009\avp.exe
12/1/2009 5:34:40 AM
Process
persky Anti-Virus 2009\avp.exe
12/1/2009 5:33:59 AM
Process
persky Anti-Virus 2009\avp.exe
12/1/2009 3:15:42 AM
Process
persky Anti-Virus 2009\avp.exe
12/1/2009 3:14:19 AM
Process
persky Anti-Virus 2009\avp.exe
12/1/2009 3:13:44 AM
Process
persky Anti-Virus 2009\avp.exe
12/1/2009 3:13:44 AM
Process
persky Anti-Virus 2009\avp.exe
12/1/2009 3:13:44 AM
11/30/2009 8:00:27 PM Process
persky Anti-Virus 2009\avp.exe
11/30/2009 7:34:03 PM Process
persky Anti-Virus 2009\avp.exe
11/30/2009 7:34:03 PM Process
persky Anti-Virus 2009\avp.exe
11/30/2009 7:34:03 PM
11/30/2009 6:55:13 PM Process
persky Anti-Virus 2009\avp.exe
11/30/2009 6:13:39 PM Process
persky Anti-Virus 2009\avp.exe
11/30/2009 6:13:00 PM Process
persky Anti-Virus 2009\avp.exe
11/30/2009 5:55:17 PM
11/30/2009 5:55:17 PM Process
persky Anti-Virus 2009\avp.exe
11/30/2009 5:55:17 PM Process
persky Anti-Virus 2009\avp.exe
11/30/2009 5:53:07 PM Process
persky Anti-Virus 2009\avp.exe
11/30/2009 5:52:50 PM Process
persky Anti-Virus 2009\avp.exe
11/30/2009 3:35:20 PM Process
persky Anti-Virus 2009\avp.exe
11/30/2009 3:32:41 PM Process
persky Anti-Virus 2009\avp.exe
11/30/2009 3:32:36 PM Process
persky Anti-Virus 2009\avp.exe

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

Proactive Defense
Task started
exit
C:\Program Files (x86)\Kaspersky Lab\Kas
start

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

Proactive Defense
Task started
exit
C:\Program Files (x86)\Kaspersky Lab\Kas
exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

Proactive Defense
Task started
start C:\Program Files (x86)\Kaspersky Lab\Kas
start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

11/30/2009 3:32:36 PM Process


persky Anti-Virus 2009\avp.exe
11/30/2009 3:32:33 PM
11/30/2009 10:18:13 AM Process
persky Anti-Virus 2009\avp.exe
11/30/2009 10:13:17 AM Process
persky Anti-Virus 2009\avp.exe
11/30/2009 10:12:27 AM Process
persky Anti-Virus 2009\avp.exe
11/30/2009 5:44:39 AM Process
persky Anti-Virus 2009\avp.exe
11/30/2009 5:17:32 AM Process
persky Anti-Virus 2009\avp.exe
11/29/2009 5:55:35 PM Process
persky Anti-Virus 2009\avp.exe
11/29/2009 5:54:57 PM Process
persky Anti-Virus 2009\avp.exe
11/29/2009 2:06:46 PM Process
persky Anti-Virus 2009\avp.exe
11/29/2009 2:06:02 PM Process
persky Anti-Virus 2009\avp.exe
11/29/2009 4:52:27 AM Process
persky Anti-Virus 2009\avp.exe
11/29/2009 4:51:42 AM Process
persky Anti-Virus 2009\avp.exe
11/28/2009 5:45:48 PM Process
persky Anti-Virus 2009\avp.exe
11/28/2009 5:45:09 PM Process
persky Anti-Virus 2009\avp.exe
11/28/2009 3:25:54 PM Process
persky Anti-Virus 2009\avp.exe
11/28/2009 3:25:09 PM Process
persky Anti-Virus 2009\avp.exe
11/28/2009 1:10:22 PM Process
persky Anti-Virus 2009\avp.exe
11/28/2009 1:09:51 PM Process
persky Anti-Virus 2009\avp.exe
11/28/2009 10:50:29 AM Process
persky Anti-Virus 2009\avp.exe
11/28/2009 10:49:51 AM Process
persky Anti-Virus 2009\avp.exe
11/28/2009 8:30:34 AM Process
persky Anti-Virus 2009\avp.exe
11/28/2009 8:29:54 AM Process
persky Anti-Virus 2009\avp.exe
11/28/2009 6:10:31 AM Process
persky Anti-Virus 2009\avp.exe
11/28/2009 6:09:51 AM Process
persky Anti-Virus 2009\avp.exe
11/28/2009 3:50:28 AM Process
persky Anti-Virus 2009\avp.exe
11/28/2009 3:49:51 AM Process
persky Anti-Virus 2009\avp.exe
11/28/2009 1:30:32 AM Process
persky Anti-Virus 2009\avp.exe
11/28/2009 1:29:51 AM Process
persky Anti-Virus 2009\avp.exe
11/27/2009 11:10:18 PM Process
persky Anti-Virus 2009\avp.exe
11/27/2009 11:09:36 PM Process

start

C:\Program Files (x86)\Kaspersky Lab\Kas

Proactive Defense
Task started
exit
C:\Program Files (x86)\Kaspersky Lab\Kas
exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

persky Anti-Virus 2009\avp.exe


11/27/2009 8:50:20 PM Process
persky Anti-Virus 2009\avp.exe
11/27/2009 8:49:32 PM Process
persky Anti-Virus 2009\avp.exe
11/27/2009 3:08:25 PM Process
persky Anti-Virus 2009\avp.exe
11/27/2009 3:07:39 PM Process
persky Anti-Virus 2009\avp.exe
11/27/2009 11:28:10 AM Process
persky Anti-Virus 2009\avp.exe
11/27/2009 11:27:22 AM Process
persky Anti-Virus 2009\avp.exe
11/27/2009 2:53:22 AM Process
persky Anti-Virus 2009\avp.exe
11/27/2009 2:52:43 AM Process
persky Anti-Virus 2009\avp.exe
11/27/2009 12:33:11 AM Process
persky Anti-Virus 2009\avp.exe
11/27/2009 12:32:33 AM Process
persky Anti-Virus 2009\avp.exe
11/26/2009 7:14:06 PM Process
persky Anti-Virus 2009\avp.exe
11/26/2009 7:13:28 PM Process
persky Anti-Virus 2009\avp.exe
11/26/2009 4:54:06 PM Process
persky Anti-Virus 2009\avp.exe
11/26/2009 4:53:28 PM Process
persky Anti-Virus 2009\avp.exe
11/26/2009 2:34:11 PM Process
persky Anti-Virus 2009\avp.exe
11/26/2009 2:33:28 PM Process
persky Anti-Virus 2009\avp.exe
11/26/2009 12:26:27 PM Process
persky Anti-Virus 2009\avp.exe
11/26/2009 12:25:43 PM Process
persky Anti-Virus 2009\avp.exe
11/26/2009 7:00:04 AM Process
persky Anti-Virus 2009\avp.exe
11/26/2009 6:59:15 AM Process
persky Anti-Virus 2009\avp.exe
11/26/2009 3:20:12 AM Process
persky Anti-Virus 2009\avp.exe
11/26/2009 3:20:11 AM Process
persky Anti-Virus 2009\avp.exe
11/26/2009 3:20:10 AM Process
persky Anti-Virus 2009\avp.exe
11/26/2009 3:19:48 AM Process
persky Anti-Virus 2009\avp.exe
11/26/2009 3:19:48 AM
11/26/2009 3:17:54 AM Process
persky Anti-Virus 2009\avp.exe
11/26/2009 3:01:03 AM Process
persky Anti-Virus 2009\avp.exe
11/26/2009 3:00:16 AM Process
persky Anti-Virus 2009\avp.exe
11/26/2009 12:02:58 AM Process
persky Anti-Virus 2009\avp.exe
11/26/2009 12:02:20 AM Process
persky Anti-Virus 2009\avp.exe

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

Proactive Defense
Task started
exit
C:\Program Files (x86)\Kaspersky Lab\Kas
exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

11/25/2009 9:42:55 PM Process


persky Anti-Virus 2009\avp.exe
11/25/2009 9:42:14 PM Process
persky Anti-Virus 2009\avp.exe
11/25/2009 7:22:56 PM Process
persky Anti-Virus 2009\avp.exe
11/25/2009 7:22:14 PM Process
persky Anti-Virus 2009\avp.exe
11/25/2009 5:02:54 PM Process
persky Anti-Virus 2009\avp.exe
11/25/2009 5:02:14 PM Process
persky Anti-Virus 2009\avp.exe
11/25/2009 2:42:37 PM Process
persky Anti-Virus 2009\avp.exe
11/25/2009 2:41:59 PM Process
persky Anti-Virus 2009\avp.exe
11/25/2009 12:22:37 PM Process
persky Anti-Virus 2009\avp.exe
11/25/2009 12:21:54 PM Process
persky Anti-Virus 2009\avp.exe
11/25/2009 5:21:01 AM Process
persky Anti-Virus 2009\avp.exe
11/25/2009 5:20:22 AM Process
persky Anti-Virus 2009\avp.exe
11/25/2009 3:01:22 AM Process
persky Anti-Virus 2009\avp.exe
11/25/2009 3:00:26 AM Process
persky Anti-Virus 2009\avp.exe
11/24/2009 3:46:01 PM Process
persky Anti-Virus 2009\avp.exe
11/24/2009 3:45:22 PM Process
persky Anti-Virus 2009\avp.exe
11/24/2009 2:45:18 PM Process
persky Anti-Virus 2009\avp.exe
11/24/2009 2:45:18 PM Process
persky Anti-Virus 2009\avp.exe
11/24/2009 2:45:18 PM
11/24/2009 2:41:30 PM Process
persky Anti-Virus 2009\avp.exe
11/24/2009 1:28:18 PM Process
persky Anti-Virus 2009\avp.exe
11/24/2009 1:27:38 PM Process
persky Anti-Virus 2009\avp.exe
11/24/2009 10:05:51 AM Process
persky Anti-Virus 2009\avp.exe
11/24/2009 10:05:05 AM Process
persky Anti-Virus 2009\avp.exe
11/24/2009 3:49:01 AM Process
persky Anti-Virus 2009\avp.exe
11/24/2009 3:48:22 AM Process
persky Anti-Virus 2009\avp.exe
11/23/2009 7:58:16 PM Process
persky Anti-Virus 2009\avp.exe
11/23/2009 7:57:28 PM Process
persky Anti-Virus 2009\avp.exe
11/23/2009 5:00:12 PM Process
persky Anti-Virus 2009\avp.exe
11/23/2009 4:59:27 PM Process
persky Anti-Virus 2009\avp.exe
11/23/2009 8:53:38 AM Process

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

Proactive Defense
Task started
exit
C:\Program Files (x86)\Kaspersky Lab\Kas
exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

persky Anti-Virus 2009\avp.exe


11/23/2009 8:53:00 AM Process
persky Anti-Virus 2009\avp.exe
11/23/2009 6:33:40 AM Process
persky Anti-Virus 2009\avp.exe
11/23/2009 6:33:00 AM Process
persky Anti-Virus 2009\avp.exe
11/23/2009 4:13:38 AM Process
persky Anti-Virus 2009\avp.exe
11/23/2009 4:12:50 AM Process
persky Anti-Virus 2009\avp.exe
11/22/2009 4:22:46 PM Process
persky Anti-Virus 2009\avp.exe
11/22/2009 4:22:09 PM Process
persky Anti-Virus 2009\avp.exe
11/22/2009 2:02:52 PM Process
persky Anti-Virus 2009\avp.exe
11/22/2009 2:02:08 PM Process
persky Anti-Virus 2009\avp.exe
11/22/2009 2:33:03 AM Process
persky Anti-Virus 2009\avp.exe
11/22/2009 2:32:19 AM Process
persky Anti-Virus 2009\avp.exe
11/22/2009 12:27:58 AM Process
persky Anti-Virus 2009\avp.exe
11/22/2009 12:27:21 AM Process
persky Anti-Virus 2009\avp.exe
11/21/2009 7:27:24 PM Process
persky Anti-Virus 2009\avp.exe
11/21/2009 7:26:05 PM Process
persky Anti-Virus 2009\avp.exe
11/21/2009 7:25:24 PM Process
persky Anti-Virus 2009\avp.exe
11/21/2009 7:25:24 PM Process
persky Anti-Virus 2009\avp.exe
11/21/2009 7:25:24 PM
11/21/2009 7:11:44 PM Process
persky Anti-Virus 2009\avp.exe
11/21/2009 5:13:44 PM Process
persky Anti-Virus 2009\avp.exe
11/21/2009 5:12:57 PM Process
persky Anti-Virus 2009\avp.exe
11/21/2009 2:53:31 PM Process
persky Anti-Virus 2009\avp.exe
11/21/2009 2:52:54 PM Process
persky Anti-Virus 2009\avp.exe
11/21/2009 12:34:24 PM Process
persky Anti-Virus 2009\avp.exe
11/21/2009 12:32:54 PM Process
persky Anti-Virus 2009\avp.exe
11/21/2009 12:32:51 PM Process
persky Anti-Virus 2009\avp.exe
11/21/2009 12:32:51 PM Process
persky Anti-Virus 2009\avp.exe
11/21/2009 12:32:51 PM
11/20/2009 6:58:59 PM Process
persky Anti-Virus 2009\avp.exe
11/20/2009 6:55:37 PM Process
persky Anti-Virus 2009\avp.exe
11/20/2009 6:54:53 PM Process

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

Proactive Defense
Task started
exit
C:\Program Files (x86)\Kaspersky Lab\Kas
exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

Proactive Defense
Task started
exit
C:\Program Files (x86)\Kaspersky Lab\Kas
exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

persky Anti-Virus 2009\avp.exe


11/20/2009 2:20:09 PM Process
persky Anti-Virus 2009\avp.exe
11/20/2009 2:19:30 PM Process
persky Anti-Virus 2009\avp.exe
11/20/2009 12:00:50 PM Process
persky Anti-Virus 2009\avp.exe
11/20/2009 11:59:22 AM Process
persky Anti-Virus 2009\avp.exe
11/20/2009 11:59:18 AM Process
persky Anti-Virus 2009\avp.exe
11/20/2009 11:59:18 AM Process
persky Anti-Virus 2009\avp.exe
11/20/2009 11:59:18 AM
11/20/2009 9:52:53 AM Process
persky Anti-Virus 2009\avp.exe
11/20/2009 9:51:46 AM Process
persky Anti-Virus 2009\avp.exe
11/20/2009 9:50:51 AM Process
persky Anti-Virus 2009\avp.exe
11/20/2009 4:51:44 AM Process
persky Anti-Virus 2009\avp.exe
11/20/2009 4:51:02 AM Process
persky Anti-Virus 2009\avp.exe
11/19/2009 7:53:39 PM Process
persky Anti-Virus 2009\avp.exe
11/19/2009 7:52:59 PM Process
persky Anti-Virus 2009\avp.exe
11/19/2009 5:09:53 PM Process
persky Anti-Virus 2009\avp.exe
11/19/2009 5:08:38 PM Process
persky Anti-Virus 2009\avp.exe
11/19/2009 2:49:16 PM Process
persky Anti-Virus 2009\avp.exe
11/19/2009 2:48:33 PM Process
persky Anti-Virus 2009\avp.exe
11/19/2009 12:12:41 PM Process
persky Anti-Virus 2009\avp.exe
11/19/2009 12:12:03 PM Process
persky Anti-Virus 2009\avp.exe
11/19/2009 10:11:55 AM Process
persky Anti-Virus 2009\avp.exe
11/19/2009 10:11:07 AM Process
persky Anti-Virus 2009\avp.exe
11/19/2009 4:29:49 AM Process
persky Anti-Virus 2009\avp.exe
11/19/2009 4:28:02 AM Process
persky Anti-Virus 2009\avp.exe
11/19/2009 4:27:58 AM Process
persky Anti-Virus 2009\avp.exe
11/19/2009 4:27:58 AM Process
persky Anti-Virus 2009\avp.exe
11/19/2009 4:27:58 AM
11/18/2009 7:43:43 PM Process
persky Anti-Virus 2009\avp.exe
11/18/2009 7:17:45 PM Process
persky Anti-Virus 2009\avp.exe
11/18/2009 7:16:18 PM Process
persky Anti-Virus 2009\avp.exe
11/18/2009 7:16:14 PM Process

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

Proactive Defense
Task started
exit
C:\Program Files (x86)\Kaspersky Lab\Kas
exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

Proactive Defense
Task started
exit
C:\Program Files (x86)\Kaspersky Lab\Kas
exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

persky Anti-Virus 2009\avp.exe


11/18/2009 7:16:14 PM Process
persky Anti-Virus 2009\avp.exe
11/18/2009 7:16:14 PM
11/18/2009 6:03:02 PM Process
persky Anti-Virus 2009\avp.exe
11/18/2009 4:32:10 PM Process
persky Anti-Virus 2009\avp.exe
11/18/2009 4:31:22 PM Process
persky Anti-Virus 2009\avp.exe
11/18/2009 12:50:54 PM Process
persky Anti-Virus 2009\avp.exe
11/18/2009 12:50:54 PM Process
persky Anti-Virus 2009\avp.exe
11/18/2009 12:50:54 PM
11/18/2009 12:25:18 PM Process
persky Anti-Virus 2009\avp.exe
11/18/2009 12:19:09 PM Process
persky Anti-Virus 2009\avp.exe
11/18/2009 12:18:33 PM Process
persky Anti-Virus 2009\avp.exe
11/18/2009 11:18:18 AM Process
persky Anti-Virus 2009\avp.exe
11/18/2009 11:18:18 AM Process
persky Anti-Virus 2009\avp.exe
11/18/2009 11:18:18 AM
11/18/2009 10:34:53 AM Process
persky Anti-Virus 2009\avp.exe
11/18/2009 10:15:53 AM Process
persky Anti-Virus 2009\avp.exe
11/18/2009 10:15:10 AM Process
persky Anti-Virus 2009\avp.exe
11/18/2009 4:46:30 AM Process
persky Anti-Virus 2009\avp.exe
11/18/2009 4:45:45 AM Process
persky Anti-Virus 2009\avp.exe
11/17/2009 10:34:56 PM Process
persky Anti-Virus 2009\avp.exe
11/17/2009 10:33:16 PM Process
persky Anti-Virus 2009\avp.exe
11/17/2009 10:33:09 PM
11/17/2009 10:33:09 PM Process
persky Anti-Virus 2009\avp.exe
11/17/2009 10:33:09 PM Process
persky Anti-Virus 2009\avp.exe
11/17/2009 6:17:47 PM Process
persky Anti-Virus 2009\avp.exe
11/17/2009 5:52:45 PM Process
persky Anti-Virus 2009\avp.exe
11/17/2009 5:52:02 PM Process
persky Anti-Virus 2009\avp.exe
11/17/2009 2:50:22 PM Process
persky Anti-Virus 2009\avp.exe
11/17/2009 2:48:56 PM Process
persky Anti-Virus 2009\avp.exe
11/17/2009 2:48:52 PM
11/17/2009 2:48:52 PM Process
persky Anti-Virus 2009\avp.exe
11/17/2009 2:48:52 PM Process
persky Anti-Virus 2009\avp.exe

start

C:\Program Files (x86)\Kaspersky Lab\Kas

Proactive Defense
Task started
exit
C:\Program Files (x86)\Kaspersky Lab\Kas
exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

Proactive Defense
Task started
exit
C:\Program Files (x86)\Kaspersky Lab\Kas
exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

Proactive Defense
Task started
exit
C:\Program Files (x86)\Kaspersky Lab\Kas
exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

Proactive Defense
Task started
start C:\Program Files (x86)\Kaspersky Lab\Kas
start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

Proactive Defense
Task started
start C:\Program Files (x86)\Kaspersky Lab\Kas
start

C:\Program Files (x86)\Kaspersky Lab\Kas

11/17/2009 2:25:46 AM Process


persky Anti-Virus 2009\avp.exe
11/17/2009 2:24:51 AM Process
persky Anti-Virus 2009\avp.exe
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM Process
.EXE
12/14/2009 4:09:33 PM Process
.EXE
12/10/2009 2:42:15 PM Process
.EXE
12/10/2009 4:49:12 AM Process
.EXE
12/10/2009 4:08:57 AM Process
.EXE
12/9/2009 3:23:35 AM
Process
.EXE
12/8/2009 1:20:42 PM
Process
.EXE
12/6/2009 12:47:12 AM Process
.EXE
12/5/2009 2:24:47 AM
Process
.EXE
12/4/2009 6:51:08 PM
Process
.EXE
12/3/2009 4:07:07 AM
Process
.EXE
12/2/2009 7:36:39 PM
Process
.EXE
12/1/2009 3:13:44 AM
Process
.EXE
11/30/2009 7:34:03 PM Process
.EXE
11/30/2009 5:55:17 PM Process
.EXE
11/30/2009 3:32:34 PM Process
.EXE
11/26/2009 3:19:48 AM Process
.EXE
11/24/2009 2:45:18 PM Process
.EXE
11/21/2009 7:25:24 PM Process
.EXE
11/21/2009 12:32:51 PM Process
.EXE
11/20/2009 11:59:18 AM Process
.EXE
11/19/2009 4:27:58 AM Process
.EXE
11/18/2009 7:16:14 PM Process
.EXE
11/18/2009 12:50:54 PM Process
.EXE
11/18/2009 11:18:18 AM Process
.EXE
11/17/2009 10:33:09 PM Process
.EXE
11/17/2009 2:48:51 PM Process
.EXE
dfsvc.exe (events: 7)

exit

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\Program Files (x86)\Kaspersky Lab\Kas

start

C:\PROGRAM FILES\DELL\DELLDOCK\DOCKLOGIN

start

C:\PROGRAM FILES\DELL\DELLDOCK\DOCKLOGIN

start

C:\PROGRAM FILES\DELL\DELLDOCK\DOCKLOGIN

start

C:\PROGRAM FILES\DELL\DELLDOCK\DOCKLOGIN

start

C:\PROGRAM FILES\DELL\DELLDOCK\DOCKLOGIN

start

C:\PROGRAM FILES\DELL\DELLDOCK\DOCKLOGIN

start

C:\PROGRAM FILES\DELL\DELLDOCK\DOCKLOGIN

start

C:\PROGRAM FILES\DELL\DELLDOCK\DOCKLOGIN

start

C:\PROGRAM FILES\DELL\DELLDOCK\DOCKLOGIN

start

C:\PROGRAM FILES\DELL\DELLDOCK\DOCKLOGIN

start

C:\PROGRAM FILES\DELL\DELLDOCK\DOCKLOGIN

start

C:\PROGRAM FILES\DELL\DELLDOCK\DOCKLOGIN

start

C:\PROGRAM FILES\DELL\DELLDOCK\DOCKLOGIN

start

C:\PROGRAM FILES\DELL\DELLDOCK\DOCKLOGIN

start

C:\PROGRAM FILES\DELL\DELLDOCK\DOCKLOGIN

start

C:\PROGRAM FILES\DELL\DELLDOCK\DOCKLOGIN

start

C:\PROGRAM FILES\DELL\DELLDOCK\DOCKLOGIN

start

C:\PROGRAM FILES\DELL\DELLDOCK\DOCKLOGIN

start

C:\PROGRAM FILES\DELL\DELLDOCK\DOCKLOGIN

start

C:\PROGRAM FILES\DELL\DELLDOCK\DOCKLOGIN

start

C:\PROGRAM FILES\DELL\DELLDOCK\DOCKLOGIN

start

C:\PROGRAM FILES\DELL\DELLDOCK\DOCKLOGIN

start

C:\PROGRAM FILES\DELL\DELLDOCK\DOCKLOGIN

start

C:\PROGRAM FILES\DELL\DELLDOCK\DOCKLOGIN

start

C:\PROGRAM FILES\DELL\DELLDOCK\DOCKLOGIN

start

C:\PROGRAM FILES\DELL\DELLDOCK\DOCKLOGIN

start

C:\PROGRAM FILES\DELL\DELLDOCK\DOCKLOGIN

12/16/2009 7:02:15 AM Process start


ENHANCEMENT PACK\SEAPORT\SEAPORT.EXE
12/14/2009 4:09:33 PM Process start
ENHANCEMENT PACK\SEAPORT\SEAPORT.EXE
12/10/2009 2:42:15 PM Process start
ENHANCEMENT PACK\SEAPORT\SEAPORT.EXE
12/10/2009 4:49:12 AM Process start
ENHANCEMENT PACK\SEAPORT\SEAPORT.EXE
12/10/2009 4:08:57 AM Process start
ENHANCEMENT PACK\SEAPORT\SEAPORT.EXE
12/9/2009 3:23:36 AM
Process start
ENHANCEMENT PACK\SEAPORT\SEAPORT.EXE
12/8/2009 1:20:42 PM
Process start
ENHANCEMENT PACK\SEAPORT\SEAPORT.EXE
12/6/2009 12:47:12 AM Process start
ENHANCEMENT PACK\SEAPORT\SEAPORT.EXE
12/5/2009 2:24:47 AM
Process start
ENHANCEMENT PACK\SEAPORT\SEAPORT.EXE
12/4/2009 6:51:08 PM
Process start
ENHANCEMENT PACK\SEAPORT\SEAPORT.EXE
12/3/2009 4:07:07 AM
Process start
ENHANCEMENT PACK\SEAPORT\SEAPORT.EXE
12/2/2009 7:36:39 PM
Process start
ENHANCEMENT PACK\SEAPORT\SEAPORT.EXE
12/1/2009 3:13:45 AM
Process start
ENHANCEMENT PACK\SEAPORT\SEAPORT.EXE
11/30/2009 7:34:03 PM Process start
ENHANCEMENT PACK\SEAPORT\SEAPORT.EXE
11/30/2009 5:55:17 PM Process start
ENHANCEMENT PACK\SEAPORT\SEAPORT.EXE
11/30/2009 3:32:36 PM Process start
ENHANCEMENT PACK\SEAPORT\SEAPORT.EXE
11/26/2009 3:19:48 AM Process start
ENHANCEMENT PACK\SEAPORT\SEAPORT.EXE
11/24/2009 2:45:18 PM Process start
ENHANCEMENT PACK\SEAPORT\SEAPORT.EXE
11/21/2009 7:25:24 PM Process start
ENHANCEMENT PACK\SEAPORT\SEAPORT.EXE
11/21/2009 12:32:51 PM Process start
ENHANCEMENT PACK\SEAPORT\SEAPORT.EXE
11/20/2009 11:59:18 AM Process start
ENHANCEMENT PACK\SEAPORT\SEAPORT.EXE
11/19/2009 4:27:58 AM Process start
ENHANCEMENT PACK\SEAPORT\SEAPORT.EXE
11/18/2009 7:16:14 PM Process start
ENHANCEMENT PACK\SEAPORT\SEAPORT.EXE
11/18/2009 12:50:54 PM Process start
ENHANCEMENT PACK\SEAPORT\SEAPORT.EXE
11/18/2009 11:18:18 AM Process start
ENHANCEMENT PACK\SEAPORT\SEAPORT.EXE
11/17/2009 10:33:09 PM Process start
ENHANCEMENT PACK\SEAPORT\SEAPORT.EXE
11/17/2009 2:48:52 PM Process start
ENHANCEMENT PACK\SEAPORT\SEAPORT.EXE
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM Process start
CT\DLG.EXE
12/16/2009 7:00:12 AM Process exit
CT\DLG.EXE
12/14/2009 4:09:33 PM Process start

C:\Program Files (x86)\MICROSOFT\SEARCH


C:\Program Files (x86)\MICROSOFT\SEARCH
C:\Program Files (x86)\MICROSOFT\SEARCH
C:\Program Files (x86)\MICROSOFT\SEARCH
C:\Program Files (x86)\MICROSOFT\SEARCH
C:\Program Files (x86)\MICROSOFT\SEARCH
C:\Program Files (x86)\MICROSOFT\SEARCH
C:\Program Files (x86)\MICROSOFT\SEARCH
C:\Program Files (x86)\MICROSOFT\SEARCH
C:\Program Files (x86)\MICROSOFT\SEARCH
C:\Program Files (x86)\MICROSOFT\SEARCH
C:\Program Files (x86)\MICROSOFT\SEARCH
C:\Program Files (x86)\MICROSOFT\SEARCH
C:\Program Files (x86)\MICROSOFT\SEARCH
C:\Program Files (x86)\MICROSOFT\SEARCH
C:\Program Files (x86)\MICROSOFT\SEARCH
C:\Program Files (x86)\MICROSOFT\SEARCH
C:\Program Files (x86)\MICROSOFT\SEARCH
C:\Program Files (x86)\MICROSOFT\SEARCH
C:\Program Files (x86)\MICROSOFT\SEARCH
C:\Program Files (x86)\MICROSOFT\SEARCH
C:\Program Files (x86)\MICROSOFT\SEARCH
C:\Program Files (x86)\MICROSOFT\SEARCH
C:\Program Files (x86)\MICROSOFT\SEARCH
C:\Program Files (x86)\MICROSOFT\SEARCH
C:\Program Files (x86)\MICROSOFT\SEARCH
C:\Program Files (x86)\MICROSOFT\SEARCH
C:\Program Files (x86)\DIGITAL LINE DETE
C:\Program Files (x86)\DIGITAL LINE DETE
C:\Program Files (x86)\DIGITAL LINE DETE

CT\DLG.EXE
12/14/2009 3:47:51 PM
CT\DLG.EXE
12/10/2009 2:42:15 PM
CT\DLG.EXE
12/10/2009 2:22:49 PM
CT\DLG.EXE
12/10/2009 4:49:32 AM
CT\DLG.EXE
12/10/2009 4:46:56 AM
CT\DLG.EXE
12/10/2009 4:08:57 AM
CT\DLG.EXE
12/9/2009 3:23:35 AM
CT\DLG.EXE
12/8/2009 9:15:51 PM
CT\DLG.EXE
12/8/2009 1:20:42 PM
CT\DLG.EXE
12/8/2009 11:34:16 AM
CT\DLG.EXE
12/6/2009 12:47:12 AM
CT\DLG.EXE
12/5/2009 7:28:55 PM
CT\DLG.EXE
12/5/2009 2:24:47 AM
CT\DLG.EXE
12/4/2009 10:43:14 PM
CT\DLG.EXE
12/4/2009 6:51:08 PM
CT\DLG.EXE
12/4/2009 4:27:46 PM
CT\DLG.EXE
12/3/2009 4:07:16 AM
CT\DLG.EXE
12/2/2009 8:42:06 PM
CT\DLG.EXE
12/2/2009 7:36:39 PM
CT\DLG.EXE
12/2/2009 3:43:08 PM
CT\DLG.EXE
12/1/2009 3:13:44 AM
CT\DLG.EXE
11/30/2009 8:00:27 PM
CT\DLG.EXE
11/30/2009 7:34:03 PM
CT\DLG.EXE
11/30/2009 6:55:13 PM
CT\DLG.EXE
11/30/2009 5:55:17 PM
CT\DLG.EXE
11/30/2009 5:53:07 PM
CT\DLG.EXE
11/30/2009 3:32:36 PM
CT\DLG.EXE
11/30/2009 10:18:14 AM
CT\DLG.EXE
11/26/2009 3:20:09 AM
CT\DLG.EXE
11/26/2009 3:17:54 AM

Process exit

C:\Program Files (x86)\DIGITAL LINE DETE

Process start

C:\Program Files (x86)\DIGITAL LINE DETE

Process exit

C:\Program Files (x86)\DIGITAL LINE DETE

Process start

C:\Program Files (x86)\DIGITAL LINE DETE

Process exit

C:\Program Files (x86)\DIGITAL LINE DETE

Process start

C:\Program Files (x86)\DIGITAL LINE DETE

Process start

C:\Program Files (x86)\DIGITAL LINE DETE

Process exit

C:\Program Files (x86)\DIGITAL LINE DETE

Process start

C:\Program Files (x86)\DIGITAL LINE DETE

Process exit

C:\Program Files (x86)\DIGITAL LINE DETE

Process start

C:\Program Files (x86)\DIGITAL LINE DETE

Process exit

C:\Program Files (x86)\DIGITAL LINE DETE

Process start

C:\Program Files (x86)\DIGITAL LINE DETE

Process exit

C:\Program Files (x86)\DIGITAL LINE DETE

Process start

C:\Program Files (x86)\DIGITAL LINE DETE

Process exit

C:\Program Files (x86)\DIGITAL LINE DETE

Process start

C:\Program Files (x86)\DIGITAL LINE DETE

Process exit

C:\Program Files (x86)\DIGITAL LINE DETE

Process start

C:\Program Files (x86)\DIGITAL LINE DETE

Process exit

C:\Program Files (x86)\DIGITAL LINE DETE

Process start

C:\Program Files (x86)\DIGITAL LINE DETE

Process exit

C:\Program Files (x86)\DIGITAL LINE DETE

Process start

C:\Program Files (x86)\DIGITAL LINE DETE

Process exit

C:\Program Files (x86)\DIGITAL LINE DETE

Process start

C:\Program Files (x86)\DIGITAL LINE DETE

Process exit

C:\Program Files (x86)\DIGITAL LINE DETE

Process start

C:\Program Files (x86)\DIGITAL LINE DETE

Process exit

C:\Program Files (x86)\DIGITAL LINE DETE

Process start

C:\Program Files (x86)\DIGITAL LINE DETE

Process exit

C:\Program Files (x86)\DIGITAL LINE DETE

CT\DLG.EXE
11/24/2009 2:45:18 PM Process start
CT\DLG.EXE
11/24/2009 2:41:31 PM Process exit
CT\DLG.EXE
11/21/2009 7:25:24 PM Process start
CT\DLG.EXE
11/21/2009 7:11:44 PM Process exit
CT\DLG.EXE
11/21/2009 12:32:51 PM Process start
CT\DLG.EXE
11/20/2009 6:58:59 PM Process exit
CT\DLG.EXE
11/20/2009 11:59:18 AM Process start
CT\DLG.EXE
11/20/2009 9:52:53 AM Process exit
CT\DLG.EXE
11/19/2009 4:27:58 AM Process start
CT\DLG.EXE
11/18/2009 7:43:43 PM Process exit
CT\DLG.EXE
11/18/2009 7:16:14 PM Process start
CT\DLG.EXE
11/18/2009 6:03:02 PM Process exit
CT\DLG.EXE
11/18/2009 12:50:54 PM Process start
CT\DLG.EXE
11/18/2009 12:25:18 PM Process exit
CT\DLG.EXE
11/18/2009 11:18:18 AM Process start
CT\DLG.EXE
11/18/2009 10:34:52 AM Process exit
CT\DLG.EXE
11/17/2009 10:33:09 PM Process start
CT\DLG.EXE
11/17/2009 6:17:47 PM Process exit
CT\DLG.EXE
11/17/2009 2:48:52 PM Process start
CT\DLG.EXE
dfsvc.exe (events: 7)
12/16/2009 7:04:17 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:04:17 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:04:17 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:04:17 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:04:17 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:04:17 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:04:16 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:04:16 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:04:15 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:04:15 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\DIGITAL LINE DETE


C:\Program Files (x86)\DIGITAL LINE DETE
C:\Program Files (x86)\DIGITAL LINE DETE
C:\Program Files (x86)\DIGITAL LINE DETE
C:\Program Files (x86)\DIGITAL LINE DETE
C:\Program Files (x86)\DIGITAL LINE DETE
C:\Program Files (x86)\DIGITAL LINE DETE
C:\Program Files (x86)\DIGITAL LINE DETE
C:\Program Files (x86)\DIGITAL LINE DETE
C:\Program Files (x86)\DIGITAL LINE DETE
C:\Program Files (x86)\DIGITAL LINE DETE
C:\Program Files (x86)\DIGITAL LINE DETE
C:\Program Files (x86)\DIGITAL LINE DETE
C:\Program Files (x86)\DIGITAL LINE DETE
C:\Program Files (x86)\DIGITAL LINE DETE
C:\Program Files (x86)\DIGITAL LINE DETE
C:\Program Files (x86)\DIGITAL LINE DETE
C:\Program Files (x86)\DIGITAL LINE DETE
C:\Program Files (x86)\DIGITAL LINE DETE
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/16/2009 7:04:14 AM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:04:14 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:04:13 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:04:13 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:04:12 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:04:12 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:04:10 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:04:10 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:04:09 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:04:09 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:04:08 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:04:07 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:04:06 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:04:05 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:04:04 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:04:04 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:04:03 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:04:03 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:04:02 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:04:02 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:04:01 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:04:01 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:04:00 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:04:00 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:59 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:59 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:58 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:58 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:57 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:57 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/16/2009 7:03:56 AM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:56 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:55 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:55 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:54 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:54 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:53 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:53 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:52 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:52 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:51 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:49 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:48 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:48 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:47 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:47 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:46 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:46 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:45 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:45 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:44 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:44 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:43 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:43 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:42 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:42 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:41 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:41 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:40 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:40 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/16/2009 7:03:39 AM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:39 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:38 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:38 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:37 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:37 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:36 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:34 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:33 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:33 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:32 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:32 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:30 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:30 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:29 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:29 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:28 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:28 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:27 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:27 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:26 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:26 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:25 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:25 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:24 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:24 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:23 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:23 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:22 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:22 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/16/2009 7:03:21 AM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:21 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:20 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:19 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:18 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:18 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:17 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:17 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:16 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:16 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:15 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:15 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:14 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:14 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:03:13 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:59 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:58 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:57 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:56 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:56 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:55 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:55 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:54 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:54 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:53 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:53 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:52 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:51 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:50 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:50 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/16/2009 7:02:49 AM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:48 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:48 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:45 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:45 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:44 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:44 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:43 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:43 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:42 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:42 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:41 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:41 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:40 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:40 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:39 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:39 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:38 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:38 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:37 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:37 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:36 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:36 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:35 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:34 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:33 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:33 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:32 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:32 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:31 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/16/2009 7:02:31 AM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:30 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:29 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:28 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:28 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:27 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:27 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:26 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:26 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:25 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:25 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:24 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:24 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:23 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:23 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:22 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:22 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:21 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:21 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:20 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:20 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:19 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:19 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:18 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:16 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/16/2009 7:02:15 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:58 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:58 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:58 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:58 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/14/2009 4:11:57 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:57 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:56 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:56 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:55 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:55 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:54 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:54 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:53 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:53 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:52 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:52 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:51 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:51 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:50 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:50 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:49 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:49 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:48 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:48 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:47 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:47 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:46 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:46 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:45 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:44 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:43 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:43 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:42 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:42 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/14/2009 4:11:41 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:41 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:40 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:40 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:39 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:39 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:38 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:37 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:36 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:36 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:35 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:35 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:34 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:34 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:33 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:33 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:32 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:31 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:30 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:30 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:29 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:29 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:28 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:28 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:27 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:27 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:26 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:25 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:24 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:24 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/14/2009 4:11:23 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:22 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:21 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:20 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:19 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:19 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:17 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:17 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:16 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:16 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:15 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:15 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:14 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:14 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:13 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:12 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:11 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:11 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:10 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:10 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:09 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:09 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:08 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:08 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:07 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:06 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:04 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:02 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:01 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:01 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/14/2009 4:11:00 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:11:00 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:59 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:59 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:58 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:57 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:56 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:56 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:55 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:54 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:53 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:53 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:52 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:51 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:50 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:50 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:49 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:49 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:48 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:48 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:47 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:46 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:45 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:45 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:44 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:44 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:43 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:43 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:42 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:41 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/14/2009 4:10:40 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:40 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:39 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:39 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:38 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:38 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:37 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:37 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:36 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:36 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:36 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:14 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:13 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:12 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:11 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:11 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:10 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:10 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:09 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:09 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:08 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:08 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:07 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:07 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:04 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:04 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:03 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:03 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:02 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:02 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/14/2009 4:10:01 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:01 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:10:00 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:09:59 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:09:58 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:09:56 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:09:55 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:09:55 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:09:54 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:09:54 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:09:53 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:09:53 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:09:52 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:09:52 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:09:51 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:09:50 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:09:49 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:09:48 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:09:47 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:09:46 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:09:45 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:09:44 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:09:43 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:09:42 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:09:41 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:09:40 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:09:39 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:09:39 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:09:38 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:09:38 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/14/2009 4:09:35 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:09:33 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:09:32 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:09:32 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/14/2009 4:09:32 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:03:05 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:03:05 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:03:05 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:45:26 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:45:26 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:45:26 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:45:26 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:45:26 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:45:26 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:45:26 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:45:26 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:45:26 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:45:26 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:45:26 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:45:26 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:44:18 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:44:18 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:44:18 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:44:18 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:44:18 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:44:18 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:44:17 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:44:17 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:44:16 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:44:16 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/10/2009 2:44:15 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:44:15 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:44:14 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:44:14 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:44:13 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:44:13 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:44:12 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:44:12 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:44:11 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:44:08 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:44:07 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:44:07 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:44:06 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:44:06 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:44:04 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:44:04 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:44:03 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:44:03 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:44:02 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:44:02 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:44:01 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:44:00 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:59 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:59 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:58 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:58 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:57 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:57 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:56 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:56 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/10/2009 2:43:55 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:55 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:54 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:54 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:53 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:53 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:52 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:52 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:51 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:51 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:50 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:50 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:49 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:49 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:48 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:48 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:47 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:47 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:46 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:46 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:45 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:45 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:44 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:44 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:43 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:43 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:42 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:42 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:41 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:41 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/10/2009 2:43:40 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:40 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:39 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:39 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:38 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:38 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:37 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:36 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:35 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:35 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:34 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:34 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:33 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:33 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:32 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:32 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:31 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:31 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:30 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:30 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:29 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:29 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:28 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:28 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:27 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:27 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:26 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:26 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:25 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:25 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/10/2009 2:43:24 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:24 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:22 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:22 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:21 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:21 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:20 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:20 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:19 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:19 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:18 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:18 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:17 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:17 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:16 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:16 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:15 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:15 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:14 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:14 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:13 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:12 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:12 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:11 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:11 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:10 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:08 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:08 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:07 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:07 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/10/2009 2:43:06 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:06 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:05 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:05 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:04 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:04 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:03 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:03 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:02 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:02 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:01 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:01 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:43:00 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:59 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:59 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:58 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:58 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:57 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:57 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:56 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:56 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:55 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:55 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:54 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:54 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:53 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:53 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:52 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:51 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:51 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/10/2009 2:42:50 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:50 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:49 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:48 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:47 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:47 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:46 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:46 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:45 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:45 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:44 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:44 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:43 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:43 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:42 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:41 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:41 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:40 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:39 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:39 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:38 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:37 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:37 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:36 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:35 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:34 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:34 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:33 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:32 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:32 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/10/2009 2:42:31 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:31 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:30 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:29 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:28 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:28 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:27 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:27 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:26 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:26 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:25 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:25 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:24 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:24 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:23 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:23 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:22 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:21 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:20 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:20 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:19 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:18 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:18 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:17 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:17 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 2:42:16 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:51:14 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:51:14 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:51:14 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:51:14 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/10/2009 4:51:14 AM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:51:14 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:51:13 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:51:13 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:51:12 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:51:12 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:51:11 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:51:11 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:51:10 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:51:10 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:51:09 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:51:09 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:51:08 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:51:08 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:51:07 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:51:07 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:51:06 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:51:06 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:51:05 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:51:05 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:51:04 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:51:04 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:51:03 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:51:03 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:51:02 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:51:02 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:51:01 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:51:01 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:51:00 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:51:00 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/10/2009 4:50:59 AM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:59 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:58 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:58 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:57 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:56 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:55 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:55 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:54 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:54 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:53 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:52 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:51 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:51 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:50 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:50 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:49 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:49 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:48 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:48 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:47 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:47 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:46 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:46 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:45 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:45 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:44 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:43 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:42 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:42 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/10/2009 4:50:41 AM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:41 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:40 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:40 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:39 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:38 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:37 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:37 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:36 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:36 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:35 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:35 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:34 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:34 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:33 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:32 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:31 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:31 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:30 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:30 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:29 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:29 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:28 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:27 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:27 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:26 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:26 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:25 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:25 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:24 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/10/2009 4:50:24 AM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:23 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:22 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:21 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:21 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:20 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:19 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:19 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:18 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:17 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:17 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:16 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:16 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:15 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:15 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:14 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:14 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:13 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:12 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:11 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:11 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:10 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:09 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:09 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:08 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:08 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:07 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:06 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:06 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:05 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/10/2009 4:50:05 AM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:04 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:04 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:03 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:03 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:02 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:02 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:01 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:01 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:00 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:50:00 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:59 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:59 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:58 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:55 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:54 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:53 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:53 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:52 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:52 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:51 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:46 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:45 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:31 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:30 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:29 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:28 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:28 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:26 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:26 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/10/2009 4:49:25 AM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:24 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:24 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:23 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:23 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:22 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:22 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:21 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:21 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:20 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:20 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:19 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:19 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:18 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:18 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:17 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:17 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:16 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:16 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:15 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:15 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:14 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:14 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:13 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:49:13 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:11:20 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:11:20 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:11:20 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:11:20 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:11:20 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/10/2009 4:11:20 AM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:11:19 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:11:19 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:11:18 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:11:18 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:11:17 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:11:17 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:11:16 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:11:15 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:11:14 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:11:14 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:11:13 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:11:13 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:11:12 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:11:12 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:11:11 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:11:11 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:11:10 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:11:10 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:11:09 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:11:09 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:11:08 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:11:07 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:11:06 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:11:06 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:11:05 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:11:05 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:11:04 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:11:04 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:11:03 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/10/2009 4:11:03 AM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:11:01 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:11:01 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:11:00 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:11:00 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:59 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:59 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:58 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:58 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:57 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:57 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:56 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:56 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:55 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:54 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:53 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:52 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:51 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:51 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:50 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:50 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:49 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:49 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:48 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:48 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:47 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:47 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:46 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:46 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:45 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/10/2009 4:10:45 AM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:44 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:44 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:43 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:43 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:42 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:42 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:41 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:40 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:39 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:39 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:38 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:38 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:37 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:37 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:36 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:36 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:35 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:35 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:34 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:34 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:33 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:33 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:31 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:31 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:30 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:30 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:29 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:29 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:28 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/10/2009 4:10:28 AM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:27 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:27 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:26 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:26 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:25 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:25 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:24 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:24 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:23 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:23 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:22 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:22 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:21 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:21 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:20 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:20 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:19 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:19 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:18 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:17 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:17 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:16 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:16 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:15 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:15 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:14 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:14 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:13 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:13 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/10/2009 4:10:12 AM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:12 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:11 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:11 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:10 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:10 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:09 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:08 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:07 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:07 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:06 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:06 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:05 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:05 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:04 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:04 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:03 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:03 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:02 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:02 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:01 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:01 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:00 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:10:00 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:59 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:58 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:57 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:57 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:56 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:56 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/10/2009 4:09:55 AM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:55 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:54 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:54 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:53 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:53 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:52 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:52 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:51 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:51 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:50 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:50 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:49 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:49 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:48 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:48 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:47 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:47 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:46 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:46 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:45 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:45 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:44 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:44 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:43 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:42 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:41 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:41 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:40 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:40 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/10/2009 4:09:39 AM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:39 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:38 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:37 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:37 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:36 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:36 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:35 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:35 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:34 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:34 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:33 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:33 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:32 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:32 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:31 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:31 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:30 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:30 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:29 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:28 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:27 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:26 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:26 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:25 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:25 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:24 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:24 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:23 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:23 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/10/2009 4:09:22 AM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:22 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:21 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:21 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:20 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:20 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:19 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:19 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:18 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:18 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:17 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:17 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:16 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:15 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:14 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:14 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:13 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:13 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:12 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:12 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:11 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:11 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:10 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:10 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:09 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:09 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:08 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/10/2009 4:09:08 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/9/2009 3:25:55 AM
Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/9/2009 3:25:55 AM
Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/9/2009 3:25:55
persky Anti-Virus
12/9/2009 3:25:55
persky Anti-Virus
12/9/2009 3:25:55
persky Anti-Virus
12/9/2009 3:25:55
persky Anti-Virus
12/9/2009 3:25:54
persky Anti-Virus
12/9/2009 3:25:54
persky Anti-Virus
12/9/2009 3:25:53
persky Anti-Virus
12/9/2009 3:25:53
persky Anti-Virus
12/9/2009 3:25:52
persky Anti-Virus
12/9/2009 3:25:52
persky Anti-Virus
12/9/2009 3:25:51
persky Anti-Virus
12/9/2009 3:25:51
persky Anti-Virus
12/9/2009 3:25:50
persky Anti-Virus
12/9/2009 3:25:49
persky Anti-Virus
12/9/2009 3:25:48
persky Anti-Virus
12/9/2009 3:25:48
persky Anti-Virus
12/9/2009 3:25:47
persky Anti-Virus
12/9/2009 3:25:47
persky Anti-Virus
12/9/2009 3:25:46
persky Anti-Virus
12/9/2009 3:25:46
persky Anti-Virus
12/9/2009 3:25:45
persky Anti-Virus
12/9/2009 3:25:45
persky Anti-Virus
12/9/2009 3:25:44
persky Anti-Virus
12/9/2009 3:25:44
persky Anti-Virus
12/9/2009 3:25:43
persky Anti-Virus
12/9/2009 3:25:43
persky Anti-Virus
12/9/2009 3:25:42
persky Anti-Virus
12/9/2009 3:25:42
persky Anti-Virus
12/9/2009 3:25:41
persky Anti-Virus
12/9/2009 3:25:41
persky Anti-Virus

AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/9/2009 3:25:40
persky Anti-Virus
12/9/2009 3:25:40
persky Anti-Virus
12/9/2009 3:25:39
persky Anti-Virus
12/9/2009 3:25:39
persky Anti-Virus
12/9/2009 3:25:38
persky Anti-Virus
12/9/2009 3:25:38
persky Anti-Virus
12/9/2009 3:25:37
persky Anti-Virus
12/9/2009 3:25:37
persky Anti-Virus
12/9/2009 3:25:36
persky Anti-Virus
12/9/2009 3:25:36
persky Anti-Virus
12/9/2009 3:25:35
persky Anti-Virus
12/9/2009 3:25:35
persky Anti-Virus
12/9/2009 3:25:34
persky Anti-Virus
12/9/2009 3:25:34
persky Anti-Virus
12/9/2009 3:25:33
persky Anti-Virus
12/9/2009 3:25:33
persky Anti-Virus
12/9/2009 3:25:32
persky Anti-Virus
12/9/2009 3:25:32
persky Anti-Virus
12/9/2009 3:25:31
persky Anti-Virus
12/9/2009 3:25:31
persky Anti-Virus
12/9/2009 3:25:30
persky Anti-Virus
12/9/2009 3:25:30
persky Anti-Virus
12/9/2009 3:25:29
persky Anti-Virus
12/9/2009 3:25:29
persky Anti-Virus
12/9/2009 3:25:28
persky Anti-Virus
12/9/2009 3:25:28
persky Anti-Virus
12/9/2009 3:25:26
persky Anti-Virus
12/9/2009 3:25:26
persky Anti-Virus
12/9/2009 3:25:25
persky Anti-Virus
12/9/2009 3:25:25
persky Anti-Virus

AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/9/2009 3:25:24
persky Anti-Virus
12/9/2009 3:25:24
persky Anti-Virus
12/9/2009 3:25:23
persky Anti-Virus
12/9/2009 3:25:23
persky Anti-Virus
12/9/2009 3:25:22
persky Anti-Virus
12/9/2009 3:25:22
persky Anti-Virus
12/9/2009 3:25:21
persky Anti-Virus
12/9/2009 3:25:21
persky Anti-Virus
12/9/2009 3:25:20
persky Anti-Virus
12/9/2009 3:25:20
persky Anti-Virus
12/9/2009 3:25:19
persky Anti-Virus
12/9/2009 3:25:19
persky Anti-Virus
12/9/2009 3:25:18
persky Anti-Virus
12/9/2009 3:25:18
persky Anti-Virus
12/9/2009 3:25:17
persky Anti-Virus
12/9/2009 3:25:17
persky Anti-Virus
12/9/2009 3:25:16
persky Anti-Virus
12/9/2009 3:25:16
persky Anti-Virus
12/9/2009 3:25:15
persky Anti-Virus
12/9/2009 3:25:15
persky Anti-Virus
12/9/2009 3:25:14
persky Anti-Virus
12/9/2009 3:25:14
persky Anti-Virus
12/9/2009 3:25:13
persky Anti-Virus
12/9/2009 3:25:13
persky Anti-Virus
12/9/2009 3:25:12
persky Anti-Virus
12/9/2009 3:25:12
persky Anti-Virus
12/9/2009 3:25:11
persky Anti-Virus
12/9/2009 3:25:11
persky Anti-Virus
12/9/2009 3:25:10
persky Anti-Virus
12/9/2009 3:25:10
persky Anti-Virus

AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/9/2009 3:25:09
persky Anti-Virus
12/9/2009 3:25:09
persky Anti-Virus
12/9/2009 3:25:08
persky Anti-Virus
12/9/2009 3:25:08
persky Anti-Virus
12/9/2009 3:25:07
persky Anti-Virus
12/9/2009 3:25:07
persky Anti-Virus
12/9/2009 3:25:06
persky Anti-Virus
12/9/2009 3:25:06
persky Anti-Virus
12/9/2009 3:25:05
persky Anti-Virus
12/9/2009 3:25:05
persky Anti-Virus
12/9/2009 3:25:04
persky Anti-Virus
12/9/2009 3:25:04
persky Anti-Virus
12/9/2009 3:25:03
persky Anti-Virus
12/9/2009 3:25:03
persky Anti-Virus
12/9/2009 3:25:02
persky Anti-Virus
12/9/2009 3:25:02
persky Anti-Virus
12/9/2009 3:25:01
persky Anti-Virus
12/9/2009 3:25:01
persky Anti-Virus
12/9/2009 3:25:00
persky Anti-Virus
12/9/2009 3:25:00
persky Anti-Virus
12/9/2009 3:24:59
persky Anti-Virus
12/9/2009 3:24:59
persky Anti-Virus
12/9/2009 3:24:58
persky Anti-Virus
12/9/2009 3:24:57
persky Anti-Virus
12/9/2009 3:24:56
persky Anti-Virus
12/9/2009 3:24:56
persky Anti-Virus
12/9/2009 3:24:55
persky Anti-Virus
12/9/2009 3:24:55
persky Anti-Virus
12/9/2009 3:24:54
persky Anti-Virus
12/9/2009 3:24:54
persky Anti-Virus

AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/9/2009 3:24:53
persky Anti-Virus
12/9/2009 3:24:52
persky Anti-Virus
12/9/2009 3:24:51
persky Anti-Virus
12/9/2009 3:24:51
persky Anti-Virus
12/9/2009 3:24:50
persky Anti-Virus
12/9/2009 3:24:50
persky Anti-Virus
12/9/2009 3:24:49
persky Anti-Virus
12/9/2009 3:24:49
persky Anti-Virus
12/9/2009 3:24:48
persky Anti-Virus
12/9/2009 3:24:48
persky Anti-Virus
12/9/2009 3:24:46
persky Anti-Virus
12/9/2009 3:24:46
persky Anti-Virus
12/9/2009 3:24:45
persky Anti-Virus
12/9/2009 3:24:44
persky Anti-Virus
12/9/2009 3:24:43
persky Anti-Virus
12/9/2009 3:24:43
persky Anti-Virus
12/9/2009 3:24:42
persky Anti-Virus
12/9/2009 3:24:41
persky Anti-Virus
12/9/2009 3:24:40
persky Anti-Virus
12/9/2009 3:24:39
persky Anti-Virus
12/9/2009 3:24:39
persky Anti-Virus
12/9/2009 3:24:38
persky Anti-Virus
12/9/2009 3:24:38
persky Anti-Virus
12/9/2009 3:24:37
persky Anti-Virus
12/9/2009 3:24:37
persky Anti-Virus
12/9/2009 3:24:36
persky Anti-Virus
12/9/2009 3:24:35
persky Anti-Virus
12/9/2009 3:24:34
persky Anti-Virus
12/9/2009 3:24:33
persky Anti-Virus
12/9/2009 3:24:32
persky Anti-Virus

AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/9/2009 3:24:31
persky Anti-Virus
12/9/2009 3:24:30
persky Anti-Virus
12/9/2009 3:24:30
persky Anti-Virus
12/9/2009 3:24:28
persky Anti-Virus
12/9/2009 3:24:17
persky Anti-Virus
12/9/2009 3:24:15
persky Anti-Virus
12/9/2009 3:24:15
persky Anti-Virus
12/9/2009 3:24:14
persky Anti-Virus
12/9/2009 3:24:14
persky Anti-Virus
12/9/2009 3:24:13
persky Anti-Virus
12/9/2009 3:24:12
persky Anti-Virus
12/9/2009 3:24:11
persky Anti-Virus
12/9/2009 3:24:11
persky Anti-Virus
12/9/2009 3:24:10
persky Anti-Virus
12/9/2009 3:24:10
persky Anti-Virus
12/9/2009 3:24:09
persky Anti-Virus
12/9/2009 3:24:09
persky Anti-Virus
12/9/2009 3:24:07
persky Anti-Virus
12/9/2009 3:24:07
persky Anti-Virus
12/9/2009 3:24:07
persky Anti-Virus
12/9/2009 3:23:55
persky Anti-Virus
12/9/2009 3:23:54
persky Anti-Virus
12/9/2009 3:23:53
persky Anti-Virus
12/9/2009 3:23:52
persky Anti-Virus
12/9/2009 3:23:46
persky Anti-Virus
12/9/2009 3:23:45
persky Anti-Virus
12/9/2009 3:23:44
persky Anti-Virus
12/9/2009 3:23:43
persky Anti-Virus
12/9/2009 3:23:41
persky Anti-Virus
12/9/2009 3:23:37
persky Anti-Virus

AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/9/2009 3:23:36
persky Anti-Virus
12/8/2009 1:23:06
persky Anti-Virus
12/8/2009 1:23:06
persky Anti-Virus
12/8/2009 1:23:06
persky Anti-Virus
12/8/2009 1:23:06
persky Anti-Virus
12/8/2009 1:23:06
persky Anti-Virus
12/8/2009 1:23:06
persky Anti-Virus
12/8/2009 1:23:05
persky Anti-Virus
12/8/2009 1:23:05
persky Anti-Virus
12/8/2009 1:23:04
persky Anti-Virus
12/8/2009 1:23:04
persky Anti-Virus
12/8/2009 1:23:03
persky Anti-Virus
12/8/2009 1:23:03
persky Anti-Virus
12/8/2009 1:23:02
persky Anti-Virus
12/8/2009 1:23:02
persky Anti-Virus
12/8/2009 1:23:01
persky Anti-Virus
12/8/2009 1:23:00
persky Anti-Virus
12/8/2009 1:22:59
persky Anti-Virus
12/8/2009 1:22:59
persky Anti-Virus
12/8/2009 1:22:58
persky Anti-Virus
12/8/2009 1:22:57
persky Anti-Virus
12/8/2009 1:22:56
persky Anti-Virus
12/8/2009 1:22:56
persky Anti-Virus
12/8/2009 1:22:55
persky Anti-Virus
12/8/2009 1:22:55
persky Anti-Virus
12/8/2009 1:22:54
persky Anti-Virus
12/8/2009 1:22:54
persky Anti-Virus
12/8/2009 1:22:53
persky Anti-Virus
12/8/2009 1:22:53
persky Anti-Virus
12/8/2009 1:22:52
persky Anti-Virus

AM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/8/2009 1:22:52
persky Anti-Virus
12/8/2009 1:22:51
persky Anti-Virus
12/8/2009 1:22:50
persky Anti-Virus
12/8/2009 1:22:49
persky Anti-Virus
12/8/2009 1:22:49
persky Anti-Virus
12/8/2009 1:22:48
persky Anti-Virus
12/8/2009 1:22:48
persky Anti-Virus
12/8/2009 1:22:47
persky Anti-Virus
12/8/2009 1:22:45
persky Anti-Virus
12/8/2009 1:22:45
persky Anti-Virus
12/8/2009 1:22:44
persky Anti-Virus
12/8/2009 1:22:44
persky Anti-Virus
12/8/2009 1:22:43
persky Anti-Virus
12/8/2009 1:22:43
persky Anti-Virus
12/8/2009 1:22:42
persky Anti-Virus
12/8/2009 1:22:42
persky Anti-Virus
12/8/2009 1:22:41
persky Anti-Virus
12/8/2009 1:22:41
persky Anti-Virus
12/8/2009 1:22:40
persky Anti-Virus
12/8/2009 1:22:40
persky Anti-Virus
12/8/2009 1:22:39
persky Anti-Virus
12/8/2009 1:22:38
persky Anti-Virus
12/8/2009 1:22:37
persky Anti-Virus
12/8/2009 1:22:37
persky Anti-Virus
12/8/2009 1:22:36
persky Anti-Virus
12/8/2009 1:22:36
persky Anti-Virus
12/8/2009 1:22:35
persky Anti-Virus
12/8/2009 1:22:35
persky Anti-Virus
12/8/2009 1:22:34
persky Anti-Virus
12/8/2009 1:22:34
persky Anti-Virus

PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/8/2009 1:22:33
persky Anti-Virus
12/8/2009 1:22:33
persky Anti-Virus
12/8/2009 1:22:32
persky Anti-Virus
12/8/2009 1:22:32
persky Anti-Virus
12/8/2009 1:22:31
persky Anti-Virus
12/8/2009 1:22:31
persky Anti-Virus
12/8/2009 1:22:30
persky Anti-Virus
12/8/2009 1:22:30
persky Anti-Virus
12/8/2009 1:22:29
persky Anti-Virus
12/8/2009 1:22:29
persky Anti-Virus
12/8/2009 1:22:28
persky Anti-Virus
12/8/2009 1:22:28
persky Anti-Virus
12/8/2009 1:22:27
persky Anti-Virus
12/8/2009 1:22:27
persky Anti-Virus
12/8/2009 1:22:26
persky Anti-Virus
12/8/2009 1:22:26
persky Anti-Virus
12/8/2009 1:22:24
persky Anti-Virus
12/8/2009 1:22:24
persky Anti-Virus
12/8/2009 1:22:23
persky Anti-Virus
12/8/2009 1:22:23
persky Anti-Virus
12/8/2009 1:22:22
persky Anti-Virus
12/8/2009 1:22:22
persky Anti-Virus
12/8/2009 1:22:21
persky Anti-Virus
12/8/2009 1:22:21
persky Anti-Virus
12/8/2009 1:22:20
persky Anti-Virus
12/8/2009 1:22:20
persky Anti-Virus
12/8/2009 1:22:19
persky Anti-Virus
12/8/2009 1:22:19
persky Anti-Virus
12/8/2009 1:22:18
persky Anti-Virus
12/8/2009 1:22:18
persky Anti-Virus

PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/8/2009 1:22:17
persky Anti-Virus
12/8/2009 1:22:17
persky Anti-Virus
12/8/2009 1:22:16
persky Anti-Virus
12/8/2009 1:22:16
persky Anti-Virus
12/8/2009 1:22:15
persky Anti-Virus
12/8/2009 1:22:15
persky Anti-Virus
12/8/2009 1:22:14
persky Anti-Virus
12/8/2009 1:22:12
persky Anti-Virus
12/8/2009 1:22:11
persky Anti-Virus
12/8/2009 1:22:11
persky Anti-Virus
12/8/2009 1:22:10
persky Anti-Virus
12/8/2009 1:22:10
persky Anti-Virus
12/8/2009 1:22:09
persky Anti-Virus
12/8/2009 1:22:09
persky Anti-Virus
12/8/2009 1:22:08
persky Anti-Virus
12/8/2009 1:22:08
persky Anti-Virus
12/8/2009 1:22:07
persky Anti-Virus
12/8/2009 1:22:07
persky Anti-Virus
12/8/2009 1:22:06
persky Anti-Virus
12/8/2009 1:22:06
persky Anti-Virus
12/8/2009 1:22:05
persky Anti-Virus
12/8/2009 1:22:04
persky Anti-Virus
12/8/2009 1:22:03
persky Anti-Virus
12/8/2009 1:22:03
persky Anti-Virus
12/8/2009 1:22:02
persky Anti-Virus
12/8/2009 1:22:02
persky Anti-Virus
12/8/2009 1:22:01
persky Anti-Virus
12/8/2009 1:21:57
persky Anti-Virus
12/8/2009 1:21:56
persky Anti-Virus
12/8/2009 1:21:56
persky Anti-Virus

PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/8/2009 1:21:55
persky Anti-Virus
12/8/2009 1:21:55
persky Anti-Virus
12/8/2009 1:21:54
persky Anti-Virus
12/8/2009 1:21:54
persky Anti-Virus
12/8/2009 1:21:53
persky Anti-Virus
12/8/2009 1:21:53
persky Anti-Virus
12/8/2009 1:21:52
persky Anti-Virus
12/8/2009 1:21:52
persky Anti-Virus
12/8/2009 1:21:46
persky Anti-Virus
12/8/2009 1:21:46
persky Anti-Virus
12/8/2009 1:21:45
persky Anti-Virus
12/8/2009 1:21:22
persky Anti-Virus
12/8/2009 1:21:21
persky Anti-Virus
12/8/2009 1:21:21
persky Anti-Virus
12/8/2009 1:21:20
persky Anti-Virus
12/8/2009 1:21:20
persky Anti-Virus
12/8/2009 1:21:19
persky Anti-Virus
12/8/2009 1:21:18
persky Anti-Virus
12/8/2009 1:21:17
persky Anti-Virus
12/8/2009 1:21:16
persky Anti-Virus
12/8/2009 1:21:15
persky Anti-Virus
12/8/2009 1:21:15
persky Anti-Virus
12/8/2009 1:21:14
persky Anti-Virus
12/8/2009 1:21:14
persky Anti-Virus
12/8/2009 1:21:11
persky Anti-Virus
12/8/2009 1:21:11
persky Anti-Virus
12/8/2009 1:21:10
persky Anti-Virus
12/8/2009 1:21:10
persky Anti-Virus
12/8/2009 1:21:09
persky Anti-Virus
12/8/2009 1:21:09
persky Anti-Virus

PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/8/2009 1:21:08 PM
Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/8/2009 1:21:08 PM
Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/8/2009 1:21:07 PM
Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/8/2009 1:21:07 PM
Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/8/2009 1:21:06 PM
Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/8/2009 1:21:06 PM
Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/8/2009 1:21:05 PM
Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/8/2009 1:21:05 PM
Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/8/2009 1:21:04 PM
Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/8/2009 1:21:04 PM
Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/8/2009 1:21:03 PM
Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/8/2009 1:21:03 PM
Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/8/2009 1:21:02 PM
Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/8/2009 1:21:02 PM
Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/8/2009 1:21:01 PM
Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/8/2009 1:21:01 PM
Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/8/2009 1:21:00 PM
Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/8/2009 1:21:00 PM
Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/8/2009 1:20:59 PM
Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/8/2009 1:20:59 PM
Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/8/2009 1:20:58 PM
Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/8/2009 1:20:57 PM
Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/8/2009 1:20:56 PM
Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/8/2009 1:20:56 PM
Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/8/2009 1:20:55 PM
Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/8/2009 1:20:55 PM
Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/8/2009 1:20:43 PM
Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/8/2009 1:20:43 PM
Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/8/2009 1:20:42 PM
Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:46 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/6/2009 12:49:46 AM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:46 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:46 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:46 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:46 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:45 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:45 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:44 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:44 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:43 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:43 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:42 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:42 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:41 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:41 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:40 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:39 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:38 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:38 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:37 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:37 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:36 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:36 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:35 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:35 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:34 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:34 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:33 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:33 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:32 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/6/2009 12:49:32 AM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:31 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:31 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:30 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:30 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:29 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:28 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:27 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:27 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:26 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:26 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:25 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:25 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:24 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:24 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:23 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:23 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:22 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:22 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:21 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:21 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:20 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:20 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:19 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:19 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:18 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:17 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:16 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:16 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:15 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/6/2009 12:49:15 AM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:14 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:14 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:13 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:13 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:12 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:12 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:11 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:10 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:10 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:09 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:09 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:08 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:08 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:07 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:07 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:06 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:06 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:05 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:05 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:04 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:04 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:03 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:03 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:02 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:02 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:01 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:01 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:00 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:49:00 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/6/2009 12:48:59 AM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:59 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:58 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:58 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:57 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:57 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:56 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:56 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:55 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:53 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:52 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:52 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:51 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:51 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:50 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:50 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:49 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:49 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:48 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:48 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:47 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:47 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:46 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:46 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:45 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:45 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:44 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:43 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:42 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:42 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/6/2009 12:48:41 AM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:41 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:40 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:40 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:39 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:38 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:37 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:37 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:36 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:36 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:35 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:35 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:34 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:34 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:33 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:33 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:32 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:32 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:31 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:31 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:30 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:30 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:29 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:29 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:28 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:28 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:27 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:27 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:26 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:26 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/6/2009 12:48:25 AM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:25 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:24 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:24 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:23 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:22 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:21 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:21 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:20 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:20 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:19 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:19 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:17 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:16 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:15 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:14 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:14 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:12 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:12 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:48:11 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:47:59 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:47:58 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:47:58 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:47:57 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:47:56 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:47:56 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:47:55 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:47:49 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:47:12 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/6/2009 12:47:12 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/5/2009 2:26:49
persky Anti-Virus
12/5/2009 2:26:49
persky Anti-Virus
12/5/2009 2:26:49
persky Anti-Virus
12/5/2009 2:26:49
persky Anti-Virus
12/5/2009 2:26:49
persky Anti-Virus
12/5/2009 2:26:49
persky Anti-Virus
12/5/2009 2:26:48
persky Anti-Virus
12/5/2009 2:26:48
persky Anti-Virus
12/5/2009 2:26:47
persky Anti-Virus
12/5/2009 2:26:47
persky Anti-Virus
12/5/2009 2:26:46
persky Anti-Virus
12/5/2009 2:26:46
persky Anti-Virus
12/5/2009 2:26:45
persky Anti-Virus
12/5/2009 2:26:45
persky Anti-Virus
12/5/2009 2:26:44
persky Anti-Virus
12/5/2009 2:26:44
persky Anti-Virus
12/5/2009 2:26:43
persky Anti-Virus
12/5/2009 2:26:43
persky Anti-Virus
12/5/2009 2:26:42
persky Anti-Virus
12/5/2009 2:26:41
persky Anti-Virus
12/5/2009 2:26:40
persky Anti-Virus
12/5/2009 2:26:40
persky Anti-Virus
12/5/2009 2:26:39
persky Anti-Virus
12/5/2009 2:26:39
persky Anti-Virus
12/5/2009 2:26:38
persky Anti-Virus
12/5/2009 2:26:38
persky Anti-Virus
12/5/2009 2:26:37
persky Anti-Virus
12/5/2009 2:26:37
persky Anti-Virus
12/5/2009 2:26:36
persky Anti-Virus
12/5/2009 2:26:36
persky Anti-Virus

AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/5/2009 2:26:35
persky Anti-Virus
12/5/2009 2:26:35
persky Anti-Virus
12/5/2009 2:26:34
persky Anti-Virus
12/5/2009 2:26:34
persky Anti-Virus
12/5/2009 2:26:33
persky Anti-Virus
12/5/2009 2:26:33
persky Anti-Virus
12/5/2009 2:26:32
persky Anti-Virus
12/5/2009 2:26:32
persky Anti-Virus
12/5/2009 2:26:31
persky Anti-Virus
12/5/2009 2:26:31
persky Anti-Virus
12/5/2009 2:26:30
persky Anti-Virus
12/5/2009 2:26:30
persky Anti-Virus
12/5/2009 2:26:29
persky Anti-Virus
12/5/2009 2:26:29
persky Anti-Virus
12/5/2009 2:26:28
persky Anti-Virus
12/5/2009 2:26:28
persky Anti-Virus
12/5/2009 2:26:27
persky Anti-Virus
12/5/2009 2:26:27
persky Anti-Virus
12/5/2009 2:26:26
persky Anti-Virus
12/5/2009 2:26:26
persky Anti-Virus
12/5/2009 2:26:25
persky Anti-Virus
12/5/2009 2:26:25
persky Anti-Virus
12/5/2009 2:26:24
persky Anti-Virus
12/5/2009 2:26:24
persky Anti-Virus
12/5/2009 2:26:23
persky Anti-Virus
12/5/2009 2:26:23
persky Anti-Virus
12/5/2009 2:26:22
persky Anti-Virus
12/5/2009 2:26:22
persky Anti-Virus
12/5/2009 2:26:21
persky Anti-Virus
12/5/2009 2:26:21
persky Anti-Virus

AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/5/2009 2:26:20
persky Anti-Virus
12/5/2009 2:26:20
persky Anti-Virus
12/5/2009 2:26:19
persky Anti-Virus
12/5/2009 2:26:18
persky Anti-Virus
12/5/2009 2:26:17
persky Anti-Virus
12/5/2009 2:26:17
persky Anti-Virus
12/5/2009 2:26:16
persky Anti-Virus
12/5/2009 2:26:16
persky Anti-Virus
12/5/2009 2:26:15
persky Anti-Virus
12/5/2009 2:26:15
persky Anti-Virus
12/5/2009 2:26:14
persky Anti-Virus
12/5/2009 2:26:14
persky Anti-Virus
12/5/2009 2:26:13
persky Anti-Virus
12/5/2009 2:26:13
persky Anti-Virus
12/5/2009 2:26:12
persky Anti-Virus
12/5/2009 2:26:12
persky Anti-Virus
12/5/2009 2:26:11
persky Anti-Virus
12/5/2009 2:26:11
persky Anti-Virus
12/5/2009 2:26:10
persky Anti-Virus
12/5/2009 2:26:10
persky Anti-Virus
12/5/2009 2:26:09
persky Anti-Virus
12/5/2009 2:26:09
persky Anti-Virus
12/5/2009 2:26:08
persky Anti-Virus
12/5/2009 2:26:08
persky Anti-Virus
12/5/2009 2:26:07
persky Anti-Virus
12/5/2009 2:26:07
persky Anti-Virus
12/5/2009 2:26:06
persky Anti-Virus
12/5/2009 2:26:06
persky Anti-Virus
12/5/2009 2:26:05
persky Anti-Virus
12/5/2009 2:26:05
persky Anti-Virus

AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/5/2009 2:26:04
persky Anti-Virus
12/5/2009 2:26:04
persky Anti-Virus
12/5/2009 2:26:03
persky Anti-Virus
12/5/2009 2:26:03
persky Anti-Virus
12/5/2009 2:26:02
persky Anti-Virus
12/5/2009 2:26:02
persky Anti-Virus
12/5/2009 2:26:01
persky Anti-Virus
12/5/2009 2:26:01
persky Anti-Virus
12/5/2009 2:26:00
persky Anti-Virus
12/5/2009 2:26:00
persky Anti-Virus
12/5/2009 2:25:59
persky Anti-Virus
12/5/2009 2:25:59
persky Anti-Virus
12/5/2009 2:25:58
persky Anti-Virus
12/5/2009 2:25:58
persky Anti-Virus
12/5/2009 2:25:57
persky Anti-Virus
12/5/2009 2:25:56
persky Anti-Virus
12/5/2009 2:25:55
persky Anti-Virus
12/5/2009 2:25:55
persky Anti-Virus
12/5/2009 2:25:54
persky Anti-Virus
12/5/2009 2:25:54
persky Anti-Virus
12/5/2009 2:25:53
persky Anti-Virus
12/5/2009 2:25:53
persky Anti-Virus
12/5/2009 2:25:52
persky Anti-Virus
12/5/2009 2:25:52
persky Anti-Virus
12/5/2009 2:25:51
persky Anti-Virus
12/5/2009 2:25:51
persky Anti-Virus
12/5/2009 2:25:50
persky Anti-Virus
12/5/2009 2:25:50
persky Anti-Virus
12/5/2009 2:25:49
persky Anti-Virus
12/5/2009 2:25:49
persky Anti-Virus

AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/5/2009 2:25:48
persky Anti-Virus
12/5/2009 2:25:48
persky Anti-Virus
12/5/2009 2:25:47
persky Anti-Virus
12/5/2009 2:25:47
persky Anti-Virus
12/5/2009 2:25:46
persky Anti-Virus
12/5/2009 2:25:46
persky Anti-Virus
12/5/2009 2:25:45
persky Anti-Virus
12/5/2009 2:25:45
persky Anti-Virus
12/5/2009 2:25:44
persky Anti-Virus
12/5/2009 2:25:43
persky Anti-Virus
12/5/2009 2:25:42
persky Anti-Virus
12/5/2009 2:25:42
persky Anti-Virus
12/5/2009 2:25:41
persky Anti-Virus
12/5/2009 2:25:36
persky Anti-Virus
12/5/2009 2:25:35
persky Anti-Virus
12/5/2009 2:25:35
persky Anti-Virus
12/5/2009 2:25:34
persky Anti-Virus
12/5/2009 2:25:34
persky Anti-Virus
12/5/2009 2:25:33
persky Anti-Virus
12/5/2009 2:25:33
persky Anti-Virus
12/5/2009 2:25:32
persky Anti-Virus
12/5/2009 2:25:32
persky Anti-Virus
12/5/2009 2:25:31
persky Anti-Virus
12/5/2009 2:25:31
persky Anti-Virus
12/5/2009 2:25:30
persky Anti-Virus
12/5/2009 2:25:30
persky Anti-Virus
12/5/2009 2:25:29
persky Anti-Virus
12/5/2009 2:25:29
persky Anti-Virus
12/5/2009 2:25:28
persky Anti-Virus
12/5/2009 2:25:28
persky Anti-Virus

AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/5/2009 2:25:27
persky Anti-Virus
12/5/2009 2:25:27
persky Anti-Virus
12/5/2009 2:25:26
persky Anti-Virus
12/5/2009 2:25:26
persky Anti-Virus
12/5/2009 2:25:25
persky Anti-Virus
12/5/2009 2:25:25
persky Anti-Virus
12/5/2009 2:25:24
persky Anti-Virus
12/5/2009 2:25:24
persky Anti-Virus
12/5/2009 2:25:23
persky Anti-Virus
12/5/2009 2:25:23
persky Anti-Virus
12/5/2009 2:25:22
persky Anti-Virus
12/5/2009 2:25:22
persky Anti-Virus
12/5/2009 2:25:21
persky Anti-Virus
12/5/2009 2:25:20
persky Anti-Virus
12/5/2009 2:25:19
persky Anti-Virus
12/5/2009 2:25:19
persky Anti-Virus
12/5/2009 2:25:17
persky Anti-Virus
12/5/2009 2:25:17
persky Anti-Virus
12/5/2009 2:25:16
persky Anti-Virus
12/5/2009 2:25:16
persky Anti-Virus
12/5/2009 2:25:15
persky Anti-Virus
12/5/2009 2:25:15
persky Anti-Virus
12/5/2009 2:25:14
persky Anti-Virus
12/5/2009 2:25:14
persky Anti-Virus
12/5/2009 2:25:13
persky Anti-Virus
12/5/2009 2:25:12
persky Anti-Virus
12/5/2009 2:25:11
persky Anti-Virus
12/5/2009 2:25:11
persky Anti-Virus
12/5/2009 2:25:10
persky Anti-Virus
12/5/2009 2:25:10
persky Anti-Virus

AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/5/2009 2:25:09
persky Anti-Virus
12/5/2009 2:25:09
persky Anti-Virus
12/5/2009 2:25:08
persky Anti-Virus
12/5/2009 2:25:08
persky Anti-Virus
12/5/2009 2:25:07
persky Anti-Virus
12/5/2009 2:25:07
persky Anti-Virus
12/5/2009 2:25:06
persky Anti-Virus
12/5/2009 2:25:05
persky Anti-Virus
12/5/2009 2:25:05
persky Anti-Virus
12/5/2009 2:25:04
persky Anti-Virus
12/5/2009 2:25:04
persky Anti-Virus
12/5/2009 2:25:03
persky Anti-Virus
12/5/2009 2:25:02
persky Anti-Virus
12/5/2009 2:25:01
persky Anti-Virus
12/5/2009 2:25:01
persky Anti-Virus
12/5/2009 2:25:00
persky Anti-Virus
12/5/2009 2:25:00
persky Anti-Virus
12/5/2009 2:24:59
persky Anti-Virus
12/5/2009 2:24:59
persky Anti-Virus
12/5/2009 2:24:58
persky Anti-Virus
12/5/2009 2:24:58
persky Anti-Virus
12/5/2009 2:24:57
persky Anti-Virus
12/5/2009 2:24:56
persky Anti-Virus
12/5/2009 2:24:56
persky Anti-Virus
12/5/2009 2:24:54
persky Anti-Virus
12/5/2009 2:24:54
persky Anti-Virus
12/5/2009 2:24:53
persky Anti-Virus
12/5/2009 2:24:53
persky Anti-Virus
12/5/2009 2:24:52
persky Anti-Virus
12/5/2009 2:24:52
persky Anti-Virus

AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/5/2009 2:24:51
persky Anti-Virus
12/5/2009 2:24:51
persky Anti-Virus
12/5/2009 2:24:50
persky Anti-Virus
12/5/2009 2:24:50
persky Anti-Virus
12/5/2009 2:24:48
persky Anti-Virus
12/5/2009 2:24:47
persky Anti-Virus
12/4/2009 6:53:37
persky Anti-Virus
12/4/2009 6:53:37
persky Anti-Virus
12/4/2009 6:53:37
persky Anti-Virus
12/4/2009 6:53:37
persky Anti-Virus
12/4/2009 6:53:37
persky Anti-Virus
12/4/2009 6:53:37
persky Anti-Virus
12/4/2009 6:53:36
persky Anti-Virus
12/4/2009 6:53:36
persky Anti-Virus
12/4/2009 6:53:35
persky Anti-Virus
12/4/2009 6:53:35
persky Anti-Virus
12/4/2009 6:53:34
persky Anti-Virus
12/4/2009 6:53:34
persky Anti-Virus
12/4/2009 6:53:33
persky Anti-Virus
12/4/2009 6:53:33
persky Anti-Virus
12/4/2009 6:53:32
persky Anti-Virus
12/4/2009 6:53:32
persky Anti-Virus
12/4/2009 6:53:31
persky Anti-Virus
12/4/2009 6:53:31
persky Anti-Virus
12/4/2009 6:53:30
persky Anti-Virus
12/4/2009 6:53:30
persky Anti-Virus
12/4/2009 6:53:29
persky Anti-Virus
12/4/2009 6:53:29
persky Anti-Virus
12/4/2009 6:53:28
persky Anti-Virus
12/4/2009 6:53:28
persky Anti-Virus

AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/4/2009 6:53:27
persky Anti-Virus
12/4/2009 6:53:27
persky Anti-Virus
12/4/2009 6:53:26
persky Anti-Virus
12/4/2009 6:53:26
persky Anti-Virus
12/4/2009 6:53:25
persky Anti-Virus
12/4/2009 6:53:25
persky Anti-Virus
12/4/2009 6:53:24
persky Anti-Virus
12/4/2009 6:53:24
persky Anti-Virus
12/4/2009 6:53:23
persky Anti-Virus
12/4/2009 6:53:23
persky Anti-Virus
12/4/2009 6:53:22
persky Anti-Virus
12/4/2009 6:53:22
persky Anti-Virus
12/4/2009 6:53:21
persky Anti-Virus
12/4/2009 6:53:20
persky Anti-Virus
12/4/2009 6:53:19
persky Anti-Virus
12/4/2009 6:53:19
persky Anti-Virus
12/4/2009 6:53:18
persky Anti-Virus
12/4/2009 6:53:18
persky Anti-Virus
12/4/2009 6:53:17
persky Anti-Virus
12/4/2009 6:53:17
persky Anti-Virus
12/4/2009 6:53:16
persky Anti-Virus
12/4/2009 6:53:16
persky Anti-Virus
12/4/2009 6:53:14
persky Anti-Virus
12/4/2009 6:53:13
persky Anti-Virus
12/4/2009 6:53:12
persky Anti-Virus
12/4/2009 6:53:11
persky Anti-Virus
12/4/2009 6:53:10
persky Anti-Virus
12/4/2009 6:53:09
persky Anti-Virus
12/4/2009 6:53:07
persky Anti-Virus
12/4/2009 6:53:06
persky Anti-Virus

PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/4/2009 6:53:05
persky Anti-Virus
12/4/2009 6:53:05
persky Anti-Virus
12/4/2009 6:53:04
persky Anti-Virus
12/4/2009 6:53:04
persky Anti-Virus
12/4/2009 6:53:03
persky Anti-Virus
12/4/2009 6:53:03
persky Anti-Virus
12/4/2009 6:53:02
persky Anti-Virus
12/4/2009 6:53:01
persky Anti-Virus
12/4/2009 6:53:00
persky Anti-Virus
12/4/2009 6:53:00
persky Anti-Virus
12/4/2009 6:52:59
persky Anti-Virus
12/4/2009 6:52:59
persky Anti-Virus
12/4/2009 6:52:58
persky Anti-Virus
12/4/2009 6:52:58
persky Anti-Virus
12/4/2009 6:52:57
persky Anti-Virus
12/4/2009 6:52:57
persky Anti-Virus
12/4/2009 6:52:56
persky Anti-Virus
12/4/2009 6:52:56
persky Anti-Virus
12/4/2009 6:52:55
persky Anti-Virus
12/4/2009 6:52:55
persky Anti-Virus
12/4/2009 6:52:54
persky Anti-Virus
12/4/2009 6:52:54
persky Anti-Virus
12/4/2009 6:52:53
persky Anti-Virus
12/4/2009 6:52:53
persky Anti-Virus
12/4/2009 6:52:52
persky Anti-Virus
12/4/2009 6:52:52
persky Anti-Virus
12/4/2009 6:52:51
persky Anti-Virus
12/4/2009 6:52:51
persky Anti-Virus
12/4/2009 6:52:50
persky Anti-Virus
12/4/2009 6:52:50
persky Anti-Virus

PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/4/2009 6:52:49
persky Anti-Virus
12/4/2009 6:52:49
persky Anti-Virus
12/4/2009 6:52:48
persky Anti-Virus
12/4/2009 6:52:48
persky Anti-Virus
12/4/2009 6:52:47
persky Anti-Virus
12/4/2009 6:52:47
persky Anti-Virus
12/4/2009 6:52:46
persky Anti-Virus
12/4/2009 6:52:46
persky Anti-Virus
12/4/2009 6:52:45
persky Anti-Virus
12/4/2009 6:52:44
persky Anti-Virus
12/4/2009 6:52:43
persky Anti-Virus
12/4/2009 6:52:43
persky Anti-Virus
12/4/2009 6:52:42
persky Anti-Virus
12/4/2009 6:52:42
persky Anti-Virus
12/4/2009 6:52:41
persky Anti-Virus
12/4/2009 6:52:41
persky Anti-Virus
12/4/2009 6:52:40
persky Anti-Virus
12/4/2009 6:52:40
persky Anti-Virus
12/4/2009 6:52:39
persky Anti-Virus
12/4/2009 6:52:39
persky Anti-Virus
12/4/2009 6:52:38
persky Anti-Virus
12/4/2009 6:52:38
persky Anti-Virus
12/4/2009 6:52:37
persky Anti-Virus
12/4/2009 6:52:37
persky Anti-Virus
12/4/2009 6:52:36
persky Anti-Virus
12/4/2009 6:52:36
persky Anti-Virus
12/4/2009 6:52:35
persky Anti-Virus
12/4/2009 6:52:35
persky Anti-Virus
12/4/2009 6:52:34
persky Anti-Virus
12/4/2009 6:52:34
persky Anti-Virus

PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/4/2009 6:52:33
persky Anti-Virus
12/4/2009 6:52:33
persky Anti-Virus
12/4/2009 6:52:32
persky Anti-Virus
12/4/2009 6:52:30
persky Anti-Virus
12/4/2009 6:52:29
persky Anti-Virus
12/4/2009 6:52:29
persky Anti-Virus
12/4/2009 6:52:28
persky Anti-Virus
12/4/2009 6:52:28
persky Anti-Virus
12/4/2009 6:52:27
persky Anti-Virus
12/4/2009 6:52:25
persky Anti-Virus
12/4/2009 6:52:24
persky Anti-Virus
12/4/2009 6:52:24
persky Anti-Virus
12/4/2009 6:52:23
persky Anti-Virus
12/4/2009 6:52:23
persky Anti-Virus
12/4/2009 6:52:22
persky Anti-Virus
12/4/2009 6:52:22
persky Anti-Virus
12/4/2009 6:52:21
persky Anti-Virus
12/4/2009 6:52:21
persky Anti-Virus
12/4/2009 6:52:20
persky Anti-Virus
12/4/2009 6:52:20
persky Anti-Virus
12/4/2009 6:52:19
persky Anti-Virus
12/4/2009 6:52:19
persky Anti-Virus
12/4/2009 6:52:18
persky Anti-Virus
12/4/2009 6:52:18
persky Anti-Virus
12/4/2009 6:52:17
persky Anti-Virus
12/4/2009 6:52:17
persky Anti-Virus
12/4/2009 6:52:16
persky Anti-Virus
12/4/2009 6:52:16
persky Anti-Virus
12/4/2009 6:52:15
persky Anti-Virus
12/4/2009 6:52:15
persky Anti-Virus

PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/4/2009 6:52:14
persky Anti-Virus
12/4/2009 6:52:14
persky Anti-Virus
12/4/2009 6:52:13
persky Anti-Virus
12/4/2009 6:52:13
persky Anti-Virus
12/4/2009 6:52:12
persky Anti-Virus
12/4/2009 6:52:12
persky Anti-Virus
12/4/2009 6:52:11
persky Anti-Virus
12/4/2009 6:52:11
persky Anti-Virus
12/4/2009 6:52:10
persky Anti-Virus
12/4/2009 6:52:10
persky Anti-Virus
12/4/2009 6:52:09
persky Anti-Virus
12/4/2009 6:52:09
persky Anti-Virus
12/4/2009 6:52:08
persky Anti-Virus
12/4/2009 6:52:06
persky Anti-Virus
12/4/2009 6:52:06
persky Anti-Virus
12/4/2009 6:52:05
persky Anti-Virus
12/4/2009 6:52:05
persky Anti-Virus
12/4/2009 6:52:04
persky Anti-Virus
12/4/2009 6:52:04
persky Anti-Virus
12/4/2009 6:52:03
persky Anti-Virus
12/4/2009 6:52:03
persky Anti-Virus
12/4/2009 6:52:02
persky Anti-Virus
12/4/2009 6:52:01
persky Anti-Virus
12/4/2009 6:52:00
persky Anti-Virus
12/4/2009 6:51:59
persky Anti-Virus
12/4/2009 6:51:58
persky Anti-Virus
12/4/2009 6:51:58
persky Anti-Virus
12/4/2009 6:51:57
persky Anti-Virus
12/4/2009 6:51:57
persky Anti-Virus
12/4/2009 6:51:56
persky Anti-Virus

PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/4/2009 6:51:56
persky Anti-Virus
12/4/2009 6:51:55
persky Anti-Virus
12/4/2009 6:51:55
persky Anti-Virus
12/4/2009 6:51:54
persky Anti-Virus
12/4/2009 6:51:53
persky Anti-Virus
12/4/2009 6:51:52
persky Anti-Virus
12/4/2009 6:51:52
persky Anti-Virus
12/4/2009 6:51:51
persky Anti-Virus
12/4/2009 6:51:51
persky Anti-Virus
12/4/2009 6:51:50
persky Anti-Virus
12/4/2009 6:51:49
persky Anti-Virus
12/4/2009 6:51:49
persky Anti-Virus
12/4/2009 6:51:48
persky Anti-Virus
12/4/2009 6:51:48
persky Anti-Virus
12/4/2009 6:51:47
persky Anti-Virus
12/4/2009 6:51:46
persky Anti-Virus
12/4/2009 6:51:45
persky Anti-Virus
12/4/2009 6:51:44
persky Anti-Virus
12/4/2009 6:51:43
persky Anti-Virus
12/4/2009 6:51:42
persky Anti-Virus
12/4/2009 6:51:41
persky Anti-Virus
12/4/2009 6:51:41
persky Anti-Virus
12/4/2009 6:51:40
persky Anti-Virus
12/4/2009 6:51:40
persky Anti-Virus
12/4/2009 6:51:39
persky Anti-Virus
12/4/2009 6:51:38
persky Anti-Virus
12/4/2009 6:51:37
persky Anti-Virus
12/4/2009 6:51:37
persky Anti-Virus
12/4/2009 6:51:36
persky Anti-Virus
12/4/2009 6:51:36
persky Anti-Virus

PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/4/2009 6:51:35
persky Anti-Virus
12/4/2009 6:51:34
persky Anti-Virus
12/4/2009 6:51:34
persky Anti-Virus
12/4/2009 6:51:33
persky Anti-Virus
12/4/2009 6:51:33
persky Anti-Virus
12/4/2009 6:51:32
persky Anti-Virus
12/4/2009 6:51:32
persky Anti-Virus
12/4/2009 6:51:31
persky Anti-Virus
12/4/2009 6:51:31
persky Anti-Virus
12/4/2009 6:51:30
persky Anti-Virus
12/4/2009 6:51:30
persky Anti-Virus
12/4/2009 6:51:29
persky Anti-Virus
12/4/2009 6:51:29
persky Anti-Virus
12/4/2009 6:51:27
persky Anti-Virus
12/4/2009 6:51:27
persky Anti-Virus
12/4/2009 6:51:26
persky Anti-Virus
12/4/2009 6:51:25
persky Anti-Virus
12/4/2009 6:51:24
persky Anti-Virus
12/4/2009 6:51:24
persky Anti-Virus
12/4/2009 6:51:23
persky Anti-Virus
12/4/2009 6:51:23
persky Anti-Virus
12/4/2009 6:51:22
persky Anti-Virus
12/4/2009 6:51:22
persky Anti-Virus
12/4/2009 6:51:21
persky Anti-Virus
12/4/2009 6:51:21
persky Anti-Virus
12/4/2009 6:51:20
persky Anti-Virus
12/4/2009 6:51:20
persky Anti-Virus
12/4/2009 6:51:19
persky Anti-Virus
12/4/2009 6:51:19
persky Anti-Virus
12/4/2009 6:51:18
persky Anti-Virus

PM
Process exit
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/4/2009 6:51:18
persky Anti-Virus
12/4/2009 6:51:17
persky Anti-Virus
12/4/2009 6:51:17
persky Anti-Virus
12/4/2009 6:51:16
persky Anti-Virus
12/4/2009 6:51:16
persky Anti-Virus
12/4/2009 6:51:15
persky Anti-Virus
12/4/2009 6:51:15
persky Anti-Virus
12/4/2009 6:51:14
persky Anti-Virus
12/4/2009 6:51:14
persky Anti-Virus
12/4/2009 6:51:13
persky Anti-Virus
12/4/2009 6:51:13
persky Anti-Virus
12/4/2009 6:51:12
persky Anti-Virus
12/4/2009 6:51:12
persky Anti-Virus
12/4/2009 6:51:11
persky Anti-Virus
12/4/2009 6:51:10
persky Anti-Virus
12/4/2009 6:51:09
persky Anti-Virus
12/4/2009 6:51:08
persky Anti-Virus
12/3/2009 4:09:42
persky Anti-Virus
12/3/2009 4:09:42
persky Anti-Virus
12/3/2009 4:09:42
persky Anti-Virus
12/3/2009 4:09:42
persky Anti-Virus
12/3/2009 4:09:42
persky Anti-Virus
12/3/2009 4:09:41
persky Anti-Virus
12/3/2009 4:09:40
persky Anti-Virus
12/3/2009 4:09:40
persky Anti-Virus
12/3/2009 4:09:39
persky Anti-Virus
12/3/2009 4:09:39
persky Anti-Virus
12/3/2009 4:09:38
persky Anti-Virus
12/3/2009 4:09:38
persky Anti-Virus
12/3/2009 4:09:37
persky Anti-Virus

PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/3/2009 4:09:37
persky Anti-Virus
12/3/2009 4:09:36
persky Anti-Virus
12/3/2009 4:09:36
persky Anti-Virus
12/3/2009 4:09:35
persky Anti-Virus
12/3/2009 4:09:35
persky Anti-Virus
12/3/2009 4:09:34
persky Anti-Virus
12/3/2009 4:09:34
persky Anti-Virus
12/3/2009 4:09:33
persky Anti-Virus
12/3/2009 4:09:33
persky Anti-Virus
12/3/2009 4:09:32
persky Anti-Virus
12/3/2009 4:09:32
persky Anti-Virus
12/3/2009 4:09:31
persky Anti-Virus
12/3/2009 4:09:31
persky Anti-Virus
12/3/2009 4:09:30
persky Anti-Virus
12/3/2009 4:09:30
persky Anti-Virus
12/3/2009 4:09:29
persky Anti-Virus
12/3/2009 4:09:29
persky Anti-Virus
12/3/2009 4:09:28
persky Anti-Virus
12/3/2009 4:09:28
persky Anti-Virus
12/3/2009 4:09:27
persky Anti-Virus
12/3/2009 4:09:27
persky Anti-Virus
12/3/2009 4:09:26
persky Anti-Virus
12/3/2009 4:09:26
persky Anti-Virus
12/3/2009 4:09:25
persky Anti-Virus
12/3/2009 4:09:25
persky Anti-Virus
12/3/2009 4:09:24
persky Anti-Virus
12/3/2009 4:09:24
persky Anti-Virus
12/3/2009 4:09:23
persky Anti-Virus
12/3/2009 4:09:23
persky Anti-Virus
12/3/2009 4:09:22
persky Anti-Virus

AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/3/2009 4:09:22
persky Anti-Virus
12/3/2009 4:09:21
persky Anti-Virus
12/3/2009 4:09:20
persky Anti-Virus
12/3/2009 4:09:15
persky Anti-Virus
12/3/2009 4:09:12
persky Anti-Virus
12/3/2009 4:09:11
persky Anti-Virus
12/3/2009 4:09:10
persky Anti-Virus
12/3/2009 4:09:09
persky Anti-Virus
12/3/2009 4:09:09
persky Anti-Virus
12/3/2009 4:09:08
persky Anti-Virus
12/3/2009 4:09:08
persky Anti-Virus
12/3/2009 4:09:07
persky Anti-Virus
12/3/2009 4:09:07
persky Anti-Virus
12/3/2009 4:09:06
persky Anti-Virus
12/3/2009 4:09:06
persky Anti-Virus
12/3/2009 4:09:05
persky Anti-Virus
12/3/2009 4:09:04
persky Anti-Virus
12/3/2009 4:09:03
persky Anti-Virus
12/3/2009 4:09:02
persky Anti-Virus
12/3/2009 4:09:02
persky Anti-Virus
12/3/2009 4:09:01
persky Anti-Virus
12/3/2009 4:09:01
persky Anti-Virus
12/3/2009 4:09:00
persky Anti-Virus
12/3/2009 4:09:00
persky Anti-Virus
12/3/2009 4:08:59
persky Anti-Virus
12/3/2009 4:08:59
persky Anti-Virus
12/3/2009 4:08:58
persky Anti-Virus
12/3/2009 4:08:58
persky Anti-Virus
12/3/2009 4:08:56
persky Anti-Virus
12/3/2009 4:08:56
persky Anti-Virus

AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/3/2009 4:08:55
persky Anti-Virus
12/3/2009 4:08:55
persky Anti-Virus
12/3/2009 4:08:54
persky Anti-Virus
12/3/2009 4:08:54
persky Anti-Virus
12/3/2009 4:08:53
persky Anti-Virus
12/3/2009 4:08:52
persky Anti-Virus
12/3/2009 4:08:50
persky Anti-Virus
12/3/2009 4:08:49
persky Anti-Virus
12/3/2009 4:08:48
persky Anti-Virus
12/3/2009 4:08:48
persky Anti-Virus
12/3/2009 4:08:47
persky Anti-Virus
12/3/2009 4:08:47
persky Anti-Virus
12/3/2009 4:08:46
persky Anti-Virus
12/3/2009 4:08:43
persky Anti-Virus
12/3/2009 4:08:42
persky Anti-Virus
12/3/2009 4:08:42
persky Anti-Virus
12/3/2009 4:08:41
persky Anti-Virus
12/3/2009 4:08:40
persky Anti-Virus
12/3/2009 4:08:39
persky Anti-Virus
12/3/2009 4:08:38
persky Anti-Virus
12/3/2009 4:08:37
persky Anti-Virus
12/3/2009 4:08:35
persky Anti-Virus
12/3/2009 4:08:34
persky Anti-Virus
12/3/2009 4:08:34
persky Anti-Virus
12/3/2009 4:08:33
persky Anti-Virus
12/3/2009 4:08:31
persky Anti-Virus
12/3/2009 4:08:30
persky Anti-Virus
12/3/2009 4:08:30
persky Anti-Virus
12/3/2009 4:08:29
persky Anti-Virus
12/3/2009 4:08:29
persky Anti-Virus

AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/3/2009 4:08:28
persky Anti-Virus
12/3/2009 4:08:28
persky Anti-Virus
12/3/2009 4:08:27
persky Anti-Virus
12/3/2009 4:08:25
persky Anti-Virus
12/3/2009 4:08:24
persky Anti-Virus
12/3/2009 4:08:23
persky Anti-Virus
12/3/2009 4:08:22
persky Anti-Virus
12/3/2009 4:08:22
persky Anti-Virus
12/3/2009 4:08:21
persky Anti-Virus
12/3/2009 4:08:19
persky Anti-Virus
12/3/2009 4:08:18
persky Anti-Virus
12/3/2009 4:08:17
persky Anti-Virus
12/3/2009 4:08:15
persky Anti-Virus
12/3/2009 4:08:14
persky Anti-Virus
12/3/2009 4:08:14
persky Anti-Virus
12/3/2009 4:08:13
persky Anti-Virus
12/3/2009 4:08:09
persky Anti-Virus
12/3/2009 4:08:08
persky Anti-Virus
12/3/2009 4:08:05
persky Anti-Virus
12/3/2009 4:08:04
persky Anti-Virus
12/3/2009 4:08:02
persky Anti-Virus
12/3/2009 4:08:00
persky Anti-Virus
12/3/2009 4:07:56
persky Anti-Virus
12/3/2009 4:07:55
persky Anti-Virus
12/3/2009 4:07:54
persky Anti-Virus
12/3/2009 4:07:54
persky Anti-Virus
12/3/2009 4:07:53
persky Anti-Virus
12/3/2009 4:07:53
persky Anti-Virus
12/3/2009 4:07:52
persky Anti-Virus
12/3/2009 4:07:52
persky Anti-Virus

AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/3/2009 4:07:51
persky Anti-Virus
12/3/2009 4:07:51
persky Anti-Virus
12/3/2009 4:07:50
persky Anti-Virus
12/3/2009 4:07:50
persky Anti-Virus
12/3/2009 4:07:49
persky Anti-Virus
12/3/2009 4:07:49
persky Anti-Virus
12/3/2009 4:07:48
persky Anti-Virus
12/3/2009 4:07:48
persky Anti-Virus
12/3/2009 4:07:47
persky Anti-Virus
12/3/2009 4:07:47
persky Anti-Virus
12/3/2009 4:07:46
persky Anti-Virus
12/3/2009 4:07:46
persky Anti-Virus
12/3/2009 4:07:45
persky Anti-Virus
12/3/2009 4:07:45
persky Anti-Virus
12/3/2009 4:07:44
persky Anti-Virus
12/3/2009 4:07:44
persky Anti-Virus
12/3/2009 4:07:43
persky Anti-Virus
12/3/2009 4:07:43
persky Anti-Virus
12/3/2009 4:07:42
persky Anti-Virus
12/3/2009 4:07:42
persky Anti-Virus
12/3/2009 4:07:37
persky Anti-Virus
12/3/2009 4:07:37
persky Anti-Virus
12/3/2009 4:07:36
persky Anti-Virus
12/3/2009 4:07:36
persky Anti-Virus
12/3/2009 4:07:35
persky Anti-Virus
12/3/2009 4:07:33
persky Anti-Virus
12/3/2009 4:07:32
persky Anti-Virus
12/3/2009 4:07:32
persky Anti-Virus
12/3/2009 4:07:31
persky Anti-Virus
12/3/2009 4:07:31
persky Anti-Virus

AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/3/2009 4:07:30
persky Anti-Virus
12/3/2009 4:07:30
persky Anti-Virus
12/3/2009 4:07:29
persky Anti-Virus
12/3/2009 4:07:29
persky Anti-Virus
12/3/2009 4:07:28
persky Anti-Virus
12/3/2009 4:07:28
persky Anti-Virus
12/3/2009 4:07:27
persky Anti-Virus
12/3/2009 4:07:27
persky Anti-Virus
12/3/2009 4:07:26
persky Anti-Virus
12/3/2009 4:07:26
persky Anti-Virus
12/3/2009 4:07:25
persky Anti-Virus
12/3/2009 4:07:25
persky Anti-Virus
12/3/2009 4:07:24
persky Anti-Virus
12/3/2009 4:07:24
persky Anti-Virus
12/3/2009 4:07:23
persky Anti-Virus
12/3/2009 4:07:23
persky Anti-Virus
12/3/2009 4:07:22
persky Anti-Virus
12/3/2009 4:07:22
persky Anti-Virus
12/3/2009 4:07:21
persky Anti-Virus
12/3/2009 4:07:19
persky Anti-Virus
12/3/2009 4:07:18
persky Anti-Virus
12/3/2009 4:07:18
persky Anti-Virus
12/3/2009 4:07:17
persky Anti-Virus
12/3/2009 4:07:16
persky Anti-Virus
12/3/2009 4:07:14
persky Anti-Virus
12/3/2009 4:07:14
persky Anti-Virus
12/3/2009 4:07:13
persky Anti-Virus
12/3/2009 4:07:13
persky Anti-Virus
12/3/2009 4:07:12
persky Anti-Virus
12/3/2009 4:07:11
persky Anti-Virus

AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/3/2009 4:07:11
persky Anti-Virus
12/3/2009 4:07:10
persky Anti-Virus
12/3/2009 4:07:10
persky Anti-Virus
12/3/2009 4:07:08
persky Anti-Virus
12/2/2009 7:39:04
persky Anti-Virus
12/2/2009 7:39:04
persky Anti-Virus
12/2/2009 7:39:04
persky Anti-Virus
12/2/2009 7:39:04
persky Anti-Virus
12/2/2009 7:39:04
persky Anti-Virus
12/2/2009 7:39:04
persky Anti-Virus
12/2/2009 7:39:03
persky Anti-Virus
12/2/2009 7:39:02
persky Anti-Virus
12/2/2009 7:39:01
persky Anti-Virus
12/2/2009 7:39:01
persky Anti-Virus
12/2/2009 7:39:00
persky Anti-Virus
12/2/2009 7:38:59
persky Anti-Virus
12/2/2009 7:38:58
persky Anti-Virus
12/2/2009 7:38:58
persky Anti-Virus
12/2/2009 7:38:57
persky Anti-Virus
12/2/2009 7:38:57
persky Anti-Virus
12/2/2009 7:38:56
persky Anti-Virus
12/2/2009 7:38:56
persky Anti-Virus
12/2/2009 7:38:55
persky Anti-Virus
12/2/2009 7:38:55
persky Anti-Virus
12/2/2009 7:38:54
persky Anti-Virus
12/2/2009 7:38:54
persky Anti-Virus
12/2/2009 7:38:53
persky Anti-Virus
12/2/2009 7:38:52
persky Anti-Virus
12/2/2009 7:38:51
persky Anti-Virus
12/2/2009 7:38:51
persky Anti-Virus

AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/2/2009 7:38:50
persky Anti-Virus
12/2/2009 7:38:50
persky Anti-Virus
12/2/2009 7:38:49
persky Anti-Virus
12/2/2009 7:38:48
persky Anti-Virus
12/2/2009 7:38:47
persky Anti-Virus
12/2/2009 7:38:47
persky Anti-Virus
12/2/2009 7:38:46
persky Anti-Virus
12/2/2009 7:38:44
persky Anti-Virus
12/2/2009 7:38:43
persky Anti-Virus
12/2/2009 7:38:43
persky Anti-Virus
12/2/2009 7:38:41
persky Anti-Virus
12/2/2009 7:38:41
persky Anti-Virus
12/2/2009 7:38:40
persky Anti-Virus
12/2/2009 7:38:40
persky Anti-Virus
12/2/2009 7:38:39
persky Anti-Virus
12/2/2009 7:38:39
persky Anti-Virus
12/2/2009 7:38:38
persky Anti-Virus
12/2/2009 7:38:38
persky Anti-Virus
12/2/2009 7:38:37
persky Anti-Virus
12/2/2009 7:38:37
persky Anti-Virus
12/2/2009 7:38:36
persky Anti-Virus
12/2/2009 7:38:36
persky Anti-Virus
12/2/2009 7:38:35
persky Anti-Virus
12/2/2009 7:38:35
persky Anti-Virus
12/2/2009 7:38:34
persky Anti-Virus
12/2/2009 7:38:34
persky Anti-Virus
12/2/2009 7:38:33
persky Anti-Virus
12/2/2009 7:38:32
persky Anti-Virus
12/2/2009 7:38:31
persky Anti-Virus
12/2/2009 7:38:31
persky Anti-Virus

PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/2/2009 7:38:30
persky Anti-Virus
12/2/2009 7:38:30
persky Anti-Virus
12/2/2009 7:38:29
persky Anti-Virus
12/2/2009 7:38:29
persky Anti-Virus
12/2/2009 7:38:28
persky Anti-Virus
12/2/2009 7:38:28
persky Anti-Virus
12/2/2009 7:38:27
persky Anti-Virus
12/2/2009 7:38:27
persky Anti-Virus
12/2/2009 7:38:26
persky Anti-Virus
12/2/2009 7:38:25
persky Anti-Virus
12/2/2009 7:38:24
persky Anti-Virus
12/2/2009 7:38:24
persky Anti-Virus
12/2/2009 7:38:23
persky Anti-Virus
12/2/2009 7:38:23
persky Anti-Virus
12/2/2009 7:38:22
persky Anti-Virus
12/2/2009 7:38:22
persky Anti-Virus
12/2/2009 7:38:21
persky Anti-Virus
12/2/2009 7:38:21
persky Anti-Virus
12/2/2009 7:38:20
persky Anti-Virus
12/2/2009 7:38:20
persky Anti-Virus
12/2/2009 7:38:19
persky Anti-Virus
12/2/2009 7:38:19
persky Anti-Virus
12/2/2009 7:38:18
persky Anti-Virus
12/2/2009 7:38:18
persky Anti-Virus
12/2/2009 7:38:17
persky Anti-Virus
12/2/2009 7:38:17
persky Anti-Virus
12/2/2009 7:38:16
persky Anti-Virus
12/2/2009 7:38:15
persky Anti-Virus
12/2/2009 7:38:14
persky Anti-Virus
12/2/2009 7:38:12
persky Anti-Virus

PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/2/2009 7:38:11
persky Anti-Virus
12/2/2009 7:38:11
persky Anti-Virus
12/2/2009 7:38:10
persky Anti-Virus
12/2/2009 7:38:10
persky Anti-Virus
12/2/2009 7:38:09
persky Anti-Virus
12/2/2009 7:38:09
persky Anti-Virus
12/2/2009 7:38:08
persky Anti-Virus
12/2/2009 7:38:07
persky Anti-Virus
12/2/2009 7:38:06
persky Anti-Virus
12/2/2009 7:38:06
persky Anti-Virus
12/2/2009 7:38:05
persky Anti-Virus
12/2/2009 7:38:05
persky Anti-Virus
12/2/2009 7:38:04
persky Anti-Virus
12/2/2009 7:38:04
persky Anti-Virus
12/2/2009 7:38:03
persky Anti-Virus
12/2/2009 7:38:03
persky Anti-Virus
12/2/2009 7:38:02
persky Anti-Virus
12/2/2009 7:38:02
persky Anti-Virus
12/2/2009 7:38:01
persky Anti-Virus
12/2/2009 7:38:00
persky Anti-Virus
12/2/2009 7:38:00
persky Anti-Virus
12/2/2009 7:37:59
persky Anti-Virus
12/2/2009 7:37:59
persky Anti-Virus
12/2/2009 7:37:58
persky Anti-Virus
12/2/2009 7:37:58
persky Anti-Virus
12/2/2009 7:37:57
persky Anti-Virus
12/2/2009 7:37:57
persky Anti-Virus
12/2/2009 7:37:55
persky Anti-Virus
12/2/2009 7:37:55
persky Anti-Virus
12/2/2009 7:37:54
persky Anti-Virus

PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/2/2009 7:37:54
persky Anti-Virus
12/2/2009 7:37:53
persky Anti-Virus
12/2/2009 7:37:53
persky Anti-Virus
12/2/2009 7:37:52
persky Anti-Virus
12/2/2009 7:37:32
persky Anti-Virus
12/2/2009 7:37:31
persky Anti-Virus
12/2/2009 7:37:31
persky Anti-Virus
12/2/2009 7:37:30
persky Anti-Virus
12/2/2009 7:37:30
persky Anti-Virus
12/2/2009 7:37:29
persky Anti-Virus
12/2/2009 7:37:29
persky Anti-Virus
12/2/2009 7:37:27
persky Anti-Virus
12/2/2009 7:37:27
persky Anti-Virus
12/2/2009 7:37:26
persky Anti-Virus
12/2/2009 7:37:26
persky Anti-Virus
12/2/2009 7:37:25
persky Anti-Virus
12/2/2009 7:37:25
persky Anti-Virus
12/2/2009 7:37:24
persky Anti-Virus
12/2/2009 7:37:24
persky Anti-Virus
12/2/2009 7:37:23
persky Anti-Virus
12/2/2009 7:37:23
persky Anti-Virus
12/2/2009 7:37:22
persky Anti-Virus
12/2/2009 7:37:22
persky Anti-Virus
12/2/2009 7:37:21
persky Anti-Virus
12/2/2009 7:37:21
persky Anti-Virus
12/2/2009 7:37:20
persky Anti-Virus
12/2/2009 7:37:20
persky Anti-Virus
12/2/2009 7:37:19
persky Anti-Virus
12/2/2009 7:37:19
persky Anti-Virus
12/2/2009 7:37:18
persky Anti-Virus

PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/2/2009 7:37:18
persky Anti-Virus
12/2/2009 7:37:17
persky Anti-Virus
12/2/2009 7:37:16
persky Anti-Virus
12/2/2009 7:37:16
persky Anti-Virus
12/2/2009 7:37:15
persky Anti-Virus
12/2/2009 7:37:15
persky Anti-Virus
12/2/2009 7:37:10
persky Anti-Virus
12/2/2009 7:37:10
persky Anti-Virus
12/2/2009 7:37:09
persky Anti-Virus
12/2/2009 7:37:09
persky Anti-Virus
12/2/2009 7:37:08
persky Anti-Virus
12/2/2009 7:37:08
persky Anti-Virus
12/2/2009 7:37:07
persky Anti-Virus
12/2/2009 7:37:07
persky Anti-Virus
12/2/2009 7:37:06
persky Anti-Virus
12/2/2009 7:37:06
persky Anti-Virus
12/2/2009 7:37:05
persky Anti-Virus
12/2/2009 7:37:05
persky Anti-Virus
12/2/2009 7:37:04
persky Anti-Virus
12/2/2009 7:37:03
persky Anti-Virus
12/2/2009 7:37:02
persky Anti-Virus
12/2/2009 7:37:02
persky Anti-Virus
12/2/2009 7:37:01
persky Anti-Virus
12/2/2009 7:37:01
persky Anti-Virus
12/2/2009 7:37:00
persky Anti-Virus
12/2/2009 7:37:00
persky Anti-Virus
12/2/2009 7:36:59
persky Anti-Virus
12/2/2009 7:36:59
persky Anti-Virus
12/2/2009 7:36:58
persky Anti-Virus
12/2/2009 7:36:58
persky Anti-Virus

PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/2/2009 7:36:57
persky Anti-Virus
12/2/2009 7:36:57
persky Anti-Virus
12/2/2009 7:36:56
persky Anti-Virus
12/2/2009 7:36:56
persky Anti-Virus
12/2/2009 7:36:55
persky Anti-Virus
12/2/2009 7:36:55
persky Anti-Virus
12/2/2009 7:36:54
persky Anti-Virus
12/2/2009 7:36:54
persky Anti-Virus
12/2/2009 7:36:53
persky Anti-Virus
12/2/2009 7:36:53
persky Anti-Virus
12/2/2009 7:36:52
persky Anti-Virus
12/2/2009 7:36:52
persky Anti-Virus
12/2/2009 7:36:51
persky Anti-Virus
12/2/2009 7:36:51
persky Anti-Virus
12/2/2009 7:36:48
persky Anti-Virus
12/2/2009 7:36:48
persky Anti-Virus
12/2/2009 7:36:47
persky Anti-Virus
12/2/2009 7:36:45
persky Anti-Virus
12/2/2009 7:36:44
persky Anti-Virus
12/2/2009 7:36:44
persky Anti-Virus
12/2/2009 7:36:43
persky Anti-Virus
12/2/2009 7:36:43
persky Anti-Virus
12/2/2009 7:36:42
persky Anti-Virus
12/2/2009 7:36:42
persky Anti-Virus
12/2/2009 7:36:41
persky Anti-Virus
12/2/2009 7:36:41
persky Anti-Virus
12/2/2009 7:36:39
persky Anti-Virus
12/1/2009 3:16:47
persky Anti-Virus
12/1/2009 3:16:47
persky Anti-Virus
12/1/2009 3:16:47
persky Anti-Virus

PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process exit
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
PM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/1/2009 3:16:47
persky Anti-Virus
12/1/2009 3:16:47
persky Anti-Virus
12/1/2009 3:16:47
persky Anti-Virus
12/1/2009 3:16:46
persky Anti-Virus
12/1/2009 3:16:46
persky Anti-Virus
12/1/2009 3:16:45
persky Anti-Virus
12/1/2009 3:16:45
persky Anti-Virus
12/1/2009 3:16:44
persky Anti-Virus
12/1/2009 3:16:44
persky Anti-Virus
12/1/2009 3:16:43
persky Anti-Virus
12/1/2009 3:16:43
persky Anti-Virus
12/1/2009 3:16:42
persky Anti-Virus
12/1/2009 3:16:42
persky Anti-Virus
12/1/2009 3:16:41
persky Anti-Virus
12/1/2009 3:16:41
persky Anti-Virus
12/1/2009 3:16:40
persky Anti-Virus
12/1/2009 3:16:40
persky Anti-Virus
12/1/2009 3:16:39
persky Anti-Virus
12/1/2009 3:16:39
persky Anti-Virus
12/1/2009 3:16:38
persky Anti-Virus
12/1/2009 3:16:38
persky Anti-Virus
12/1/2009 3:16:37
persky Anti-Virus
12/1/2009 3:16:37
persky Anti-Virus
12/1/2009 3:16:36
persky Anti-Virus
12/1/2009 3:16:36
persky Anti-Virus
12/1/2009 3:16:35
persky Anti-Virus
12/1/2009 3:16:34
persky Anti-Virus
12/1/2009 3:16:33
persky Anti-Virus
12/1/2009 3:16:33
persky Anti-Virus
12/1/2009 3:16:32
persky Anti-Virus

AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/1/2009 3:16:32
persky Anti-Virus
12/1/2009 3:16:31
persky Anti-Virus
12/1/2009 3:16:31
persky Anti-Virus
12/1/2009 3:16:30
persky Anti-Virus
12/1/2009 3:16:30
persky Anti-Virus
12/1/2009 3:16:29
persky Anti-Virus
12/1/2009 3:16:29
persky Anti-Virus
12/1/2009 3:16:28
persky Anti-Virus
12/1/2009 3:16:28
persky Anti-Virus
12/1/2009 3:16:27
persky Anti-Virus
12/1/2009 3:16:27
persky Anti-Virus
12/1/2009 3:16:26
persky Anti-Virus
12/1/2009 3:16:26
persky Anti-Virus
12/1/2009 3:16:25
persky Anti-Virus
12/1/2009 3:16:25
persky Anti-Virus
12/1/2009 3:16:24
persky Anti-Virus
12/1/2009 3:16:24
persky Anti-Virus
12/1/2009 3:16:23
persky Anti-Virus
12/1/2009 3:16:23
persky Anti-Virus
12/1/2009 3:16:22
persky Anti-Virus
12/1/2009 3:16:21
persky Anti-Virus
12/1/2009 3:16:20
persky Anti-Virus
12/1/2009 3:16:20
persky Anti-Virus
12/1/2009 3:16:19
persky Anti-Virus
12/1/2009 3:16:19
persky Anti-Virus
12/1/2009 3:16:18
persky Anti-Virus
12/1/2009 3:16:18
persky Anti-Virus
12/1/2009 3:16:17
persky Anti-Virus
12/1/2009 3:16:17
persky Anti-Virus
12/1/2009 3:16:16
persky Anti-Virus

AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/1/2009 3:16:16
persky Anti-Virus
12/1/2009 3:16:15
persky Anti-Virus
12/1/2009 3:16:15
persky Anti-Virus
12/1/2009 3:16:14
persky Anti-Virus
12/1/2009 3:16:14
persky Anti-Virus
12/1/2009 3:16:13
persky Anti-Virus
12/1/2009 3:16:11
persky Anti-Virus
12/1/2009 3:16:10
persky Anti-Virus
12/1/2009 3:16:10
persky Anti-Virus
12/1/2009 3:16:09
persky Anti-Virus
12/1/2009 3:16:09
persky Anti-Virus
12/1/2009 3:16:08
persky Anti-Virus
12/1/2009 3:16:08
persky Anti-Virus
12/1/2009 3:16:07
persky Anti-Virus
12/1/2009 3:16:07
persky Anti-Virus
12/1/2009 3:16:06
persky Anti-Virus
12/1/2009 3:16:06
persky Anti-Virus
12/1/2009 3:16:05
persky Anti-Virus
12/1/2009 3:16:05
persky Anti-Virus
12/1/2009 3:16:04
persky Anti-Virus
12/1/2009 3:16:04
persky Anti-Virus
12/1/2009 3:16:03
persky Anti-Virus
12/1/2009 3:16:03
persky Anti-Virus
12/1/2009 3:16:02
persky Anti-Virus
12/1/2009 3:16:02
persky Anti-Virus
12/1/2009 3:16:01
persky Anti-Virus
12/1/2009 3:16:01
persky Anti-Virus
12/1/2009 3:16:00
persky Anti-Virus
12/1/2009 3:16:00
persky Anti-Virus
12/1/2009 3:15:59
persky Anti-Virus

AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/1/2009 3:15:59
persky Anti-Virus
12/1/2009 3:15:58
persky Anti-Virus
12/1/2009 3:15:58
persky Anti-Virus
12/1/2009 3:15:57
persky Anti-Virus
12/1/2009 3:15:56
persky Anti-Virus
12/1/2009 3:15:55
persky Anti-Virus
12/1/2009 3:15:55
persky Anti-Virus
12/1/2009 3:15:54
persky Anti-Virus
12/1/2009 3:15:54
persky Anti-Virus
12/1/2009 3:15:53
persky Anti-Virus
12/1/2009 3:15:53
persky Anti-Virus
12/1/2009 3:15:52
persky Anti-Virus
12/1/2009 3:15:52
persky Anti-Virus
12/1/2009 3:15:51
persky Anti-Virus
12/1/2009 3:15:50
persky Anti-Virus
12/1/2009 3:15:49
persky Anti-Virus
12/1/2009 3:15:49
persky Anti-Virus
12/1/2009 3:15:48
persky Anti-Virus
12/1/2009 3:15:48
persky Anti-Virus
12/1/2009 3:15:47
persky Anti-Virus
12/1/2009 3:15:47
persky Anti-Virus
12/1/2009 3:15:46
persky Anti-Virus
12/1/2009 3:15:46
persky Anti-Virus
12/1/2009 3:15:45
persky Anti-Virus
12/1/2009 3:15:45
persky Anti-Virus
12/1/2009 3:15:44
persky Anti-Virus
12/1/2009 3:15:44
persky Anti-Virus
12/1/2009 3:15:43
persky Anti-Virus
12/1/2009 3:15:43
persky Anti-Virus
12/1/2009 3:15:42
persky Anti-Virus

AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/1/2009 3:15:42
persky Anti-Virus
12/1/2009 3:15:40
persky Anti-Virus
12/1/2009 3:15:40
persky Anti-Virus
12/1/2009 3:15:39
persky Anti-Virus
12/1/2009 3:15:39
persky Anti-Virus
12/1/2009 3:15:38
persky Anti-Virus
12/1/2009 3:15:38
persky Anti-Virus
12/1/2009 3:15:37
persky Anti-Virus
12/1/2009 3:15:37
persky Anti-Virus
12/1/2009 3:15:36
persky Anti-Virus
12/1/2009 3:15:34
persky Anti-Virus
12/1/2009 3:15:33
persky Anti-Virus
12/1/2009 3:15:33
persky Anti-Virus
12/1/2009 3:15:32
persky Anti-Virus
12/1/2009 3:15:32
persky Anti-Virus
12/1/2009 3:15:31
persky Anti-Virus
12/1/2009 3:15:30
persky Anti-Virus
12/1/2009 3:15:29
persky Anti-Virus
12/1/2009 3:15:29
persky Anti-Virus
12/1/2009 3:15:28
persky Anti-Virus
12/1/2009 3:15:28
persky Anti-Virus
12/1/2009 3:15:27
persky Anti-Virus
12/1/2009 3:15:26
persky Anti-Virus
12/1/2009 3:15:25
persky Anti-Virus
12/1/2009 3:15:25
persky Anti-Virus
12/1/2009 3:15:24
persky Anti-Virus
12/1/2009 3:15:24
persky Anti-Virus
12/1/2009 3:15:23
persky Anti-Virus
12/1/2009 3:15:23
persky Anti-Virus
12/1/2009 3:15:22
persky Anti-Virus

AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/1/2009 3:15:22
persky Anti-Virus
12/1/2009 3:15:21
persky Anti-Virus
12/1/2009 3:15:21
persky Anti-Virus
12/1/2009 3:15:20
persky Anti-Virus
12/1/2009 3:15:20
persky Anti-Virus
12/1/2009 3:15:19
persky Anti-Virus
12/1/2009 3:15:19
persky Anti-Virus
12/1/2009 3:15:18
persky Anti-Virus
12/1/2009 3:15:18
persky Anti-Virus
12/1/2009 3:15:17
persky Anti-Virus
12/1/2009 3:15:17
persky Anti-Virus
12/1/2009 3:15:16
persky Anti-Virus
12/1/2009 3:15:16
persky Anti-Virus
12/1/2009 3:15:15
persky Anti-Virus
12/1/2009 3:15:14
persky Anti-Virus
12/1/2009 3:15:12
persky Anti-Virus
12/1/2009 3:15:11
persky Anti-Virus
12/1/2009 3:15:10
persky Anti-Virus
12/1/2009 3:15:10
persky Anti-Virus
12/1/2009 3:15:09
persky Anti-Virus
12/1/2009 3:15:08
persky Anti-Virus
12/1/2009 3:15:07
persky Anti-Virus
12/1/2009 3:15:06
persky Anti-Virus
12/1/2009 3:15:05
persky Anti-Virus
12/1/2009 3:14:57
persky Anti-Virus
12/1/2009 3:14:56
persky Anti-Virus
12/1/2009 3:14:56
persky Anti-Virus
12/1/2009 3:14:55
persky Anti-Virus
12/1/2009 3:14:54
persky Anti-Virus
12/1/2009 3:14:53
persky Anti-Virus

AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/1/2009 3:14:51
persky Anti-Virus
12/1/2009 3:14:50
persky Anti-Virus
12/1/2009 3:14:50
persky Anti-Virus
12/1/2009 3:14:46
persky Anti-Virus
12/1/2009 3:14:46
persky Anti-Virus
12/1/2009 3:14:45
persky Anti-Virus
12/1/2009 3:14:45
persky Anti-Virus
12/1/2009 3:14:44
persky Anti-Virus
12/1/2009 3:14:44
persky Anti-Virus
12/1/2009 3:14:43
persky Anti-Virus
12/1/2009 3:14:43
persky Anti-Virus
12/1/2009 3:14:42
persky Anti-Virus
12/1/2009 3:14:42
persky Anti-Virus
12/1/2009 3:14:41
persky Anti-Virus
12/1/2009 3:14:41
persky Anti-Virus
12/1/2009 3:14:40
persky Anti-Virus
12/1/2009 3:14:40
persky Anti-Virus
12/1/2009 3:14:39
persky Anti-Virus
12/1/2009 3:14:39
persky Anti-Virus
12/1/2009 3:14:38
persky Anti-Virus
12/1/2009 3:14:38
persky Anti-Virus
12/1/2009 3:14:37
persky Anti-Virus
12/1/2009 3:14:36
persky Anti-Virus
12/1/2009 3:14:35
persky Anti-Virus
12/1/2009 3:14:35
persky Anti-Virus
12/1/2009 3:14:34
persky Anti-Virus
12/1/2009 3:14:34
persky Anti-Virus
12/1/2009 3:14:33
persky Anti-Virus
12/1/2009 3:14:33
persky Anti-Virus
12/1/2009 3:14:32
persky Anti-Virus

AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE
AM
Process start
2009\X64\WMI64.EXE
AM
Process exit
2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

12/1/2009 3:14:32 AM
Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/1/2009 3:14:31 AM
Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/1/2009 3:14:31 AM
Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/1/2009 3:14:30 AM
Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/1/2009 3:14:30 AM
Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/1/2009 3:14:28 AM
Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/1/2009 3:14:28 AM
Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/1/2009 3:14:27 AM
Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/1/2009 3:14:27 AM
Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/1/2009 3:14:24 AM
Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/1/2009 3:14:20 AM
Process start
persky Anti-Virus 2009\X64\WMI64.EXE
12/1/2009 3:14:19 AM
Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/1/2009 3:14:17 AM
Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/1/2009 3:14:16 AM
Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/1/2009 3:14:15 AM
Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/1/2009 3:14:14 AM
Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/1/2009 3:14:13 AM
Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
12/1/2009 3:13:45 AM
Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:44 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:44 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:44 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:44 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:44 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:44 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:43 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:43 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:42 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:42 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:41 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:41 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/30/2009 7:36:40 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:40 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:39 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:39 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:38 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:38 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:37 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:36 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:35 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:35 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:34 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:34 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:33 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:33 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:32 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:32 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:31 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:31 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:30 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:30 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:29 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:29 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:28 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:28 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:27 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:26 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:25 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:25 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:24 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:24 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/30/2009 7:36:23 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:23 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:22 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:22 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:21 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:21 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:20 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:20 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:19 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:19 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:18 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:18 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:17 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:17 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:16 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:16 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:15 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:15 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:14 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:13 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:12 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:12 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:11 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:11 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:10 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:10 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:09 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:09 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:08 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:08 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/30/2009 7:36:07 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:07 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:06 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:06 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:05 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:05 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:04 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:04 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:01 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:01 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:00 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:36:00 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:59 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:59 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:58 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:58 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:57 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:56 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:55 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:55 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:54 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:54 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:53 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:53 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:52 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:52 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:51 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:51 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:50 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:50 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/30/2009 7:35:49 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:49 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:48 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:48 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:47 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:47 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:46 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:46 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:45 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:45 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:44 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:44 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:43 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:42 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:41 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:41 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:40 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:40 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:39 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:39 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:38 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:38 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:37 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:37 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:36 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:36 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:35 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:35 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:34 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:34 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/30/2009 7:35:33 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:33 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:30 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:30 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:29 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:28 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:27 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:27 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:26 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:18 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:17 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:14 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:13 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:12 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:11 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:10 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:10 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:05 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:05 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:04 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:04 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:03 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:03 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:02 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:02 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:01 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:01 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:00 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:35:00 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:59 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/30/2009 7:34:59 PM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:58 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:58 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:57 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:56 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:55 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:55 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:54 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:54 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:53 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:53 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:52 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:52 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:51 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:51 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:50 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:49 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:49 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:48 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:48 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:47 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:47 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:46 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:46 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:45 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:44 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:43 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:42 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:42 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:41 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/30/2009 7:34:41 PM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:40 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:38 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:37 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:35 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:34 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:33 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:32 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:31 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:30 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 7:34:04 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:45 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:45 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:45 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:45 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:45 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:41 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:40 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:40 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:39 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:39 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:38 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:38 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:37 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:37 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:36 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:36 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:35 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:35 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:34 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/30/2009 5:57:34 PM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:33 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:33 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:32 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:32 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:31 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:31 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:30 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:30 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:29 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:29 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:28 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:28 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:27 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:27 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:26 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:26 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:25 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:25 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:24 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:24 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:23 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:23 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:22 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:22 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:21 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:21 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:20 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:20 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:19 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/30/2009 5:57:19 PM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:18 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:18 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:17 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:17 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:15 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:15 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:14 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:14 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:13 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:13 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:12 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:12 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:11 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:11 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:10 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:10 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:09 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:07 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:06 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:06 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:05 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:05 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:04 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:04 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:03 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:03 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:02 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:02 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:01 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/30/2009 5:57:01 PM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:00 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:57:00 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:59 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:59 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:58 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:58 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:57 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:57 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:56 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:56 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:55 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:55 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:54 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:54 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:53 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:53 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:52 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:52 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:51 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:51 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:49 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:48 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:47 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:46 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:46 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:45 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:45 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:44 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:44 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/30/2009 5:56:43 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:43 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:42 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:41 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:40 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:40 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:39 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:39 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:38 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:38 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:37 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:37 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:36 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:36 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:35 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:35 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:34 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:32 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:32 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:31 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:31 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:30 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:30 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:29 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:13 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:09 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:09 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:08 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:08 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:07 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/30/2009 5:56:05 PM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:04 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:04 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:03 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:03 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:02 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:02 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:01 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:01 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:00 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:56:00 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:59 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:59 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:58 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:58 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:57 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:57 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:56 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:56 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:55 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:55 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:54 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:54 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:53 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:53 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:52 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:47 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:46 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:45 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:44 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/30/2009 5:55:40 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:39 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:38 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:37 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:36 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:35 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:34 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:34 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:33 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:33 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:32 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:32 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:31 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:31 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:30 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:30 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:29 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:29 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:28 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:28 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:27 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:27 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:26 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:25 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:24 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:24 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:23 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:23 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:22 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:22 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/30/2009 5:55:21 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:21 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:20 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:20 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:19 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:19 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:18 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:18 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:17 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:55:17 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:35:08 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:35:08 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:35:08 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:35:08 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:35:08 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:35:08 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:35:07 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:35:07 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:35:06 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:35:06 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:35:05 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:35:05 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:35:04 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:35:04 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:35:03 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:35:02 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:35:01 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:58 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:57 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:57 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/30/2009 3:34:56 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:56 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:55 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:55 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:54 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:54 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:53 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:53 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:52 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:52 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:51 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:51 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:50 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:50 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:48 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:47 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:46 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:46 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:45 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:45 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:44 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:43 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:42 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:41 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:40 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:39 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:38 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:37 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:36 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:34 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/30/2009 3:34:33 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:31 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:30 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:30 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:29 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:28 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:27 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:25 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:24 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:24 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:22 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:19 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:18 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:17 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:16 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:16 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:15 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:15 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:14 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:14 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:13 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:13 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:12 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:12 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:11 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:11 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:10 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:10 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:09 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:07 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/30/2009 3:34:06 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:02 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:01 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:34:00 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:59 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:59 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:58 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:58 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:57 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:57 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:56 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:56 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:55 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:55 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:54 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:54 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:53 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:53 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:52 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:52 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:51 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:51 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:50 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:49 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:48 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:47 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:46 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:46 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:45 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:44 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/30/2009 3:33:43 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:43 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:42 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:42 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:41 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:38 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:37 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:36 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:35 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:35 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:34 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:33 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:33 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:32 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:30 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:29 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:29 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:28 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:28 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:27 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:27 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:26 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:24 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:23 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:23 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:20 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:20 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:19 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:18 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:17 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/30/2009 3:33:17 PM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:16 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:16 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:15 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:15 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:14 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:14 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:13 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:12 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:11 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:11 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:10 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:10 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:09 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:09 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:08 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:07 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:06 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:03 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:02 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:01 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:33:00 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:32:59 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:32:58 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:32:57 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:32:56 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:32:55 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:32:54 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:32:48 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:32:47 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/30/2009 3:32:46 PM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:32:45 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:32:44 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:32:43 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:32:42 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:32:41 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:32:38 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:32:37 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:32:37 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:32:36 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:32:36 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:32:34 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 3:32:32 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:52 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:52 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:52 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:52 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:52 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:52 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:51 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:51 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:50 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:50 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:49 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:49 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:48 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:48 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:47 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:47 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:46 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/26/2009 3:21:46 AM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:45 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:45 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:44 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:44 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:43 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:43 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:42 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:42 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:41 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:41 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:40 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:40 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:39 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:38 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:37 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:37 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:36 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:36 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:35 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:35 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:34 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:34 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:33 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:33 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:32 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:32 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:31 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:31 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:30 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/26/2009 3:21:30 AM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:29 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:29 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:28 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:28 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:27 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:27 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:26 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:26 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:25 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:25 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:24 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:24 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:23 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:23 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:22 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:22 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:21 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:21 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:20 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:20 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:19 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:19 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:18 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:18 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:17 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:16 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:15 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:15 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:14 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/26/2009 3:21:14 AM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:13 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:13 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:12 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:10 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:09 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:08 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:08 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:07 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:07 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:06 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:06 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:05 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:05 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:04 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:04 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:03 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:02 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:01 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:01 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:00 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:21:00 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:59 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:59 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:58 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:58 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:57 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:57 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:56 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:56 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/26/2009 3:20:55 AM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:55 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:54 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:54 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:53 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:53 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:52 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:52 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:51 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:51 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:50 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:50 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:49 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:49 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:48 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:48 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:47 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:47 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:46 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:46 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:45 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:45 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:44 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:44 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:43 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:43 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:42 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:42 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:41 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:41 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/26/2009 3:20:40 AM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:40 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:39 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:39 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:38 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:38 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:37 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:37 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:36 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:36 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:34 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:34 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:33 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:33 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:32 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:32 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:31 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:31 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:30 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:30 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:29 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:29 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:28 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:28 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:27 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:27 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:26 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:26 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:25 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:24 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/26/2009 3:20:23 AM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:22 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:21 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:20 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:19 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:19 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:18 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:17 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:16 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:13 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:12 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:11 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:11 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:10 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:09 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:08 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:06 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:03 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:02 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:01 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:20:00 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:19:59 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:19:57 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:19:56 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:19:56 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:19:55 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:19:55 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:19:54 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:19:53 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:19:52 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/26/2009 3:19:51 AM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:19:51 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:19:50 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:19:50 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:19:49 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:19:49 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:19:48 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:19:48 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:19:48 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:30 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:30 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:30 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:30 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:30 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:30 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:29 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:29 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:28 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:28 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:27 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:27 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:26 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:26 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:25 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:25 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:24 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:24 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:23 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:22 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:21 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/24/2009 2:47:21 PM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:20 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:20 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:19 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:19 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:18 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:18 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:17 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:17 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:16 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:16 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:15 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:15 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:14 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:14 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:13 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:13 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:12 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:12 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:11 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:11 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:10 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:10 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:09 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:09 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:08 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:08 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:07 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:07 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:06 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/24/2009 2:47:06 PM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:05 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:05 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:04 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:04 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:03 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:47:00 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:59 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:59 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:58 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:57 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:57 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:56 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:56 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:55 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:55 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:54 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:54 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:53 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:52 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:52 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:51 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:51 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:50 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:50 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:49 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:49 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:48 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:48 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:47 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/24/2009 2:46:47 PM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:46 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:46 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:45 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:45 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:44 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:41 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:40 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:40 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:39 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:39 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:38 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:38 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:37 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:37 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:36 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:36 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:35 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:35 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:34 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:34 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:33 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:33 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:32 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:32 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:31 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:31 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:30 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:30 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:29 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/24/2009 2:46:29 PM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:28 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:28 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:27 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:27 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:25 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:25 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:24 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:24 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:23 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:23 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:22 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:22 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:21 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:06 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:05 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:05 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:04 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:04 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:03 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:02 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:01 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:01 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:00 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:46:00 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:45:59 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:45:59 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:45:58 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:45:55 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:45:54 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/24/2009 2:45:54 PM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:45:53 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:45:53 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:45:52 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:45:52 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:45:48 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:45:46 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:45:45 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:45:44 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:45:43 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:45:42 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:45:41 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:45:41 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:45:40 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:45:40 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:45:20 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:45:20 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:45:19 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/24/2009 2:45:19 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:44 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:44 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:44 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:44 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:44 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:44 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:43 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:43 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:42 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:41 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:40 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/21/2009 7:27:40 PM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:39 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:39 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:38 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:38 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:37 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:36 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:35 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:35 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:34 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:34 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:33 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:33 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:32 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:32 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:31 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:31 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:30 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:30 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:29 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:28 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:27 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:27 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:26 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:26 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:25 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:25 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:24 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:24 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:23 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/21/2009 7:27:23 PM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:22 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:21 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:20 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:19 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:19 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:18 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:18 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:17 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:17 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:16 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:15 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:14 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:14 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:13 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:13 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:12 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:12 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:11 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:11 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:10 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:10 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:09 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:09 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:08 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:08 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:07 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:07 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:06 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:06 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/21/2009 7:27:05 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:05 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:04 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:04 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:02 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:02 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:01 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:01 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:00 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:27:00 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:59 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:59 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:58 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:58 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:57 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:57 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:56 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:56 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:55 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:55 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:54 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:54 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:53 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:53 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:52 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:52 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:51 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:51 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:50 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:50 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/21/2009 7:26:49 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:49 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:48 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:48 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:47 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:47 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:46 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:46 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:45 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:45 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:44 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:44 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:43 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:43 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:42 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:42 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:41 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:40 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:39 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:39 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:38 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:38 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:37 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:36 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:35 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:35 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:34 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:34 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:33 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:33 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/21/2009 7:26:32 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:31 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:30 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:30 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:29 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:29 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:28 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:28 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:27 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:27 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:26 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:26 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:22 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:22 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:19 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:12 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:11 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:11 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:10 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:10 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:09 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:09 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:08 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:08 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:07 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:07 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:06 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:06 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:05 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:26:02 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/21/2009 7:26:00 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:25:57 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:25:53 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:25:25 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 7:25:25 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:52 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:52 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:52 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:52 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:52 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:52 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:52 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:52 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:52 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:52 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:52 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:52 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:52 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:52 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:51 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:51 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:50 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:50 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:49 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:49 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:48 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:48 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:47 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:47 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:46 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/21/2009 12:34:46 PM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:45 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:45 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:44 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:44 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:43 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:43 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:42 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:42 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:41 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:41 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:40 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:40 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:39 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:39 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:38 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:38 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:37 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:37 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:36 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:36 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:35 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:35 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:34 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:34 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:33 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:33 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:32 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:31 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:30 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/21/2009 12:34:30 PM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:29 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:28 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:27 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:26 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:25 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:24 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:23 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:22 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:21 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:21 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:20 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:20 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:19 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:19 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:18 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:18 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:17 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:17 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:16 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:16 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:15 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:15 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:14 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:12 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:11 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:11 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:10 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:09 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:09 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/21/2009 12:34:08 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:07 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:07 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:06 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:06 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:05 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:05 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:04 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:04 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:03 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:03 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:02 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:02 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:01 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:01 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:00 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:34:00 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:59 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:59 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:58 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:58 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:57 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:55 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:54 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:54 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:53 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:53 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:52 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:51 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:50 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/21/2009 12:33:50 PM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:49 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:49 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:48 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:47 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:46 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:46 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:45 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:45 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:44 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:44 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:43 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:43 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:42 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:35 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:34 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:33 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:32 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:32 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:31 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:30 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:29 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:29 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:28 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:28 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:27 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:27 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:26 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:26 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:25 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/21/2009 12:33:24 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:24 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:20 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:20 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:19 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:19 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:18 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:18 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:17 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:17 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:16 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:16 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:15 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:15 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:14 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:14 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:13 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:13 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:12 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:12 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:11 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:10 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:09 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:09 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:08 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:08 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:07 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:07 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:06 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:06 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/21/2009 12:33:05 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:05 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:04 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:04 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:03 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:03 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:02 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:02 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:01 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:01 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:00 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:33:00 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:32:59 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:32:59 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:32:58 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:32:58 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:32:57 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:32:57 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:32:56 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:32:56 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:32:55 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:32:55 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:32:54 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:32:54 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:32:53 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:32:52 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:32:51 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/21/2009 12:32:51 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:32 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:32 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/20/2009 12:01:32 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:32 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:32 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:32 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:31 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:31 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:30 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:30 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:29 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:29 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:28 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:28 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:27 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:27 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:26 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:26 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:25 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:24 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:23 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:22 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:22 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:21 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:21 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:19 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:19 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:18 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:18 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:15 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:15 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:14 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/20/2009 12:01:14 PM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:13 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:13 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:12 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:10 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:09 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:09 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:08 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:07 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:06 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:05 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:04 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:04 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:03 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:02 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:01 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:01:00 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:59 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:59 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:58 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:58 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:57 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:56 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:55 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:55 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:54 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:53 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:52 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:52 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:51 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/20/2009 12:00:51 PM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:50 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:49 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:48 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:48 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:47 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:47 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:46 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:46 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:45 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:44 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:43 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:43 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:42 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:42 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:41 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:41 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:40 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:40 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:39 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:39 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:38 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:37 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:36 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:36 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:35 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:35 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:34 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:34 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:33 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/20/2009 12:00:33 PM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:32 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:32 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:31 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:31 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:30 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:30 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:29 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:29 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:28 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:28 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:27 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:27 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:26 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:24 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:23 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:23 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:22 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:22 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:21 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:21 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:20 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:19 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:18 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:17 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:16 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:15 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:14 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:14 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:13 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/20/2009 12:00:13 PM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:12 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:12 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:11 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:11 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:10 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:10 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:09 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:09 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:08 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:08 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:07 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:07 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:06 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:05 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:05 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:04 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:04 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:03 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:03 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:02 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:02 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:01 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 12:00:01 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:59 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:59 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:58 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:58 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:57 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:57 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/20/2009 11:59:56 AM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:56 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:55 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:55 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:54 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:54 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:53 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:53 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:51 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:51 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:47 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:47 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:46 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:46 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:45 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:45 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:44 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:44 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:43 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:43 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:42 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:41 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:40 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:40 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:39 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:39 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:38 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:38 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:37 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:37 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/20/2009 11:59:36 AM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:36 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:35 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:35 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:34 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:34 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:33 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:33 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:32 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:32 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:31 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:31 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:30 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:30 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:29 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:29 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:28 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:28 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:27 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:27 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:26 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:25 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:24 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:24 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:23 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:23 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:22 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:22 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:21 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:21 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/20/2009 11:59:20 AM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/20/2009 11:59:19 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:31:08 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:31:08 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:31:07 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:31:07 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:31:07 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:31:07 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:31:06 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:31:06 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:31:05 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:31:05 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:31:04 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:31:04 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:31:03 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:31:03 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:31:02 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:31:02 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:59 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:57 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:56 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:56 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:55 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:55 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:54 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:54 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:53 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:53 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:52 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:51 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/19/2009 4:30:50 AM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:50 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:47 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:47 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:46 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:46 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:45 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:45 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:44 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:44 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:43 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:43 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:42 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:42 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:41 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:41 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:40 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:39 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:38 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:36 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:36 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:35 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:35 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:34 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:34 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:33 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:33 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:32 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:23 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:22 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/19/2009 4:30:20 AM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:19 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:19 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:18 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:16 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:15 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:15 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:14 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:14 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:13 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:13 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:12 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:12 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:11 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:11 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:10 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:10 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:09 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:09 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:08 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:08 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:07 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:05 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:04 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:04 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:03 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:03 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:02 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:02 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:01 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/19/2009 4:30:01 AM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:00 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:30:00 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:59 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:58 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:58 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:57 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:55 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:54 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:52 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:51 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:47 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:46 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:46 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:45 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:45 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:44 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:44 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:43 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:41 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:40 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:40 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:39 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:39 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:38 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:37 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:36 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:36 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:35 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:34 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/19/2009 4:29:33 AM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:33 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:32 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:31 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:31 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:30 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:30 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:29 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:29 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:28 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:28 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:27 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:27 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:26 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:26 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:25 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:25 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:24 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:24 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:23 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:21 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:20 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:19 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:18 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:17 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:16 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:13 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:12 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:11 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:10 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/19/2009 4:29:09 AM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:08 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:07 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:06 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:04 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:03 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:02 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:01 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:01 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:00 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:29:00 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:59 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:59 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:58 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:57 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:56 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:55 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:54 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:54 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:53 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:53 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:52 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:50 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:49 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:49 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:48 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:47 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:46 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:46 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:45 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/19/2009 4:28:45 AM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:44 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:38 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:37 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:37 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:36 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:36 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:35 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:35 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:34 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:34 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:33 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:33 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:32 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:32 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:27 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:27 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:26 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:26 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:25 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:25 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:24 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:24 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:23 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:23 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:22 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:22 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:21 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:21 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:20 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/19/2009 4:28:20 AM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:19 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:19 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:18 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:18 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:17 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:17 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:16 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:15 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:14 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:13 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:12 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:11 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:10 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:09 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:09 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:08 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:08 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:07 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:07 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:06 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:06 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:05 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:05 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:04 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:03 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:03 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:02 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:02 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:01 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/19/2009 4:28:01 AM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:00 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:28:00 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:27:59 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/19/2009 4:27:59 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:18:16 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:18:16 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:18:16 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:18:16 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:18:16 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:18:16 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:18:15 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:18:14 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:18:14 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:18:13 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:18:13 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:18:12 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:18:12 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:18:11 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:18:11 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:18:10 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:18:10 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:18:09 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:18:09 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:18:08 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:18:08 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:18:07 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:18:06 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:18:05 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:18:05 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/18/2009 7:18:04 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:18:04 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:18:03 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:18:03 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:18:02 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:18:02 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:18:01 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:18:01 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:18:00 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:18:00 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:59 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:59 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:58 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:58 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:57 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:57 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:56 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:56 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:55 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:55 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:54 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:54 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:53 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:53 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:52 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:52 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:51 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:51 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:50 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:50 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/18/2009 7:17:49 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:48 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:48 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:47 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:47 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:46 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:46 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:45 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:44 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:43 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:43 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:42 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:42 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:41 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:41 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:40 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:40 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:39 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:38 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:37 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:37 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:36 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:36 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:35 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:35 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:34 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:34 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:33 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:32 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:31 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/18/2009 7:17:31 PM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:30 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:30 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:29 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:29 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:28 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:28 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:27 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:27 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:26 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:26 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:25 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:25 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:24 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:24 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:23 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:23 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:22 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:22 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:21 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:21 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:20 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:20 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:19 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:19 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:18 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:17 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:17 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:16 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:16 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/18/2009 7:17:15 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:15 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:14 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:14 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:13 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:13 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:12 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:11 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:10 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:10 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:09 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:09 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:08 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:08 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:07 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:07 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:05 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:05 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:04 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:04 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:03 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:03 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:02 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:02 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:01 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:17:01 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:59 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:59 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:58 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:58 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/18/2009 7:16:57 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:57 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:56 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:56 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:55 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:55 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:54 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:54 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:53 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:53 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:52 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:52 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:51 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:51 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:50 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:50 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:49 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:49 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:48 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:48 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:43 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:43 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:42 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:42 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:41 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:41 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:40 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:40 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:39 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:39 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/18/2009 7:16:38 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:38 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:37 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:37 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:36 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:36 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:35 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:34 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:33 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:33 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:32 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:32 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:31 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:31 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:30 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:30 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:29 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:29 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:28 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:28 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:27 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:27 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:26 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:26 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:25 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:25 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:24 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:24 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:23 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:23 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/18/2009 7:16:22 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:21 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:21 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:20 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:20 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:19 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:19 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:18 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:18 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:17 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:17 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:16 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:16 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:15 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 7:16:15 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:56 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:56 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:56 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:56 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:56 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:56 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:55 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:55 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:54 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:54 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:53 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:53 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:52 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:52 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:51 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/18/2009 12:52:51 PM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:50 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:50 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:49 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:48 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:47 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:47 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:46 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:46 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:45 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:45 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:44 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:44 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:43 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:43 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:42 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:42 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:41 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:41 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:40 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:40 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:39 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:39 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:38 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:38 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:37 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:37 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:36 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:36 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:35 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/18/2009 12:52:35 PM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:34 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:34 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:33 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:33 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:32 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:32 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:31 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:31 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:30 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:29 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:29 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:28 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:28 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:27 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:27 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:26 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:26 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:25 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:25 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:24 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:24 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:23 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:23 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:22 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:21 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:20 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:20 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:19 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:19 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/18/2009 12:52:18 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:18 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:17 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:17 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:16 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:16 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:15 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:15 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:14 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:14 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:13 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:12 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:11 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:10 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:09 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:08 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:07 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:07 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:06 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:03 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:02 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:02 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:01 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:01 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:52:00 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:58 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:57 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:57 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:56 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:56 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/18/2009 12:51:55 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:53 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:52 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:51 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:50 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:50 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:49 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:49 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:48 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:47 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:46 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:44 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:43 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:42 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:39 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:38 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:37 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:36 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:36 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:35 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:35 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:34 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:34 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:32 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:32 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:31 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:31 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:30 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:30 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:29 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/18/2009 12:51:29 PM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:28 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:28 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:24 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:24 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:23 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:23 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:22 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:22 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:21 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:21 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:20 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:20 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:19 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:19 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:18 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:18 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:17 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:17 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:16 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:15 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:14 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:14 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:13 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:13 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:12 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:12 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:11 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:11 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:10 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/18/2009 12:51:10 PM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:09 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:09 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:08 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:08 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:07 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:07 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:06 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:06 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:05 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:05 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:04 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:04 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:03 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:03 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:02 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:02 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:01 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:01 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:00 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:51:00 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:50:59 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:50:59 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:50:58 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:50:58 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:50:57 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 12:50:56 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:20 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:20 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:20 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/18/2009 11:20:20 AM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:20 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:20 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:19 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:19 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:18 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:17 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:16 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:16 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:15 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:15 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:14 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:14 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:13 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:13 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:12 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:12 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:11 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:11 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:10 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:10 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:09 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:09 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:08 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:07 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:07 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:06 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:06 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:05 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:05 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/18/2009 11:20:04 AM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:04 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:03 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:03 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:02 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:02 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:01 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:01 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:00 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:20:00 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:59 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:59 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:58 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:58 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:57 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:57 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:56 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:56 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:55 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:55 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:54 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:54 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:53 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:53 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:52 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:52 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:51 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:51 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:50 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:50 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/18/2009 11:19:49 AM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:49 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:48 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:48 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:47 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:47 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:46 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:46 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:45 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:45 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:44 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:44 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:43 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:43 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:42 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:42 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:41 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:41 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:40 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:40 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:39 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:38 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:37 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:37 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:36 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:36 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:35 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:35 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:34 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:34 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/18/2009 11:19:33 AM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:30 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:29 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:28 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:27 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:27 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:26 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:26 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:25 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:25 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:24 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:24 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:23 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:23 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:22 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:22 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:21 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:20 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:19 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:18 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:17 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:17 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:16 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:16 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:15 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:15 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:14 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:14 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:13 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:08 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/18/2009 11:19:07 AM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:07 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:06 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:06 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:05 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:05 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:04 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:04 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:03 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:02 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:01 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:19:01 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:59 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:59 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:58 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:58 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:57 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:57 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:56 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:56 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:55 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:53 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:52 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:52 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:51 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:51 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:47 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:46 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:45 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:45 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/18/2009 11:18:44 AM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:43 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:42 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:40 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:39 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:39 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:38 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:38 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:37 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:37 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:36 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:35 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:34 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:33 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:33 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:32 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:32 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:31 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:31 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:30 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:30 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:29 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:29 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:28 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:28 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:27 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:27 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:26 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:26 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:25 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/18/2009 11:18:23 AM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:22 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:21 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:21 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:20 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:20 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:19 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:19 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:18 AM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 11:18:18 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:35:11 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:35:11 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:35:11 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:35:11 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:35:11 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:35:11 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:35:10 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:35:10 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:35:09 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:35:09 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:35:08 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:35:08 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:35:07 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:35:07 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:35:06 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:35:06 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:35:05 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:35:05 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:35:04 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:35:04 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/17/2009 10:35:03 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:35:03 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:35:02 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:35:02 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:35:01 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:35:01 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:35:00 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:35:00 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:59 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:59 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:58 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:58 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:57 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:57 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:56 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:56 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:55 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:54 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:53 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:53 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:52 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:52 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:51 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:51 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:50 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:50 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:49 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:49 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:48 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:48 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/17/2009 10:34:47 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:47 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:46 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:46 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:45 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:45 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:44 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:44 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:43 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:43 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:42 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:42 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:41 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:41 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:40 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:40 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:39 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:38 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:37 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:37 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:36 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:36 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:35 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:35 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:34 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:34 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:33 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:33 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:32 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:32 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/17/2009 10:34:31 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:30 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:29 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:29 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:28 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:27 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:26 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:26 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:25 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:25 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:24 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:24 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:23 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:23 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:22 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:22 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:21 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:21 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:20 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:20 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:19 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:19 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:18 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:18 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:17 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:17 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:16 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:16 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:15 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:15 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/17/2009 10:34:14 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:14 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:13 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:13 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:12 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:11 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:10 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:10 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:09 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:09 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:08 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:08 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:07 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:07 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:06 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:06 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:05 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:05 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:04 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:04 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:03 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:02 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:01 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:34:00 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:59 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:58 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:57 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:55 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:55 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:54 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/17/2009 10:33:54 PM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:53 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:53 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:52 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:52 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:51 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:51 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:50 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:50 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:49 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:49 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:48 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:48 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:47 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:47 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:46 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:46 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:45 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:44 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:43 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:43 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:39 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:39 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:38 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:37 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:36 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:36 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:35 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:35 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:34 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/17/2009 10:33:34 PM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:33 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:33 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:32 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:32 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:31 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:31 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:30 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:30 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:29 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:29 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:28 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:28 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:27 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:27 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:26 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:26 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:25 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:25 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:24 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:24 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:23 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:23 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:22 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:22 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:21 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:21 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:20 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:19 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:18 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/17/2009 10:33:18 PM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:17 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:17 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:16 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:16 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:15 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:15 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:14 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:14 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:13 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:12 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:10 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:10 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 10:33:09 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:54 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:54 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:54 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:54 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:53 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:53 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:52 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:52 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:51 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:51 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:50 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:50 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:49 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:49 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:48 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:48 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/17/2009 2:50:47 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:47 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:46 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:46 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:45 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:45 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:44 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:44 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:43 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:43 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:42 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:42 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:41 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:41 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:40 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:40 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:39 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:39 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:38 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:38 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:37 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:37 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:36 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:36 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:35 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:35 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:34 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:34 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:33 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:33 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/17/2009 2:50:32 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:32 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:31 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:30 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:29 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:29 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:28 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:28 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:27 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:27 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:26 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:26 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:25 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:25 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:24 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:24 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:23 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:23 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:22 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:22 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:21 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:21 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:20 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:20 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:19 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:19 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:18 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:18 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:17 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:17 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/17/2009 2:50:16 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:16 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:15 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:15 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:14 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:14 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:13 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:13 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:12 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:12 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:11 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:11 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:10 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:10 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:09 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:09 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:08 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:08 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:07 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:07 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:06 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:06 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:05 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:04 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:03 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:03 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:02 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:02 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:01 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:01 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/17/2009 2:50:00 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:50:00 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:59 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:59 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:58 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:58 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:57 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:57 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:56 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:55 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:55 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:54 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:54 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:53 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:53 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:52 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:52 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:51 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:51 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:50 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:50 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:49 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:48 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:47 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:47 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:46 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:46 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:45 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:45 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:44 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/17/2009 2:49:44 PM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:43 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:43 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:42 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:42 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:41 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:41 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:40 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:40 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:39 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:39 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:38 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:38 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:37 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:37 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:36 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:36 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:35 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:35 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:34 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:34 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:33 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:33 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:31 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:31 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:30 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:30 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:29 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:29 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:28 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/17/2009 2:49:28 PM Process start


persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:27 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:27 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:26 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:26 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:25 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:25 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:21 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:20 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:19 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:19 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:16 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:16 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:15 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:15 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:14 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:14 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:13 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:13 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:12 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:12 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:11 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:11 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:10 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:10 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:09 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:09 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:08 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:08 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:07 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

11/17/2009 2:49:06 PM Process exit


persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:06 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:05 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:04 PM Process exit
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:49:00 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:48:52 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM Process start
12/14/2009 4:09:32 PM Process start
12/14/2009 4:09:32 PM Process start
12/10/2009 2:42:15 PM Process start
12/10/2009 4:49:12 AM Process start
12/10/2009 4:08:57 AM Process start
12/10/2009 4:08:57 AM Process start
12/9/2009 3:23:35 AM
Process start
12/8/2009 1:20:42 PM
Process start
12/6/2009 12:47:12 AM Process start
12/5/2009 2:24:47 AM
Process start
12/4/2009 6:51:08 PM
Process start
12/3/2009 4:07:07 AM
Process start
12/2/2009 7:36:39 PM
Process start
12/1/2009 3:13:44 AM
Process start
11/30/2009 7:34:03 PM Process start
11/30/2009 5:55:17 PM Process start
11/30/2009 3:32:32 PM Process start
11/27/2009 12:33:55 AM Process exit
11/27/2009 12:33:55 AM Process start
11/26/2009 3:19:48 AM Process start
11/24/2009 2:45:18 PM Process start
11/21/2009 7:25:24 PM Process start
11/21/2009 12:32:51 PM Process start
11/20/2009 11:59:17 AM Process start
11/19/2009 4:27:58 AM Process start
11/18/2009 7:16:14 PM Process start
11/18/2009 12:50:54 PM Process start
11/18/2009 11:18:18 AM Process start
11/17/2009 10:33:09 PM Process start
11/17/2009 2:48:51 PM Process start
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM Process start
12/16/2009 7:02:15 AM Process start
12/14/2009 4:09:32 PM Process start
12/14/2009 4:09:32 PM Process start
12/10/2009 2:42:15 PM Process start
12/10/2009 2:42:15 PM Process start
12/10/2009 4:49:12 AM Process start
12/10/2009 4:49:12 AM Process start
12/10/2009 4:08:57 AM Process start
12/10/2009 4:08:57 AM Process start
12/9/2009 3:23:35 AM
Process start
12/9/2009 3:23:35 AM
Process start
12/8/2009 1:20:42 PM
Process start
12/8/2009 1:20:42 PM
Process start
12/6/2009 12:47:12 AM Process start

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\WINDOWS\system32\SMSS.EXE
C:\WINDOWS\system32\SMSS.EXE
C:\WINDOWS\system32\SMSS.EXE
C:\WINDOWS\system32\SMSS.EXE
C:\WINDOWS\system32\SMSS.EXE
C:\WINDOWS\system32\SMSS.EXE
C:\WINDOWS\system32\SMSS.EXE
C:\WINDOWS\system32\SMSS.EXE
C:\WINDOWS\system32\SMSS.EXE
C:\WINDOWS\system32\SMSS.EXE
C:\WINDOWS\system32\SMSS.EXE
C:\WINDOWS\system32\SMSS.EXE
C:\WINDOWS\system32\SMSS.EXE
C:\WINDOWS\system32\SMSS.EXE
C:\WINDOWS\system32\SMSS.EXE
C:\WINDOWS\system32\SMSS.EXE
C:\WINDOWS\system32\SMSS.EXE
C:\WINDOWS\system32\SMSS.EXE
C:\WINDOWS\system32\SMSS.EXE
C:\WINDOWS\system32\SMSS.EXE
C:\WINDOWS\system32\SMSS.EXE
C:\WINDOWS\system32\SMSS.EXE
C:\WINDOWS\system32\SMSS.EXE
C:\WINDOWS\system32\SMSS.EXE
C:\WINDOWS\system32\SMSS.EXE
C:\WINDOWS\system32\SMSS.EXE
C:\WINDOWS\system32\SMSS.EXE
C:\WINDOWS\system32\SMSS.EXE
C:\WINDOWS\system32\SMSS.EXE
C:\WINDOWS\system32\SMSS.EXE
C:\WINDOWS\system32\SMSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE

12/6/2009 12:47:12 AM
12/5/2009 2:24:47 AM
12/5/2009 2:24:47 AM
12/4/2009 6:51:08 PM
12/4/2009 6:51:08 PM
12/3/2009 4:07:07 AM
12/3/2009 4:07:07 AM
12/2/2009 7:36:39 PM
12/2/2009 7:36:39 PM
12/1/2009 3:13:44 AM
12/1/2009 3:13:44 AM
11/30/2009 7:34:03 PM
11/30/2009 7:34:03 PM
11/30/2009 5:55:17 PM
11/30/2009 5:55:17 PM
11/30/2009 3:32:34 PM
11/30/2009 3:32:32 PM
11/27/2009 12:34:01 AM
11/27/2009 12:33:55 AM
11/26/2009 3:19:48 AM
11/26/2009 3:19:48 AM
11/24/2009 2:45:18 PM
11/24/2009 2:45:18 PM
11/21/2009 7:25:24 PM
11/21/2009 7:25:24 PM
11/21/2009 12:32:51 PM
11/21/2009 12:32:51 PM
11/20/2009 11:59:17 AM
11/20/2009 11:59:17 AM
11/19/2009 4:27:58 AM
11/19/2009 4:27:58 AM
11/18/2009 7:16:14 PM
11/18/2009 7:16:14 PM
11/18/2009 12:50:54 PM
11/18/2009 12:50:54 PM
11/18/2009 11:18:18 AM
11/18/2009 11:18:18 AM
11/17/2009 10:33:09 PM
11/17/2009 10:33:09 PM
11/17/2009 2:48:51 PM
11/17/2009 2:48:51 PM
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM
12/14/2009 4:09:32 PM
12/10/2009 2:42:15 PM
12/10/2009 4:49:12 AM
12/10/2009 4:08:57 AM
12/9/2009 3:23:35 AM
12/8/2009 1:20:42 PM
12/6/2009 12:47:12 AM
12/5/2009 2:24:47 AM
12/4/2009 6:51:08 PM
12/3/2009 4:07:07 AM
12/2/2009 7:36:39 PM
12/1/2009 3:13:44 AM
11/30/2009 7:34:03 PM
11/30/2009 5:55:17 PM
11/30/2009 3:32:34 PM
11/26/2009 3:19:48 AM
11/24/2009 2:45:18 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
exit
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start

C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE
C:\WINDOWS\system32\CSRSS.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start

C:\WINDOWS\system32\WININIT.EXE
C:\WINDOWS\system32\WININIT.EXE
C:\WINDOWS\system32\WININIT.EXE
C:\WINDOWS\system32\WININIT.EXE
C:\WINDOWS\system32\WININIT.EXE
C:\WINDOWS\system32\WININIT.EXE
C:\WINDOWS\system32\WININIT.EXE
C:\WINDOWS\system32\WININIT.EXE
C:\WINDOWS\system32\WININIT.EXE
C:\WINDOWS\system32\WININIT.EXE
C:\WINDOWS\system32\WININIT.EXE
C:\WINDOWS\system32\WININIT.EXE
C:\WINDOWS\system32\WININIT.EXE
C:\WINDOWS\system32\WININIT.EXE
C:\WINDOWS\system32\WININIT.EXE
C:\WINDOWS\system32\WININIT.EXE
C:\WINDOWS\system32\WININIT.EXE
C:\WINDOWS\system32\WININIT.EXE

11/21/2009 7:25:24 PM
11/21/2009 12:32:51 PM
11/20/2009 11:59:17 AM
11/19/2009 4:27:58 AM
11/18/2009 7:16:14 PM
11/18/2009 12:50:54 PM
11/18/2009 11:18:18 AM
11/17/2009 10:33:09 PM
11/17/2009 2:48:51 PM
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM
12/14/2009 4:09:32 PM
12/10/2009 2:42:15 PM
12/10/2009 4:49:12 AM
12/10/2009 4:08:57 AM
12/9/2009 3:23:35 AM
12/8/2009 1:20:42 PM
12/6/2009 12:47:12 AM
12/5/2009 2:24:47 AM
12/4/2009 6:51:08 PM
12/3/2009 4:07:07 AM
12/2/2009 7:36:39 PM
12/1/2009 3:13:44 AM
11/30/2009 7:34:03 PM
11/30/2009 5:55:17 PM
11/30/2009 3:32:34 PM
11/27/2009 12:34:01 AM
11/27/2009 12:33:55 AM
11/26/2009 3:19:48 AM
11/24/2009 2:45:18 PM
11/21/2009 7:25:24 PM
11/21/2009 12:32:51 PM
11/20/2009 11:59:18 AM
11/19/2009 4:27:58 AM
11/18/2009 7:16:14 PM
11/18/2009 12:50:54 PM
11/18/2009 11:18:18 AM
11/17/2009 10:33:09 PM
11/17/2009 2:48:51 PM
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM
12/14/2009 4:09:32 PM
12/10/2009 2:42:15 PM
12/10/2009 4:49:12 AM
12/10/2009 4:08:57 AM
12/9/2009 3:23:35 AM
12/8/2009 1:20:42 PM
12/6/2009 12:47:12 AM
12/5/2009 2:24:47 AM
12/4/2009 6:51:08 PM
12/3/2009 4:07:07 AM
12/2/2009 7:36:39 PM
12/1/2009 3:13:44 AM
11/30/2009 7:34:03 PM
11/30/2009 5:55:17 PM
11/30/2009 3:32:34 PM
11/26/2009 3:19:48 AM
11/24/2009 2:45:18 PM
11/21/2009 7:25:24 PM
11/21/2009 12:32:51 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process

start
start
start
start
start
start
start
start
start

C:\WINDOWS\system32\WININIT.EXE
C:\WINDOWS\system32\WININIT.EXE
C:\WINDOWS\system32\WININIT.EXE
C:\WINDOWS\system32\WININIT.EXE
C:\WINDOWS\system32\WININIT.EXE
C:\WINDOWS\system32\WININIT.EXE
C:\WINDOWS\system32\WININIT.EXE
C:\WINDOWS\system32\WININIT.EXE
C:\WINDOWS\system32\WININIT.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
exit
start
start
start
start
start
start
start
start
start
start
start
start

C:\WINDOWS\system32\WINLOGON.EXE
C:\WINDOWS\system32\WINLOGON.EXE
C:\WINDOWS\system32\WINLOGON.EXE
C:\WINDOWS\system32\WINLOGON.EXE
C:\WINDOWS\system32\WINLOGON.EXE
C:\WINDOWS\system32\WINLOGON.EXE
C:\WINDOWS\system32\WINLOGON.EXE
C:\WINDOWS\system32\WINLOGON.EXE
C:\WINDOWS\system32\WINLOGON.EXE
C:\WINDOWS\system32\WINLOGON.EXE
C:\WINDOWS\system32\WINLOGON.EXE
C:\WINDOWS\system32\WINLOGON.EXE
C:\WINDOWS\system32\WINLOGON.EXE
C:\WINDOWS\system32\WINLOGON.EXE
C:\WINDOWS\system32\WINLOGON.EXE
C:\WINDOWS\system32\WINLOGON.EXE
C:\WINDOWS\system32\WINLOGON.EXE
C:\WINDOWS\system32\WINLOGON.EXE
C:\WINDOWS\system32\WINLOGON.EXE
C:\WINDOWS\system32\WINLOGON.EXE
C:\WINDOWS\system32\WINLOGON.EXE
C:\WINDOWS\system32\WINLOGON.EXE
C:\WINDOWS\system32\WINLOGON.EXE
C:\WINDOWS\system32\WINLOGON.EXE
C:\WINDOWS\system32\WINLOGON.EXE
C:\WINDOWS\system32\WINLOGON.EXE
C:\WINDOWS\system32\WINLOGON.EXE
C:\WINDOWS\system32\WINLOGON.EXE
C:\WINDOWS\system32\WINLOGON.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start

C:\WINDOWS\system32\SERVICES.EXE
C:\WINDOWS\system32\SERVICES.EXE
C:\WINDOWS\system32\SERVICES.EXE
C:\WINDOWS\system32\SERVICES.EXE
C:\WINDOWS\system32\SERVICES.EXE
C:\WINDOWS\system32\SERVICES.EXE
C:\WINDOWS\system32\SERVICES.EXE
C:\WINDOWS\system32\SERVICES.EXE
C:\WINDOWS\system32\SERVICES.EXE
C:\WINDOWS\system32\SERVICES.EXE
C:\WINDOWS\system32\SERVICES.EXE
C:\WINDOWS\system32\SERVICES.EXE
C:\WINDOWS\system32\SERVICES.EXE
C:\WINDOWS\system32\SERVICES.EXE
C:\WINDOWS\system32\SERVICES.EXE
C:\WINDOWS\system32\SERVICES.EXE
C:\WINDOWS\system32\SERVICES.EXE
C:\WINDOWS\system32\SERVICES.EXE
C:\WINDOWS\system32\SERVICES.EXE
C:\WINDOWS\system32\SERVICES.EXE

11/20/2009 11:59:17 AM
11/19/2009 4:27:58 AM
11/18/2009 7:16:14 PM
11/18/2009 12:50:54 PM
11/18/2009 11:18:18 AM
11/17/2009 10:33:09 PM
11/17/2009 2:48:51 PM
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM
12/14/2009 4:09:32 PM
12/10/2009 2:42:15 PM
12/10/2009 4:49:12 AM
12/10/2009 4:08:57 AM
12/9/2009 3:23:35 AM
12/8/2009 1:20:42 PM
12/6/2009 12:47:12 AM
12/5/2009 2:24:47 AM
12/4/2009 6:51:08 PM
12/3/2009 4:07:07 AM
12/2/2009 7:36:39 PM
12/1/2009 3:13:44 AM
11/30/2009 7:34:03 PM
11/30/2009 5:55:17 PM
11/30/2009 3:32:34 PM
11/26/2009 3:19:48 AM
11/24/2009 2:45:18 PM
11/21/2009 7:25:24 PM
11/21/2009 12:32:51 PM
11/20/2009 11:59:18 AM
11/19/2009 4:27:58 AM
11/18/2009 7:16:14 PM
11/18/2009 12:50:54 PM
11/18/2009 11:18:18 AM
11/17/2009 10:33:09 PM
11/17/2009 2:48:51 PM
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM
12/14/2009 4:09:32 PM
12/10/2009 2:42:15 PM
12/10/2009 4:49:12 AM
12/10/2009 4:08:57 AM
12/9/2009 3:23:35 AM
12/8/2009 1:20:42 PM
12/6/2009 12:47:12 AM
12/5/2009 2:24:47 AM
12/4/2009 6:51:08 PM
12/3/2009 4:07:07 AM
12/2/2009 7:36:39 PM
12/1/2009 3:13:44 AM
11/30/2009 7:34:03 PM
11/30/2009 5:55:17 PM
11/30/2009 3:32:34 PM
11/26/2009 3:19:48 AM
11/24/2009 2:45:18 PM
11/21/2009 7:25:24 PM
11/21/2009 12:32:51 PM
11/20/2009 11:59:18 AM
11/19/2009 4:27:58 AM
11/18/2009 7:16:14 PM
11/18/2009 12:50:54 PM

Process
Process
Process
Process
Process
Process
Process

start
start
start
start
start
start
start

C:\WINDOWS\system32\SERVICES.EXE
C:\WINDOWS\system32\SERVICES.EXE
C:\WINDOWS\system32\SERVICES.EXE
C:\WINDOWS\system32\SERVICES.EXE
C:\WINDOWS\system32\SERVICES.EXE
C:\WINDOWS\system32\SERVICES.EXE
C:\WINDOWS\system32\SERVICES.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start

C:\WINDOWS\system32\LSASS.EXE
C:\WINDOWS\system32\LSASS.EXE
C:\WINDOWS\system32\LSASS.EXE
C:\WINDOWS\system32\LSASS.EXE
C:\WINDOWS\system32\LSASS.EXE
C:\WINDOWS\system32\LSASS.EXE
C:\WINDOWS\system32\LSASS.EXE
C:\WINDOWS\system32\LSASS.EXE
C:\WINDOWS\system32\LSASS.EXE
C:\WINDOWS\system32\LSASS.EXE
C:\WINDOWS\system32\LSASS.EXE
C:\WINDOWS\system32\LSASS.EXE
C:\WINDOWS\system32\LSASS.EXE
C:\WINDOWS\system32\LSASS.EXE
C:\WINDOWS\system32\LSASS.EXE
C:\WINDOWS\system32\LSASS.EXE
C:\WINDOWS\system32\LSASS.EXE
C:\WINDOWS\system32\LSASS.EXE
C:\WINDOWS\system32\LSASS.EXE
C:\WINDOWS\system32\LSASS.EXE
C:\WINDOWS\system32\LSASS.EXE
C:\WINDOWS\system32\LSASS.EXE
C:\WINDOWS\system32\LSASS.EXE
C:\WINDOWS\system32\LSASS.EXE
C:\WINDOWS\system32\LSASS.EXE
C:\WINDOWS\system32\LSASS.EXE
C:\WINDOWS\system32\LSASS.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start

C:\WINDOWS\system32\LSM.EXE
C:\WINDOWS\system32\LSM.EXE
C:\WINDOWS\system32\LSM.EXE
C:\WINDOWS\system32\LSM.EXE
C:\WINDOWS\system32\LSM.EXE
C:\WINDOWS\system32\LSM.EXE
C:\WINDOWS\system32\LSM.EXE
C:\WINDOWS\system32\LSM.EXE
C:\WINDOWS\system32\LSM.EXE
C:\WINDOWS\system32\LSM.EXE
C:\WINDOWS\system32\LSM.EXE
C:\WINDOWS\system32\LSM.EXE
C:\WINDOWS\system32\LSM.EXE
C:\WINDOWS\system32\LSM.EXE
C:\WINDOWS\system32\LSM.EXE
C:\WINDOWS\system32\LSM.EXE
C:\WINDOWS\system32\LSM.EXE
C:\WINDOWS\system32\LSM.EXE
C:\WINDOWS\system32\LSM.EXE
C:\WINDOWS\system32\LSM.EXE
C:\WINDOWS\system32\LSM.EXE
C:\WINDOWS\system32\LSM.EXE
C:\WINDOWS\system32\LSM.EXE
C:\WINDOWS\system32\LSM.EXE

11/18/2009
11/17/2009
11/17/2009
dfsvc.exe
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/13/2009
12/13/2009
12/12/2009
12/12/2009
12/11/2009
12/11/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009

11:18:18 AM
10:33:09 PM
2:48:51 PM
(events: 7)
7:02:15 AM
7:02:15 AM
7:02:15 AM
7:02:15 AM
7:02:15 AM
7:02:15 AM
7:02:15 AM
7:02:15 AM
7:02:15 AM
7:02:15 AM
7:02:15 AM
7:02:15 AM
12:39:06 AM
12:32:03 AM
12:15:10 AM
12:08:08 AM
12:06:00 AM
12:00:00 AM
6:24:26 PM
6:17:02 PM
6:15:39 PM
6:09:28 PM
4:09:33 PM
4:09:33 PM
4:09:33 PM
4:09:33 PM
4:09:33 PM
4:09:33 PM
4:09:33 PM
4:09:33 PM
4:09:33 PM
4:09:32 PM
4:09:32 PM
4:09:32 PM
12:58:38 AM
12:51:30 AM
5:57:51 AM
5:50:39 AM
7:42:04 AM
7:34:59 AM
4:51:35 AM
4:44:20 AM
3:41:10 PM
3:33:55 PM
2:42:15 PM
2:42:15 PM
2:42:15 PM
2:42:15 PM
2:42:15 PM
2:42:15 PM
2:42:15 PM
2:42:15 PM
2:42:15 PM
2:42:15 PM
2:42:15 PM
2:42:15 PM

Process start
Process start
Process start

C:\WINDOWS\system32\LSM.EXE
C:\WINDOWS\system32\LSM.EXE
C:\WINDOWS\system32\LSM.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE

start
start
start
start
start
start
start
start
start
start
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
start
start
start
start
start
start
start
start
start
start
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
start
start
start
start
start
start
start
start
start
start
start
start

12/10/2009 2:17:59 PM
12/10/2009 2:10:44 PM
12/10/2009 5:55:08 AM
12/10/2009 5:48:57 AM
12/10/2009 4:49:12 AM
12/10/2009 4:49:12 AM
12/10/2009 4:49:12 AM
12/10/2009 4:49:12 AM
12/10/2009 4:49:12 AM
12/10/2009 4:49:12 AM
12/10/2009 4:49:12 AM
12/10/2009 4:49:12 AM
12/10/2009 4:49:12 AM
12/10/2009 4:49:12 AM
12/10/2009 4:49:12 AM
12/10/2009 4:49:12 AM
12/10/2009 4:21:45 AM
12/10/2009 4:12:56 AM
12/10/2009 4:08:57 AM
12/10/2009 4:08:57 AM
12/10/2009 4:08:57 AM
12/10/2009 4:08:57 AM
12/10/2009 4:08:57 AM
12/10/2009 4:08:57 AM
12/10/2009 4:08:57 AM
12/10/2009 4:08:57 AM
12/10/2009 4:08:57 AM
12/10/2009 4:08:57 AM
12/10/2009 4:08:57 AM
12/10/2009 4:08:57 AM
12/9/2009 3:23:36 AM
12/9/2009 3:23:36 AM
12/9/2009 3:23:36 AM
12/9/2009 3:23:35 AM
12/9/2009 3:23:35 AM
12/9/2009 3:23:35 AM
12/9/2009 3:23:35 AM
12/9/2009 3:23:35 AM
12/9/2009 3:23:35 AM
12/9/2009 3:23:35 AM
12/9/2009 3:23:35 AM
12/9/2009 3:23:35 AM
12/8/2009 4:03:26 PM
12/8/2009 3:56:16 PM
12/8/2009 3:55:13 PM
12/8/2009 3:49:02 PM
12/8/2009 1:20:42 PM
12/8/2009 1:20:42 PM
12/8/2009 1:20:42 PM
12/8/2009 1:20:42 PM
12/8/2009 1:20:42 PM
12/8/2009 1:20:42 PM
12/8/2009 1:20:42 PM
12/8/2009 1:20:42 PM
12/8/2009 1:20:42 PM
12/8/2009 1:20:42 PM
12/8/2009 1:20:42 PM
12/8/2009 1:20:42 PM
12/8/2009 12:57:17 AM
12/8/2009 12:51:17 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
start
start
start
start
start
start
start
start
start
start
start
start
exit
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
exit
start
exit
start
start
start
start
start
start
start
start
start
start
start
start
start
exit
start

C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE

12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009

2:24:22 PM
2:17:16 PM
4:40:40 AM
4:33:24 AM
2:22:47 AM
2:16:36 AM
12:47:12 AM
12:47:12 AM
12:47:12 AM
12:47:12 AM
12:47:12 AM
12:47:12 AM
12:47:12 AM
12:47:12 AM
12:47:12 AM
12:47:12 AM
12:47:12 AM
12:47:12 AM
2:34:20 PM
2:26:59 PM
2:25:59 PM
2:19:47 PM
2:24:47 AM
2:24:47 AM
2:24:47 AM
2:24:47 AM
2:24:47 AM
2:24:47 AM
2:24:47 AM
2:24:47 AM
2:24:47 AM
2:24:47 AM
2:24:47 AM
2:24:47 AM
10:25:39 PM
10:18:15 PM
10:17:18 PM
10:11:07 PM
6:51:08 PM
6:51:08 PM
6:51:08 PM
6:51:08 PM
6:51:08 PM
6:51:08 PM
6:51:08 PM
6:51:08 PM
6:51:08 PM
6:51:08 PM
6:51:08 PM
6:51:08 PM
5:43:49 AM
5:36:23 AM
2:25:19 PM
2:18:09 PM
5:44:40 AM
5:37:34 AM
5:36:26 AM
5:30:16 AM
4:07:07 AM
4:07:07 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
start
start
start
start
start
start
start
start
start
start
start
start
exit
start
exit
start
start
start
start
start
start
start
start
start
start
start
start
start
exit
start
exit
start
start
start
start
start
start
start
start
start
start
start
start
start
exit
start
exit
start
exit
start
exit
start
start
start

C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE

12/3/2009 4:07:07 AM
12/3/2009 4:07:07 AM
12/3/2009 4:07:07 AM
12/3/2009 4:07:07 AM
12/3/2009 4:07:07 AM
12/3/2009 4:07:07 AM
12/3/2009 4:07:07 AM
12/3/2009 4:07:07 AM
12/3/2009 4:07:07 AM
12/3/2009 4:07:07 AM
12/2/2009 7:36:39 PM
12/2/2009 7:36:39 PM
12/2/2009 7:36:39 PM
12/2/2009 7:36:39 PM
12/2/2009 7:36:39 PM
12/2/2009 7:36:39 PM
12/2/2009 7:36:39 PM
12/2/2009 7:36:39 PM
12/2/2009 7:36:39 PM
12/2/2009 7:36:39 PM
12/2/2009 7:36:39 PM
12/2/2009 7:36:39 PM
12/2/2009 4:20:17 AM
12/2/2009 4:11:11 AM
12/1/2009 5:24:19 AM
12/1/2009 5:17:15 AM
12/1/2009 5:15:57 AM
12/1/2009 5:09:46 AM
12/1/2009 3:13:45 AM
12/1/2009 3:13:45 AM
12/1/2009 3:13:45 AM
12/1/2009 3:13:45 AM
12/1/2009 3:13:44 AM
12/1/2009 3:13:44 AM
12/1/2009 3:13:44 AM
12/1/2009 3:13:44 AM
12/1/2009 3:13:44 AM
12/1/2009 3:13:44 AM
12/1/2009 3:13:44 AM
12/1/2009 3:13:44 AM
11/30/2009 7:34:03 PM
11/30/2009 7:34:03 PM
11/30/2009 7:34:03 PM
11/30/2009 7:34:03 PM
11/30/2009 7:34:03 PM
11/30/2009 7:34:03 PM
11/30/2009 7:34:03 PM
11/30/2009 7:34:03 PM
11/30/2009 7:34:03 PM
11/30/2009 7:34:03 PM
11/30/2009 7:34:03 PM
11/30/2009 7:34:03 PM
11/30/2009 5:55:17 PM
11/30/2009 5:55:17 PM
11/30/2009 5:55:17 PM
11/30/2009 5:55:17 PM
11/30/2009 5:55:17 PM
11/30/2009 5:55:17 PM
11/30/2009 5:55:17 PM
11/30/2009 5:55:17 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
exit
start
exit
start
exit
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start

C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE

11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/29/2009
11/29/2009
11/28/2009
11/28/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009

5:55:17 PM
5:55:17 PM
5:55:17 PM
5:55:17 PM
5:09:22 PM
5:03:21 PM
3:45:24 PM
3:38:10 PM
3:32:36 PM
3:32:36 PM
3:32:36 PM
3:32:36 PM
3:32:34 PM
3:32:34 PM
3:32:34 PM
3:32:34 PM
3:32:34 PM
3:32:34 PM
3:32:34 PM
3:32:34 PM
6:04:44 AM
5:57:22 AM
2:41:08 AM
2:34:04 AM
3:03:46 AM
2:57:46 AM
12:51:31 AM
12:44:40 AM
6:59:03 AM
4:20:30 AM
3:19:48 AM
3:19:48 AM
3:19:48 AM
3:19:48 AM
3:19:48 AM
3:19:48 AM
3:19:48 AM
3:19:48 AM
3:19:48 AM
3:19:48 AM
3:19:48 AM
3:19:48 AM
3:08:24 AM
3:00:30 AM
5:14:33 AM
5:06:52 AM
4:02:54 AM
3:00:38 AM
4:54:02 PM
4:47:03 PM
4:45:44 PM
4:39:33 PM
2:45:18 PM
2:45:18 PM
2:45:18 PM
2:45:18 PM
2:45:18 PM
2:45:18 PM
2:45:18 PM
2:45:18 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
start
start
start
exit
start
exit
start
start
start
start
start
start
start
start
start
start
start
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
start
start
start
start
start
start
start
start
start
start
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
start
start
start
start
start
start
start
start

C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE

11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/22/2009
11/22/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/19/2009
11/19/2009
11/19/2009

2:45:18 PM
2:45:18 PM
2:45:18 PM
2:45:18 PM
4:07:23 AM
4:00:13 AM
1:10:47 AM
1:04:47 AM
8:11:33 PM
8:05:22 PM
7:25:24 PM
7:25:24 PM
7:25:24 PM
7:25:24 PM
7:25:24 PM
7:25:24 PM
7:25:24 PM
7:25:24 PM
7:25:24 PM
7:25:24 PM
7:25:24 PM
7:25:24 PM
4:53:46 PM
4:46:46 PM
4:45:32 PM
4:39:21 PM
12:32:51 PM
12:32:51 PM
12:32:51 PM
12:32:51 PM
12:32:51 PM
12:32:51 PM
12:32:51 PM
12:32:51 PM
12:32:51 PM
12:32:51 PM
12:32:51 PM
12:32:51 PM
6:59:04 PM
1:41:33 PM
1:35:33 PM
12:27:40 PM
12:20:12 PM
11:59:18 AM
11:59:18 AM
11:59:18 AM
11:59:18 AM
11:59:18 AM
11:59:18 AM
11:59:18 AM
11:59:18 AM
11:59:18 AM
11:59:18 AM
11:59:18 AM
11:59:18 AM
5:47:32 AM
5:40:34 AM
4:01:34 PM
3:54:26 PM
3:53:04 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
start
start
start
exit
start
exit
start
exit
start
start
start
start
start
start
start
start
start
start
start
start
start
exit
start
exit
start
start
start
start
start
start
start
start
start
start
start
start
start
exit
exit
start
exit
start
start
start
start
start
start
start
start
start
start
start
start
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE

11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009

3:46:53 PM
4:27:58 AM
4:27:58 AM
4:27:58 AM
4:27:58 AM
4:27:58 AM
4:27:58 AM
4:27:58 AM
4:27:58 AM
4:27:58 AM
4:27:58 AM
4:27:58 AM
4:27:58 AM
7:16:14 PM
7:16:14 PM
7:16:14 PM
7:16:14 PM
7:16:14 PM
7:16:14 PM
7:16:14 PM
7:16:14 PM
7:16:14 PM
7:16:14 PM
7:16:14 PM
7:16:14 PM
12:50:54 PM
12:50:54 PM
12:50:54 PM
12:50:54 PM
12:50:54 PM
12:50:54 PM
12:50:54 PM
12:50:54 PM
12:50:54 PM
12:50:54 PM
12:50:54 PM
12:50:54 PM
11:18:18 AM
11:18:18 AM
11:18:18 AM
11:18:18 AM
11:18:18 AM
11:18:18 AM
11:18:18 AM
11:18:18 AM
11:18:18 AM
11:18:18 AM
11:18:18 AM
11:18:18 AM
11:25:08 PM
11:18:57 PM
10:33:09 PM
10:33:09 PM
10:33:09 PM
10:33:09 PM
10:33:09 PM
10:33:09 PM
10:33:09 PM
10:33:09 PM
10:33:09 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
exit
start
start
start
start
start
start
start
start
start
start

C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE

11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
dfsvc.exe
12/16/2009
12/15/2009
12/15/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/10/2009
12/10/2009

10:33:09 PM
10:33:09 PM
10:33:09 PM
5:59:59 PM
5:52:50 PM
4:28:50 PM
4:22:39 PM
2:48:52 PM
2:48:52 PM
2:48:52 PM
2:48:52 PM
2:48:51 PM
2:48:51 PM
2:48:51 PM
2:48:51 PM
2:48:51 PM
2:48:51 PM
2:48:51 PM
2:48:51 PM
2:24:54 AM
(events: 7)
7:00:12 AM
11:14:48 AM
8:55:55 AM
5:30:09 PM
4:27:29 PM
3:47:50 PM
3:08:23 PM
11:39:34 AM
10:11:42 AM
6:04:02 AM
4:06:13 AM
1:26:33 AM
11:59:11 PM
10:03:06 PM
7:45:22 PM
5:18:35 PM
1:57:50 PM
6:25:01 AM
4:41:07 AM
10:03:51 PM
7:08:57 PM
6:53:21 PM
5:32:27 PM
5:07:49 PM
3:32:18 PM
1:04:45 PM
11:03:21 AM
7:42:58 AM
6:24:13 AM
10:08:09 PM
4:27:13 PM
2:46:07 PM
9:09:27 AM
7:15:57 AM
5:59:14 AM
5:18:30 AM
3:55:50 AM
5:03:12 PM
2:22:48 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
start
start
exit
start
exit
start
start
start
start
start
start
start
start
start
start
start
start
start
start

C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\WINDOWS\system32\SVCHOST.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
start

C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE

12/10/2009 1:58:06 PM
12/10/2009 5:55:05 AM
12/10/2009 4:49:29 AM
12/10/2009 4:49:12 AM
12/10/2009 4:46:55 AM
12/8/2009 9:15:50 PM
12/8/2009 9:07:49 PM
12/8/2009 4:23:29 PM
12/8/2009 11:34:15 AM
12/8/2009 10:50:33 AM
12/8/2009 5:51:16 AM
12/8/2009 4:26:37 AM
12/8/2009 3:42:36 AM
12/8/2009 2:24:38 AM
12/8/2009 1:25:37 AM
12/7/2009 11:39:16 PM
12/7/2009 5:45:07 PM
12/7/2009 2:05:50 PM
12/7/2009 7:42:11 AM
12/7/2009 4:01:42 AM
12/6/2009 4:29:19 PM
12/6/2009 2:04:50 PM
12/6/2009 6:28:52 AM
12/5/2009 7:28:54 PM
12/5/2009 4:11:53 PM
12/5/2009 3:49:58 PM
12/5/2009 12:28:19 PM
12/5/2009 4:18:48 AM
12/4/2009 10:43:13 PM
12/4/2009 4:27:46 PM
12/4/2009 11:59:28 AM
12/4/2009 6:28:38 AM
12/4/2009 4:18:08 AM
12/3/2009 3:40:17 PM
12/3/2009 2:06:01 PM
12/3/2009 6:04:45 AM
12/3/2009 4:07:08 AM
12/3/2009 4:07:07 AM
12/2/2009 8:42:05 PM
12/2/2009 3:43:06 PM
12/2/2009 11:29:52 AM
12/2/2009 8:08:17 AM
12/2/2009 5:51:54 AM
12/2/2009 5:13:25 AM
12/2/2009 3:06:53 AM
12/1/2009 7:24:30 PM
12/1/2009 6:03:44 PM
12/1/2009 5:07:20 PM
12/1/2009 1:46:25 PM
12/1/2009 7:17:15 AM
11/30/2009 8:00:26 PM
11/30/2009 6:55:11 PM
11/30/2009 5:53:04 PM
11/30/2009 10:18:13 AM
11/30/2009 10:12:35 AM
11/30/2009 6:44:39 AM
11/30/2009 5:17:29 AM
11/29/2009 3:49:35 PM
11/29/2009 2:06:03 PM
11/29/2009 6:15:45 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
start
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
start
start
exit
start
exit
start
exit
start
exit
start
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
start
start
start
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE

11/29/2009
11/28/2009
11/28/2009
11/28/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/21/2009
11/21/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009

4:51:46 AM
7:10:52 PM
2:26:31 PM
2:03:49 PM
8:49:34 PM
4:21:48 PM
3:07:34 PM
1:38:19 PM
11:27:14 AM
3:53:26 AM
12:34:01 AM
12:34:01 AM
12:33:57 AM
8:14:11 PM
2:13:32 PM
1:37:22 PM
12:25:41 PM
8:17:34 AM
6:59:14 AM
4:24:15 AM
3:19:57 AM
3:19:48 AM
1:19:03 AM
11:54:08 PM
11:50:12 PM
12:21:55 PM
6:21:05 AM
4:01:38 AM
5:31:48 PM
2:41:30 PM
1:27:36 PM
11:28:27 AM
10:05:03 AM
5:22:45 AM
3:50:20 AM
9:09:23 PM
7:57:27 PM
6:10:27 PM
4:59:31 PM
10:44:43 AM
4:12:48 AM
6:39:22 PM
2:02:05 PM
3:47:02 AM
1:57:16 AM
1:38:59 AM
12:28:27 AM
8:39:38 PM
7:11:44 PM
6:58:58 PM
6:54:54 PM
4:32:32 PM
9:52:53 AM
9:50:55 AM
6:15:19 AM
4:51:03 AM
8:53:43 PM
7:52:48 PM
6:15:08 PM
2:48:25 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
start
start
exit
start
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE

11/19/2009 1:12:46 PM
11/19/2009 10:11:09 AM
11/19/2009 5:53:50 AM
11/18/2009 7:43:41 PM
11/18/2009 6:03:02 PM
11/18/2009 4:31:33 PM
11/18/2009 2:23:39 PM
11/18/2009 12:25:18 PM
11/18/2009 10:34:52 AM
11/18/2009 10:15:10 AM
11/18/2009 6:41:05 AM
11/18/2009 4:45:46 AM
11/17/2009 11:53:25 PM
11/17/2009 6:17:44 PM
11/17/2009 5:52:01 PM
11/17/2009 4:29:24 PM
11/17/2009 2:25:01 AM
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM
12/16/2009 7:00:17 AM
12/14/2009 4:09:33 PM
12/10/2009 2:42:15 PM
12/10/2009 4:49:12 AM
12/10/2009 4:08:57 AM
12/9/2009 3:23:35 AM
12/8/2009 1:20:42 PM
12/6/2009 12:47:12 AM
12/5/2009 2:24:47 AM
12/4/2009 6:51:08 PM
12/3/2009 4:07:07 AM
12/2/2009 7:36:39 PM
12/1/2009 3:13:44 AM
11/30/2009 7:34:03 PM
11/30/2009 5:55:17 PM
11/30/2009 3:32:34 PM
11/30/2009 10:18:23 AM
11/26/2009 3:19:48 AM
11/24/2009 2:45:18 PM
11/21/2009 7:25:24 PM
11/21/2009 12:32:51 PM
11/20/2009 11:59:18 AM
11/19/2009 4:27:58 AM
11/18/2009 7:16:14 PM
11/18/2009 12:50:54 PM
11/18/2009 11:18:18 AM
11/17/2009 10:33:09 PM
11/17/2009 2:48:51 PM
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM
12/14/2009 4:09:33 PM
12/10/2009 2:42:15 PM
12/10/2009 4:49:12 AM
12/10/2009 4:08:57 AM
12/9/2009 3:23:35 AM
12/8/2009 1:20:42 PM
12/6/2009 12:47:12 AM
12/5/2009 2:24:47 AM
12/4/2009 6:51:08 PM
12/3/2009 4:07:07 AM
12/2/2009 7:36:39 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
start
start
exit
start
start
start
exit
start
exit
start
start
exit
start
exit

C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE
C:\WINDOWS\system32\LOGONUI.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
exit
start
start
start
start
start
start
start
start
start
start
start

C:\WINDOWS\system32\AUDIODG.EXE
C:\WINDOWS\system32\AUDIODG.EXE
C:\WINDOWS\system32\AUDIODG.EXE
C:\WINDOWS\system32\AUDIODG.EXE
C:\WINDOWS\system32\AUDIODG.EXE
C:\WINDOWS\system32\AUDIODG.EXE
C:\WINDOWS\system32\AUDIODG.EXE
C:\WINDOWS\system32\AUDIODG.EXE
C:\WINDOWS\system32\AUDIODG.EXE
C:\WINDOWS\system32\AUDIODG.EXE
C:\WINDOWS\system32\AUDIODG.EXE
C:\WINDOWS\system32\AUDIODG.EXE
C:\WINDOWS\system32\AUDIODG.EXE
C:\WINDOWS\system32\AUDIODG.EXE
C:\WINDOWS\system32\AUDIODG.EXE
C:\WINDOWS\system32\AUDIODG.EXE
C:\WINDOWS\system32\AUDIODG.EXE
C:\WINDOWS\system32\AUDIODG.EXE
C:\WINDOWS\system32\AUDIODG.EXE
C:\WINDOWS\system32\AUDIODG.EXE
C:\WINDOWS\system32\AUDIODG.EXE
C:\WINDOWS\system32\AUDIODG.EXE
C:\WINDOWS\system32\AUDIODG.EXE
C:\WINDOWS\system32\AUDIODG.EXE
C:\WINDOWS\system32\AUDIODG.EXE
C:\WINDOWS\system32\AUDIODG.EXE
C:\WINDOWS\system32\AUDIODG.EXE
C:\WINDOWS\system32\AUDIODG.EXE
C:\WINDOWS\system32\AUDIODG.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
start
start
start
start
start
start
start
start
start
start
start

C:\WINDOWS\system32\SLSVC.EXE
C:\WINDOWS\system32\SLSVC.EXE
C:\WINDOWS\system32\SLSVC.EXE
C:\WINDOWS\system32\SLSVC.EXE
C:\WINDOWS\system32\SLSVC.EXE
C:\WINDOWS\system32\SLSVC.EXE
C:\WINDOWS\system32\SLSVC.EXE
C:\WINDOWS\system32\SLSVC.EXE
C:\WINDOWS\system32\SLSVC.EXE
C:\WINDOWS\system32\SLSVC.EXE
C:\WINDOWS\system32\SLSVC.EXE
C:\WINDOWS\system32\SLSVC.EXE

12/1/2009 3:13:44 AM
11/30/2009 7:34:03 PM
11/30/2009 5:55:17 PM
11/30/2009 3:32:34 PM
11/26/2009 3:19:48 AM
11/24/2009 2:45:18 PM
11/21/2009 7:25:24 PM
11/21/2009 12:32:51 PM
11/20/2009 11:59:18 AM
11/19/2009 4:27:58 AM
11/18/2009 7:16:14 PM
11/18/2009 12:50:54 PM
11/18/2009 11:18:18 AM
11/17/2009 10:33:09 PM
11/17/2009 2:48:51 PM
dfsvc.exe (events: 7)
12/16/2009 7:00:17 AM
E
12/16/2009 7:00:16 AM
E
12/15/2009 6:34:26 PM
E
12/15/2009 6:24:26 PM
E
12/15/2009 12:16:17 AM
E
12/15/2009 12:06:17 AM
E
12/14/2009 3:47:57 PM
E
12/14/2009 4:26:18 AM
E
12/14/2009 4:16:18 AM
E
12/13/2009 5:01:22 AM
E
12/13/2009 4:51:22 AM
E
12/12/2009 7:17:54 AM
E
12/12/2009 7:07:54 AM
E
12/11/2009 9:29:26 AM
E
12/11/2009 9:19:26 AM
E
12/10/2009 2:55:20 PM
E
12/10/2009 2:45:20 PM
E
12/10/2009 2:22:52 PM
E
12/10/2009 2:18:07 PM
E
12/10/2009 2:08:07 PM
E
12/10/2009 4:59:31 AM
E
12/10/2009 4:49:12 AM
E

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
start
start
start
start
start
start
start
start
start
start
start
start
start
start

C:\WINDOWS\system32\SLSVC.EXE
C:\WINDOWS\system32\SLSVC.EXE
C:\WINDOWS\system32\SLSVC.EXE
C:\WINDOWS\system32\SLSVC.EXE
C:\WINDOWS\system32\SLSVC.EXE
C:\WINDOWS\system32\SLSVC.EXE
C:\WINDOWS\system32\SLSVC.EXE
C:\WINDOWS\system32\SLSVC.EXE
C:\WINDOWS\system32\SLSVC.EXE
C:\WINDOWS\system32\SLSVC.EXE
C:\WINDOWS\system32\SLSVC.EXE
C:\WINDOWS\system32\SLSVC.EXE
C:\WINDOWS\system32\SLSVC.EXE
C:\WINDOWS\system32\SLSVC.EXE
C:\WINDOWS\system32\SLSVC.EXE

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

12/10/2009 4:47:08 AM
E
12/10/2009 4:12:32 AM
E
12/8/2009 9:15:55 PM
E
12/8/2009 11:34:19 AM
E
12/8/2009 11:10:32 AM
E
12/8/2009 11:00:32 AM
E
12/7/2009 2:25:50 PM
E
12/7/2009 2:15:50 PM
E
12/6/2009 2:24:57 PM
E
12/6/2009 2:14:56 PM
E
12/5/2009 7:28:59 PM
E
12/5/2009 12:48:35 PM
E
12/5/2009 12:38:35 PM
E
12/4/2009 10:43:17 PM
E
12/4/2009 4:27:51 PM
E
12/4/2009 12:19:29 PM
E
12/4/2009 12:09:29 PM
E
12/3/2009 2:36:05 PM
E
12/3/2009 2:16:05 PM
E
12/2/2009 8:42:09 PM
E
12/2/2009 7:49:17 PM
E
12/2/2009 7:39:16 PM
E
12/2/2009 3:43:11 PM
E
12/2/2009 11:50:07 AM
E
12/2/2009 11:40:07 AM
E
12/1/2009 2:06:42 PM
E
12/1/2009 1:56:42 PM
E
11/30/2009 8:00:31 PM
E
11/30/2009 6:55:16 PM
E
11/30/2009 5:53:10 PM
E

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

11/30/2009
E
11/30/2009
E
11/30/2009
E
11/30/2009
E
11/29/2009
E
11/29/2009
E
11/28/2009
E
11/28/2009
E
11/27/2009
E
11/27/2009
E
11/27/2009
E
11/27/2009
E
11/26/2009
E
11/26/2009
E
11/26/2009
E
11/26/2009
E
11/25/2009
E
11/25/2009
E
11/25/2009
E
11/25/2009
E
11/24/2009
E
11/24/2009
E
11/24/2009
E
11/23/2009
E
11/23/2009
E
11/22/2009
E
11/22/2009
E
11/22/2009
E
11/22/2009
E
11/21/2009
E

3:46:16 PM

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

3:36:15 PM

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

10:18:22 AM Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

10:18:20 AM Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

2:26:06 PM

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

2:16:06 PM

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

5:03:03 PM

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

4:53:03 PM

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

9:43:00 PM

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

9:33:00 PM

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

12:52:47 AM Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

12:42:47 AM Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

3:29:53 AM

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

3:19:48 AM

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

3:18:02 AM

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

3:00:26 AM

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

4:10:59 AM

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

4:00:59 AM

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

4:00:02 AM

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

3:01:56 AM

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

2:41:34 PM

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

4:08:33 AM

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

3:58:31 AM

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

9:21:33 AM

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

9:11:33 AM

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

4:30:34 PM

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

4:20:34 PM

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

2:22:10 PM

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

2:12:10 PM

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

7:11:48 PM

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

11/21/2009 12:45:53 PM
E
11/21/2009 12:35:53 PM
E
11/20/2009 6:59:03 PM
E
11/20/2009 12:57:51 PM
E
11/20/2009 12:47:51 PM
E
11/20/2009 12:29:20 PM
E
11/20/2009 12:19:20 PM
E
11/20/2009 9:52:56 AM
E
11/19/2009 3:08:42 PM
E
11/19/2009 2:58:42 PM
E
11/18/2009 7:43:46 PM
E
11/18/2009 6:03:05 PM
E
11/18/2009 5:49:46 PM
E
11/18/2009 5:39:46 PM
E
11/18/2009 5:39:36 PM
E
11/18/2009 5:29:36 PM
E
11/18/2009 5:19:52 PM
E
11/18/2009 5:09:52 PM
E
11/18/2009 12:25:22 PM
E
11/18/2009 10:34:56 AM
E
11/17/2009 10:46:08 PM
E
11/17/2009 10:36:08 PM
E
11/17/2009 6:17:50 PM
E
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM
12/14/2009 4:09:33 PM
12/10/2009 2:42:15 PM
12/10/2009 4:49:12 AM
12/10/2009 4:08:57 AM
12/9/2009 3:23:35 AM
12/8/2009 1:20:42 PM
12/6/2009 12:47:12 AM
12/5/2009 2:24:47 AM
12/4/2009 6:51:08 PM
12/3/2009 4:07:07 AM
12/2/2009 7:36:39 PM
12/1/2009 3:13:44 AM

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process exit

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process start

C:\WINDOWS\SERVICING\TRUSTEDINSTALLER.EX

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

C:\WINDOWS\system32\SPOOLSV.EXE
C:\WINDOWS\system32\SPOOLSV.EXE
C:\WINDOWS\system32\SPOOLSV.EXE
C:\WINDOWS\system32\SPOOLSV.EXE
C:\WINDOWS\system32\SPOOLSV.EXE
C:\WINDOWS\system32\SPOOLSV.EXE
C:\WINDOWS\system32\SPOOLSV.EXE
C:\WINDOWS\system32\SPOOLSV.EXE
C:\WINDOWS\system32\SPOOLSV.EXE
C:\WINDOWS\system32\SPOOLSV.EXE
C:\WINDOWS\system32\SPOOLSV.EXE
C:\WINDOWS\system32\SPOOLSV.EXE
C:\WINDOWS\system32\SPOOLSV.EXE

start
start
start
start
start
start
start
start
start
start
start
start
start

11/30/2009 7:34:03 PM
11/30/2009 5:55:17 PM
11/30/2009 3:32:34 PM
11/26/2009 3:19:48 AM
11/24/2009 2:45:18 PM
11/21/2009 7:25:24 PM
11/21/2009 12:32:51 PM
11/20/2009 11:59:18 AM
11/19/2009 4:27:58 AM
11/18/2009 7:16:14 PM
11/18/2009 12:50:54 PM
11/18/2009 11:18:18 AM
11/17/2009 10:33:09 PM
11/17/2009 2:48:51 PM
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM
12/14/2009 4:09:33 PM
12/10/2009 2:42:15 PM
12/10/2009 4:49:12 AM
12/10/2009 4:08:57 AM
12/9/2009 3:23:35 AM
12/8/2009 1:20:42 PM
12/6/2009 12:47:12 AM
12/5/2009 2:24:47 AM
12/4/2009 6:51:08 PM
12/3/2009 4:07:07 AM
12/2/2009 7:36:39 PM
12/1/2009 3:13:44 AM
11/30/2009 7:34:03 PM
11/30/2009 5:55:17 PM
11/30/2009 3:32:36 PM
11/26/2009 3:19:48 AM
11/24/2009 2:45:18 PM
11/21/2009 7:25:24 PM
11/21/2009 12:32:51 PM
11/20/2009 11:59:18 AM
11/19/2009 4:27:58 AM
11/18/2009 7:16:14 PM
11/18/2009 12:50:54 PM
11/18/2009 11:18:18 AM
11/17/2009 10:33:09 PM
11/17/2009 2:48:52 PM
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM
12/14/2009 4:09:33 PM
12/10/2009 2:42:15 PM
12/10/2009 4:49:12 AM
12/10/2009 4:08:57 AM
12/9/2009 3:23:36 AM
12/8/2009 1:20:42 PM
12/6/2009 12:47:12 AM
12/5/2009 2:24:52 AM
12/4/2009 6:51:08 PM
12/3/2009 4:07:07 AM
12/2/2009 7:36:39 PM
12/1/2009 3:13:45 AM
11/30/2009 7:34:03 PM
11/30/2009 5:55:17 PM
11/30/2009 3:32:36 PM
11/26/2009 3:19:48 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
start
start
start
start
start
start
start
start
start
start
start
start
start

C:\WINDOWS\system32\SPOOLSV.EXE
C:\WINDOWS\system32\SPOOLSV.EXE
C:\WINDOWS\system32\SPOOLSV.EXE
C:\WINDOWS\system32\SPOOLSV.EXE
C:\WINDOWS\system32\SPOOLSV.EXE
C:\WINDOWS\system32\SPOOLSV.EXE
C:\WINDOWS\system32\SPOOLSV.EXE
C:\WINDOWS\system32\SPOOLSV.EXE
C:\WINDOWS\system32\SPOOLSV.EXE
C:\WINDOWS\system32\SPOOLSV.EXE
C:\WINDOWS\system32\SPOOLSV.EXE
C:\WINDOWS\system32\SPOOLSV.EXE
C:\WINDOWS\system32\SPOOLSV.EXE
C:\WINDOWS\system32\SPOOLSV.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start

C:\WINDOWS\system32\AERTSR64.EXE
C:\WINDOWS\system32\AERTSR64.EXE
C:\WINDOWS\system32\AERTSR64.EXE
C:\WINDOWS\system32\AERTSR64.EXE
C:\WINDOWS\system32\AERTSR64.EXE
C:\WINDOWS\system32\AERTSR64.EXE
C:\WINDOWS\system32\AERTSR64.EXE
C:\WINDOWS\system32\AERTSR64.EXE
C:\WINDOWS\system32\AERTSR64.EXE
C:\WINDOWS\system32\AERTSR64.EXE
C:\WINDOWS\system32\AERTSR64.EXE
C:\WINDOWS\system32\AERTSR64.EXE
C:\WINDOWS\system32\AERTSR64.EXE
C:\WINDOWS\system32\AERTSR64.EXE
C:\WINDOWS\system32\AERTSR64.EXE
C:\WINDOWS\system32\AERTSR64.EXE
C:\WINDOWS\system32\AERTSR64.EXE
C:\WINDOWS\system32\AERTSR64.EXE
C:\WINDOWS\system32\AERTSR64.EXE
C:\WINDOWS\system32\AERTSR64.EXE
C:\WINDOWS\system32\AERTSR64.EXE
C:\WINDOWS\system32\AERTSR64.EXE
C:\WINDOWS\system32\AERTSR64.EXE
C:\WINDOWS\system32\AERTSR64.EXE
C:\WINDOWS\system32\AERTSR64.EXE
C:\WINDOWS\system32\AERTSR64.EXE
C:\WINDOWS\system32\AERTSR64.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start

C:\WINDOWS\system32\SEARCHINDEXER.EXE
C:\WINDOWS\system32\SEARCHINDEXER.EXE
C:\WINDOWS\system32\SEARCHINDEXER.EXE
C:\WINDOWS\system32\SEARCHINDEXER.EXE
C:\WINDOWS\system32\SEARCHINDEXER.EXE
C:\WINDOWS\system32\SEARCHINDEXER.EXE
C:\WINDOWS\system32\SEARCHINDEXER.EXE
C:\WINDOWS\system32\SEARCHINDEXER.EXE
C:\WINDOWS\system32\SEARCHINDEXER.EXE
C:\WINDOWS\system32\SEARCHINDEXER.EXE
C:\WINDOWS\system32\SEARCHINDEXER.EXE
C:\WINDOWS\system32\SEARCHINDEXER.EXE
C:\WINDOWS\system32\SEARCHINDEXER.EXE
C:\WINDOWS\system32\SEARCHINDEXER.EXE
C:\WINDOWS\system32\SEARCHINDEXER.EXE
C:\WINDOWS\system32\SEARCHINDEXER.EXE
C:\WINDOWS\system32\SEARCHINDEXER.EXE

11/24/2009 2:45:18 PM
11/21/2009 7:25:24 PM
11/21/2009 12:32:51 PM
11/20/2009 11:59:18 AM
11/19/2009 4:27:58 AM
11/18/2009 7:16:14 PM
11/18/2009 12:50:54 PM
11/18/2009 11:18:18 AM
11/17/2009 10:33:09 PM
11/17/2009 2:48:52 PM
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM
12/14/2009 4:09:33 PM
12/10/2009 2:42:15 PM
12/10/2009 4:49:12 AM
12/10/2009 4:08:57 AM
12/9/2009 3:23:36 AM
12/8/2009 1:20:42 PM
12/6/2009 12:47:12 AM
12/5/2009 2:24:47 AM
12/4/2009 6:51:08 PM
12/3/2009 4:07:07 AM
12/2/2009 7:36:39 PM
12/1/2009 3:13:45 AM
11/30/2009 7:34:03 PM
11/30/2009 5:55:17 PM
11/30/2009 3:32:36 PM
11/26/2009 3:19:48 AM
11/24/2009 2:45:18 PM
11/21/2009 7:25:24 PM
11/21/2009 12:32:51 PM
11/20/2009 11:59:18 AM
11/19/2009 4:27:59 AM
11/18/2009 7:16:14 PM
11/18/2009 6:03:05 PM
11/18/2009 5:57:49 PM
11/18/2009 5:55:59 PM
11/18/2009 5:39:14 PM
11/18/2009 5:34:44 PM
11/18/2009 5:29:32 PM
11/18/2009 5:29:31 PM
11/18/2009 5:29:31 PM
11/18/2009 12:50:54 PM
11/18/2009 11:18:18 AM
11/17/2009 10:33:09 PM
11/17/2009 2:48:52 PM
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM
12/14/2009 4:09:33 PM
12/10/2009 2:42:15 PM
12/10/2009 4:49:12 AM
12/10/2009 4:08:57 AM
12/9/2009 3:23:36 AM
12/8/2009 1:20:42 PM
12/6/2009 12:47:12 AM
12/5/2009 2:24:47 AM
12/4/2009 6:51:08 PM
12/3/2009 4:07:07 AM
12/2/2009 7:36:39 PM
12/1/2009 3:13:45 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
start
start
start
start
start
start
start
start
start

C:\WINDOWS\system32\SEARCHINDEXER.EXE
C:\WINDOWS\system32\SEARCHINDEXER.EXE
C:\WINDOWS\system32\SEARCHINDEXER.EXE
C:\WINDOWS\system32\SEARCHINDEXER.EXE
C:\WINDOWS\system32\SEARCHINDEXER.EXE
C:\WINDOWS\system32\SEARCHINDEXER.EXE
C:\WINDOWS\system32\SEARCHINDEXER.EXE
C:\WINDOWS\system32\SEARCHINDEXER.EXE
C:\WINDOWS\system32\SEARCHINDEXER.EXE
C:\WINDOWS\system32\SEARCHINDEXER.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
start
exit
start
exit
start
exit
start
start
exit
start
start
start
start

C:\WINDOWS\system32\WUDFHOST.EXE
C:\WINDOWS\system32\WUDFHOST.EXE
C:\WINDOWS\system32\WUDFHOST.EXE
C:\WINDOWS\system32\WUDFHOST.EXE
C:\WINDOWS\system32\WUDFHOST.EXE
C:\WINDOWS\system32\WUDFHOST.EXE
C:\WINDOWS\system32\WUDFHOST.EXE
C:\WINDOWS\system32\WUDFHOST.EXE
C:\WINDOWS\system32\WUDFHOST.EXE
C:\WINDOWS\system32\WUDFHOST.EXE
C:\WINDOWS\system32\WUDFHOST.EXE
C:\WINDOWS\system32\WUDFHOST.EXE
C:\WINDOWS\system32\WUDFHOST.EXE
C:\WINDOWS\system32\WUDFHOST.EXE
C:\WINDOWS\system32\WUDFHOST.EXE
C:\WINDOWS\system32\WUDFHOST.EXE
C:\WINDOWS\system32\WUDFHOST.EXE
C:\WINDOWS\system32\WUDFHOST.EXE
C:\WINDOWS\system32\WUDFHOST.EXE
C:\WINDOWS\system32\WUDFHOST.EXE
C:\WINDOWS\system32\WUDFHOST.EXE
C:\WINDOWS\system32\WUDFHOST.EXE
C:\WINDOWS\system32\WUDFHOST.EXE
C:\WINDOWS\system32\WUDFHOST.EXE
C:\WINDOWS\system32\WUDFHOST.EXE
C:\WINDOWS\system32\WUDFHOST.EXE
C:\WINDOWS\system32\WUDFHOST.EXE
C:\WINDOWS\system32\WUDFHOST.EXE
C:\WINDOWS\system32\WUDFHOST.EXE
C:\WINDOWS\system32\WUDFHOST.EXE
C:\WINDOWS\system32\WUDFHOST.EXE
C:\WINDOWS\system32\WUDFHOST.EXE
C:\WINDOWS\system32\WUDFHOST.EXE
C:\WINDOWS\system32\WUDFHOST.EXE
C:\WINDOWS\system32\WUDFHOST.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
start
start
start
start
start
start
start
start
start
start
start
start

C:\WINDOWS\system32\DRIVERS\XAUDIO64.EXE
C:\WINDOWS\system32\DRIVERS\XAUDIO64.EXE
C:\WINDOWS\system32\DRIVERS\XAUDIO64.EXE
C:\WINDOWS\system32\DRIVERS\XAUDIO64.EXE
C:\WINDOWS\system32\DRIVERS\XAUDIO64.EXE
C:\WINDOWS\system32\DRIVERS\XAUDIO64.EXE
C:\WINDOWS\system32\DRIVERS\XAUDIO64.EXE
C:\WINDOWS\system32\DRIVERS\XAUDIO64.EXE
C:\WINDOWS\system32\DRIVERS\XAUDIO64.EXE
C:\WINDOWS\system32\DRIVERS\XAUDIO64.EXE
C:\WINDOWS\system32\DRIVERS\XAUDIO64.EXE
C:\WINDOWS\system32\DRIVERS\XAUDIO64.EXE
C:\WINDOWS\system32\DRIVERS\XAUDIO64.EXE

11/30/2009
11/30/2009
11/30/2009
11/26/2009
11/24/2009
11/21/2009
11/21/2009
11/20/2009
11/19/2009
11/18/2009
11/18/2009
11/18/2009
11/17/2009
11/17/2009
dfsvc.exe
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009

7:34:03 PM
5:55:17 PM
3:32:36 PM
3:19:48 AM
2:45:18 PM
7:25:24 PM
12:32:51 PM
11:59:18 AM
4:27:59 AM
7:16:14 PM
12:50:54 PM
11:18:18 AM
10:33:09 PM
2:48:52 PM
(events: 7)
8:21:15 AM
8:16:14 AM
7:21:14 AM
7:16:14 AM
7:09:17 AM
7:02:15 AM
7:02:15 AM
7:02:15 AM
7:00:13 AM
6:19:50 AM
6:14:50 AM
6:06:22 AM
6:01:22 AM
5:19:49 AM
5:14:49 AM
4:19:48 AM
4:14:48 AM
3:19:47 AM
3:14:47 AM
2:19:47 AM
2:14:46 AM
1:27:04 AM
1:22:03 AM
1:19:46 AM
1:14:46 AM
12:38:05 AM
12:32:59 AM
12:19:46 AM
12:14:45 AM
11:19:44 PM
11:14:44 PM
10:19:43 PM
10:14:43 PM
9:19:43 PM
9:18:07 PM
9:14:42 PM
9:12:20 PM
8:19:42 PM
8:14:42 PM
7:19:41 PM
7:14:41 PM
6:19:40 PM
6:14:40 PM
6:05:00 PM
5:59:59 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
start
start
start
start
start
start
start
start
start
start
start
start
start

C:\WINDOWS\system32\DRIVERS\XAUDIO64.EXE
C:\WINDOWS\system32\DRIVERS\XAUDIO64.EXE
C:\WINDOWS\system32\DRIVERS\XAUDIO64.EXE
C:\WINDOWS\system32\DRIVERS\XAUDIO64.EXE
C:\WINDOWS\system32\DRIVERS\XAUDIO64.EXE
C:\WINDOWS\system32\DRIVERS\XAUDIO64.EXE
C:\WINDOWS\system32\DRIVERS\XAUDIO64.EXE
C:\WINDOWS\system32\DRIVERS\XAUDIO64.EXE
C:\WINDOWS\system32\DRIVERS\XAUDIO64.EXE
C:\WINDOWS\system32\DRIVERS\XAUDIO64.EXE
C:\WINDOWS\system32\DRIVERS\XAUDIO64.EXE
C:\WINDOWS\system32\DRIVERS\XAUDIO64.EXE
C:\WINDOWS\system32\DRIVERS\XAUDIO64.EXE
C:\WINDOWS\system32\DRIVERS\XAUDIO64.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
start
start
exit
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE

12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009

5:19:39 PM
5:14:39 PM
4:46:11 PM
4:41:10 PM
4:19:39 PM
4:14:38 PM
3:19:38 PM
3:14:38 PM
2:19:37 PM
2:14:37 PM
1:19:36 PM
1:11:55 PM
12:19:35 PM
12:14:35 PM
11:30:32 AM
11:24:35 AM
11:19:35 AM
11:14:34 AM
8:35:31 AM
8:30:31 AM
7:35:31 AM
7:30:30 AM
6:35:30 AM
6:30:30 AM
5:35:29 AM
5:30:29 AM
4:35:28 AM
4:30:28 AM
3:35:27 AM
3:30:27 AM
2:35:27 AM
2:30:26 AM
1:35:26 AM
1:30:26 AM
12:38:03 AM
12:35:26 AM
12:32:59 AM
12:30:25 AM
11:35:24 PM
11:30:24 PM
10:35:23 PM
10:30:23 PM
9:35:23 PM
9:30:22 PM
9:18:03 PM
9:15:09 PM
9:13:02 PM
9:09:08 PM
8:35:22 PM
8:30:22 PM
7:35:21 PM
7:30:21 PM
6:35:20 PM
6:30:20 PM
6:05:00 PM
5:59:59 PM
5:38:31 PM
5:30:34 PM
5:29:35 PM
4:23:37 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE

12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009

4:16:41 PM
4:09:33 PM
4:09:33 PM
4:09:33 PM
3:47:53 PM
3:47:52 PM
3:13:25 PM
3:08:24 PM
11:16:49 AM
11:11:49 AM
10:27:41 AM
10:21:49 AM
10:16:50 AM
10:11:49 AM
5:11:03 AM
5:06:03 AM
4:11:03 AM
4:06:02 AM
1:02:06 AM
12:57:03 AM
12:02:04 AM
11:59:59 PM
11:57:03 PM
9:48:38 PM
9:43:38 PM
9:28:51 PM
9:23:51 PM
9:08:19 PM
9:02:16 PM
8:48:37 PM
8:43:37 PM
7:48:51 PM
7:43:47 PM
5:02:56 PM
4:57:56 PM
4:55:16 PM
4:50:15 PM
4:02:55 PM
3:57:55 PM
3:02:54 PM
2:57:54 PM
2:14:05 PM
2:08:01 PM
2:02:55 PM
1:57:53 PM
5:46:16 AM
5:41:16 AM
4:46:24 AM
4:41:16 AM
9:37:38 PM
9:32:38 PM
9:09:00 PM
9:03:06 PM
8:37:37 PM
8:32:37 PM
7:37:37 PM
7:32:36 PM
7:13:52 PM
7:08:51 PM
6:37:36 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
start
start
exit
exit
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE

12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009

6:32:36 PM
6:05:00 PM
5:59:59 PM
5:37:36 PM
5:32:35 PM
4:37:18 PM
4:32:18 PM
3:37:18 PM
3:32:17 PM
3:32:03 PM
1:03:31 PM
12:08:30 PM
12:03:30 PM
11:20:48 AM
11:13:30 AM
11:08:31 AM
11:03:30 AM
7:29:14 AM
7:24:14 AM
6:29:16 AM
6:24:13 AM
9:47:53 PM
9:42:53 PM
9:32:29 PM
9:27:29 PM
9:13:04 PM
9:07:09 PM
8:32:28 PM
8:27:28 PM
7:32:27 PM
7:27:27 PM
7:20:21 PM
7:15:21 PM
6:32:26 PM
6:27:26 PM
6:05:00 PM
5:59:59 PM
5:32:26 PM
5:27:25 PM
4:32:26 PM
4:27:25 PM
2:14:24 PM
2:09:24 PM
1:14:23 PM
1:09:23 PM
12:14:22 PM
12:09:22 PM
11:14:22 AM
11:09:21 AM
10:14:21 AM
10:09:20 AM
9:26:17 AM
9:19:22 AM
9:14:20 AM
9:09:20 AM
7:04:09 AM
6:59:09 AM
6:04:09 AM
5:59:09 AM
5:01:00 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE

12/11/2009 4:56:00 AM
12/11/2009 4:12:02 AM
12/11/2009 4:06:00 AM
12/11/2009 4:01:02 AM
12/11/2009 3:55:59 AM
12/10/2009 7:08:00 PM
12/10/2009 7:03:00 PM
12/10/2009 7:01:47 PM
12/10/2009 6:56:47 PM
12/10/2009 6:05:00 PM
12/10/2009 6:01:46 PM
12/10/2009 5:59:59 PM
12/10/2009 5:56:46 PM
12/10/2009 5:01:46 PM
12/10/2009 4:56:45 PM
12/10/2009 4:28:49 PM
12/10/2009 4:23:49 PM
12/10/2009 4:01:45 PM
12/10/2009 3:56:45 PM
12/10/2009 3:01:44 PM
12/10/2009 2:56:44 PM
12/10/2009 2:49:48 PM
12/10/2009 2:42:15 PM
12/10/2009 2:42:15 PM
12/10/2009 2:42:15 PM
12/10/2009 2:22:49 PM
12/10/2009 2:15:01 PM
12/10/2009 2:07:52 PM
12/10/2009 2:03:06 PM
12/10/2009 1:58:05 PM
12/10/2009 5:08:25 AM
12/10/2009 5:03:25 AM
12/10/2009 4:57:29 AM
12/10/2009 4:49:26 AM
12/10/2009 4:49:25 AM
12/10/2009 4:49:12 AM
12/10/2009 4:46:56 AM
12/10/2009 4:28:22 AM
12/10/2009 4:25:44 AM
12/10/2009 4:23:19 AM
12/10/2009 4:18:19 AM
12/10/2009 4:16:45 AM
12/10/2009 4:08:57 AM
12/10/2009 4:08:57 AM
12/10/2009 4:08:57 AM
12/9/2009 3:23:35 AM
12/9/2009 3:23:35 AM
12/9/2009 3:23:35 AM
12/8/2009 9:15:52 PM
12/8/2009 9:12:51 PM
12/8/2009 9:07:47 PM
12/8/2009 3:39:53 PM
12/8/2009 3:34:53 PM
12/8/2009 2:39:53 PM
12/8/2009 2:34:52 PM
12/8/2009 1:39:52 PM
12/8/2009 1:34:52 PM
12/8/2009 1:27:58 PM
12/8/2009 1:20:42 PM
12/8/2009 1:20:42 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
start
start
exit
exit
start
exit
start
exit
start
exit
start
start
start
exit
exit
exit
start
start
exit
start
start
start
start
start
start
exit
exit
start
exit
start
exit
start
exit
start
exit
start
start

C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE

12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009

1:20:42 PM
11:34:16 AM
11:06:45 AM
11:00:26 AM
10:55:26 AM
10:50:25 AM
5:31:27 AM
5:26:27 AM
4:31:27 AM
4:26:26 AM
3:29:50 AM
3:24:50 AM
2:40:46 AM
2:34:49 AM
2:29:50 AM
2:24:49 AM
12:41:34 AM
12:38:18 AM
12:36:34 AM
12:32:59 AM
11:52:25 PM
11:46:33 PM
11:41:34 PM
11:36:33 PM
5:10:47 PM
5:05:47 PM
4:10:46 PM
4:05:46 PM
3:10:45 PM
3:05:45 PM
2:22:48 PM
2:15:44 PM
2:10:45 PM
2:05:44 PM
7:06:34 AM
7:01:34 AM
6:06:33 AM
6:01:33 AM
5:06:33 AM
5:01:33 AM
4:17:33 AM
4:11:33 AM
4:06:45 AM
4:01:33 AM
4:09:51 PM
4:04:51 PM
3:09:50 PM
3:04:50 PM
2:22:13 PM
2:15:17 PM
2:10:18 PM
2:04:49 PM
6:24:30 AM
6:19:30 AM
6:06:38 AM
6:01:38 AM
5:06:38 AM
5:01:37 AM
4:06:37 AM
4:01:37 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE

12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009

3:06:36 AM
3:01:36 AM
2:06:35 AM
2:01:35 AM
1:06:36 AM
1:02:45 AM
1:01:34 AM
12:56:34 AM
12:55:00 AM
12:47:12 AM
12:47:12 AM
12:47:12 AM
7:28:55 PM
7:28:34 PM
6:33:33 PM
6:28:33 PM
6:05:00 PM
5:59:59 PM
5:33:33 PM
5:28:32 PM
4:33:32 PM
4:28:32 PM
3:33:32 PM
3:28:31 PM
3:14:46 PM
3:09:45 PM
2:33:31 PM
2:28:31 PM
1:33:30 PM
1:28:30 PM
12:45:21 PM
12:38:30 PM
12:33:30 PM
12:28:29 PM
3:42:56 AM
3:37:56 AM
2:42:56 AM
2:37:55 AM
2:31:08 AM
2:24:47 AM
2:24:47 AM
2:24:47 AM
10:43:14 PM
10:10:46 PM
10:05:45 PM
9:41:37 PM
9:35:30 PM
9:10:45 PM
9:05:45 PM
8:10:44 PM
8:05:44 PM
7:10:43 PM
7:05:43 PM
6:58:48 PM
6:51:08 PM
6:51:08 PM
6:51:08 PM
4:27:47 PM
4:04:26 PM
3:59:26 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
exit
start
start
exit
start
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
start
start
exit
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
start
start
exit
exit
start

C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE

12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009

3:04:25 PM
2:59:25 PM
2:04:25 PM
1:59:24 PM
1:04:24 PM
12:59:24 PM
12:16:06 PM
12:09:25 PM
12:04:28 PM
11:59:23 AM
11:59:13 AM
6:26:22 AM
6:23:09 AM
6:18:09 AM
5:23:08 AM
5:18:08 AM
4:35:23 AM
4:28:08 AM
4:23:11 AM
4:18:08 AM
3:11:00 PM
3:06:00 PM
2:27:28 PM
2:16:00 PM
2:11:01 PM
2:06:00 PM
5:26:40 AM
5:21:40 AM
4:26:41 AM
4:23:02 AM
4:21:39 AM
4:16:39 AM
4:14:43 AM
4:07:07 AM
4:07:07 AM
4:07:07 AM
8:42:06 PM
7:55:52 PM
7:50:51 PM
7:43:54 PM
7:36:39 PM
7:36:39 PM
7:36:39 PM
3:43:08 PM
3:35:03 PM
3:30:03 PM
2:35:02 PM
2:30:02 PM
1:35:02 PM
1:30:02 PM
12:35:02 PM
12:30:02 PM
11:46:39 AM
11:40:02 AM
11:35:03 AM
11:30:01 AM
11:29:46 AM
8:04:00 AM
7:11:55 AM
7:06:55 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
start
start
start
exit
exit
start
exit
start
start
start
exit
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE

12/2/2009 6:11:54 AM
12/2/2009 6:06:54 AM
12/2/2009 5:11:54 AM
12/2/2009 5:06:54 AM
12/2/2009 5:06:10 AM
12/2/2009 5:01:10 AM
12/2/2009 4:11:54 AM
12/2/2009 4:06:53 AM
12/2/2009 3:23:35 AM
12/2/2009 3:16:52 AM
12/2/2009 3:11:55 AM
12/2/2009 3:06:52 AM
12/1/2009 7:08:44 PM
12/1/2009 7:03:44 PM
12/1/2009 6:08:44 PM
12/1/2009 6:03:43 PM
12/1/2009 4:51:39 PM
12/1/2009 4:46:38 PM
12/1/2009 4:38:54 PM
12/1/2009 4:33:53 PM
12/1/2009 3:51:38 PM
12/1/2009 3:46:37 PM
12/1/2009 2:51:37 PM
12/1/2009 2:46:37 PM
12/1/2009 2:03:21 PM
12/1/2009 1:56:37 PM
12/1/2009 1:51:37 PM
12/1/2009 1:46:36 PM
12/1/2009 6:33:06 AM
12/1/2009 6:28:06 AM
12/1/2009 5:33:05 AM
12/1/2009 5:28:05 AM
12/1/2009 4:33:04 AM
12/1/2009 4:28:04 AM
12/1/2009 3:33:04 AM
12/1/2009 3:29:16 AM
12/1/2009 3:28:03 AM
12/1/2009 3:23:03 AM
12/1/2009 3:21:06 AM
12/1/2009 3:13:44 AM
12/1/2009 3:13:44 AM
12/1/2009 3:13:44 AM
11/30/2009 8:00:28 PM
11/30/2009 7:53:27 PM
11/30/2009 7:48:27 PM
11/30/2009 7:41:31 PM
11/30/2009 7:34:03 PM
11/30/2009 7:34:03 PM
11/30/2009 7:34:03 PM
11/30/2009 6:55:13 PM
11/30/2009 6:14:35 PM
11/30/2009 6:12:34 PM
11/30/2009 6:09:34 PM
11/30/2009 5:55:17 PM
11/30/2009 5:55:17 PM
11/30/2009 5:55:17 PM
11/30/2009 5:53:07 PM
11/30/2009 5:51:05 PM
11/30/2009 5:46:05 PM
11/30/2009 4:51:04 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
start
start
start
exit
exit
start
exit
start
start
start
exit
exit
exit
start
start
start
start
exit
exit
start
exit

C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE

11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009

4:46:04 PM
3:51:06 PM
3:47:59 PM
3:46:03 PM
3:41:08 PM
3:39:59 PM
3:32:36 PM
3:32:36 PM
3:32:36 PM
10:18:16 AM
10:17:35 AM
10:12:35 AM
6:22:25 AM
6:17:25 AM
5:34:25 AM
5:27:26 AM
5:22:44 AM
5:17:26 AM
5:17:26 AM
6:55:02 PM
6:05:00 PM
6:00:02 PM
5:59:59 PM
5:55:01 PM
3:11:01 PM
3:06:01 PM
2:22:17 PM
2:15:51 PM
2:11:05 PM
2:06:03 PM
5:56:43 AM
5:51:42 AM
5:07:55 AM
5:01:43 AM
4:57:00 AM
4:51:42 AM
6:54:48 PM
6:49:48 PM
6:05:00 PM
5:59:59 PM
5:54:47 PM
5:49:47 PM
4:54:47 PM
4:49:46 PM
3:54:46 PM
3:49:45 PM
2:54:45 PM
2:49:45 PM
1:54:44 PM
1:49:44 PM
12:54:43 PM
12:49:43 PM
11:54:42 AM
11:49:42 AM
10:54:42 AM
10:49:41 AM
10:01:32 AM
9:55:20 AM
9:54:41 AM
9:49:41 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
exit
start
start
exit
start
start
start
exit
exit
start
exit
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE

11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/26/2009
11/26/2009

8:57:22 AM
8:49:40 AM
7:54:39 AM
7:49:39 AM
6:54:38 AM
6:49:38 AM
5:54:38 AM
5:49:37 AM
4:54:37 AM
4:49:37 AM
3:54:36 AM
3:49:36 AM
3:29:02 AM
3:24:02 AM
2:54:35 AM
2:49:35 AM
1:54:34 AM
1:49:34 AM
12:54:34 AM
12:49:33 AM
12:38:01 AM
12:32:59 AM
11:54:34 PM
11:49:33 PM
10:54:33 PM
10:49:33 PM
9:54:32 PM
9:49:32 PM
9:07:59 PM
9:01:44 PM
8:54:32 PM
8:49:31 PM
4:12:47 PM
4:07:47 PM
3:12:48 PM
3:07:46 PM
1:32:21 PM
1:27:21 PM
12:32:20 PM
12:27:20 PM
11:43:28 AM
11:37:21 AM
11:32:22 AM
11:27:19 AM
3:52:45 AM
3:47:44 AM
3:37:43 AM
3:32:43 AM
2:37:42 AM
2:32:42 AM
1:37:41 AM
1:32:41 AM
12:49:23 AM
12:42:41 AM
12:39:01 AM
12:37:42 AM
12:33:00 AM
12:32:40 AM
7:30:57 PM
7:25:57 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
start

C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE

11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009

6:30:57 PM
6:25:56 PM
6:05:00 PM
5:59:59 PM
5:30:56 PM
5:25:56 PM
4:30:55 PM
4:25:55 PM
3:30:54 PM
3:25:54 PM
2:30:53 PM
2:25:53 PM
1:30:53 PM
1:25:53 PM
12:42:40 PM
12:35:53 PM
12:30:54 PM
12:25:52 PM
8:04:18 AM
7:59:18 AM
7:04:18 AM
6:59:17 AM
3:39:29 AM
3:34:29 AM
3:27:57 AM
3:19:54 AM
3:19:54 AM
3:19:48 AM
3:17:54 AM
3:05:25 AM
3:00:25 AM
12:38:10 AM
12:32:59 AM
12:27:04 AM
12:22:02 AM
11:27:03 PM
11:22:02 PM
10:27:02 PM
10:22:02 PM
9:27:01 PM
9:22:01 PM
9:07:49 PM
9:01:46 PM
8:27:01 PM
8:22:00 PM
7:27:00 PM
7:22:00 PM
6:26:59 PM
6:21:59 PM
6:05:00 PM
5:59:59 PM
5:26:58 PM
5:21:58 PM
4:26:57 PM
4:21:57 PM
3:26:57 PM
3:21:56 PM
2:26:56 PM
2:21:56 PM
1:26:55 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
start
start
exit
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE

11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009

1:21:55 PM
12:37:52 PM
12:31:55 PM
12:26:55 PM
12:21:54 PM
6:05:27 AM
5:56:50 AM
5:05:26 AM
5:00:26 AM
4:08:27 AM
4:05:25 AM
4:00:25 AM
4:00:02 AM
3:59:49 AM
3:00:24 AM
3:00:11 AM
5:29:31 PM
5:04:29 PM
4:59:28 PM
4:04:28 PM
3:59:28 PM
3:04:27 PM
2:59:27 PM
2:52:32 PM
2:45:18 PM
2:45:18 PM
2:45:18 PM
2:41:31 PM
2:32:46 PM
2:27:45 PM
1:32:46 PM
1:27:45 PM
11:10:09 AM
11:05:09 AM
10:21:12 AM
10:15:09 AM
10:10:10 AM
10:05:08 AM
4:53:28 AM
4:48:28 AM
4:07:06 AM
3:58:29 AM
3:53:29 AM
3:48:28 AM
9:02:38 PM
8:57:38 PM
8:02:39 PM
7:57:37 PM
6:05:00 PM
6:04:26 PM
5:59:59 PM
5:59:26 PM
5:04:25 PM
4:59:25 PM
10:17:48 AM
10:12:48 AM
9:49:57 AM
9:43:54 AM
9:17:47 AM
9:12:47 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
start
start
exit
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE

11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009

8:17:46 AM
8:12:46 AM
7:17:46 AM
7:12:45 AM
6:17:45 AM
6:12:45 AM
5:17:44 AM
5:12:44 AM
4:31:10 AM
4:22:44 AM
4:18:03 AM
4:12:44 AM
6:07:10 PM
6:05:00 PM
6:02:10 PM
5:59:59 PM
5:07:09 PM
5:02:09 PM
4:07:08 PM
4:02:08 PM
3:07:08 PM
3:02:07 PM
2:19:49 PM
2:12:07 PM
2:07:07 PM
2:02:07 PM
3:32:16 AM
3:27:16 AM
2:32:16 AM
2:27:15 AM
1:59:46 AM
1:54:45 AM
1:32:15 AM
1:27:15 AM
12:43:30 AM
12:38:12 AM
12:37:15 AM
12:32:59 AM
12:32:30 AM
12:27:14 AM
7:44:46 PM
7:39:46 PM
7:32:48 PM
7:25:24 PM
7:25:24 PM
7:25:24 PM
7:11:45 PM
6:52:21 PM
6:47:20 PM
6:05:00 PM
5:59:59 PM
5:52:20 PM
5:47:20 PM
4:52:19 PM
4:47:19 PM
3:52:19 PM
3:47:19 PM
2:52:19 PM
2:47:19 PM
1:52:18 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
start
exit
start
exit
start
start
start
exit
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE

11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009

1:47:18 PM
12:52:18 PM
12:48:35 PM
12:47:17 PM
12:42:17 PM
12:40:20 PM
12:32:51 PM
12:32:51 PM
12:32:51 PM
6:58:59 PM
6:55:00 PM
4:19:06 PM
4:14:05 PM
3:19:05 PM
3:14:05 PM
2:19:04 PM
2:14:04 PM
1:19:03 PM
1:14:03 PM
12:19:03 PM
12:15:31 PM
12:14:02 PM
12:09:03 PM
12:07:59 PM
11:59:18 AM
11:59:18 AM
11:59:18 AM
9:52:53 AM
9:50:51 AM
5:56:02 AM
5:51:02 AM
5:08:42 AM
5:01:01 AM
4:56:05 AM
4:51:02 AM
4:51:01 AM
8:52:57 PM
7:57:58 PM
7:52:57 PM
6:05:00 PM
6:00:00 PM
5:53:35 PM
5:48:35 PM
4:53:35 PM
4:48:35 PM
3:53:34 PM
3:48:34 PM
2:53:33 PM
2:48:33 PM
2:48:19 PM
1:11:19 PM
12:16:18 PM
12:11:18 PM
11:16:18 AM
11:11:17 AM
10:28:11 AM
10:21:17 AM
10:16:17 AM
10:11:17 AM
5:47:34 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
exit
start
start
exit
start
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
start
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE

11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009

5:42:34 AM
4:47:35 AM
4:43:48 AM
4:42:33 AM
4:37:33 AM
4:35:37 AM
4:27:58 AM
4:27:58 AM
4:27:58 AM
7:43:44 PM
7:35:47 PM
7:30:47 PM
7:23:50 PM
7:16:14 PM
7:16:14 PM
7:16:14 PM
6:03:02 PM
6:03:02 PM
5:59:59 PM
5:36:28 PM
5:31:28 PM
4:36:27 PM
4:31:27 PM
2:09:55 PM
2:04:55 PM
1:09:55 PM
1:04:54 PM
12:57:58 PM
12:50:54 PM
12:50:54 PM
12:50:54 PM
12:25:19 PM
11:37:34 AM
11:33:36 AM
11:32:33 AM
11:27:33 AM
11:25:36 AM
11:18:18 AM
11:18:18 AM
11:18:18 AM
10:34:53 AM
10:20:10 AM
10:15:09 AM
5:50:36 AM
5:45:36 AM
4:50:58 AM
4:45:45 AM
11:51:43 PM
11:46:42 PM
10:51:42 PM
10:47:54 PM
10:46:41 PM
10:41:42 PM
10:39:45 PM
10:33:09 PM
10:33:09 PM
10:33:09 PM
6:17:47 PM
6:05:00 PM
5:59:59 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
exit
start
start
exit
start
start
start
exit
exit
start
exit
start
start
start
exit
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
start
start
exit
exit
exit
start
start
exit
start
start
start
exit
exit
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
start
start
start
exit
exit
start

C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE

11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
dfsvc.exe
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009

5:57:05 PM
5:51:55 PM
4:07:27 PM
4:02:27 PM
3:07:26 PM
3:02:26 PM
2:55:29 PM
2:48:51 PM
2:48:51 PM
2:48:51 PM
2:29:59 AM
2:24:53 AM
2:24:38 AM
(events: 7)
7:02:30 AM
7:02:25 AM
7:02:16 AM
7:02:16 AM
5:38:39 AM
5:38:39 AM
1:22:05 AM
1:22:05 AM
12:33:06 AM
12:32:03 AM
11:04:57 PM
11:04:57 PM
10:10:38 PM
10:10:38 PM
6:00:00 PM
6:00:00 PM
8:10:02 AM
8:10:02 AM
6:31:45 AM
6:31:45 AM
12:00:00 AM
12:00:00 AM
9:01:13 PM
9:01:13 PM
7:59:28 PM
7:59:28 PM
6:18:26 PM
6:09:27 PM
6:00:00 PM
6:00:00 PM
4:10:36 PM
4:10:13 PM
4:09:40 PM
4:09:39 PM
4:09:38 PM
4:09:38 PM
4:09:33 PM
3:08:25 PM
3:08:25 PM
11:11:52 AM
11:11:52 AM
10:11:51 AM
10:11:51 AM
4:06:04 AM
4:06:04 AM
12:52:39 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
start
start
exit
start
exit

C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE
C:\WINDOWS\system32\TASKENG.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE

12/14/2009 12:51:29 AM
12/13/2009 4:50:17 PM
12/13/2009 4:50:17 PM
12/13/2009 2:57:57 PM
12/13/2009 2:57:57 PM
12/13/2009 5:51:52 AM
12/13/2009 5:50:41 AM
12/13/2009 5:50:41 AM
12/13/2009 5:50:39 AM
12/13/2009 5:41:19 AM
12/13/2009 5:41:19 AM
12/12/2009 6:32:37 PM
12/12/2009 6:32:37 PM
12/12/2009 6:00:00 PM
12/12/2009 6:00:00 PM
12/12/2009 4:32:21 PM
12/12/2009 4:32:21 PM
12/12/2009 12:03:33 PM
12/12/2009 12:03:33 PM
12/12/2009 7:36:04 AM
12/12/2009 7:35:01 AM
12/12/2009 7:35:01 AM
12/12/2009 7:34:59 AM
12/11/2009 6:00:00 PM
12/11/2009 5:59:59 PM
12/11/2009 5:27:28 PM
12/11/2009 5:27:28 PM
12/11/2009 12:02:01 PM
12/11/2009 12:02:01 PM
12/11/2009 6:59:11 AM
12/11/2009 6:59:11 AM
12/11/2009 5:59:10 AM
12/11/2009 5:59:10 AM
12/11/2009 4:45:36 AM
12/11/2009 4:44:20 AM
12/10/2009 6:00:00 PM
12/10/2009 6:00:00 PM
12/10/2009 3:37:34 PM
12/10/2009 3:33:50 PM
12/10/2009 2:43:27 PM
12/10/2009 2:43:22 PM
12/10/2009 2:42:17 PM
12/10/2009 2:42:17 PM
12/10/2009 1:59:33 PM
12/10/2009 1:58:43 PM
12/10/2009 1:58:38 PM
12/10/2009 5:48:56 AM
12/10/2009 4:49:27 AM
12/10/2009 4:49:25 AM
12/10/2009 4:10:22 AM
12/10/2009 4:10:16 AM
12/10/2009 4:09:08 AM
12/10/2009 4:09:08 AM
12/9/2009 3:28:22 AM
12/9/2009 3:28:17 AM
12/9/2009 3:24:30 AM
12/9/2009 3:24:29 AM
12/9/2009 3:24:25 AM
12/9/2009 3:23:36 AM
12/9/2009 3:23:36 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
exit
exit
start
start
start
exit
exit
start
start
exit
exit
exit
start
exit
start
start

C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE

12/9/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009

3:23:35 AM
3:57:26 PM
3:49:01 PM
1:21:08 PM
1:21:02 PM
1:20:42 PM
1:20:42 PM
10:50:27 AM
10:50:27 AM
10:50:27 AM
10:50:27 AM
10:50:27 AM
10:50:27 AM
4:26:28 AM
4:26:28 AM
3:24:51 AM
3:24:51 AM
12:51:17 AM
12:51:17 AM
11:36:35 PM
11:36:35 PM
2:05:47 PM
2:05:47 PM
2:05:47 PM
2:05:47 PM
2:05:47 PM
2:05:47 PM
7:37:15 AM
7:37:15 AM
6:23:26 AM
6:23:26 AM
4:34:40 AM
4:33:24 AM
4:01:35 AM
4:01:35 AM
4:01:35 AM
4:01:35 AM
4:01:34 AM
4:01:34 AM
4:01:34 AM
4:01:34 AM
4:06:36 AM
4:06:36 AM
2:26:10 AM
2:26:05 AM
2:23:46 AM
2:16:38 AM
2:16:38 AM
2:16:35 AM
12:48:11 AM
12:48:11 AM
12:48:10 AM
12:47:12 AM
12:47:12 AM
12:47:12 AM
6:00:00 PM
6:00:00 PM
2:28:20 PM
2:19:48 PM
2:19:48 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
exit
exit
exit
start
start
exit
start
exit
start
start
start
exit
start
exit
exit
start

C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE

12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009

2:19:47 PM
2:56:19 AM
2:56:14 AM
2:24:49 AM
2:24:48 AM
10:19:39 PM
10:11:06 PM
6:52:02 PM
6:51:57 PM
6:51:11 PM
6:51:10 PM
4:14:12 PM
4:14:12 PM
2:42:38 PM
2:42:38 PM
5:37:50 AM
5:36:24 AM
5:36:24 AM
5:36:23 AM
5:18:10 AM
5:18:10 AM
4:28:10 AM
4:28:10 AM
2:06:03 PM
2:06:03 PM
2:06:03 PM
2:06:01 PM
2:06:01 PM
2:06:01 PM
2:06:01 PM
2:06:01 PM
5:38:40 AM
5:30:16 AM
5:30:16 AM
5:30:15 AM
4:08:04 AM
4:08:00 AM
4:07:08 AM
4:07:08 AM
7:37:15 PM
7:37:15 PM
7:37:15 PM
7:37:00 PM
7:36:55 PM
7:36:42 PM
7:36:41 PM
7:36:39 PM
2:54:56 PM
2:54:56 PM
2:04:05 PM
2:04:05 PM
1:54:55 PM
1:54:55 PM
1:54:55 PM
1:54:55 PM
12:57:54 PM
12:57:54 PM
12:36:02 PM
12:36:02 PM
12:00:51 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
exit
start
start
exit
start
exit
exit
start
start
exit
start
exit
start
exit
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
exit
start
start
exit
start
exit
exit
exit
start
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE

12/2/2009 12:00:51 PM
12/2/2009 8:04:01 AM
12/2/2009 8:04:01 AM
12/2/2009 7:07:00 AM
12/2/2009 7:07:00 AM
12/2/2009 4:12:05 AM
12/2/2009 4:12:05 AM
12/2/2009 4:12:03 AM
12/2/2009 4:11:12 AM
12/2/2009 4:11:12 AM
12/2/2009 4:11:11 AM
12/2/2009 4:06:55 AM
12/2/2009 4:06:55 AM
12/2/2009 3:06:55 AM
12/2/2009 3:06:55 AM
12/2/2009 3:06:55 AM
12/2/2009 3:06:55 AM
12/2/2009 3:06:55 AM
12/2/2009 3:06:55 AM
12/2/2009 3:06:54 AM
12/2/2009 3:06:54 AM
12/1/2009 2:46:38 PM
12/1/2009 2:46:38 PM
12/1/2009 6:59:47 AM
12/1/2009 6:59:47 AM
12/1/2009 5:18:19 AM
12/1/2009 5:09:48 AM
12/1/2009 5:09:47 AM
12/1/2009 5:09:46 AM
12/1/2009 3:14:56 AM
12/1/2009 3:14:50 AM
12/1/2009 3:14:35 AM
12/1/2009 3:14:35 AM
12/1/2009 3:14:35 AM
12/1/2009 3:14:28 AM
12/1/2009 3:14:19 AM
12/1/2009 3:13:44 AM
11/30/2009 8:00:27 PM
11/30/2009 8:00:27 PM
11/30/2009 7:35:13 PM
11/30/2009 7:35:12 PM
11/30/2009 7:35:12 PM
11/30/2009 7:35:12 PM
11/30/2009 7:35:10 PM
11/30/2009 7:34:40 PM
11/30/2009 7:34:37 PM
11/30/2009 7:34:03 PM
11/30/2009 6:00:00 PM
11/30/2009 5:59:59 PM
11/30/2009 5:57:21 PM
11/30/2009 5:57:16 PM
11/30/2009 5:55:34 PM
11/30/2009 5:55:34 PM
11/30/2009 5:55:34 PM
11/30/2009 5:55:18 PM
11/30/2009 5:55:17 PM
11/30/2009 5:55:17 PM
11/30/2009 5:10:27 PM
11/30/2009 5:03:21 PM
11/30/2009 3:34:01 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
exit
exit
start
exit
start
start
start
exit
exit
exit
start
exit
start
exit
start
start
start
exit
start
exit
exit
exit
start
exit
start
start
start
exit
start
exit

C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE

11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009

3:33:55 PM
3:32:37 PM
3:32:34 PM
5:27:28 AM
5:27:28 AM
6:00:00 PM
6:00:00 PM
3:06:07 PM
3:06:07 PM
5:58:44 AM
5:57:21 AM
5:51:46 AM
5:51:46 AM
4:51:49 AM
4:51:47 AM
4:51:45 AM
4:51:45 AM
4:51:45 AM
4:51:45 AM
4:51:45 AM
4:51:45 AM
7:10:01 PM
7:10:01 PM
6:00:00 PM
5:59:59 PM
5:49:01 PM
5:49:01 PM
5:02:01 PM
5:02:01 PM
3:32:34 PM
3:32:34 PM
2:27:47 PM
2:26:08 PM
1:04:00 PM
12:02:02 PM
12:02:02 PM
5:40:31 AM
5:40:15 AM
2:35:08 AM
2:34:03 AM
11:51:22 PM
11:51:03 PM
10:50:50 PM
10:50:34 PM
10:50:33 PM
9:49:33 PM
9:49:33 PM
8:49:36 PM
8:49:36 PM
8:49:33 PM
8:49:33 PM
8:49:33 PM
8:49:33 PM
8:49:33 PM
8:49:32 PM
4:07:50 PM
4:07:50 PM
3:07:50 PM
3:07:49 PM
2:57:46 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
exit
start
exit
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE

11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009

2:57:46 AM
1:32:42 AM
1:32:42 AM
12:34:10 AM
12:34:05 AM
12:34:01 AM
12:34:01 AM
12:32:42 AM
12:32:42 AM
7:38:23 PM
7:38:23 PM
6:00:00 PM
5:59:59 PM
5:46:12 PM
5:46:12 PM
4:46:12 PM
4:46:12 PM
3:13:43 PM
3:13:43 PM
1:25:55 PM
1:25:55 PM
7:59:20 AM
7:59:20 AM
7:03:13 AM
6:59:26 AM
6:59:22 AM
4:20:29 AM
3:19:54 AM
3:19:54 AM
11:38:41 PM
11:38:41 PM
9:41:40 PM
9:41:39 PM
6:00:00 PM
5:59:59 PM
2:55:51 PM
2:55:51 PM
5:06:54 AM
5:06:54 AM
5:06:54 AM
5:06:54 AM
5:06:53 AM
5:06:53 AM
5:06:53 AM
5:06:53 AM
5:06:53 AM
5:06:52 AM
3:00:28 AM
3:00:28 AM
3:00:28 AM
3:00:28 AM
3:00:26 AM
3:00:26 AM
4:48:03 PM
4:39:33 PM
2:54:51 PM
2:54:46 PM
2:45:53 PM
2:45:53 PM
2:45:53 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
exit
exit
start
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
exit
exit
start
exit

C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE

11/24/2009
11/24/2009
11/24/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009

2:45:19 PM
2:45:19 PM
2:45:18 PM
6:00:00 PM
5:59:59 PM
5:09:28 PM
5:09:28 PM
4:12:46 AM
4:12:46 AM
6:36:41 PM
6:36:41 PM
6:00:00 PM
6:00:00 PM
5:03:13 PM
5:03:13 PM
4:45:26 PM
4:45:26 PM
3:02:09 PM
3:02:09 PM
1:04:47 AM
1:04:47 AM
8:12:55 PM
8:05:22 PM
7:30:25 PM
7:30:20 PM
7:25:24 PM
7:25:24 PM
6:29:24 PM
6:29:24 PM
6:00:00 PM
6:00:00 PM
5:46:45 PM
5:46:45 PM
4:47:46 PM
4:39:22 PM
4:39:22 PM
4:39:21 PM
12:33:00 PM
12:32:55 PM
12:32:51 PM
12:32:51 PM
3:25:34 PM
3:25:34 PM
1:42:36 PM
1:35:33 PM
12:00:40 PM
12:00:34 PM
11:59:19 AM
11:59:18 AM
9:50:56 AM
9:50:56 AM
9:50:53 AM
9:50:53 AM
5:41:32 AM
5:40:35 AM
5:40:35 AM
5:40:34 AM
4:51:06 AM
4:51:06 AM
4:51:06 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
exit
start
start
exit
start
exit
start
exit
exit
start
start
exit
start
exit
start
exit
exit
start
start
exit
start
exit

C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE

11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/17/2009
11/17/2009
11/17/2009

4:51:05 AM
4:51:03 AM
4:51:03 AM
4:51:03 AM
4:51:03 AM
8:52:59 PM
8:52:59 PM
6:00:00 PM
6:00:00 PM
5:36:55 PM
5:36:55 PM
3:55:34 PM
3:46:55 PM
3:46:54 PM
3:46:53 PM
4:30:10 AM
4:30:03 AM
4:27:59 AM
4:27:58 AM
7:24:28 PM
7:24:23 PM
7:16:14 PM
7:16:14 PM
6:00:00 PM
6:00:00 PM
5:58:02 PM
5:58:02 PM
5:57:45 PM
5:57:45 PM
5:39:32 PM
5:39:29 PM
5:39:10 PM
5:39:10 PM
5:35:03 PM
5:35:01 PM
5:34:47 PM
5:34:47 PM
5:29:50 PM
5:29:48 PM
5:29:35 PM
5:29:35 PM
5:29:17 PM
5:29:16 PM
12:51:21 PM
12:51:16 PM
12:50:55 PM
12:50:55 PM
12:25:18 PM
12:25:18 PM
11:18:18 AM
11:18:18 AM
10:34:52 AM
10:34:47 AM
10:15:15 AM
10:15:15 AM
5:45:48 AM
5:45:48 AM
11:26:35 PM
11:18:56 PM
6:00:00 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
exit
start
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
start
exit
start
exit

C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE

11/17/2009 6:00:00 PM
11/17/2009 5:53:59 PM
11/17/2009 4:22:39 PM
11/17/2009 2:24:53 AM
dfsvc.exe (events: 7)
11/26/2009 3:19:49 AM
11/26/2009 3:19:49 AM
dfsvc.exe (events: 7)
11/26/2009 3:19:50 AM
11/26/2009 3:19:49 AM
dfsvc.exe (events: 7)
12/10/2009 2:42:20 PM
12/10/2009 2:42:15 PM
12/10/2009 4:49:34 AM
12/10/2009 4:49:30 AM
12/10/2009 4:49:28 AM
12/10/2009 4:49:25 AM
12/8/2009 3:23:29 PM
12/8/2009 3:23:23 PM
12/8/2009 11:25:23 AM
12/8/2009 11:25:16 AM
12/8/2009 10:51:40 AM
12/8/2009 10:51:35 AM
12/8/2009 10:50:47 AM
12/8/2009 10:50:41 AM
12/7/2009 2:33:17 PM
12/7/2009 2:33:12 PM
12/7/2009 2:32:11 PM
12/7/2009 2:32:04 PM
12/4/2009 3:53:10 PM
12/4/2009 3:53:05 PM
12/4/2009 3:43:22 PM
12/4/2009 3:43:17 PM
12/3/2009 4:07:14 AM
12/3/2009 4:07:09 AM
11/28/2009 2:29:04 PM
11/28/2009 2:28:55 PM
11/28/2009 2:28:54 PM
11/28/2009 2:28:48 PM
11/28/2009 2:27:42 PM
11/28/2009 2:27:37 PM
11/28/2009 2:27:32 PM
11/28/2009 2:27:22 PM
11/28/2009 5:40:34 AM
11/28/2009 5:40:29 AM
11/27/2009 11:51:17 PM
11/27/2009 11:51:12 PM
11/27/2009 11:46:09 PM
11/27/2009 11:46:04 PM
11/27/2009 11:43:18 PM
11/27/2009 11:43:09 PM
11/27/2009 11:42:42 PM
11/27/2009 11:42:37 PM
11/27/2009 11:37:18 PM
11/27/2009 11:37:10 PM
11/27/2009 11:36:30 PM
11/27/2009 11:36:25 PM
11/27/2009 11:35:55 PM
11/27/2009 11:35:47 PM
11/27/2009 11:35:43 PM

Process
Process
Process
Process

start
exit
start
start

C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE

Process exit
Process start

C:\WINDOWS\SERVICING\GC32\TZUPD.EXE
C:\WINDOWS\SERVICING\GC32\TZUPD.EXE

Process exit
Process start

C:\WINDOWS\SERVICING\GC64\TZUPD.EXE
C:\WINDOWS\SERVICING\GC64\TZUPD.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE

exit
start
exit
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009

11:35:33 PM
11:34:33 PM
11:34:28 PM
11:34:03 PM
11:33:58 PM
11:33:07 PM
11:33:02 PM
11:02:14 PM
11:02:08 PM
11:01:39 PM
11:01:33 PM
11:01:28 PM
11:01:23 PM
10:54:00 PM
10:53:55 PM
10:53:44 PM
10:53:39 PM
10:53:28 PM
10:53:23 PM
10:53:14 PM
10:53:09 PM
10:53:04 PM
10:52:55 PM
10:52:54 PM
10:52:49 PM
10:52:23 PM
10:52:12 PM
10:51:53 PM
10:51:48 PM
10:51:07 PM
10:51:01 PM
2:21:42 AM
2:21:36 AM
2:15:27 AM
2:15:21 AM
2:15:17 AM
2:15:12 AM
2:15:06 AM
2:15:01 AM
3:20:01 AM
3:19:58 AM
3:19:56 AM
3:19:53 AM
2:38:23 PM
2:38:18 PM
2:33:06 PM
2:33:01 PM
2:32:03 PM
2:31:58 PM
2:10:59 PM
2:10:50 PM
2:09:50 PM
2:09:45 PM
1:41:05 PM
1:41:00 PM
1:40:51 PM
1:40:46 PM
4:01:42 AM
4:01:37 AM
4:01:20 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE

11/24/2009 4:01:08 AM
11/24/2009 3:57:31 AM
11/24/2009 3:57:31 AM
11/24/2009 3:57:26 AM
11/24/2009 3:57:26 AM
11/22/2009 12:28:53 AM
11/22/2009 12:28:47 AM
11/18/2009 5:59:33 PM
11/18/2009 5:59:27 PM
11/18/2009 5:59:27 PM
11/18/2009 5:59:22 PM
dfsvc.exe (events: 7)
12/10/2009 4:49:55 AM
12/10/2009 4:49:25 AM
12/4/2009 6:51:16 PM
12/4/2009 6:51:08 PM
11/26/2009 3:20:23 AM
11/26/2009 3:19:54 AM
11/20/2009 11:59:29 AM
11/20/2009 11:59:18 AM
11/19/2009 4:28:00 AM
11/19/2009 4:27:58 AM
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM
12/16/2009 7:00:15 AM
12/14/2009 4:09:33 PM
12/14/2009 3:47:55 PM
12/10/2009 2:42:15 PM
12/10/2009 2:22:51 PM
12/10/2009 4:49:25 AM
12/10/2009 4:46:56 AM
12/10/2009 4:08:57 AM
12/9/2009 3:23:35 AM
12/8/2009 9:15:54 PM
12/8/2009 1:20:42 PM
12/8/2009 11:34:18 AM
12/6/2009 12:47:12 AM
12/5/2009 7:28:57 PM
12/5/2009 2:24:47 AM
12/4/2009 10:43:16 PM
12/4/2009 6:51:08 PM
12/4/2009 4:27:50 PM
12/3/2009 4:07:07 AM
12/2/2009 8:42:08 PM
12/2/2009 7:36:39 PM
12/2/2009 3:43:10 PM
12/1/2009 3:13:44 AM
11/30/2009 8:00:30 PM
11/30/2009 7:34:03 PM
11/30/2009 6:55:15 PM
11/30/2009 5:55:17 PM
11/30/2009 5:53:09 PM
11/30/2009 3:32:34 PM
11/30/2009 10:18:19 AM
11/26/2009 3:19:54 AM
11/26/2009 3:17:55 AM
11/24/2009 2:45:18 PM
11/24/2009 2:41:33 PM
11/21/2009 7:25:24 PM
11/21/2009 7:11:47 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
exit
start
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE
C:\WINDOWS\system32\DLLHOST.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\USERINIT.EXE
C:\WINDOWS\system32\USERINIT.EXE
C:\WINDOWS\system32\USERINIT.EXE
C:\WINDOWS\system32\USERINIT.EXE
C:\WINDOWS\system32\USERINIT.EXE
C:\WINDOWS\system32\USERINIT.EXE
C:\WINDOWS\system32\USERINIT.EXE
C:\WINDOWS\system32\USERINIT.EXE
C:\WINDOWS\system32\USERINIT.EXE
C:\WINDOWS\system32\USERINIT.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE

11/21/2009 12:32:51 PM
11/20/2009 6:59:02 PM
11/20/2009 11:59:18 AM
11/20/2009 9:52:56 AM
11/19/2009 4:27:58 AM
11/18/2009 7:43:46 PM
11/18/2009 7:16:14 PM
11/18/2009 6:03:05 PM
11/18/2009 12:50:54 PM
11/18/2009 12:25:21 PM
11/18/2009 11:18:18 AM
11/18/2009 10:34:55 AM
11/17/2009 10:33:09 PM
11/17/2009 6:17:49 PM
11/17/2009 2:48:51 PM
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM
12/16/2009 7:00:14 AM
12/14/2009 4:09:33 PM
12/14/2009 3:47:54 PM
12/10/2009 2:42:15 PM
12/10/2009 2:22:50 PM
12/10/2009 4:49:26 AM
12/10/2009 4:46:56 AM
12/10/2009 4:08:57 AM
12/9/2009 3:23:35 AM
12/8/2009 9:15:53 PM
12/8/2009 1:20:42 PM
12/8/2009 11:34:18 AM
12/6/2009 12:47:12 AM
12/5/2009 7:28:57 PM
12/5/2009 2:24:47 AM
12/4/2009 10:43:16 PM
12/4/2009 6:51:08 PM
12/4/2009 4:27:49 PM
12/3/2009 4:07:07 AM
12/2/2009 8:42:08 PM
12/2/2009 7:36:39 PM
12/2/2009 3:43:10 PM
12/1/2009 3:13:44 AM
11/30/2009 8:00:29 PM
11/30/2009 7:34:03 PM
11/30/2009 6:55:15 PM
11/30/2009 5:55:17 PM
11/30/2009 5:53:08 PM
11/30/2009 3:32:34 PM
11/30/2009 10:18:18 AM
11/26/2009 3:19:54 AM
11/26/2009 3:17:54 AM
11/24/2009 2:45:18 PM
11/24/2009 2:41:32 PM
11/21/2009 7:25:24 PM
11/21/2009 7:11:46 PM
11/21/2009 12:32:51 PM
11/20/2009 6:59:01 PM
11/20/2009 11:59:18 AM
11/20/2009 9:52:55 AM
11/19/2009 4:27:58 AM
11/18/2009 7:43:45 PM
11/18/2009 7:16:14 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE
C:\WINDOWS\system32\DWM.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE

11/18/2009 6:03:04 PM
11/18/2009 12:50:54 PM
11/18/2009 12:25:20 PM
11/18/2009 11:18:18 AM
11/18/2009 10:34:54 AM
11/17/2009 10:33:09 PM
11/17/2009 6:17:49 PM
11/17/2009 2:48:51 PM
dfsvc.exe (events: 7)
12/10/2009 4:49:36 AM
12/10/2009 4:49:32 AM
12/3/2009 4:07:22 AM
12/3/2009 4:07:16 AM
11/26/2009 3:20:11 AM
11/26/2009 3:20:09 AM
dfsvc.exe (events: 7)
12/10/2009 4:16:40 AM
12/10/2009 4:16:36 AM
12/10/2009 4:16:05 AM
12/10/2009 4:15:44 AM
11/25/2009 3:01:33 AM
11/25/2009 3:01:26 AM
11/25/2009 3:01:09 AM
11/25/2009 3:01:01 AM
11/24/2009 4:01:08 AM
11/24/2009 4:01:08 AM
11/24/2009 4:01:07 AM
11/24/2009 4:00:55 AM
11/24/2009 3:58:44 AM
11/24/2009 3:58:44 AM
dfsvc.exe (events: 7)
12/10/2009 4:26:40 AM
12/10/2009 4:15:41 AM
11/25/2009 7:55:27 PM
11/25/2009 7:45:26 PM
11/25/2009 3:59:49 AM
11/25/2009 3:00:45 AM
11/24/2009 4:11:08 AM
11/24/2009 3:57:31 AM
dfsvc.exe (events: 7)
12/16/2009 7:03:34 AM
XE
12/16/2009 7:00:17 AM
XE
12/16/2009 6:59:30 AM
XE
12/16/2009 6:55:34 AM
XE
12/16/2009 6:54:30 AM
XE
12/16/2009 6:52:34 AM
XE
12/16/2009 6:51:30 AM
XE
12/16/2009 6:50:34 AM
XE
12/16/2009 6:47:51 AM
XE
12/16/2009 6:45:34 AM
XE

Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\EXPLORER.EXE

Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start

C:\WINDOWS\SYSWOW64\RUNONCE.EXE
C:\WINDOWS\SYSWOW64\RUNONCE.EXE
C:\WINDOWS\SYSWOW64\RUNONCE.EXE
C:\WINDOWS\SYSWOW64\RUNONCE.EXE
C:\WINDOWS\SYSWOW64\RUNONCE.EXE
C:\WINDOWS\SYSWOW64\RUNONCE.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
exit
exit
start
start
start

C:\WINDOWS\SYSWOW64\MSIEXEC.EXE
C:\WINDOWS\SYSWOW64\MSIEXEC.EXE
C:\WINDOWS\SYSWOW64\MSIEXEC.EXE
C:\WINDOWS\SYSWOW64\MSIEXEC.EXE
C:\WINDOWS\SYSWOW64\MSIEXEC.EXE
C:\WINDOWS\SYSWOW64\MSIEXEC.EXE
C:\WINDOWS\SYSWOW64\MSIEXEC.EXE
C:\WINDOWS\SYSWOW64\MSIEXEC.EXE
C:\WINDOWS\SYSWOW64\MSIEXEC.EXE
C:\WINDOWS\SYSWOW64\MSIEXEC.EXE
C:\WINDOWS\SYSWOW64\MSIEXEC.EXE
C:\WINDOWS\SYSWOW64\MSIEXEC.EXE
C:\WINDOWS\SYSWOW64\MSIEXEC.EXE
C:\WINDOWS\SYSWOW64\MSIEXEC.EXE

Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\MSIEXEC.EXE
C:\WINDOWS\system32\MSIEXEC.EXE
C:\WINDOWS\system32\MSIEXEC.EXE
C:\WINDOWS\system32\MSIEXEC.EXE
C:\WINDOWS\system32\MSIEXEC.EXE
C:\WINDOWS\system32\MSIEXEC.EXE
C:\WINDOWS\system32\MSIEXEC.EXE
C:\WINDOWS\system32\MSIEXEC.EXE

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE

6:44:30 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:40:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:39:30 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:35:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:34:30 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:30:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:29:30 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:25:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:24:30 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:20:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:19:30 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:15:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:14:30 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:10:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:09:30 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:05:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:04:30 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:00:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:59:30 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:55:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:54:30 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:50:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:49:30 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:45:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:44:30 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:40:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:39:30 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:35:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:34:30 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:30:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE

5:29:30 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:25:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:24:30 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:20:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:19:30 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:15:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:14:30 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:10:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:09:30 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:05:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:04:30 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:00:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:59:30 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:55:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:54:30 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:50:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:49:30 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:45:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:44:30 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:40:44 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:39:30 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:35:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:34:30 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:30:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:29:30 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:25:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:24:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:20:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:19:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:15:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE

4:14:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:10:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:09:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:05:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:04:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:00:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:59:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:55:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:54:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:50:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:49:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:45:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:44:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:40:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:39:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:35:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:34:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:30:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:29:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:25:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:24:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:24:14 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:22:57 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:20:54 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:19:03 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:15:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:14:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:10:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:09:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:05:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE

3:04:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:00:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:59:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:55:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:54:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:50:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:49:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:45:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:44:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:40:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:39:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:35:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:34:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:30:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:29:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:25:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:24:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:20:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:19:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:15:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:14:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:10:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:09:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:05:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:04:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:00:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:59:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:55:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:54:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:50:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE

1:49:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:45:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:44:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:40:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:39:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:35:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:34:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:30:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:29:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:25:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:24:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:20:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:19:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:15:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:14:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:10:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:09:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:05:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:04:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:00:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:59:31 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:55:34 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:54:31 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:50:34 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:49:31 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:45:34 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:44:31 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:40:34 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:39:31 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:35:34 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/16/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE

12:34:31 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:30:34 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:29:31 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:25:34 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:24:31 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:20:34 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:19:31 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:15:34 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:14:31 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:10:34 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:09:31 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:05:34 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:04:31 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:02:04 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:01:02 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:00:34 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:59:31 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:55:34 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:51:31 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:50:34 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:49:31 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:45:34 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:44:31 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:40:34 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:39:31 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:35:34 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:34:31 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:30:34 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:29:32 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:25:34 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE

11:24:32 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:20:34 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:19:32 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:15:34 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:14:32 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:10:34 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:09:32 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:05:34 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:04:32 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:00:34 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:59:32 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:55:34 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:54:32 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:50:34 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:49:32 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:45:34 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:44:32 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:40:34 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:39:32 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:35:34 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:34:32 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:30:34 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:29:32 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:25:34 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:24:32 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:20:34 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:19:32 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:15:34 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:14:32 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:10:34 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE

10:09:32 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:05:34 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:04:32 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:00:34 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:59:32 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:59:24 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:58:17 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:55:34 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:54:32 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:50:34 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:49:32 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:45:34 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:44:32 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:40:34 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:39:32 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:35:34 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:34:32 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:30:34 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:29:32 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:25:34 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:24:32 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:20:34 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:19:32 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:15:34 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:14:32 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:10:34 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:09:32 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:05:34 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:04:32 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:00:34 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE

8:59:32 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:55:34 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:54:32 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:50:34 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:49:32 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:45:34 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:44:32 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:40:34 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:39:32 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:35:34 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:34:32 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:33:44 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:27:45 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:24:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:23:37 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:19:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:18:37 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:14:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:13:37 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:09:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:08:37 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:04:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:03:37 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:59:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:58:37 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:54:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:53:37 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:49:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:48:37 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:44:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE

5:43:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:39:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:38:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:34:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:33:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:29:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:28:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:24:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:23:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:19:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:18:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:14:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:13:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:09:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:08:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:04:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:03:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:59:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:58:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:54:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:53:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:49:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:48:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:44:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:43:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:39:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:38:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:34:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:33:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:29:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE

4:28:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:24:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:23:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:19:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:18:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:14:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:13:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:09:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:08:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:04:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:03:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:59:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:58:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:54:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:53:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:50:07 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:48:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:47:37 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:46:07 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:44:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:43:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:43:07 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:41:37 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:39:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:38:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:38:37 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:37:33 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:36:07 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:33:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:31:17 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE

3:29:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:29:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:28:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:28:37 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:27:07 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:24:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:23:07 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:20:57 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:18:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:16:57 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:15:27 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:14:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:13:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:13:27 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:11:57 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:09:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:08:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:07:57 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:06:27 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:04:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:03:07 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:59:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:58:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:54:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:52:37 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:49:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:48:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:48:27 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:43:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:43:27 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE

2:41:57 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:39:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:37:57 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:34:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:32:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:30:57 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:28:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:26:27 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:24:57 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:24:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:23:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:19:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:18:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:16:17 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:14:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:14:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:13:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:12:17 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:10:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:09:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:07:17 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:06:07 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:03:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:03:17 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:01:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:00:07 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:58:37 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:54:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:53:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:51:37 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE

1:50:07 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:49:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:48:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:47:27 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:45:57 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:44:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:43:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:41:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:40:17 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:39:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:36:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:34:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:33:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:33:37 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:32:07 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:29:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:28:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:27:27 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:25:57 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:24:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:23:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:19:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:17:57 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:16:57 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:15:27 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:14:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:13:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:13:27 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:08:17 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:06:27 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE

1:04:57 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:04:47 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:03:17 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:00:27 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:58:38 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:57:17 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:55:47 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:54:47 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:53:38 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:52:47 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:51:17 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:49:47 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:48:39 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:46:27 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:44:57 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:44:57 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:42:27 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:39:47 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:37:47 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:34:47 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:33:17 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:30:47 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:28:39 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:27:57 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:26:28 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:25:17 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:23:39 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:19:47 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:18:39 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:18:17 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/15/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE

12:16:48 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:14:47 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:13:39 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:13:17 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:11:48 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:09:47 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:07:57 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:05:07 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:03:37 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:01:47 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:58:39 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:56:07 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:53:39 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:52:07 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:50:37 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:49:47 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:47:47 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:45:07 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:43:37 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:42:47 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:41:17 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:39:47 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:38:39 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:34:47 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:32:47 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:29:47 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:27:27 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:24:47 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:23:07 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:19:47 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE

11:18:39 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:18:07 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:16:37 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:14:47 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:13:39 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:13:27 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:11:57 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:09:47 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:07:17 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:04:47 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:02:47 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:59:47 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:57:37 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:55:57 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:53:39 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:52:07 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:50:37 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:49:47 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:48:39 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:47:27 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:45:57 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:44:47 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:42:37 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:42:37 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:41:07 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:39:47 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:37:27 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:35:07 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:33:37 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:29:47 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE

10:28:17 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:26:47 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:25:17 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:24:47 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:23:39 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:22:57 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:21:27 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:19:47 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:17:27 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:14:47 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:13:17 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:10:47 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:08:39 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:06:47 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:05:17 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:04:47 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:03:39 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:02:37 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:01:07 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:59:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:58:39 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:58:07 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:56:37 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:54:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:52:18 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:49:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:47:57 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:46:37 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:45:07 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:44:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE

9:43:39 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:41:07 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:38:39 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:35:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:33:39 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:31:17 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:29:47 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:29:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:28:39 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:27:57 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:26:27 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:24:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:23:39 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:23:07 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:21:37 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:19:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:18:39 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:17:07 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:15:37 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:14:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:13:39 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:11:37 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:10:07 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:09:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:08:39 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:04:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:03:39 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:01:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:00:17 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:59:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE

8:58:39 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:57:27 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:55:57 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:54:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:53:39 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:52:37 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:51:07 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:49:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:48:39 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:48:17 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:46:47 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:44:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:42:47 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:39:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:38:39 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:38:07 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:36:37 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:35:17 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:33:39 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:31:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:30:17 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:29:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:27:47 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:25:57 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:23:39 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:21:17 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:19:47 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:19:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:18:39 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:17:17 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE

8:15:47 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:14:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:13:39 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:12:07 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:10:37 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:09:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:08:39 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:07:27 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:05:57 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:04:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:03:39 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:03:17 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:01:47 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:59:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:58:39 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:54:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:53:40 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:50:37 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:46:56 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:44:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:43:40 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:39:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:38:40 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:34:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:33:40 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:29:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:28:40 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:24:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:23:40 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:19:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE

7:18:40 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:14:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:13:40 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:09:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:08:40 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:04:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:03:40 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:59:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:58:40 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:54:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:53:40 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:49:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:48:40 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:44:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:43:40 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:39:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:38:40 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:34:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:33:40 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:29:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:28:40 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:24:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:23:40 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:19:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:18:40 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:14:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:13:40 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:09:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:08:40 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:04:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE

6:03:40 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:59:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:58:40 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:54:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:53:40 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:49:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:48:40 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:44:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:43:40 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:40:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:38:40 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:35:17 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:33:08 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:33:07 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:30:05 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:25:02 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:24:02 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:20:02 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:19:02 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:17:52 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:10:47 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:44:20 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:43:11 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:39:20 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:38:11 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:34:30 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:33:11 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:29:20 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:28:11 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:24:20 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE

3:23:11 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:19:20 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:18:11 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:17:00 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:15:57 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:14:20 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:13:11 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:10:40 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:09:38 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:09:30 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:08:23 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:37:43 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:36:34 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:32:43 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:31:34 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:27:43 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:26:34 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:22:43 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:21:34 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:17:43 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:16:34 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:12:43 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:11:34 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:07:43 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:06:34 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:02:43 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:01:34 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:57:43 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:56:34 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:52:43 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE

10:51:34 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:47:43 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:46:34 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:42:43 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:41:34 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:37:43 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:36:34 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:32:43 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:31:34 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:27:43 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:26:34 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:22:43 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:21:34 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:17:43 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:16:34 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:12:53 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:11:34 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:02:11 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:01:02 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:57:11 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:56:02 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:52:11 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:51:02 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:47:11 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:46:02 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:42:11 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:41:02 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:37:11 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:36:02 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:32:11 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE

5:31:02 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:27:11 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:26:02 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:22:11 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:21:02 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:17:11 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:16:02 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:12:11 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:11:02 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:07:11 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:06:02 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:02:11 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:01:02 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:57:11 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:56:02 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:52:11 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:51:02 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:47:11 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:46:02 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:42:11 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:41:02 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:37:11 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:36:02 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:32:11 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:31:02 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:27:11 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:26:02 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:22:11 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:21:02 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:17:11 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE

4:16:02 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:12:11 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:11:02 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:07:21 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:06:02 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:23:12 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:22:03 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:18:12 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:17:03 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:13:12 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:12:03 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:08:12 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:07:03 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:03:12 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:02:03 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:58:12 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:57:03 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:53:12 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:52:03 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:48:12 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:47:03 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:43:12 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:42:03 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:38:12 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:37:03 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:33:12 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:32:03 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:28:12 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:27:03 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:23:12 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/14/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE

12:22:03 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:18:12 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:17:03 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:13:12 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:12:03 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:08:12 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:07:03 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:03:12 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:02:03 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:01:02 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:00:01 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:58:22 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:57:03 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:59:45 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:58:36 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:54:45 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:53:36 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:49:45 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:48:36 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:44:45 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:43:36 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:39:45 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:38:36 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:34:45 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:33:36 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:29:45 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:28:36 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:24:45 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:23:36 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:19:45 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE

9:18:36 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:14:45 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:13:36 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:09:45 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:08:36 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:04:45 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:03:36 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:59:45 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:58:36 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:54:45 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:53:36 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:49:45 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:48:36 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:44:45 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:43:36 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:39:45 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:38:36 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:34:45 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:33:36 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:29:45 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:28:36 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:24:45 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:23:36 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:19:45 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:18:36 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:14:45 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:13:36 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:09:45 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:08:36 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:04:45 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE

8:03:36 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:59:45 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:58:36 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:55:15 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:53:26 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:50:15 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:45:52 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:44:55 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:43:47 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:43:35 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:17:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:13:59 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:12:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:08:59 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:07:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:03:59 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:02:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:58:59 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:57:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:53:59 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:52:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:48:59 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:47:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:43:59 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:42:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:38:59 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:37:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:33:59 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:32:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:28:59 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE

4:27:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:23:59 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:22:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:18:59 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:17:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:13:59 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:12:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:08:59 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:07:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:03:59 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:02:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:58:59 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:57:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:53:59 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:52:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:48:59 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:47:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:43:59 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:42:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:38:59 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:37:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:34:09 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:32:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:29:59 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:27:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:25:59 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:24:30 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:23:59 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:22:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:18:59 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE

3:17:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:14:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:12:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:09:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:07:18 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:05:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:04:00 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:03:59 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:01:30 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:59:09 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:57:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:53:59 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:52:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:48:59 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:47:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:43:59 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:42:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:39:39 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:37:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:33:59 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:32:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:28:59 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:26:15 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:23:59 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:22:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:18:59 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:17:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:13:59 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:12:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:08:59 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE

2:07:11 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:06:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:05:26 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:03:51 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:02:42 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:59:01 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:57:42 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:22:10 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:21:01 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:17:10 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:16:01 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:12:10 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:11:01 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:07:10 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:06:01 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:02:10 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:01:01 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:57:10 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:56:01 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:52:10 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:51:01 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:47:10 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:46:01 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:42:10 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:41:01 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:37:10 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:36:01 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:32:10 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:31:01 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:27:10 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/13/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE

5:26:01 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:22:10 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:21:01 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:17:10 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:16:01 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:12:30 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:11:01 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:07:10 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:06:01 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:02:10 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:01:01 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:57:10 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:56:01 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:52:10 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:51:01 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:47:10 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:46:01 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:42:30 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:41:15 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:41:00 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:03:50 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:00:00 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:58:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:55:00 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:53:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:50:00 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:48:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:45:00 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:43:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:40:00 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE

9:38:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:35:00 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:33:51 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:30:00 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:28:51 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:25:00 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:23:51 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:20:00 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:18:51 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:15:00 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:13:51 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:10:00 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:08:51 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:05:00 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:03:51 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:00:00 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:58:51 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:55:00 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:53:51 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:50:00 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:48:51 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:45:00 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:43:51 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:40:00 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:38:51 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:35:00 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:33:51 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:30:00 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:28:51 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:25:00 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE

8:23:51 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:20:00 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:18:51 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:15:00 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:13:51 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:10:00 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:08:51 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:05:00 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:03:51 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:00:00 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:58:51 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:56:50 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:55:48 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:55:00 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:53:51 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:50:00 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:48:51 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:45:00 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:43:51 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:40:00 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:38:51 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:35:00 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:33:51 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:30:00 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:28:51 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:25:00 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:23:51 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:20:00 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:18:51 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:15:00 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE

7:13:51 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:10:10 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:08:51 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:08:50 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:52:21 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:48:30 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:47:21 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:43:30 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:42:21 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:38:30 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:37:21 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:33:30 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:32:21 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:28:30 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:27:21 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:23:30 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:22:21 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:18:30 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:17:21 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:13:30 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:12:21 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:08:30 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:07:21 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:03:30 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:02:21 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:58:30 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:57:21 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:53:30 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:52:21 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:48:30 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE

5:47:21 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:43:30 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:42:21 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:38:30 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:37:21 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:33:40 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:32:31 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:32:20 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:07:04 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:03:07 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:02:04 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:58:07 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:57:04 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:53:07 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:52:04 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:48:07 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:47:04 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:43:07 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:42:04 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:38:07 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:37:04 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:33:07 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:32:04 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:28:07 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:27:04 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:23:07 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:22:04 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:18:07 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:17:04 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:13:07 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE

4:12:04 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:08:07 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:07:04 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:03:07 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:02:04 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:58:07 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:57:04 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:53:07 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:52:04 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:48:07 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:47:04 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:43:07 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:42:04 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:38:07 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:37:04 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:33:37 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:32:17 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:04:24 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:03:15 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:59:24 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:58:15 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:54:24 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:53:15 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:49:24 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:48:15 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:44:24 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:43:15 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:39:24 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:38:15 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:34:24 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/12/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE

12:33:15 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:29:24 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:28:15 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:24:24 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:23:15 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:19:24 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:18:15 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:14:24 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:13:15 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:09:24 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:08:15 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:04:24 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:03:15 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:59:24 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:58:15 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:54:24 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:53:15 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:49:24 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:48:15 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:45:14 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:03:15 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:03:14 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:23:59 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:23:59 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:27:21 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:45:08 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:44:06 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:43:28 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:42:16 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:40:08 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE

2:39:06 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:35:08 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:34:06 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:30:08 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:29:06 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:25:48 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:24:06 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:20:08 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:19:06 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:15:08 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:14:06 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:10:08 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:09:06 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:05:08 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:04:06 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:00:18 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:59:06 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:55:08 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:54:06 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:50:08 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:49:06 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:48:18 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:46:19 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:45:08 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:37:09 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:36:58 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:35:10 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:35:08 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:34:06 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:30:08 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE

1:29:06 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:25:18 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:45:27 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:45:08 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:44:06 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:40:37 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:22:45 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:21:06 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:07:11 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:07:06 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:05:58 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:05:26 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:18:10 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:15:16 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:14:07 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:10:36 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:09:07 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:15:06 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:13:57 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:10:06 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:08:57 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:05:06 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:03:57 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:00:16 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:58:57 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:55:06 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:53:57 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:50:06 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:48:57 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:45:06 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE

6:43:57 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:40:06 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:38:57 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:35:06 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:33:57 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:30:06 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:28:57 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:25:06 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:23:57 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:20:06 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:18:57 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:15:06 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:13:57 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:10:06 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:08:57 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:05:06 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:03:57 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:00:06 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:58:57 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:16:54 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:15:45 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:11:54 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:10:45 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:06:54 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:05:45 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:01:54 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:00:45 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:56:54 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:55:45 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:51:54 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/11/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE

4:50:45 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:46:54 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:45:45 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:41:54 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:40:45 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:36:54 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:35:45 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:31:54 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:30:45 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:26:54 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:25:45 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:21:54 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:20:45 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:16:54 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:15:45 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:11:54 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:10:45 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:06:54 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:05:45 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:01:54 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:00:45 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:57:14 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:55:45 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:55:44 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:07:18 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:03:27 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:02:18 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:58:27 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:57:18 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:53:27 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE

6:52:18 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:48:27 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:47:18 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:43:27 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:42:18 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:38:27 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:37:18 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:33:27 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:32:18 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:28:27 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:27:18 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:23:27 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:22:18 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:18:27 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:17:18 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:13:27 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:12:18 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:08:27 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:07:18 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:03:27 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:02:18 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:58:27 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:57:18 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:53:27 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:52:18 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:48:37 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:47:18 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:47:17 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:02:24 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:58:32 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE

4:57:24 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:53:32 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:52:24 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:48:32 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:47:24 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:43:32 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:42:24 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:38:32 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:37:24 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:33:32 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:32:24 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:28:32 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:27:24 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:23:32 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:22:24 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:18:32 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:17:24 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:13:32 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:12:24 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:08:32 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:07:24 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:03:32 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:02:24 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:58:32 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:57:24 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:53:32 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:52:24 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:48:32 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:47:24 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:43:32 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE
12/10/2009
XE

3:42:24 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:38:32 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:37:24 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:33:32 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:32:24 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:28:32 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:27:24 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:23:32 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:22:24 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:18:32 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:17:24 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:13:32 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:12:24 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:08:32 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:07:24 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:03:32 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:02:24 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:58:32 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:57:24 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:55:12 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:54:05 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:53:32 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:52:24 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:48:32 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:47:24 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:45:42 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:43:31 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:58:08 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:57:52 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:50:29 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/10/2009 4:15:47 AM
XE
12/10/2009 4:14:54 AM
XE
12/10/2009 4:10:26 AM
XE
12/9/2009 3:26:43 AM
XE
12/8/2009 9:13:44 PM
XE
12/8/2009 9:12:35 PM
XE
12/8/2009 9:08:54 PM
XE
12/8/2009 9:07:35 PM
XE
12/8/2009 4:21:45 PM
XE
12/8/2009 4:20:37 PM
XE
12/8/2009 4:16:45 PM
XE
12/8/2009 4:15:37 PM
XE
12/8/2009 4:11:45 PM
XE
12/8/2009 4:10:37 PM
XE
12/8/2009 4:06:45 PM
XE
12/8/2009 4:05:37 PM
XE
12/8/2009 4:01:45 PM
XE
12/8/2009 4:00:37 PM
XE
12/8/2009 3:56:45 PM
XE
12/8/2009 3:55:37 PM
XE
12/8/2009 3:51:45 PM
XE
12/8/2009 3:50:37 PM
XE
12/8/2009 3:46:45 PM
XE
12/8/2009 3:45:37 PM
XE
12/8/2009 3:41:45 PM
XE
12/8/2009 3:40:37 PM
XE
12/8/2009 3:36:45 PM
XE
12/8/2009 3:35:37 PM
XE
12/8/2009 3:31:45 PM
XE
12/8/2009 3:30:37 PM
XE

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/8/2009
XE
12/8/2009
XE
12/8/2009
XE
12/8/2009
XE
12/8/2009
XE
12/8/2009
XE
12/8/2009
XE
12/8/2009
XE
12/8/2009
XE
12/8/2009
XE
12/8/2009
XE
12/8/2009
XE
12/8/2009
XE
12/8/2009
XE
12/8/2009
XE
12/8/2009
XE
12/8/2009
XE
12/8/2009
XE
12/8/2009
XE
12/8/2009
XE
12/8/2009
XE
12/8/2009
XE
12/8/2009
XE
12/8/2009
XE
12/8/2009
XE
12/8/2009
XE
12/8/2009
XE
12/8/2009
XE
12/8/2009
XE
12/8/2009
XE

3:26:45 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:25:37 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:21:45 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:20:38 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:16:45 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:15:38 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:11:45 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:10:38 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:06:45 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:05:38 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:01:45 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:00:38 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:56:45 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:55:38 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:51:45 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:50:38 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:46:45 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:45:38 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:41:45 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:40:38 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:36:45 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:35:38 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:31:45 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:30:38 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:29:35 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:23:18 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:27:06 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:25:16 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:52:53 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:51:35 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/8/2009
XE
12/8/2009
XE
12/8/2009
XE
12/8/2009
XE
12/7/2009
XE
12/7/2009
XE
12/7/2009
XE
12/7/2009
XE
12/7/2009
XE
12/7/2009
XE
12/7/2009
XE
12/7/2009
XE
12/7/2009
XE
12/7/2009
XE
12/7/2009
XE
12/7/2009
XE
12/7/2009
XE
12/7/2009
XE
12/7/2009
XE
12/7/2009
XE
12/7/2009
XE
12/7/2009
XE
12/7/2009
XE
12/7/2009
XE
12/7/2009
XE
12/7/2009
XE
12/7/2009
XE
12/7/2009
XE
12/6/2009
XE
12/6/2009
XE

4:42:19 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:41:10 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:12:31 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:11:25 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:51:55 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:49:15 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:48:35 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:47:05 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:36:25 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:34:55 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:34:35 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:32:32 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:23:35 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:43:31 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:36:24 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:34:24 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:33:24 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:32:08 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:22:59 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:20:29 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:15:59 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:14:30 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:08:29 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:05:36 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:35:07 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:33:45 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:02:54 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:01:50 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:30:32 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:29:19 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE

3:25:22 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:23:53 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:59:52 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:57:52 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:55:22 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:53:52 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:49:42 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:46:22 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:30:02 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:28:32 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:27:22 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:25:53 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:22:42 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:21:12 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:18:42 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:17:12 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:16:02 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:14:32 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:11:52 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:10:22 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:07:12 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:05:43 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:03:24 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:01:54 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:01:14 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:59:44 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:58:04 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:56:34 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:55:14 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:53:44 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/6/2009
XE
12/5/2009
XE
12/5/2009
XE

4:50:44 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:49:14 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:45:24 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:43:54 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:41:44 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:40:14 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:37:54 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:36:24 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:33:54 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:32:24 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:29:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:28:05 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:18:24 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:16:54 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:13:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:11:34 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:10:44 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:09:14 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:08:24 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:06:14 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:04:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:03:04 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:53:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:51:59 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:06:54 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:05:50 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:05:14 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:50:34 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:12:02 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:11:47 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/5/2009
XE
12/5/2009
XE
12/5/2009
XE
12/4/2009
XE
12/4/2009
XE
12/4/2009
XE
12/4/2009
XE
12/4/2009
XE
12/4/2009
XE
12/4/2009
XE
12/4/2009
XE
12/4/2009
XE
12/4/2009
XE
12/4/2009
XE
12/4/2009
XE
12/4/2009
XE
12/4/2009
XE
12/4/2009
XE
12/4/2009
XE
12/4/2009
XE
12/4/2009
XE
12/4/2009
XE
12/4/2009
XE
12/4/2009
XE
12/4/2009
XE
12/4/2009
XE
12/4/2009
XE
12/4/2009
XE
12/4/2009
XE
12/4/2009
XE

12:28:31 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:28:12 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:26:53 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:52:37 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:54:11 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:50:13 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:49:11 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:45:13 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:44:11 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:40:13 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:39:11 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:35:13 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:34:11 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:30:13 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:29:11 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:25:13 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:24:11 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:20:13 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:19:11 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:15:13 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:14:11 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:10:13 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:09:11 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:05:13 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:04:11 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:00:13 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:59:11 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:55:13 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:54:11 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:50:13 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/4/2009
XE
12/4/2009
XE
12/4/2009
XE
12/4/2009
XE
12/4/2009
XE
12/4/2009
XE
12/4/2009
XE
12/4/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE

2:49:11 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:45:13 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:44:11 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:43:23 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:59:23 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:59:13 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:18:07 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:17:53 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:27:40 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:26:52 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:25:47 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:21:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:20:20 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:16:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:15:47 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:13:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:12:48 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:11:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:10:47 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:07:06 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:05:47 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:03:32 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:02:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:58:32 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:57:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:53:32 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:52:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:48:32 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:47:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:43:32 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE

5:42:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:38:32 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:37:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:33:32 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:32:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:28:32 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:27:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:23:32 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:22:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:18:32 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:17:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:13:32 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:12:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:08:32 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:07:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:03:32 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:02:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:01:22 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:00:16 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:58:32 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:57:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:53:32 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:52:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:48:32 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:47:32 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:43:32 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:42:32 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:38:42 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:37:26 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:33:32 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/3/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE

4:32:32 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:28:32 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:27:32 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:23:32 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:22:32 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:18:32 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:17:32 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:14:22 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:08:03 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:39:40 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:26:42 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:25:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:24:46 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:20:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:19:46 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:15:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:14:46 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:10:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:09:46 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:05:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:04:46 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:00:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:59:46 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:55:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:54:46 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:50:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:49:46 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:45:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:44:46 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:40:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE

2:39:46 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:35:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:34:46 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:30:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:29:46 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:25:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:24:46 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:20:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:19:46 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:15:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:14:46 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:10:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:09:46 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:05:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:04:46 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:00:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:59:46 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:55:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:54:47 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:50:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:49:47 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:45:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:44:47 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:40:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:39:47 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:35:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:34:47 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:30:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:29:47 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:25:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE

1:24:47 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:20:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:19:47 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:15:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:14:47 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:10:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:09:47 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:05:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:04:47 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:00:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:59:47 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:55:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:54:47 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:50:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:49:47 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:45:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:44:47 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:40:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:39:47 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:35:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:34:47 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:30:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:29:47 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:25:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:24:47 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:20:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:19:47 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:15:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:14:47 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:10:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE

12:09:47 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:05:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:04:47 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:00:56 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:59:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:55:56 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:54:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:50:56 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:49:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:45:56 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:44:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:40:56 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:39:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:35:56 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:34:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:31:06 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:29:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:07:56 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:06:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:02:56 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:01:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:57:56 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:56:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:52:56 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:51:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:47:56 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:46:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:42:56 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:41:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:37:56 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE

7:36:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:32:56 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:31:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:27:56 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:26:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:22:56 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:21:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:17:56 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:16:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:12:56 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:11:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:07:56 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:06:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:02:56 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:01:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:57:56 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:56:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:52:56 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:51:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:47:56 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:46:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:42:56 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:41:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:37:56 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:36:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:32:56 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:31:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:27:56 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:26:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:22:56 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE

6:21:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:17:56 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:16:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:12:56 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:11:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:07:56 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:06:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:02:56 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:01:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:57:56 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:56:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:53:06 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:51:47 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:12:49 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:11:40 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:07:49 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:06:40 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:02:49 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:01:40 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:57:49 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:56:40 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:52:49 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:51:40 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:47:49 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:46:40 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:42:49 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:41:40 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:37:49 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:36:40 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:32:49 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE

4:31:40 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:27:49 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:26:40 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:22:49 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:21:40 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:17:49 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:16:40 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:12:49 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:11:40 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:07:59 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:06:40 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:02:49 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:01:40 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:57:49 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:56:40 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:52:49 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:51:40 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:47:49 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:46:40 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:42:49 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:41:40 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:37:49 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:36:40 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:32:49 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:31:40 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:27:49 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:26:40 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:22:49 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:21:40 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:17:49 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/2/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE

3:16:40 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:16:09 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:14:52 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:12:49 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:11:40 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:08:09 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:06:40 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:06:39 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:23:30 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:19:39 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:18:30 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:16:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:14:59 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:14:39 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:13:30 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:09:39 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:08:30 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:04:39 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:03:30 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:59:39 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:58:30 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:54:39 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:53:30 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:49:39 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:48:30 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:44:39 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:43:30 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:39:39 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:38:30 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:34:39 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE

6:33:30 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:29:39 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:28:30 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:24:39 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:23:30 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:19:39 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:18:30 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:14:39 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:13:30 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:09:39 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:08:30 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:04:49 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:03:30 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:03:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:06:19 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:02:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:01:19 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:57:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:56:19 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:52:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:51:19 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:47:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:46:19 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:42:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:41:19 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:37:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:36:19 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:32:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:31:19 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:27:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE

4:26:19 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:22:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:21:19 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:17:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:16:19 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:12:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:11:20 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:07:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:06:20 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:02:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:01:20 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:57:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:56:20 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:52:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:51:20 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:47:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:46:20 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:42:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:41:20 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:37:39 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:36:20 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:32:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:31:20 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:27:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:26:20 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:22:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:21:20 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:17:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:16:20 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:12:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE

3:11:20 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:07:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:06:20 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:02:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:01:20 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:57:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:56:20 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:52:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:51:20 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:47:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:46:20 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:42:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:41:20 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:37:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:36:20 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:33:19 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:31:20 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:29:59 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:27:50 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:27:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:26:20 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:25:59 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:24:30 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:22:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:21:20 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:17:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:16:20 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:12:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:10:30 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:08:59 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE

2:07:30 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:07:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:05:10 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:02:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:01:20 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:59:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:58:19 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:57:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:56:20 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:52:29 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:51:20 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:47:39 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:46:20 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:14:40 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:13:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:09:40 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:08:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:04:40 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:03:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:59:40 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:58:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:54:40 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:53:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:49:40 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:48:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:44:40 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:43:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:39:40 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:38:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:34:40 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE
12/1/2009
XE

6:33:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:29:40 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:28:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:24:41 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:23:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:19:41 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:18:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:14:41 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:13:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:09:41 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:08:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:08:01 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:06:29 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:04:41 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:03:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:59:41 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:58:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:54:41 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:53:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:49:40 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:48:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:44:40 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:43:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:39:40 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:38:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:34:40 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:33:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:29:40 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:28:31 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:24:40 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12/1/2009 5:23:31 AM
XE
12/1/2009 5:19:40 AM
XE
12/1/2009 5:17:32 AM
XE
12/1/2009 5:14:40 AM
XE
12/1/2009 5:13:31 AM
XE
12/1/2009 5:09:40 AM
XE
12/1/2009 5:08:31 AM
XE
12/1/2009 5:04:40 AM
XE
12/1/2009 5:03:31 AM
XE
12/1/2009 4:59:40 AM
XE
12/1/2009 4:58:31 AM
XE
12/1/2009 4:54:40 AM
XE
12/1/2009 4:53:31 AM
XE
12/1/2009 4:49:40 AM
XE
12/1/2009 4:48:31 AM
XE
12/1/2009 4:45:10 AM
XE
12/1/2009 3:16:51 AM
XE
11/30/2009 7:37:24 PM
XE
11/30/2009 6:02:36 PM
XE
11/30/2009 4:09:27 PM
XE
11/30/2009 10:18:23 AM
XE
11/30/2009 10:12:21 AM
XE
11/30/2009 10:12:21 AM
XE
11/30/2009 5:17:25 AM
XE
11/30/2009 5:17:25 AM
XE
11/29/2009 5:54:49 PM
XE
11/29/2009 5:54:49 PM
XE
11/29/2009 2:06:04 PM
XE
11/29/2009 2:05:49 PM
XE
11/29/2009 4:51:40 AM
XE

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11/29/2009
XE
11/28/2009
XE
11/28/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE

4:51:29 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:26:08 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:25:59 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:49:19 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:18:42 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:17:33 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:13:42 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:12:33 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:08:52 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:07:33 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:03:42 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:02:33 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:58:42 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:57:33 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:53:42 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:52:33 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:48:42 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:47:33 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:43:42 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:42:33 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:38:42 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:37:33 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:33:42 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:32:33 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:28:42 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:27:33 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:23:42 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:22:33 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:18:42 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:17:33 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE

3:13:42 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:12:33 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:09:12 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:07:48 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:38:13 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:37:04 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:33:13 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:32:04 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:28:13 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:27:04 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:23:13 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:22:04 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:18:13 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:17:04 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:13:13 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:12:04 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:08:13 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:07:04 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:03:13 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:02:04 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:58:13 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:57:04 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:53:13 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:52:04 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:48:13 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:47:04 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:43:13 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:42:04 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:39:33 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:37:04 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE

12:33:13 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:32:04 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:31:33 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:30:03 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:28:13 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:27:04 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:24:03 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:22:04 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:18:13 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:15:10 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:13:13 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:12:04 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:08:13 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:07:04 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:03:13 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:02:04 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:59:03 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:57:04 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:53:13 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:52:04 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:51:53 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:50:23 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:48:13 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:47:04 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:46:43 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:45:13 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:43:13 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:42:04 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:41:43 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:40:13 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE

11:39:33 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:37:03 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:34:33 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:32:04 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:29:13 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:27:23 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:27:03 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:52:25 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:48:35 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:47:25 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:43:35 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:42:25 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:38:35 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:37:25 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:33:35 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:32:25 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:28:35 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:27:25 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:23:35 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:22:25 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:21:35 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:20:19 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:18:35 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:17:25 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:13:35 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:12:25 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:08:35 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:07:25 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:03:35 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:02:25 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE

2:58:35 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:57:26 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:53:35 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:52:26 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:48:35 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:47:26 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:43:35 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:42:26 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:38:35 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:37:26 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:33:35 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:32:26 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:32:15 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:31:08 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:28:35 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:27:26 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:25:35 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:24:27 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:23:35 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:22:26 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:18:35 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:17:26 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:15:55 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:14:43 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:13:35 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:12:26 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:12:25 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:10:48 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:08:35 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:07:26 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE

2:03:35 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:02:26 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:58:35 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:57:26 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:53:35 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:52:26 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:48:35 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:47:26 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:43:35 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:42:26 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:38:35 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:37:26 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:33:35 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:32:26 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:28:35 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:27:26 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:23:35 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:22:26 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:18:35 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:17:26 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:13:35 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:12:26 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:08:35 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:07:26 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:03:35 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:02:26 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:58:35 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:57:26 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:53:35 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:52:26 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/27/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE

12:48:35 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:47:26 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:46:15 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:44:47 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:43:35 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:42:26 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:38:35 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:37:26 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:35:25 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:34:24 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:33:45 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:32:26 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:32:25 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:13:25 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:09:25 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:08:25 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:04:25 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

8:03:25 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:59:25 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:58:25 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:54:25 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:53:25 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:49:25 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:48:25 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:44:35 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:43:25 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:39:35 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:38:25 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:34:35 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:33:25 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE

7:29:35 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:28:25 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:24:35 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:23:25 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:19:35 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:18:25 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:14:35 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:13:25 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:09:35 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:08:25 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:04:35 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:03:25 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:59:25 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:58:12 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:56:35 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:55:06 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:54:35 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:53:25 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:50:05 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:36:27 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:34:35 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:33:25 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:29:35 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:28:25 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:24:35 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:23:25 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:19:35 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:18:25 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:14:35 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:13:25 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE

6:09:35 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:08:25 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:04:35 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:03:25 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:59:35 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:58:25 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:54:35 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:53:25 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:49:35 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:47:31 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:44:35 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:43:25 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:43:15 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:41:46 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:39:35 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:38:25 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:34:35 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:33:25 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:29:35 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:28:25 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:24:35 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:23:25 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:19:35 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:18:25 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:17:05 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:15:36 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:14:35 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:13:25 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:12:55 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:11:26 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/26/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE

5:09:35 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:08:25 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:08:05 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:06:06 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:04:35 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:02:36 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:00:35 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:58:25 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:57:55 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:13:26 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:13:25 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:25:37 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:25:36 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:59:04 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:59:03 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:21:00 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:02:12 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:01:53 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:00:12 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:00:12 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:54:03 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:54:02 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:29:43 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:27:51 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:26:42 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:22:51 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:21:42 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:17:51 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:16:42 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:12:51 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE

1:11:42 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:07:51 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:06:42 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:02:51 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:01:42 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:57:51 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:56:42 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:52:51 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:51:42 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:47:51 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:46:42 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:42:51 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:41:42 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:41:31 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:40:14 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:38:11 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:36:42 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:34:11 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:31:42 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:31:41 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:28:42 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:27:51 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:26:42 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:23:01 PM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:21:42 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:20:51 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:19:50 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:15:51 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:14:50 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:10:51 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE

6:09:50 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:05:51 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:04:50 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:00:51 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:59:50 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:55:51 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:54:50 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:50:51 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:49:50 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:45:51 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:44:50 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:40:51 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:39:50 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:35:51 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:34:50 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:30:51 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:29:50 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:25:51 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:24:50 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:20:51 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:19:50 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:15:51 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:14:50 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:10:51 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:09:50 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:05:51 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:04:50 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:00:51 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:59:50 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:55:51 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/25/2009
XE
11/24/2009
XE
11/24/2009
XE
11/24/2009
XE
11/24/2009
XE
11/24/2009
XE
11/24/2009
XE
11/24/2009
XE
11/24/2009
XE
11/24/2009
XE
11/23/2009
XE
11/23/2009
XE
11/23/2009
XE
11/23/2009
XE
11/23/2009
XE
11/23/2009
XE
11/22/2009
XE
11/22/2009
XE
11/22/2009
XE
11/22/2009
XE
11/22/2009
XE
11/22/2009
XE
11/21/2009
XE

4:54:50 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:50:51 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:49:50 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:45:51 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:44:50 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:42:21 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:00:24 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:00:24 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:36:55 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:36:33 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:48:18 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:27:46 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:27:30 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:05:12 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:04:58 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:48:35 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:48:15 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:57:37 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:57:23 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:59:36 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:59:11 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:13:03 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:12:42 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:02:23 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:01:53 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:52:32 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:52:01 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:27:28 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:27:14 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:28:36 PM

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

Process start

11/21/2009
XE
11/21/2009
XE
11/21/2009
XE
11/21/2009
XE
11/21/2009
XE
11/20/2009
XE
11/20/2009
XE
11/20/2009
XE
11/20/2009
XE
11/20/2009
XE
11/20/2009
XE
11/20/2009
XE
11/19/2009
XE
11/19/2009
XE
11/19/2009
XE
11/19/2009
XE
11/19/2009
XE
11/19/2009
XE
11/19/2009
XE
11/19/2009
XE
11/19/2009
XE
11/19/2009
XE
11/19/2009
XE
11/19/2009
XE
11/18/2009
XE
11/18/2009
XE
11/18/2009
XE
11/18/2009
XE
11/18/2009
XE
11/18/2009
XE

5:51:13 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:48:24 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:47:06 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

1:57:16 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:33:50 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:55:08 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

6:54:48 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:00:55 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:52:28 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

9:51:08 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:52:29 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:51:00 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:55:02 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:53:05 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:13:07 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:12:00 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:56:06 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:54:47 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

3:22:23 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:48:19 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:48:19 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:11:31 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:11:00 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:28:57 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

7:17:14 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:31:27 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:31:11 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

12:51:09 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11:19:28 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:15:25 AM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

11/18/2009
XE
11/18/2009
XE
11/18/2009
XE
11/17/2009
XE
11/17/2009
XE
11/17/2009
XE
11/17/2009
XE
11/17/2009
XE
11/17/2009
XE
dfsvc.exe
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009

10:14:54 AM Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:45:59 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

4:45:34 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

10:33:29 PM Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:51:55 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

5:51:54 PM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:49:15 PM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:27:17 AM

Process exit

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

2:24:38 AM

Process start

C:\WINDOWS\system32\SEARCHPROTOCOLHOST.E

(events: 7)
8:51:13 AM
8:51:11 AM
8:49:10 AM
8:48:40 AM
8:46:40 AM
8:46:10 AM
8:44:10 AM
8:43:40 AM
8:41:40 AM
8:41:10 AM
8:39:10 AM
8:38:40 AM
8:36:40 AM
8:36:10 AM
8:34:10 AM
8:33:40 AM
8:31:40 AM
8:31:10 AM
8:29:10 AM
8:28:40 AM
8:26:40 AM
8:26:10 AM
8:24:10 AM
8:23:40 AM
8:21:10 AM
8:20:40 AM
8:18:40 AM
8:18:10 AM
8:16:10 AM
8:15:40 AM
8:13:40 AM
8:13:10 AM
8:11:10 AM
8:10:40 AM
8:08:40 AM
8:08:10 AM
8:06:10 AM
8:05:40 AM
8:03:40 AM
8:03:10 AM
8:01:10 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009

8:00:40
7:58:40
7:58:10
7:56:10
7:55:40
7:53:40
7:53:10
7:51:10
7:50:40
7:48:40
7:48:10
7:46:10
7:45:40
7:43:40
7:43:10
7:41:10
7:40:40
7:38:40
7:38:10
7:36:10
7:35:40
7:33:40
7:33:10
7:31:10
7:30:40
7:28:40
7:28:10
7:26:10
7:25:40
7:23:40
7:23:10
7:21:10
7:20:40
7:18:40
7:18:10
7:16:10
7:15:40
7:13:40
7:13:10
7:11:09
7:10:40
7:08:39
7:08:10
7:06:09
7:05:40
7:03:35
6:59:30
6:55:34
6:54:30
6:52:34
6:51:30
6:50:34
6:47:51
6:45:34
6:44:30
6:40:34
6:39:30
6:35:34
6:34:30
6:30:34

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009

6:29:30
6:25:34
6:24:30
6:20:34
6:19:30
6:15:34
6:14:30
6:10:34
6:09:30
6:05:34
6:04:30
6:00:34
5:59:30
5:55:34
5:54:30
5:50:34
5:49:30
5:45:34
5:44:30
5:40:34
5:39:30
5:35:34
5:34:30
5:30:34
5:29:30
5:25:34
5:24:30
5:20:34
5:19:30
5:15:34
5:14:30
5:10:34
5:09:30
5:05:34
5:04:30
5:00:34
4:59:30
4:55:34
4:54:30
4:50:34
4:49:30
4:45:34
4:44:31
4:40:44
4:39:30
4:35:34
4:34:31
4:30:34
4:29:31
4:25:34
4:24:31
4:20:34
4:19:31
4:15:34
4:14:31
4:10:34
4:09:31
4:05:34
4:04:31
4:00:34

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009

3:59:31
3:55:34
3:54:31
3:50:34
3:49:31
3:45:34
3:44:31
3:40:34
3:39:31
3:35:34
3:34:31
3:30:34
3:29:31
3:25:34
3:24:31
3:24:14
3:22:57
3:20:54
3:19:03
3:15:34
3:14:31
3:10:34
3:09:31
3:05:34
3:04:31
3:00:34
2:59:31
2:55:34
2:54:31
2:50:34
2:49:31
2:45:34
2:44:31
2:40:34
2:39:31
2:35:34
2:34:31
2:30:34
2:29:31
2:25:34
2:24:31
2:20:34
2:19:31
2:15:34
2:14:31
2:10:34
2:09:31
2:05:34
2:04:31
2:00:34
1:59:31
1:55:34
1:54:31
1:50:34
1:49:31
1:45:34
1:44:31
1:40:34
1:39:31
1:35:34

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009

1:34:31 AM
1:30:34 AM
1:29:31 AM
1:25:34 AM
1:24:31 AM
1:20:34 AM
1:19:31 AM
1:15:34 AM
1:14:31 AM
1:10:34 AM
1:09:31 AM
1:05:34 AM
1:04:31 AM
1:00:34 AM
12:59:31 AM
12:55:34 AM
12:54:31 AM
12:50:34 AM
12:49:31 AM
12:45:34 AM
12:44:31 AM
12:40:34 AM
12:39:31 AM
12:35:34 AM
12:34:31 AM
12:30:34 AM
12:29:31 AM
12:25:34 AM
12:24:31 AM
12:20:34 AM
12:19:31 AM
12:15:34 AM
12:14:31 AM
12:10:34 AM
12:09:31 AM
12:05:34 AM
12:04:31 AM
12:02:04 AM
12:01:02 AM
12:00:34 AM
11:59:32 PM
11:55:34 PM
11:54:31 PM
11:53:35 PM
11:51:31 PM
11:50:34 PM
11:49:31 PM
11:45:34 PM
11:44:32 PM
11:40:34 PM
11:39:32 PM
11:35:34 PM
11:34:32 PM
11:30:34 PM
11:29:32 PM
11:25:34 PM
11:24:32 PM
11:20:34 PM
11:19:32 PM
11:15:34 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009

11:14:32 PM
11:10:34 PM
11:09:32 PM
11:05:34 PM
11:04:32 PM
11:00:34 PM
10:59:32 PM
10:55:34 PM
10:54:32 PM
10:50:34 PM
10:49:32 PM
10:45:34 PM
10:44:32 PM
10:40:34 PM
10:39:32 PM
10:35:34 PM
10:34:32 PM
10:30:34 PM
10:29:32 PM
10:25:34 PM
10:24:32 PM
10:20:34 PM
10:19:32 PM
10:15:34 PM
10:14:32 PM
10:10:34 PM
10:09:32 PM
10:05:34 PM
10:04:32 PM
10:00:34 PM
9:59:32 PM
9:59:24 PM
9:58:17 PM
9:55:34 PM
9:54:32 PM
9:50:34 PM
9:49:32 PM
9:45:34 PM
9:44:32 PM
9:40:34 PM
9:39:32 PM
9:35:34 PM
9:34:32 PM
9:30:34 PM
9:29:32 PM
9:25:34 PM
9:24:32 PM
9:20:34 PM
9:19:32 PM
9:15:34 PM
9:14:32 PM
9:10:34 PM
9:09:32 PM
9:05:34 PM
9:04:32 PM
9:00:34 PM
8:59:32 PM
8:55:34 PM
8:54:32 PM
8:50:34 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009

8:49:32
8:45:34
8:44:32
8:40:34
8:39:32
8:35:34
8:34:32
8:33:44
8:31:34
8:31:04
8:29:04
8:28:34
8:26:34
8:26:04
8:24:04
8:23:34
8:21:34
8:21:04
8:19:04
8:18:34
8:16:34
8:16:04
8:14:04
8:13:34
8:11:34
8:11:04
8:09:04
8:08:34
8:06:34
8:06:04
8:04:04
8:03:34
8:01:34
8:01:04
7:59:04
7:58:34
7:56:34
7:56:04
7:54:04
7:53:34
7:51:34
7:51:04
7:49:04
7:48:34
7:46:34
7:46:04
7:44:04
7:43:34
7:41:34
7:41:04
7:39:04
7:38:34
7:36:34
7:36:04
7:34:04
7:33:34
7:31:34
7:31:04
7:29:04
7:28:34

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009

7:26:34
7:26:04
7:24:04
7:23:34
7:21:34
7:21:04
7:19:04
7:18:34
7:16:34
7:16:04
7:14:04
7:13:34
7:11:34
7:11:04
7:09:04
7:08:34
7:06:04
7:05:34
7:03:34
7:03:04
7:01:04
7:00:34
6:58:34
6:58:04
6:56:04
6:55:34
6:53:34
6:53:04
6:51:04
6:50:34
6:48:34
6:48:04
6:46:04
6:45:34
6:43:34
6:43:04
6:41:04
6:40:34
6:38:34
6:38:04
6:36:04
6:35:34
6:33:34
6:33:04
6:31:04
6:30:34
6:28:34
6:28:04
6:26:04
6:25:34
6:23:34
6:23:04
6:21:04
6:20:34
6:18:34
6:18:04
6:16:04
6:15:34
6:13:34
6:13:04

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009

6:11:04
6:10:34
6:08:34
6:08:04
6:06:04
6:05:34
6:03:34
6:03:04
6:01:04
6:00:34
5:58:34
5:58:04
5:56:04
5:55:34
5:53:34
5:53:04
5:51:04
5:50:34
5:48:34
5:48:04
5:46:04
5:45:34
5:43:34
5:43:04
5:41:04
5:40:34
5:38:34
5:38:04
5:36:04
5:35:34
5:33:34
5:33:04
5:31:04
5:30:34
5:28:34
5:28:04
5:26:04
5:25:34
5:23:34
5:23:04
5:21:04
5:20:34
5:18:15
5:18:04
5:15:44
5:15:35
5:13:34
5:13:04
5:10:45
5:10:34
5:08:34
5:08:04
5:06:04
5:05:34
5:03:04
5:02:34
5:00:34
5:00:04
4:58:04
4:57:34

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009

4:55:34
4:55:04
4:53:04
4:52:34
4:50:34
4:50:04
4:48:04
4:47:34
4:45:34
4:45:04
4:43:04
4:42:34
4:40:34
4:40:04
4:38:04
4:37:34
4:35:34
4:35:04
4:33:04
4:32:34
4:30:34
4:30:04
4:28:04
4:27:34
4:25:34
4:25:04
4:23:04
4:22:34
4:20:34
4:20:04
4:18:04
4:17:34
4:15:34
4:15:04
4:13:04
4:12:34
4:10:34
4:10:04
4:08:04
4:07:34
4:05:34
4:05:04
4:03:04
4:02:34
4:00:34
4:00:04
3:58:04
3:57:34
3:55:34
3:55:04
3:53:04
3:52:34
3:50:34
3:50:04
3:48:04
3:47:34
3:45:34
3:45:04
3:43:04
3:42:34

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009

3:40:34
3:40:04
3:38:04
3:37:34
3:35:34
3:35:04
3:33:04
3:32:34
3:30:34
3:30:04
3:28:04
3:27:34
3:25:34
3:25:04
3:23:04
3:22:34
3:20:34
3:20:04
3:18:04
3:17:34
3:15:34
3:15:04
3:13:04
3:12:34
3:10:34
3:10:04
3:08:04
3:07:34
3:05:34
3:05:04
3:03:04
3:02:34
3:00:34
3:00:04
2:58:04
2:57:34
2:55:34
2:55:04
2:53:04
2:52:34
2:50:34
2:50:04
2:48:04
2:47:34
2:45:34
2:45:04
2:43:04
2:42:34
2:40:34
2:40:04
2:38:04
2:37:34
2:35:34
2:35:04
2:33:04
2:32:34
2:30:34
2:30:04
2:28:04
2:27:34

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009

2:25:34
2:25:04
2:23:04
2:22:34
2:20:34
2:20:04
2:18:04
2:17:34
2:15:34
2:15:04
2:13:04
2:12:34
2:10:34
2:10:04
2:08:04
2:07:34
2:05:34
2:05:04
2:03:04
2:02:34
2:00:34
2:00:04
1:58:04
1:57:34
1:55:34
1:55:04
1:53:04
1:52:34
1:50:34
1:50:04
1:48:04
1:47:34
1:45:34
1:45:04
1:43:04
1:42:34
1:40:34
1:40:04
1:38:04
1:37:34
1:35:34
1:35:04
1:33:04
1:32:34
1:30:34
1:30:04
1:28:04
1:27:34
1:25:34
1:25:04
1:23:04
1:22:34
1:20:34
1:20:04
1:18:04
1:17:34
1:15:34
1:15:04
1:13:04
1:12:34

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009

1:10:34 PM
1:10:04 PM
1:08:04 PM
1:07:34 PM
1:05:34 PM
1:05:04 PM
1:03:04 PM
1:02:34 PM
1:00:34 PM
1:00:04 PM
12:58:04 PM
12:57:34 PM
12:55:34 PM
12:55:04 PM
12:53:04 PM
12:52:34 PM
12:50:34 PM
12:50:04 PM
12:48:04 PM
12:47:34 PM
12:45:34 PM
12:45:04 PM
12:43:04 PM
12:42:34 PM
12:40:34 PM
12:40:04 PM
12:38:04 PM
12:37:34 PM
12:35:34 PM
12:35:04 PM
12:33:04 PM
12:32:34 PM
12:30:34 PM
12:30:04 PM
12:28:04 PM
12:27:34 PM
12:25:34 PM
12:25:04 PM
12:23:04 PM
12:22:34 PM
12:20:34 PM
12:20:04 PM
12:18:04 PM
12:17:34 PM
12:15:34 PM
12:15:04 PM
12:13:04 PM
12:12:34 PM
12:10:34 PM
12:10:04 PM
12:08:04 PM
12:07:34 PM
12:05:34 PM
12:05:04 PM
12:03:04 PM
12:02:34 PM
12:00:34 PM
12:00:04 PM
11:58:04 AM
11:57:34 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009

11:55:34 AM
11:55:04 AM
11:53:04 AM
11:52:34 AM
11:50:34 AM
11:50:04 AM
11:48:04 AM
11:47:34 AM
11:45:34 AM
11:45:04 AM
11:43:04 AM
11:42:34 AM
11:40:34 AM
11:40:04 AM
11:38:04 AM
11:37:34 AM
11:35:34 AM
11:35:04 AM
11:33:04 AM
11:32:34 AM
11:30:34 AM
11:30:04 AM
11:28:04 AM
11:27:34 AM
11:25:34 AM
11:25:04 AM
11:23:04 AM
11:22:34 AM
11:20:34 AM
11:20:04 AM
11:17:34 AM
11:17:04 AM
11:14:55 AM
11:14:34 AM
8:55:54 AM
8:55:24 AM
8:53:24 AM
8:52:54 AM
8:50:54 AM
8:50:24 AM
8:48:24 AM
8:47:54 AM
8:45:54 AM
8:45:24 AM
8:43:24 AM
8:42:54 AM
8:40:54 AM
8:40:24 AM
8:38:24 AM
8:37:54 AM
8:35:54 AM
8:35:24 AM
8:33:24 AM
8:32:54 AM
8:30:54 AM
8:30:24 AM
8:28:24 AM
8:27:54 AM
8:25:54 AM
8:25:24 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009

8:23:24
8:22:54
8:20:54
8:20:24
8:18:24
8:17:54
8:15:54
8:15:24
8:13:24
8:12:54
8:10:54
8:10:24
8:08:24
8:07:54
8:05:54
8:05:24
8:03:24
8:02:54
8:00:54
8:00:24
7:58:24
7:57:54
7:55:54
7:55:24
7:53:24
7:52:54
7:50:54
7:50:24
7:48:24
7:47:54
7:45:54
7:45:24
7:43:24
7:42:54
7:40:54
7:40:24
7:38:24
7:37:54
7:35:54
7:35:24
7:33:24
7:32:54
7:30:54
7:30:24
7:28:24
7:27:54
7:25:54
7:25:24
7:23:24
7:22:54
7:20:54
7:20:24
7:18:24
7:17:54
7:15:54
7:15:24
7:13:24
7:12:54
7:10:54
7:10:24

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009

7:08:24
7:07:54
7:05:54
7:05:24
7:02:54
7:02:24
7:00:24
6:59:54
6:57:54
6:57:24
6:55:24
6:54:54
6:52:54
6:52:24
6:50:24
6:49:54
6:47:54
6:47:24
6:45:24
6:44:54
6:42:54
6:42:24
6:40:24
6:39:54
6:37:54
6:37:24
6:35:24
6:34:54
6:32:54
6:32:24
6:30:24
6:29:54
6:27:45
6:24:47
6:23:37
6:19:47
6:18:37
6:14:47
6:13:37
6:09:47
6:08:37
6:04:47
6:03:37
5:59:47
5:58:38
5:54:47
5:53:38
5:49:47
5:48:38
5:44:47
5:43:38
5:39:47
5:38:38
5:34:47
5:33:38
5:29:47
5:28:38
5:24:47
5:23:38
5:19:47

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009

5:18:38
5:14:47
5:13:38
5:09:47
5:08:38
5:04:47
5:03:38
4:59:47
4:58:38
4:54:47
4:53:38
4:49:47
4:48:38
4:44:47
4:43:38
4:39:47
4:38:38
4:34:47
4:33:38
4:29:47
4:28:38
4:24:47
4:23:38
4:19:47
4:18:38
4:14:47
4:13:38
4:09:47
4:08:38
4:04:47
4:03:38
3:59:47
3:58:38
3:54:47
3:53:38
3:50:07
3:48:38
3:47:37
3:46:07
3:44:47
3:43:38
3:43:07
3:41:37
3:39:47
3:38:38
3:38:37
3:37:33
3:36:07
3:33:38
3:31:17
3:29:47
3:29:47
3:28:38
3:28:37
3:27:07
3:24:47
3:23:07
3:20:57
3:18:38
3:16:57

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009

3:15:27
3:14:47
3:13:38
3:13:27
3:11:57
3:09:47
3:08:38
3:07:57
3:06:27
3:04:47
3:03:07
2:59:47
2:58:38
2:54:47
2:52:37
2:49:47
2:48:38
2:48:27
2:45:57
2:45:47
2:43:38
2:43:27
2:41:57
2:39:47
2:37:57
2:34:47
2:32:47
2:30:57
2:28:38
2:26:27
2:24:57
2:24:47
2:23:38
2:19:47
2:18:38
2:16:17
2:14:47
2:14:47
2:13:38
2:12:17
2:10:47
2:09:47
2:07:17
2:06:07
2:03:38
2:03:17
2:01:47
2:00:07
1:58:37
1:54:47
1:53:38
1:51:37
1:50:07
1:49:47
1:48:38
1:47:27
1:45:57
1:44:47
1:43:38
1:41:47

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009

1:40:17 AM
1:39:47 AM
1:36:47 AM
1:34:47 AM
1:33:38 AM
1:33:37 AM
1:32:07 AM
1:29:47 AM
1:28:38 AM
1:27:27 AM
1:25:57 AM
1:24:47 AM
1:23:38 AM
1:19:47 AM
1:17:57 AM
1:16:57 AM
1:15:27 AM
1:14:47 AM
1:13:38 AM
1:13:27 AM
1:11:07 AM
1:10:57 AM
1:08:17 AM
1:06:27 AM
1:04:57 AM
1:04:47 AM
1:03:17 AM
1:00:27 AM
12:58:39 AM
12:57:17 AM
12:55:47 AM
12:54:47 AM
12:53:39 AM
12:52:47 AM
12:51:17 AM
12:49:47 AM
12:48:39 AM
12:46:27 AM
12:44:57 AM
12:44:57 AM
12:42:27 AM
12:39:47 AM
12:37:47 AM
12:34:47 AM
12:33:17 AM
12:30:47 AM
12:28:39 AM
12:27:57 AM
12:26:28 AM
12:25:17 AM
12:23:39 AM
12:19:47 AM
12:18:39 AM
12:18:17 AM
12:16:48 AM
12:14:47 AM
12:13:39 AM
12:13:17 AM
12:11:48 AM
12:09:47 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009

12:07:57
12:05:07
12:03:37
12:01:47
11:58:39
11:56:07
11:53:39
11:52:07
11:50:37
11:49:47
11:47:47
11:45:07
11:43:37
11:42:47
11:41:17
11:39:47
11:38:39
11:34:47
11:32:47
11:29:47
11:27:27
11:24:47
11:23:07
11:19:47
11:18:39
11:18:07
11:16:37
11:14:47
11:13:39
11:13:27
11:11:57
11:09:47
11:07:17
11:04:47
11:02:47
10:59:47
10:57:37
10:55:57
10:53:39
10:52:07
10:50:37
10:49:47
10:48:39
10:47:27
10:45:57
10:44:47
10:42:37
10:42:37
10:41:07
10:39:47
10:37:27
10:35:07
10:33:37
10:29:47
10:28:17
10:26:47
10:25:17
10:24:47
10:23:39
10:22:57

AM
AM
AM
AM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009

10:21:27 PM
10:19:47 PM
10:17:27 PM
10:14:47 PM
10:13:17 PM
10:10:47 PM
10:08:39 PM
10:06:47 PM
10:05:17 PM
10:04:47 PM
10:03:39 PM
10:02:37 PM
10:01:07 PM
9:59:47 PM
9:58:39 PM
9:58:07 PM
9:56:37 PM
9:54:47 PM
9:52:18 PM
9:49:47 PM
9:47:57 PM
9:46:37 PM
9:45:07 PM
9:44:47 PM
9:43:39 PM
9:41:07 PM
9:38:39 PM
9:35:47 PM
9:33:39 PM
9:31:17 PM
9:29:47 PM
9:29:47 PM
9:28:39 PM
9:27:57 PM
9:26:27 PM
9:24:47 PM
9:23:39 PM
9:23:07 PM
9:21:37 PM
9:19:47 PM
9:18:39 PM
9:17:07 PM
9:15:37 PM
9:14:47 PM
9:13:39 PM
9:11:37 PM
9:10:07 PM
9:09:47 PM
9:08:39 PM
9:04:47 PM
9:03:39 PM
9:01:47 PM
9:00:17 PM
8:59:47 PM
8:58:39 PM
8:57:27 PM
8:55:57 PM
8:54:47 PM
8:53:39 PM
8:52:37 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009

8:51:07
8:49:47
8:48:39
8:48:17
8:46:47
8:44:47
8:42:47
8:39:47
8:38:39
8:38:07
8:36:37
8:35:17
8:33:39
8:31:47
8:30:17
8:29:47
8:27:47
8:25:57
8:23:39
8:21:17
8:19:47
8:19:47
8:18:39
8:17:17
8:15:47
8:14:47
8:13:39
8:12:07
8:10:37
8:09:47
8:08:40
8:07:27
8:05:57
8:04:47
8:03:40
8:03:17
8:01:47
7:59:47
7:58:40
7:54:47
7:53:40
7:50:37
7:49:17
7:49:07
7:46:56
7:44:47
7:43:40
7:39:47
7:38:40
7:34:47
7:33:40
7:29:47
7:28:40
7:24:47
7:23:40
7:19:47
7:18:40
7:14:47
7:13:40
7:09:47

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009

7:08:40
7:04:47
7:03:40
6:59:47
6:58:40
6:54:47
6:53:40
6:49:47
6:48:40
6:44:47
6:43:40
6:39:47
6:38:40
6:34:47
6:33:40
6:29:47
6:28:40
6:24:47
6:23:40
6:19:47
6:18:40
6:14:47
6:13:40
6:09:47
6:08:40
6:04:47
6:03:40
5:59:47
5:58:40
5:54:47
5:53:40
5:49:47
5:48:40
5:44:47
5:43:40
5:40:47
5:38:40
5:35:17
5:33:08
5:33:08
5:30:43
4:25:02
4:24:02
4:20:02
4:19:02
4:17:52
4:15:48
4:15:18
4:13:18
4:13:13
4:10:57
3:44:20
3:43:11
3:39:20
3:38:11
3:34:30
3:33:11
3:29:20
3:28:11
3:24:20

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009

3:23:11 PM
3:19:20 PM
3:18:11 PM
3:17:00 PM
3:15:57 PM
3:14:20 PM
3:13:11 PM
3:10:40 PM
3:09:38 PM
3:09:30 PM
3:08:24 PM
11:37:43 AM
11:36:34 AM
11:32:43 AM
11:31:34 AM
11:27:43 AM
11:26:34 AM
11:22:43 AM
11:21:34 AM
11:17:43 AM
11:16:34 AM
11:12:43 AM
11:11:34 AM
11:07:43 AM
11:06:34 AM
11:02:43 AM
11:01:34 AM
10:57:43 AM
10:56:34 AM
10:52:43 AM
10:51:34 AM
10:47:43 AM
10:46:34 AM
10:42:43 AM
10:41:34 AM
10:37:43 AM
10:36:34 AM
10:32:43 AM
10:31:34 AM
10:27:43 AM
10:26:34 AM
10:22:43 AM
10:21:34 AM
10:17:43 AM
10:16:34 AM
10:12:53 AM
10:11:34 AM
6:02:11 AM
6:01:02 AM
5:57:11 AM
5:56:02 AM
5:52:11 AM
5:51:02 AM
5:47:11 AM
5:46:02 AM
5:42:11 AM
5:41:02 AM
5:37:11 AM
5:36:02 AM
5:32:11 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009

5:31:02 AM
5:27:11 AM
5:26:02 AM
5:22:11 AM
5:21:02 AM
5:17:11 AM
5:16:02 AM
5:12:11 AM
5:11:02 AM
5:07:11 AM
5:06:02 AM
5:02:11 AM
5:01:02 AM
4:57:11 AM
4:56:02 AM
4:52:11 AM
4:51:02 AM
4:47:11 AM
4:46:02 AM
4:42:11 AM
4:41:02 AM
4:37:11 AM
4:36:02 AM
4:32:11 AM
4:31:02 AM
4:27:11 AM
4:26:02 AM
4:22:11 AM
4:21:02 AM
4:17:11 AM
4:16:02 AM
4:12:11 AM
4:11:02 AM
4:07:21 AM
4:06:02 AM
1:23:12 AM
1:22:03 AM
1:18:12 AM
1:17:03 AM
1:13:12 AM
1:12:03 AM
1:08:12 AM
1:07:03 AM
1:03:12 AM
1:02:03 AM
12:58:12 AM
12:57:03 AM
12:53:12 AM
12:52:03 AM
12:48:12 AM
12:47:03 AM
12:43:12 AM
12:42:03 AM
12:38:12 AM
12:37:03 AM
12:33:12 AM
12:32:03 AM
12:28:12 AM
12:27:03 AM
12:23:12 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009

12:22:03 AM
12:18:12 AM
12:17:03 AM
12:13:12 AM
12:12:03 AM
12:08:12 AM
12:07:03 AM
12:03:12 AM
12:02:03 AM
12:01:02 AM
12:00:01 AM
11:58:22 PM
11:57:03 PM
9:59:45 PM
9:58:36 PM
9:54:45 PM
9:53:36 PM
9:49:45 PM
9:48:36 PM
9:44:45 PM
9:43:36 PM
9:39:45 PM
9:38:36 PM
9:34:45 PM
9:33:36 PM
9:29:45 PM
9:28:36 PM
9:24:45 PM
9:23:36 PM
9:19:45 PM
9:18:36 PM
9:14:45 PM
9:13:36 PM
9:09:45 PM
9:08:36 PM
9:04:45 PM
9:03:36 PM
8:59:45 PM
8:58:36 PM
8:54:45 PM
8:53:36 PM
8:49:45 PM
8:48:36 PM
8:44:45 PM
8:43:36 PM
8:39:45 PM
8:38:36 PM
8:34:45 PM
8:33:36 PM
8:29:45 PM
8:28:36 PM
8:24:45 PM
8:23:36 PM
8:19:45 PM
8:18:36 PM
8:14:45 PM
8:13:36 PM
8:09:45 PM
8:08:36 PM
8:04:45 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009

8:03:36
7:59:45
7:58:36
7:55:15
7:53:26
7:50:15
7:48:15
7:48:06
7:45:52
7:44:55
7:43:48
7:43:35
5:17:50
5:13:59
5:12:50
5:08:59
5:07:50
5:03:59
5:02:50
4:58:59
4:57:50
4:53:59
4:52:50
4:48:59
4:47:50
4:43:59
4:42:50
4:38:59
4:37:50
4:33:59
4:32:50
4:28:59
4:27:50
4:23:59
4:22:50
4:18:59
4:17:50
4:13:59
4:12:50
4:08:59
4:07:50
4:03:59
4:02:50
3:58:59
3:57:50
3:53:59
3:52:50
3:48:59
3:47:50
3:43:59
3:42:50
3:38:59
3:37:50
3:34:09
3:32:50
3:29:59
3:27:50
3:25:59
3:24:30
3:23:59

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009

3:22:50
3:18:59
3:17:50
3:14:29
3:12:50
3:09:29
3:07:18
3:05:29
3:04:00
3:03:59
3:01:30
2:59:09
2:57:50
2:53:59
2:52:50
2:48:59
2:47:50
2:43:59
2:42:50
2:39:39
2:37:50
2:33:59
2:32:50
2:28:59
2:26:15
2:23:59
2:22:50
2:18:59
2:17:50
2:13:59
2:12:50
2:08:59
2:07:12
2:06:29
2:05:26
2:03:51
2:02:42
1:59:01
1:57:42
6:22:10
6:21:01
6:17:10
6:16:01
6:12:10
6:11:01
6:07:10
6:06:01
6:02:10
6:01:01
5:57:10
5:56:01
5:52:10
5:51:01
5:47:10
5:46:01
5:42:10
5:41:01
5:37:10
5:36:01
5:32:10

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009

5:31:01 AM
5:27:10 AM
5:26:01 AM
5:22:10 AM
5:21:01 AM
5:17:10 AM
5:16:01 AM
5:12:30 AM
5:11:01 AM
5:07:10 AM
5:06:01 AM
5:02:10 AM
5:01:01 AM
4:57:10 AM
4:56:01 AM
4:52:10 AM
4:51:01 AM
4:47:10 AM
4:46:01 AM
4:42:30 AM
4:41:16 AM
4:41:00 AM
10:03:50 PM
10:00:00 PM
9:58:50 PM
9:55:00 PM
9:53:50 PM
9:50:00 PM
9:48:51 PM
9:45:00 PM
9:43:51 PM
9:40:00 PM
9:38:51 PM
9:35:00 PM
9:33:51 PM
9:30:00 PM
9:28:51 PM
9:25:00 PM
9:23:51 PM
9:20:00 PM
9:18:51 PM
9:15:00 PM
9:13:51 PM
9:10:00 PM
9:08:51 PM
9:05:00 PM
9:03:51 PM
9:00:00 PM
8:58:51 PM
8:55:00 PM
8:53:51 PM
8:50:00 PM
8:48:51 PM
8:45:00 PM
8:43:51 PM
8:40:00 PM
8:38:51 PM
8:35:00 PM
8:33:51 PM
8:30:00 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009

8:28:51
8:25:00
8:23:51
8:20:00
8:18:51
8:15:00
8:13:51
8:10:00
8:08:51
8:05:00
8:03:51
8:00:00
7:58:51
7:56:50
7:55:48
7:55:00
7:53:51
7:50:00
7:48:51
7:45:00
7:43:51
7:40:00
7:38:51
7:35:00
7:33:51
7:30:00
7:28:51
7:25:00
7:23:51
7:20:00
7:18:51
7:15:00
7:13:51
7:10:10
7:08:51
7:08:50
6:52:21
6:48:30
6:47:21
6:43:30
6:42:21
6:38:30
6:37:21
6:33:30
6:32:21
6:28:30
6:27:21
6:23:30
6:22:21
6:18:30
6:17:21
6:13:30
6:12:21
6:08:30
6:07:21
6:03:30
6:02:21
5:58:30
5:57:21
5:53:30

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009

5:52:21 PM
5:48:30 PM
5:47:21 PM
5:43:30 PM
5:42:21 PM
5:38:30 PM
5:37:21 PM
5:33:40 PM
5:32:32 PM
5:32:20 PM
5:07:04 PM
5:03:07 PM
5:02:04 PM
4:58:07 PM
4:57:04 PM
4:53:07 PM
4:52:04 PM
4:48:07 PM
4:47:04 PM
4:43:07 PM
4:42:04 PM
4:38:07 PM
4:37:04 PM
4:33:07 PM
4:32:04 PM
4:28:07 PM
4:27:04 PM
4:23:07 PM
4:22:04 PM
4:18:07 PM
4:17:04 PM
4:13:07 PM
4:12:04 PM
4:08:07 PM
4:07:04 PM
4:03:07 PM
4:02:04 PM
3:58:07 PM
3:57:04 PM
3:53:07 PM
3:52:04 PM
3:48:07 PM
3:47:04 PM
3:43:07 PM
3:42:04 PM
3:38:07 PM
3:37:04 PM
3:33:37 PM
3:32:18 PM
1:04:24 PM
1:03:15 PM
12:59:24 PM
12:58:15 PM
12:54:24 PM
12:53:15 PM
12:49:24 PM
12:48:15 PM
12:44:24 PM
12:43:15 PM
12:39:24 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009

12:38:15 PM
12:34:24 PM
12:33:15 PM
12:29:24 PM
12:28:15 PM
12:24:24 PM
12:23:15 PM
12:19:24 PM
12:18:15 PM
12:14:24 PM
12:13:15 PM
12:09:24 PM
12:08:15 PM
12:04:24 PM
12:03:15 PM
11:59:24 AM
11:58:15 AM
11:54:24 AM
11:53:15 AM
11:49:24 AM
11:48:15 AM
11:45:14 AM
11:42:15 AM
11:41:45 AM
11:39:45 AM
11:39:15 AM
11:37:15 AM
11:36:45 AM
11:34:45 AM
11:34:15 AM
11:32:15 AM
11:31:45 AM
11:29:45 AM
11:29:15 AM
11:27:15 AM
11:26:45 AM
11:24:45 AM
11:24:15 AM
11:22:15 AM
11:21:45 AM
11:19:45 AM
11:19:15 AM
11:16:46 AM
11:16:15 AM
11:14:15 AM
11:13:45 AM
11:11:45 AM
11:11:15 AM
11:09:15 AM
11:08:45 AM
11:06:15 AM
11:05:45 AM
11:03:16 AM
11:03:15 AM
7:42:28 AM
7:41:58 AM
7:39:58 AM
7:39:28 AM
7:37:28 AM
7:36:58 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/11/2009
12/11/2009

7:34:58 AM
7:34:28 AM
7:32:28 AM
7:31:58 AM
7:29:58 AM
7:29:28 AM
7:27:28 AM
7:26:58 AM
7:24:58 AM
7:24:28 AM
7:22:28 AM
7:21:58 AM
7:19:58 AM
7:19:28 AM
7:17:28 AM
7:16:58 AM
7:14:58 AM
7:14:28 AM
7:12:28 AM
7:11:58 AM
7:09:58 AM
7:09:28 AM
7:07:28 AM
7:06:58 AM
7:04:58 AM
7:04:28 AM
7:02:28 AM
7:01:58 AM
6:59:58 AM
6:59:28 AM
6:57:28 AM
6:56:58 AM
6:54:58 AM
6:54:28 AM
6:52:28 AM
6:51:58 AM
6:49:58 AM
6:49:28 AM
6:47:28 AM
6:46:58 AM
6:44:58 AM
6:44:28 AM
6:42:28 AM
6:41:58 AM
6:39:58 AM
6:39:28 AM
6:37:28 AM
6:36:58 AM
6:34:58 AM
6:34:28 AM
6:32:28 AM
6:31:58 AM
6:29:58 AM
6:29:28 AM
6:26:58 AM
6:26:28 AM
6:23:59 AM
6:23:59 AM
10:07:07 PM
10:06:37 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009

10:04:37 PM
10:04:07 PM
10:02:07 PM
10:01:37 PM
9:59:37 PM
9:59:07 PM
9:57:07 PM
9:56:37 PM
9:54:37 PM
9:54:07 PM
9:52:07 PM
9:51:37 PM
9:49:37 PM
9:49:07 PM
9:47:07 PM
9:46:37 PM
9:44:37 PM
9:44:07 PM
9:42:07 PM
9:41:37 PM
9:39:37 PM
9:39:07 PM
9:37:07 PM
9:36:37 PM
9:34:37 PM
9:34:07 PM
9:32:07 PM
9:31:37 PM
9:29:37 PM
9:29:07 PM
9:27:07 PM
9:26:37 PM
9:24:37 PM
9:24:07 PM
9:22:07 PM
9:21:37 PM
9:19:37 PM
9:19:07 PM
9:17:07 PM
9:16:37 PM
9:14:37 PM
9:14:07 PM
9:12:07 PM
9:11:37 PM
9:09:37 PM
9:09:07 PM
9:07:07 PM
9:06:37 PM
9:04:37 PM
9:04:07 PM
9:02:07 PM
9:01:37 PM
8:59:37 PM
8:59:07 PM
8:57:07 PM
8:56:37 PM
8:54:37 PM
8:54:07 PM
8:52:07 PM
8:51:37 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009

8:49:37
8:49:07
8:47:07
8:46:37
8:44:37
8:44:07
8:42:07
8:41:37
8:39:37
8:39:07
8:37:07
8:36:37
8:34:37
8:34:07
8:32:07
8:31:37
8:29:37
8:29:07
8:27:07
8:26:37
8:24:37
8:24:07
8:22:07
8:21:37
8:19:37
8:19:07
8:17:07
8:16:37
8:14:37
8:14:07
8:12:07
8:11:59
8:09:59
8:09:48
8:07:40
8:07:40
8:05:38
8:05:37
8:03:37
8:03:07
8:00:38
8:00:37
7:58:30
7:58:08
7:56:08
7:56:07
7:53:58
7:53:49
7:51:41
7:51:37
7:49:37
7:49:07
7:47:07
7:46:37
7:44:37
7:44:07
7:42:07
7:41:37
7:39:37
7:39:07

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009

7:37:07
7:36:37
7:34:37
7:34:07
7:32:07
7:31:37
7:29:37
7:29:07
7:27:07
7:26:37
7:24:37
7:24:07
7:22:07
7:21:37
7:19:37
7:19:07
7:17:07
7:16:37
7:14:37
7:14:07
7:12:07
7:11:37
7:09:07
7:08:37
7:06:37
7:06:07
7:04:07
7:03:37
7:01:37
7:01:07
6:59:07
6:58:37
6:56:37
6:56:07
6:54:07
6:53:37
6:51:37
6:51:07
6:49:07
6:48:37
6:46:37
6:46:07
6:44:07
6:43:37
6:41:37
6:41:07
6:39:07
6:38:37
6:36:37
6:36:07
6:34:07
6:33:37
6:31:37
6:31:07
6:29:07
6:28:37
6:26:37
6:26:07
6:24:07
6:23:37

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009

6:21:37
6:21:07
6:19:07
6:18:37
6:16:37
6:16:07
6:14:07
6:13:37
6:11:37
6:11:07
6:09:07
6:08:37
6:06:37
6:06:07
6:04:07
6:03:37
6:01:37
6:01:07
5:59:07
5:58:37
5:56:37
5:56:07
5:54:07
5:53:37
5:51:37
5:51:07
5:49:07
5:48:37
5:46:37
5:46:07
5:44:07
5:43:37
5:41:37
5:41:07
5:39:07
5:38:37
5:36:37
5:36:07
5:34:07
5:33:37
5:31:37
5:31:07
5:29:07
5:28:37
5:26:37
5:26:07
5:24:07
5:23:37
5:21:37
5:21:07
5:19:07
5:18:37
5:16:37
5:16:07
5:14:07
5:13:37
5:11:37
5:11:07
5:09:07
5:08:37

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009

5:06:37
5:06:07
5:04:07
5:03:37
5:01:37
5:01:07
4:59:07
4:58:37
4:56:37
4:56:07
4:54:07
4:53:37
4:51:37
4:51:07
4:49:07
4:48:37
4:46:37
4:46:07
4:44:07
4:43:37
4:41:37
4:41:07
4:39:01
4:38:37
4:36:29
4:36:19
4:34:13
4:34:09
4:32:09
4:32:07
4:30:07
4:29:37
4:27:22
2:45:08
2:44:06
2:43:28
2:42:16
2:40:08
2:39:06
2:35:08
2:34:06
2:30:08
2:29:06
2:25:48
2:24:06
2:20:08
2:19:06
2:15:08
2:14:06
2:10:08
2:09:06
2:05:08
2:04:06
2:00:18
1:59:06
1:55:08
1:54:06
1:50:08
1:49:06
1:48:18

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009

1:46:19 PM
1:45:08 PM
1:42:18 PM
1:42:09 PM
1:39:48 PM
1:39:39 PM
1:37:09 PM
1:36:58 PM
1:35:10 PM
1:35:08 PM
1:34:06 PM
1:30:08 PM
1:29:06 PM
1:25:18 PM
1:24:17 PM
1:24:06 PM
1:22:03 PM
1:22:03 PM
1:20:03 PM
1:20:02 PM
1:18:02 PM
1:18:02 PM
1:15:45 PM
1:15:44 PM
1:13:44 PM
1:13:42 PM
1:11:42 PM
1:11:41 PM
1:09:41 PM
1:09:40 PM
1:07:40 PM
1:07:39 PM
1:05:39 PM
1:05:39 PM
1:03:39 PM
1:03:38 PM
1:01:38 PM
1:01:37 PM
12:59:36 PM
12:59:36 PM
12:57:36 PM
12:57:35 PM
12:55:34 PM
12:55:33 PM
12:53:32 PM
12:53:32 PM
12:51:31 PM
12:51:31 PM
12:49:30 PM
12:49:30 PM
12:47:29 PM
12:47:28 PM
12:45:27 PM
12:45:08 PM
12:44:06 PM
12:40:37 PM
12:38:09 PM
12:38:09 PM
12:35:48 PM
12:35:47 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009

12:33:47
12:33:47
12:31:47
12:31:46
12:29:46
12:29:44
12:27:30
12:27:29
12:25:29
12:25:27
12:23:27
12:23:26
12:21:26
12:21:25
12:19:25
12:19:24
12:17:23
12:17:22
12:15:21
12:15:20
12:13:20
12:13:19
12:11:18
12:11:18
12:09:17
12:09:17
12:07:16
12:07:15
12:05:14
12:05:14
12:03:13
12:03:13
12:01:11
12:01:11
11:59:10
11:59:10
11:57:09
11:57:09
11:55:09
11:55:09
11:53:02
11:53:01
11:51:01
11:51:01
11:49:01
11:49:01
11:47:00
11:47:00
11:44:59
11:44:59
11:42:58
11:42:58
11:40:58
11:40:57
11:38:57
11:38:55
11:36:55
11:36:54
11:34:53
11:34:53

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009

11:32:51
11:32:51
11:30:51
11:30:49
11:28:49
11:28:49
11:26:48
11:26:47
11:24:47
11:24:47
11:22:45
11:21:06
11:18:58
11:18:58
11:16:58
11:16:58
11:14:57
11:14:56
11:12:56
11:12:54
11:10:54
11:10:54
11:08:53
11:08:52
11:06:51
11:06:50
11:04:50
11:04:49
11:02:49
11:02:48
11:00:48
11:00:48
10:58:48
10:58:48
10:56:48
10:56:47
10:54:46
10:54:46
10:52:09
10:52:09
10:50:08
10:50:08
10:48:08
10:48:07
10:46:07
10:46:06
10:44:05
10:44:05
10:41:39
10:41:39
10:39:39
10:39:39
10:37:39
10:37:39
10:35:39
10:35:39
10:33:38
10:33:38
10:31:28
10:31:28

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009

10:29:28 AM
10:29:27 AM
10:27:27 AM
10:27:27 AM
10:25:25 AM
10:25:25 AM
10:23:25 AM
10:23:25 AM
10:21:18 AM
10:21:18 AM
10:19:17 AM
10:19:17 AM
10:17:17 AM
10:17:17 AM
10:15:17 AM
10:15:16 AM
10:13:16 AM
10:13:15 AM
10:11:14 AM
10:11:13 AM
10:09:13 AM
10:09:12 AM
10:07:11 AM
10:07:06 AM
10:05:58 AM
10:05:26 AM
10:02:38 AM
10:02:38 AM
10:00:37 AM
10:00:37 AM
9:58:36 AM
9:58:35 AM
9:56:35 AM
9:56:34 AM
9:54:33 AM
9:54:31 AM
9:52:31 AM
9:52:29 AM
9:50:29 AM
9:50:27 AM
9:48:27 AM
9:48:27 AM
9:46:27 AM
9:46:27 AM
9:44:27 AM
9:44:27 AM
9:42:26 AM
9:42:26 AM
9:40:26 AM
9:40:26 AM
9:38:25 AM
9:38:24 AM
9:36:24 AM
9:36:23 AM
9:34:23 AM
9:34:22 AM
9:32:21 AM
9:32:21 AM
9:30:20 AM
9:30:18 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009

9:28:17
9:28:17
9:26:16
9:26:15
9:24:14
9:24:13
9:22:13
9:22:12
9:20:11
9:20:11
9:18:10
9:15:16
9:14:07
9:10:36
9:09:07
7:15:06
7:13:57
7:10:06
7:08:57
7:05:06
7:03:57
7:00:16
6:58:57
6:55:06
6:53:57
6:50:06
6:48:57
6:45:06
6:43:57
6:40:06
6:38:57
6:35:06
6:33:57
6:30:06
6:28:57
6:25:06
6:23:57
6:20:06
6:18:57
6:15:06
6:13:57
6:10:06
6:08:57
6:05:06
6:03:57
6:00:06
5:58:57
5:16:54
5:15:45
5:11:54
5:10:45
5:06:54
5:05:45
5:01:54
5:00:45
4:56:54
4:55:45
4:51:54
4:50:45
4:46:54

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/11/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009

4:45:45
4:41:54
4:40:45
4:36:54
4:35:45
4:31:54
4:30:45
4:26:54
4:25:45
4:21:54
4:20:45
4:16:54
4:15:45
4:11:54
4:10:45
4:06:54
4:05:45
4:01:54
4:00:45
3:57:14
3:55:45
3:55:44
7:07:18
7:03:27
7:02:18
6:58:27
6:57:18
6:53:27
6:52:18
6:48:27
6:47:18
6:43:27
6:42:18
6:38:27
6:37:18
6:33:27
6:32:18
6:28:27
6:27:18
6:23:27
6:22:18
6:18:27
6:17:18
6:13:27
6:12:18
6:08:27
6:07:18
6:03:27
6:02:18
5:58:27
5:57:18
5:53:27
5:52:18
5:48:37
5:47:18
5:47:17
5:02:24
4:58:32
4:57:24
4:53:32

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009

4:52:24
4:48:32
4:47:24
4:43:32
4:42:24
4:38:32
4:37:24
4:33:32
4:32:24
4:28:32
4:27:24
4:23:32
4:22:24
4:18:32
4:17:24
4:13:32
4:12:24
4:08:32
4:07:24
4:03:32
4:02:24
3:58:32
3:57:24
3:53:32
3:52:24
3:48:32
3:47:24
3:43:32
3:42:24
3:38:32
3:37:24
3:33:32
3:32:24
3:28:32
3:27:24
3:23:32
3:22:24
3:18:32
3:17:24
3:13:32
3:12:24
3:08:32
3:07:24
3:03:32
3:02:24
2:58:32
2:57:24
2:55:12
2:54:05
2:53:32
2:52:24
2:48:32
2:47:24
2:45:42
2:43:31
2:21:21
2:20:51
2:18:51
2:18:21
2:16:21

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009
12/10/2009

2:15:51
2:13:51
2:13:21
2:11:05
2:10:51
2:08:51
2:08:21
2:06:21
2:05:51
2:03:51
2:03:21
2:00:51
2:00:21
1:58:11
1:57:52
5:53:52
5:53:22
5:51:22
5:50:52
5:48:52
5:48:22
5:46:22
5:45:52
5:43:52
5:43:22
5:41:22
5:40:52
5:38:52
5:38:22
5:36:22
5:35:52
5:33:52
5:33:22
5:31:22
5:30:52
5:28:52
5:28:22
5:26:22
5:25:52
5:23:22
5:22:52
5:20:52
5:20:22
5:18:22
5:17:52
5:15:52
5:15:22
5:13:22
5:12:52
5:10:52
5:10:22
5:08:22
5:07:52
5:05:52
5:05:22
5:03:22
5:02:52
5:00:52
5:00:22
4:58:22

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/10/2009 4:57:52 AM
12/10/2009 4:55:52 AM
12/10/2009 4:55:22 AM
12/10/2009 4:53:22 AM
12/10/2009 4:52:52 AM
12/10/2009 4:50:44 AM
12/10/2009 4:46:47 AM
12/10/2009 4:46:17 AM
12/10/2009 4:44:17 AM
12/10/2009 4:43:47 AM
12/10/2009 4:41:47 AM
12/10/2009 4:41:17 AM
12/10/2009 4:39:17 AM
12/10/2009 4:38:47 AM
12/10/2009 4:36:47 AM
12/10/2009 4:36:17 AM
12/10/2009 4:34:17 AM
12/10/2009 4:33:47 AM
12/10/2009 4:31:17 AM
12/10/2009 4:30:47 AM
12/10/2009 4:28:47 AM
12/10/2009 4:28:17 AM
12/10/2009 4:25:47 AM
12/10/2009 4:25:17 AM
12/10/2009 4:23:17 AM
12/10/2009 4:22:47 AM
12/10/2009 4:20:47 AM
12/10/2009 4:20:17 AM
12/10/2009 4:18:17 AM
12/10/2009 4:17:47 AM
12/10/2009 4:15:47 AM
12/10/2009 4:14:54 AM
12/10/2009 4:13:17 AM
12/10/2009 4:12:47 AM
12/10/2009 4:10:26 AM
12/9/2009 3:26:43 AM
12/8/2009 9:13:44 PM
12/8/2009 9:12:35 PM
12/8/2009 9:08:54 PM
12/8/2009 9:07:35 PM
12/8/2009 4:21:45 PM
12/8/2009 4:20:37 PM
12/8/2009 4:16:45 PM
12/8/2009 4:15:37 PM
12/8/2009 4:11:45 PM
12/8/2009 4:10:37 PM
12/8/2009 4:06:45 PM
12/8/2009 4:05:37 PM
12/8/2009 4:01:45 PM
12/8/2009 4:00:37 PM
12/8/2009 3:56:45 PM
12/8/2009 3:55:37 PM
12/8/2009 3:51:45 PM
12/8/2009 3:50:37 PM
12/8/2009 3:46:45 PM
12/8/2009 3:45:37 PM
12/8/2009 3:41:45 PM
12/8/2009 3:40:37 PM
12/8/2009 3:36:45 PM
12/8/2009 3:35:38 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009

3:31:45
3:30:38
3:26:45
3:25:38
3:21:45
3:20:38
3:16:45
3:15:38
3:11:45
3:10:38
3:06:45
3:05:38
3:01:45
3:00:38
2:56:45
2:55:38
2:51:45
2:50:38
2:46:45
2:45:38
2:41:45
2:40:38
2:36:45
2:35:38
2:31:45
2:30:38
2:29:35
2:28:27
2:28:01
2:25:38
2:25:30
2:23:30
2:23:00
2:20:38
2:20:30
2:18:30
2:18:00
2:15:38
2:15:30
2:13:30
2:13:00
2:10:38
2:10:30
2:08:30
2:08:00
2:05:38
2:05:30
2:03:30
2:03:00
2:00:38
2:00:30
1:58:30
1:58:00
1:55:38
1:55:30
1:53:30
1:53:01
1:50:38
1:50:36
1:48:30

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009

1:48:00 PM
1:46:00 PM
1:45:38 PM
1:43:30 PM
1:43:00 PM
1:40:38 PM
1:40:30 PM
1:38:30 PM
1:38:00 PM
1:35:38 PM
1:35:30 PM
1:33:30 PM
1:33:00 PM
1:30:38 PM
1:30:30 PM
1:28:30 PM
1:28:00 PM
1:25:38 PM
1:25:30 PM
1:23:19 PM
11:27:06 AM
11:25:16 AM
10:52:53 AM
10:51:35 AM
4:42:19 AM
4:41:10 AM
12:12:31 AM
12:11:25 AM
3:51:55 PM
3:49:15 PM
3:48:35 PM
3:47:05 PM
3:36:25 PM
3:34:55 PM
3:34:35 PM
3:32:33 PM
3:23:35 PM
3:21:10 PM
3:20:40 PM
3:18:40 PM
3:18:10 PM
3:16:10 PM
3:15:40 PM
3:13:40 PM
3:13:10 PM
3:11:10 PM
3:10:40 PM
3:08:40 PM
3:08:10 PM
3:06:10 PM
3:05:40 PM
3:03:40 PM
3:03:10 PM
3:01:10 PM
3:00:40 PM
2:58:40 PM
2:58:10 PM
2:56:10 PM
2:55:40 PM
2:53:40 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009

2:53:10
2:51:10
2:50:40
2:48:40
2:48:10
2:46:10
2:45:40
2:43:31
2:36:24
2:34:24
2:33:24
2:32:08
5:22:59
5:20:29
5:15:59
5:14:30
5:08:29
5:05:36
4:35:07
4:33:45
4:02:54
4:01:50
3:30:32
3:29:19
3:25:22
3:23:53
2:59:52
2:57:52
2:55:22
2:53:52
2:48:32
2:46:23
2:30:02
2:28:32
2:27:22
2:25:53
2:22:42
2:21:12
2:18:42
2:17:12
2:16:02
2:14:33
2:11:52
2:10:22
2:07:12
2:05:43
5:03:24
5:01:54
5:01:14
4:59:44
4:58:04
4:56:34
4:55:14
4:53:44
4:50:44
4:49:14
4:45:24
4:43:54
4:41:44
4:40:14

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009

4:37:54
4:36:24
4:33:54
4:32:24
4:29:34
4:28:05
4:18:24
4:16:55
4:13:34
4:11:34
4:10:44
4:09:15
4:08:24
4:06:14
4:04:34
4:03:04
3:53:34
3:51:59
3:06:54
3:05:50
3:05:14
3:03:13
3:02:43
3:00:43
3:00:13
2:58:13
2:57:43
2:55:43
2:55:13
2:53:13
2:52:43
2:50:43
2:50:13
2:48:13
2:47:43
2:45:43
2:45:13
2:43:13
2:42:43
2:40:43
2:40:13
2:38:13
2:37:43
2:35:43
2:35:13
2:33:13
2:32:43
2:30:43
2:30:13
2:28:13
2:27:43
2:25:43
2:25:13
2:23:13
2:22:43
2:20:43
2:20:13
2:18:13
2:17:43
2:15:43

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009

2:15:13
2:13:13
2:12:43
2:10:43
2:10:13
2:08:13
2:07:43
2:05:43
2:05:13
2:03:13
2:02:43
2:00:43
2:00:13
1:58:13
1:57:43
1:55:43
1:55:13
1:53:13
1:52:43
1:50:43
1:50:13
1:48:13
1:47:43
1:45:43
1:45:13
1:43:13
1:42:43
1:40:43
1:40:13
1:38:13
1:37:43
1:35:43
1:35:13
1:33:13
1:32:43
1:30:43
1:30:13
1:28:13
1:27:43
1:25:43
1:25:13
1:23:13
1:22:43
1:20:43
1:20:13
1:18:13
1:17:43
1:15:43
1:15:13
1:13:13
1:12:43
1:10:43
1:10:13
1:08:13
1:07:43
1:05:43
1:05:13
1:03:13
1:02:43
1:00:43

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009

1:00:13 AM
12:58:13 AM
12:57:43 AM
12:55:43 AM
12:55:13 AM
12:53:13 AM
12:52:43 AM
12:50:35 AM
7:27:48 PM
7:27:18 PM
7:25:18 PM
7:24:48 PM
7:22:48 PM
7:22:18 PM
7:20:18 PM
7:19:48 PM
7:17:48 PM
7:17:18 PM
7:15:18 PM
7:14:48 PM
7:12:48 PM
7:12:18 PM
7:10:18 PM
7:09:48 PM
7:07:48 PM
7:07:18 PM
7:05:18 PM
7:04:48 PM
7:02:48 PM
7:02:18 PM
7:00:18 PM
6:59:48 PM
6:57:48 PM
6:57:18 PM
6:55:18 PM
6:54:48 PM
6:52:48 PM
6:52:18 PM
6:50:18 PM
6:49:48 PM
6:47:48 PM
6:47:18 PM
6:45:18 PM
6:44:48 PM
6:42:48 PM
6:42:18 PM
6:40:18 PM
6:39:48 PM
6:37:48 PM
6:37:18 PM
6:35:18 PM
6:34:48 PM
6:32:48 PM
6:32:18 PM
6:30:18 PM
6:29:48 PM
6:27:48 PM
6:27:18 PM
6:25:18 PM
6:24:48 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009

6:22:48
6:22:18
6:20:18
6:19:48
6:17:48
6:17:18
6:15:18
6:14:48
6:12:48
6:12:18
6:10:18
6:09:48
6:07:48
6:07:18
6:05:18
6:04:48
6:02:48
6:02:18
6:00:18
5:59:48
5:57:48
5:57:18
5:55:18
5:54:48
5:52:48
5:52:18
5:50:18
5:49:48
5:47:48
5:47:18
5:45:18
5:44:48
5:42:48
5:42:18
5:40:18
5:39:48
5:37:48
5:37:18
5:35:18
5:34:48
5:32:48
5:32:18
5:30:18
5:29:48
5:27:48
5:27:18
5:25:18
5:24:48
5:22:38
5:22:18
5:20:18
5:19:48
5:17:48
5:17:18
5:15:18
5:14:48
5:12:48
5:12:18
5:10:18
5:09:48

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009

5:07:48
5:07:18
5:05:18
5:04:48
5:02:48
5:02:18
5:00:18
4:59:48
4:57:48
4:57:18
4:55:18
4:54:48
4:52:48
4:52:18
4:50:18
4:49:48
4:47:48
4:47:18
4:45:18
4:44:48
4:42:48
4:42:18
4:40:18
4:39:48
4:37:48
4:37:18
4:35:18
4:34:48
4:32:48
4:32:18
4:30:18
4:29:48
4:27:48
4:27:18
4:25:18
4:24:48
4:22:48
4:22:18
4:20:18
4:19:48
4:17:48
4:17:18
4:14:48
4:14:18
4:12:02
4:11:47
3:49:13
3:48:43
3:46:43
3:46:13
3:44:13
3:43:43
3:41:43
3:41:13
3:39:13
3:38:43
3:36:43
3:36:13
3:34:13
3:33:43

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009

3:31:43
3:31:13
3:29:13
3:28:43
3:26:43
3:26:13
3:24:13
3:23:43
3:21:43
3:21:13
3:19:13
3:18:43
3:16:43
3:16:13
3:14:13
3:13:43
3:11:43
3:11:13
3:09:13
3:08:43
3:06:43
3:06:13
3:04:13
3:03:43
3:01:43
3:01:13
2:59:13
2:58:43
2:56:43
2:56:13
2:54:13
2:53:43
2:51:43
2:51:13
2:49:13
2:48:43
2:46:43
2:46:13
2:44:13
2:43:43
2:41:43
2:41:13
2:39:13
2:38:43
2:36:43
2:36:13
2:34:13
2:33:43
2:31:43
2:31:13
2:29:13
2:28:43
2:26:13
2:25:43
2:23:43
2:23:13
2:21:13
2:20:43
2:18:43
2:18:13

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009

2:16:13
2:15:43
2:13:43
2:13:13
2:11:13
2:10:43
2:08:43
2:08:13
2:06:13
2:05:43
2:03:43
2:03:13
2:01:13
2:00:43
1:58:43
1:58:13
1:56:13
1:55:43
1:53:43
1:53:13
1:51:13
1:50:43
1:48:43
1:48:13
1:46:13
1:45:43
1:43:43
1:43:13
1:41:13
1:40:43
1:38:43
1:38:13
1:36:13
1:35:43
1:33:43
1:33:13
1:31:13
1:30:43
1:28:43
1:28:13
1:26:13
1:25:43
1:23:13
1:22:43
1:20:43
1:20:13
1:18:13
1:17:43
1:15:13
1:14:43
1:12:43
1:12:13
1:10:13
1:09:43
1:07:43
1:07:13
1:04:43
1:04:13
1:02:13
1:01:43

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009

12:59:43 PM
12:59:13 PM
12:57:13 PM
12:56:43 PM
12:54:43 PM
12:54:13 PM
12:51:43 PM
12:51:13 PM
12:48:43 PM
12:48:13 PM
12:46:13 PM
12:45:43 PM
12:43:43 PM
12:43:13 PM
12:41:13 PM
12:40:43 PM
12:38:43 PM
12:38:13 PM
12:36:13 PM
12:35:43 PM
12:33:43 PM
12:33:13 PM
12:31:13 PM
12:30:43 PM
12:28:31 PM
12:28:13 PM
4:17:24 AM
4:16:54 AM
4:14:54 AM
4:14:24 AM
4:12:24 AM
4:11:54 AM
4:09:54 AM
4:09:24 AM
4:07:24 AM
4:06:54 AM
4:04:54 AM
4:04:24 AM
4:02:24 AM
4:01:54 AM
3:59:54 AM
3:59:24 AM
3:57:24 AM
3:56:54 AM
3:54:54 AM
3:54:24 AM
3:52:24 AM
3:51:54 AM
3:49:54 AM
3:49:24 AM
3:47:24 AM
3:46:54 AM
3:44:54 AM
3:44:24 AM
3:42:24 AM
3:41:54 AM
3:39:54 AM
3:39:24 AM
3:37:24 AM
3:36:54 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009

3:34:54 AM
3:34:24 AM
3:32:24 AM
3:31:54 AM
3:29:54 AM
3:29:24 AM
3:27:24 AM
3:26:54 AM
3:24:54 AM
3:24:24 AM
3:22:24 AM
3:21:54 AM
3:19:54 AM
3:19:24 AM
3:17:24 AM
3:16:54 AM
3:14:54 AM
3:14:24 AM
3:12:24 AM
3:11:54 AM
3:09:54 AM
3:09:24 AM
3:07:24 AM
3:06:54 AM
3:04:54 AM
3:04:24 AM
3:02:24 AM
3:01:54 AM
2:59:24 AM
2:58:54 AM
2:56:54 AM
2:56:24 AM
2:54:24 AM
2:53:54 AM
2:51:54 AM
2:51:24 AM
2:49:24 AM
2:48:54 AM
2:46:54 AM
2:46:24 AM
2:44:24 AM
2:43:54 AM
2:41:54 AM
2:41:24 AM
2:39:24 AM
2:38:54 AM
2:36:54 AM
2:36:24 AM
2:34:24 AM
2:33:54 AM
2:31:54 AM
2:31:24 AM
2:29:24 AM
2:28:54 AM
2:26:53 AM
10:43:04 PM
10:41:04 PM
10:40:34 PM
10:38:34 PM
10:38:04 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009

10:36:04 PM
10:35:34 PM
10:33:34 PM
10:33:04 PM
10:31:04 PM
10:30:34 PM
10:28:34 PM
10:28:04 PM
10:26:04 PM
10:25:34 PM
10:23:34 PM
10:23:04 PM
10:21:04 PM
10:20:34 PM
10:18:34 PM
10:18:04 PM
10:16:04 PM
10:15:34 PM
10:13:34 PM
10:13:04 PM
10:11:04 PM
10:10:34 PM
10:08:34 PM
10:08:04 PM
10:06:04 PM
10:05:34 PM
10:03:34 PM
10:03:04 PM
10:01:04 PM
10:00:34 PM
9:58:34 PM
9:58:04 PM
9:56:04 PM
9:55:34 PM
9:53:34 PM
9:53:04 PM
9:51:04 PM
9:50:34 PM
9:48:34 PM
9:48:04 PM
9:46:04 PM
9:45:34 PM
9:43:34 PM
9:43:04 PM
9:41:04 PM
9:40:34 PM
9:38:34 PM
9:38:04 PM
9:36:04 PM
9:35:34 PM
9:33:34 PM
9:33:04 PM
9:31:04 PM
9:30:34 PM
9:28:34 PM
9:28:04 PM
9:26:04 PM
9:25:34 PM
9:23:34 PM
9:23:04 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009

9:21:04
9:20:34
9:18:34
9:18:04
9:16:04
9:15:34
9:13:34
9:13:04
9:11:04
9:10:34
9:08:34
9:08:04
9:06:04
9:05:34
9:03:34
9:03:04
9:01:04
9:00:34
8:58:34
8:58:04
8:56:04
8:55:34
8:53:34
8:53:04
8:51:04
8:50:34
8:48:34
8:48:04
8:46:04
8:45:34
8:43:34
8:43:04
8:41:04
8:40:34
8:38:34
8:38:04
8:36:04
8:35:34
8:33:34
8:33:04
8:31:04
8:30:34
8:28:34
8:28:04
8:26:04
8:25:34
8:23:34
8:23:04
8:21:04
8:20:34
8:18:04
8:17:34
8:15:34
8:15:04
8:13:04
8:12:34
8:10:34
8:10:04
8:08:04
8:07:34

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009

8:05:34
8:05:04
8:03:04
8:02:34
8:00:34
8:00:04
7:58:04
7:57:34
7:55:34
7:55:04
7:53:04
7:52:34
7:50:34
7:50:04
7:48:04
7:47:34
7:45:34
7:45:04
7:43:04
7:42:34
7:40:34
7:40:04
7:38:04
7:37:34
7:35:34
7:35:04
7:33:04
7:32:34
7:30:34
7:30:04
7:28:04
7:27:34
7:25:34
7:25:04
7:23:04
7:22:34
7:20:34
7:20:04
7:18:04
7:17:34
7:15:34
7:15:04
7:13:04
7:12:34
7:10:34
7:10:04
7:08:04
7:07:34
7:05:34
7:05:04
7:03:04
7:02:34
7:00:34
7:00:04
6:58:04
6:57:34
6:55:34
6:55:04
6:52:38
4:27:07

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009

4:26:37
4:24:11
4:24:07
4:22:07
4:21:37
4:19:11
4:19:07
4:17:07
4:16:37
4:14:11
4:14:07
4:12:07
4:11:37
4:09:11
4:09:07
4:07:07
4:06:37
4:04:11
4:04:07
4:02:07
4:01:37
3:59:11
3:59:07
3:57:07
3:56:37
3:54:11
3:50:13
3:49:11
3:45:13
3:44:11
3:40:13
3:39:11
3:35:13
3:34:11
3:30:13
3:29:11
3:25:13
3:24:11
3:20:13
3:19:11
3:15:13
3:14:11
3:10:13
3:09:11
3:05:13
3:04:11
3:00:13
2:59:11
2:55:13
2:54:11
2:50:13
2:49:11
2:45:13
2:44:11
2:43:23
2:41:12
2:40:42
2:38:42
2:38:12
2:36:12

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009

2:35:42
2:33:42
2:33:12
2:31:12
2:30:42
2:28:42
2:28:12
2:26:12
2:25:42
2:23:42
2:23:12
2:21:12
2:20:42
2:18:42
2:18:12
2:16:12
2:15:42
2:13:42
2:13:12
2:11:12
2:10:42
2:08:42
2:08:12
2:06:12
2:05:42
2:03:42
2:03:12
2:01:12
2:00:42
1:58:42
1:58:12
1:56:12
1:55:42
1:53:42
1:53:12
1:51:12
1:50:42
1:48:42
1:48:12
1:46:12
1:45:42
1:43:42
1:43:12
1:41:12
1:40:42
1:38:42
1:38:12
1:36:12
1:35:42
1:33:42
1:33:12
1:31:12
1:30:42
1:28:42
1:28:12
1:26:12
1:25:42
1:23:42
1:23:12
1:21:09

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009

1:20:42 PM
1:18:42 PM
1:18:12 PM
1:16:12 PM
1:15:42 PM
1:13:42 PM
1:13:12 PM
1:11:12 PM
1:10:42 PM
1:08:42 PM
1:08:12 PM
1:06:12 PM
1:05:42 PM
1:03:42 PM
1:03:12 PM
1:01:12 PM
1:00:42 PM
12:58:42 PM
12:58:12 PM
12:56:12 PM
12:55:42 PM
12:53:42 PM
12:53:12 PM
12:51:12 PM
12:50:42 PM
12:48:42 PM
12:48:12 PM
12:46:12 PM
12:45:42 PM
12:43:42 PM
12:43:12 PM
12:41:12 PM
12:40:42 PM
12:38:42 PM
12:38:12 PM
12:36:12 PM
12:35:42 PM
12:33:42 PM
12:33:12 PM
12:31:12 PM
12:30:42 PM
12:28:42 PM
12:28:12 PM
12:26:12 PM
12:25:42 PM
12:23:12 PM
12:22:42 PM
12:20:12 PM
12:19:42 PM
12:17:42 PM
12:17:12 PM
12:15:12 PM
12:14:42 PM
12:12:42 PM
12:12:12 PM
12:10:12 PM
12:09:42 PM
12:07:42 PM
12:07:12 PM
12:05:12 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009

12:04:42 PM
12:02:12 PM
12:01:42 PM
11:59:23 AM
11:59:13 AM
6:27:26 AM
6:26:56 AM
6:24:56 AM
6:24:26 AM
6:22:26 AM
6:21:56 AM
6:19:56 AM
6:19:26 AM
6:17:26 AM
6:16:56 AM
6:14:56 AM
6:14:26 AM
6:12:26 AM
6:11:56 AM
6:09:56 AM
6:09:26 AM
6:07:26 AM
6:06:56 AM
6:04:56 AM
6:04:26 AM
6:02:26 AM
6:01:56 AM
5:59:56 AM
5:59:26 AM
5:57:26 AM
5:56:56 AM
5:54:56 AM
5:54:26 AM
5:52:26 AM
5:51:56 AM
5:49:56 AM
5:49:26 AM
5:47:26 AM
5:46:56 AM
5:44:56 AM
5:44:26 AM
5:42:26 AM
5:41:56 AM
5:39:56 AM
5:39:26 AM
5:37:26 AM
5:36:56 AM
5:34:56 AM
5:34:26 AM
5:32:26 AM
5:31:56 AM
5:29:56 AM
5:29:26 AM
5:27:26 AM
5:26:56 AM
5:24:56 AM
5:24:26 AM
5:22:26 AM
5:21:56 AM
5:19:56 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009

5:19:26
5:17:26
5:16:56
5:14:56
5:14:26
5:12:26
5:11:56
5:09:56
5:09:26
5:07:26
5:06:56
5:04:56
5:04:26
5:02:26
5:01:56
4:59:56
4:59:26
4:57:26
4:56:56
4:54:56
4:54:26
4:51:56
4:51:26
4:49:26
4:48:56
4:46:56
4:46:26
4:44:26
4:43:56
4:41:56
4:41:26
4:39:26
4:38:56
4:36:56
4:36:26
4:33:56
4:33:26
4:31:26
4:30:56
4:28:56
4:28:26
4:25:56
4:25:26
4:23:26
4:22:56
4:20:56
4:20:26
4:18:08
4:17:53
3:40:21
3:39:51
3:37:51
3:37:21
3:35:21
3:34:51
3:32:51
3:32:21
3:30:21
3:29:51
3:27:51

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009

3:27:21
3:25:21
3:24:51
3:22:51
3:22:21
3:20:21
3:19:51
3:17:51
3:17:21
3:15:21
3:14:51
3:12:51
3:12:21
3:10:21
3:09:51
3:07:51
3:07:21
3:05:21
3:04:51
3:02:51
3:02:21
3:00:21
2:59:51
2:57:51
2:57:21
2:55:21
2:54:51
2:52:51
2:52:21
2:50:21
2:49:51
2:47:51
2:47:21
2:45:21
2:44:51
2:42:51
2:42:21
2:40:21
2:39:51
2:37:51
2:37:21
2:35:21
2:34:51
2:32:51
2:32:21
2:30:21
2:29:51
2:27:40
2:26:52
2:25:47
2:21:56
2:20:20
2:16:56
2:15:47
2:13:56
2:12:48
2:11:56
2:10:47
2:07:06
2:06:00

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009

6:03:32
6:02:31
5:58:32
5:57:31
5:53:32
5:52:31
5:48:32
5:47:31
5:43:32
5:42:31
5:38:32
5:37:31
5:33:32
5:32:31
5:28:32
5:27:31
5:23:32
5:22:31
5:18:32
5:17:31
5:13:32
5:12:31
5:08:32
5:07:31
5:03:32
5:02:32
5:01:22
5:00:16
4:58:32
4:57:32
4:53:32
4:52:32
4:48:32
4:47:32
4:43:32
4:42:32
4:38:42
4:37:26
4:33:32
4:32:32
4:28:32
4:27:32
4:23:32
4:22:32
4:18:32
4:17:32
4:14:22
4:12:49
4:12:32
4:10:22
4:10:19
4:08:16
8:42:07
8:41:58
8:39:29
8:39:29
8:37:28
8:36:58
8:34:58
8:34:29

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009

8:32:28
8:31:58
8:29:58
8:29:28
8:27:28
8:26:58
8:24:58
8:24:28
8:22:28
8:21:58
8:19:58
8:19:28
8:17:28
8:16:58
8:14:58
8:14:28
8:12:28
8:11:58
8:09:58
8:09:28
8:07:28
8:06:58
8:04:58
8:04:28
8:02:28
8:02:01
7:59:58
7:59:28
7:57:28
7:56:58
7:54:58
7:54:28
7:52:28
7:51:58
7:49:58
7:49:28
7:47:28
7:46:58
7:44:58
7:44:28
7:42:28
7:41:58
7:39:41
3:41:20
3:40:50
3:38:50
3:38:20
3:36:20
3:35:50
3:33:50
3:33:20
3:31:20
3:30:50
3:28:50
3:28:48
3:26:42
3:25:56
3:24:46
3:20:56
3:19:46

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009

3:15:56 PM
3:14:46 PM
3:10:56 PM
3:09:46 PM
3:05:56 PM
3:04:46 PM
3:00:56 PM
2:59:46 PM
2:55:56 PM
2:54:46 PM
2:50:56 PM
2:49:46 PM
2:45:56 PM
2:44:46 PM
2:40:56 PM
2:39:46 PM
2:35:56 PM
2:34:46 PM
2:30:56 PM
2:29:46 PM
2:25:56 PM
2:24:46 PM
2:20:56 PM
2:19:46 PM
2:15:56 PM
2:14:46 PM
2:10:56 PM
2:09:47 PM
2:05:56 PM
2:04:47 PM
2:00:56 PM
1:59:47 PM
1:55:56 PM
1:54:47 PM
1:50:56 PM
1:49:47 PM
1:45:56 PM
1:44:47 PM
1:40:56 PM
1:39:47 PM
1:35:56 PM
1:34:47 PM
1:30:56 PM
1:29:47 PM
1:25:56 PM
1:24:47 PM
1:20:56 PM
1:19:47 PM
1:15:56 PM
1:14:47 PM
1:10:56 PM
1:09:47 PM
1:05:56 PM
1:04:47 PM
1:00:56 PM
12:59:47 PM
12:55:56 PM
12:54:47 PM
12:50:56 PM
12:49:47 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009

12:45:56 PM
12:44:47 PM
12:40:56 PM
12:39:47 PM
12:35:56 PM
12:34:47 PM
12:30:56 PM
12:29:47 PM
12:25:56 PM
12:24:47 PM
12:20:56 PM
12:19:47 PM
12:15:56 PM
12:14:47 PM
12:10:56 PM
12:09:47 PM
12:05:56 PM
12:04:47 PM
12:00:56 PM
11:59:47 AM
11:55:56 AM
11:54:47 AM
11:50:56 AM
11:49:47 AM
11:45:56 AM
11:44:47 AM
11:40:56 AM
11:39:47 AM
11:35:56 AM
11:34:47 AM
11:31:06 AM
11:29:47 AM
8:07:56 AM
8:06:47 AM
8:02:56 AM
8:01:47 AM
7:57:56 AM
7:56:47 AM
7:52:56 AM
7:51:47 AM
7:47:56 AM
7:46:47 AM
7:42:56 AM
7:41:47 AM
7:37:56 AM
7:36:47 AM
7:32:56 AM
7:31:47 AM
7:27:56 AM
7:26:47 AM
7:22:56 AM
7:21:47 AM
7:17:56 AM
7:16:47 AM
7:12:56 AM
7:11:47 AM
7:07:56 AM
7:06:47 AM
7:02:56 AM
7:01:47 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009

6:57:56
6:56:47
6:52:56
6:51:47
6:47:56
6:46:47
6:42:56
6:41:47
6:37:56
6:36:47
6:32:56
6:31:47
6:27:56
6:26:47
6:22:56
6:21:47
6:17:56
6:16:47
6:12:56
6:11:47
6:07:56
6:06:47
6:02:56
6:01:47
5:57:56
5:56:47
5:53:06
5:51:47
5:12:49
5:11:40
5:07:49
5:06:40
5:02:49
5:01:40
4:57:49
4:56:40
4:52:49
4:51:40
4:47:49
4:46:40
4:42:49
4:41:40
4:37:49
4:36:40
4:32:49
4:31:40
4:27:49
4:26:40
4:22:49
4:21:40
4:17:49
4:16:40
4:12:49
4:11:40
4:07:59
4:06:40
4:02:49
4:01:40
3:57:49
3:56:40

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009

3:52:49
3:51:40
3:47:49
3:46:40
3:42:49
3:41:40
3:37:49
3:36:40
3:32:49
3:31:40
3:27:49
3:26:40
3:22:49
3:21:40
3:17:49
3:16:40
3:16:09
3:14:52
3:12:49
3:11:40
3:08:09
3:06:40
3:06:39
7:23:30
7:19:39
7:18:30
7:16:29
7:14:59
7:14:39
7:13:30
7:09:39
7:08:30
7:04:39
7:03:30
6:59:39
6:58:30
6:54:39
6:53:30
6:49:39
6:48:30
6:44:39
6:43:30
6:39:39
6:38:30
6:34:39
6:33:30
6:29:39
6:28:30
6:24:39
6:23:30
6:19:39
6:18:30
6:14:39
6:13:30
6:09:39
6:08:30
6:04:49
6:03:30
6:03:29
5:06:19

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009

5:02:29
5:01:19
4:57:29
4:56:19
4:52:29
4:51:19
4:47:29
4:46:19
4:42:29
4:41:19
4:37:29
4:36:19
4:32:29
4:31:19
4:27:29
4:26:20
4:22:29
4:21:20
4:17:29
4:16:20
4:12:29
4:11:20
4:07:29
4:06:20
4:02:29
4:01:20
3:57:29
3:56:20
3:52:29
3:51:20
3:47:29
3:46:20
3:42:29
3:41:20
3:37:39
3:36:20
3:32:29
3:31:20
3:27:29
3:26:20
3:22:29
3:21:20
3:17:29
3:16:20
3:12:29
3:11:20
3:07:29
3:06:20
3:02:29
3:01:20
2:57:29
2:56:20
2:52:29
2:51:20
2:47:29
2:46:20
2:42:29
2:41:20
2:37:29
2:36:20

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009

2:33:19
2:31:20
2:29:59
2:27:50
2:27:29
2:26:20
2:25:59
2:24:30
2:22:29
2:21:20
2:17:29
2:16:20
2:12:29
2:10:30
2:08:59
2:07:30
2:07:29
2:05:10
2:02:29
2:01:20
1:59:29
1:58:20
1:57:29
1:56:20
1:52:29
1:51:20
1:47:39
1:46:20
7:14:40
7:13:31
7:09:40
7:08:31
7:04:40
7:03:31
6:59:40
6:58:31
6:54:40
6:53:31
6:49:40
6:48:31
6:44:40
6:43:31
6:39:40
6:38:31
6:34:40
6:33:31
6:29:40
6:28:31
6:24:41
6:23:31
6:19:41
6:18:31
6:14:41
6:13:31
6:09:41
6:08:31
6:08:01
6:06:29
6:04:41
6:03:31

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009
12/1/2009

5:59:41
5:58:31
5:54:41
5:53:31
5:49:40
5:48:31
5:44:40
5:43:31
5:39:40
5:38:31
5:34:40
5:33:31
5:29:40
5:28:31
5:24:40
5:23:31
5:19:40
5:17:33
5:14:40
5:13:31
5:09:40
5:08:31
5:04:40
5:03:31
4:59:40
4:58:31
4:54:40
4:53:31
4:49:40
4:48:31
4:45:10
4:42:46
4:42:16
4:40:16
4:39:46
4:37:46
4:37:16
4:35:16
4:34:46
4:32:46
4:32:16
4:30:16
4:29:46
4:27:46
4:27:16
4:25:16
4:24:46
4:22:46
4:22:16
4:20:00
4:19:51
4:17:46
4:17:16
4:15:16
4:14:46
4:12:46
4:12:16
4:09:46
4:09:16
4:07:16

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

12/1/2009 4:06:46 AM
12/1/2009 4:04:46 AM
12/1/2009 4:04:16 AM
12/1/2009 4:02:16 AM
12/1/2009 4:01:46 AM
12/1/2009 3:59:46 AM
12/1/2009 3:59:16 AM
12/1/2009 3:57:16 AM
12/1/2009 3:56:46 AM
12/1/2009 3:54:46 AM
12/1/2009 3:54:16 AM
12/1/2009 3:52:16 AM
12/1/2009 3:51:46 AM
12/1/2009 3:49:46 AM
12/1/2009 3:49:16 AM
12/1/2009 3:47:16 AM
12/1/2009 3:46:46 AM
12/1/2009 3:44:46 AM
12/1/2009 3:44:16 AM
12/1/2009 3:42:16 AM
12/1/2009 3:41:46 AM
12/1/2009 3:39:46 AM
12/1/2009 3:39:16 AM
12/1/2009 3:37:16 AM
12/1/2009 3:36:46 AM
12/1/2009 3:34:46 AM
12/1/2009 3:34:16 AM
12/1/2009 3:32:16 AM
12/1/2009 3:31:46 AM
12/1/2009 3:29:24 AM
12/1/2009 3:29:16 AM
12/1/2009 3:27:16 AM
12/1/2009 3:26:46 AM
12/1/2009 3:24:46 AM
12/1/2009 3:24:16 AM
12/1/2009 3:22:16 AM
12/1/2009 3:21:47 AM
12/1/2009 3:19:46 AM
12/1/2009 3:19:16 AM
12/1/2009 3:16:51 AM
11/30/2009 8:00:12 PM
11/30/2009 7:59:42 PM
11/30/2009 7:57:42 PM
11/30/2009 7:57:12 PM
11/30/2009 7:55:12 PM
11/30/2009 7:54:42 PM
11/30/2009 7:52:42 PM
11/30/2009 7:52:12 PM
11/30/2009 7:50:12 PM
11/30/2009 7:49:42 PM
11/30/2009 7:47:42 PM
11/30/2009 7:47:12 PM
11/30/2009 7:45:12 PM
11/30/2009 7:44:42 PM
11/30/2009 7:42:42 PM
11/30/2009 7:42:12 PM
11/30/2009 7:40:12 PM
11/30/2009 7:39:42 PM
11/30/2009 7:37:24 PM
11/30/2009 6:54:52 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009

6:54:22
6:52:22
6:51:52
6:49:52
6:49:22
6:46:56
6:46:52
6:44:52
6:44:22
6:42:22
6:41:52
6:39:52
6:39:22
6:37:22
6:36:52
6:34:52
6:34:22
6:32:06
6:31:56
6:29:52
6:29:22
6:27:22
6:26:52
6:24:52
6:24:22
6:22:22
6:22:16
6:19:58
6:19:52
6:17:52
6:17:22
6:14:58
6:14:52
6:12:52
6:12:22
6:09:58
6:09:52
6:07:52
6:07:22
6:04:58
6:04:52
6:02:36
5:51:40
5:51:30
5:49:30
5:49:00
5:46:40
5:46:30
5:44:30
5:44:00
5:41:40
5:41:30
5:39:30
5:39:00
5:36:40
5:36:30
5:34:30
5:34:00
5:31:41
5:31:30

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009

5:29:30
5:29:00
5:26:41
5:26:30
5:24:30
5:24:00
5:21:41
5:21:30
5:19:30
5:19:00
5:16:41
5:16:30
5:14:30
5:14:00
5:11:41
5:11:30
5:09:30
5:09:00
5:06:41
5:06:30
5:04:30
5:04:00
5:01:41
5:01:30
4:59:30
4:59:00
4:56:41
4:56:30
4:54:30
4:54:00
4:51:41
4:51:30
4:49:30
4:49:00
4:46:41
4:46:30
4:44:30
4:44:00
4:41:41
4:41:30
4:39:30
4:39:00
4:36:41
4:36:30
4:34:30
4:34:00
4:31:41
4:31:30
4:29:30
4:29:00
4:26:41
4:26:30
4:24:30
4:24:00
4:21:41
4:21:30
4:19:30
4:19:00
4:16:41
4:16:30

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009

4:14:30 PM
4:14:00 PM
4:11:41 PM
4:11:30 PM
4:09:27 PM
10:17:50 AM
10:17:20 AM
10:15:20 AM
10:14:50 AM
10:12:21 AM
10:12:21 AM
6:44:24 AM
6:43:54 AM
6:41:54 AM
6:41:24 AM
6:39:24 AM
6:38:54 AM
6:36:54 AM
6:36:24 AM
6:34:24 AM
6:33:54 AM
6:31:54 AM
6:31:24 AM
6:29:24 AM
6:28:54 AM
6:26:54 AM
6:26:24 AM
6:24:24 AM
6:23:54 AM
6:21:54 AM
6:21:24 AM
6:19:24 AM
6:18:54 AM
6:16:54 AM
6:16:24 AM
6:14:24 AM
6:13:54 AM
6:11:54 AM
6:11:24 AM
6:09:24 AM
6:08:54 AM
6:06:54 AM
6:06:24 AM
6:04:24 AM
6:03:54 AM
6:01:54 AM
6:01:24 AM
5:59:24 AM
5:58:54 AM
5:56:54 AM
5:56:24 AM
5:54:24 AM
5:53:54 AM
5:51:54 AM
5:51:24 AM
5:49:24 AM
5:48:54 AM
5:46:54 AM
5:46:24 AM
5:44:24 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009

5:43:54
5:41:54
5:41:24
5:39:24
5:38:54
5:36:54
5:36:24
5:34:24
5:33:54
5:31:24
5:30:54
5:28:54
5:28:24
5:25:54
5:25:24
5:23:24
5:22:54
5:20:24
5:19:54
5:17:26
5:17:25
6:55:48
6:55:18
6:53:18
6:52:48
6:50:48
6:50:18
6:48:18
6:47:48
6:45:48
6:45:18
6:43:18
6:42:48
6:40:48
6:40:18
6:38:18
6:37:48
6:35:48
6:35:18
6:33:18
6:32:48
6:30:48
6:30:18
6:28:18
6:27:48
6:25:48
6:25:18
6:23:18
6:22:48
6:20:48
6:20:18
6:18:18
6:17:48
6:15:48
6:15:18
6:13:18
6:12:48
6:10:48
6:10:18
6:08:18

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009

6:07:48
6:05:48
6:05:18
6:03:18
6:02:48
6:00:48
6:00:18
5:57:48
5:57:18
5:54:49
5:54:49
3:49:20
3:48:50
3:46:50
3:46:20
3:44:20
3:43:50
3:41:50
3:41:20
3:39:20
3:38:50
3:36:50
3:36:20
3:34:20
3:33:50
3:31:50
3:31:20
3:29:20
3:28:50
3:26:50
3:26:20
3:24:20
3:23:50
3:21:50
3:21:20
3:19:20
3:18:50
3:16:50
3:16:20
3:14:20
3:13:50
3:11:50
3:11:20
3:09:20
3:08:50
3:06:50
3:06:20
3:04:20
3:03:50
3:01:50
3:01:20
2:59:20
2:58:50
2:56:50
2:56:20
2:54:20
2:53:50
2:51:50
2:51:20
2:49:20

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009

2:49:12
2:46:50
2:46:20
2:44:20
2:43:50
2:41:50
2:41:20
2:39:20
2:38:50
2:36:50
2:36:20
2:34:20
2:33:50
2:31:50
2:31:20
2:29:20
2:28:50
2:26:50
2:26:20
2:24:20
2:23:50
2:21:50
2:21:20
2:19:20
2:18:50
2:16:50
2:16:20
2:14:20
2:13:50
2:11:50
2:11:20
2:08:50
2:08:20
2:06:05
2:05:49
6:14:13
6:13:43
6:11:30
6:11:13
6:09:13
6:08:43
6:06:30
6:06:13
6:04:13
6:03:43
6:01:30
6:01:13
5:59:13
5:58:44
5:56:30
5:56:13
5:54:13
5:53:43
5:51:30
5:51:13
5:49:13
5:48:43
5:46:30
5:46:13
5:44:13

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/29/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009

5:43:43
5:41:30
5:41:13
5:39:13
5:38:43
5:36:30
5:36:13
5:34:13
5:33:43
5:31:30
5:31:13
5:29:13
5:28:43
5:26:30
5:26:13
5:24:13
5:23:43
5:21:30
5:21:13
5:19:13
5:18:43
5:16:30
5:16:13
5:14:13
5:13:43
5:11:30
5:11:13
5:09:13
5:08:43
5:06:30
5:06:13
5:04:13
5:03:43
5:01:30
5:01:13
4:59:13
4:58:43
4:56:30
4:56:13
4:54:13
4:53:43
4:51:42
4:51:34
7:09:51
7:09:26
7:07:26
7:06:56
7:04:51
7:04:26
7:02:26
7:01:56
6:59:51
6:59:26
6:57:26
6:56:56
6:54:51
6:54:26
6:52:26
6:51:56
6:49:51

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009

6:49:26
6:47:26
6:46:56
6:44:51
6:44:26
6:42:26
6:41:56
6:39:51
6:39:26
6:37:26
6:36:56
6:34:51
6:34:26
6:32:26
6:31:56
6:29:51
6:29:26
6:27:26
6:26:56
6:24:51
6:24:26
6:22:26
6:21:56
6:19:51
6:19:26
6:17:26
6:16:56
6:14:51
6:14:26
6:12:26
6:11:56
6:09:51
6:09:26
6:07:26
6:06:56
6:04:51
6:04:26
6:02:26
6:01:56
5:59:51
5:59:26
5:57:26
5:56:56
5:54:51
5:54:26
5:52:26
5:51:56
5:49:51
5:49:26
5:47:26
5:46:56
5:44:51
5:44:26
5:42:26
5:41:56
5:39:51
5:39:26
5:37:26
5:36:56
5:34:51

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009

5:34:26
5:32:26
5:31:56
5:29:51
5:29:26
5:27:26
5:26:56
5:24:51
5:24:26
5:22:26
5:21:56
5:19:51
5:19:26
5:17:26
5:16:56
5:14:51
5:14:26
5:12:26
5:11:56
5:09:51
5:09:26
5:07:26
5:06:56
5:04:51
5:04:26
5:02:26
5:01:56
4:59:51
4:59:26
4:57:26
4:56:56
4:54:51
4:54:26
4:52:26
4:51:56
4:49:52
4:49:26
4:47:26
4:46:56
4:44:52
4:44:26
4:42:26
4:41:56
4:39:56
4:39:52
4:37:26
4:36:56
4:34:26
4:33:56
4:31:56
4:31:26
4:29:26
4:28:56
4:26:56
4:26:26
4:24:26
4:23:56
4:21:56
4:21:26
4:19:26

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009

4:18:56
4:16:26
4:15:56
4:13:56
4:13:26
4:11:26
4:10:56
4:08:56
4:08:26
4:06:26
4:05:56
4:03:56
4:03:26
4:01:26
4:00:56
3:58:56
3:58:26
3:56:26
3:55:56
3:53:56
3:53:26
3:51:26
3:50:56
3:48:56
3:48:26
3:46:26
3:45:56
3:43:56
3:43:26
3:41:26
3:40:56
3:38:56
3:38:26
3:36:26
3:35:56
3:33:56
3:33:26
3:31:26
3:30:56
3:28:56
3:28:26
3:26:26
3:25:56
3:23:56
3:23:26
3:21:26
3:20:56
3:18:56
3:18:26
3:16:26
3:15:56
3:13:56
3:13:26
3:11:26
3:10:56
3:08:56
3:08:26
3:06:26
3:05:56
3:03:56

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009

3:03:26
3:01:26
3:00:56
2:58:56
2:58:26
2:56:26
2:55:56
2:53:56
2:53:26
2:51:26
2:50:56
2:48:56
2:48:26
2:46:26
2:45:56
2:43:56
2:43:26
2:41:26
2:40:56
2:38:26
2:37:56
2:35:56
2:35:26
2:33:26
2:32:56
2:30:56
2:30:26
2:27:59
2:27:59
2:02:05
2:01:35
1:59:16
1:59:05
1:57:05
1:56:35
1:54:16
1:54:05
1:52:05
1:51:35
1:49:16
1:49:05
1:47:05
1:46:35
1:44:16
1:44:05
1:42:05
1:41:35
1:39:16
1:39:05
1:37:05
1:36:35
1:34:16
1:34:05
1:32:05
1:31:35
1:29:16
1:29:05
1:27:05
1:26:35
1:24:16

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009

1:24:05 PM
1:22:05 PM
1:21:35 PM
1:19:16 PM
1:19:05 PM
1:17:05 PM
1:16:35 PM
1:14:16 PM
1:14:05 PM
1:12:05 PM
1:11:35 PM
1:09:16 PM
1:09:05 PM
1:07:05 PM
1:06:35 PM
1:04:16 PM
1:04:05 PM
1:02:05 PM
1:01:35 PM
12:59:16 PM
12:59:05 PM
12:57:05 PM
12:56:35 PM
12:54:16 PM
12:54:05 PM
12:52:05 PM
12:51:35 PM
12:49:16 PM
12:49:05 PM
12:47:05 PM
12:46:35 PM
12:44:16 PM
12:44:05 PM
12:42:05 PM
12:41:35 PM
12:39:16 PM
12:39:05 PM
12:37:05 PM
12:36:35 PM
12:34:16 PM
12:34:05 PM
12:32:05 PM
12:31:35 PM
12:29:16 PM
12:29:05 PM
12:27:05 PM
12:26:35 PM
12:24:16 PM
12:24:05 PM
12:22:05 PM
12:21:35 PM
12:19:16 PM
12:19:05 PM
12:17:05 PM
12:16:35 PM
12:14:16 PM
12:14:05 PM
12:12:05 PM
12:11:35 PM
12:09:16 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009

12:09:05
12:07:05
12:06:35
12:04:16
12:04:05
12:02:05
12:01:35
11:59:16
11:59:05
11:57:05
11:56:35
11:54:16
11:54:05
11:52:05
11:51:35
11:49:16
11:49:05
11:47:05
11:46:35
11:44:16
11:44:05
11:42:05
11:41:35
11:39:16
11:39:05
11:37:05
11:36:35
11:34:16
11:34:05
11:32:05
11:31:35
11:29:16
11:29:05
11:27:05
11:26:35
11:24:16
11:24:05
11:21:35
11:21:05
11:19:05
11:18:35
11:16:35
11:16:05
11:14:05
11:13:35
11:11:35
11:11:05
11:09:05
11:08:35
11:06:35
11:06:05
11:04:05
11:03:35
11:01:35
11:01:07
10:59:05
10:58:35
10:56:35
10:56:05
10:54:05

PM
PM
PM
PM
PM
PM
PM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009

10:53:35 AM
10:51:35 AM
10:51:05 AM
10:49:05 AM
10:48:35 AM
10:46:35 AM
10:46:05 AM
10:44:05 AM
10:43:35 AM
10:41:35 AM
10:41:05 AM
10:39:05 AM
10:38:35 AM
10:36:35 AM
10:36:05 AM
10:34:05 AM
10:33:35 AM
10:31:35 AM
10:31:05 AM
10:29:05 AM
10:28:35 AM
10:26:35 AM
10:26:05 AM
10:24:05 AM
10:23:35 AM
10:21:35 AM
10:21:05 AM
10:19:05 AM
10:18:35 AM
10:16:07 AM
10:16:05 AM
10:14:05 AM
10:13:35 AM
10:11:35 AM
10:11:05 AM
10:09:05 AM
10:08:35 AM
10:06:35 AM
10:06:05 AM
10:04:05 AM
10:03:35 AM
10:01:35 AM
10:01:05 AM
9:59:05 AM
9:58:35 AM
9:56:35 AM
9:56:05 AM
9:54:05 AM
9:53:35 AM
9:51:35 AM
9:51:05 AM
9:48:37 AM
9:48:35 AM
9:46:35 AM
9:46:05 AM
9:44:05 AM
9:43:35 AM
9:41:35 AM
9:41:05 AM
9:39:05 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009

9:38:35
9:36:35
9:36:05
9:34:05
9:33:35
9:31:35
9:31:05
9:29:05
9:28:35
9:26:35
9:26:05
9:24:05
9:23:35
9:21:35
9:21:05
9:19:05
9:18:35
9:16:35
9:16:05
9:14:05
9:13:35
9:11:27
9:11:17
9:09:16
9:09:05
9:07:05
9:06:35
9:04:17
9:04:05
9:02:05
9:01:35
8:59:17
8:59:05
8:57:05
8:56:35
8:54:17
8:54:05
8:51:38
8:51:35
8:49:17
8:49:05
8:46:48
8:46:35
8:44:17
8:44:05
8:42:05
8:41:35
8:39:17
8:39:05
8:37:05
8:36:35
8:34:08
8:34:05
8:32:05
8:31:35
8:29:17
8:29:05
8:27:05
8:26:35
8:24:17

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009

8:24:07
8:22:05
8:21:35
8:19:17
8:19:05
8:17:05
8:16:35
8:14:17
8:14:05
8:12:05
8:11:57
8:09:47
8:09:37
8:07:35
8:07:05
8:05:05
8:04:35
8:02:35
8:02:05
7:59:37
7:59:35
7:57:35
7:57:05
7:54:57
7:54:35
7:52:35
7:52:05
7:50:05
7:49:35
7:47:35
7:47:05
7:45:05
7:44:57
7:42:37
7:42:35
7:40:35
7:40:05
7:38:05
7:37:35
7:35:35
7:35:07
7:33:05
7:32:35
7:30:35
7:30:05
7:28:05
7:27:35
7:25:35
7:25:05
7:22:48
7:22:35
7:20:17
7:20:07
7:18:05
7:17:35
7:15:35
7:15:05
7:13:05
7:12:35
7:10:35

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009

7:10:07
7:08:07
7:08:05
7:06:05
7:05:35
7:03:35
7:03:05
7:00:47
7:00:37
6:58:35
6:58:05
6:56:05
6:55:35
6:53:35
6:53:05
6:51:05
6:50:35
6:48:08
6:48:05
6:46:05
6:45:35
6:43:35
6:43:05
6:41:05
6:40:35
6:38:17
6:38:07
6:36:05
6:35:35
6:33:35
6:33:05
6:31:05
6:30:35
6:28:27
6:28:05
6:26:05
6:25:35
6:23:35
6:23:05
6:21:05
6:20:35
6:18:35
6:18:05
6:16:05
6:15:35
6:13:35
6:13:05
6:11:05
6:10:35
6:08:17
6:08:05
6:06:05
6:05:35
6:03:35
6:03:05
6:01:05
6:00:35
5:58:35
5:58:05
5:56:05

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009

5:55:37
5:53:35
5:53:05
5:51:05
5:50:35
5:48:27
5:48:18
5:46:17
5:46:07
5:44:05
5:43:35
5:41:35
5:41:05
5:39:05
5:38:35
5:36:35
5:36:05
5:34:05
5:33:35
5:31:35
5:31:05
5:29:05
5:28:35
5:26:35
5:26:05
5:24:05
5:23:35
5:21:18
5:21:05
5:19:05
5:18:35
5:16:35
5:16:05
5:14:05
5:13:35
5:11:35
5:11:05
5:09:05
5:08:35
5:06:35
5:06:05
5:04:05
5:03:35
5:01:35
5:01:05
4:59:05
4:58:35
4:56:35
4:56:05
4:54:05
4:53:35
4:51:35
4:51:07
4:49:05
4:48:35
4:46:35
4:46:07
4:44:05
4:43:35
4:41:35

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009

4:41:05
4:38:37
4:38:35
4:36:35
4:36:05
4:34:05
4:33:35
4:31:35
4:31:05
4:29:05
4:28:35
4:26:17
4:26:07
4:24:05
4:23:35
4:21:35
4:21:05
4:19:05
4:18:35
4:16:35
4:16:05
4:13:57
4:13:35
4:11:35
4:11:05
4:09:05
4:08:35
4:06:35
4:06:07
4:04:05
4:03:35
4:01:27
4:01:05
3:59:05
3:58:35
3:56:35
3:56:05
3:54:05
3:53:35
3:51:35
3:51:05
3:49:05
3:48:35
3:46:35
3:46:05
3:44:05
3:43:35
3:41:35
3:41:05
3:38:57
3:38:35
3:36:35
3:36:05
3:34:05
3:33:35
3:31:17
3:31:08
3:29:05
3:28:35
3:26:35

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009

3:26:28
3:24:18
3:24:05
3:22:05
3:21:05
3:19:05
3:18:35
3:16:35
3:16:05
3:14:05
3:13:35
3:11:35
3:11:05
3:09:05
3:08:35
3:06:35
3:06:05
3:04:05
3:03:35
3:01:35
3:01:05
2:59:05
2:58:35
2:56:08
2:56:05
2:54:05
2:53:35
2:51:29
2:51:05
2:49:05
2:48:35
2:46:35
2:46:05
2:44:05
2:43:35
2:41:19
2:41:05
2:38:39
2:38:35
2:36:35
2:36:05
2:34:05
2:33:35
2:31:35
2:31:05
2:29:05
2:28:35
2:26:05
2:25:35
2:23:35
2:23:05
2:20:48
2:20:39
2:18:35
2:18:05
2:15:38
2:15:35
2:13:35
2:13:05
2:10:39

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009

2:10:35 AM
2:08:35 AM
2:08:05 AM
2:06:05 AM
2:05:35 AM
2:03:35 AM
2:03:05 AM
2:01:05 AM
2:00:35 AM
1:58:35 AM
1:58:05 AM
1:56:05 AM
1:55:35 AM
1:53:35 AM
1:53:05 AM
1:50:49 AM
1:50:35 AM
1:48:35 AM
1:48:05 AM
1:46:05 AM
1:45:35 AM
1:43:35 AM
1:43:05 AM
1:41:05 AM
1:40:38 AM
1:38:35 AM
1:38:05 AM
1:36:05 AM
1:35:35 AM
1:33:35 AM
1:33:05 AM
1:30:59 AM
1:30:35 AM
1:28:35 AM
1:28:08 AM
1:26:05 AM
1:25:38 AM
1:23:35 AM
1:23:05 AM
1:21:05 AM
1:20:35 AM
1:18:35 AM
1:18:05 AM
1:16:05 AM
1:15:35 AM
1:13:35 AM
1:13:05 AM
1:11:05 AM
1:10:35 AM
1:08:19 AM
1:08:05 AM
1:06:05 AM
1:05:35 AM
1:03:35 AM
1:03:05 AM
1:01:05 AM
1:00:35 AM
12:58:35 AM
12:58:05 AM
12:56:05 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009

12:55:35
12:53:35
12:53:05
12:51:05
12:50:35
12:48:35
12:48:05
12:46:05
12:45:35
12:43:29
12:43:05
12:41:05
12:40:35
12:38:35
12:38:05
12:35:39
12:35:35
12:33:35
12:33:05
12:30:49
12:30:35
12:28:35
12:28:05
12:25:49
12:25:35
12:23:35
12:23:08
12:21:05
12:20:35
12:18:35
12:18:29
12:16:28
12:16:19
12:14:18
12:14:05
12:12:05
12:11:35
12:09:06
12:09:05
12:07:05
12:06:35
12:04:18
12:04:05
12:02:05
12:01:35
11:59:18
11:59:05
11:57:05
11:56:35
11:54:18
11:54:05
11:52:05
11:51:35
11:49:18
11:49:05
11:47:05
11:46:35
11:44:18
11:44:05
11:42:05

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009

11:41:35
11:39:18
11:39:05
11:37:05
11:36:35
11:34:18
11:34:05
11:32:05
11:31:35
11:29:18
11:29:05
11:27:05
11:26:35
11:24:18
11:24:05
11:22:05
11:21:35
11:19:18
11:19:05
11:17:05
11:16:35
11:14:19
11:14:05
11:12:05
11:11:35
11:09:19
11:09:05
11:07:05
11:06:35
11:04:19
11:04:05
11:02:05
11:01:35
10:59:19
10:59:05
10:57:05
10:56:35
10:54:19
10:54:05
10:52:05
10:51:35
10:49:19
10:49:05
10:47:05
10:46:35
10:44:19
10:44:05
10:42:05
10:41:35
10:39:19
10:39:05
10:37:05
10:36:35
10:34:19
10:34:05
10:32:05
10:31:35
10:29:19
10:29:05
10:27:05

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009

10:26:35 PM
10:24:19 PM
10:24:05 PM
10:22:05 PM
10:21:35 PM
10:19:19 PM
10:19:05 PM
10:17:05 PM
10:16:35 PM
10:14:19 PM
10:14:05 PM
10:12:05 PM
10:11:35 PM
10:09:19 PM
10:09:05 PM
10:07:05 PM
10:06:35 PM
10:04:19 PM
10:04:05 PM
10:02:05 PM
10:01:35 PM
9:59:19 PM
9:59:05 PM
9:57:05 PM
9:56:35 PM
9:54:19 PM
9:54:05 PM
9:52:05 PM
9:51:35 PM
9:49:19 PM
9:49:05 PM
9:47:05 PM
9:46:35 PM
9:44:19 PM
9:44:05 PM
9:42:05 PM
9:41:35 PM
9:39:19 PM
9:39:05 PM
9:37:05 PM
9:36:35 PM
9:34:19 PM
9:34:05 PM
9:32:05 PM
9:31:35 PM
9:29:19 PM
9:29:05 PM
9:27:05 PM
9:26:35 PM
9:24:19 PM
9:24:05 PM
9:22:05 PM
9:21:35 PM
9:19:19 PM
9:19:05 PM
9:17:05 PM
9:16:35 PM
9:14:19 PM
9:14:05 PM
9:12:05 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009

9:11:35
9:09:19
9:09:05
9:07:05
9:06:35
9:04:19
9:04:05
9:02:05
9:01:35
8:59:19
8:59:05
8:57:05
8:56:35
8:54:19
8:54:05
8:52:05
8:51:35
8:49:31
4:18:42
4:17:33
4:13:42
4:12:33
4:08:52
4:07:33
4:03:42
4:02:33
3:58:42
3:57:33
3:53:42
3:52:33
3:48:42
3:47:33
3:43:42
3:42:33
3:38:42
3:37:33
3:33:42
3:32:33
3:28:42
3:27:33
3:23:42
3:22:33
3:18:42
3:17:33
3:13:42
3:12:33
3:09:12
3:07:49
1:38:13
1:37:04
1:33:13
1:32:04
1:28:13
1:27:04
1:23:13
1:22:04
1:18:13
1:17:04
1:13:13
1:12:04

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009

1:08:13 PM
1:07:04 PM
1:03:13 PM
1:02:04 PM
12:58:13 PM
12:57:04 PM
12:53:13 PM
12:52:04 PM
12:48:13 PM
12:47:04 PM
12:43:13 PM
12:42:04 PM
12:39:33 PM
12:37:04 PM
12:33:13 PM
12:32:04 PM
12:31:33 PM
12:30:03 PM
12:28:13 PM
12:27:04 PM
12:24:03 PM
12:22:04 PM
12:18:13 PM
12:15:10 PM
12:13:13 PM
12:12:04 PM
12:08:13 PM
12:07:04 PM
12:03:13 PM
12:02:04 PM
11:59:03 AM
11:57:04 AM
11:53:13 AM
11:52:04 AM
11:51:53 AM
11:50:23 AM
11:48:13 AM
11:47:04 AM
11:46:43 AM
11:45:13 AM
11:43:13 AM
11:42:04 AM
11:41:43 AM
11:40:14 AM
11:39:33 AM
11:37:03 AM
11:34:33 AM
11:32:04 AM
11:29:13 AM
11:27:23 AM
11:27:23 AM
3:52:25 AM
3:48:35 AM
3:47:25 AM
3:43:35 AM
3:42:25 AM
3:38:35 AM
3:37:25 AM
3:33:35 AM
3:32:25 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009

3:28:35
3:27:25
3:23:35
3:22:25
3:21:35
3:20:19
3:18:35
3:17:25
3:13:35
3:12:26
3:08:35
3:07:26
3:03:35
3:02:26
2:58:35
2:57:26
2:53:35
2:52:26
2:48:35
2:47:26
2:43:35
2:42:26
2:38:35
2:37:26
2:33:35
2:32:26
2:32:15
2:31:08
2:28:35
2:27:26
2:25:35
2:24:27
2:23:35
2:22:26
2:18:35
2:17:26
2:15:55
2:14:43
2:13:35
2:12:26
2:12:25
2:10:48
2:08:35
2:07:26
2:03:35
2:02:26
1:58:35
1:57:26
1:53:35
1:52:26
1:48:35
1:47:26
1:43:35
1:42:26
1:38:35
1:37:26
1:33:35
1:32:26
1:28:35
1:27:26

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009

1:23:35 AM
1:22:26 AM
1:18:35 AM
1:17:26 AM
1:13:35 AM
1:12:26 AM
1:08:35 AM
1:07:26 AM
1:03:35 AM
1:02:26 AM
12:58:35 AM
12:57:26 AM
12:53:35 AM
12:52:26 AM
12:48:35 AM
12:47:26 AM
12:46:15 AM
12:44:47 AM
12:43:35 AM
12:42:26 AM
12:38:35 AM
12:37:26 AM
12:35:25 AM
12:34:24 AM
12:33:45 AM
12:32:26 AM
12:32:25 AM
8:13:25 PM
8:09:25 PM
8:08:25 PM
8:04:25 PM
8:03:25 PM
7:59:25 PM
7:58:25 PM
7:54:25 PM
7:53:25 PM
7:49:25 PM
7:48:25 PM
7:44:35 PM
7:43:25 PM
7:39:35 PM
7:38:25 PM
7:34:35 PM
7:33:25 PM
7:29:35 PM
7:28:25 PM
7:24:35 PM
7:23:25 PM
7:19:35 PM
7:18:25 PM
7:14:35 PM
7:13:25 PM
7:09:35 PM
7:08:25 PM
7:04:35 PM
7:03:25 PM
6:59:25 PM
6:58:13 PM
6:56:35 PM
6:55:06 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009

6:54:35
6:53:25
6:50:05
6:48:55
6:48:45
6:46:38
6:46:08
6:44:08
6:43:38
6:41:38
6:41:08
6:39:08
6:38:38
6:36:27
6:34:35
6:33:25
6:29:35
6:28:25
6:24:35
6:23:25
6:19:35
6:18:25
6:14:35
6:13:25
6:09:35
6:08:25
6:04:35
6:03:25
5:59:35
5:58:25
5:54:35
5:53:25
5:49:35
5:47:31
5:44:35
5:43:25
5:43:15
5:41:46
5:39:35
5:38:25
5:34:35
5:33:25
5:29:35
5:28:25
5:24:35
5:23:25
5:19:35
5:18:25
5:17:05
5:15:36
5:14:35
5:13:25
5:12:55
5:11:26
5:09:35
5:08:25
5:08:05
5:06:06
5:04:35
5:02:36

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009

5:00:35
4:58:25
4:57:55
4:55:56
4:55:26
4:53:25
4:52:56
4:50:27
4:50:26
4:48:25
4:47:56
4:45:56
4:45:26
4:43:25
4:42:56
4:40:56
4:40:26
4:38:26
4:37:56
4:35:56
4:35:26
4:33:26
4:32:56
4:30:56
4:30:26
4:28:26
4:27:56
4:25:56
4:25:26
4:23:26
4:22:56
4:20:56
4:20:26
4:18:26
4:17:56
4:15:56
4:15:26
4:13:26
4:12:56
4:10:56
4:10:26
4:08:26
4:07:56
4:05:56
4:05:26
4:03:26
4:02:56
4:00:56
4:00:26
3:58:26
3:57:56
3:55:56
3:55:26
3:53:26
3:52:56
3:50:56
3:50:26
3:48:26
3:47:56
3:45:56

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009

3:45:26
3:43:26
3:42:56
3:40:56
3:40:26
3:38:26
3:37:56
3:35:56
3:35:26
3:33:26
3:32:56
3:30:56
3:30:26
3:28:26
3:27:56
3:25:37
3:25:26
3:23:26
3:22:56
3:20:56
3:20:26
3:18:26
3:17:56
3:15:56
3:15:26
3:13:26
3:12:56
3:10:56
3:10:26
3:08:26
3:07:56
3:05:56
3:05:26
3:03:26
3:02:56
3:00:56
3:00:26
2:58:26
2:57:56
2:55:56
2:55:26
2:53:26
2:52:56
2:50:56
2:50:26
2:48:26
2:47:56
2:45:56
2:45:26
2:43:26
2:42:56
2:40:56
2:40:26
2:38:26
2:37:56
2:35:56
2:35:26
2:33:26
2:32:56
2:30:56

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009

2:30:26 PM
2:28:26 PM
2:27:56 PM
2:25:56 PM
2:25:26 PM
2:23:26 PM
2:22:56 PM
2:20:56 PM
2:20:26 PM
2:18:26 PM
2:18:26 PM
2:16:26 PM
2:15:56 PM
2:13:36 PM
2:13:25 PM
1:35:37 PM
1:35:07 PM
1:33:07 PM
1:32:37 PM
1:30:37 PM
1:30:07 PM
1:28:07 PM
1:27:37 PM
1:25:37 PM
1:25:07 PM
1:23:07 PM
1:22:37 PM
1:20:37 PM
1:20:07 PM
1:18:07 PM
1:17:37 PM
1:15:37 PM
1:15:07 PM
1:13:07 PM
1:12:37 PM
1:10:37 PM
1:10:07 PM
1:08:07 PM
1:07:37 PM
1:05:37 PM
1:05:07 PM
1:03:07 PM
1:02:37 PM
1:00:37 PM
1:00:07 PM
12:58:07 PM
12:57:37 PM
12:55:37 PM
12:55:07 PM
12:53:07 PM
12:52:37 PM
12:50:37 PM
12:50:07 PM
12:48:07 PM
12:47:37 PM
12:45:37 PM
12:45:07 PM
12:43:07 PM
12:42:37 PM
12:40:37 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009

12:40:07 PM
12:38:07 PM
12:37:37 PM
12:35:37 PM
12:35:07 PM
12:33:07 PM
12:32:37 PM
12:30:37 PM
12:30:37 PM
12:28:37 PM
12:28:07 PM
12:25:37 PM
12:25:36 PM
8:17:35 AM
8:17:04 AM
8:15:04 AM
8:14:34 AM
8:12:34 AM
8:12:04 AM
8:10:04 AM
8:09:34 AM
8:07:34 AM
8:07:04 AM
8:05:04 AM
8:04:34 AM
8:02:34 AM
8:02:04 AM
8:00:04 AM
7:59:34 AM
7:57:34 AM
7:57:04 AM
7:55:04 AM
7:54:34 AM
7:52:34 AM
7:52:04 AM
7:50:04 AM
7:49:34 AM
7:47:34 AM
7:47:04 AM
7:45:04 AM
7:44:34 AM
7:42:34 AM
7:42:04 AM
7:40:04 AM
7:39:34 AM
7:37:34 AM
7:37:04 AM
7:35:04 AM
7:34:34 AM
7:32:04 AM
7:31:34 AM
7:29:34 AM
7:29:04 AM
7:27:04 AM
7:26:34 AM
7:24:34 AM
7:24:04 AM
7:22:04 AM
7:21:34 AM
7:19:34 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009

7:19:04
7:17:04
7:16:34
7:14:28
7:14:05
7:12:04
7:11:34
7:09:34
7:09:04
7:07:04
7:06:34
7:04:34
7:04:05
7:02:04
7:01:34
6:59:04
6:59:03
4:23:42
4:23:12
4:21:12
4:20:42
4:18:42
4:18:12
4:16:12
4:15:42
4:13:42
4:13:12
4:11:12
4:10:42
4:08:42
4:08:12
4:06:12
4:05:42
4:03:42
4:03:12
4:01:12
4:00:42
3:58:42
3:58:12
3:56:12
3:55:42
3:53:42
3:53:12
3:51:12
3:50:42
3:48:42
3:48:12
3:46:12
3:45:42
3:43:42
3:43:12
3:41:12
3:40:42
3:38:42
3:38:12
3:36:12
3:35:42
3:33:42
3:33:12
3:31:12

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009

3:30:42 AM
3:28:42 AM
3:28:12 AM
3:26:12 AM
3:25:42 AM
3:23:42 AM
3:23:12 AM
3:21:01 AM
3:17:12 AM
3:16:42 AM
3:14:42 AM
3:14:12 AM
3:12:12 AM
3:11:42 AM
3:09:42 AM
3:09:12 AM
3:07:12 AM
3:06:42 AM
3:04:42 AM
3:04:12 AM
3:02:12 AM
3:01:53 AM
3:00:12 AM
3:00:12 AM
1:18:03 AM
1:17:33 AM
1:15:33 AM
1:15:03 AM
1:13:03 AM
1:12:33 AM
1:10:33 AM
1:10:03 AM
1:08:03 AM
1:07:33 AM
1:05:33 AM
1:05:03 AM
1:03:03 AM
1:02:33 AM
1:00:33 AM
1:00:03 AM
12:58:03 AM
12:57:33 AM
12:55:33 AM
12:55:03 AM
12:53:03 AM
12:52:33 AM
12:50:33 AM
12:50:03 AM
12:48:03 AM
12:47:33 AM
12:45:33 AM
12:45:03 AM
12:43:03 AM
12:42:33 AM
12:40:33 AM
12:40:03 AM
12:38:03 AM
12:37:33 AM
12:35:03 AM
12:34:33 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009

12:32:33
12:32:03
12:30:03
12:29:33
12:27:33
12:27:03
12:25:03
12:24:33
12:22:33
12:22:03
12:20:03
12:19:33
12:17:33
12:17:03
12:15:03
12:14:33
12:12:33
12:12:03
12:10:03
12:09:33
12:07:33
12:07:03
12:05:03
12:04:33
12:02:33
12:02:03
12:00:03
11:59:33
11:57:03
11:56:33
11:54:14
11:54:02
11:49:21
11:48:51
11:46:40
11:46:21
11:44:21
11:43:51
11:41:40
11:41:21
11:39:21
11:38:51
11:36:40
11:36:21
11:34:21
11:33:51
11:31:40
11:31:21
11:29:21
11:28:51
11:26:40
11:26:21
11:24:21
11:23:51
11:21:40
11:21:21
11:19:21
11:18:51
11:16:40
11:16:21

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009

11:14:21
11:13:51
11:11:40
11:11:21
11:09:21
11:08:51
11:06:40
11:06:21
11:04:21
11:03:51
11:01:40
11:01:21
10:59:21
10:58:51
10:56:40
10:56:21
10:54:21
10:53:51
10:51:40
10:51:21
10:49:21
10:48:51
10:46:40
10:46:21
10:44:21
10:43:51
10:41:40
10:41:21
10:39:21
10:38:51
10:36:40
10:36:21
10:34:21
10:33:51
10:31:40
10:31:21
10:29:21
10:28:51
10:26:40
10:26:21
10:24:21
10:23:51
10:21:40
10:21:21
10:18:51
10:18:21
10:16:21
10:15:51
10:13:51
10:13:21
10:11:21
10:10:51
10:08:51
10:08:21
10:06:21
10:05:51
10:03:51
10:03:21
10:01:21
10:00:51

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009

9:58:51
9:58:21
9:56:21
9:55:51
9:53:51
9:53:21
9:51:21
9:50:51
9:48:51
9:48:21
9:46:21
9:45:51
9:43:51
9:43:21
9:41:21
9:40:51
9:38:51
9:38:21
9:36:21
9:35:51
9:33:51
9:33:21
9:31:21
9:30:51
9:28:51
9:28:21
9:26:21
9:25:51
9:23:51
9:23:21
9:21:21
9:20:51
9:18:51
9:18:21
9:16:21
9:15:51
9:13:51
9:13:21
9:11:21
9:10:51
9:08:51
9:08:21
9:06:21
9:05:51
9:03:51
9:03:21
9:01:21
9:00:51
8:58:51
8:58:21
8:56:21
8:55:51
8:53:51
8:53:21
8:51:21
8:50:51
8:48:51
8:48:21
8:46:21
8:45:51

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009

8:43:51
8:43:21
8:41:21
8:40:51
8:38:51
8:38:21
8:36:21
8:35:51
8:33:51
8:33:21
8:31:21
8:30:51
8:28:51
8:28:21
8:26:21
8:25:51
8:23:51
8:23:21
8:21:21
8:20:51
8:18:51
8:18:21
8:16:21
8:15:51
8:13:51
8:13:21
8:11:21
8:10:51
8:08:51
8:08:21
8:06:21
8:05:51
8:03:51
8:03:21
8:01:21
8:00:51
7:58:51
7:58:21
7:56:21
7:55:51
7:53:51
7:53:21
7:51:21
7:50:51
7:48:51
7:48:21
7:46:21
7:45:51
7:43:51
7:43:21
7:41:21
7:40:51
7:38:51
7:38:21
7:36:21
7:35:51
7:33:51
7:33:21
7:31:21
7:30:51

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009

7:28:51
7:28:21
7:26:21
7:25:51
7:23:51
7:23:21
7:21:21
7:20:51
7:18:51
7:18:21
7:16:21
7:15:51
7:13:51
7:13:21
7:11:21
7:10:51
7:08:51
7:08:21
7:06:21
7:05:51
7:03:51
7:03:21
7:01:21
7:00:51
6:58:51
6:58:21
6:56:21
6:55:51
6:53:51
6:53:21
6:51:21
6:50:51
6:48:51
6:48:21
6:46:21
6:45:51
6:43:51
6:43:21
6:41:21
6:40:51
6:38:51
6:38:21
6:36:21
6:35:51
6:33:51
6:33:21
6:31:21
6:30:51
6:28:51
6:28:21
6:26:21
6:25:51
6:23:51
6:23:21
6:21:21
6:20:51
6:18:51
6:18:21
6:16:21
6:15:51

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009

6:13:51
6:13:21
6:11:21
6:10:51
6:08:51
6:08:21
6:06:21
6:05:51
6:03:51
6:03:21
6:01:21
6:00:51
5:58:51
5:58:21
5:56:21
5:55:51
5:53:51
5:53:21
5:51:21
5:50:51
5:48:51
5:48:21
5:46:21
5:45:51
5:43:51
5:43:21
5:41:21
5:40:51
5:38:51
5:38:21
5:36:21
5:35:51
5:33:51
5:33:21
5:31:21
5:30:51
5:28:51
5:28:21
5:26:21
5:25:51
5:23:51
5:23:21
5:21:21
5:20:51
5:18:51
5:18:21
5:16:21
5:15:51
5:13:51
5:13:21
5:11:21
5:10:51
5:08:51
5:08:21
5:06:21
5:05:51
5:03:51
5:03:21
5:01:21
5:00:51

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009

4:58:51
4:58:21
4:56:21
4:55:51
4:53:51
4:53:21
4:51:21
4:50:51
4:48:51
4:48:21
4:46:21
4:45:51
4:43:51
4:43:21
4:41:21
4:40:51
4:38:51
4:38:21
4:36:21
4:35:51
4:33:51
4:33:21
4:31:21
4:30:51
4:28:51
4:28:21
4:26:21
4:25:51
4:23:51
4:23:21
4:21:21
4:20:51
4:18:51
4:18:21
4:16:21
4:15:51
4:13:51
4:13:21
4:11:21
4:10:51
4:08:51
4:08:21
4:06:21
4:05:51
4:03:51
4:03:21
4:01:21
4:00:51
3:58:51
3:58:21
3:56:21
3:55:51
3:53:51
3:53:21
3:51:21
3:50:51
3:48:51
3:48:21
3:46:21
3:45:51

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009

3:43:51
3:43:21
3:41:21
3:40:51
3:38:51
3:38:21
3:36:21
3:35:51
3:33:51
3:33:21
3:31:21
3:30:51
3:28:51
3:28:21
3:26:21
3:25:51
3:23:51
3:23:21
3:21:21
3:20:51
3:18:51
3:18:21
3:16:21
3:15:51
3:13:51
3:13:21
3:11:21
3:10:51
3:08:51
3:08:21
3:06:21
3:05:51
3:03:51
3:03:21
3:01:21
3:00:51
2:58:51
2:58:21
2:56:21
2:55:51
2:53:21
2:52:51
2:50:51
2:50:21
2:48:21
2:47:51
2:45:51
2:45:21
2:43:21
2:42:51
2:40:51
2:40:21
2:38:21
2:37:51
2:35:51
2:35:21
2:33:21
2:32:51
2:30:51
2:30:21

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009

2:28:21 PM
2:27:51 PM
2:25:51 PM
2:25:21 PM
2:23:21 PM
2:22:51 PM
2:20:51 PM
2:20:21 PM
2:18:21 PM
2:17:51 PM
2:15:51 PM
2:15:21 PM
2:13:21 PM
2:12:51 PM
2:10:51 PM
2:10:21 PM
2:08:21 PM
2:07:51 PM
2:05:21 PM
2:04:51 PM
2:02:51 PM
2:02:21 PM
2:00:21 PM
1:59:51 PM
1:57:51 PM
1:57:21 PM
1:55:21 PM
1:54:51 PM
1:52:51 PM
1:52:21 PM
1:50:21 PM
1:49:51 PM
1:47:51 PM
1:47:21 PM
1:45:21 PM
1:44:51 PM
1:42:51 PM
1:42:21 PM
1:40:21 PM
1:39:51 PM
1:37:51 PM
1:37:21 PM
1:34:51 PM
1:34:21 PM
1:32:21 PM
1:31:51 PM
1:29:43 PM
1:27:51 PM
1:26:42 PM
1:22:51 PM
1:21:42 PM
1:17:51 PM
1:16:42 PM
1:12:51 PM
1:11:42 PM
1:07:51 PM
1:06:42 PM
1:02:51 PM
1:01:42 PM
12:57:51 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009

12:56:42 PM
12:52:51 PM
12:51:42 PM
12:47:51 PM
12:46:42 PM
12:42:51 PM
12:41:42 PM
12:41:31 PM
12:40:14 PM
12:38:11 PM
12:36:42 PM
12:34:11 PM
12:31:42 PM
12:31:41 PM
12:28:42 PM
12:27:51 PM
12:26:42 PM
12:23:01 PM
12:21:42 PM
6:20:51 AM
6:19:50 AM
6:15:51 AM
6:14:50 AM
6:10:51 AM
6:09:50 AM
6:05:51 AM
6:04:50 AM
6:00:51 AM
5:59:50 AM
5:55:51 AM
5:54:50 AM
5:50:51 AM
5:49:50 AM
5:45:51 AM
5:44:50 AM
5:40:51 AM
5:39:50 AM
5:35:51 AM
5:34:50 AM
5:30:51 AM
5:29:50 AM
5:25:51 AM
5:24:50 AM
5:20:51 AM
5:19:50 AM
5:15:51 AM
5:14:50 AM
5:10:51 AM
5:09:50 AM
5:05:51 AM
5:04:50 AM
5:00:51 AM
4:59:50 AM
4:55:51 AM
4:54:50 AM
4:50:51 AM
4:49:50 AM
4:45:51 AM
4:44:50 AM
4:42:21 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009

4:39:20
4:38:50
4:36:42
4:36:41
4:34:34
4:34:20
4:32:20
4:31:50
4:29:50
4:29:20
4:27:20
4:26:50
4:24:50
4:24:20
4:22:15
4:21:50
4:19:50
4:19:20
4:17:01
4:16:50
4:14:31
4:14:21
4:12:20
4:11:50
4:09:50
4:09:20
4:07:12
4:06:50
4:04:50
4:04:20
4:02:05
4:02:05
4:00:02
4:00:02
3:03:12
3:02:42
3:00:24
3:00:24
5:30:03
5:29:55
5:27:55
5:27:25
5:25:03
5:24:55
5:22:55
5:22:25
5:20:03
5:19:55
5:17:55
5:17:25
5:15:03
5:14:55
5:12:55
5:12:25
5:10:03
5:09:55
5:07:55
5:07:25
5:05:03
5:04:55

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009

5:02:25
5:01:55
4:59:55
4:59:25
4:57:25
4:56:55
4:54:55
4:54:25
4:52:25
4:51:55
4:49:55
4:49:25
4:47:21
4:46:55
4:44:55
4:44:25
4:42:25
4:41:55
4:39:55
4:39:25
4:36:55
4:36:33
4:33:55
4:33:25
4:31:25
4:30:55
4:28:55
4:28:25
4:26:25
4:25:55
4:23:55
4:23:25
4:21:25
4:20:55
4:18:55
4:18:25
4:16:25
4:15:55
4:13:55
4:13:25
4:11:25
4:10:55
4:08:25
4:07:55
4:05:55
4:05:25
4:03:25
4:02:55
4:00:55
4:00:25
3:58:25
3:57:55
3:55:55
3:55:25
3:53:25
3:52:55
3:50:55
3:50:25
3:48:25
3:47:55

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009

3:45:55
3:45:25
3:43:25
3:42:55
3:40:55
3:40:25
3:38:25
3:37:55
3:35:55
3:35:25
3:33:25
3:32:55
3:30:55
3:30:25
3:28:25
3:27:55
3:25:55
3:25:25
3:23:08
3:22:55
3:20:55
3:20:25
3:18:25
3:17:55
3:15:55
3:15:25
3:13:25
3:12:55
3:10:55
3:10:25
3:08:25
3:07:55
3:05:55
3:05:25
3:03:25
3:02:55
3:00:55
3:00:25
2:58:25
2:57:55
2:55:55
2:55:25
2:53:25
2:52:55
2:50:55
2:50:25
2:48:18
2:40:31
2:40:01
2:38:01
2:37:31
2:35:31
2:35:01
2:33:01
2:33:00
2:30:31
2:30:01
2:28:01
2:27:31
2:25:31

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009

2:25:01 PM
2:23:01 PM
2:22:31 PM
2:20:31 PM
2:20:01 PM
2:18:01 PM
2:17:31 PM
2:15:31 PM
2:15:01 PM
2:13:01 PM
2:12:56 PM
2:10:50 PM
2:10:31 PM
2:08:31 PM
2:08:01 PM
2:06:01 PM
2:05:31 PM
2:03:31 PM
2:03:01 PM
2:01:01 PM
2:00:31 PM
1:58:31 PM
1:58:01 PM
1:56:01 PM
1:55:31 PM
1:53:01 PM
1:52:31 PM
1:50:31 PM
1:50:01 PM
1:48:01 PM
1:47:31 PM
1:45:31 PM
1:45:01 PM
1:43:01 PM
1:42:31 PM
1:40:31 PM
1:40:01 PM
1:38:01 PM
1:37:31 PM
1:35:31 PM
1:35:01 PM
1:33:01 PM
1:32:31 PM
1:30:31 PM
1:30:01 PM
1:27:46 PM
1:27:30 PM
11:28:27 AM
11:27:57 AM
11:25:57 AM
11:25:27 AM
11:23:27 AM
11:22:57 AM
11:20:57 AM
11:20:27 AM
11:18:27 AM
11:17:57 AM
11:15:57 AM
11:15:27 AM
11:13:27 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009

11:12:57 AM
11:10:57 AM
11:10:27 AM
11:07:57 AM
11:07:27 AM
11:05:27 AM
11:04:57 AM
11:02:57 AM
11:02:27 AM
11:00:27 AM
10:59:57 AM
10:57:57 AM
10:57:27 AM
10:55:27 AM
10:54:57 AM
10:52:57 AM
10:52:27 AM
10:50:27 AM
10:49:57 AM
10:47:57 AM
10:47:27 AM
10:45:27 AM
10:44:57 AM
10:42:57 AM
10:42:27 AM
10:40:27 AM
10:39:57 AM
10:37:57 AM
10:37:27 AM
10:35:27 AM
10:34:57 AM
10:32:57 AM
10:32:27 AM
10:30:27 AM
10:29:57 AM
10:27:57 AM
10:27:27 AM
10:25:27 AM
10:24:57 AM
10:22:57 AM
10:22:27 AM
10:20:27 AM
10:19:57 AM
10:17:57 AM
10:17:27 AM
10:15:27 AM
10:14:57 AM
10:12:57 AM
10:12:27 AM
10:10:27 AM
10:09:57 AM
10:07:57 AM
10:07:27 AM
10:05:12 AM
10:04:58 AM
5:21:15 AM
5:20:45 AM
5:18:45 AM
5:18:15 AM
5:16:15 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009

5:15:45
5:13:45
5:13:15
5:11:15
5:10:45
5:08:45
5:08:15
5:06:15
5:05:45
5:03:45
5:03:15
5:01:15
5:00:45
4:58:45
4:58:15
4:56:15
4:55:45
4:53:45
4:53:15
4:51:15
4:50:45
4:48:45
4:48:15
4:46:15
4:45:45
4:43:45
4:43:15
4:41:15
4:40:45
4:38:45
4:38:15
4:36:15
4:35:45
4:33:45
4:33:15
4:31:15
4:30:45
4:28:45
4:28:15
4:25:46
4:25:15
4:22:56
4:22:45
4:20:45
4:20:15
4:18:15
4:17:45
4:15:45
4:15:15
4:13:15
4:12:45
4:10:45
4:10:15
4:08:15
4:07:45
4:05:45
4:05:15
4:03:15
4:02:45
4:00:45

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009

4:00:41
3:58:15
3:57:45
3:55:45
3:55:15
3:53:15
3:52:45
3:50:45
3:50:42
3:48:35
3:48:15
9:08:23
9:07:53
9:05:23
9:04:53
9:02:53
9:02:23
9:00:23
8:59:53
8:57:53
8:57:23
8:55:23
8:54:53
8:52:53
8:52:23
8:50:23
8:49:53
8:47:53
8:47:23
8:45:23
8:44:53
8:42:53
8:42:23
8:40:23
8:39:53
8:37:53
8:37:23
8:35:23
8:34:53
8:32:53
8:32:23
8:30:23
8:29:53
8:27:53
8:27:23
8:25:23
8:24:53
8:22:53
8:22:23
8:20:23
8:19:53
8:17:53
8:17:23
8:15:23
8:14:53
8:12:53
8:12:23
8:10:23
8:09:53
8:07:53

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009

8:07:23
8:05:23
8:04:53
8:02:53
8:02:23
8:00:23
7:59:53
7:57:37
7:57:23
6:09:42
6:09:12
6:07:12
6:06:42
6:04:42
6:04:12
6:02:12
6:01:42
5:59:42
5:59:12
5:57:12
5:56:42
5:54:42
5:54:12
5:52:12
5:51:42
5:49:42
5:49:12
5:47:12
5:46:42
5:44:42
5:44:12
5:42:12
5:41:42
5:39:42
5:39:12
5:37:12
5:36:42
5:34:42
5:34:12
5:32:12
5:31:42
5:29:42
5:29:12
5:27:12
5:26:42
5:24:42
5:24:12
5:22:12
5:21:42
5:19:42
5:19:12
5:17:12
5:16:42
5:14:42
5:14:12
5:12:12
5:11:42
5:09:42
5:09:12
5:07:12

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009

5:06:42 PM
5:04:42 PM
5:04:12 PM
5:02:12 PM
5:01:42 PM
4:59:36 PM
10:44:43 AM
10:42:43 AM
10:42:13 AM
10:40:13 AM
10:39:43 AM
10:37:43 AM
10:37:13 AM
10:35:13 AM
10:34:43 AM
10:32:43 AM
10:32:13 AM
10:30:13 AM
10:29:43 AM
10:27:43 AM
10:27:13 AM
10:25:13 AM
10:24:43 AM
10:22:43 AM
10:22:13 AM
10:20:13 AM
10:19:43 AM
10:17:43 AM
10:17:13 AM
10:15:13 AM
10:14:43 AM
10:12:43 AM
10:12:13 AM
10:10:13 AM
10:09:43 AM
10:07:43 AM
10:07:13 AM
10:05:13 AM
10:04:43 AM
10:02:43 AM
10:02:13 AM
10:00:13 AM
9:59:43 AM
9:57:43 AM
9:57:13 AM
9:55:13 AM
9:54:43 AM
9:52:43 AM
9:52:13 AM
9:50:13 AM
9:49:43 AM
9:47:43 AM
9:47:13 AM
9:45:13 AM
9:44:43 AM
9:42:43 AM
9:42:13 AM
9:40:13 AM
9:39:43 AM
9:37:43 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009

9:37:13
9:35:13
9:34:43
9:32:43
9:32:13
9:30:13
9:29:43
9:27:43
9:27:13
9:25:13
9:24:43
9:22:43
9:22:13
9:20:13
9:19:43
9:17:43
9:17:13
9:15:13
9:14:43
9:12:43
9:12:13
9:10:13
9:09:43
9:07:43
9:07:13
9:05:13
9:04:43
9:02:43
9:02:13
9:00:13
8:59:43
8:57:43
8:57:13
8:55:13
8:54:43
8:52:43
8:52:13
8:50:13
8:49:43
8:47:43
8:47:13
8:45:13
8:44:43
8:42:43
8:42:13
8:40:13
8:39:43
8:37:43
8:37:13
8:35:13
8:34:43
8:32:43
8:32:13
8:30:13
8:29:43
8:27:43
8:27:13
8:25:13
8:24:43
8:22:43

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009

8:22:13
8:20:13
8:19:43
8:17:43
8:17:13
8:15:13
8:14:43
8:12:43
8:12:13
8:10:13
8:09:43
8:07:43
8:07:13
8:05:13
8:04:43
8:02:43
8:02:13
8:00:13
7:59:43
7:57:13
7:56:43
7:54:43
7:54:13
7:52:13
7:51:43
7:49:43
7:49:13
7:47:13
7:46:43
7:44:43
7:44:13
7:42:13
7:41:43
7:39:43
7:39:13
7:37:13
7:36:43
7:34:43
7:34:13
7:32:13
7:31:43
7:29:43
7:29:13
7:27:13
7:26:43
7:24:43
7:24:13
7:22:13
7:21:43
7:19:43
7:19:13
7:17:13
7:16:43
7:14:43
7:14:13
7:12:13
7:11:43
7:09:43
7:09:13
7:07:13

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009

7:06:43
7:04:13
7:03:43
7:01:43
7:01:13
6:59:13
6:58:43
6:56:43
6:56:13
6:54:13
6:53:43
6:51:43
6:51:13
6:49:13
6:48:43
6:46:43
6:46:13
6:44:13
6:43:43
6:41:43
6:41:13
6:39:13
6:38:43
6:36:43
6:36:13
6:34:13
6:33:43
6:31:43
6:31:13
6:29:13
6:28:43
6:26:43
6:26:13
6:24:13
6:23:43
6:21:13
6:20:43
6:18:43
6:18:13
6:16:13
6:15:43
6:13:43
6:13:13
6:11:13
6:10:43
6:08:43
6:08:13
6:06:13
6:05:43
6:03:43
6:03:13
6:01:13
6:00:43
5:58:43
5:58:13
5:56:13
5:55:43
5:53:43
5:53:13
5:51:13

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009

5:50:43
5:48:43
5:48:13
5:46:13
5:45:43
5:43:43
5:43:13
5:41:13
5:40:43
5:38:43
5:38:13
5:36:13
5:35:43
5:33:43
5:33:13
5:31:13
5:30:43
5:28:43
5:28:13
5:26:13
5:25:43
5:23:43
5:23:13
5:21:13
5:20:43
5:18:43
5:18:13
5:16:13
5:15:43
5:13:43
5:13:13
5:11:13
5:10:43
5:08:43
5:08:13
5:06:13
5:05:43
5:03:43
5:03:13
5:01:13
5:00:43
4:58:43
4:58:13
4:56:13
4:55:43
4:53:43
4:53:13
4:51:13
4:50:43
4:48:43
4:48:13
4:46:13
4:45:43
4:43:43
4:43:13
4:41:13
4:40:43
4:38:43
4:38:13
4:36:13

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009

4:35:43
4:33:13
4:32:43
4:30:43
4:30:13
4:28:13
4:27:43
4:25:43
4:25:13
4:23:13
4:22:43
4:20:43
4:20:13
4:18:13
4:17:43
4:15:43
4:15:13
4:13:03
6:39:24
6:37:23
6:36:53
6:34:53
6:34:23
6:32:23
6:31:53
6:29:53
6:29:23
6:27:23
6:26:53
6:24:53
6:24:23
6:22:23
6:21:53
6:19:53
6:19:23
6:17:23
6:16:53
6:14:53
6:14:23
6:12:23
6:11:53
6:09:53
6:09:23
6:07:23
6:06:53
6:04:53
6:04:23
6:02:23
6:01:53
5:59:53
5:59:23
5:57:23
5:56:53
5:54:53
5:54:23
5:52:23
5:51:53
5:49:53
5:49:23
5:47:23

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009

5:46:53
5:44:53
5:44:23
5:42:23
5:41:53
5:39:53
5:39:23
5:37:23
5:36:53
5:34:53
5:34:23
5:32:23
5:31:53
5:29:53
5:29:23
5:27:23
5:26:53
5:24:53
5:24:23
5:22:23
5:21:53
5:19:53
5:19:23
5:17:23
5:16:53
5:14:53
5:14:23
5:12:23
5:11:53
5:09:53
5:09:23
5:07:23
5:06:53
5:04:53
5:04:23
5:02:23
5:01:53
4:59:53
4:59:23
4:57:23
4:56:53
4:54:53
4:54:23
4:52:23
4:51:53
4:49:53
4:49:23
4:47:23
4:46:53
4:44:53
4:44:23
4:42:23
4:41:53
4:39:53
4:39:23
4:37:23
4:36:53
4:34:53
4:34:23
4:32:23

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009

4:31:53
4:29:53
4:29:23
4:27:23
4:26:53
4:24:53
4:24:23
4:22:23
4:21:53
4:19:53
4:19:23
4:17:23
4:16:53
4:14:53
4:14:23
4:12:23
4:11:53
4:09:53
4:09:23
4:07:23
4:06:53
4:04:53
4:04:23
4:02:23
4:01:53
3:59:53
3:59:23
3:57:23
3:56:53
3:54:53
3:54:23
3:52:23
3:51:53
3:49:53
3:49:23
3:47:23
3:46:53
3:44:53
3:44:23
3:42:23
3:41:53
3:39:53
3:39:23
3:37:23
3:36:53
3:34:53
3:34:23
3:32:23
3:31:53
3:29:53
3:29:23
3:27:23
3:26:53
3:24:53
3:24:23
3:22:23
3:21:53
3:19:53
3:19:23
3:17:23

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009

3:16:53
3:14:53
3:14:23
3:12:23
3:11:53
3:09:53
3:09:23
3:07:23
3:06:53
3:04:53
3:04:23
3:02:23
3:01:53
2:59:53
2:59:23
2:57:23
2:56:53
2:54:53
2:54:23
2:52:23
2:51:53
2:49:53
2:49:23
2:47:23
2:46:53
2:44:53
2:44:23
2:42:23
2:41:53
2:39:53
2:39:23
2:37:23
2:36:53
2:34:53
2:34:23
2:32:23
2:31:53
2:29:45
2:29:23
2:27:23
2:26:53
2:24:53
2:24:23
2:22:23
2:21:53
2:19:53
2:19:23
2:17:03
2:16:53
2:14:53
2:14:23
2:12:23
2:11:53
2:09:53
2:09:23
2:07:23
2:06:53
2:04:53
2:04:23
2:02:23

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009

2:01:53
3:45:32
3:45:02
3:43:02
3:42:32
3:40:32
3:40:02
3:38:02
3:37:32
3:35:32
3:35:02
3:33:02
3:32:32
3:30:32
3:30:02
3:28:02
3:27:32
3:25:32
3:25:02
3:23:02
3:22:32
3:20:32
3:20:02
3:18:02
3:17:32
3:15:32
3:15:02
3:13:02
3:12:32
3:10:32
3:10:02
3:08:02
3:07:32
3:05:32
3:05:02
3:03:02
3:02:32
3:00:32
3:00:02
2:58:02
2:57:32
2:55:32
2:55:02
2:53:02
2:52:32
2:50:32
2:50:02
2:48:02
2:47:32
2:45:32
2:45:02
2:43:02
2:42:32
2:40:32
2:40:02
2:38:02
2:37:32
2:35:32
2:35:02
2:33:02

PM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009

2:32:32
2:30:32
2:30:02
2:28:02
2:27:32
2:25:32
2:25:02
2:23:02
2:22:32
2:20:32
2:20:02
2:18:02
2:17:32
2:15:32
2:15:02
2:13:02
2:12:32
2:10:32
2:10:02
2:08:02
2:08:02
2:05:32
2:05:02
2:03:02
2:02:32
2:00:32
2:00:02
1:57:42
1:57:32
1:55:32
1:55:02
1:52:32
1:52:01
1:37:44
1:37:14
1:35:14
1:34:44
1:32:44
1:32:14
1:30:14
1:29:44
1:27:44
1:27:14
1:25:14
1:24:44
1:22:44
1:22:14
1:20:14
1:19:44
1:17:44
1:17:14
1:15:14
1:14:44
1:12:44
1:12:14
1:10:14
1:09:44
1:07:44
1:07:14
1:05:14

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009

1:04:44 AM
1:02:44 AM
1:02:14 AM
1:00:14 AM
12:59:44 AM
12:57:44 AM
12:57:14 AM
12:55:14 AM
12:54:44 AM
12:52:44 AM
12:52:14 AM
12:50:14 AM
12:49:44 AM
12:47:44 AM
12:47:14 AM
12:45:03 AM
12:44:53 AM
12:42:44 AM
12:42:14 AM
12:40:14 AM
12:39:44 AM
12:37:14 AM
12:36:44 AM
12:34:44 AM
12:34:14 AM
12:32:14 AM
12:32:04 AM
12:29:56 AM
12:29:55 AM
12:27:28 AM
12:27:14 AM
8:38:42 PM
8:38:12 PM
8:36:12 PM
8:35:42 PM
8:33:42 PM
8:33:12 PM
8:31:12 PM
8:30:42 PM
8:28:42 PM
8:28:12 PM
8:26:12 PM
8:25:42 PM
8:23:42 PM
8:23:12 PM
8:21:12 PM
8:20:42 PM
8:18:42 PM
8:18:12 PM
8:16:12 PM
8:15:42 PM
8:13:42 PM
8:13:12 PM
8:11:12 PM
8:10:42 PM
8:08:42 PM
8:08:12 PM
8:06:12 PM
8:05:42 PM
8:03:42 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009

8:03:12
8:01:12
8:00:42
7:58:42
7:58:12
7:56:12
7:55:42
7:53:42
7:53:12
7:51:12
7:50:42
7:48:42
7:48:12
7:46:12
7:45:42
7:43:42
7:43:12
7:41:12
7:40:42
7:38:42
7:38:12
7:36:12
7:35:42
7:33:42
7:33:12
7:31:12
7:30:42
7:28:36
7:11:23
7:09:23
7:08:53
7:06:53
7:06:23
7:04:23
7:03:53
7:01:53
7:01:23
6:59:23
6:58:53
6:56:53
6:56:23
6:54:23
6:53:53
6:51:53
6:51:23
6:49:23
6:48:53
6:46:53
6:46:23
6:44:23
6:43:53
6:41:53
6:41:23
6:39:23
6:38:53
6:36:53
6:36:23
6:34:23
6:33:53
6:31:53

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009

6:31:23
6:29:23
6:28:53
6:26:53
6:26:23
6:23:53
6:23:23
6:21:23
6:20:53
6:18:53
6:18:23
6:16:23
6:15:53
6:13:53
6:13:23
6:11:23
6:10:53
6:08:53
6:08:23
6:06:23
6:05:53
6:03:53
6:03:23
6:01:23
6:00:53
5:58:53
5:58:23
5:56:23
5:55:53
5:53:53
5:53:23
5:51:13
4:48:24
4:47:06
1:57:16
1:56:07
1:56:07
1:53:59
1:53:29
1:51:29
1:50:59
1:48:59
1:48:29
1:46:29
1:45:59
1:43:59
1:43:29
1:41:29
1:40:59
1:38:59
1:38:29
1:36:29
1:35:59
1:33:59
1:33:29
1:31:29
1:30:59
1:28:59
1:28:29
1:26:29

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009

1:25:59 PM
1:23:59 PM
1:23:29 PM
1:21:29 PM
1:20:59 PM
1:18:59 PM
1:18:29 PM
1:16:29 PM
1:15:59 PM
1:13:59 PM
1:13:29 PM
1:11:29 PM
1:10:59 PM
1:08:59 PM
1:08:29 PM
1:06:29 PM
1:05:59 PM
1:03:59 PM
1:03:29 PM
1:01:29 PM
1:00:59 PM
12:58:59 PM
12:58:29 PM
12:56:28 PM
12:55:59 PM
12:53:59 PM
12:53:29 PM
12:51:29 PM
12:50:59 PM
12:48:59 PM
12:48:29 PM
12:46:28 PM
12:45:59 PM
12:43:59 PM
12:43:29 PM
12:41:29 PM
12:40:59 PM
12:38:59 PM
12:38:29 PM
12:36:29 PM
12:35:59 PM
12:33:54 PM
6:57:48 PM
6:57:18 PM
6:55:08 PM
4:32:26 PM
4:30:26 PM
4:29:56 PM
4:27:56 PM
4:27:26 PM
4:25:26 PM
4:24:56 PM
4:22:56 PM
4:22:26 PM
4:20:26 PM
4:19:56 PM
4:17:56 PM
4:17:26 PM
4:15:26 PM
4:14:56 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009

4:12:56
4:12:26
4:10:26
4:09:56
4:07:56
4:07:26
4:05:26
4:04:56
4:02:56
4:02:26
4:00:26
3:59:56
3:57:56
3:57:26
3:55:26
3:54:56
3:52:56
3:52:26
3:50:26
3:49:56
3:47:56
3:47:26
3:45:26
3:44:56
3:42:56
3:42:26
3:40:26
3:39:56
3:37:56
3:37:26
3:35:26
3:34:56
3:32:56
3:32:26
3:30:26
3:29:56
3:27:56
3:27:26
3:25:26
3:24:56
3:22:56
3:22:26
3:20:26
3:19:56
3:17:56
3:17:26
3:15:26
3:14:56
3:12:56
3:12:26
3:10:26
3:09:56
3:07:56
3:07:26
3:05:26
3:04:56
3:02:56
3:02:26
3:00:26
2:59:56

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009

2:57:56
2:57:26
2:55:26
2:54:56
2:52:56
2:52:26
2:50:26
2:49:56
2:47:56
2:47:26
2:45:26
2:44:56
2:42:56
2:42:26
2:40:26
2:39:56
2:37:56
2:37:26
2:35:26
2:34:56
2:32:56
2:32:26
2:30:26
2:29:56
2:27:56
2:27:26
2:25:26
2:24:56
2:22:56
2:22:26
2:20:26
2:19:56
2:17:56
2:17:26
2:15:26
2:14:56
2:12:56
2:12:26
2:10:26
2:09:56
2:07:56
2:07:26
2:05:26
2:04:56
2:02:56
2:02:26
2:00:26
1:59:56
1:57:56
1:57:26
1:55:26
1:54:56
1:52:56
1:52:26
1:50:26
1:49:56
1:47:56
1:47:26
1:45:26
1:44:56

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009

1:42:56 PM
1:42:26 PM
1:40:26 PM
1:39:56 PM
1:37:56 PM
1:37:26 PM
1:35:26 PM
1:34:56 PM
1:32:56 PM
1:32:26 PM
1:30:26 PM
1:29:56 PM
1:27:56 PM
1:27:26 PM
1:25:26 PM
1:24:56 PM
1:22:56 PM
1:22:26 PM
1:20:26 PM
1:19:56 PM
1:17:56 PM
1:17:26 PM
1:15:26 PM
1:14:56 PM
1:12:56 PM
1:12:26 PM
1:10:26 PM
1:09:56 PM
1:07:56 PM
1:07:26 PM
1:04:56 PM
1:04:26 PM
1:02:26 PM
1:01:56 PM
12:59:56 PM
12:59:26 PM
12:57:26 PM
12:56:56 PM
12:54:56 PM
12:54:26 PM
12:52:26 PM
12:51:56 PM
12:49:56 PM
12:49:26 PM
12:47:26 PM
12:46:56 PM
12:44:56 PM
12:44:26 PM
12:42:26 PM
12:41:56 PM
12:39:56 PM
12:39:26 PM
12:36:56 PM
12:36:26 PM
12:34:26 PM
12:33:56 PM
12:31:56 PM
12:31:26 PM
12:29:26 PM
12:28:56 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009

12:26:56 PM
12:26:26 PM
12:24:26 PM
12:23:56 PM
12:21:56 PM
12:21:26 PM
12:19:26 PM
12:18:56 PM
12:16:56 PM
12:16:26 PM
12:14:26 PM
12:13:56 PM
12:11:56 PM
12:11:26 PM
12:09:26 PM
12:08:56 PM
12:06:56 PM
12:06:26 PM
12:03:56 PM
12:03:26 PM
12:01:01 PM
9:52:28 AM
9:51:08 AM
4:52:29 AM
4:51:00 AM
7:55:02 PM
7:53:05 PM
4:13:07 PM
4:12:00 PM
3:56:06 PM
3:54:47 PM
3:22:23 PM
3:21:18 PM
3:20:49 PM
3:18:49 PM
3:18:19 PM
3:16:19 PM
3:15:49 PM
3:13:49 PM
3:13:19 PM
3:11:19 PM
3:10:49 PM
3:08:49 PM
3:08:19 PM
3:06:19 PM
3:05:49 PM
3:03:49 PM
3:03:19 PM
3:01:19 PM
3:00:49 PM
2:58:49 PM
2:58:19 PM
2:56:19 PM
2:55:49 PM
2:53:49 PM
2:53:19 PM
2:51:19 PM
2:50:49 PM
2:48:49 PM
2:48:33 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009

1:12:31 PM
1:12:01 PM
1:10:01 PM
1:09:31 PM
1:07:31 PM
1:07:01 PM
1:05:01 PM
1:04:31 PM
1:02:31 PM
1:02:01 PM
1:00:01 PM
12:59:31 PM
12:57:31 PM
12:57:01 PM
12:55:01 PM
12:54:31 PM
12:52:31 PM
12:52:01 PM
12:50:01 PM
12:49:31 PM
12:47:31 PM
12:47:01 PM
12:45:01 PM
12:44:31 PM
12:42:31 PM
12:42:01 PM
12:40:01 PM
12:39:31 PM
12:37:31 PM
12:37:01 PM
12:35:01 PM
12:34:31 PM
12:32:31 PM
12:32:01 PM
12:30:01 PM
12:29:31 PM
12:27:31 PM
12:27:01 PM
12:25:01 PM
12:24:31 PM
12:22:31 PM
12:22:01 PM
12:20:01 PM
12:19:31 PM
12:17:31 PM
12:17:01 PM
12:15:01 PM
12:14:31 PM
12:12:31 PM
12:12:01 PM
12:10:01 PM
12:09:31 PM
12:07:31 PM
12:07:01 PM
12:05:01 PM
12:04:31 PM
12:02:31 PM
12:02:01 PM
12:00:01 PM
11:59:31 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009

11:57:31
11:57:01
11:55:01
11:54:31
11:52:31
11:52:01
11:50:01
11:49:31
11:47:31
11:47:01
11:45:01
11:44:31
11:42:31
11:42:01
11:40:01
11:39:31
11:37:31
11:37:01
11:35:01
11:34:31
11:32:31
11:32:01
11:30:01
11:29:31
11:27:31
11:27:01
11:25:01
11:24:31
11:22:01
11:21:31
11:19:31
11:19:01
11:17:01
11:16:31
11:14:31
11:14:01
11:12:01
11:11:31
11:09:31
11:09:01
11:07:01
11:06:31
11:04:31
11:04:01
11:02:01
11:01:31
10:59:31
10:59:01
10:57:01
10:56:31
10:54:31
10:54:01
10:52:01
10:51:31
10:49:31
10:49:01
10:47:01
10:46:31
10:44:31
10:44:01

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009

10:42:01 AM
10:41:31 AM
10:39:31 AM
10:39:01 AM
10:37:01 AM
10:36:31 AM
10:34:31 AM
10:34:01 AM
10:32:01 AM
10:31:31 AM
10:29:31 AM
10:29:01 AM
10:27:01 AM
10:26:31 AM
10:24:31 AM
10:24:01 AM
10:22:01 AM
10:21:31 AM
10:19:31 AM
10:19:01 AM
10:16:31 AM
10:16:01 AM
10:14:01 AM
10:13:31 AM
10:11:31 AM
10:11:00 AM
5:53:58 AM
5:53:28 AM
5:51:28 AM
5:50:58 AM
5:48:58 AM
5:48:28 AM
5:46:28 AM
5:45:58 AM
5:43:58 AM
5:43:28 AM
5:41:28 AM
5:40:58 AM
5:38:58 AM
5:38:28 AM
5:36:28 AM
5:35:58 AM
5:33:58 AM
5:33:28 AM
5:31:28 AM
5:30:58 AM
5:28:58 AM
5:28:28 AM
5:26:28 AM
5:25:58 AM
5:23:58 AM
5:23:28 AM
5:21:28 AM
5:20:58 AM
5:18:58 AM
5:18:28 AM
5:16:28 AM
5:15:58 AM
5:13:58 AM
5:13:28 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009

5:11:28
5:10:58
5:08:58
5:08:28
5:06:28
5:05:58
5:03:58
5:03:28
5:01:28
5:00:58
4:58:58
4:58:28
4:56:28
4:55:58
4:53:58
4:53:28
4:51:28
4:50:58
4:48:58
4:48:28
4:46:27
4:45:58
4:43:57
4:43:28
4:41:28
4:40:58
4:38:58
4:38:32
4:36:28
4:35:58
4:33:58
4:33:28
4:31:06
4:31:03
4:29:02
7:42:17
7:41:47
7:39:47
7:39:17
7:37:17
7:36:47
7:34:47
7:34:17
7:32:17
7:31:47
7:29:47
7:29:17
7:27:17
7:26:47
7:24:26
7:24:17
7:22:17
7:21:47
7:19:32
7:19:32
7:17:22
6:03:04
6:03:03
6:00:42
6:00:12

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009

5:58:12
5:57:42
5:55:42
5:55:12
5:53:12
5:52:42
5:50:42
5:50:12
5:48:12
5:47:42
5:45:42
5:45:12
5:43:12
5:42:42
5:40:42
5:40:12
5:38:12
5:37:42
5:35:42
5:35:12
5:33:11
5:32:42
5:30:26
5:30:12
5:28:12
5:27:42
5:25:42
5:25:12
5:23:12
5:22:42
5:20:42
5:20:12
5:18:12
5:17:42
5:15:42
5:15:12
5:13:12
5:12:42
5:10:42
5:10:12
5:08:12
5:07:42
5:05:42
5:05:12
5:03:12
5:02:42
5:00:42
5:00:12
4:58:12
4:57:42
4:55:42
4:55:12
4:53:12
4:52:42
4:50:42
4:50:12
4:48:12
4:47:42
4:45:42
4:45:12

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009

4:43:12
4:42:42
4:40:42
4:40:31
4:38:21
4:38:12
4:36:12
4:35:42
4:33:41
4:33:32
4:31:27
4:31:11
2:22:51
2:22:21
2:20:21
2:19:51
2:17:51
2:17:21
2:15:21
2:14:51
2:12:51
2:12:21
2:10:21
2:09:51
2:07:51
2:07:21
2:05:21
2:04:51
2:02:51
2:02:21
2:00:21
1:59:51
1:57:51
1:57:21
1:55:21
1:54:51
1:52:51
1:52:21
1:50:21
1:49:51
1:47:51
1:47:21
1:45:21
1:44:51
1:42:51
1:42:21
1:40:21
1:39:51
1:37:51
1:37:21
1:35:21
1:34:51
1:32:51
1:32:21
1:30:21
1:29:51
1:27:51
1:27:21
1:25:21
1:24:51

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009

1:22:51 PM
1:22:21 PM
1:20:21 PM
1:19:51 PM
1:17:51 PM
1:17:21 PM
1:15:21 PM
1:14:51 PM
1:12:51 PM
1:12:21 PM
1:10:21 PM
1:09:51 PM
1:07:51 PM
1:07:21 PM
1:05:21 PM
1:04:51 PM
1:02:48 PM
1:02:38 PM
1:00:28 PM
1:00:21 PM
12:58:20 PM
12:57:51 PM
12:55:50 PM
12:55:49 PM
12:53:44 PM
12:53:21 PM
12:51:09 PM
12:24:34 PM
12:24:04 PM
12:22:04 PM
12:21:34 PM
12:19:34 PM
12:19:04 PM
12:17:04 PM
12:16:34 PM
12:14:34 PM
12:14:04 PM
12:12:04 PM
12:11:34 PM
12:09:34 PM
12:09:04 PM
12:07:04 PM
12:06:34 PM
12:04:34 PM
12:04:04 PM
12:02:04 PM
12:01:34 PM
11:59:34 AM
11:59:04 AM
11:57:04 AM
11:56:34 AM
11:54:34 AM
11:54:04 AM
11:52:04 AM
11:51:34 AM
11:49:34 AM
11:49:04 AM
11:47:04 AM
11:46:34 AM
11:44:34 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009

11:44:04 AM
11:42:04 AM
11:41:34 AM
11:39:34 AM
11:39:04 AM
11:37:04 AM
11:36:34 AM
11:34:34 AM
11:34:04 AM
11:32:04 AM
11:31:34 AM
11:29:34 AM
11:29:04 AM
11:27:04 AM
11:26:34 AM
11:24:34 AM
11:24:04 AM
11:22:04 AM
11:21:34 AM
11:19:34 AM
10:33:55 AM
10:33:25 AM
10:31:25 AM
10:30:55 AM
10:28:55 AM
10:28:25 AM
10:25:55 AM
10:25:25 AM
10:23:25 AM
10:22:55 AM
10:20:55 AM
10:20:25 AM
10:18:25 AM
10:17:55 AM
10:15:26 AM
10:14:54 AM
6:41:05 AM
6:40:35 AM
6:38:35 AM
6:38:05 AM
6:36:05 AM
6:35:35 AM
6:33:35 AM
6:33:05 AM
6:31:05 AM
6:30:35 AM
6:28:35 AM
6:28:05 AM
6:26:05 AM
6:25:35 AM
6:23:35 AM
6:23:05 AM
6:21:05 AM
6:20:35 AM
6:18:35 AM
6:18:05 AM
6:16:05 AM
6:15:35 AM
6:13:35 AM
6:13:05 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009

6:11:05
6:10:35
6:08:35
6:08:05
6:06:05
6:05:35
6:03:35
6:03:05
6:01:05
6:00:35
5:58:35
5:58:05
5:56:05
5:55:35
5:53:35
5:53:05
5:51:05
5:50:35
5:48:35
5:48:05
5:46:05
5:45:35
5:43:35
5:43:05
5:41:05
5:40:35
5:38:35
5:38:05
5:36:05
5:35:35
5:33:35
5:33:05
5:31:05
5:30:35
5:28:35
5:28:05
5:26:05
5:25:35
5:23:35
5:23:05
5:21:05
5:20:35
5:18:35
5:18:05
5:16:05
5:15:35
5:13:35
5:13:05
5:11:05
5:10:35
5:08:35
5:08:05
5:06:05
5:05:35
5:03:35
5:03:05
5:01:05
5:00:35
4:58:35
4:58:05

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009

4:56:05 AM
4:55:35 AM
4:53:35 AM
4:53:05 AM
4:51:05 AM
4:50:35 AM
4:48:35 AM
4:48:05 AM
4:46:00 AM
11:53:26 PM
11:51:26 PM
11:50:56 PM
11:48:56 PM
11:48:26 PM
11:46:26 PM
11:45:56 PM
11:43:56 PM
11:43:26 PM
11:41:26 PM
11:40:56 PM
11:38:56 PM
11:38:26 PM
11:36:26 PM
11:35:56 PM
11:33:56 PM
11:33:26 PM
11:31:26 PM
11:30:56 PM
11:28:56 PM
11:28:26 PM
11:26:26 PM
11:25:56 PM
11:23:56 PM
11:23:26 PM
11:21:11 PM
11:20:56 PM
11:18:56 PM
11:18:26 PM
11:16:26 PM
11:15:56 PM
11:13:56 PM
11:13:26 PM
11:11:26 PM
11:10:56 PM
11:08:56 PM
11:08:26 PM
11:06:26 PM
11:05:56 PM
11:03:56 PM
11:03:26 PM
11:01:26 PM
11:00:56 PM
10:58:56 PM
10:58:26 PM
10:56:26 PM
10:55:56 PM
10:53:56 PM
10:53:26 PM
10:51:14 PM
10:50:56 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009

10:48:56 PM
10:48:26 PM
10:46:26 PM
10:45:56 PM
10:43:56 PM
10:43:26 PM
10:41:26 PM
10:40:56 PM
10:38:56 PM
10:38:26 PM
10:36:26 PM
10:35:56 PM
10:33:47 PM
6:17:47 PM
6:17:25 PM
6:14:55 PM
6:14:25 PM
6:12:25 PM
6:11:56 PM
6:09:56 PM
6:09:55 PM
6:07:55 PM
6:07:25 PM
6:04:55 PM
6:04:26 PM
6:02:26 PM
6:02:25 PM
6:00:25 PM
5:59:55 PM
5:57:37 PM
5:57:25 PM
5:54:55 PM
5:54:25 PM
5:51:55 PM
4:29:10 PM
4:27:10 PM
4:26:40 PM
4:24:40 PM
4:24:10 PM
4:22:10 PM
4:21:40 PM
4:19:40 PM
4:19:10 PM
4:17:10 PM
4:16:40 PM
4:14:40 PM
4:14:10 PM
4:12:10 PM
4:11:40 PM
4:09:40 PM
4:09:10 PM
4:07:10 PM
4:06:40 PM
4:04:40 PM
4:04:10 PM
4:02:10 PM
4:01:40 PM
3:59:40 PM
3:59:10 PM
3:57:10 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE

11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
dfsvc.exe
12/16/2009
12/16/2009
12/16/2009

3:56:40 PM
3:54:40 PM
3:54:10 PM
3:52:10 PM
3:51:40 PM
3:49:40 PM
3:49:10 PM
3:47:10 PM
3:46:40 PM
3:44:40 PM
3:44:10 PM
3:42:10 PM
3:41:40 PM
3:39:40 PM
3:39:10 PM
3:37:10 PM
3:36:40 PM
3:34:40 PM
3:34:10 PM
3:32:10 PM
3:31:40 PM
3:29:40 PM
3:29:10 PM
3:27:10 PM
3:26:40 PM
3:24:40 PM
3:24:10 PM
3:22:10 PM
3:21:40 PM
3:19:40 PM
3:19:10 PM
3:17:10 PM
3:16:40 PM
3:14:40 PM
3:14:10 PM
3:12:10 PM
3:11:40 PM
3:09:40 PM
3:09:10 PM
3:07:10 PM
3:06:40 PM
3:04:40 PM
3:04:10 PM
3:02:10 PM
3:01:40 PM
2:59:39 PM
2:59:10 PM
2:57:10 PM
2:56:40 PM
2:54:40 PM
2:54:10 PM
2:52:10 PM
2:51:40 PM
2:49:30 PM
2:27:17 AM
2:24:38 AM
(events: 7)
7:06:33 AM
7:02:45 AM
7:02:40 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

Process exit
Process start
Process start

C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\SEARCHFILTERHOST.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE

12/15/2009 6:26:50 PM
12/15/2009 6:24:34 PM
12/15/2009 12:10:35 AM
12/15/2009 12:06:25 AM
12/14/2009 4:14:31 PM
12/14/2009 4:12:54 PM
12/14/2009 4:12:26 PM
12/14/2009 4:10:37 PM
12/14/2009 4:10:05 PM
12/14/2009 4:18:42 AM
12/14/2009 4:16:26 AM
12/13/2009 2:28:15 PM
12/13/2009 2:26:15 PM
12/13/2009 4:53:46 AM
12/13/2009 4:51:30 AM
12/12/2009 7:10:19 AM
12/12/2009 7:08:02 AM
12/11/2009 9:21:50 AM
12/11/2009 9:19:21 AM
12/10/2009 2:46:50 PM
12/10/2009 2:42:47 PM
12/10/2009 2:42:27 PM
12/10/2009 2:12:59 PM
12/10/2009 2:11:06 PM
12/10/2009 2:10:38 PM
12/10/2009 2:08:24 PM
12/10/2009 4:55:09 AM
12/10/2009 4:49:55 AM
12/10/2009 4:49:34 AM
12/10/2009 4:22:17 AM
12/10/2009 4:20:47 AM
12/10/2009 4:14:17 AM
12/10/2009 4:12:11 AM
12/10/2009 4:11:49 AM
12/10/2009 4:09:28 AM
12/10/2009 4:09:10 AM
12/9/2009 3:24:46 AM
12/9/2009 3:24:26 AM
12/8/2009 9:10:43 PM
12/8/2009 9:08:37 PM
12/8/2009 2:26:36 PM
12/8/2009 2:24:14 PM
12/8/2009 1:25:13 PM
12/8/2009 1:21:52 PM
12/8/2009 1:21:21 PM
12/8/2009 11:02:30 AM
12/8/2009 11:00:39 AM
12/7/2009 2:19:13 PM
12/7/2009 2:15:58 PM
12/6/2009 2:16:57 PM
12/6/2009 2:15:05 PM
12/6/2009 2:34:21 AM
12/6/2009 2:32:21 AM
12/6/2009 12:52:21 AM
12/6/2009 12:48:27 AM
12/6/2009 12:47:49 AM
12/5/2009 12:41:05 PM
12/5/2009 12:38:43 PM
12/5/2009 2:29:36 AM
12/5/2009 2:27:36 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
start
start
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
start
exit
start
exit
start

C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE

12/5/2009 2:26:36 AM
12/5/2009 2:26:05 AM
12/5/2009 2:24:47 AM
12/4/2009 6:56:28 PM
12/4/2009 6:52:03 PM
12/4/2009 6:51:22 PM
12/4/2009 3:16:15 PM
12/4/2009 3:14:27 PM
12/4/2009 12:11:29 PM
12/4/2009 12:09:24 PM
12/3/2009 2:20:05 PM
12/3/2009 2:16:13 PM
12/3/2009 4:12:28 AM
12/3/2009 4:08:44 AM
12/3/2009 4:07:22 AM
12/2/2009 7:40:45 PM
12/2/2009 7:38:38 PM
12/2/2009 7:37:58 PM
12/2/2009 11:42:31 AM
12/2/2009 11:40:14 AM
12/1/2009 1:59:12 PM
12/1/2009 1:56:51 PM
12/1/2009 3:18:56 AM
12/1/2009 3:15:32 AM
12/1/2009 3:15:10 AM
11/30/2009 7:39:19 PM
11/30/2009 7:35:56 PM
11/30/2009 7:35:35 PM
11/30/2009 6:00:29 PM
11/30/2009 5:56:34 PM
11/30/2009 5:55:59 PM
11/30/2009 3:40:22 PM
11/30/2009 3:36:06 PM
11/30/2009 3:35:36 PM
11/30/2009 3:33:42 PM
11/30/2009 3:32:41 PM
11/30/2009 10:15:48 AM
11/30/2009 10:13:07 AM
11/30/2009 5:19:53 AM
11/30/2009 5:18:04 AM
11/29/2009 5:57:32 PM
11/29/2009 5:55:29 PM
11/29/2009 2:50:45 PM
11/29/2009 2:48:45 PM
11/29/2009 2:18:36 PM
11/29/2009 2:16:13 PM
11/29/2009 2:08:44 PM
11/29/2009 2:06:42 PM
11/29/2009 4:54:12 AM
11/29/2009 4:52:11 AM
11/28/2009 5:33:56 PM
11/28/2009 5:31:56 PM
11/28/2009 4:55:27 PM
11/28/2009 4:53:10 PM
11/28/2009 2:28:47 PM
11/28/2009 2:26:57 PM
11/27/2009 9:35:24 PM
11/27/2009 9:33:07 PM
11/27/2009 8:52:02 PM
11/27/2009 8:50:02 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
start
exit
start
start
exit
start
exit
start
exit
start
start
exit
start
start
exit
start
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE

11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/25/2009
11/25/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/23/2009
11/23/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009

3:10:49 PM
3:08:29 PM
11:38:57 AM
11:37:21 AM
11:30:04 AM
11:27:54 AM
2:13:38 AM
2:11:16 AM
12:47:07 AM
12:45:02 AM
12:44:41 AM
12:43:00 AM
3:25:44 AM
3:20:09 AM
3:20:09 AM
3:07:28 AM
3:04:25 AM
4:01:31 AM
3:02:09 AM
2:50:30 PM
2:48:25 PM
2:48:25 PM
2:46:27 PM
2:45:40 PM
4:03:30 AM
3:59:00 AM
9:13:33 AM
9:11:42 AM
2:14:10 PM
2:12:18 PM
2:08:37 AM
2:07:07 AM
7:30:36 PM
7:26:32 PM
7:26:03 PM
12:38:13 PM
12:35:44 PM
12:34:43 PM
12:33:13 PM
12:33:12 PM
12:50:21 PM
12:48:00 PM
12:23:08 PM
12:19:34 PM
12:11:03 PM
12:09:03 PM
12:03:43 PM
11:59:55 AM
11:59:39 AM
3:01:12 PM
2:58:51 PM
4:34:00 AM
4:32:02 AM
4:31:38 AM
4:28:35 AM
4:28:33 AM
7:20:31 PM
7:19:05 PM
7:17:26 PM
7:16:26 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
start
exit
start
exit
start

C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE

11/18/2009 7:16:14 PM
11/18/2009 5:41:47 PM
11/18/2009 5:39:29 PM
11/18/2009 5:32:06 PM
11/18/2009 5:29:46 PM
11/18/2009 5:12:19 PM
11/18/2009 5:10:01 PM
11/18/2009 12:55:34 PM
11/18/2009 12:53:46 PM
11/18/2009 12:52:07 PM
11/18/2009 12:51:34 PM
11/18/2009 12:50:54 PM
11/18/2009 11:23:16 AM
11/18/2009 11:21:08 AM
11/18/2009 11:20:49 AM
11/18/2009 11:18:47 AM
11/18/2009 11:18:18 AM
11/17/2009 10:38:39 PM
11/17/2009 10:36:00 PM
11/17/2009 10:35:40 PM
11/17/2009 10:34:19 PM
11/17/2009 10:33:09 PM
11/17/2009 2:52:53 PM
11/17/2009 2:51:43 PM
11/17/2009 2:49:56 PM
11/17/2009 2:49:28 PM
11/17/2009 2:48:52 PM
dfsvc.exe (events: 7)
12/16/2009 12:36:06 AM
12/16/2009 12:32:03 AM
12/15/2009 12:12:10 AM
12/15/2009 12:08:05 AM
12/15/2009 12:03:00 AM
12/15/2009 12:00:00 AM
12/14/2009 6:21:26 PM
12/14/2009 6:17:02 PM
12/14/2009 6:12:39 PM
12/14/2009 6:09:27 PM
12/14/2009 12:55:38 AM
12/14/2009 12:51:30 AM
12/13/2009 5:54:51 AM
12/13/2009 5:50:39 AM
12/12/2009 7:39:04 AM
12/12/2009 7:34:59 AM
12/11/2009 4:48:35 AM
12/11/2009 4:44:20 AM
12/10/2009 3:38:10 PM
12/10/2009 3:33:54 PM
12/10/2009 2:14:59 PM
12/10/2009 2:10:29 PM
12/10/2009 5:52:08 AM
12/10/2009 5:48:56 AM
12/10/2009 4:18:45 AM
12/10/2009 4:12:36 AM
12/8/2009 4:00:26 PM
12/8/2009 3:56:16 PM
12/8/2009 3:52:13 PM
12/8/2009 3:49:01 PM
12/8/2009 12:54:17 AM
12/8/2009 12:51:17 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
start
exit
start
exit
start
start
exit
start
start
exit
start

C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\system32\WBEM\WMIPRVSE.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE

12/7/2009 2:21:22 PM
12/7/2009 2:17:13 PM
12/7/2009 4:37:40 AM
12/7/2009 4:33:24 AM
12/6/2009 2:19:47 AM
12/6/2009 2:16:35 AM
12/5/2009 2:31:20 PM
12/5/2009 2:26:59 PM
12/5/2009 2:22:59 PM
12/5/2009 2:19:47 PM
12/4/2009 10:22:39 PM
12/4/2009 10:18:15 PM
12/4/2009 10:14:18 PM
12/4/2009 10:11:07 PM
12/4/2009 5:40:49 AM
12/4/2009 5:36:23 AM
12/3/2009 2:22:19 PM
12/3/2009 2:18:05 PM
12/3/2009 5:41:40 AM
12/3/2009 5:37:34 AM
12/3/2009 5:33:26 AM
12/3/2009 5:30:15 AM
12/2/2009 4:17:17 AM
12/2/2009 4:11:11 AM
12/1/2009 5:21:19 AM
12/1/2009 5:17:15 AM
12/1/2009 5:12:57 AM
12/1/2009 5:09:46 AM
11/30/2009 5:06:22 PM
11/30/2009 5:03:21 PM
11/30/2009 3:42:24 PM
11/30/2009 3:37:52 PM
11/29/2009 6:01:44 AM
11/29/2009 5:57:22 AM
11/28/2009 2:38:08 AM
11/28/2009 2:34:03 AM
11/27/2009 3:00:46 AM
11/27/2009 2:57:46 AM
11/27/2009 12:48:31 AM
11/27/2009 12:44:36 AM
11/26/2009 4:23:41 AM
11/26/2009 4:20:30 AM
11/26/2009 3:05:24 AM
11/26/2009 3:00:26 AM
11/25/2009 5:11:33 AM
11/25/2009 5:06:52 AM
11/25/2009 4:00:01 AM
11/25/2009 3:00:35 AM
11/24/2009 4:51:02 PM
11/24/2009 4:47:03 PM
11/24/2009 4:42:44 PM
11/24/2009 4:39:33 PM
11/24/2009 4:04:23 AM
11/24/2009 3:59:53 AM
11/22/2009 1:07:47 AM
11/22/2009 1:04:47 AM
11/21/2009 8:08:33 PM
11/21/2009 8:05:22 PM
11/21/2009 4:50:46 PM
11/21/2009 4:46:46 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE

11/21/2009 4:42:32 PM
11/21/2009 4:39:21 PM
11/20/2009 1:38:33 PM
11/20/2009 1:35:33 PM
11/20/2009 12:24:40 PM
11/20/2009 12:19:55 PM
11/20/2009 5:44:32 AM
11/20/2009 5:40:34 AM
11/19/2009 3:58:34 PM
11/19/2009 3:54:26 PM
11/19/2009 3:50:04 PM
11/19/2009 3:46:53 PM
11/17/2009 11:22:08 PM
11/17/2009 11:18:57 PM
11/17/2009 5:56:59 PM
11/17/2009 5:52:50 PM
11/17/2009 4:25:50 PM
11/17/2009 4:22:39 PM
11/17/2009 2:28:06 AM
11/17/2009 2:24:54 AM
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM
12/16/2009 7:00:13 AM
12/14/2009 4:09:33 PM
12/14/2009 3:47:52 PM
12/10/2009 2:42:15 PM
12/10/2009 2:22:49 PM
12/10/2009 4:49:28 AM
12/10/2009 4:46:56 AM
12/10/2009 4:08:57 AM
12/9/2009 3:23:35 AM
12/8/2009 9:15:51 PM
12/8/2009 1:20:42 PM
12/8/2009 11:34:16 AM
12/6/2009 12:47:12 AM
12/5/2009 7:28:55 PM
12/5/2009 2:24:47 AM
12/4/2009 10:43:14 PM
12/4/2009 6:51:08 PM
12/4/2009 4:27:47 PM
12/3/2009 4:07:09 AM
12/2/2009 8:42:06 PM
12/2/2009 7:36:39 PM
12/2/2009 3:43:08 PM
12/1/2009 3:13:44 AM
11/30/2009 8:00:27 PM
11/30/2009 7:34:03 PM
11/30/2009 6:55:13 PM
11/30/2009 5:55:17 PM
11/30/2009 5:53:07 PM
11/30/2009 3:32:36 PM
11/30/2009 10:18:14 AM
11/26/2009 3:19:55 AM
11/26/2009 3:17:54 AM
11/24/2009 2:45:18 PM
11/24/2009 2:41:31 PM
11/21/2009 7:25:24 PM
11/21/2009 7:11:45 PM
11/21/2009 12:32:51 PM
11/20/2009 6:58:59 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE
C:\WINDOWS\system32\VSSVC.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE

11/20/2009 11:59:18 AM
11/20/2009 9:52:53 AM
11/19/2009 4:27:58 AM
11/18/2009 7:43:43 PM
11/18/2009 7:16:14 PM
11/18/2009 6:03:02 PM
11/18/2009 12:50:54 PM
11/18/2009 12:25:18 PM
11/18/2009 11:18:18 AM
11/18/2009 10:34:53 AM
11/17/2009 10:33:09 PM
11/17/2009 6:17:47 PM
11/17/2009 2:48:51 PM
dfsvc.exe (events: 7)
12/10/2009 4:49:28 AM
12/10/2009 4:49:28 AM
12/3/2009 4:07:09 AM
12/3/2009 4:07:09 AM
11/26/2009 3:19:56 AM
11/26/2009 3:19:55 AM
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM
12/16/2009 7:00:13 AM
12/14/2009 4:09:33 PM
12/14/2009 3:47:52 PM
12/10/2009 2:42:15 PM
12/10/2009 2:22:49 PM
12/10/2009 4:49:28 AM
12/10/2009 4:46:56 AM
12/10/2009 4:08:57 AM
12/9/2009 3:23:35 AM
12/8/2009 9:15:51 PM
12/8/2009 1:20:42 PM
12/8/2009 11:34:16 AM
12/6/2009 12:47:12 AM
12/5/2009 7:28:55 PM
12/5/2009 2:24:47 AM
12/4/2009 10:43:14 PM
12/4/2009 6:51:08 PM
12/4/2009 4:27:47 PM
12/3/2009 4:07:09 AM
12/2/2009 8:42:06 PM
12/2/2009 7:36:39 PM
12/2/2009 3:43:08 PM
12/1/2009 3:13:44 AM
11/30/2009 8:00:27 PM
11/30/2009 7:34:03 PM
11/30/2009 6:55:13 PM
11/30/2009 5:55:17 PM
11/30/2009 5:53:07 PM
11/30/2009 3:32:36 PM
11/30/2009 10:18:14 AM
11/26/2009 3:19:55 AM
11/26/2009 3:17:54 AM
11/24/2009 2:45:18 PM
11/24/2009 2:41:31 PM
11/21/2009 7:25:24 PM
11/21/2009 7:11:45 PM
11/21/2009 12:32:51 PM
11/20/2009 6:58:59 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE
C:\WINDOWS\RAVCPL64.EXE

Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start

C:\WINDOWS\system32\IGFXTRAY.EXE
C:\WINDOWS\system32\IGFXTRAY.EXE
C:\WINDOWS\system32\IGFXTRAY.EXE
C:\WINDOWS\system32\IGFXTRAY.EXE
C:\WINDOWS\system32\IGFXTRAY.EXE
C:\WINDOWS\system32\IGFXTRAY.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE

11/20/2009 11:59:18 AM
11/20/2009 9:52:53 AM
11/19/2009 4:27:58 AM
11/18/2009 7:43:43 PM
11/18/2009 7:16:14 PM
11/18/2009 6:03:02 PM
11/18/2009 12:50:54 PM
11/18/2009 12:25:18 PM
11/18/2009 11:18:18 AM
11/18/2009 10:34:53 AM
11/17/2009 10:33:09 PM
11/17/2009 6:17:47 PM
11/17/2009 2:48:51 PM
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM
12/16/2009 7:00:13 AM
12/14/2009 4:09:33 PM
12/14/2009 3:47:52 PM
12/10/2009 2:42:15 PM
12/10/2009 2:22:49 PM
12/10/2009 4:49:28 AM
12/10/2009 4:46:56 AM
12/10/2009 4:08:57 AM
12/9/2009 3:23:35 AM
12/8/2009 9:15:51 PM
12/8/2009 1:20:42 PM
12/8/2009 11:34:16 AM
12/6/2009 12:47:12 AM
12/5/2009 7:28:55 PM
12/5/2009 2:24:47 AM
12/4/2009 10:43:14 PM
12/4/2009 6:51:08 PM
12/4/2009 4:27:47 PM
12/3/2009 4:07:09 AM
12/2/2009 8:42:06 PM
12/2/2009 7:36:39 PM
12/2/2009 3:43:08 PM
12/1/2009 3:13:44 AM
11/30/2009 8:00:27 PM
11/30/2009 7:34:03 PM
11/30/2009 6:55:13 PM
11/30/2009 5:55:17 PM
11/30/2009 5:53:07 PM
11/30/2009 3:32:36 PM
11/30/2009 10:18:14 AM
11/26/2009 3:19:55 AM
11/26/2009 3:17:54 AM
11/24/2009 2:45:18 PM
11/24/2009 2:41:31 PM
11/21/2009 7:25:24 PM
11/21/2009 7:11:45 PM
11/21/2009 12:32:51 PM
11/20/2009 6:58:59 PM
11/20/2009 11:59:18 AM
11/20/2009 9:52:53 AM
11/19/2009 4:27:58 AM
11/18/2009 7:43:43 PM
11/18/2009 7:16:14 PM
11/18/2009 6:03:02 PM
11/18/2009 12:50:54 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE
C:\WINDOWS\system32\HKCMD.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE

11/18/2009 12:25:18 PM
11/18/2009 11:18:18 AM
11/18/2009 10:34:53 AM
11/17/2009 10:33:09 PM
11/17/2009 6:17:47 PM
11/17/2009 2:48:51 PM
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM
.EXE
12/16/2009 7:00:13 AM
.EXE
12/14/2009 4:09:33 PM
.EXE
12/14/2009 3:47:52 PM
.EXE
12/10/2009 2:42:15 PM
.EXE
12/10/2009 2:22:49 PM
.EXE
12/10/2009 4:49:32 AM
.EXE
12/10/2009 4:49:32 AM
.EXE
12/10/2009 4:49:28 AM
.EXE
12/10/2009 4:46:56 AM
.EXE
12/10/2009 4:08:57 AM
.EXE
12/9/2009 3:23:35 AM
.EXE
12/8/2009 9:15:51 PM
.EXE
12/8/2009 1:20:42 PM
.EXE
12/8/2009 11:34:16 AM
.EXE
12/6/2009 12:47:12 AM
.EXE
12/5/2009 7:28:55 PM
.EXE
12/5/2009 2:24:47 AM
.EXE
12/4/2009 10:43:14 PM
.EXE
12/4/2009 6:51:08 PM
.EXE
12/4/2009 4:27:47 PM
.EXE
12/3/2009 4:07:09 AM
.EXE
12/2/2009 8:42:06 PM
.EXE
12/2/2009 7:36:39 PM
.EXE
12/2/2009 3:43:08 PM
.EXE
12/1/2009 3:13:44 AM
.EXE
11/30/2009 8:00:27 PM

Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start

C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE
C:\WINDOWS\system32\IGFXPERS.EXE

Process start

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

Process exit

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

Process start

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

Process exit

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

Process start

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

Process exit

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

Process exit

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

Process start

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

Process start

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

Process exit

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

Process start

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

Process start

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

Process exit

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

Process start

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

Process exit

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

Process start

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

Process exit

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

Process start

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

Process exit

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

Process start

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

Process exit

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

Process start

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

Process exit

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

Process start

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

Process exit

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

Process start

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

Process exit

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

.EXE
11/30/2009
.EXE
11/30/2009
.EXE
11/30/2009
.EXE
11/30/2009
.EXE
11/30/2009
.EXE
11/30/2009
.EXE
11/26/2009
.EXE
11/26/2009
.EXE
11/26/2009
.EXE
11/26/2009
.EXE
11/24/2009
.EXE
11/24/2009
.EXE
11/21/2009
.EXE
11/21/2009
.EXE
11/21/2009
.EXE
11/20/2009
.EXE
11/20/2009
.EXE
11/20/2009
.EXE
11/19/2009
.EXE
11/18/2009
.EXE
11/18/2009
.EXE
11/18/2009
.EXE
11/18/2009
.EXE
11/18/2009
.EXE
11/18/2009
.EXE
11/18/2009
.EXE
11/17/2009
.EXE
11/17/2009
.EXE
11/17/2009
.EXE
dfsvc.exe

7:34:03 PM

Process start

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

6:55:13 PM

Process exit

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

5:55:17 PM

Process start

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

5:53:07 PM

Process exit

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

3:32:36 PM

Process start

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

10:18:14 AM Process exit

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

3:20:11 AM

Process exit

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

3:20:10 AM

Process start

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

3:19:56 AM

Process start

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

3:17:54 AM

Process exit

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

2:45:18 PM

Process start

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

2:41:31 PM

Process exit

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

7:25:24 PM

Process start

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

7:11:45 PM

Process exit

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

12:32:51 PM Process start

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

6:58:59 PM

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

Process exit

11:59:18 AM Process start

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

9:52:53 AM

Process exit

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

4:27:58 AM

Process start

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

7:43:43 PM

Process exit

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

7:16:14 PM

Process start

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

6:03:02 PM

Process exit

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

12:50:54 PM Process start

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

12:25:18 PM Process exit

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

11:18:18 AM Process start

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

10:34:53 AM Process exit

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

10:33:09 PM Process start

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

6:17:47 PM

Process exit

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

2:48:51 PM

Process start

C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR

(events: 7)

12/16/2009 7:02:15 AM
BIN\JUSCHED.EXE
12/16/2009 7:00:12 AM
BIN\JUSCHED.EXE
12/14/2009 4:09:33 PM
BIN\JUSCHED.EXE
12/14/2009 3:47:51 PM
BIN\JUSCHED.EXE
12/10/2009 2:42:15 PM
BIN\JUSCHED.EXE
12/10/2009 2:22:48 PM
BIN\JUSCHED.EXE
12/10/2009 4:49:35 AM
BIN\JUSCHED.EXE
12/10/2009 4:46:56 AM
BIN\JUSCHED.EXE
12/10/2009 4:08:57 AM
BIN\JUSCHED.EXE
12/9/2009 3:23:35 AM
BIN\JUSCHED.EXE
12/8/2009 9:15:51 PM
BIN\JUSCHED.EXE
12/8/2009 1:20:42 PM
BIN\JUSCHED.EXE
12/8/2009 11:34:16 AM
BIN\JUSCHED.EXE
12/6/2009 12:47:12 AM
BIN\JUSCHED.EXE
12/5/2009 7:28:55 PM
BIN\JUSCHED.EXE
12/5/2009 2:24:47 AM
BIN\JUSCHED.EXE
12/4/2009 10:43:14 PM
BIN\JUSCHED.EXE
12/4/2009 6:51:08 PM
BIN\JUSCHED.EXE
12/4/2009 4:27:46 PM
BIN\JUSCHED.EXE
12/3/2009 4:07:19 AM
BIN\JUSCHED.EXE
12/2/2009 8:42:06 PM
BIN\JUSCHED.EXE
12/2/2009 7:36:39 PM
BIN\JUSCHED.EXE
12/2/2009 3:43:08 PM
BIN\JUSCHED.EXE
12/1/2009 3:13:44 AM
BIN\JUSCHED.EXE
11/30/2009 8:00:27 PM
BIN\JUSCHED.EXE
11/30/2009 7:34:03 PM
BIN\JUSCHED.EXE
11/30/2009 6:55:13 PM
BIN\JUSCHED.EXE
11/30/2009 5:55:17 PM
BIN\JUSCHED.EXE
11/30/2009 5:53:07 PM
BIN\JUSCHED.EXE
11/30/2009 3:32:36 PM
BIN\JUSCHED.EXE

Process start

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process exit

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process start

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process exit

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process start

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process exit

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process start

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process exit

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process start

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process start

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process exit

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process start

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process exit

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process start

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process exit

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process start

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process exit

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process start

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process exit

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process start

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process exit

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process start

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process exit

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process start

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process exit

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process start

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process exit

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process start

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process exit

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process start

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

11/30/2009 10:18:13 AM
BIN\JUSCHED.EXE
11/26/2009 3:20:11 AM
BIN\JUSCHED.EXE
11/26/2009 3:17:54 AM
BIN\JUSCHED.EXE
11/24/2009 2:45:18 PM
BIN\JUSCHED.EXE
11/24/2009 2:41:30 PM
BIN\JUSCHED.EXE
11/21/2009 7:25:24 PM
BIN\JUSCHED.EXE
11/21/2009 7:11:44 PM
BIN\JUSCHED.EXE
11/21/2009 12:32:51 PM
BIN\JUSCHED.EXE
11/20/2009 6:58:59 PM
BIN\JUSCHED.EXE
11/20/2009 11:59:18 AM
BIN\JUSCHED.EXE
11/20/2009 9:52:53 AM
BIN\JUSCHED.EXE
11/19/2009 4:27:58 AM
BIN\JUSCHED.EXE
11/18/2009 7:43:43 PM
BIN\JUSCHED.EXE
11/18/2009 7:16:14 PM
BIN\JUSCHED.EXE
11/18/2009 6:03:02 PM
BIN\JUSCHED.EXE
11/18/2009 12:50:54 PM
BIN\JUSCHED.EXE
11/18/2009 12:25:18 PM
BIN\JUSCHED.EXE
11/18/2009 11:18:18 AM
BIN\JUSCHED.EXE
11/18/2009 10:34:53 AM
BIN\JUSCHED.EXE
11/17/2009 10:33:09 PM
BIN\JUSCHED.EXE
11/17/2009 6:17:47 PM
BIN\JUSCHED.EXE
11/17/2009 2:48:52 PM
BIN\JUSCHED.EXE
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM
EXE
12/16/2009 7:00:12 AM
EXE
12/14/2009 4:09:33 PM
EXE
12/14/2009 3:47:51 PM
EXE
12/10/2009 2:42:15 PM
EXE
12/10/2009 2:22:48 PM
EXE
12/10/2009 4:49:32 AM
EXE
12/10/2009 4:46:56 AM

Process exit

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process start

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process exit

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process start

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process exit

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process start

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process exit

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process start

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process exit

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process start

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process exit

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process start

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process exit

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process start

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process exit

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process start

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process exit

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process start

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process exit

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process start

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process exit

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process start

C:\Program Files (x86)\JAVA\JRE1.6.0_07\

Process start

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process exit

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process start

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process exit

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process start

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process exit

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process start

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process exit

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

EXE
12/10/2009 4:08:57 AM
EXE
12/9/2009 3:23:35 AM
EXE
12/8/2009 9:15:51 PM
EXE
12/8/2009 1:20:42 PM
EXE
12/8/2009 11:34:16 AM
EXE
12/6/2009 12:47:12 AM
EXE
12/5/2009 7:28:55 PM
EXE
12/5/2009 2:24:47 AM
EXE
12/4/2009 10:43:14 PM
EXE
12/4/2009 6:51:08 PM
EXE
12/4/2009 4:27:46 PM
EXE
12/3/2009 4:07:16 AM
EXE
12/2/2009 8:42:06 PM
EXE
12/2/2009 7:36:39 PM
EXE
12/2/2009 3:43:08 PM
EXE
12/1/2009 3:13:44 AM
EXE
11/30/2009 8:00:27 PM
EXE
11/30/2009 7:34:03 PM
EXE
11/30/2009 6:55:13 PM
EXE
11/30/2009 5:55:17 PM
EXE
11/30/2009 5:53:07 PM
EXE
11/30/2009 3:32:36 PM
EXE
11/30/2009 10:18:14 AM
EXE
11/26/2009 3:20:09 AM
EXE
11/26/2009 3:17:54 AM
EXE
11/24/2009 2:45:18 PM
EXE
11/24/2009 2:41:31 PM
EXE
11/21/2009 7:25:24 PM
EXE
11/21/2009 7:11:44 PM
EXE
11/21/2009 12:32:51 PM

Process start

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process start

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process exit

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process start

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process exit

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process start

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process exit

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process start

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process exit

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process start

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process exit

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process start

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process exit

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process start

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process exit

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process start

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process exit

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process start

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process exit

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process start

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process exit

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process start

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process exit

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process start

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process exit

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process start

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process exit

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process start

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process exit

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process start

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

EXE
11/20/2009 6:58:59 PM
EXE
11/20/2009 11:59:18 AM
EXE
11/20/2009 9:52:53 AM
EXE
11/19/2009 4:27:58 AM
EXE
11/18/2009 7:43:43 PM
EXE
11/18/2009 7:16:14 PM
EXE
11/18/2009 6:03:02 PM
EXE
11/18/2009 12:50:54 PM
EXE
11/18/2009 12:25:18 PM
EXE
11/18/2009 11:18:18 AM
EXE
11/18/2009 10:34:52 AM
EXE
11/17/2009 10:33:09 PM
EXE
11/17/2009 6:17:47 PM
EXE
11/17/2009 2:48:52 PM
EXE
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM
12/16/2009 7:00:13 AM
12/14/2009 4:09:33 PM
12/14/2009 3:47:52 PM
12/10/2009 2:42:15 PM
12/10/2009 2:22:49 PM
12/10/2009 4:49:28 AM
12/10/2009 4:46:56 AM
12/10/2009 4:08:57 AM
12/9/2009 3:23:35 AM
12/8/2009 9:15:51 PM
12/8/2009 1:20:42 PM
12/8/2009 11:34:16 AM
12/6/2009 12:47:12 AM
12/5/2009 7:28:55 PM
12/5/2009 2:24:47 AM
12/4/2009 10:43:14 PM
12/4/2009 6:51:08 PM
12/4/2009 4:27:47 PM
12/3/2009 4:07:09 AM
12/2/2009 8:42:06 PM
12/2/2009 7:36:39 PM
12/2/2009 3:43:08 PM
12/1/2009 3:13:44 AM
11/30/2009 8:00:27 PM
11/30/2009 7:34:03 PM
11/30/2009 6:55:13 PM
11/30/2009 5:55:17 PM
11/30/2009 5:53:07 PM
11/30/2009 3:32:36 PM

Process exit

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process start

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process exit

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process start

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process exit

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process start

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process exit

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process start

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process exit

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process start

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process exit

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process start

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process exit

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process start

C:\PROGRAM FILES\DELL\DELLDOCK\DELLDOCK.

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE

start
exit
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

11/30/2009
11/26/2009
11/26/2009
11/24/2009
11/24/2009
11/21/2009
11/21/2009
11/21/2009
11/20/2009
11/20/2009
11/20/2009
11/19/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/17/2009
11/17/2009
11/17/2009
dfsvc.exe
12/16/2009
PNSCFG.EXE
12/16/2009
PNSCFG.EXE
12/16/2009
PNSCFG.EXE
12/16/2009
PNSCFG.EXE
12/15/2009
PNSCFG.EXE
12/15/2009
PNSCFG.EXE
12/15/2009
PNSCFG.EXE
12/15/2009
PNSCFG.EXE
12/15/2009
PNSCFG.EXE
12/15/2009
PNSCFG.EXE
12/15/2009
PNSCFG.EXE
12/15/2009
PNSCFG.EXE
12/15/2009
PNSCFG.EXE
12/15/2009
PNSCFG.EXE
12/15/2009
PNSCFG.EXE
12/15/2009
PNSCFG.EXE
12/15/2009
PNSCFG.EXE
12/15/2009
PNSCFG.EXE
12/15/2009

10:18:14 AM
3:19:56 AM
3:17:54 AM
2:45:18 PM
2:41:31 PM
7:25:24 PM
7:11:45 PM
12:32:51 PM
6:58:59 PM
11:59:18 AM
9:52:53 AM
4:27:58 AM
7:43:43 PM
7:16:14 PM
6:03:02 PM
12:50:54 PM
12:25:18 PM
11:18:18 AM
10:34:53 AM
10:33:09 PM
6:17:47 PM
2:48:51 PM
(events: 7)
7:02:51 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE
C:\WINDOWS\system32\IGFXSRVC.EXE

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

7:02:51 AM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

7:02:17 AM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

7:00:12 AM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

12:51:04 PM Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

12:51:04 PM Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

12:51:02 PM Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

12:51:02 PM Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

12:50:58 PM Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

12:50:58 PM Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

12:50:27 PM Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

12:50:27 PM Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

12:50:27 PM Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

12:50:27 PM Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

12:50:22 PM Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

12:50:22 PM Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

12:50:14 PM Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

12:50:14 PM Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

12:50:12 PM Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

PNSCFG.EXE
12/15/2009
PNSCFG.EXE
12/15/2009
PNSCFG.EXE
12/15/2009
PNSCFG.EXE
12/15/2009
PNSCFG.EXE
12/15/2009
PNSCFG.EXE
12/14/2009
PNSCFG.EXE
12/14/2009
PNSCFG.EXE
12/14/2009
PNSCFG.EXE
12/14/2009
PNSCFG.EXE
12/14/2009
PNSCFG.EXE
12/14/2009
PNSCFG.EXE
12/14/2009
PNSCFG.EXE
12/14/2009
PNSCFG.EXE
12/14/2009
PNSCFG.EXE
12/14/2009
PNSCFG.EXE
12/14/2009
PNSCFG.EXE
12/14/2009
PNSCFG.EXE
12/14/2009
PNSCFG.EXE
12/14/2009
PNSCFG.EXE
12/14/2009
PNSCFG.EXE
12/14/2009
PNSCFG.EXE
12/14/2009
PNSCFG.EXE
12/14/2009
PNSCFG.EXE
12/14/2009
PNSCFG.EXE
12/14/2009
PNSCFG.EXE
12/14/2009
PNSCFG.EXE
12/14/2009
PNSCFG.EXE
12/13/2009
PNSCFG.EXE
12/13/2009
PNSCFG.EXE
12/13/2009

12:50:12 PM Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

11:14:48 AM Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

11:14:48 AM Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

11:14:44 AM Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

11:14:44 AM Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

5:30:59 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

5:30:59 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

5:30:57 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

5:30:56 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

5:30:55 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

5:30:55 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

5:30:55 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

5:30:54 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

5:30:54 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

5:30:38 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:10:55 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:10:39 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:09:39 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

3:47:50 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

3:08:25 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

3:08:25 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

3:08:24 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

3:08:24 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

10:11:38 AM Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

10:11:38 AM Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:06:06 AM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:06:06 AM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

11:57:17 PM Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

11:57:17 PM Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

11:57:17 PM Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

PNSCFG.EXE
12/13/2009
PNSCFG.EXE
12/13/2009
PNSCFG.EXE
12/13/2009
PNSCFG.EXE
12/13/2009
PNSCFG.EXE
12/13/2009
PNSCFG.EXE
12/13/2009
PNSCFG.EXE
12/13/2009
PNSCFG.EXE
12/13/2009
PNSCFG.EXE
12/13/2009
PNSCFG.EXE
12/12/2009
PNSCFG.EXE
12/12/2009
PNSCFG.EXE
12/12/2009
PNSCFG.EXE
12/12/2009
PNSCFG.EXE
12/12/2009
PNSCFG.EXE
12/12/2009
PNSCFG.EXE
12/12/2009
PNSCFG.EXE
12/12/2009
PNSCFG.EXE
12/12/2009
PNSCFG.EXE
12/12/2009
PNSCFG.EXE
12/12/2009
PNSCFG.EXE
12/12/2009
PNSCFG.EXE
12/11/2009
PNSCFG.EXE
12/11/2009
PNSCFG.EXE
12/11/2009
PNSCFG.EXE
12/11/2009
PNSCFG.EXE
12/11/2009
PNSCFG.EXE
12/11/2009
PNSCFG.EXE
12/11/2009
PNSCFG.EXE
12/11/2009
PNSCFG.EXE
12/11/2009

11:57:17 PM Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

7:43:51 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

7:43:51 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

7:43:51 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

7:43:50 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

1:57:46 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

1:57:46 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:41:06 AM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:41:06 AM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

7:08:55 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

7:08:55 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

5:32:36 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

5:32:36 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

5:32:36 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

5:32:36 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

3:32:13 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

3:32:13 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

11:03:19 AM Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

11:03:19 AM Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

6:24:02 AM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

6:24:02 AM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:27:26 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:27:26 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:27:26 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:27:26 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

9:09:11 AM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

9:09:11 AM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

5:59:14 AM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

5:59:14 AM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

3:55:49 AM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

PNSCFG.EXE
12/11/2009
PNSCFG.EXE
12/10/2009
PNSCFG.EXE
12/10/2009
PNSCFG.EXE
12/10/2009
PNSCFG.EXE
12/10/2009
PNSCFG.EXE
12/10/2009
PNSCFG.EXE
12/10/2009
PNSCFG.EXE
12/10/2009
PNSCFG.EXE
12/10/2009
PNSCFG.EXE
12/10/2009
PNSCFG.EXE
12/10/2009
PNSCFG.EXE
12/10/2009
PNSCFG.EXE
12/10/2009
PNSCFG.EXE
12/10/2009
PNSCFG.EXE
12/10/2009
PNSCFG.EXE
12/10/2009
PNSCFG.EXE
12/10/2009
PNSCFG.EXE
12/10/2009
PNSCFG.EXE
12/10/2009
PNSCFG.EXE
12/10/2009
PNSCFG.EXE
12/10/2009
PNSCFG.EXE
12/10/2009
PNSCFG.EXE
12/10/2009
PNSCFG.EXE
12/10/2009
PNSCFG.EXE
12/10/2009
PNSCFG.EXE
12/10/2009
PNSCFG.EXE
12/10/2009
PNSCFG.EXE
12/10/2009
PNSCFG.EXE
12/10/2009
PNSCFG.EXE
12/10/2009

3:55:49 AM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

5:47:29 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

5:47:29 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

5:47:27 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

5:47:27 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:42:28 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:42:28 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:42:27 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:42:27 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:42:27 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:42:27 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:42:27 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:42:27 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:42:27 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:22:48 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

1:58:05 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

1:58:05 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

1:58:05 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

1:58:05 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

1:58:05 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

1:58:05 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:49:51 AM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:49:35 AM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:49:35 AM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:49:33 AM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:49:32 AM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:46:55 AM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:09:11 AM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:09:11 AM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:09:03 AM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

PNSCFG.EXE
12/9/2009 3:24:31 AM
PNSCFG.EXE
12/9/2009 3:24:31 AM
PNSCFG.EXE
12/9/2009 3:23:37 AM
PNSCFG.EXE
12/8/2009 9:15:51 PM
PNSCFG.EXE
12/8/2009 9:07:39 PM
PNSCFG.EXE
12/8/2009 9:07:39 PM
PNSCFG.EXE
12/8/2009 1:22:05 PM
PNSCFG.EXE
12/8/2009 1:21:48 PM
PNSCFG.EXE
12/8/2009 1:20:43 PM
PNSCFG.EXE
12/8/2009 11:34:16 AM
PNSCFG.EXE
12/8/2009 10:50:32 AM
PNSCFG.EXE
12/8/2009 10:50:31 AM
PNSCFG.EXE
12/8/2009 4:26:34 AM
PNSCFG.EXE
12/8/2009 4:26:34 AM
PNSCFG.EXE
12/8/2009 2:24:51 AM
PNSCFG.EXE
12/8/2009 2:24:51 AM
PNSCFG.EXE
12/8/2009 2:24:51 AM
PNSCFG.EXE
12/8/2009 2:24:51 AM
PNSCFG.EXE
12/8/2009 2:24:51 AM
PNSCFG.EXE
12/8/2009 2:24:51 AM
PNSCFG.EXE
12/8/2009 2:24:51 AM
PNSCFG.EXE
12/8/2009 2:24:51 AM
PNSCFG.EXE
12/7/2009 11:36:25 PM
PNSCFG.EXE
12/7/2009 11:36:25 PM
PNSCFG.EXE
12/7/2009 2:05:48 PM
PNSCFG.EXE
12/7/2009 2:05:48 PM
PNSCFG.EXE
12/7/2009 4:01:46 AM
PNSCFG.EXE
12/7/2009 4:01:46 AM
PNSCFG.EXE
12/7/2009 4:01:44 AM
PNSCFG.EXE
12/7/2009 4:01:44 AM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

PNSCFG.EXE
12/7/2009 4:01:43 AM
PNSCFG.EXE
12/7/2009 4:01:43 AM
PNSCFG.EXE
12/6/2009 2:04:50 PM
PNSCFG.EXE
12/6/2009 2:04:50 PM
PNSCFG.EXE
12/6/2009 12:47:49 AM
PNSCFG.EXE
12/6/2009 12:47:13 AM
PNSCFG.EXE
12/5/2009 7:28:55 PM
PNSCFG.EXE
12/5/2009 4:12:02 PM
PNSCFG.EXE
12/5/2009 4:12:02 PM
PNSCFG.EXE
12/5/2009 4:12:02 PM
PNSCFG.EXE
12/5/2009 4:12:02 PM
PNSCFG.EXE
12/5/2009 12:28:18 PM
PNSCFG.EXE
12/5/2009 12:28:18 PM
PNSCFG.EXE
12/5/2009 2:26:06 AM
PNSCFG.EXE
12/5/2009 2:26:06 AM
PNSCFG.EXE
12/5/2009 2:24:50 AM
PNSCFG.EXE
12/4/2009 10:43:14 PM
PNSCFG.EXE
12/4/2009 6:51:23 PM
PNSCFG.EXE
12/4/2009 6:51:23 PM
PNSCFG.EXE
12/4/2009 6:51:23 PM
PNSCFG.EXE
12/4/2009 6:51:23 PM
PNSCFG.EXE
12/4/2009 6:51:23 PM
PNSCFG.EXE
12/4/2009 4:27:46 PM
PNSCFG.EXE
12/4/2009 11:59:17 AM
PNSCFG.EXE
12/4/2009 11:59:17 AM
PNSCFG.EXE
12/4/2009 4:18:04 AM
PNSCFG.EXE
12/4/2009 4:17:58 AM
PNSCFG.EXE
12/3/2009 2:06:03 PM
PNSCFG.EXE
12/3/2009 2:06:03 PM
PNSCFG.EXE
12/3/2009 4:07:23 AM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

PNSCFG.EXE
12/3/2009 4:07:23 AM
PNSCFG.EXE
12/3/2009 4:07:16 AM
PNSCFG.EXE
12/2/2009 8:42:06 PM
PNSCFG.EXE
12/2/2009 7:39:00 PM
PNSCFG.EXE
12/2/2009 7:38:53 PM
PNSCFG.EXE
12/2/2009 7:36:43 PM
PNSCFG.EXE
12/2/2009 3:43:08 PM
PNSCFG.EXE
12/2/2009 11:29:51 AM
PNSCFG.EXE
12/2/2009 11:29:51 AM
PNSCFG.EXE
12/2/2009 5:51:51 AM
PNSCFG.EXE
12/2/2009 5:51:51 AM
PNSCFG.EXE
12/2/2009 3:06:56 AM
PNSCFG.EXE
12/2/2009 3:06:56 AM
PNSCFG.EXE
12/1/2009 6:03:34 PM
PNSCFG.EXE
12/1/2009 6:03:34 PM
PNSCFG.EXE
12/1/2009 1:46:24 PM
PNSCFG.EXE
12/1/2009 1:46:24 PM
PNSCFG.EXE
12/1/2009 3:15:36 AM
PNSCFG.EXE
12/1/2009 3:15:36 AM
PNSCFG.EXE
12/1/2009 3:14:21 AM
PNSCFG.EXE
11/30/2009 8:00:27 PM
PNSCFG.EXE
11/30/2009 7:36:06 PM
PNSCFG.EXE
11/30/2009 7:36:06 PM
PNSCFG.EXE
11/30/2009 7:34:37 PM
PNSCFG.EXE
11/30/2009 6:55:13 PM
PNSCFG.EXE
11/30/2009 6:55:06 PM
PNSCFG.EXE
11/30/2009 6:55:06 PM
PNSCFG.EXE
11/30/2009 5:56:08 PM
PNSCFG.EXE
11/30/2009 5:56:08 PM
PNSCFG.EXE
11/30/2009 5:55:44 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

PNSCFG.EXE
11/30/2009
PNSCFG.EXE
11/30/2009
PNSCFG.EXE
11/30/2009
PNSCFG.EXE
11/30/2009
PNSCFG.EXE
11/30/2009
PNSCFG.EXE
11/30/2009
PNSCFG.EXE
11/30/2009
PNSCFG.EXE
11/30/2009
PNSCFG.EXE
11/30/2009
PNSCFG.EXE
11/30/2009
PNSCFG.EXE
11/30/2009
PNSCFG.EXE
11/29/2009
PNSCFG.EXE
11/29/2009
PNSCFG.EXE
11/29/2009
PNSCFG.EXE
11/29/2009
PNSCFG.EXE
11/29/2009
PNSCFG.EXE
11/29/2009
PNSCFG.EXE
11/29/2009
PNSCFG.EXE
11/29/2009
PNSCFG.EXE
11/29/2009
PNSCFG.EXE
11/29/2009
PNSCFG.EXE
11/28/2009
PNSCFG.EXE
11/28/2009
PNSCFG.EXE
11/28/2009
PNSCFG.EXE
11/28/2009
PNSCFG.EXE
11/28/2009
PNSCFG.EXE
11/28/2009
PNSCFG.EXE
11/28/2009
PNSCFG.EXE
11/28/2009
PNSCFG.EXE
11/28/2009

5:55:44 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

5:55:18 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

5:53:06 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

3:33:50 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

3:33:48 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

3:32:44 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

10:18:14 AM Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

10:12:24 AM Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

10:12:24 AM Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

5:17:39 AM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

5:17:39 AM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

5:54:52 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

5:54:52 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:06:03 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:06:01 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:51:56 AM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:51:56 AM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:51:56 AM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:51:56 AM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:51:49 AM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:51:49 AM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:38:10 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:38:10 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:38:00 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:38:00 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:26:24 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:26:24 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:26:24 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:26:24 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:26:24 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

PNSCFG.EXE
11/28/2009
PNSCFG.EXE
11/28/2009
PNSCFG.EXE
11/28/2009
PNSCFG.EXE
11/28/2009
PNSCFG.EXE
11/28/2009
PNSCFG.EXE
11/28/2009
PNSCFG.EXE
11/28/2009
PNSCFG.EXE
11/28/2009
PNSCFG.EXE
11/28/2009
PNSCFG.EXE
11/28/2009
PNSCFG.EXE
11/28/2009
PNSCFG.EXE
11/28/2009
PNSCFG.EXE
11/28/2009
PNSCFG.EXE
11/27/2009
PNSCFG.EXE
11/27/2009
PNSCFG.EXE
11/27/2009
PNSCFG.EXE
11/27/2009
PNSCFG.EXE
11/27/2009
PNSCFG.EXE
11/27/2009
PNSCFG.EXE
11/27/2009
PNSCFG.EXE
11/27/2009
PNSCFG.EXE
11/27/2009
PNSCFG.EXE
11/27/2009
PNSCFG.EXE
11/27/2009
PNSCFG.EXE
11/27/2009
PNSCFG.EXE
11/27/2009
PNSCFG.EXE
11/27/2009
PNSCFG.EXE
11/26/2009
PNSCFG.EXE
11/26/2009
PNSCFG.EXE
11/26/2009

2:26:24 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:26:24 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:26:24 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:26:23 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:26:10 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:26:10 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:26:10 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:26:10 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:26:09 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:26:09 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:26:08 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:26:07 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:26:05 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

8:49:38 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

8:49:38 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

3:07:49 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

3:07:49 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

3:07:48 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

3:07:48 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

11:27:23 AM Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

11:27:23 AM Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

11:27:23 AM Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

11:27:23 AM Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

11:27:19 AM Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

11:27:08 AM Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

12:32:30 AM Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

12:32:30 AM Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:13:36 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:13:30 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

12:25:41 PM Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

PNSCFG.EXE
11/26/2009
PNSCFG.EXE
11/26/2009
PNSCFG.EXE
11/26/2009
PNSCFG.EXE
11/26/2009
PNSCFG.EXE
11/26/2009
PNSCFG.EXE
11/26/2009
PNSCFG.EXE
11/26/2009
PNSCFG.EXE
11/26/2009
PNSCFG.EXE
11/26/2009
PNSCFG.EXE
11/26/2009
PNSCFG.EXE
11/26/2009
PNSCFG.EXE
11/26/2009
PNSCFG.EXE
11/26/2009
PNSCFG.EXE
11/26/2009
PNSCFG.EXE
11/26/2009
PNSCFG.EXE
11/25/2009
PNSCFG.EXE
11/25/2009
PNSCFG.EXE
11/25/2009
PNSCFG.EXE
11/25/2009
PNSCFG.EXE
11/25/2009
PNSCFG.EXE
11/25/2009
PNSCFG.EXE
11/25/2009
PNSCFG.EXE
11/25/2009
PNSCFG.EXE
11/25/2009
PNSCFG.EXE
11/25/2009
PNSCFG.EXE
11/24/2009
PNSCFG.EXE
11/24/2009
PNSCFG.EXE
11/24/2009
PNSCFG.EXE
11/24/2009
PNSCFG.EXE
11/24/2009

12:25:41 PM Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

6:59:18 AM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

6:59:18 AM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

6:59:18 AM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

6:59:18 AM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

6:59:18 AM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

6:59:17 AM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

3:20:11 AM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

3:20:11 AM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

3:20:11 AM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

3:20:11 AM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

3:20:08 AM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

3:17:54 AM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

3:00:25 AM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

3:00:25 AM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

11:54:18 PM Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

11:54:18 PM Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

11:54:18 PM Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

11:54:18 PM Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

12:21:52 PM Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

12:21:46 PM Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

3:59:54 AM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

3:59:54 AM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

3:00:26 AM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

3:00:26 AM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:45:52 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:45:51 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:45:20 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:41:30 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

1:27:35 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

PNSCFG.EXE
11/24/2009
PNSCFG.EXE
11/24/2009
PNSCFG.EXE
11/24/2009
PNSCFG.EXE
11/24/2009
PNSCFG.EXE
11/24/2009
PNSCFG.EXE
11/23/2009
PNSCFG.EXE
11/23/2009
PNSCFG.EXE
11/23/2009
PNSCFG.EXE
11/23/2009
PNSCFG.EXE
11/23/2009
PNSCFG.EXE
11/23/2009
PNSCFG.EXE
11/23/2009
PNSCFG.EXE
11/23/2009
PNSCFG.EXE
11/23/2009
PNSCFG.EXE
11/23/2009
PNSCFG.EXE
11/22/2009
PNSCFG.EXE
11/22/2009
PNSCFG.EXE
11/22/2009
PNSCFG.EXE
11/22/2009
PNSCFG.EXE
11/22/2009
PNSCFG.EXE
11/22/2009
PNSCFG.EXE
11/22/2009
PNSCFG.EXE
11/22/2009
PNSCFG.EXE
11/21/2009
PNSCFG.EXE
11/21/2009
PNSCFG.EXE
11/21/2009
PNSCFG.EXE
11/21/2009
PNSCFG.EXE
11/21/2009
PNSCFG.EXE
11/21/2009
PNSCFG.EXE
11/21/2009

1:27:35 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

10:05:02 AM Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

10:05:02 AM Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

3:48:19 AM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

3:48:19 AM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

7:57:38 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

7:57:38 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

7:57:38 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

7:57:38 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

7:57:36 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

7:57:35 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:59:25 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:59:23 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:12:47 AM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:12:47 AM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:20:01 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:20:01 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:01:58 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:01:58 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

1:52:14 AM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

1:52:06 AM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

12:27:18 AM Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

12:27:18 AM Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

7:26:19 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

7:26:09 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

7:25:25 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

7:11:44 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

12:33:13 PM Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

12:33:13 PM Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

12:33:13 PM Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

PNSCFG.EXE
11/21/2009
PNSCFG.EXE
11/21/2009
PNSCFG.EXE
11/20/2009
PNSCFG.EXE
11/20/2009
PNSCFG.EXE
11/20/2009
PNSCFG.EXE
11/20/2009
PNSCFG.EXE
11/20/2009
PNSCFG.EXE
11/20/2009
PNSCFG.EXE
11/20/2009
PNSCFG.EXE
11/20/2009
PNSCFG.EXE
11/20/2009
PNSCFG.EXE
11/20/2009
PNSCFG.EXE
11/20/2009
PNSCFG.EXE
11/19/2009
PNSCFG.EXE
11/19/2009
PNSCFG.EXE
11/19/2009
PNSCFG.EXE
11/19/2009
PNSCFG.EXE
11/19/2009
PNSCFG.EXE
11/19/2009
PNSCFG.EXE
11/19/2009
PNSCFG.EXE
11/19/2009
PNSCFG.EXE
11/19/2009
PNSCFG.EXE
11/19/2009
PNSCFG.EXE
11/19/2009
PNSCFG.EXE
11/19/2009
PNSCFG.EXE
11/19/2009
PNSCFG.EXE
11/18/2009
PNSCFG.EXE
11/18/2009
PNSCFG.EXE
11/18/2009
PNSCFG.EXE
11/18/2009

12:33:13 PM Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

12:32:51 PM Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

6:58:59 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

6:54:52 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

6:54:52 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

11:59:44 AM Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

11:59:44 AM Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

11:59:20 AM Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

9:52:53 AM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

9:50:56 AM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

9:50:56 AM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:51:06 AM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:51:06 AM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

7:52:47 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

7:52:47 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:48:23 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:48:23 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

10:11:05 AM Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

10:11:05 AM Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:28:37 AM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:28:37 AM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:28:37 AM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:28:37 AM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:28:37 AM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:28:37 AM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:27:59 AM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

7:43:43 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

7:16:26 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

7:16:26 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

7:16:15 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

PNSCFG.EXE
11/18/2009
PNSCFG.EXE
11/18/2009
PNSCFG.EXE
11/18/2009
PNSCFG.EXE
11/18/2009
PNSCFG.EXE
11/18/2009
PNSCFG.EXE
11/18/2009
PNSCFG.EXE
11/18/2009
PNSCFG.EXE
11/18/2009
PNSCFG.EXE
11/18/2009
PNSCFG.EXE
11/18/2009
PNSCFG.EXE
11/18/2009
PNSCFG.EXE
11/18/2009
PNSCFG.EXE
11/18/2009
PNSCFG.EXE
11/18/2009
PNSCFG.EXE
11/18/2009
PNSCFG.EXE
11/17/2009
PNSCFG.EXE
11/17/2009
PNSCFG.EXE
11/17/2009
PNSCFG.EXE
11/17/2009
PNSCFG.EXE
11/17/2009
PNSCFG.EXE
11/17/2009
PNSCFG.EXE
11/17/2009
PNSCFG.EXE
11/17/2009
PNSCFG.EXE
11/17/2009
PNSCFG.EXE
11/17/2009
PNSCFG.EXE
11/17/2009
PNSCFG.EXE
dfsvc.exe
12/16/2009
12/16/2009
12/14/2009
12/14/2009
12/10/2009
12/10/2009

6:03:02 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:31:22 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:31:16 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

12:51:43 PM Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

12:51:43 PM Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

12:50:56 PM Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

12:25:18 PM Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

11:18:55 AM Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

11:18:52 AM Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

11:18:18 AM Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

10:34:52 AM Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

10:14:59 AM Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

10:14:59 AM Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:45:46 AM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

4:45:45 AM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

10:34:19 PM Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

10:34:19 PM Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

10:33:12 PM Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

6:17:47 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

5:51:59 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

5:51:59 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:49:57 PM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:49:57 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:49:07 PM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:24:42 AM

Process exit

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

2:24:42 AM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

(events: 7)
7:02:44 AM
7:00:12 AM
4:10:12 PM
3:47:50 PM
2:42:26 PM
2:22:48 PM

Process
Process
Process
Process
Process
Process

C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE

start
exit
start
exit
start
exit

12/10/2009 4:49:33 AM
12/10/2009 4:46:55 AM
12/10/2009 4:09:09 AM
12/9/2009 3:24:07 AM
12/8/2009 9:15:51 PM
12/8/2009 1:21:08 PM
12/8/2009 11:34:16 AM
12/6/2009 12:47:42 AM
12/5/2009 7:28:55 PM
12/5/2009 2:26:05 AM
12/4/2009 10:43:14 PM
12/4/2009 6:51:22 PM
12/4/2009 4:27:46 PM
12/3/2009 4:07:21 AM
12/2/2009 8:42:06 PM
12/2/2009 7:37:54 PM
12/2/2009 3:43:08 PM
12/1/2009 3:15:29 AM
11/30/2009 8:00:27 PM
11/30/2009 7:35:45 PM
11/30/2009 6:55:13 PM
11/30/2009 5:55:46 PM
11/30/2009 5:53:06 PM
11/30/2009 3:33:35 PM
11/30/2009 10:18:14 AM
11/26/2009 3:20:08 AM
11/26/2009 3:17:54 AM
11/24/2009 2:45:39 PM
11/24/2009 2:41:30 PM
11/21/2009 7:25:56 PM
11/21/2009 7:11:44 PM
11/21/2009 12:33:12 PM
11/20/2009 6:58:59 PM
11/20/2009 11:59:32 AM
11/20/2009 9:52:53 AM
11/19/2009 4:28:33 AM
11/18/2009 7:43:43 PM
11/18/2009 7:16:25 PM
11/18/2009 6:03:02 PM
11/18/2009 12:51:33 PM
11/18/2009 12:25:18 PM
11/18/2009 11:18:40 AM
11/18/2009 10:34:52 AM
11/17/2009 10:34:06 PM
11/17/2009 6:17:47 PM
11/17/2009 2:49:56 PM
dfsvc.exe (events: 7)
12/16/2009 7:05:33 AM
12/16/2009 7:05:32 AM
12/14/2009 4:13:01 PM
12/14/2009 4:13:01 PM
12/13/2009 7:47:16 PM
12/13/2009 7:46:46 PM
12/10/2009 2:46:09 PM
12/10/2009 2:46:08 PM
12/10/2009 4:53:09 AM
12/10/2009 4:53:09 AM
12/10/2009 4:12:53 AM
12/10/2009 4:12:52 AM
12/9/2009 3:27:16 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE
C:\WINDOWS\system32\WBEM\UNSECAPP.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE

12/9/2009 3:27:16 AM
12/8/2009 1:24:13 PM
12/8/2009 1:24:13 PM
12/6/2009 12:50:51 AM
12/6/2009 12:50:51 AM
12/5/2009 2:27:36 AM
12/5/2009 2:27:36 AM
12/4/2009 6:54:58 PM
12/4/2009 6:54:58 PM
12/4/2009 3:56:40 PM
12/4/2009 3:54:04 PM
12/3/2009 4:10:58 AM
12/3/2009 4:10:57 AM
12/2/2009 7:40:15 PM
12/2/2009 7:40:15 PM
12/1/2009 3:17:26 AM
12/1/2009 3:17:25 AM
11/30/2009 7:37:49 PM
11/30/2009 7:37:49 PM
11/30/2009 5:58:59 PM
11/30/2009 5:58:59 PM
11/30/2009 4:14:23 PM
11/30/2009 4:13:57 PM
11/30/2009 3:35:44 PM
11/30/2009 3:35:43 PM
11/28/2009 5:43:55 AM
11/28/2009 5:41:17 AM
11/27/2009 11:54:46 PM
11/27/2009 11:52:08 PM
11/27/2009 11:12:17 PM
11/27/2009 11:09:35 PM
11/27/2009 10:54:18 PM
11/27/2009 10:51:36 PM
11/26/2009 3:23:44 AM
11/26/2009 3:23:44 AM
11/24/2009 2:49:00 PM
11/24/2009 2:48:59 PM
11/21/2009 7:29:06 PM
11/21/2009 7:29:06 PM
11/21/2009 12:36:43 PM
11/21/2009 12:36:43 PM
11/20/2009 12:03:13 PM
11/20/2009 12:03:13 PM
11/19/2009 4:31:48 AM
11/19/2009 4:31:48 AM
11/18/2009 7:20:01 PM
11/18/2009 7:20:00 PM
11/18/2009 5:37:31 PM
11/18/2009 5:36:43 PM
11/18/2009 12:54:04 PM
11/18/2009 12:54:04 PM
11/18/2009 11:21:46 AM
11/18/2009 11:21:46 AM
11/17/2009 10:36:05 PM
11/17/2009 10:36:05 PM
11/17/2009 2:51:50 PM
11/17/2009 2:51:50 PM
dfsvc.exe (events: 7)
12/16/2009 7:02:37 AM
12/16/2009 7:02:15 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

Process exit
Process start

C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE

12/15/2009 7:55:07 PM
12/15/2009 7:54:44 PM
12/15/2009 5:10:14 PM
12/15/2009 5:09:59 PM
12/14/2009 7:57:10 PM
12/14/2009 7:56:39 PM
12/14/2009 5:33:21 PM
12/14/2009 4:10:36 PM
12/14/2009 4:10:36 PM
12/14/2009 4:09:33 PM
12/14/2009 4:09:32 PM
12/13/2009 7:53:14 PM
12/13/2009 7:52:55 PM
12/13/2009 7:46:00 PM
12/13/2009 7:45:45 PM
12/10/2009 2:43:34 PM
12/10/2009 2:42:37 PM
12/10/2009 2:42:20 PM
12/10/2009 2:42:15 PM
12/10/2009 2:11:56 PM
12/10/2009 2:11:40 PM
12/10/2009 4:10:30 AM
12/10/2009 4:10:14 AM
12/10/2009 4:10:07 AM
12/10/2009 4:09:14 AM
12/9/2009 3:28:17 AM
12/9/2009 3:28:07 AM
12/9/2009 3:27:25 AM
12/9/2009 3:27:07 AM
12/9/2009 3:26:25 AM
12/9/2009 3:26:07 AM
12/9/2009 3:25:25 AM
12/9/2009 3:25:10 AM
12/9/2009 3:23:52 AM
12/8/2009 1:21:14 PM
12/8/2009 1:20:42 PM
12/8/2009 11:20:44 AM
12/8/2009 11:19:01 AM
12/8/2009 4:26:57 AM
12/8/2009 4:26:37 AM
12/7/2009 2:06:10 PM
12/7/2009 2:05:46 PM
12/6/2009 12:55:03 AM
12/6/2009 12:54:21 AM
12/6/2009 12:54:02 AM
12/6/2009 12:53:21 AM
12/6/2009 12:53:02 AM
12/6/2009 12:52:21 AM
12/6/2009 12:52:02 AM
12/6/2009 12:51:21 AM
12/6/2009 12:51:02 AM
12/6/2009 12:50:21 AM
12/6/2009 12:50:02 AM
12/6/2009 12:49:21 AM
12/6/2009 12:49:03 AM
12/6/2009 12:47:39 AM
12/5/2009 7:28:55 PM
12/5/2009 2:31:12 AM
12/5/2009 2:30:53 AM
12/5/2009 2:30:12 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE

12/5/2009 2:29:53 AM
12/5/2009 2:29:11 AM
12/5/2009 2:28:53 AM
12/5/2009 2:28:11 AM
12/5/2009 2:27:53 AM
12/5/2009 2:27:12 AM
12/5/2009 2:26:53 AM
12/5/2009 2:26:12 AM
12/5/2009 2:25:56 AM
12/5/2009 2:25:06 AM
12/5/2009 2:24:47 AM
12/5/2009 2:24:47 AM
12/4/2009 6:52:09 PM
12/4/2009 6:51:27 PM
12/4/2009 6:51:09 PM
12/4/2009 6:51:08 PM
12/4/2009 3:56:40 PM
12/4/2009 3:54:48 PM
12/4/2009 3:53:15 PM
12/3/2009 4:07:46 AM
12/2/2009 8:42:06 PM
12/2/2009 7:37:05 PM
12/2/2009 3:43:08 PM
12/1/2009 3:14:50 AM
12/1/2009 3:14:41 AM
12/1/2009 3:13:57 AM
11/30/2009 8:00:27 PM
11/30/2009 7:36:55 PM
11/30/2009 7:36:12 PM
11/30/2009 7:35:25 PM
11/30/2009 7:35:11 PM
11/30/2009 7:34:32 PM
11/30/2009 7:34:03 PM
11/30/2009 7:34:03 PM
11/30/2009 5:57:29 PM
11/30/2009 5:57:16 PM
11/30/2009 5:57:14 PM
11/30/2009 5:56:28 PM
11/30/2009 5:56:04 PM
11/30/2009 5:55:24 PM
11/30/2009 4:37:59 PM
11/30/2009 4:37:43 PM
11/30/2009 4:13:10 PM
11/30/2009 3:33:53 PM
11/30/2009 3:33:37 PM
11/30/2009 3:32:55 PM
11/30/2009 3:32:36 PM
11/28/2009 7:37:00 AM
11/28/2009 6:25:06 AM
11/28/2009 6:15:08 AM
11/28/2009 5:40:30 AM
11/28/2009 5:40:29 AM
11/28/2009 12:32:46 AM
11/27/2009 11:52:02 PM
11/27/2009 11:51:51 PM
11/27/2009 11:51:32 PM
11/27/2009 11:51:21 PM
11/27/2009 11:51:15 PM
11/27/2009 11:50:56 PM
11/27/2009 11:46:14 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE

11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009

11:46:03 PM
11:08:47 PM
11:08:35 PM
10:51:05 PM
10:50:35 PM
2:53:07 PM
2:52:25 PM
2:52:07 PM
2:51:25 PM
2:51:07 PM
2:50:25 PM
2:50:07 PM
2:49:25 PM
2:49:07 PM
2:48:25 PM
2:48:07 PM
2:47:25 PM
2:47:11 PM
2:46:25 PM
2:46:18 PM
2:45:25 PM
2:41:30 PM
7:30:20 PM
7:30:14 PM
7:29:33 PM
7:29:14 PM
7:28:33 PM
7:28:14 PM
7:27:32 PM
7:27:15 PM
7:26:33 PM
7:26:32 PM
7:25:39 PM
7:11:44 PM
12:33:14 PM
12:33:03 PM
12:32:52 PM
12:00:45 PM
12:00:05 PM
11:59:45 AM
11:59:35 AM
9:52:53 AM
7:53:27 PM
7:53:22 PM
7:52:57 PM
3:46:42 PM
4:30:03 AM
4:29:47 AM
4:29:06 AM
4:28:58 AM
4:28:06 AM
7:24:47 PM
7:24:20 PM
7:24:02 PM
7:23:20 PM
7:23:02 PM
7:22:20 PM
7:22:02 PM
7:21:20 PM
7:21:02 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE

11/18/2009 7:20:20 PM
11/18/2009 7:20:01 PM
11/18/2009 7:19:20 PM
11/18/2009 7:19:01 PM
11/18/2009 7:18:20 PM
11/18/2009 7:18:01 PM
11/18/2009 7:17:20 PM
11/18/2009 7:17:05 PM
11/18/2009 7:16:14 PM
11/18/2009 5:58:03 PM
11/18/2009 5:55:59 PM
11/18/2009 5:39:33 PM
11/18/2009 5:39:10 PM
11/18/2009 5:35:58 PM
11/18/2009 5:35:08 PM
11/18/2009 5:35:00 PM
11/18/2009 5:34:44 PM
11/18/2009 5:29:49 PM
11/18/2009 5:29:18 PM
11/18/2009 4:32:12 PM
11/18/2009 12:51:16 PM
11/18/2009 12:51:08 PM
11/18/2009 12:50:54 PM
11/18/2009 11:25:54 AM
11/18/2009 11:25:13 AM
11/18/2009 11:24:54 AM
11/18/2009 11:24:13 AM
11/18/2009 11:23:55 AM
11/18/2009 11:23:13 AM
11/18/2009 11:22:54 AM
11/18/2009 11:22:13 AM
11/18/2009 11:21:54 AM
11/18/2009 11:21:13 AM
11/18/2009 11:20:54 AM
11/18/2009 11:20:13 AM
11/18/2009 11:19:54 AM
11/18/2009 11:19:13 AM
11/18/2009 11:18:51 AM
11/18/2009 11:18:18 AM
11/18/2009 10:17:37 AM
11/18/2009 10:16:55 AM
11/18/2009 10:16:37 AM
11/18/2009 10:15:55 AM
11/18/2009 10:15:37 AM
11/17/2009 10:33:09 PM
11/17/2009 6:17:44 PM
11/17/2009 6:10:30 PM
11/17/2009 3:11:14 PM
11/17/2009 2:48:52 PM
dfsvc.exe (events: 7)
12/16/2009 7:02:27 AM
YER\WMPLAYER.EXE
12/16/2009 7:02:25 AM
YER\WMPLAYER.EXE
12/15/2009 7:54:58 PM
YER\WMPLAYER.EXE
12/15/2009 7:54:56 PM
YER\WMPLAYER.EXE
12/15/2009 7:54:46 PM
YER\WMPLAYER.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE
C:\WINDOWS\system32\MOBSYNC.EXE

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

12/15/2009 7:54:44
YER\WMPLAYER.EXE
12/15/2009 5:10:04
YER\WMPLAYER.EXE
12/15/2009 5:10:03
YER\WMPLAYER.EXE
12/15/2009 5:10:00
YER\WMPLAYER.EXE
12/15/2009 5:09:59
YER\WMPLAYER.EXE
12/14/2009 7:57:00
YER\WMPLAYER.EXE
12/14/2009 7:56:59
YER\WMPLAYER.EXE
12/14/2009 7:56:41
YER\WMPLAYER.EXE
12/14/2009 7:56:39
YER\WMPLAYER.EXE
12/14/2009 5:33:18
YER\WMPLAYER.EXE
12/14/2009 5:32:49
YER\WMPLAYER.EXE
12/14/2009 4:10:49
YER\WMPLAYER.EXE
12/14/2009 4:10:47
YER\WMPLAYER.EXE
12/14/2009 4:10:10
YER\WMPLAYER.EXE
12/14/2009 4:10:01
YER\WMPLAYER.EXE
12/14/2009 4:09:54
YER\WMPLAYER.EXE
12/14/2009 4:09:39
YER\WMPLAYER.EXE
12/13/2009 7:53:04
YER\WMPLAYER.EXE
12/13/2009 7:53:03
YER\WMPLAYER.EXE
12/13/2009 7:52:56
YER\WMPLAYER.EXE
12/13/2009 7:52:55
YER\WMPLAYER.EXE
12/13/2009 7:45:50
YER\WMPLAYER.EXE
12/13/2009 7:45:48
YER\WMPLAYER.EXE
12/13/2009 7:45:47
YER\WMPLAYER.EXE
12/13/2009 7:45:46
YER\WMPLAYER.EXE
12/10/2009 2:43:24
YER\WMPLAYER.EXE
12/10/2009 2:43:23
YER\WMPLAYER.EXE
12/10/2009 2:43:18
YER\WMPLAYER.EXE
12/10/2009 2:43:08
YER\WMPLAYER.EXE
12/10/2009 2:42:43
YER\WMPLAYER.EXE

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

12/10/2009 2:42:37 PM
YER\WMPLAYER.EXE
12/10/2009 2:11:46 PM
YER\WMPLAYER.EXE
12/10/2009 2:11:44 PM
YER\WMPLAYER.EXE
12/10/2009 2:11:42 PM
YER\WMPLAYER.EXE
12/10/2009 2:11:40 PM
YER\WMPLAYER.EXE
12/10/2009 4:10:20 AM
YER\WMPLAYER.EXE
12/10/2009 4:09:44 AM
YER\WMPLAYER.EXE
12/10/2009 4:09:20 AM
YER\WMPLAYER.EXE
12/10/2009 4:09:14 AM
YER\WMPLAYER.EXE
12/9/2009 3:28:19 AM
YER\WMPLAYER.EXE
12/9/2009 3:28:17 AM
YER\WMPLAYER.EXE
12/9/2009 3:27:57 AM
YER\WMPLAYER.EXE
12/9/2009 3:27:56 AM
YER\WMPLAYER.EXE
12/9/2009 3:27:26 AM
YER\WMPLAYER.EXE
12/9/2009 3:27:25 AM
YER\WMPLAYER.EXE
12/9/2009 3:26:57 AM
YER\WMPLAYER.EXE
12/9/2009 3:26:56 AM
YER\WMPLAYER.EXE
12/9/2009 3:26:26 AM
YER\WMPLAYER.EXE
12/9/2009 3:26:25 AM
YER\WMPLAYER.EXE
12/9/2009 3:25:57 AM
YER\WMPLAYER.EXE
12/9/2009 3:25:56 AM
YER\WMPLAYER.EXE
12/9/2009 3:25:28 AM
YER\WMPLAYER.EXE
12/9/2009 3:25:25 AM
YER\WMPLAYER.EXE
12/9/2009 3:25:01 AM
YER\WMPLAYER.EXE
12/9/2009 3:24:56 AM
YER\WMPLAYER.EXE
12/9/2009 3:24:39 AM
YER\WMPLAYER.EXE
12/9/2009 3:24:07 AM
YER\WMPLAYER.EXE
12/8/2009 1:27:20 PM
YER\WMPLAYER.EXE
12/8/2009 1:27:01 PM
YER\WMPLAYER.EXE
12/8/2009 1:21:05 PM
YER\WMPLAYER.EXE

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

12/8/2009 1:21:00 PM
YER\WMPLAYER.EXE
12/8/2009 11:20:34 AM
YER\WMPLAYER.EXE
12/8/2009 11:20:33 AM
YER\WMPLAYER.EXE
12/8/2009 11:20:31 AM
YER\WMPLAYER.EXE
12/8/2009 11:20:30 AM
YER\WMPLAYER.EXE
12/8/2009 11:19:02 AM
YER\WMPLAYER.EXE
12/8/2009 11:19:01 AM
YER\WMPLAYER.EXE
12/8/2009 4:26:47 AM
YER\WMPLAYER.EXE
12/8/2009 4:26:45 AM
YER\WMPLAYER.EXE
12/8/2009 4:26:45 AM
YER\WMPLAYER.EXE
12/8/2009 4:26:41 AM
YER\WMPLAYER.EXE
12/8/2009 4:26:38 AM
YER\WMPLAYER.EXE
12/8/2009 4:26:37 AM
YER\WMPLAYER.EXE
12/7/2009 3:14:53 PM
YER\WMPLAYER.EXE
12/7/2009 3:14:27 PM
YER\WMPLAYER.EXE
12/7/2009 2:05:49 PM
YER\WMPLAYER.EXE
12/7/2009 2:05:49 PM
YER\WMPLAYER.EXE
12/7/2009 2:05:49 PM
YER\WMPLAYER.EXE
12/7/2009 2:05:47 PM
YER\WMPLAYER.EXE
12/6/2009 12:54:53 AM
YER\WMPLAYER.EXE
12/6/2009 12:54:51 AM
YER\WMPLAYER.EXE
12/6/2009 12:54:22 AM
YER\WMPLAYER.EXE
12/6/2009 12:54:21 AM
YER\WMPLAYER.EXE
12/6/2009 12:53:53 AM
YER\WMPLAYER.EXE
12/6/2009 12:53:51 AM
YER\WMPLAYER.EXE
12/6/2009 12:53:22 AM
YER\WMPLAYER.EXE
12/6/2009 12:53:21 AM
YER\WMPLAYER.EXE
12/6/2009 12:52:53 AM
YER\WMPLAYER.EXE
12/6/2009 12:52:51 AM
YER\WMPLAYER.EXE
12/6/2009 12:52:22 AM
YER\WMPLAYER.EXE

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

12/6/2009 12:52:21 AM
YER\WMPLAYER.EXE
12/6/2009 12:51:52 AM
YER\WMPLAYER.EXE
12/6/2009 12:51:51 AM
YER\WMPLAYER.EXE
12/6/2009 12:51:22 AM
YER\WMPLAYER.EXE
12/6/2009 12:51:21 AM
YER\WMPLAYER.EXE
12/6/2009 12:50:53 AM
YER\WMPLAYER.EXE
12/6/2009 12:50:51 AM
YER\WMPLAYER.EXE
12/6/2009 12:50:22 AM
YER\WMPLAYER.EXE
12/6/2009 12:50:21 AM
YER\WMPLAYER.EXE
12/6/2009 12:49:53 AM
YER\WMPLAYER.EXE
12/6/2009 12:49:51 AM
YER\WMPLAYER.EXE
12/6/2009 12:49:25 AM
YER\WMPLAYER.EXE
12/6/2009 12:49:21 AM
YER\WMPLAYER.EXE
12/6/2009 12:48:54 AM
YER\WMPLAYER.EXE
12/6/2009 12:48:52 AM
YER\WMPLAYER.EXE
12/6/2009 12:48:33 AM
YER\WMPLAYER.EXE
12/6/2009 12:47:49 AM
YER\WMPLAYER.EXE
12/5/2009 2:31:13 AM
YER\WMPLAYER.EXE
12/5/2009 2:31:12 AM
YER\WMPLAYER.EXE
12/5/2009 2:30:43 AM
YER\WMPLAYER.EXE
12/5/2009 2:30:42 AM
YER\WMPLAYER.EXE
12/5/2009 2:30:13 AM
YER\WMPLAYER.EXE
12/5/2009 2:30:12 AM
YER\WMPLAYER.EXE
12/5/2009 2:29:43 AM
YER\WMPLAYER.EXE
12/5/2009 2:29:42 AM
YER\WMPLAYER.EXE
12/5/2009 2:29:13 AM
YER\WMPLAYER.EXE
12/5/2009 2:29:12 AM
YER\WMPLAYER.EXE
12/5/2009 2:28:43 AM
YER\WMPLAYER.EXE
12/5/2009 2:28:42 AM
YER\WMPLAYER.EXE
12/5/2009 2:28:13 AM
YER\WMPLAYER.EXE

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

12/5/2009 2:28:12
YER\WMPLAYER.EXE
12/5/2009 2:27:43
YER\WMPLAYER.EXE
12/5/2009 2:27:42
YER\WMPLAYER.EXE
12/5/2009 2:27:13
YER\WMPLAYER.EXE
12/5/2009 2:27:12
YER\WMPLAYER.EXE
12/5/2009 2:26:43
YER\WMPLAYER.EXE
12/5/2009 2:26:42
YER\WMPLAYER.EXE
12/5/2009 2:26:13
YER\WMPLAYER.EXE
12/5/2009 2:26:12
YER\WMPLAYER.EXE
12/5/2009 2:25:47
YER\WMPLAYER.EXE
12/5/2009 2:25:42
YER\WMPLAYER.EXE
12/5/2009 2:25:17
YER\WMPLAYER.EXE
12/5/2009 2:25:14
YER\WMPLAYER.EXE
12/4/2009 6:52:00
YER\WMPLAYER.EXE
12/4/2009 6:51:57
YER\WMPLAYER.EXE
12/4/2009 6:51:31
YER\WMPLAYER.EXE
12/4/2009 6:51:27
YER\WMPLAYER.EXE
12/4/2009 3:56:31
YER\WMPLAYER.EXE
12/4/2009 3:56:29
YER\WMPLAYER.EXE
12/4/2009 3:54:51
YER\WMPLAYER.EXE
12/4/2009 3:54:48
YER\WMPLAYER.EXE
12/4/2009 3:53:05
YER\WMPLAYER.EXE
12/3/2009 4:07:58
YER\WMPLAYER.EXE
12/2/2009 8:42:06
YER\WMPLAYER.EXE
12/2/2009 7:37:50
YER\WMPLAYER.EXE
12/1/2009 4:20:24
YER\WMPLAYER.EXE
12/1/2009 4:20:17
YER\WMPLAYER.EXE
12/1/2009 3:15:07
YER\WMPLAYER.EXE
12/1/2009 3:14:51
YER\WMPLAYER.EXE
12/1/2009 3:14:46
YER\WMPLAYER.EXE

AM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

AM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

AM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

AM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

AM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

AM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

AM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

AM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

AM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

AM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

AM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

AM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

AM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

AM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

AM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

AM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

AM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

AM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

AM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

12/1/2009 3:13:57 AM
YER\WMPLAYER.EXE
11/30/2009 7:36:56 PM
YER\WMPLAYER.EXE
11/30/2009 7:36:55 PM
YER\WMPLAYER.EXE
11/30/2009 7:36:03 PM
YER\WMPLAYER.EXE
11/30/2009 7:35:56 PM
YER\WMPLAYER.EXE
11/30/2009 7:35:34 PM
YER\WMPLAYER.EXE
11/30/2009 7:35:04 PM
YER\WMPLAYER.EXE
11/30/2009 7:34:53 PM
YER\WMPLAYER.EXE
11/30/2009 7:34:37 PM
YER\WMPLAYER.EXE
11/30/2009 6:55:11 PM
YER\WMPLAYER.EXE
11/30/2009 6:55:04 PM
YER\WMPLAYER.EXE
11/30/2009 5:57:20 PM
YER\WMPLAYER.EXE
11/30/2009 5:57:17 PM
YER\WMPLAYER.EXE
11/30/2009 5:57:17 PM
YER\WMPLAYER.EXE
11/30/2009 5:57:04 PM
YER\WMPLAYER.EXE
11/30/2009 5:56:58 PM
YER\WMPLAYER.EXE
11/30/2009 5:56:39 PM
YER\WMPLAYER.EXE
11/30/2009 5:55:58 PM
YER\WMPLAYER.EXE
11/30/2009 5:55:25 PM
YER\WMPLAYER.EXE
11/30/2009 4:37:49 PM
YER\WMPLAYER.EXE
11/30/2009 4:37:48 PM
YER\WMPLAYER.EXE
11/30/2009 4:37:45 PM
YER\WMPLAYER.EXE
11/30/2009 4:37:44 PM
YER\WMPLAYER.EXE
11/30/2009 4:13:00 PM
YER\WMPLAYER.EXE
11/30/2009 4:12:59 PM
YER\WMPLAYER.EXE
11/30/2009 4:12:56 PM
YER\WMPLAYER.EXE
11/30/2009 4:12:55 PM
YER\WMPLAYER.EXE
11/30/2009 3:33:59 PM
YER\WMPLAYER.EXE
11/30/2009 3:33:53 PM
YER\WMPLAYER.EXE
11/30/2009 3:33:29 PM
YER\WMPLAYER.EXE

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

11/30/2009 3:33:24 PM
YER\WMPLAYER.EXE
11/30/2009 3:33:12 PM
YER\WMPLAYER.EXE
11/30/2009 3:33:02 PM
YER\WMPLAYER.EXE
11/28/2009 7:37:09 AM
YER\WMPLAYER.EXE
11/28/2009 6:25:06 AM
YER\WMPLAYER.EXE
11/28/2009 6:15:27 AM
YER\WMPLAYER.EXE
11/28/2009 5:40:30 AM
YER\WMPLAYER.EXE
11/28/2009 5:40:19 AM
YER\WMPLAYER.EXE
11/28/2009 5:40:16 AM
YER\WMPLAYER.EXE
11/28/2009 12:32:48 AM
YER\WMPLAYER.EXE
11/28/2009 12:32:46 AM
YER\WMPLAYER.EXE
11/28/2009 12:17:09 AM
YER\WMPLAYER.EXE
11/27/2009 11:33:02 PM
YER\WMPLAYER.EXE
11/27/2009 11:32:57 PM
YER\WMPLAYER.EXE
11/27/2009 10:51:01 PM
YER\WMPLAYER.EXE
11/27/2009 10:50:55 PM
YER\WMPLAYER.EXE
11/27/2009 10:50:51 PM
YER\WMPLAYER.EXE
11/27/2009 10:50:37 PM
YER\WMPLAYER.EXE
11/27/2009 10:50:35 PM
YER\WMPLAYER.EXE
11/24/2009 2:52:57 PM
YER\WMPLAYER.EXE
11/24/2009 2:52:55 PM
YER\WMPLAYER.EXE
11/24/2009 2:52:26 PM
YER\WMPLAYER.EXE
11/24/2009 2:52:25 PM
YER\WMPLAYER.EXE
11/24/2009 2:51:57 PM
YER\WMPLAYER.EXE
11/24/2009 2:51:55 PM
YER\WMPLAYER.EXE
11/24/2009 2:51:26 PM
YER\WMPLAYER.EXE
11/24/2009 2:51:25 PM
YER\WMPLAYER.EXE
11/24/2009 2:50:57 PM
YER\WMPLAYER.EXE
11/24/2009 2:50:55 PM
YER\WMPLAYER.EXE
11/24/2009 2:50:26 PM
YER\WMPLAYER.EXE

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

11/24/2009 2:50:25
YER\WMPLAYER.EXE
11/24/2009 2:49:57
YER\WMPLAYER.EXE
11/24/2009 2:49:55
YER\WMPLAYER.EXE
11/24/2009 2:49:26
YER\WMPLAYER.EXE
11/24/2009 2:49:25
YER\WMPLAYER.EXE
11/24/2009 2:48:57
YER\WMPLAYER.EXE
11/24/2009 2:48:55
YER\WMPLAYER.EXE
11/24/2009 2:48:27
YER\WMPLAYER.EXE
11/24/2009 2:48:25
YER\WMPLAYER.EXE
11/24/2009 2:47:57
YER\WMPLAYER.EXE
11/24/2009 2:47:55
YER\WMPLAYER.EXE
11/24/2009 2:47:27
YER\WMPLAYER.EXE
11/24/2009 2:47:25
YER\WMPLAYER.EXE
11/24/2009 2:47:02
YER\WMPLAYER.EXE
11/24/2009 2:46:55
YER\WMPLAYER.EXE
11/24/2009 2:46:30
YER\WMPLAYER.EXE
11/24/2009 2:46:25
YER\WMPLAYER.EXE
11/24/2009 2:46:02
YER\WMPLAYER.EXE
11/24/2009 2:45:26
YER\WMPLAYER.EXE
11/22/2009 5:15:22
YER\WMPLAYER.EXE
11/22/2009 4:19:58
YER\WMPLAYER.EXE
11/21/2009 7:30:21
YER\WMPLAYER.EXE
11/21/2009 7:30:20
YER\WMPLAYER.EXE
11/21/2009 7:30:04
YER\WMPLAYER.EXE
11/21/2009 7:30:03
YER\WMPLAYER.EXE
11/21/2009 7:29:34
YER\WMPLAYER.EXE
11/21/2009 7:29:33
YER\WMPLAYER.EXE
11/21/2009 7:29:04
YER\WMPLAYER.EXE
11/21/2009 7:29:03
YER\WMPLAYER.EXE
11/21/2009 7:28:34
YER\WMPLAYER.EXE

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

11/21/2009 7:28:33 PM
YER\WMPLAYER.EXE
11/21/2009 7:28:04 PM
YER\WMPLAYER.EXE
11/21/2009 7:28:03 PM
YER\WMPLAYER.EXE
11/21/2009 7:27:35 PM
YER\WMPLAYER.EXE
11/21/2009 7:27:33 PM
YER\WMPLAYER.EXE
11/21/2009 7:27:06 PM
YER\WMPLAYER.EXE
11/21/2009 7:27:03 PM
YER\WMPLAYER.EXE
11/21/2009 7:26:39 PM
YER\WMPLAYER.EXE
11/21/2009 7:26:33 PM
YER\WMPLAYER.EXE
11/21/2009 7:26:23 PM
YER\WMPLAYER.EXE
11/21/2009 7:26:03 PM
YER\WMPLAYER.EXE
11/21/2009 7:25:59 PM
YER\WMPLAYER.EXE
11/21/2009 7:25:40 PM
YER\WMPLAYER.EXE
11/21/2009 12:33:24 PM
YER\WMPLAYER.EXE
11/21/2009 12:33:16 PM
YER\WMPLAYER.EXE
11/20/2009 12:00:37 PM
YER\WMPLAYER.EXE
11/20/2009 12:00:34 PM
YER\WMPLAYER.EXE
11/20/2009 12:00:26 PM
YER\WMPLAYER.EXE
11/20/2009 12:00:05 PM
YER\WMPLAYER.EXE
11/19/2009 7:53:28 PM
YER\WMPLAYER.EXE
11/19/2009 7:53:27 PM
YER\WMPLAYER.EXE
11/19/2009 7:53:12 PM
YER\WMPLAYER.EXE
11/19/2009 7:53:08 PM
YER\WMPLAYER.EXE
11/19/2009 7:53:00 PM
YER\WMPLAYER.EXE
11/19/2009 7:52:58 PM
YER\WMPLAYER.EXE
11/19/2009 3:46:32 PM
YER\WMPLAYER.EXE
11/19/2009 3:46:27 PM
YER\WMPLAYER.EXE
11/19/2009 4:30:13 AM
YER\WMPLAYER.EXE
11/19/2009 4:30:10 AM
YER\WMPLAYER.EXE
11/19/2009 4:29:39 AM
YER\WMPLAYER.EXE

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

11/19/2009 4:29:36
YER\WMPLAYER.EXE
11/19/2009 4:29:25
YER\WMPLAYER.EXE
11/19/2009 4:29:12
YER\WMPLAYER.EXE
11/19/2009 4:28:48
YER\WMPLAYER.EXE
11/19/2009 4:28:36
YER\WMPLAYER.EXE
11/19/2009 4:28:10
YER\WMPLAYER.EXE
11/19/2009 4:28:06
YER\WMPLAYER.EXE
11/18/2009 7:24:38
YER\WMPLAYER.EXE
11/18/2009 7:24:37
YER\WMPLAYER.EXE
11/18/2009 7:24:27
YER\WMPLAYER.EXE
11/18/2009 7:24:20
YER\WMPLAYER.EXE
11/18/2009 7:23:52
YER\WMPLAYER.EXE
11/18/2009 7:23:50
YER\WMPLAYER.EXE
11/18/2009 7:23:21
YER\WMPLAYER.EXE
11/18/2009 7:23:20
YER\WMPLAYER.EXE
11/18/2009 7:22:52
YER\WMPLAYER.EXE
11/18/2009 7:22:50
YER\WMPLAYER.EXE
11/18/2009 7:22:21
YER\WMPLAYER.EXE
11/18/2009 7:22:20
YER\WMPLAYER.EXE
11/18/2009 7:21:52
YER\WMPLAYER.EXE
11/18/2009 7:21:50
YER\WMPLAYER.EXE
11/18/2009 7:21:21
YER\WMPLAYER.EXE
11/18/2009 7:21:20
YER\WMPLAYER.EXE
11/18/2009 7:20:53
YER\WMPLAYER.EXE
11/18/2009 7:20:50
YER\WMPLAYER.EXE
11/18/2009 7:20:21
YER\WMPLAYER.EXE
11/18/2009 7:20:20
YER\WMPLAYER.EXE
11/18/2009 7:19:52
YER\WMPLAYER.EXE
11/18/2009 7:19:50
YER\WMPLAYER.EXE
11/18/2009 7:19:21
YER\WMPLAYER.EXE

AM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

AM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

AM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

AM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

AM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

AM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

AM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

11/18/2009 7:19:20
YER\WMPLAYER.EXE
11/18/2009 7:18:51
YER\WMPLAYER.EXE
11/18/2009 7:18:50
YER\WMPLAYER.EXE
11/18/2009 7:18:21
YER\WMPLAYER.EXE
11/18/2009 7:18:20
YER\WMPLAYER.EXE
11/18/2009 7:17:52
YER\WMPLAYER.EXE
11/18/2009 7:17:50
YER\WMPLAYER.EXE
11/18/2009 7:17:44
YER\WMPLAYER.EXE
11/18/2009 7:17:32
YER\WMPLAYER.EXE
11/18/2009 7:16:55
YER\WMPLAYER.EXE
11/18/2009 7:16:21
YER\WMPLAYER.EXE
11/18/2009 5:57:54
YER\WMPLAYER.EXE
11/18/2009 5:57:50
YER\WMPLAYER.EXE
11/18/2009 5:57:49
YER\WMPLAYER.EXE
11/18/2009 5:57:47
YER\WMPLAYER.EXE
11/18/2009 5:56:00
YER\WMPLAYER.EXE
11/18/2009 5:55:59
YER\WMPLAYER.EXE
11/18/2009 5:39:13
YER\WMPLAYER.EXE
11/18/2009 5:39:13
YER\WMPLAYER.EXE
11/18/2009 5:39:13
YER\WMPLAYER.EXE
11/18/2009 5:39:10
YER\WMPLAYER.EXE
11/18/2009 5:35:48
YER\WMPLAYER.EXE
11/18/2009 5:35:47
YER\WMPLAYER.EXE
11/18/2009 5:35:45
YER\WMPLAYER.EXE
11/18/2009 5:35:42
YER\WMPLAYER.EXE
11/18/2009 5:35:09
YER\WMPLAYER.EXE
11/18/2009 5:35:08
YER\WMPLAYER.EXE
11/18/2009 5:34:50
YER\WMPLAYER.EXE
11/18/2009 5:34:49
YER\WMPLAYER.EXE
11/18/2009 5:34:46
YER\WMPLAYER.EXE

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

PM

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

11/18/2009 5:34:44 PM
YER\WMPLAYER.EXE
11/18/2009 5:29:40 PM
YER\WMPLAYER.EXE
11/18/2009 5:29:36 PM
YER\WMPLAYER.EXE
11/18/2009 5:29:28 PM
YER\WMPLAYER.EXE
11/18/2009 5:29:25 PM
YER\WMPLAYER.EXE
11/18/2009 5:29:20 PM
YER\WMPLAYER.EXE
11/18/2009 5:29:18 PM
YER\WMPLAYER.EXE
11/18/2009 4:32:03 PM
YER\WMPLAYER.EXE
11/18/2009 4:32:00 PM
YER\WMPLAYER.EXE
11/18/2009 12:51:18 PM
YER\WMPLAYER.EXE
11/18/2009 12:51:16 PM
YER\WMPLAYER.EXE
11/18/2009 12:50:59 PM
YER\WMPLAYER.EXE
11/18/2009 12:50:56 PM
YER\WMPLAYER.EXE
11/18/2009 11:25:44 AM
YER\WMPLAYER.EXE
11/18/2009 11:25:43 AM
YER\WMPLAYER.EXE
11/18/2009 11:25:14 AM
YER\WMPLAYER.EXE
11/18/2009 11:25:13 AM
YER\WMPLAYER.EXE
11/18/2009 11:24:44 AM
YER\WMPLAYER.EXE
11/18/2009 11:24:43 AM
YER\WMPLAYER.EXE
11/18/2009 11:24:14 AM
YER\WMPLAYER.EXE
11/18/2009 11:24:13 AM
YER\WMPLAYER.EXE
11/18/2009 11:23:45 AM
YER\WMPLAYER.EXE
11/18/2009 11:23:43 AM
YER\WMPLAYER.EXE
11/18/2009 11:23:14 AM
YER\WMPLAYER.EXE
11/18/2009 11:23:13 AM
YER\WMPLAYER.EXE
11/18/2009 11:22:44 AM
YER\WMPLAYER.EXE
11/18/2009 11:22:43 AM
YER\WMPLAYER.EXE
11/18/2009 11:22:14 AM
YER\WMPLAYER.EXE
11/18/2009 11:22:13 AM
YER\WMPLAYER.EXE
11/18/2009 11:21:44 AM
YER\WMPLAYER.EXE

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

11/18/2009 11:21:43 AM
YER\WMPLAYER.EXE
11/18/2009 11:21:14 AM
YER\WMPLAYER.EXE
11/18/2009 11:21:13 AM
YER\WMPLAYER.EXE
11/18/2009 11:20:45 AM
YER\WMPLAYER.EXE
11/18/2009 11:20:43 AM
YER\WMPLAYER.EXE
11/18/2009 11:20:14 AM
YER\WMPLAYER.EXE
11/18/2009 11:20:13 AM
YER\WMPLAYER.EXE
11/18/2009 11:19:44 AM
YER\WMPLAYER.EXE
11/18/2009 11:19:43 AM
YER\WMPLAYER.EXE
11/18/2009 11:19:15 AM
YER\WMPLAYER.EXE
11/18/2009 11:19:13 AM
YER\WMPLAYER.EXE
11/18/2009 11:18:42 AM
YER\WMPLAYER.EXE
11/18/2009 11:18:38 AM
YER\WMPLAYER.EXE
11/18/2009 10:17:27 AM
YER\WMPLAYER.EXE
11/18/2009 10:17:26 AM
YER\WMPLAYER.EXE
11/18/2009 10:16:57 AM
YER\WMPLAYER.EXE
11/18/2009 10:16:56 AM
YER\WMPLAYER.EXE
11/18/2009 10:16:27 AM
YER\WMPLAYER.EXE
11/18/2009 10:16:26 AM
YER\WMPLAYER.EXE
11/18/2009 10:15:57 AM
YER\WMPLAYER.EXE
11/18/2009 10:15:56 AM
YER\WMPLAYER.EXE
11/18/2009 10:15:27 AM
YER\WMPLAYER.EXE
11/18/2009 10:15:26 AM
YER\WMPLAYER.EXE
11/18/2009 10:15:18 AM
YER\WMPLAYER.EXE
11/18/2009 10:15:16 AM
YER\WMPLAYER.EXE
11/17/2009 10:33:16 PM
YER\WMPLAYER.EXE
11/17/2009 10:33:13 PM
YER\WMPLAYER.EXE
11/17/2009 6:10:34 PM
YER\WMPLAYER.EXE
11/17/2009 6:10:30 PM
YER\WMPLAYER.EXE
11/17/2009 3:11:05 PM
YER\WMPLAYER.EXE

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

11/17/2009 3:11:01 PM
YER\WMPLAYER.EXE
11/17/2009 2:49:10 PM
YER\WMPLAYER.EXE
11/17/2009 2:49:07 PM
YER\WMPLAYER.EXE
dfsvc.exe (events: 7)
12/6/2009 4:22:46 AM
12/6/2009 4:22:40 AM
11/25/2009 4:34:32 AM
11/25/2009 4:34:30 AM
11/24/2009 3:57:26 AM
11/24/2009 3:57:24 AM
dfsvc.exe (events: 7)
12/2/2009 8:39:27 PM
12/2/2009 8:39:27 PM
12/2/2009 8:38:38 PM
12/2/2009 8:38:38 PM
11/28/2009 6:25:20 AM
11/28/2009 6:25:20 AM
11/28/2009 6:25:20 AM
11/28/2009 6:25:20 AM
11/28/2009 6:25:20 AM
11/28/2009 6:25:20 AM
11/28/2009 6:25:20 AM
11/28/2009 6:25:20 AM
11/28/2009 6:25:20 AM
11/28/2009 6:25:20 AM
11/28/2009 6:25:20 AM
11/28/2009 6:25:20 AM
11/28/2009 6:25:20 AM
11/28/2009 6:25:20 AM
11/28/2009 6:25:20 AM
11/28/2009 6:25:20 AM
11/28/2009 6:25:20 AM
11/28/2009 6:25:19 AM
11/28/2009 6:25:19 AM
11/28/2009 6:25:19 AM
11/28/2009 6:25:19 AM
11/28/2009 6:25:19 AM
11/28/2009 6:25:19 AM
11/28/2009 6:25:19 AM
11/28/2009 6:25:19 AM
11/28/2009 6:25:19 AM
11/28/2009 6:25:19 AM
11/28/2009 6:25:19 AM
11/28/2009 6:25:19 AM
11/28/2009 6:25:19 AM
11/28/2009 6:25:19 AM
11/28/2009 6:25:19 AM
11/28/2009 6:25:18 AM
11/28/2009 6:25:18 AM
11/28/2009 6:25:18 AM
11/28/2009 6:25:18 AM
11/28/2009 6:25:18 AM
11/28/2009 6:25:18 AM
11/28/2009 6:25:18 AM
11/28/2009 6:25:18 AM
11/28/2009 6:25:18 AM
11/28/2009 6:25:18 AM

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start

C:\WINDOWS\system32\CONSENT.EXE
C:\WINDOWS\system32\CONSENT.EXE
C:\WINDOWS\system32\CONSENT.EXE
C:\WINDOWS\system32\CONSENT.EXE
C:\WINDOWS\system32\CONSENT.EXE
C:\WINDOWS\system32\CONSENT.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE

11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009

6:25:18
6:25:18
6:25:18
6:25:18
6:25:17
6:25:17
6:25:17
6:25:17
6:25:17
6:25:17
6:25:17
6:25:17
6:25:17
6:25:17
6:25:17
6:25:17
6:25:17
6:25:17
6:25:16
6:25:16
6:25:16
6:25:16
6:25:16
6:25:16
6:25:16
6:25:16
6:25:16
6:25:16
6:25:16
6:25:16
6:25:16
6:25:16
6:25:15
6:25:15
6:25:15
6:25:15
6:25:15
6:25:15
5:40:45
5:40:45
5:40:45
5:40:45
5:40:45
5:40:45
5:40:45
5:40:45
5:40:45
5:40:45
5:40:45
5:40:45
5:40:45
5:40:45
5:40:45
5:40:45
5:40:45
5:40:45
5:40:45
5:40:45
5:40:45
5:40:45

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE

11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009

5:40:45
5:40:45
5:40:45
5:40:45
5:40:45
5:40:44
5:40:44
5:40:44
5:40:44
5:40:44
5:40:44
5:40:44
5:40:44
5:40:44
5:40:44
5:40:44
5:40:44
5:40:44
5:40:44
5:40:44
5:40:44
5:40:44
5:40:44
5:40:44
5:40:44
5:40:44
5:40:43
5:40:43
5:40:43
5:40:43
5:40:43
5:40:43
5:40:43
5:40:43
5:40:43
5:40:43
5:40:43
5:40:43
5:40:43
5:40:43
5:40:43
5:40:43
5:40:43
5:40:43
5:40:42
5:40:42
5:40:42
5:40:42
5:40:42
5:40:42
5:40:42
5:40:42
5:40:42
5:40:42
5:40:42
5:40:42
5:40:42
5:40:42
5:40:42
5:40:42

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE

11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009

5:40:42 AM
5:40:42 AM
5:40:42 AM
5:40:42 AM
5:40:42 AM
5:40:41 AM
5:40:41 AM
5:40:41 AM
5:40:41 AM
5:40:41 AM
5:40:41 AM
5:40:41 AM
5:40:41 AM
5:40:41 AM
5:40:41 AM
5:40:41 AM
5:40:41 AM
5:40:41 AM
5:40:41 AM
5:40:41 AM
5:40:41 AM
5:40:41 AM
5:40:41 AM
5:40:41 AM
5:40:40 AM
5:40:40 AM
5:40:40 AM
5:40:40 AM
5:40:40 AM
5:40:40 AM
5:40:40 AM
5:40:40 AM
5:40:39 AM
5:40:39 AM
5:40:39 AM
5:40:39 AM
5:40:39 AM
5:40:39 AM
11:33:39 PM
11:33:39 PM
11:33:38 PM
11:33:38 PM
11:33:38 PM
11:33:38 PM
11:33:38 PM
11:33:38 PM
11:33:37 PM
11:33:37 PM
11:33:37 PM
11:33:37 PM
11:33:37 PM
11:33:37 PM
11:33:36 PM
11:33:36 PM
11:33:36 PM
11:33:36 PM
11:33:36 PM
11:33:36 PM
11:33:35 PM
11:33:35 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE

11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009

11:33:35
11:33:35
11:33:35
11:33:35
11:33:35
11:33:35
11:33:34
11:33:34
11:33:34
11:33:34
11:33:34
11:33:34
11:33:33
11:33:33
11:33:33
11:33:33
11:33:33
11:33:33
11:33:33
11:33:33
11:33:32
11:33:32
11:33:32
11:33:32
11:33:32
11:33:32
11:33:32
11:33:32
11:33:31
11:33:31
11:33:30
11:33:30
11:33:30
11:33:30
11:33:30
11:33:30
11:33:29
11:33:29
11:33:29
11:33:29
11:33:29
11:33:29
11:33:28
11:33:28
11:33:28
11:33:28
10:52:10
10:52:10
10:52:09
10:52:09
10:52:08
10:52:08
10:52:08
10:52:08
10:52:07
10:52:07
10:52:06
10:52:06
10:52:06
10:52:06

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE

11/27/2009 10:52:05 PM
11/27/2009 10:52:05 PM
11/27/2009 10:52:05 PM
11/27/2009 10:52:05 PM
11/27/2009 10:52:04 PM
11/27/2009 10:52:04 PM
11/27/2009 10:52:03 PM
11/27/2009 10:52:03 PM
11/27/2009 10:52:03 PM
11/27/2009 10:52:03 PM
11/27/2009 10:52:02 PM
11/27/2009 10:52:02 PM
11/27/2009 10:52:01 PM
11/27/2009 10:52:01 PM
11/27/2009 10:52:01 PM
11/27/2009 10:52:01 PM
11/27/2009 10:52:00 PM
11/27/2009 10:52:00 PM
11/27/2009 10:51:59 PM
11/27/2009 10:51:59 PM
11/27/2009 10:51:59 PM
11/27/2009 10:51:59 PM
11/27/2009 10:51:59 PM
11/27/2009 10:51:59 PM
11/27/2009 10:51:58 PM
11/27/2009 10:51:58 PM
11/27/2009 10:51:58 PM
11/27/2009 10:51:58 PM
11/27/2009 10:51:57 PM
11/27/2009 10:51:57 PM
11/27/2009 10:51:56 PM
11/27/2009 10:51:56 PM
11/27/2009 10:51:56 PM
11/27/2009 10:51:56 PM
11/27/2009 10:51:55 PM
11/27/2009 10:51:55 PM
11/27/2009 10:51:54 PM
11/27/2009 10:51:54 PM
11/27/2009 10:51:53 PM
11/27/2009 10:51:53 PM
11/27/2009 10:51:52 PM
11/27/2009 10:51:52 PM
11/27/2009 10:51:52 PM
11/27/2009 10:51:52 PM
11/27/2009 10:51:51 PM
11/27/2009 10:51:51 PM
11/27/2009 10:51:51 PM
11/27/2009 10:51:51 PM
11/27/2009 10:51:50 PM
11/27/2009 10:51:50 PM
11/27/2009 10:51:50 PM
11/27/2009 10:51:50 PM
11/27/2009 10:51:43 PM
11/27/2009 10:51:43 PM
11/17/2009 10:33:18 PM
11/17/2009 10:33:18 PM
dfsvc.exe (events: 7)
12/16/2009 7:03:43 AM
0.50727\CSC.EXE
12/16/2009 7:03:43 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE
C:\WINDOWS\system32\VERCLSID.EXE

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

0.50727\CSC.EXE
12/16/2009 7:03:34 AM
0.50727\CSC.EXE
12/16/2009 7:03:33 AM
0.50727\CSC.EXE
12/14/2009 4:11:32 PM
0.50727\CSC.EXE
12/14/2009 4:11:30 PM
0.50727\CSC.EXE
12/14/2009 4:11:25 PM
0.50727\CSC.EXE
12/14/2009 4:11:02 PM
0.50727\CSC.EXE
12/10/2009 2:43:54 PM
0.50727\CSC.EXE
12/10/2009 2:43:54 PM
0.50727\CSC.EXE
12/10/2009 2:43:46 PM
0.50727\CSC.EXE
12/10/2009 2:43:45 PM
0.50727\CSC.EXE
12/10/2009 4:50:57 AM
0.50727\CSC.EXE
12/10/2009 4:50:56 AM
0.50727\CSC.EXE
12/10/2009 4:50:53 AM
0.50727\CSC.EXE
12/10/2009 4:50:52 AM
0.50727\CSC.EXE
12/10/2009 4:10:41 AM
0.50727\CSC.EXE
12/10/2009 4:10:40 AM
0.50727\CSC.EXE
12/10/2009 4:10:26 AM
0.50727\CSC.EXE
12/10/2009 4:10:23 AM
0.50727\CSC.EXE
12/9/2009 3:25:38 AM
0.50727\CSC.EXE
12/9/2009 3:25:38 AM
0.50727\CSC.EXE
12/9/2009 3:25:31 AM
0.50727\CSC.EXE
12/9/2009 3:25:30 AM
0.50727\CSC.EXE
12/8/2009 1:22:45 PM
0.50727\CSC.EXE
12/8/2009 1:22:44 PM
0.50727\CSC.EXE
12/8/2009 1:22:39 PM
0.50727\CSC.EXE
12/8/2009 1:22:36 PM
0.50727\CSC.EXE
12/6/2009 12:49:28 AM
0.50727\CSC.EXE
12/6/2009 12:49:27 AM
0.50727\CSC.EXE
12/6/2009 12:49:22 AM
0.50727\CSC.EXE
12/6/2009 12:49:19 AM

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

0.50727\CSC.EXE
12/5/2009 2:24:57 AM
0.50727\CSC.EXE
12/5/2009 2:24:56 AM
0.50727\CSC.EXE
12/4/2009 6:53:15 PM
0.50727\CSC.EXE
12/4/2009 6:53:15 PM
0.50727\CSC.EXE
12/4/2009 6:53:06 PM
0.50727\CSC.EXE
12/4/2009 6:53:05 PM
0.50727\CSC.EXE
12/3/2009 4:09:31 AM
0.50727\CSC.EXE
12/3/2009 4:09:30 AM
0.50727\CSC.EXE
12/3/2009 4:09:21 AM
0.50727\CSC.EXE
12/3/2009 4:09:13 AM
0.50727\CSC.EXE
12/2/2009 7:39:05 PM
0.50727\CSC.EXE
12/2/2009 7:39:05 PM
0.50727\CSC.EXE
12/2/2009 7:39:00 PM
0.50727\CSC.EXE
12/2/2009 7:38:45 PM
0.50727\CSC.EXE
12/1/2009 3:16:24 AM
0.50727\CSC.EXE
12/1/2009 3:16:23 AM
0.50727\CSC.EXE
12/1/2009 3:16:16 AM
0.50727\CSC.EXE
12/1/2009 3:16:14 AM
0.50727\CSC.EXE
11/30/2009 7:36:15 PM
0.50727\CSC.EXE
11/30/2009 7:36:15 PM
0.50727\CSC.EXE
11/30/2009 7:36:06 PM
0.50727\CSC.EXE
11/30/2009 7:36:05 PM
0.50727\CSC.EXE
11/30/2009 5:57:30 PM
0.50727\CSC.EXE
11/30/2009 5:57:30 PM
0.50727\CSC.EXE
11/30/2009 5:57:25 PM
0.50727\CSC.EXE
11/30/2009 5:57:20 PM
0.50727\CSC.EXE
11/30/2009 3:34:30 PM
0.50727\CSC.EXE
11/30/2009 3:34:27 PM
0.50727\CSC.EXE
11/30/2009 3:34:09 PM
0.50727\CSC.EXE
11/30/2009 3:33:58 PM

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

0.50727\CSC.EXE
11/26/2009 3:21:23 AM
0.50727\CSC.EXE
11/26/2009 3:21:23 AM
0.50727\CSC.EXE
11/26/2009 3:21:18 AM
0.50727\CSC.EXE
11/26/2009 3:21:14 AM
0.50727\CSC.EXE
11/24/2009 2:47:32 PM
0.50727\CSC.EXE
11/24/2009 2:47:32 PM
0.50727\CSC.EXE
11/24/2009 2:47:27 PM
0.50727\CSC.EXE
11/24/2009 2:46:53 PM
0.50727\CSC.EXE
11/21/2009 7:27:29 PM
0.50727\CSC.EXE
11/21/2009 7:27:28 PM
0.50727\CSC.EXE
11/21/2009 7:27:21 PM
0.50727\CSC.EXE
11/21/2009 7:27:10 PM
0.50727\CSC.EXE
11/21/2009 12:33:57 PM
0.50727\CSC.EXE
11/21/2009 12:33:55 PM
0.50727\CSC.EXE
11/21/2009 12:33:46 PM
0.50727\CSC.EXE
11/21/2009 12:33:31 PM
0.50727\CSC.EXE
11/20/2009 12:01:12 PM
0.50727\CSC.EXE
11/20/2009 12:01:10 PM
0.50727\CSC.EXE
11/20/2009 12:01:03 PM
0.50727\CSC.EXE
11/20/2009 12:00:54 PM
0.50727\CSC.EXE
11/19/2009 4:30:15 AM
0.50727\CSC.EXE
11/19/2009 4:30:14 AM
0.50727\CSC.EXE
11/19/2009 4:30:00 AM
0.50727\CSC.EXE
11/19/2009 4:29:48 AM
0.50727\CSC.EXE
11/18/2009 7:17:22 PM
0.50727\CSC.EXE
11/18/2009 7:17:16 PM
0.50727\CSC.EXE
11/18/2009 7:17:05 PM
0.50727\CSC.EXE
11/18/2009 7:16:56 PM
0.50727\CSC.EXE
11/18/2009 12:51:07 PM
0.50727\CSC.EXE
11/18/2009 12:51:05 PM

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

0.50727\CSC.EXE
11/18/2009 11:18:36 AM
0.50727\CSC.EXE
11/18/2009 11:18:27 AM
0.50727\CSC.EXE
11/17/2009 10:33:56 PM
0.50727\CSC.EXE
11/17/2009 10:33:56 PM
0.50727\CSC.EXE
11/17/2009 10:33:46 PM
0.50727\CSC.EXE
11/17/2009 10:33:35 PM
0.50727\CSC.EXE
dfsvc.exe (events: 7)
12/16/2009 7:03:43 AM
0.50727\CVTRES.EXE
12/16/2009 7:03:43 AM
0.50727\CVTRES.EXE
12/16/2009 7:03:34 AM
0.50727\CVTRES.EXE
12/16/2009 7:03:34 AM
0.50727\CVTRES.EXE
12/14/2009 4:11:30 PM
0.50727\CVTRES.EXE
12/14/2009 4:11:30 PM
0.50727\CVTRES.EXE
12/14/2009 4:11:25 PM
0.50727\CVTRES.EXE
12/14/2009 4:11:14 PM
0.50727\CVTRES.EXE
12/10/2009 2:43:54 PM
0.50727\CVTRES.EXE
12/10/2009 2:43:54 PM
0.50727\CVTRES.EXE
12/10/2009 2:43:46 PM
0.50727\CVTRES.EXE
12/10/2009 2:43:46 PM
0.50727\CVTRES.EXE
12/10/2009 4:50:57 AM
0.50727\CVTRES.EXE
12/10/2009 4:50:57 AM
0.50727\CVTRES.EXE
12/10/2009 4:50:53 AM
0.50727\CVTRES.EXE
12/10/2009 4:50:53 AM
0.50727\CVTRES.EXE
12/10/2009 4:10:41 AM
0.50727\CVTRES.EXE
12/10/2009 4:10:41 AM
0.50727\CVTRES.EXE
12/10/2009 4:10:26 AM
0.50727\CVTRES.EXE
12/10/2009 4:10:26 AM
0.50727\CVTRES.EXE
12/9/2009 3:25:38 AM
0.50727\CVTRES.EXE
12/9/2009 3:25:38 AM
0.50727\CVTRES.EXE
12/9/2009 3:25:31 AM
0.50727\CVTRES.EXE

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

12/9/2009 3:25:31 AM
0.50727\CVTRES.EXE
12/8/2009 1:22:45 PM
0.50727\CVTRES.EXE
12/8/2009 1:22:44 PM
0.50727\CVTRES.EXE
12/8/2009 1:22:39 PM
0.50727\CVTRES.EXE
12/8/2009 1:22:39 PM
0.50727\CVTRES.EXE
12/6/2009 12:49:28 AM
0.50727\CVTRES.EXE
12/6/2009 12:49:28 AM
0.50727\CVTRES.EXE
12/6/2009 12:49:22 AM
0.50727\CVTRES.EXE
12/6/2009 12:49:22 AM
0.50727\CVTRES.EXE
12/5/2009 2:24:57 AM
0.50727\CVTRES.EXE
12/5/2009 2:24:57 AM
0.50727\CVTRES.EXE
12/4/2009 6:53:15 PM
0.50727\CVTRES.EXE
12/4/2009 6:53:15 PM
0.50727\CVTRES.EXE
12/4/2009 6:53:06 PM
0.50727\CVTRES.EXE
12/4/2009 6:53:06 PM
0.50727\CVTRES.EXE
12/3/2009 4:09:31 AM
0.50727\CVTRES.EXE
12/3/2009 4:09:31 AM
0.50727\CVTRES.EXE
12/3/2009 4:09:21 AM
0.50727\CVTRES.EXE
12/3/2009 4:09:21 AM
0.50727\CVTRES.EXE
12/2/2009 7:39:05 PM
0.50727\CVTRES.EXE
12/2/2009 7:39:05 PM
0.50727\CVTRES.EXE
12/2/2009 7:39:00 PM
0.50727\CVTRES.EXE
12/2/2009 7:38:58 PM
0.50727\CVTRES.EXE
12/1/2009 3:16:24 AM
0.50727\CVTRES.EXE
12/1/2009 3:16:24 AM
0.50727\CVTRES.EXE
12/1/2009 3:16:16 AM
0.50727\CVTRES.EXE
12/1/2009 3:16:15 AM
0.50727\CVTRES.EXE
11/30/2009 7:36:15 PM
0.50727\CVTRES.EXE
11/30/2009 7:36:15 PM
0.50727\CVTRES.EXE
11/30/2009 7:36:06 PM
0.50727\CVTRES.EXE

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

11/30/2009 7:36:06 PM
0.50727\CVTRES.EXE
11/30/2009 5:57:30 PM
0.50727\CVTRES.EXE
11/30/2009 5:57:30 PM
0.50727\CVTRES.EXE
11/30/2009 5:57:25 PM
0.50727\CVTRES.EXE
11/30/2009 5:57:24 PM
0.50727\CVTRES.EXE
11/30/2009 3:34:30 PM
0.50727\CVTRES.EXE
11/30/2009 3:34:30 PM
0.50727\CVTRES.EXE
11/30/2009 3:34:09 PM
0.50727\CVTRES.EXE
11/30/2009 3:34:07 PM
0.50727\CVTRES.EXE
11/26/2009 3:21:23 AM
0.50727\CVTRES.EXE
11/26/2009 3:21:23 AM
0.50727\CVTRES.EXE
11/26/2009 3:21:18 AM
0.50727\CVTRES.EXE
11/26/2009 3:21:18 AM
0.50727\CVTRES.EXE
11/24/2009 2:47:32 PM
0.50727\CVTRES.EXE
11/24/2009 2:47:32 PM
0.50727\CVTRES.EXE
11/24/2009 2:47:27 PM
0.50727\CVTRES.EXE
11/24/2009 2:47:18 PM
0.50727\CVTRES.EXE
11/21/2009 7:27:29 PM
0.50727\CVTRES.EXE
11/21/2009 7:27:29 PM
0.50727\CVTRES.EXE
11/21/2009 7:27:21 PM
0.50727\CVTRES.EXE
11/21/2009 7:27:21 PM
0.50727\CVTRES.EXE
11/21/2009 12:33:57 PM
0.50727\CVTRES.EXE
11/21/2009 12:33:57 PM
0.50727\CVTRES.EXE
11/21/2009 12:33:46 PM
0.50727\CVTRES.EXE
11/21/2009 12:33:42 PM
0.50727\CVTRES.EXE
11/20/2009 12:01:12 PM
0.50727\CVTRES.EXE
11/20/2009 12:01:12 PM
0.50727\CVTRES.EXE
11/20/2009 12:01:03 PM
0.50727\CVTRES.EXE
11/20/2009 12:00:59 PM
0.50727\CVTRES.EXE
11/19/2009 4:30:15 AM
0.50727\CVTRES.EXE

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

11/19/2009 4:30:15 AM
0.50727\CVTRES.EXE
11/19/2009 4:30:00 AM
0.50727\CVTRES.EXE
11/19/2009 4:29:57 AM
0.50727\CVTRES.EXE
11/18/2009 7:17:22 PM
0.50727\CVTRES.EXE
11/18/2009 7:17:22 PM
0.50727\CVTRES.EXE
11/18/2009 7:17:05 PM
0.50727\CVTRES.EXE
11/18/2009 7:17:02 PM
0.50727\CVTRES.EXE
11/18/2009 12:51:07 PM
0.50727\CVTRES.EXE
11/18/2009 12:51:05 PM
0.50727\CVTRES.EXE
11/18/2009 11:18:28 AM
0.50727\CVTRES.EXE
11/18/2009 11:18:28 AM
0.50727\CVTRES.EXE
11/17/2009 10:33:56 PM
0.50727\CVTRES.EXE
11/17/2009 10:33:56 PM
0.50727\CVTRES.EXE
11/17/2009 10:33:46 PM
0.50727\CVTRES.EXE
11/17/2009 10:33:46 PM
0.50727\CVTRES.EXE
dfsvc.exe (events: 7)
11/30/2009 7:35:36 PM
11/30/2009 7:34:37 PM
11/28/2009 5:40:31 AM
11/28/2009 5:40:28 AM
11/28/2009 5:40:18 AM
11/28/2009 5:40:17 AM
11/28/2009 5:40:17 AM
11/28/2009 5:40:16 AM
11/28/2009 5:40:16 AM
11/28/2009 5:40:15 AM
11/27/2009 11:51:52 PM
11/27/2009 11:51:19 PM
11/27/2009 11:51:09 PM
11/27/2009 11:51:08 PM
11/27/2009 11:51:08 PM
11/27/2009 11:51:04 PM
11/27/2009 11:51:04 PM
11/27/2009 11:51:03 PM
11/27/2009 10:50:52 PM
11/27/2009 10:50:48 PM
11/27/2009 10:50:37 PM
11/27/2009 10:50:36 PM
11/27/2009 10:50:36 PM
11/27/2009 10:50:35 PM
11/27/2009 10:50:35 PM
11/27/2009 10:50:33 PM
11/18/2009 5:57:49 PM
11/18/2009 5:57:48 PM
11/18/2009 5:57:48 PM

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process exit

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process start

C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE

exit
start
exit
start
exit
start
exit
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

11/18/2009 5:57:47 PM
11/18/2009 5:57:47 PM
11/18/2009 5:57:46 PM
11/18/2009 5:57:46 PM
11/18/2009 5:57:45 PM
11/18/2009 5:39:16 PM
11/18/2009 5:39:12 PM
11/18/2009 5:39:12 PM
11/18/2009 5:39:11 PM
11/18/2009 5:39:11 PM
11/18/2009 5:39:10 PM
11/18/2009 5:35:47 PM
11/18/2009 5:35:44 PM
11/18/2009 5:35:44 PM
11/18/2009 5:35:43 PM
11/18/2009 5:34:48 PM
11/18/2009 5:34:47 PM
11/18/2009 5:29:35 PM
11/18/2009 5:29:28 PM
11/18/2009 5:29:28 PM
11/18/2009 5:29:27 PM
11/18/2009 5:29:27 PM
11/18/2009 5:29:27 PM
11/18/2009 5:29:27 PM
11/18/2009 5:29:25 PM
11/18/2009 5:29:25 PM
11/18/2009 5:29:24 PM
11/18/2009 5:29:24 PM
11/18/2009 5:29:18 PM
11/18/2009 5:29:18 PM
11/18/2009 5:29:16 PM
dfsvc.exe (events: 7)
12/16/2009 7:00:13 AM
12/16/2009 7:00:13 AM
12/14/2009 3:47:53 PM
12/14/2009 3:47:53 PM
12/11/2009 4:27:25 PM
12/11/2009 4:27:20 PM
12/10/2009 2:22:49 PM
12/10/2009 2:22:49 PM
12/8/2009 9:15:52 PM
12/8/2009 9:15:52 PM
12/8/2009 11:34:16 AM
12/8/2009 11:34:16 AM
12/5/2009 7:28:55 PM
12/5/2009 7:28:55 PM
12/4/2009 10:43:14 PM
12/4/2009 10:43:14 PM
12/4/2009 4:27:48 PM
12/4/2009 4:27:48 PM
12/2/2009 8:42:06 PM
12/2/2009 8:42:06 PM
12/2/2009 7:37:51 PM
12/2/2009 7:37:01 PM
12/2/2009 3:43:09 PM
12/2/2009 3:43:08 PM
11/30/2009 8:00:28 PM
11/30/2009 8:00:28 PM
11/30/2009 6:55:13 PM
11/30/2009 6:55:13 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE
C:\WINDOWS\system32\DRVINST.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE

11/30/2009 5:53:07 PM
11/30/2009 5:53:07 PM
11/30/2009 10:18:17 AM
11/30/2009 10:18:17 AM
11/30/2009 5:17:40 AM
11/30/2009 5:17:39 AM
11/24/2009 2:41:31 PM
11/24/2009 2:41:31 PM
11/24/2009 1:27:45 PM
11/24/2009 1:27:43 PM
11/23/2009 4:26:10 AM
11/23/2009 4:25:58 AM
11/21/2009 7:11:45 PM
11/21/2009 7:11:45 PM
11/20/2009 6:59:00 PM
11/20/2009 6:59:00 PM
11/20/2009 9:52:54 AM
11/20/2009 9:52:53 AM
11/19/2009 7:52:57 PM
11/19/2009 7:52:54 PM
11/18/2009 7:43:44 PM
11/18/2009 7:43:44 PM
11/18/2009 6:03:03 PM
11/18/2009 6:03:02 PM
11/18/2009 12:25:19 PM
11/18/2009 12:25:19 PM
11/18/2009 10:34:53 AM
11/18/2009 10:34:53 AM
11/17/2009 6:17:47 PM
11/17/2009 6:17:47 PM
11/17/2009 6:17:47 PM
11/17/2009 6:17:47 PM
dfsvc.exe (events: 7)
12/15/2009 11:53:17 PM
12/15/2009 11:53:14 PM
12/1/2009 4:12:52 AM
12/1/2009 4:12:34 AM
12/1/2009 4:12:34 AM
12/1/2009 4:12:33 AM
12/1/2009 4:11:35 AM
12/1/2009 4:11:30 AM
12/1/2009 4:11:30 AM
12/1/2009 4:11:30 AM
11/28/2009 12:47:14 AM
11/28/2009 12:46:30 AM
11/28/2009 12:46:30 AM
11/28/2009 12:46:30 AM
11/27/2009 10:51:38 PM
11/27/2009 10:51:30 PM
11/27/2009 10:51:30 PM
11/27/2009 10:51:29 PM
11/21/2009 7:11:37 PM
11/21/2009 7:00:45 PM
11/21/2009 1:09:26 PM
11/21/2009 1:09:25 PM
dfsvc.exe (events: 7)
12/2/2009 7:39:18 PM
YER\SETUP_WM.EXE
12/2/2009 7:39:05 PM
YER\SETUP_WM.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE
C:\WINDOWS\system32\WERFAULT.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
start
exit
start

C:\WINDOWS\system32\SNDVOL.EXE
C:\WINDOWS\system32\SNDVOL.EXE
C:\WINDOWS\system32\SNDVOL.EXE
C:\WINDOWS\system32\SNDVOL.EXE
C:\WINDOWS\system32\SNDVOL.EXE
C:\WINDOWS\system32\SNDVOL.EXE
C:\WINDOWS\system32\SNDVOL.EXE
C:\WINDOWS\system32\SNDVOL.EXE
C:\WINDOWS\system32\SNDVOL.EXE
C:\WINDOWS\system32\SNDVOL.EXE
C:\WINDOWS\system32\SNDVOL.EXE
C:\WINDOWS\system32\SNDVOL.EXE
C:\WINDOWS\system32\SNDVOL.EXE
C:\WINDOWS\system32\SNDVOL.EXE
C:\WINDOWS\system32\SNDVOL.EXE
C:\WINDOWS\system32\SNDVOL.EXE
C:\WINDOWS\system32\SNDVOL.EXE
C:\WINDOWS\system32\SNDVOL.EXE
C:\WINDOWS\system32\SNDVOL.EXE
C:\WINDOWS\system32\SNDVOL.EXE
C:\WINDOWS\system32\SNDVOL.EXE
C:\WINDOWS\system32\SNDVOL.EXE

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

11/22/2009 4:20:34 PM
YER\SETUP_WM.EXE
11/22/2009 4:20:32 PM
YER\SETUP_WM.EXE
dfsvc.exe (events: 7)
12/16/2009 7:02:20 AM
PNETWK.EXE
12/14/2009 4:09:47 PM
PNETWK.EXE
12/10/2009 2:42:27 PM
PNETWK.EXE
12/10/2009 4:49:33 AM
PNETWK.EXE
12/10/2009 4:09:13 AM
PNETWK.EXE
12/9/2009 3:23:37 AM
PNETWK.EXE
12/8/2009 1:20:43 PM
PNETWK.EXE
12/6/2009 12:47:14 AM
PNETWK.EXE
12/5/2009 2:24:58 AM
PNETWK.EXE
12/4/2009 6:51:23 PM
PNETWK.EXE
12/3/2009 4:07:18 AM
PNETWK.EXE
12/2/2009 7:36:43 PM
PNETWK.EXE
12/1/2009 3:14:30 AM
PNETWK.EXE
11/30/2009 7:35:00 PM
PNETWK.EXE
11/30/2009 5:55:20 PM
PNETWK.EXE
11/30/2009 3:32:57 PM
PNETWK.EXE
11/26/2009 3:20:08 AM
PNETWK.EXE
11/24/2009 2:45:21 PM
PNETWK.EXE
11/21/2009 7:25:28 PM
PNETWK.EXE
11/21/2009 12:32:52 PM
PNETWK.EXE
11/20/2009 11:59:20 AM
PNETWK.EXE
11/19/2009 4:28:00 AM
PNETWK.EXE
11/18/2009 7:16:16 PM
PNETWK.EXE
11/18/2009 12:51:02 PM
PNETWK.EXE
11/18/2009 11:18:25 AM
PNETWK.EXE
11/17/2009 10:33:26 PM
PNETWK.EXE
11/17/2009 2:49:20 PM
PNETWK.EXE
dfsvc.exe (events: 7)

Process exit

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\Program Files (x86)\WINDOWS MEDIA PLA

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

Process start

C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WM

12/16/2009 7:11:14 AM
12/16/2009 7:11:14 AM
12/15/2009 4:59:59 PM
12/15/2009 4:59:59 PM
12/14/2009 10:00:00 PM
12/14/2009 9:59:59 PM
12/14/2009 4:18:37 PM
12/14/2009 4:18:37 PM
12/14/2009 4:16:03 AM
12/14/2009 4:16:03 AM
12/13/2009 2:08:01 PM
12/13/2009 2:08:01 PM
12/12/2009 12:59:59 PM
12/12/2009 12:59:59 PM
12/11/2009 5:59:59 PM
12/11/2009 5:59:59 PM
12/11/2009 4:07:02 AM
12/11/2009 4:07:02 AM
12/10/2009 2:51:45 PM
12/10/2009 2:51:45 PM
12/10/2009 4:59:25 AM
12/10/2009 4:59:25 AM
12/10/2009 4:58:26 AM
12/10/2009 4:58:26 AM
12/10/2009 4:18:19 AM
12/10/2009 4:18:19 AM
12/8/2009 2:00:00 PM
12/8/2009 1:59:59 PM
12/8/2009 1:29:52 PM
12/8/2009 1:29:52 PM
12/7/2009 11:46:33 PM
12/7/2009 11:46:33 PM
12/7/2009 4:12:33 AM
12/7/2009 4:12:33 AM
12/6/2009 5:00:00 AM
12/6/2009 4:59:59 AM
12/6/2009 12:56:35 AM
12/6/2009 12:56:35 AM
12/5/2009 12:40:21 PM
12/5/2009 12:40:21 PM
12/5/2009 2:33:01 AM
12/5/2009 2:33:01 AM
12/4/2009 7:00:44 PM
12/4/2009 7:00:44 PM
12/4/2009 2:59:59 PM
12/4/2009 2:59:59 PM
12/4/2009 4:28:12 AM
12/4/2009 4:28:08 AM
12/3/2009 5:38:43 AM
12/3/2009 5:38:40 AM
12/3/2009 4:16:39 AM
12/3/2009 4:16:39 AM
12/2/2009 7:45:52 PM
12/2/2009 7:45:52 PM
12/2/2009 6:00:00 AM
12/2/2009 5:59:59 AM
12/1/2009 1:58:21 PM
12/1/2009 1:58:21 PM
12/1/2009 3:23:03 AM
12/1/2009 3:23:03 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE

11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/30/2009
11/29/2009
11/29/2009
11/28/2009
11/28/2009
11/27/2009
11/27/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/23/2009
11/23/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009

7:43:28 PM
7:43:28 PM
6:04:34 PM
6:04:34 PM
4:00:00 PM
3:59:59 PM
3:41:09 PM
3:41:09 PM
5:27:26 AM
5:27:26 AM
5:58:47 AM
5:58:44 AM
6:59:59 AM
6:59:59 AM
12:00:00 PM
11:59:59 AM
4:59:59 PM
4:59:59 PM
3:29:54 AM
3:29:54 AM
9:59:59 PM
9:59:59 PM
5:06:53 AM
5:06:53 AM
5:06:53 AM
5:06:53 AM
5:06:53 AM
5:06:53 AM
2:54:27 PM
2:54:27 PM
10:15:09 AM
10:15:09 AM
5:09:26 PM
5:09:26 PM
5:59:59 PM
5:59:59 PM
12:38:30 AM
12:38:30 AM
7:34:46 PM
7:34:46 PM
4:39:21 PM
4:39:21 PM
12:42:17 PM
12:42:17 PM
12:09:03 PM
12:09:03 PM
12:09:02 PM
12:09:02 PM
2:58:34 PM
2:58:34 PM
4:37:33 AM
4:37:33 AM
7:25:47 PM
7:25:47 PM
7:25:47 PM
7:25:47 PM
12:59:55 PM
12:59:55 PM
11:27:33 AM
11:27:33 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE

11/18/2009 4:55:37 AM
11/18/2009 4:55:37 AM
11/17/2009 10:41:42 PM
11/17/2009 10:41:42 PM
11/17/2009 2:57:26 PM
11/17/2009 2:57:26 PM
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM
12/16/2009 7:00:12 AM
12/14/2009 4:09:33 PM
12/14/2009 3:47:52 PM
12/10/2009 2:42:15 PM
12/10/2009 2:22:49 PM
12/10/2009 4:49:29 AM
12/10/2009 4:46:55 AM
12/10/2009 4:08:57 AM
12/9/2009 3:23:35 AM
12/8/2009 9:15:51 PM
12/8/2009 1:20:42 PM
12/8/2009 11:34:16 AM
12/6/2009 12:47:12 AM
12/5/2009 7:28:55 PM
12/5/2009 2:24:47 AM
12/4/2009 10:43:14 PM
12/4/2009 6:51:08 PM
12/4/2009 4:27:47 PM
12/3/2009 4:07:09 AM
12/2/2009 8:42:06 PM
12/2/2009 7:36:39 PM
12/2/2009 3:43:08 PM
12/1/2009 3:13:45 AM
11/30/2009 8:00:27 PM
11/30/2009 7:34:03 PM
11/30/2009 6:55:13 PM
11/30/2009 5:55:17 PM
11/30/2009 5:53:07 PM
11/30/2009 3:32:36 PM
11/30/2009 10:18:14 AM
11/26/2009 3:19:56 AM
11/26/2009 3:17:54 AM
11/24/2009 2:45:18 PM
11/24/2009 2:41:30 PM
11/21/2009 7:25:24 PM
11/21/2009 7:11:45 PM
11/21/2009 12:32:51 PM
11/20/2009 6:58:59 PM
11/20/2009 11:59:18 AM
11/20/2009 9:52:53 AM
11/19/2009 4:27:58 AM
11/18/2009 7:43:43 PM
11/18/2009 7:16:14 PM
11/18/2009 6:03:02 PM
11/18/2009 12:50:54 PM
11/18/2009 12:25:18 PM
11/18/2009 11:18:18 AM
11/18/2009 10:34:53 AM
11/17/2009 10:33:09 PM
11/17/2009 6:17:47 PM
11/17/2009 2:48:52 PM
dfsvc.exe (events: 7)

Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start

C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE
C:\WINDOWS\system32\WSQMCONS.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE
C:\WINDOWS\EHOME\EHMSAS.EXE

12/15/2009 9:13:07 PM
12/15/2009 9:12:21 PM
12/15/2009 11:25:32 AM
12/15/2009 11:24:36 AM
12/14/2009 9:10:09 PM
12/14/2009 9:09:09 PM
12/14/2009 10:22:41 AM
12/14/2009 10:21:50 AM
12/13/2009 9:03:19 PM
12/13/2009 9:02:16 PM
12/13/2009 2:09:05 PM
12/13/2009 2:08:02 PM
12/12/2009 9:04:00 PM
12/12/2009 9:03:06 PM
12/12/2009 11:15:48 AM
12/12/2009 11:15:00 AM
12/12/2009 11:13:31 AM
12/12/2009 11:13:31 AM
12/11/2009 9:08:04 PM
12/11/2009 9:07:10 PM
12/11/2009 9:21:17 AM
12/11/2009 9:19:22 AM
12/11/2009 4:07:01 AM
12/11/2009 4:06:00 AM
12/10/2009 2:10:01 PM
12/10/2009 2:09:25 PM
12/10/2009 2:07:52 PM
12/10/2009 2:07:52 PM
12/10/2009 4:20:44 AM
12/10/2009 4:18:20 AM
12/8/2009 11:01:45 AM
12/8/2009 11:00:26 AM
12/8/2009 2:35:45 AM
12/8/2009 2:34:49 AM
12/7/2009 11:47:25 PM
12/7/2009 11:46:33 PM
12/7/2009 2:17:48 PM
12/7/2009 2:17:02 PM
12/7/2009 2:15:44 PM
12/7/2009 2:15:44 PM
12/7/2009 4:12:33 AM
12/7/2009 4:11:33 AM
12/6/2009 2:17:13 PM
12/6/2009 2:16:33 PM
12/6/2009 2:15:17 PM
12/6/2009 2:15:17 PM
12/6/2009 12:57:45 AM
12/6/2009 12:56:34 AM
12/5/2009 12:40:21 PM
12/5/2009 12:38:30 PM
12/4/2009 9:36:37 PM
12/4/2009 9:35:31 PM
12/4/2009 12:11:06 PM
12/4/2009 12:09:25 PM
12/4/2009 4:30:23 AM
12/4/2009 4:29:39 AM
12/4/2009 4:28:12 AM
12/4/2009 4:28:08 AM
12/3/2009 2:22:28 PM
12/3/2009 2:18:15 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
start
exit
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
exit

C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE

12/3/2009 2:16:00 PM
12/3/2009 2:16:00 PM
12/3/2009 4:18:02 AM
12/3/2009 4:16:39 AM
12/2/2009 11:41:39 AM
12/2/2009 11:40:02 AM
12/2/2009 3:18:35 AM
12/2/2009 3:17:54 AM
12/2/2009 3:16:52 AM
12/2/2009 3:16:52 AM
12/1/2009 1:58:21 PM
12/1/2009 1:56:37 PM
12/1/2009 3:24:16 AM
12/1/2009 3:23:03 AM
11/30/2009 3:42:59 PM
11/30/2009 3:41:09 PM
11/30/2009 5:29:25 AM
11/30/2009 5:28:31 AM
11/30/2009 5:27:26 AM
11/30/2009 5:27:26 AM
11/29/2009 2:17:17 PM
11/29/2009 2:15:52 PM
11/29/2009 5:02:55 AM
11/29/2009 5:01:44 AM
11/28/2009 9:56:32 AM
11/28/2009 9:55:20 AM
11/27/2009 9:02:59 PM
11/27/2009 9:01:45 PM
11/27/2009 11:38:28 AM
11/27/2009 11:37:21 AM
11/27/2009 12:44:23 AM
11/27/2009 12:42:41 AM
11/26/2009 12:37:40 PM
11/26/2009 12:36:58 PM
11/26/2009 12:35:53 PM
11/26/2009 12:35:53 PM
11/25/2009 9:02:49 PM
11/25/2009 9:01:46 PM
11/25/2009 12:32:52 PM
11/25/2009 12:31:56 PM
11/25/2009 4:03:27 AM
11/25/2009 4:00:02 AM
11/24/2009 10:16:12 AM
11/24/2009 10:15:09 AM
11/24/2009 4:02:06 AM
11/24/2009 3:58:29 AM
11/23/2009 9:44:57 AM
11/23/2009 9:43:55 AM
11/23/2009 4:26:10 AM
11/23/2009 4:23:49 AM
11/23/2009 4:22:45 AM
11/23/2009 4:22:45 AM
11/22/2009 2:14:49 PM
11/22/2009 2:14:02 PM
11/22/2009 2:12:08 PM
11/22/2009 2:12:08 PM
11/22/2009 12:38:30 AM
11/22/2009 12:37:15 AM
11/21/2009 12:43:35 PM
11/21/2009 12:42:17 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
start
exit
start
exit
start
exit
exit
start
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
exit
start
start
exit
start
exit
start

C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE

11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/18/2009
11/18/2009
11/17/2009
11/17/2009
dfsvc.exe
12/16/2009
12/16/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009

12:10:31 PM
12:09:04 PM
5:03:42 AM
5:02:41 AM
5:01:02 AM
5:01:01 AM
10:23:11 AM
10:22:22 AM
10:21:17 AM
10:21:17 AM
4:38:48 AM
4:37:33 AM
11:28:36 AM
11:27:34 AM
10:42:54 PM
10:41:42 PM
(events: 7)
7:14:14 AM
7:14:14 AM
12:50:02 PM
12:50:02 PM
12:50:02 PM
12:50:02 PM
11:14:34 AM
11:14:34 AM
11:14:34 AM
11:14:34 AM
5:30:55 PM
5:30:29 PM
5:30:27 PM
5:30:05 PM
4:21:37 PM
4:21:37 PM
3:08:11 PM
3:08:11 PM
3:08:11 PM
3:08:11 PM
10:11:34 AM
10:11:34 AM
10:11:34 AM
10:11:34 AM
4:06:02 AM
4:06:02 AM
4:06:02 AM
4:06:02 AM
11:57:03 PM
11:57:03 PM
11:57:03 PM
11:57:03 PM
7:43:50 PM
7:43:50 PM
7:43:50 PM
7:43:47 PM
1:57:42 PM
1:57:42 PM
1:57:42 PM
1:57:42 PM
4:41:01 AM
4:41:01 AM
4:41:01 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
exit
start
start
exit
exit
start
start
exit
start
exit
start
exit
start

C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE
C:\WINDOWS\EHOME\MCUPDATE.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start

C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE

12/13/2009 4:41:01 AM
12/12/2009 7:09:20 PM
12/12/2009 7:09:20 PM
12/12/2009 7:09:20 PM
12/12/2009 7:09:20 PM
12/12/2009 5:32:32 PM
12/12/2009 5:32:32 PM
12/12/2009 5:32:32 PM
12/12/2009 5:32:32 PM
12/12/2009 3:32:12 PM
12/12/2009 3:32:12 PM
12/12/2009 3:32:11 PM
12/12/2009 3:32:11 PM
12/12/2009 11:03:16 AM
12/12/2009 11:03:16 AM
12/12/2009 11:03:16 AM
12/12/2009 11:03:15 AM
12/12/2009 6:23:59 AM
12/12/2009 6:23:59 AM
12/12/2009 6:23:59 AM
12/12/2009 6:23:58 AM
12/11/2009 4:27:21 PM
12/11/2009 4:27:21 PM
12/11/2009 4:27:21 PM
12/11/2009 4:27:20 PM
12/11/2009 9:09:07 AM
12/11/2009 9:09:07 AM
12/11/2009 9:09:07 AM
12/11/2009 9:09:07 AM
12/11/2009 5:59:09 AM
12/11/2009 5:59:09 AM
12/11/2009 5:59:09 AM
12/11/2009 5:59:09 AM
12/11/2009 3:55:45 AM
12/11/2009 3:55:45 AM
12/11/2009 3:55:45 AM
12/11/2009 3:55:45 AM
12/10/2009 5:47:18 PM
12/10/2009 5:47:18 PM
12/10/2009 5:47:18 PM
12/10/2009 5:47:18 PM
12/10/2009 2:54:45 PM
12/10/2009 2:54:45 PM
12/10/2009 2:42:17 PM
12/10/2009 2:42:17 PM
12/10/2009 2:42:17 PM
12/10/2009 2:42:17 PM
12/10/2009 1:57:51 PM
12/10/2009 1:57:51 PM
12/10/2009 1:57:51 PM
12/10/2009 1:57:51 PM
12/10/2009 5:02:26 AM
12/10/2009 5:02:26 AM
12/10/2009 4:21:19 AM
12/10/2009 4:21:19 AM
12/10/2009 4:09:03 AM
12/10/2009 4:09:03 AM
12/10/2009 4:09:03 AM
12/10/2009 4:09:03 AM
12/8/2009 9:07:35 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
start
exit
exit
start
start
exit
exit
start
start
exit
start
exit
start
exit
exit
start
start
exit

C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE

12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009

9:07:35 PM
9:07:35 PM
9:07:35 PM
1:32:52 PM
1:32:52 PM
10:50:26 AM
10:50:26 AM
10:50:25 AM
10:50:25 AM
4:26:27 AM
4:26:27 AM
4:26:27 AM
4:26:26 AM
2:24:34 AM
2:24:34 AM
2:24:34 AM
2:24:34 AM
11:36:20 PM
11:36:20 PM
11:36:20 PM
11:36:20 PM
2:04:38 PM
2:04:38 PM
2:04:38 PM
2:04:38 PM
12:59:35 AM
12:59:35 AM
4:11:59 PM
4:11:59 PM
4:11:59 PM
4:11:59 PM
12:28:13 PM
12:28:13 PM
12:28:13 PM
12:28:13 PM
2:36:01 AM
2:36:01 AM
7:03:44 PM
7:03:44 PM
6:51:10 PM
6:51:10 PM
6:51:10 PM
6:51:10 PM
11:59:13 AM
11:59:13 AM
11:59:13 AM
11:59:12 AM
4:17:53 AM
4:17:53 AM
4:17:53 AM
4:17:53 AM
2:06:00 PM
2:06:00 PM
2:06:00 PM
2:06:00 PM
4:19:39 AM
4:19:39 AM
4:07:09 AM
4:07:09 AM
4:07:09 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
start
exit
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
start
exit
exit
start
start
exit
exit
start
start
exit
start
exit
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
start
exit
exit
start

C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE

12/3/2009 4:07:09 AM
12/2/2009 7:48:52 PM
12/2/2009 7:48:52 PM
12/2/2009 11:29:47 AM
12/2/2009 11:29:47 AM
12/2/2009 11:29:47 AM
12/2/2009 11:29:46 AM
12/2/2009 5:51:47 AM
12/2/2009 5:51:47 AM
12/2/2009 5:51:47 AM
12/2/2009 5:51:47 AM
12/2/2009 3:06:53 AM
12/2/2009 3:06:53 AM
12/2/2009 3:06:53 AM
12/2/2009 3:06:52 AM
12/1/2009 6:03:30 PM
12/1/2009 6:03:30 PM
12/1/2009 6:03:30 PM
12/1/2009 6:03:30 PM
12/1/2009 1:46:20 PM
12/1/2009 1:46:20 PM
12/1/2009 1:46:20 PM
12/1/2009 1:46:20 PM
12/1/2009 3:26:03 AM
12/1/2009 3:26:03 AM
11/30/2009 7:46:28 PM
11/30/2009 7:46:28 PM
11/30/2009 7:34:05 PM
11/30/2009 7:34:05 PM
11/30/2009 7:34:05 PM
11/30/2009 7:34:04 PM
11/30/2009 6:07:34 PM
11/30/2009 6:07:34 PM
11/30/2009 3:44:08 PM
11/30/2009 3:44:08 PM
11/30/2009 10:12:21 AM
11/30/2009 10:12:20 AM
11/30/2009 10:12:20 AM
11/30/2009 10:12:20 AM
11/30/2009 5:17:25 AM
11/30/2009 5:17:25 AM
11/30/2009 5:17:24 AM
11/30/2009 5:17:24 AM
11/29/2009 5:55:01 PM
11/29/2009 5:54:49 PM
11/29/2009 5:54:48 PM
11/29/2009 5:54:48 PM
11/29/2009 2:06:04 PM
11/29/2009 2:06:04 PM
11/29/2009 2:06:04 PM
11/29/2009 2:06:01 PM
11/29/2009 4:51:43 AM
11/29/2009 4:51:42 AM
11/29/2009 4:51:42 AM
11/29/2009 4:51:42 AM
11/27/2009 8:49:31 PM
11/27/2009 8:49:31 PM
11/27/2009 8:49:31 PM
11/27/2009 8:49:31 PM
11/27/2009 3:07:33 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
start
exit
start
exit
exit
start
start
exit
start
exit
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit

C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE

11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009

3:07:33 PM
3:07:33 PM
3:07:33 PM
11:27:20 AM
11:27:20 AM
11:27:20 AM
11:27:19 AM
12:32:26 AM
12:32:26 AM
12:32:26 AM
12:32:26 AM
2:13:36 PM
2:13:36 PM
2:13:36 PM
2:13:26 PM
12:25:37 PM
12:25:37 PM
12:25:37 PM
12:25:37 PM
6:59:04 AM
6:59:04 AM
6:59:04 AM
6:59:03 AM
3:32:54 AM
3:32:54 AM
3:20:07 AM
3:20:06 AM
3:20:06 AM
3:20:00 AM
3:00:12 AM
3:00:12 AM
3:00:12 AM
3:00:12 AM
11:54:14 PM
11:54:14 PM
11:54:14 PM
11:54:11 PM
12:21:42 PM
12:21:42 PM
12:21:42 PM
12:21:42 PM
3:59:54 AM
3:59:54 AM
3:59:54 AM
3:59:54 AM
3:00:25 AM
3:00:25 AM
3:00:25 AM
3:00:24 AM
2:57:27 PM
2:57:27 PM
2:41:20 PM
2:41:20 PM
2:41:20 PM
1:27:31 PM
1:27:31 PM
1:27:31 PM
1:27:31 PM
10:05:08 AM
10:05:08 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
start
exit
exit
start
exit
exit
start
start
exit
exit

C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE

11/24/2009
11/24/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
dfsvc.exe
12/16/2009
12/16/2009

10:05:08 AM
10:04:57 AM
4:26:10 AM
4:12:43 AM
4:12:43 AM
4:12:43 AM
4:12:43 AM
7:37:46 PM
7:37:46 PM
12:45:17 PM
12:45:17 PM
6:54:48 PM
6:54:48 PM
6:54:48 PM
6:54:48 PM
12:12:02 PM
12:12:02 PM
4:51:01 AM
4:51:01 AM
4:51:01 AM
4:51:01 AM
7:52:53 PM
7:52:53 PM
7:52:53 PM
7:52:53 PM
10:11:01 AM
10:11:01 AM
10:11:01 AM
10:11:01 AM
4:40:33 AM
4:40:33 AM
7:28:47 PM
7:28:47 PM
4:31:26 PM
4:31:26 PM
4:31:24 PM
4:31:12 PM
1:02:55 PM
1:02:55 PM
11:30:33 AM
11:30:33 AM
4:45:46 AM
4:45:46 AM
4:45:46 AM
4:45:45 AM
10:44:42 PM
10:44:42 PM
5:51:55 PM
5:51:55 PM
5:51:55 PM
5:51:55 PM
3:00:26 PM
3:00:26 PM
2:24:50 AM
2:24:50 AM
2:24:50 AM
2:24:50 AM
(events: 7)
7:02:15 AM
7:00:13 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
start
start
exit
exit
start
start
exit
start
exit
start
exit
exit
start
start
exit
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
start
exit
start
exit
exit
start
start
exit
start
exit
start
exit
exit
start
start
exit
start
exit
exit
start
start
exit
start
exit
exit
start
start

Process start
Process exit

C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\system32\WERMGR.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE

12/14/2009 4:09:33 PM
12/14/2009 3:47:52 PM
12/10/2009 2:42:15 PM
12/10/2009 2:22:49 PM
12/10/2009 4:49:32 AM
12/10/2009 4:49:32 AM
12/10/2009 4:49:28 AM
12/10/2009 4:46:56 AM
12/10/2009 4:08:57 AM
12/9/2009 3:23:35 AM
12/8/2009 9:15:51 PM
12/8/2009 1:20:42 PM
12/8/2009 11:34:16 AM
12/6/2009 12:47:12 AM
12/5/2009 7:28:55 PM
12/5/2009 2:24:47 AM
12/4/2009 10:43:14 PM
12/4/2009 6:51:08 PM
12/4/2009 4:27:47 PM
12/3/2009 4:07:09 AM
12/2/2009 8:42:06 PM
12/2/2009 7:36:39 PM
12/2/2009 3:43:08 PM
12/1/2009 3:13:44 AM
11/30/2009 8:00:27 PM
11/30/2009 7:34:03 PM
11/30/2009 6:55:13 PM
11/30/2009 5:55:17 PM
11/30/2009 5:53:07 PM
11/30/2009 3:32:36 PM
11/30/2009 10:18:14 AM
11/26/2009 3:20:10 AM
11/26/2009 3:20:10 AM
11/26/2009 3:19:56 AM
11/26/2009 3:17:54 AM
11/24/2009 2:45:18 PM
11/24/2009 2:41:31 PM
11/21/2009 7:25:24 PM
11/21/2009 7:11:45 PM
11/21/2009 12:32:51 PM
11/20/2009 6:58:59 PM
11/20/2009 11:59:18 AM
11/20/2009 9:52:53 AM
11/19/2009 4:27:58 AM
11/18/2009 7:43:43 PM
11/18/2009 7:16:14 PM
11/18/2009 6:03:02 PM
11/18/2009 12:50:54 PM
11/18/2009 12:25:18 PM
11/18/2009 11:18:18 AM
11/18/2009 10:34:53 AM
11/17/2009 10:33:09 PM
11/17/2009 6:17:47 PM
11/17/2009 2:48:51 PM
dfsvc.exe (events: 7)
12/16/2009 8:16:15 AM
12/16/2009 8:16:15 AM
12/16/2009 7:16:14 AM
12/16/2009 7:16:14 AM
12/16/2009 6:14:50 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
exit
start
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE
C:\WINDOWS\EHOME\EHTRAY.EXE

Process
Process
Process
Process
Process

exit
start
exit
start
exit

C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE

12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/16/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/14/2009
12/14/2009
12/14/2009

6:14:50 AM
5:14:49 AM
5:14:49 AM
4:14:48 AM
4:14:48 AM
3:14:47 AM
3:14:47 AM
2:14:47 AM
2:14:47 AM
1:14:46 AM
1:14:46 AM
12:14:46 AM
12:14:45 AM
11:14:44 PM
11:14:44 PM
10:14:43 PM
10:14:43 PM
9:14:43 PM
9:14:43 PM
8:14:42 PM
8:14:42 PM
7:14:41 PM
7:14:41 PM
6:14:40 PM
6:14:40 PM
5:14:39 PM
5:14:39 PM
4:14:39 PM
4:14:39 PM
3:14:38 PM
3:14:38 PM
2:14:37 PM
2:14:37 PM
1:14:36 PM
1:14:36 PM
12:14:35 PM
12:14:35 PM
11:14:35 AM
11:14:35 AM
8:30:31 AM
8:30:31 AM
7:30:31 AM
7:30:30 AM
6:30:30 AM
6:30:30 AM
5:30:29 AM
5:30:29 AM
4:30:28 AM
4:30:28 AM
3:30:27 AM
3:30:27 AM
2:30:27 AM
2:30:26 AM
1:30:26 AM
1:30:26 AM
12:30:26 AM
12:30:25 AM
11:30:24 PM
11:30:24 PM
10:30:23 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE

12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009

10:30:23 PM
9:30:23 PM
9:30:22 PM
8:30:22 PM
8:30:22 PM
7:30:21 PM
7:30:21 PM
6:30:20 PM
6:30:20 PM
5:33:31 PM
5:30:56 PM
4:23:37 PM
4:23:37 PM
3:08:24 PM
3:08:24 PM
11:11:49 AM
11:11:49 AM
10:11:50 AM
10:11:50 AM
5:06:03 AM
5:06:03 AM
4:06:03 AM
4:06:03 AM
12:57:06 AM
12:57:04 AM
11:57:04 PM
11:57:04 PM
9:43:38 PM
9:43:38 PM
8:43:37 PM
8:43:37 PM
7:43:50 PM
7:43:50 PM
4:57:56 PM
4:57:56 PM
3:57:55 PM
3:57:55 PM
2:57:54 PM
2:57:54 PM
1:57:55 PM
1:57:55 PM
5:41:16 AM
5:41:16 AM
4:41:24 AM
4:41:16 AM
9:32:38 PM
9:32:38 PM
8:32:37 PM
8:32:37 PM
7:32:37 PM
7:32:36 PM
6:32:36 PM
6:32:36 PM
5:32:36 PM
5:32:36 PM
4:32:18 PM
4:32:18 PM
3:32:18 PM
3:32:18 PM
1:03:31 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE

12/12/2009 1:03:31 PM
12/12/2009 12:03:30 PM
12/12/2009 12:03:30 PM
12/12/2009 11:03:31 AM
12/12/2009 11:03:30 AM
12/12/2009 7:24:14 AM
12/12/2009 7:24:14 AM
12/12/2009 6:24:16 AM
12/12/2009 6:24:14 AM
12/11/2009 9:27:29 PM
12/11/2009 9:27:29 PM
12/11/2009 8:27:28 PM
12/11/2009 8:27:28 PM
12/11/2009 7:27:27 PM
12/11/2009 7:27:27 PM
12/11/2009 6:27:26 PM
12/11/2009 6:27:26 PM
12/11/2009 5:27:26 PM
12/11/2009 5:27:26 PM
12/11/2009 4:27:26 PM
12/11/2009 4:27:25 PM
12/11/2009 2:09:24 PM
12/11/2009 2:09:24 PM
12/11/2009 1:09:23 PM
12/11/2009 1:09:23 PM
12/11/2009 12:09:22 PM
12/11/2009 12:09:22 PM
12/11/2009 11:09:21 AM
12/11/2009 11:09:21 AM
12/11/2009 10:09:21 AM
12/11/2009 10:09:21 AM
12/11/2009 9:09:20 AM
12/11/2009 9:09:20 AM
12/11/2009 6:59:09 AM
12/11/2009 6:59:09 AM
12/11/2009 5:59:09 AM
12/11/2009 5:59:09 AM
12/11/2009 4:56:00 AM
12/11/2009 4:56:00 AM
12/11/2009 3:56:02 AM
12/11/2009 3:55:59 AM
12/10/2009 6:56:47 PM
12/10/2009 6:56:47 PM
12/10/2009 5:56:46 PM
12/10/2009 5:56:46 PM
12/10/2009 4:56:46 PM
12/10/2009 4:56:46 PM
12/10/2009 3:56:45 PM
12/10/2009 3:56:45 PM
12/10/2009 2:56:44 PM
12/10/2009 2:56:44 PM
12/10/2009 1:58:06 PM
12/10/2009 1:58:06 PM
12/10/2009 5:03:25 AM
12/10/2009 5:03:25 AM
12/10/2009 4:23:22 AM
12/10/2009 4:23:19 AM
12/8/2009 9:07:51 PM
12/8/2009 9:07:50 PM
12/8/2009 3:34:53 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE

12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/8/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/7/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009

3:34:53 PM
2:34:53 PM
2:34:53 PM
1:34:52 PM
1:34:52 PM
10:50:26 AM
10:50:26 AM
5:26:27 AM
5:26:27 AM
4:26:27 AM
4:26:27 AM
3:24:50 AM
3:24:50 AM
2:24:50 AM
2:24:49 AM
12:36:34 AM
12:36:34 AM
11:36:34 PM
11:36:34 PM
5:05:47 PM
5:05:47 PM
4:05:46 PM
4:05:46 PM
3:05:45 PM
3:05:45 PM
2:05:45 PM
2:05:45 PM
7:01:34 AM
7:01:34 AM
6:01:33 AM
6:01:33 AM
5:01:33 AM
5:01:33 AM
4:01:45 AM
4:01:33 AM
4:04:51 PM
4:04:51 PM
3:04:50 PM
3:04:50 PM
2:04:51 PM
2:04:50 PM
6:01:38 AM
6:01:38 AM
5:01:38 AM
5:01:38 AM
4:01:37 AM
4:01:37 AM
3:01:36 AM
3:01:36 AM
2:01:35 AM
2:01:35 AM
1:01:36 AM
1:01:34 AM
7:28:34 PM
7:28:34 PM
6:28:33 PM
6:28:33 PM
5:28:33 PM
5:28:33 PM
4:28:32 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE

12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009

4:28:32 PM
3:28:32 PM
3:28:31 PM
2:28:31 PM
2:28:31 PM
1:28:30 PM
1:28:30 PM
12:28:30 PM
12:28:29 PM
3:37:56 AM
3:37:56 AM
2:37:56 AM
2:37:55 AM
10:05:46 PM
10:05:46 PM
9:05:45 PM
9:05:45 PM
8:05:44 PM
8:05:44 PM
7:05:43 PM
7:05:43 PM
3:59:26 PM
3:59:26 PM
2:59:25 PM
2:59:25 PM
1:59:25 PM
1:59:25 PM
12:59:24 PM
12:59:24 PM
11:59:28 AM
11:59:23 AM
6:18:09 AM
6:18:09 AM
5:18:08 AM
5:18:08 AM
4:18:11 AM
4:18:08 AM
3:06:00 PM
3:06:00 PM
2:06:00 PM
2:06:00 PM
5:21:40 AM
5:21:40 AM
4:21:41 AM
4:21:39 AM
7:50:52 PM
7:50:51 PM
3:30:03 PM
3:30:03 PM
2:30:02 PM
2:30:02 PM
1:30:02 PM
1:30:02 PM
12:30:02 PM
12:30:02 PM
11:30:03 AM
11:30:03 AM
8:06:56 AM
8:06:56 AM
7:06:55 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE

12/2/2009 7:06:55 AM
12/2/2009 6:06:54 AM
12/2/2009 6:06:54 AM
12/2/2009 5:06:54 AM
12/2/2009 5:06:54 AM
12/2/2009 4:06:53 AM
12/2/2009 4:06:53 AM
12/2/2009 3:06:55 AM
12/2/2009 3:06:53 AM
12/1/2009 7:03:44 PM
12/1/2009 7:03:44 PM
12/1/2009 6:03:44 PM
12/1/2009 6:03:44 PM
12/1/2009 4:46:39 PM
12/1/2009 4:46:39 PM
12/1/2009 3:46:38 PM
12/1/2009 3:46:38 PM
12/1/2009 2:46:37 PM
12/1/2009 2:46:37 PM
12/1/2009 1:46:37 PM
12/1/2009 1:46:37 PM
12/1/2009 6:28:06 AM
12/1/2009 6:28:06 AM
12/1/2009 5:28:05 AM
12/1/2009 5:28:05 AM
12/1/2009 4:28:04 AM
12/1/2009 4:28:04 AM
12/1/2009 3:28:04 AM
12/1/2009 3:28:03 AM
11/30/2009 7:48:27 PM
11/30/2009 7:48:27 PM
11/30/2009 6:09:35 PM
11/30/2009 6:09:34 PM
11/30/2009 5:46:05 PM
11/30/2009 5:46:05 PM
11/30/2009 4:46:04 PM
11/30/2009 4:46:04 PM
11/30/2009 3:46:06 PM
11/30/2009 3:46:04 PM
11/30/2009 10:12:35 AM
11/30/2009 10:12:35 AM
11/30/2009 6:17:25 AM
11/30/2009 6:17:25 AM
11/30/2009 5:17:44 AM
11/30/2009 5:17:26 AM
11/29/2009 6:55:02 PM
11/29/2009 6:55:02 PM
11/29/2009 5:55:02 PM
11/29/2009 5:55:02 PM
11/29/2009 3:06:01 PM
11/29/2009 3:06:01 PM
11/29/2009 2:06:05 PM
11/29/2009 2:06:04 PM
11/29/2009 5:51:43 AM
11/29/2009 5:51:43 AM
11/29/2009 4:52:00 AM
11/29/2009 4:51:45 AM
11/28/2009 6:49:48 PM
11/28/2009 6:49:48 PM
11/28/2009 5:49:47 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE

11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009

5:49:47 PM
4:49:46 PM
4:49:46 PM
3:49:46 PM
3:49:46 PM
2:49:45 PM
2:49:45 PM
1:49:44 PM
1:49:44 PM
12:49:43 PM
12:49:43 PM
11:49:42 AM
11:49:42 AM
10:49:42 AM
10:49:41 AM
9:49:41 AM
9:49:41 AM
8:49:40 AM
8:49:40 AM
7:49:39 AM
7:49:39 AM
6:49:38 AM
6:49:38 AM
5:49:38 AM
5:49:37 AM
4:49:37 AM
4:49:37 AM
3:49:36 AM
3:49:36 AM
2:49:35 AM
2:49:35 AM
1:49:34 AM
1:49:34 AM
12:49:34 AM
12:49:34 AM
11:49:34 PM
11:49:34 PM
10:49:33 PM
10:49:33 PM
9:49:32 PM
9:49:32 PM
8:49:32 PM
8:49:32 PM
4:07:47 PM
4:07:47 PM
3:07:48 PM
3:07:48 PM
1:27:21 PM
1:27:21 PM
12:27:20 PM
12:27:20 PM
11:27:21 AM
11:27:20 AM
3:32:43 AM
3:32:43 AM
2:32:42 AM
2:32:42 AM
1:32:41 AM
1:32:41 AM
12:32:42 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE

11/27/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/24/2009

12:32:41 AM
7:25:57 PM
7:25:57 PM
6:25:57 PM
6:25:57 PM
5:25:56 PM
5:25:56 PM
4:25:55 PM
4:25:55 PM
3:25:54 PM
3:25:54 PM
2:25:53 PM
2:25:53 PM
1:25:53 PM
1:25:53 PM
12:25:53 PM
12:25:53 PM
7:59:18 AM
7:59:18 AM
6:59:18 AM
6:59:17 AM
3:34:29 AM
3:34:29 AM
3:00:25 AM
3:00:25 AM
12:22:04 AM
12:22:03 AM
11:22:03 PM
11:22:02 PM
10:22:02 PM
10:22:02 PM
9:22:01 PM
9:22:01 PM
8:22:01 PM
8:22:01 PM
7:22:00 PM
7:22:00 PM
6:21:59 PM
6:21:59 PM
5:21:58 PM
5:21:58 PM
4:21:57 PM
4:21:57 PM
3:21:57 PM
3:21:57 PM
2:21:56 PM
2:21:56 PM
1:21:55 PM
1:21:55 PM
12:21:55 PM
12:21:55 PM
6:00:27 AM
6:00:26 AM
5:00:26 AM
5:00:26 AM
4:00:25 AM
4:00:25 AM
3:00:37 AM
3:00:25 AM
4:59:29 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE

11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/21/2009
11/21/2009
11/21/2009

4:59:29 PM
3:59:28 PM
3:59:28 PM
2:59:27 PM
2:59:27 PM
2:27:46 PM
2:27:46 PM
1:27:46 PM
1:27:45 PM
11:05:09 AM
11:05:09 AM
10:05:09 AM
10:05:09 AM
4:48:28 AM
4:48:28 AM
3:48:29 AM
3:48:28 AM
8:57:38 PM
8:57:38 PM
7:57:39 PM
7:57:39 PM
5:59:26 PM
5:59:26 PM
4:59:25 PM
4:59:25 PM
10:12:48 AM
10:12:48 AM
9:12:47 AM
9:12:47 AM
8:12:46 AM
8:12:46 AM
7:12:46 AM
7:12:46 AM
6:12:45 AM
6:12:45 AM
5:12:44 AM
5:12:44 AM
4:13:03 AM
4:12:44 AM
6:02:10 PM
6:02:10 PM
5:02:09 PM
5:02:09 PM
4:02:08 PM
4:02:08 PM
3:02:07 PM
3:02:07 PM
2:02:07 PM
2:02:07 PM
3:27:16 AM
3:27:16 AM
2:27:16 AM
2:27:15 AM
1:27:15 AM
1:27:15 AM
12:27:30 AM
12:27:14 AM
7:39:46 PM
7:39:46 PM
6:47:21 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE

11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009

6:47:21 PM
5:47:20 PM
5:47:20 PM
4:47:19 PM
4:47:19 PM
3:47:19 PM
3:47:19 PM
2:47:19 PM
2:47:19 PM
1:47:18 PM
1:47:18 PM
12:47:18 PM
12:47:17 PM
6:55:01 PM
6:55:01 PM
4:14:06 PM
4:14:06 PM
3:14:05 PM
3:14:05 PM
2:14:04 PM
2:14:04 PM
1:14:03 PM
1:14:03 PM
12:14:03 PM
12:14:02 PM
9:50:51 AM
9:50:51 AM
5:51:02 AM
5:51:02 AM
4:51:04 AM
4:51:02 AM
8:52:58 PM
8:52:58 PM
7:52:57 PM
7:52:57 PM
5:48:35 PM
5:48:35 PM
4:48:35 PM
4:48:35 PM
3:48:34 PM
3:48:34 PM
2:48:33 PM
2:48:33 PM
1:11:19 PM
1:11:19 PM
12:11:18 PM
12:11:18 PM
11:11:17 AM
11:11:17 AM
10:11:17 AM
10:11:17 AM
5:42:34 AM
5:42:34 AM
4:42:34 AM
4:42:33 AM
7:30:47 PM
7:30:47 PM
5:31:28 PM
5:31:28 PM
4:31:27 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE

11/18/2009 4:31:27 PM
11/18/2009 2:04:55 PM
11/18/2009 2:04:55 PM
11/18/2009 1:04:55 PM
11/18/2009 1:04:54 PM
11/18/2009 11:32:34 AM
11/18/2009 11:32:34 AM
11/18/2009 10:15:10 AM
11/18/2009 10:15:10 AM
11/18/2009 5:45:36 AM
11/18/2009 5:45:36 AM
11/18/2009 4:45:58 AM
11/18/2009 4:45:46 AM
11/17/2009 11:46:42 PM
11/17/2009 11:46:42 PM
11/17/2009 10:46:42 PM
11/17/2009 10:46:42 PM
11/17/2009 5:51:56 PM
11/17/2009 5:51:56 PM
11/17/2009 4:02:27 PM
11/17/2009 4:02:27 PM
11/17/2009 3:02:26 PM
11/17/2009 3:02:26 PM
11/17/2009 2:24:59 AM
11/17/2009 2:24:53 AM
dfsvc.exe (events: 7)
11/30/2009 5:18:42 AM
11/30/2009 5:17:25 AM
11/30/2009 5:17:25 AM
11/29/2009 5:55:01 PM
11/24/2009 2:41:26 PM
11/24/2009 2:41:20 PM
dfsvc.exe (events: 7)
12/16/2009 8:05:57 AM
\IEXPLORE.EXE
12/16/2009 8:05:57 AM
\IEXPLORE.EXE
12/16/2009 8:05:57 AM
\IEXPLORE.EXE
12/16/2009 7:09:23 AM
\IEXPLORE.EXE
12/16/2009 7:02:41 AM
\IEXPLORE.EXE
12/16/2009 7:02:35 AM
\IEXPLORE.EXE
12/16/2009 7:02:15 AM
\IEXPLORE.EXE
12/16/2009 7:02:15 AM
\IEXPLORE.EXE
12/16/2009 7:00:12 AM
\IEXPLORE.EXE
12/16/2009 6:47:31 AM
\IEXPLORE.EXE
12/16/2009 6:47:31 AM
\IEXPLORE.EXE
12/16/2009 6:47:31 AM
\IEXPLORE.EXE
12/16/2009 4:45:46 AM
\IEXPLORE.EXE
12/16/2009 4:39:36 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE
C:\WINDOWS\system32\RACAGENT.EXE

Process
Process
Process
Process
Process
Process

exit
exit
start
start
exit
start

C:\WINDOWS\system32\WERCON.EXE
C:\WINDOWS\system32\WERCON.EXE
C:\WINDOWS\system32\WERCON.EXE
C:\WINDOWS\system32\WERCON.EXE
C:\WINDOWS\system32\WERCON.EXE
C:\WINDOWS\system32\WERCON.EXE

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

\IEXPLORE.EXE
12/16/2009 4:39:36 AM
\IEXPLORE.EXE
12/16/2009 4:35:02 AM
\IEXPLORE.EXE
12/16/2009 4:35:02 AM
\IEXPLORE.EXE
12/16/2009 4:35:02 AM
\IEXPLORE.EXE
12/16/2009 3:22:54 AM
\IEXPLORE.EXE
12/16/2009 3:18:52 AM
\IEXPLORE.EXE
12/16/2009 3:18:52 AM
\IEXPLORE.EXE
12/16/2009 3:18:52 AM
\IEXPLORE.EXE
12/16/2009 12:06:27 AM
\IEXPLORE.EXE
12/16/2009 12:06:25 AM
\IEXPLORE.EXE
12/15/2009 11:52:11 PM
\IEXPLORE.EXE
12/15/2009 11:52:11 PM
\IEXPLORE.EXE
12/15/2009 11:52:11 PM
\IEXPLORE.EXE
12/15/2009 10:57:25 PM
\IEXPLORE.EXE
12/15/2009 10:57:25 PM
\IEXPLORE.EXE
12/15/2009 10:57:25 PM
\IEXPLORE.EXE
12/15/2009 10:50:57 PM
\IEXPLORE.EXE
12/15/2009 8:31:47 PM
\IEXPLORE.EXE
12/15/2009 8:31:47 PM
\IEXPLORE.EXE
12/15/2009 8:31:47 PM
\IEXPLORE.EXE
12/15/2009 8:31:45 PM
\IEXPLORE.EXE
12/15/2009 7:06:52 PM
\IEXPLORE.EXE
12/15/2009 7:06:52 PM
\IEXPLORE.EXE
12/15/2009 7:06:51 PM
\IEXPLORE.EXE
12/15/2009 6:44:56 PM
\IEXPLORE.EXE
12/15/2009 6:37:11 PM
\IEXPLORE.EXE
12/15/2009 6:37:10 PM
\IEXPLORE.EXE
12/15/2009 6:37:10 PM
\IEXPLORE.EXE
12/15/2009 5:09:04 PM
\IEXPLORE.EXE
12/15/2009 5:01:50 PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

\IEXPLORE.EXE
12/15/2009 5:01:50 PM
\IEXPLORE.EXE
12/15/2009 5:01:50 PM
\IEXPLORE.EXE
12/15/2009 2:59:04 PM
\IEXPLORE.EXE
12/15/2009 2:56:01 PM
\IEXPLORE.EXE
12/15/2009 2:56:01 PM
\IEXPLORE.EXE
12/15/2009 2:56:00 PM
\IEXPLORE.EXE
12/15/2009 11:17:15 AM
\IEXPLORE.EXE
12/15/2009 11:14:51 AM
\IEXPLORE.EXE
12/15/2009 11:14:50 AM
\IEXPLORE.EXE
12/15/2009 11:14:50 AM
\IEXPLORE.EXE
12/15/2009 7:29:47 AM
\IEXPLORE.EXE
12/15/2009 5:32:14 AM
\IEXPLORE.EXE
12/15/2009 5:32:14 AM
\IEXPLORE.EXE
12/15/2009 5:32:14 AM
\IEXPLORE.EXE
12/15/2009 4:16:07 AM
\IEXPLORE.EXE
12/14/2009 7:43:30 PM
\IEXPLORE.EXE
12/14/2009 7:43:30 PM
\IEXPLORE.EXE
12/14/2009 7:43:30 PM
\IEXPLORE.EXE
12/14/2009 6:28:07 PM
\IEXPLORE.EXE
12/14/2009 6:18:23 PM
\IEXPLORE.EXE
12/14/2009 6:18:23 PM
\IEXPLORE.EXE
12/14/2009 6:18:23 PM
\IEXPLORE.EXE
12/14/2009 5:43:51 PM
\IEXPLORE.EXE
12/14/2009 5:39:37 PM
\IEXPLORE.EXE
12/14/2009 5:39:36 PM
\IEXPLORE.EXE
12/14/2009 5:39:36 PM
\IEXPLORE.EXE
12/14/2009 4:27:22 PM
\IEXPLORE.EXE
12/14/2009 4:12:05 PM
\IEXPLORE.EXE
12/14/2009 4:12:05 PM
\IEXPLORE.EXE
12/14/2009 4:12:05 PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

\IEXPLORE.EXE
12/14/2009 4:12:02 PM
\IEXPLORE.EXE
12/14/2009 4:11:56 PM
\IEXPLORE.EXE
12/14/2009 4:11:54 PM
\IEXPLORE.EXE
12/14/2009 4:11:49 PM
\IEXPLORE.EXE
12/14/2009 3:22:04 PM
\IEXPLORE.EXE
12/14/2009 3:08:27 PM
\IEXPLORE.EXE
12/14/2009 3:08:27 PM
\IEXPLORE.EXE
12/14/2009 3:08:27 PM
\IEXPLORE.EXE
12/14/2009 10:19:12 AM
\IEXPLORE.EXE
12/14/2009 10:11:55 AM
\IEXPLORE.EXE
12/14/2009 10:11:54 AM
\IEXPLORE.EXE
12/14/2009 10:11:54 AM
\IEXPLORE.EXE
12/14/2009 5:04:06 AM
\IEXPLORE.EXE
12/14/2009 4:06:28 AM
\IEXPLORE.EXE
12/14/2009 4:06:27 AM
\IEXPLORE.EXE
12/14/2009 4:06:27 AM
\IEXPLORE.EXE
12/14/2009 12:26:21 AM
\IEXPLORE.EXE
12/13/2009 7:49:38 PM
\IEXPLORE.EXE
12/13/2009 7:49:38 PM
\IEXPLORE.EXE
12/13/2009 7:49:38 PM
\IEXPLORE.EXE
12/13/2009 3:34:36 PM
\IEXPLORE.EXE
12/13/2009 3:17:41 PM
\IEXPLORE.EXE
12/13/2009 3:17:40 PM
\IEXPLORE.EXE
12/13/2009 3:17:40 PM
\IEXPLORE.EXE
12/13/2009 2:30:30 PM
\IEXPLORE.EXE
12/13/2009 2:07:11 PM
\IEXPLORE.EXE
12/13/2009 2:07:10 PM
\IEXPLORE.EXE
12/13/2009 1:57:55 PM
\IEXPLORE.EXE
12/13/2009 1:57:55 PM
\IEXPLORE.EXE
12/13/2009 1:57:53 PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

\IEXPLORE.EXE
12/13/2009 5:25:01
\IEXPLORE.EXE
12/13/2009 5:11:22
\IEXPLORE.EXE
12/13/2009 5:11:22
\IEXPLORE.EXE
12/13/2009 4:41:25
\IEXPLORE.EXE
12/13/2009 4:41:24
\IEXPLORE.EXE
12/13/2009 4:41:17
\IEXPLORE.EXE
12/13/2009 4:41:16
\IEXPLORE.EXE
12/13/2009 4:41:16
\IEXPLORE.EXE
12/13/2009 4:41:16
\IEXPLORE.EXE
12/13/2009 4:41:16
\IEXPLORE.EXE
12/13/2009 4:41:16
\IEXPLORE.EXE
12/13/2009 4:41:16
\IEXPLORE.EXE
12/13/2009 4:41:16
\IEXPLORE.EXE
12/13/2009 4:41:16
\IEXPLORE.EXE
12/12/2009 8:48:02
\IEXPLORE.EXE
12/12/2009 8:30:30
\IEXPLORE.EXE
12/12/2009 8:30:30
\IEXPLORE.EXE
12/12/2009 8:30:30
\IEXPLORE.EXE
12/12/2009 8:23:53
\IEXPLORE.EXE
12/12/2009 5:35:39
\IEXPLORE.EXE
12/12/2009 5:35:39
\IEXPLORE.EXE
12/12/2009 5:35:39
\IEXPLORE.EXE
12/12/2009 5:35:37
\IEXPLORE.EXE
12/12/2009 5:32:35
\IEXPLORE.EXE
12/12/2009 5:32:32
\IEXPLORE.EXE
12/12/2009 5:32:31
\IEXPLORE.EXE
12/12/2009 4:07:55
\IEXPLORE.EXE
12/12/2009 4:03:32
\IEXPLORE.EXE
12/12/2009 4:03:32
\IEXPLORE.EXE
12/12/2009 4:03:32

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

\IEXPLORE.EXE
12/12/2009 4:00:37 PM
\IEXPLORE.EXE
12/12/2009 3:32:22 PM
\IEXPLORE.EXE
12/12/2009 3:32:22 PM
\IEXPLORE.EXE
12/12/2009 3:32:21 PM
\IEXPLORE.EXE
12/12/2009 12:04:10 PM
\IEXPLORE.EXE
12/12/2009 11:53:13 AM
\IEXPLORE.EXE
12/12/2009 11:53:12 AM
\IEXPLORE.EXE
12/12/2009 11:53:12 AM
\IEXPLORE.EXE
12/12/2009 11:42:44 AM
\IEXPLORE.EXE
12/12/2009 11:03:30 AM
\IEXPLORE.EXE
12/12/2009 11:03:30 AM
\IEXPLORE.EXE
12/12/2009 11:03:27 AM
\IEXPLORE.EXE
12/12/2009 6:42:48 AM
\IEXPLORE.EXE
12/11/2009 8:00:19 PM
\IEXPLORE.EXE
12/11/2009 8:00:18 PM
\IEXPLORE.EXE
12/11/2009 8:00:18 PM
\IEXPLORE.EXE
12/11/2009 7:43:04 PM
\IEXPLORE.EXE
12/11/2009 7:34:51 PM
\IEXPLORE.EXE
12/11/2009 7:34:50 PM
\IEXPLORE.EXE
12/11/2009 7:34:50 PM
\IEXPLORE.EXE
12/11/2009 7:34:48 PM
\IEXPLORE.EXE
12/11/2009 7:34:46 PM
\IEXPLORE.EXE
12/11/2009 7:34:46 PM
\IEXPLORE.EXE
12/11/2009 7:34:45 PM
\IEXPLORE.EXE
12/11/2009 7:34:44 PM
\IEXPLORE.EXE
12/11/2009 7:34:41 PM
\IEXPLORE.EXE
12/11/2009 7:34:40 PM
\IEXPLORE.EXE
12/11/2009 7:34:40 PM
\IEXPLORE.EXE
12/11/2009 7:29:17 PM
\IEXPLORE.EXE
12/11/2009 7:25:16 PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

\IEXPLORE.EXE
12/11/2009 7:25:16 PM
\IEXPLORE.EXE
12/11/2009 7:25:16 PM
\IEXPLORE.EXE
12/11/2009 7:25:11 PM
\IEXPLORE.EXE
12/11/2009 5:47:49 PM
\IEXPLORE.EXE
12/11/2009 5:47:49 PM
\IEXPLORE.EXE
12/11/2009 5:47:49 PM
\IEXPLORE.EXE
12/11/2009 5:19:57 PM
\IEXPLORE.EXE
12/11/2009 5:07:18 PM
\IEXPLORE.EXE
12/11/2009 5:07:18 PM
\IEXPLORE.EXE
12/11/2009 5:07:18 PM
\IEXPLORE.EXE
12/11/2009 4:59:00 PM
\IEXPLORE.EXE
12/11/2009 4:50:10 PM
\IEXPLORE.EXE
12/11/2009 4:50:10 PM
\IEXPLORE.EXE
12/11/2009 4:50:10 PM
\IEXPLORE.EXE
12/11/2009 4:31:53 PM
\IEXPLORE.EXE
12/11/2009 1:32:04 PM
\IEXPLORE.EXE
12/11/2009 1:32:04 PM
\IEXPLORE.EXE
12/11/2009 1:32:04 PM
\IEXPLORE.EXE
12/11/2009 1:30:58 PM
\IEXPLORE.EXE
12/11/2009 1:28:01 PM
\IEXPLORE.EXE
12/11/2009 1:28:01 PM
\IEXPLORE.EXE
12/11/2009 1:28:01 PM
\IEXPLORE.EXE
12/11/2009 1:26:24 PM
\IEXPLORE.EXE
12/11/2009 10:04:32 AM
\IEXPLORE.EXE
12/11/2009 10:04:32 AM
\IEXPLORE.EXE
12/11/2009 10:04:32 AM
\IEXPLORE.EXE
12/11/2009 10:04:30 AM
\IEXPLORE.EXE
12/11/2009 9:09:31 AM
\IEXPLORE.EXE
12/11/2009 9:09:31 AM
\IEXPLORE.EXE
12/11/2009 9:09:31 AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

\IEXPLORE.EXE
12/11/2009 6:15:54 AM
\IEXPLORE.EXE
12/11/2009 5:59:19 AM
\IEXPLORE.EXE
12/11/2009 5:59:19 AM
\IEXPLORE.EXE
12/11/2009 5:59:19 AM
\IEXPLORE.EXE
12/11/2009 4:18:42 AM
\IEXPLORE.EXE
12/11/2009 3:55:59 AM
\IEXPLORE.EXE
12/11/2009 3:55:59 AM
\IEXPLORE.EXE
12/11/2009 3:55:54 AM
\IEXPLORE.EXE
12/10/2009 3:08:13 PM
\IEXPLORE.EXE
12/10/2009 2:44:34 PM
\IEXPLORE.EXE
12/10/2009 2:44:33 PM
\IEXPLORE.EXE
12/10/2009 2:44:32 PM
\IEXPLORE.EXE
12/10/2009 2:22:42 PM
\IEXPLORE.EXE
12/10/2009 1:58:43 PM
\IEXPLORE.EXE
12/10/2009 1:58:43 PM
\IEXPLORE.EXE
12/10/2009 1:58:42 PM
\IEXPLORE.EXE
12/10/2009 4:33:59 AM
\IEXPLORE.EXE
12/10/2009 4:10:50 AM
\IEXPLORE.EXE
12/10/2009 4:10:38 AM
\IEXPLORE.EXE
12/10/2009 4:10:37 AM
\IEXPLORE.EXE
12/10/2009 4:10:37 AM
\IEXPLORE.EXE
12/10/2009 4:10:34 AM
\IEXPLORE.EXE
12/10/2009 4:10:27 AM
\IEXPLORE.EXE
12/10/2009 4:10:18 AM
\IEXPLORE.EXE
12/8/2009 9:15:51 PM
\IEXPLORE.EXE
12/8/2009 9:15:45 PM
\IEXPLORE.EXE
12/8/2009 9:15:45 PM
\IEXPLORE.EXE
12/8/2009 9:15:45 PM
\IEXPLORE.EXE
12/8/2009 9:15:41 PM
\IEXPLORE.EXE
12/8/2009 9:08:05 PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

\IEXPLORE.EXE
12/8/2009 9:08:05 PM
\IEXPLORE.EXE
12/8/2009 9:08:05 PM
\IEXPLORE.EXE
12/8/2009 2:28:21 PM
\IEXPLORE.EXE
12/8/2009 1:22:52 PM
\IEXPLORE.EXE
12/8/2009 1:22:51 PM
\IEXPLORE.EXE
12/8/2009 1:22:46 PM
\IEXPLORE.EXE
12/8/2009 11:25:55 AM
\IEXPLORE.EXE
12/8/2009 10:50:43 AM
\IEXPLORE.EXE
12/8/2009 10:50:43 AM
\IEXPLORE.EXE
12/8/2009 10:50:43 AM
\IEXPLORE.EXE
12/8/2009 4:51:20 AM
\IEXPLORE.EXE
12/8/2009 4:41:20 AM
\IEXPLORE.EXE
12/8/2009 4:41:16 AM
\IEXPLORE.EXE
12/8/2009 4:41:16 AM
\IEXPLORE.EXE
12/8/2009 4:41:16 AM
\IEXPLORE.EXE
12/8/2009 4:41:14 AM
\IEXPLORE.EXE
12/8/2009 4:41:13 AM
\IEXPLORE.EXE
12/8/2009 4:41:13 AM
\IEXPLORE.EXE
12/8/2009 4:41:09 AM
\IEXPLORE.EXE
12/8/2009 4:40:44 AM
\IEXPLORE.EXE
12/8/2009 4:40:44 AM
\IEXPLORE.EXE
12/8/2009 4:40:44 AM
\IEXPLORE.EXE
12/8/2009 4:40:42 AM
\IEXPLORE.EXE
12/8/2009 4:40:39 AM
\IEXPLORE.EXE
12/8/2009 4:40:39 AM
\IEXPLORE.EXE
12/8/2009 4:40:39 AM
\IEXPLORE.EXE
12/8/2009 4:38:16 AM
\IEXPLORE.EXE
12/8/2009 4:26:39 AM
\IEXPLORE.EXE
12/8/2009 4:26:39 AM
\IEXPLORE.EXE
12/8/2009 4:26:39 AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

\IEXPLORE.EXE
12/8/2009 2:42:38 AM
\IEXPLORE.EXE
12/8/2009 12:11:21 AM
\IEXPLORE.EXE
12/8/2009 12:11:20 AM
\IEXPLORE.EXE
12/8/2009 12:11:20 AM
\IEXPLORE.EXE
12/7/2009 11:57:25 PM
\IEXPLORE.EXE
12/7/2009 11:39:27 PM
\IEXPLORE.EXE
12/7/2009 11:39:27 PM
\IEXPLORE.EXE
12/7/2009 11:39:26 PM
\IEXPLORE.EXE
12/7/2009 4:45:11 PM
\IEXPLORE.EXE
12/7/2009 4:37:38 PM
\IEXPLORE.EXE
12/7/2009 4:37:37 PM
\IEXPLORE.EXE
12/7/2009 4:37:37 PM
\IEXPLORE.EXE
12/7/2009 3:48:56 PM
\IEXPLORE.EXE
12/7/2009 3:21:33 PM
\IEXPLORE.EXE
12/7/2009 3:21:33 PM
\IEXPLORE.EXE
12/7/2009 3:13:20 PM
\IEXPLORE.EXE
12/7/2009 3:13:20 PM
\IEXPLORE.EXE
12/7/2009 3:13:20 PM
\IEXPLORE.EXE
12/7/2009 2:36:15 PM
\IEXPLORE.EXE
12/7/2009 2:34:09 PM
\IEXPLORE.EXE
12/7/2009 2:33:38 PM
\IEXPLORE.EXE
12/7/2009 2:05:53 PM
\IEXPLORE.EXE
12/7/2009 2:05:53 PM
\IEXPLORE.EXE
12/7/2009 2:05:53 PM
\IEXPLORE.EXE
12/7/2009 6:42:11 AM
\IEXPLORE.EXE
12/7/2009 6:17:51 AM
\IEXPLORE.EXE
12/7/2009 6:17:51 AM
\IEXPLORE.EXE
12/7/2009 6:17:51 AM
\IEXPLORE.EXE
12/7/2009 6:04:05 AM
\IEXPLORE.EXE
12/7/2009 6:01:23 AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

\IEXPLORE.EXE
12/7/2009 6:01:23
\IEXPLORE.EXE
12/7/2009 6:01:23
\IEXPLORE.EXE
12/7/2009 5:21:37
\IEXPLORE.EXE
12/7/2009 4:01:44
\IEXPLORE.EXE
12/7/2009 4:01:44
\IEXPLORE.EXE
12/7/2009 4:01:43
\IEXPLORE.EXE
12/6/2009 3:29:26
\IEXPLORE.EXE
12/6/2009 2:47:05
\IEXPLORE.EXE
12/6/2009 2:47:04
\IEXPLORE.EXE
12/6/2009 2:47:04
\IEXPLORE.EXE
12/6/2009 2:46:10
\IEXPLORE.EXE
12/6/2009 2:39:51
\IEXPLORE.EXE
12/6/2009 2:39:51
\IEXPLORE.EXE
12/6/2009 2:39:51
\IEXPLORE.EXE
12/6/2009 2:39:48
\IEXPLORE.EXE
12/6/2009 2:04:54
\IEXPLORE.EXE
12/6/2009 2:04:54
\IEXPLORE.EXE
12/6/2009 2:04:53
\IEXPLORE.EXE
12/6/2009 5:03:55
\IEXPLORE.EXE
12/6/2009 3:51:58
\IEXPLORE.EXE
12/6/2009 3:51:58
\IEXPLORE.EXE
12/6/2009 2:26:09
\IEXPLORE.EXE
12/6/2009 2:26:08
\IEXPLORE.EXE
12/6/2009 2:26:08
\IEXPLORE.EXE
12/5/2009 7:28:54
\IEXPLORE.EXE
12/5/2009 6:23:41
\IEXPLORE.EXE
12/5/2009 6:23:41
\IEXPLORE.EXE
12/5/2009 6:23:41
\IEXPLORE.EXE
12/5/2009 6:22:04
\IEXPLORE.EXE
12/5/2009 4:32:24

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

\IEXPLORE.EXE
12/5/2009 4:32:24 PM
\IEXPLORE.EXE
12/5/2009 4:32:24 PM
\IEXPLORE.EXE
12/5/2009 4:29:56 PM
\IEXPLORE.EXE
12/5/2009 4:27:41 PM
\IEXPLORE.EXE
12/5/2009 4:27:40 PM
\IEXPLORE.EXE
12/5/2009 4:27:40 PM
\IEXPLORE.EXE
12/5/2009 4:15:08 PM
\IEXPLORE.EXE
12/5/2009 4:12:02 PM
\IEXPLORE.EXE
12/5/2009 4:12:02 PM
\IEXPLORE.EXE
12/5/2009 4:12:02 PM
\IEXPLORE.EXE
12/5/2009 1:52:51 PM
\IEXPLORE.EXE
12/5/2009 1:21:20 PM
\IEXPLORE.EXE
12/5/2009 1:21:20 PM
\IEXPLORE.EXE
12/5/2009 1:21:20 PM
\IEXPLORE.EXE
12/5/2009 1:10:26 PM
\IEXPLORE.EXE
12/5/2009 12:28:32 PM
\IEXPLORE.EXE
12/5/2009 12:28:32 PM
\IEXPLORE.EXE
12/5/2009 12:28:32 PM
\IEXPLORE.EXE
12/5/2009 12:28:31 PM
\IEXPLORE.EXE
12/5/2009 2:56:18 AM
\IEXPLORE.EXE
12/5/2009 2:56:18 AM
\IEXPLORE.EXE
12/5/2009 2:56:18 AM
\IEXPLORE.EXE
12/4/2009 10:42:45 PM
\IEXPLORE.EXE
12/4/2009 10:42:27 PM
\IEXPLORE.EXE
12/4/2009 10:30:17 PM
\IEXPLORE.EXE
12/4/2009 10:30:16 PM
\IEXPLORE.EXE
12/4/2009 10:30:16 PM
\IEXPLORE.EXE
12/4/2009 6:52:16 PM
\IEXPLORE.EXE
12/4/2009 6:52:11 PM
\IEXPLORE.EXE
12/4/2009 6:52:00 PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

\IEXPLORE.EXE
12/4/2009 4:27:39 PM
\IEXPLORE.EXE
12/4/2009 4:21:43 PM
\IEXPLORE.EXE
12/4/2009 4:21:42 PM
\IEXPLORE.EXE
12/4/2009 4:21:42 PM
\IEXPLORE.EXE
12/4/2009 3:55:11 PM
\IEXPLORE.EXE
12/4/2009 3:55:08 PM
\IEXPLORE.EXE
12/4/2009 3:54:11 PM
\IEXPLORE.EXE
12/4/2009 3:54:11 PM
\IEXPLORE.EXE
12/4/2009 3:54:10 PM
\IEXPLORE.EXE
12/4/2009 3:53:16 PM
\IEXPLORE.EXE
12/4/2009 3:53:16 PM
\IEXPLORE.EXE
12/4/2009 3:53:16 PM
\IEXPLORE.EXE
12/4/2009 3:53:11 PM
\IEXPLORE.EXE
12/4/2009 3:43:28 PM
\IEXPLORE.EXE
12/4/2009 3:43:28 PM
\IEXPLORE.EXE
12/4/2009 3:43:28 PM
\IEXPLORE.EXE
12/4/2009 2:45:52 PM
\IEXPLORE.EXE
12/4/2009 2:36:52 PM
\IEXPLORE.EXE
12/4/2009 2:36:51 PM
\IEXPLORE.EXE
12/4/2009 2:36:51 PM
\IEXPLORE.EXE
12/4/2009 1:32:34 PM
\IEXPLORE.EXE
12/4/2009 1:21:08 PM
\IEXPLORE.EXE
12/4/2009 1:21:08 PM
\IEXPLORE.EXE
12/4/2009 1:21:07 PM
\IEXPLORE.EXE
12/4/2009 12:26:37 PM
\IEXPLORE.EXE
12/4/2009 12:10:17 PM
\IEXPLORE.EXE
12/4/2009 12:10:17 PM
\IEXPLORE.EXE
12/4/2009 12:10:17 PM
\IEXPLORE.EXE
12/4/2009 12:10:06 PM
\IEXPLORE.EXE
12/4/2009 11:59:30 AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

\IEXPLORE.EXE
12/4/2009 11:59:30 AM
\IEXPLORE.EXE
12/4/2009 11:59:30 AM
\IEXPLORE.EXE
12/4/2009 4:56:46 AM
\IEXPLORE.EXE
12/4/2009 4:18:19 AM
\IEXPLORE.EXE
12/4/2009 4:18:18 AM
\IEXPLORE.EXE
12/4/2009 4:18:18 AM
\IEXPLORE.EXE
12/3/2009 2:32:10 PM
\IEXPLORE.EXE
12/3/2009 2:20:19 PM
\IEXPLORE.EXE
12/3/2009 2:20:19 PM
\IEXPLORE.EXE
12/3/2009 2:06:04 PM
\IEXPLORE.EXE
12/3/2009 2:06:04 PM
\IEXPLORE.EXE
12/3/2009 2:06:04 PM
\IEXPLORE.EXE
12/3/2009 5:04:39 AM
\IEXPLORE.EXE
12/3/2009 4:08:41 AM
\IEXPLORE.EXE
12/3/2009 4:08:35 AM
\IEXPLORE.EXE
12/3/2009 4:08:19 AM
\IEXPLORE.EXE
12/2/2009 8:41:58 PM
\IEXPLORE.EXE
12/2/2009 8:41:17 PM
\IEXPLORE.EXE
12/2/2009 8:41:15 PM
\IEXPLORE.EXE
12/2/2009 8:41:14 PM
\IEXPLORE.EXE
12/2/2009 8:38:14 PM
\IEXPLORE.EXE
12/2/2009 7:38:03 PM
\IEXPLORE.EXE
12/2/2009 7:36:39 PM
\IEXPLORE.EXE
12/2/2009 7:36:39 PM
\IEXPLORE.EXE
12/2/2009 3:43:02 PM
\IEXPLORE.EXE
12/2/2009 3:32:46 PM
\IEXPLORE.EXE
12/2/2009 3:32:46 PM
\IEXPLORE.EXE
12/2/2009 3:32:46 PM
\IEXPLORE.EXE
12/2/2009 3:12:21 PM
\IEXPLORE.EXE
12/2/2009 3:10:47 PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

\IEXPLORE.EXE
12/2/2009 3:10:46 PM
\IEXPLORE.EXE
12/2/2009 3:10:46 PM
\IEXPLORE.EXE
12/2/2009 3:04:28 PM
\IEXPLORE.EXE
12/2/2009 2:59:25 PM
\IEXPLORE.EXE
12/2/2009 2:59:25 PM
\IEXPLORE.EXE
12/2/2009 2:59:25 PM
\IEXPLORE.EXE
12/2/2009 2:43:49 PM
\IEXPLORE.EXE
12/2/2009 2:41:58 PM
\IEXPLORE.EXE
12/2/2009 2:41:58 PM
\IEXPLORE.EXE
12/2/2009 2:41:58 PM
\IEXPLORE.EXE
12/2/2009 1:45:26 PM
\IEXPLORE.EXE
12/2/2009 1:41:20 PM
\IEXPLORE.EXE
12/2/2009 1:41:20 PM
\IEXPLORE.EXE
12/2/2009 1:41:20 PM
\IEXPLORE.EXE
12/2/2009 12:17:22 PM
\IEXPLORE.EXE
12/2/2009 12:09:18 PM
\IEXPLORE.EXE
12/2/2009 12:09:18 PM
\IEXPLORE.EXE
12/2/2009 12:09:18 PM
\IEXPLORE.EXE
12/2/2009 11:42:42 AM
\IEXPLORE.EXE
12/2/2009 11:29:55 AM
\IEXPLORE.EXE
12/2/2009 11:29:55 AM
\IEXPLORE.EXE
12/2/2009 11:29:55 AM
\IEXPLORE.EXE
12/2/2009 6:48:22 AM
\IEXPLORE.EXE
12/2/2009 6:32:08 AM
\IEXPLORE.EXE
12/2/2009 6:32:08 AM
\IEXPLORE.EXE
12/2/2009 6:32:08 AM
\IEXPLORE.EXE
12/2/2009 6:06:50 AM
\IEXPLORE.EXE
12/2/2009 5:52:01 AM
\IEXPLORE.EXE
12/2/2009 5:52:01 AM
\IEXPLORE.EXE
12/2/2009 5:51:58 AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

\IEXPLORE.EXE
12/2/2009 3:45:33
\IEXPLORE.EXE
12/2/2009 3:06:56
\IEXPLORE.EXE
12/2/2009 3:06:56
\IEXPLORE.EXE
12/2/2009 3:06:56
\IEXPLORE.EXE
12/1/2009 6:10:25
\IEXPLORE.EXE
12/1/2009 6:03:49
\IEXPLORE.EXE
12/1/2009 6:03:49
\IEXPLORE.EXE
12/1/2009 6:03:49
\IEXPLORE.EXE
12/1/2009 3:18:19
\IEXPLORE.EXE
12/1/2009 3:10:15
\IEXPLORE.EXE
12/1/2009 3:10:15
\IEXPLORE.EXE
12/1/2009 3:10:15
\IEXPLORE.EXE
12/1/2009 2:32:28
\IEXPLORE.EXE
12/1/2009 1:46:36
\IEXPLORE.EXE
12/1/2009 1:46:29
\IEXPLORE.EXE
12/1/2009 1:46:29
\IEXPLORE.EXE
12/1/2009 6:17:20
\IEXPLORE.EXE
12/1/2009 6:12:13
\IEXPLORE.EXE
12/1/2009 6:12:10
\IEXPLORE.EXE
12/1/2009 6:12:10
\IEXPLORE.EXE
12/1/2009 6:12:10
\IEXPLORE.EXE
12/1/2009 5:56:02
\IEXPLORE.EXE
12/1/2009 5:56:02
\IEXPLORE.EXE
12/1/2009 5:56:02
\IEXPLORE.EXE
12/1/2009 4:44:02
\IEXPLORE.EXE
12/1/2009 4:18:48
\IEXPLORE.EXE
12/1/2009 4:18:48
\IEXPLORE.EXE
12/1/2009 4:12:05
\IEXPLORE.EXE
12/1/2009 4:12:05
\IEXPLORE.EXE
12/1/2009 4:12:05

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

\IEXPLORE.EXE
12/1/2009 4:12:03 AM
\IEXPLORE.EXE
12/1/2009 4:03:27 AM
\IEXPLORE.EXE
12/1/2009 4:03:27 AM
\IEXPLORE.EXE
12/1/2009 4:03:26 AM
\IEXPLORE.EXE
12/1/2009 3:44:16 AM
\IEXPLORE.EXE
12/1/2009 3:16:28 AM
\IEXPLORE.EXE
12/1/2009 3:15:13 AM
\IEXPLORE.EXE
12/1/2009 3:15:13 AM
\IEXPLORE.EXE
12/1/2009 3:15:13 AM
\IEXPLORE.EXE
12/1/2009 3:15:08 AM
\IEXPLORE.EXE
12/1/2009 3:15:05 AM
\IEXPLORE.EXE
12/1/2009 3:14:57 AM
\IEXPLORE.EXE
11/30/2009 4:06:11 PM
\IEXPLORE.EXE
11/30/2009 3:34:37 PM
\IEXPLORE.EXE
11/30/2009 3:34:36 PM
\IEXPLORE.EXE
11/30/2009 3:34:17 PM
\IEXPLORE.EXE
11/30/2009 10:18:08 AM
\IEXPLORE.EXE
11/30/2009 10:12:43 AM
\IEXPLORE.EXE
11/30/2009 10:12:43 AM
\IEXPLORE.EXE
11/30/2009 10:12:43 AM
\IEXPLORE.EXE
11/30/2009 5:44:38 AM
\IEXPLORE.EXE
11/29/2009 2:31:53 PM
\IEXPLORE.EXE
11/29/2009 2:31:53 PM
\IEXPLORE.EXE
11/29/2009 2:31:53 PM
\IEXPLORE.EXE
11/29/2009 2:31:47 PM
\IEXPLORE.EXE
11/29/2009 2:28:35 PM
\IEXPLORE.EXE
11/29/2009 2:28:35 PM
\IEXPLORE.EXE
11/29/2009 2:28:35 PM
\IEXPLORE.EXE
11/29/2009 2:15:54 PM
\IEXPLORE.EXE
11/29/2009 2:06:06 PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

\IEXPLORE.EXE
11/29/2009 2:06:05
\IEXPLORE.EXE
11/29/2009 2:06:05
\IEXPLORE.EXE
11/29/2009 5:07:45
\IEXPLORE.EXE
11/29/2009 4:51:59
\IEXPLORE.EXE
11/29/2009 4:51:52
\IEXPLORE.EXE
11/29/2009 4:51:51
\IEXPLORE.EXE
11/29/2009 4:51:51
\IEXPLORE.EXE
11/29/2009 4:51:51
\IEXPLORE.EXE
11/29/2009 4:51:51
\IEXPLORE.EXE
11/29/2009 4:51:51
\IEXPLORE.EXE
11/28/2009 6:03:44
\IEXPLORE.EXE
11/28/2009 5:37:55
\IEXPLORE.EXE
11/28/2009 5:20:23
\IEXPLORE.EXE
11/28/2009 5:20:23
\IEXPLORE.EXE
11/28/2009 5:20:23
\IEXPLORE.EXE
11/28/2009 5:20:23
\IEXPLORE.EXE
11/28/2009 5:20:23
\IEXPLORE.EXE
11/28/2009 5:20:23
\IEXPLORE.EXE
11/28/2009 4:42:24
\IEXPLORE.EXE
11/28/2009 4:41:49
\IEXPLORE.EXE
11/28/2009 4:41:49
\IEXPLORE.EXE
11/28/2009 4:41:48
\IEXPLORE.EXE
11/28/2009 4:41:06
\IEXPLORE.EXE
11/28/2009 4:03:02
\IEXPLORE.EXE
11/28/2009 4:03:01
\IEXPLORE.EXE
11/28/2009 4:03:01
\IEXPLORE.EXE
11/28/2009 3:33:45
\IEXPLORE.EXE
11/28/2009 3:15:25
\IEXPLORE.EXE
11/28/2009 3:15:24
\IEXPLORE.EXE
11/28/2009 3:15:24

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

\IEXPLORE.EXE
11/28/2009 3:14:06 PM
\IEXPLORE.EXE
11/28/2009 2:40:41 PM
\IEXPLORE.EXE
11/28/2009 2:40:41 PM
\IEXPLORE.EXE
11/28/2009 2:40:41 PM
\IEXPLORE.EXE
11/28/2009 12:04:58 PM
\IEXPLORE.EXE
11/28/2009 11:57:08 AM
\IEXPLORE.EXE
11/28/2009 11:57:08 AM
\IEXPLORE.EXE
11/28/2009 11:57:08 AM
\IEXPLORE.EXE
11/28/2009 11:38:05 AM
\IEXPLORE.EXE
11/27/2009 8:49:41 PM
\IEXPLORE.EXE
11/27/2009 8:49:41 PM
\IEXPLORE.EXE
11/27/2009 8:49:41 PM
\IEXPLORE.EXE
11/27/2009 3:21:06 PM
\IEXPLORE.EXE
11/27/2009 3:07:47 PM
\IEXPLORE.EXE
11/27/2009 3:07:45 PM
\IEXPLORE.EXE
11/27/2009 3:07:45 PM
\IEXPLORE.EXE
11/27/2009 12:15:02 PM
\IEXPLORE.EXE
11/27/2009 11:27:35 AM
\IEXPLORE.EXE
11/27/2009 11:27:35 AM
\IEXPLORE.EXE
11/27/2009 11:27:35 AM
\IEXPLORE.EXE
11/27/2009 11:27:30 AM
\IEXPLORE.EXE
11/27/2009 11:27:26 AM
\IEXPLORE.EXE
11/27/2009 11:27:25 AM
\IEXPLORE.EXE
11/27/2009 11:27:25 AM
\IEXPLORE.EXE
11/27/2009 2:32:06 AM
\IEXPLORE.EXE
11/27/2009 2:23:22 AM
\IEXPLORE.EXE
11/27/2009 2:23:21 AM
\IEXPLORE.EXE
11/27/2009 2:23:21 AM
\IEXPLORE.EXE
11/27/2009 2:23:15 AM
\IEXPLORE.EXE
11/27/2009 1:51:11 AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

\IEXPLORE.EXE
11/27/2009 1:51:11 AM
\IEXPLORE.EXE
11/27/2009 1:51:11 AM
\IEXPLORE.EXE
11/27/2009 1:51:06 AM
\IEXPLORE.EXE
11/27/2009 1:51:03 AM
\IEXPLORE.EXE
11/27/2009 12:57:51 AM
\IEXPLORE.EXE
11/27/2009 12:57:51 AM
\IEXPLORE.EXE
11/27/2009 12:57:51 AM
\IEXPLORE.EXE
11/27/2009 12:55:55 AM
\IEXPLORE.EXE
11/27/2009 12:46:07 AM
\IEXPLORE.EXE
11/27/2009 12:46:07 AM
\IEXPLORE.EXE
11/27/2009 12:46:06 AM
\IEXPLORE.EXE
11/27/2009 12:34:19 AM
\IEXPLORE.EXE
11/27/2009 12:34:19 AM
\IEXPLORE.EXE
11/27/2009 12:34:19 AM
\IEXPLORE.EXE
11/26/2009 6:56:01 PM
\IEXPLORE.EXE
11/26/2009 6:36:22 PM
\IEXPLORE.EXE
11/26/2009 6:36:22 PM
\IEXPLORE.EXE
11/26/2009 6:36:22 PM
\IEXPLORE.EXE
11/26/2009 6:01:23 PM
\IEXPLORE.EXE
11/26/2009 5:42:14 PM
\IEXPLORE.EXE
11/26/2009 5:42:14 PM
\IEXPLORE.EXE
11/26/2009 5:42:14 PM
\IEXPLORE.EXE
11/26/2009 5:42:08 PM
\IEXPLORE.EXE
11/26/2009 5:41:41 PM
\IEXPLORE.EXE
11/26/2009 5:41:41 PM
\IEXPLORE.EXE
11/26/2009 5:41:41 PM
\IEXPLORE.EXE
11/26/2009 5:16:31 PM
\IEXPLORE.EXE
11/26/2009 4:36:57 PM
\IEXPLORE.EXE
11/26/2009 4:36:57 PM
\IEXPLORE.EXE
11/26/2009 4:36:57 PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

\IEXPLORE.EXE
11/26/2009 2:26:42 PM
\IEXPLORE.EXE
11/26/2009 2:15:42 PM
\IEXPLORE.EXE
11/26/2009 2:15:41 PM
\IEXPLORE.EXE
11/26/2009 2:15:41 PM
\IEXPLORE.EXE
11/26/2009 2:15:36 PM
\IEXPLORE.EXE
11/26/2009 2:13:37 PM
\IEXPLORE.EXE
11/26/2009 2:13:36 PM
\IEXPLORE.EXE
11/26/2009 2:13:34 PM
\IEXPLORE.EXE
11/26/2009 12:37:13 PM
\IEXPLORE.EXE
11/26/2009 12:25:53 PM
\IEXPLORE.EXE
11/26/2009 12:25:52 PM
\IEXPLORE.EXE
11/26/2009 12:25:50 PM
\IEXPLORE.EXE
11/26/2009 7:17:32 AM
\IEXPLORE.EXE
11/26/2009 6:59:25 AM
\IEXPLORE.EXE
11/26/2009 6:59:24 AM
\IEXPLORE.EXE
11/26/2009 6:59:24 AM
\IEXPLORE.EXE
11/26/2009 12:19:05 AM
\IEXPLORE.EXE
11/26/2009 12:18:57 AM
\IEXPLORE.EXE
11/26/2009 12:18:56 AM
\IEXPLORE.EXE
11/26/2009 12:18:56 AM
\IEXPLORE.EXE
11/26/2009 12:18:49 AM
\IEXPLORE.EXE
11/25/2009 10:40:38 PM
\IEXPLORE.EXE
11/25/2009 10:40:38 PM
\IEXPLORE.EXE
11/25/2009 10:40:38 PM
\IEXPLORE.EXE
11/25/2009 10:39:50 PM
\IEXPLORE.EXE
11/25/2009 10:27:25 PM
\IEXPLORE.EXE
11/25/2009 10:27:24 PM
\IEXPLORE.EXE
11/25/2009 10:27:24 PM
\IEXPLORE.EXE
11/25/2009 10:27:23 PM
\IEXPLORE.EXE
11/25/2009 10:12:34 PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

\IEXPLORE.EXE
11/25/2009 10:12:34 PM
\IEXPLORE.EXE
11/25/2009 10:12:34 PM
\IEXPLORE.EXE
11/25/2009 7:45:25 PM
\IEXPLORE.EXE
11/25/2009 7:32:05 PM
\IEXPLORE.EXE
11/25/2009 7:32:05 PM
\IEXPLORE.EXE
11/25/2009 7:32:05 PM
\IEXPLORE.EXE
11/25/2009 3:09:00 PM
\IEXPLORE.EXE
11/25/2009 2:26:09 PM
\IEXPLORE.EXE
11/25/2009 2:26:09 PM
\IEXPLORE.EXE
11/25/2009 2:26:08 PM
\IEXPLORE.EXE
11/25/2009 2:25:02 PM
\IEXPLORE.EXE
11/25/2009 2:02:51 PM
\IEXPLORE.EXE
11/25/2009 2:02:51 PM
\IEXPLORE.EXE
11/25/2009 2:02:51 PM
\IEXPLORE.EXE
11/25/2009 1:29:37 PM
\IEXPLORE.EXE
11/25/2009 12:59:51 PM
\IEXPLORE.EXE
11/25/2009 12:59:51 PM
\IEXPLORE.EXE
11/25/2009 12:59:50 PM
\IEXPLORE.EXE
11/25/2009 12:29:53 PM
\IEXPLORE.EXE
11/25/2009 12:22:08 PM
\IEXPLORE.EXE
11/25/2009 12:22:08 PM
\IEXPLORE.EXE
11/25/2009 12:22:08 PM
\IEXPLORE.EXE
11/25/2009 4:41:14 AM
\IEXPLORE.EXE
11/25/2009 4:01:56 AM
\IEXPLORE.EXE
11/25/2009 4:01:55 AM
\IEXPLORE.EXE
11/25/2009 4:01:55 AM
\IEXPLORE.EXE
11/24/2009 3:26:46 PM
\IEXPLORE.EXE
11/24/2009 2:54:48 PM
\IEXPLORE.EXE
11/24/2009 2:54:47 PM
\IEXPLORE.EXE
11/24/2009 2:54:47 PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

\IEXPLORE.EXE
11/24/2009 2:41:03 PM
\IEXPLORE.EXE
11/24/2009 2:40:59 PM
\IEXPLORE.EXE
11/24/2009 2:39:55 PM
\IEXPLORE.EXE
11/24/2009 2:39:48 PM
\IEXPLORE.EXE
11/24/2009 2:38:40 PM
\IEXPLORE.EXE
11/24/2009 2:38:28 PM
\IEXPLORE.EXE
11/24/2009 2:34:09 PM
\IEXPLORE.EXE
11/24/2009 2:34:09 PM
\IEXPLORE.EXE
11/24/2009 2:34:09 PM
\IEXPLORE.EXE
11/24/2009 1:27:53 PM
\IEXPLORE.EXE
11/24/2009 1:27:53 PM
\IEXPLORE.EXE
11/24/2009 1:27:53 PM
\IEXPLORE.EXE
11/24/2009 10:26:22 AM
\IEXPLORE.EXE
11/24/2009 10:05:11 AM
\IEXPLORE.EXE
11/24/2009 10:05:09 AM
\IEXPLORE.EXE
11/24/2009 10:05:08 AM
\IEXPLORE.EXE
11/24/2009 4:22:48 AM
\IEXPLORE.EXE
11/24/2009 3:50:45 AM
\IEXPLORE.EXE
11/24/2009 3:50:45 AM
\IEXPLORE.EXE
11/24/2009 3:50:45 AM
\IEXPLORE.EXE
11/24/2009 3:50:44 AM
\IEXPLORE.EXE
11/24/2009 3:50:38 AM
\IEXPLORE.EXE
11/24/2009 3:50:37 AM
\IEXPLORE.EXE
11/24/2009 3:50:37 AM
\IEXPLORE.EXE
11/24/2009 3:50:36 AM
\IEXPLORE.EXE
11/24/2009 3:50:32 AM
\IEXPLORE.EXE
11/24/2009 3:50:32 AM
\IEXPLORE.EXE
11/24/2009 3:50:32 AM
\IEXPLORE.EXE
11/24/2009 3:50:26 AM
\IEXPLORE.EXE
11/24/2009 3:50:24 AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

\IEXPLORE.EXE
11/24/2009 3:50:24
\IEXPLORE.EXE
11/24/2009 3:50:24
\IEXPLORE.EXE
11/23/2009 8:09:23
\IEXPLORE.EXE
11/23/2009 8:09:21
\IEXPLORE.EXE
11/23/2009 7:57:38
\IEXPLORE.EXE
11/23/2009 7:57:38
\IEXPLORE.EXE
11/23/2009 7:57:38
\IEXPLORE.EXE
11/23/2009 7:57:38
\IEXPLORE.EXE
11/23/2009 7:57:37
\IEXPLORE.EXE
11/23/2009 7:57:37
\IEXPLORE.EXE
11/23/2009 5:01:28
\IEXPLORE.EXE
11/23/2009 4:59:36
\IEXPLORE.EXE
11/23/2009 4:59:36
\IEXPLORE.EXE
11/23/2009 4:59:36
\IEXPLORE.EXE
11/23/2009 4:41:09
\IEXPLORE.EXE
11/23/2009 4:12:51
\IEXPLORE.EXE
11/23/2009 4:12:51
\IEXPLORE.EXE
11/23/2009 4:12:50
\IEXPLORE.EXE
11/22/2009 5:20:58
\IEXPLORE.EXE
11/22/2009 5:12:14
\IEXPLORE.EXE
11/22/2009 5:12:14
\IEXPLORE.EXE
11/22/2009 5:12:13
\IEXPLORE.EXE
11/22/2009 4:21:08
\IEXPLORE.EXE
11/22/2009 4:20:03
\IEXPLORE.EXE
11/22/2009 4:20:03
\IEXPLORE.EXE
11/22/2009 4:20:03
\IEXPLORE.EXE
11/22/2009 4:20:02
\IEXPLORE.EXE
11/22/2009 4:19:58
\IEXPLORE.EXE
11/22/2009 4:19:58
\IEXPLORE.EXE
11/22/2009 4:19:58

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

\IEXPLORE.EXE
11/22/2009 3:37:58 PM
\IEXPLORE.EXE
11/22/2009 3:13:18 PM
\IEXPLORE.EXE
11/22/2009 3:13:18 PM
\IEXPLORE.EXE
11/22/2009 3:13:18 PM
\IEXPLORE.EXE
11/22/2009 2:29:38 PM
\IEXPLORE.EXE
11/22/2009 2:29:36 PM
\IEXPLORE.EXE
11/22/2009 2:29:36 PM
\IEXPLORE.EXE
11/22/2009 2:29:36 PM
\IEXPLORE.EXE
11/22/2009 2:29:34 PM
\IEXPLORE.EXE
11/22/2009 2:02:15 PM
\IEXPLORE.EXE
11/22/2009 2:02:13 PM
\IEXPLORE.EXE
11/22/2009 2:02:13 PM
\IEXPLORE.EXE
11/22/2009 2:46:50 AM
\IEXPLORE.EXE
11/22/2009 1:58:13 AM
\IEXPLORE.EXE
11/22/2009 1:58:13 AM
\IEXPLORE.EXE
11/22/2009 1:58:13 AM
\IEXPLORE.EXE
11/22/2009 1:58:05 AM
\IEXPLORE.EXE
11/22/2009 1:58:00 AM
\IEXPLORE.EXE
11/22/2009 1:58:00 AM
\IEXPLORE.EXE
11/22/2009 1:58:00 AM
\IEXPLORE.EXE
11/22/2009 1:57:59 AM
\IEXPLORE.EXE
11/22/2009 1:57:57 AM
\IEXPLORE.EXE
11/22/2009 1:57:27 AM
\IEXPLORE.EXE
11/22/2009 1:57:27 AM
\IEXPLORE.EXE
11/22/2009 1:57:27 AM
\IEXPLORE.EXE
11/22/2009 1:57:23 AM
\IEXPLORE.EXE
11/22/2009 1:57:23 AM
\IEXPLORE.EXE
11/22/2009 1:57:23 AM
\IEXPLORE.EXE
11/22/2009 12:39:08 AM
\IEXPLORE.EXE
11/22/2009 12:28:37 AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

\IEXPLORE.EXE
11/22/2009 12:28:37 AM
\IEXPLORE.EXE
11/22/2009 12:28:37 AM
\IEXPLORE.EXE
11/21/2009 7:39:45 PM
\IEXPLORE.EXE
11/21/2009 7:30:22 PM
\IEXPLORE.EXE
11/21/2009 7:30:22 PM
\IEXPLORE.EXE
11/21/2009 7:30:22 PM
\IEXPLORE.EXE
11/21/2009 7:11:44 PM
\IEXPLORE.EXE
11/21/2009 4:57:42 PM
\IEXPLORE.EXE
11/21/2009 4:57:42 PM
\IEXPLORE.EXE
11/21/2009 4:57:42 PM
\IEXPLORE.EXE
11/21/2009 4:52:24 PM
\IEXPLORE.EXE
11/21/2009 4:48:52 PM
\IEXPLORE.EXE
11/21/2009 4:48:52 PM
\IEXPLORE.EXE
11/21/2009 4:48:52 PM
\IEXPLORE.EXE
11/21/2009 4:46:10 PM
\IEXPLORE.EXE
11/21/2009 4:44:12 PM
\IEXPLORE.EXE
11/21/2009 4:44:12 PM
\IEXPLORE.EXE
11/21/2009 4:44:12 PM
\IEXPLORE.EXE
11/21/2009 4:08:02 PM
\IEXPLORE.EXE
11/21/2009 3:56:46 PM
\IEXPLORE.EXE
11/21/2009 3:56:45 PM
\IEXPLORE.EXE
11/21/2009 3:56:45 PM
\IEXPLORE.EXE
11/21/2009 3:31:23 PM
\IEXPLORE.EXE
11/21/2009 1:55:53 PM
\IEXPLORE.EXE
11/21/2009 1:55:53 PM
\IEXPLORE.EXE
11/21/2009 1:55:53 PM
\IEXPLORE.EXE
11/21/2009 1:55:50 PM
\IEXPLORE.EXE
11/21/2009 1:55:03 PM
\IEXPLORE.EXE
11/21/2009 1:55:03 PM
\IEXPLORE.EXE
11/21/2009 1:55:03 PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

\IEXPLORE.EXE
11/21/2009 1:52:36 PM
\IEXPLORE.EXE
11/21/2009 12:35:16 PM
\IEXPLORE.EXE
11/21/2009 12:35:15 PM
\IEXPLORE.EXE
11/21/2009 12:35:12 PM
\IEXPLORE.EXE
11/20/2009 6:58:54 PM
\IEXPLORE.EXE
11/20/2009 2:39:01 PM
\IEXPLORE.EXE
11/20/2009 2:39:01 PM
\IEXPLORE.EXE
11/20/2009 2:39:00 PM
\IEXPLORE.EXE
11/20/2009 2:14:02 PM
\IEXPLORE.EXE
11/20/2009 2:07:12 PM
\IEXPLORE.EXE
11/20/2009 2:07:12 PM
\IEXPLORE.EXE
11/20/2009 2:07:12 PM
\IEXPLORE.EXE
11/20/2009 1:09:56 PM
\IEXPLORE.EXE
11/20/2009 12:01:37 PM
\IEXPLORE.EXE
11/20/2009 12:01:37 PM
\IEXPLORE.EXE
11/20/2009 12:01:37 PM
\IEXPLORE.EXE
11/20/2009 12:01:28 PM
\IEXPLORE.EXE
11/20/2009 12:01:01 PM
\IEXPLORE.EXE
11/20/2009 12:01:00 PM
\IEXPLORE.EXE
11/20/2009 12:00:56 PM
\IEXPLORE.EXE
11/20/2009 9:52:49 AM
\IEXPLORE.EXE
11/20/2009 9:51:02 AM
\IEXPLORE.EXE
11/20/2009 9:51:02 AM
\IEXPLORE.EXE
11/20/2009 9:51:02 AM
\IEXPLORE.EXE
11/20/2009 5:15:24 AM
\IEXPLORE.EXE
11/20/2009 4:51:06 AM
\IEXPLORE.EXE
11/20/2009 4:51:05 AM
\IEXPLORE.EXE
11/20/2009 4:51:05 AM
\IEXPLORE.EXE
11/19/2009 5:15:06 PM
\IEXPLORE.EXE
11/19/2009 4:02:52 PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

\IEXPLORE.EXE
11/19/2009 4:02:52 PM
\IEXPLORE.EXE
11/19/2009 4:02:52 PM
\IEXPLORE.EXE
11/19/2009 3:21:14 PM
\IEXPLORE.EXE
11/19/2009 2:48:35 PM
\IEXPLORE.EXE
11/19/2009 2:48:34 PM
\IEXPLORE.EXE
11/19/2009 2:48:34 PM
\IEXPLORE.EXE
11/19/2009 12:04:35 PM
\IEXPLORE.EXE
11/19/2009 11:44:26 AM
\IEXPLORE.EXE
11/19/2009 11:44:26 AM
\IEXPLORE.EXE
11/19/2009 11:44:26 AM
\IEXPLORE.EXE
11/19/2009 11:33:25 AM
\IEXPLORE.EXE
11/19/2009 11:31:09 AM
\IEXPLORE.EXE
11/19/2009 11:31:09 AM
\IEXPLORE.EXE
11/19/2009 11:31:09 AM
\IEXPLORE.EXE
11/19/2009 11:28:23 AM
\IEXPLORE.EXE
11/19/2009 10:13:23 AM
\IEXPLORE.EXE
11/19/2009 10:13:23 AM
\IEXPLORE.EXE
11/19/2009 10:13:23 AM
\IEXPLORE.EXE
11/19/2009 4:53:39 AM
\IEXPLORE.EXE
11/19/2009 4:38:36 AM
\IEXPLORE.EXE
11/19/2009 4:38:36 AM
\IEXPLORE.EXE
11/19/2009 4:38:36 AM
\IEXPLORE.EXE
11/19/2009 4:38:33 AM
\IEXPLORE.EXE
11/19/2009 4:30:19 AM
\IEXPLORE.EXE
11/19/2009 4:30:13 AM
\IEXPLORE.EXE
11/19/2009 4:30:07 AM
\IEXPLORE.EXE
11/18/2009 7:24:11 PM
\IEXPLORE.EXE
11/18/2009 7:20:49 PM
\IEXPLORE.EXE
11/18/2009 7:20:49 PM
\IEXPLORE.EXE
11/18/2009 7:20:49 PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

\IEXPLORE.EXE
11/18/2009 1:23:47 PM
\IEXPLORE.EXE
11/18/2009 12:51:31 PM
\IEXPLORE.EXE
11/18/2009 12:51:29 PM
\IEXPLORE.EXE
11/18/2009 12:51:23 PM
\IEXPLORE.EXE
11/18/2009 12:25:12 PM
\IEXPLORE.EXE
11/18/2009 12:19:44 PM
\IEXPLORE.EXE
11/18/2009 12:19:44 PM
\IEXPLORE.EXE
11/18/2009 12:19:43 PM
\IEXPLORE.EXE
11/18/2009 10:34:43 AM
\IEXPLORE.EXE
11/18/2009 10:34:41 AM
\IEXPLORE.EXE
11/18/2009 10:32:15 AM
\IEXPLORE.EXE
11/18/2009 10:32:15 AM
\IEXPLORE.EXE
11/18/2009 10:32:15 AM
\IEXPLORE.EXE
11/18/2009 10:15:17 AM
\IEXPLORE.EXE
11/18/2009 10:15:17 AM
\IEXPLORE.EXE
11/18/2009 10:15:17 AM
\IEXPLORE.EXE
11/18/2009 5:05:50 AM
\IEXPLORE.EXE
11/18/2009 4:45:53 AM
\IEXPLORE.EXE
11/18/2009 4:45:52 AM
\IEXPLORE.EXE
11/18/2009 4:45:51 AM
\IEXPLORE.EXE
11/17/2009 10:53:17 PM
\IEXPLORE.EXE
11/17/2009 10:33:09 PM
\IEXPLORE.EXE
11/17/2009 3:29:32 PM
\IEXPLORE.EXE
11/17/2009 2:56:29 PM
\IEXPLORE.EXE
11/17/2009 2:56:29 PM
\IEXPLORE.EXE
11/17/2009 2:56:29 PM
\IEXPLORE.EXE
11/17/2009 2:54:48 PM
\IEXPLORE.EXE
11/17/2009 2:51:39 PM
\IEXPLORE.EXE
11/17/2009 2:51:38 PM
\IEXPLORE.EXE
11/17/2009 2:51:38 PM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

\IEXPLORE.EXE
11/17/2009 2:25:04 AM
\IEXPLORE.EXE
11/17/2009 2:25:03 AM
\IEXPLORE.EXE
11/17/2009 2:25:03 AM
\IEXPLORE.EXE
dfsvc.exe (events: 7)
12/16/2009 8:05:57 AM
\IEUSER.EXE
12/16/2009 7:20:24 AM
\IEUSER.EXE
12/16/2009 7:02:34 AM
\IEUSER.EXE
12/16/2009 7:00:13 AM
\IEUSER.EXE
12/16/2009 6:47:31 AM
\IEUSER.EXE
12/16/2009 4:56:47 AM
\IEUSER.EXE
12/16/2009 4:35:02 AM
\IEUSER.EXE
12/16/2009 3:33:54 AM
\IEUSER.EXE
12/16/2009 3:18:52 AM
\IEUSER.EXE
12/16/2009 12:17:27 AM
\IEUSER.EXE
12/15/2009 10:57:25 PM
\IEUSER.EXE
12/15/2009 10:55:57 PM
\IEUSER.EXE
12/15/2009 7:06:52 PM
\IEUSER.EXE
12/15/2009 6:49:56 PM
\IEUSER.EXE
12/15/2009 6:37:10 PM
\IEUSER.EXE
12/15/2009 5:14:04 PM
\IEUSER.EXE
12/15/2009 5:01:50 PM
\IEUSER.EXE
12/15/2009 3:10:05 PM
\IEUSER.EXE
12/15/2009 2:56:01 PM
\IEUSER.EXE
12/15/2009 11:22:15 AM
\IEUSER.EXE
12/15/2009 11:14:50 AM
\IEUSER.EXE
12/15/2009 7:34:47 AM
\IEUSER.EXE
12/15/2009 5:32:14 AM
\IEUSER.EXE
12/15/2009 4:27:08 AM
\IEUSER.EXE
12/14/2009 7:43:30 PM
\IEUSER.EXE
12/14/2009 6:33:07 PM
\IEUSER.EXE

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

12/14/2009 6:18:23 PM
\IEUSER.EXE
12/14/2009 6:00:02 PM
\IEUSER.EXE
12/14/2009 4:11:54 PM
\IEUSER.EXE
12/14/2009 3:38:51 PM
\IEUSER.EXE
12/14/2009 3:08:27 PM
\IEUSER.EXE
12/14/2009 10:30:13 AM
\IEUSER.EXE
12/14/2009 10:11:54 AM
\IEUSER.EXE
12/14/2009 5:09:06 AM
\IEUSER.EXE
12/14/2009 4:06:27 AM
\IEUSER.EXE
12/14/2009 12:37:21 AM
\IEUSER.EXE
12/13/2009 7:49:38 PM
\IEUSER.EXE
12/13/2009 3:45:37 PM
\IEUSER.EXE
12/13/2009 3:17:40 PM
\IEUSER.EXE
12/13/2009 2:41:31 PM
\IEUSER.EXE
12/13/2009 1:57:53 PM
\IEUSER.EXE
12/13/2009 5:36:02 AM
\IEUSER.EXE
12/13/2009 4:41:16 AM
\IEUSER.EXE
12/12/2009 8:53:02 PM
\IEUSER.EXE
12/12/2009 5:32:32 PM
\IEUSER.EXE
12/12/2009 4:18:56 PM
\IEUSER.EXE
12/12/2009 3:32:22 PM
\IEUSER.EXE
12/12/2009 12:19:27 PM
\IEUSER.EXE
12/12/2009 11:03:30 AM
\IEUSER.EXE
12/12/2009 6:53:49 AM
\IEUSER.EXE
12/11/2009 8:00:18 PM
\IEUSER.EXE
12/11/2009 7:57:30 PM
\IEUSER.EXE
12/11/2009 5:47:49 PM
\IEUSER.EXE
12/11/2009 5:30:57 PM
\IEUSER.EXE
12/11/2009 4:50:10 PM
\IEUSER.EXE
12/11/2009 4:42:54 PM
\IEUSER.EXE

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

12/11/2009 10:04:32
\IEUSER.EXE
12/11/2009 10:04:30
\IEUSER.EXE
12/11/2009 10:04:30
\IEUSER.EXE
12/11/2009 10:04:30
\IEUSER.EXE
12/11/2009 10:04:30
\IEUSER.EXE
12/11/2009 10:04:30
\IEUSER.EXE
12/11/2009 10:04:30
\IEUSER.EXE
12/11/2009 10:04:30
\IEUSER.EXE
12/11/2009 10:04:30
\IEUSER.EXE
12/11/2009 10:04:30
\IEUSER.EXE
12/11/2009 10:04:30
\IEUSER.EXE
12/11/2009 10:04:18
\IEUSER.EXE
12/11/2009 10:04:18
\IEUSER.EXE
12/11/2009 10:04:18
\IEUSER.EXE
12/11/2009 10:04:18
\IEUSER.EXE
12/11/2009 10:04:18
\IEUSER.EXE
12/11/2009 10:04:18
\IEUSER.EXE
12/11/2009 10:04:18
\IEUSER.EXE
12/11/2009 10:04:18
\IEUSER.EXE
12/11/2009 10:04:18
\IEUSER.EXE
12/11/2009 10:04:18
\IEUSER.EXE
12/11/2009 10:04:18
\IEUSER.EXE
12/11/2009 10:04:18
\IEUSER.EXE
12/11/2009 10:04:18
\IEUSER.EXE
12/11/2009 10:04:18
\IEUSER.EXE
12/11/2009 10:04:17
\IEUSER.EXE
12/11/2009 10:04:17
\IEUSER.EXE
12/11/2009 10:04:17
\IEUSER.EXE
12/11/2009 10:04:17
\IEUSER.EXE
12/11/2009 10:04:17
\IEUSER.EXE

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

12/11/2009 10:04:17
\IEUSER.EXE
12/11/2009 10:04:17
\IEUSER.EXE
12/11/2009 10:04:17
\IEUSER.EXE
12/11/2009 10:04:17
\IEUSER.EXE
12/11/2009 10:04:17
\IEUSER.EXE
12/11/2009 10:04:17
\IEUSER.EXE
12/11/2009 10:04:17
\IEUSER.EXE
12/11/2009 10:04:17
\IEUSER.EXE
12/11/2009 10:04:17
\IEUSER.EXE
12/11/2009 10:04:17
\IEUSER.EXE
12/11/2009 10:04:17
\IEUSER.EXE
12/11/2009 10:04:17
\IEUSER.EXE
12/11/2009 10:04:17
\IEUSER.EXE
12/11/2009 10:04:17
\IEUSER.EXE
12/11/2009 10:04:17
\IEUSER.EXE
12/11/2009 10:04:17
\IEUSER.EXE
12/11/2009 10:04:17
\IEUSER.EXE
12/11/2009 10:04:17
\IEUSER.EXE
12/11/2009 10:04:17
\IEUSER.EXE
12/11/2009 10:04:17
\IEUSER.EXE
12/11/2009 10:04:17
\IEUSER.EXE
12/11/2009 10:04:16
\IEUSER.EXE
12/11/2009 10:04:16
\IEUSER.EXE
12/11/2009 10:04:16
\IEUSER.EXE
12/11/2009 10:04:16
\IEUSER.EXE
12/11/2009 10:04:16
\IEUSER.EXE
12/11/2009 10:04:16
\IEUSER.EXE
12/11/2009 10:04:16
\IEUSER.EXE
12/11/2009 10:04:16
\IEUSER.EXE
12/11/2009 10:04:16
\IEUSER.EXE

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

12/11/2009 10:04:16
\IEUSER.EXE
12/11/2009 10:04:12
\IEUSER.EXE
12/11/2009 10:04:12
\IEUSER.EXE
12/11/2009 10:04:12
\IEUSER.EXE
12/11/2009 10:04:12
\IEUSER.EXE
12/11/2009 10:04:12
\IEUSER.EXE
12/11/2009 10:04:12
\IEUSER.EXE
12/11/2009 10:04:12
\IEUSER.EXE
12/11/2009 10:04:12
\IEUSER.EXE
12/11/2009 10:04:12
\IEUSER.EXE
12/11/2009 10:04:12
\IEUSER.EXE
12/11/2009 10:04:12
\IEUSER.EXE
12/11/2009 10:04:12
\IEUSER.EXE
12/11/2009 10:04:12
\IEUSER.EXE
12/11/2009 10:04:12
\IEUSER.EXE
12/11/2009 10:04:12
\IEUSER.EXE
12/11/2009 10:04:12
\IEUSER.EXE
12/11/2009 10:04:12
\IEUSER.EXE
12/11/2009 10:04:12
\IEUSER.EXE
12/11/2009 10:04:12
\IEUSER.EXE
12/11/2009 10:04:12
\IEUSER.EXE
12/11/2009 10:04:02
\IEUSER.EXE
12/11/2009 10:04:02
\IEUSER.EXE
12/11/2009 10:04:02
\IEUSER.EXE
12/11/2009 10:04:02
\IEUSER.EXE
12/11/2009 10:04:02
\IEUSER.EXE
12/11/2009 10:04:02
\IEUSER.EXE
12/11/2009 10:04:02
\IEUSER.EXE
12/11/2009 10:04:02
\IEUSER.EXE
12/11/2009 10:03:59
\IEUSER.EXE

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM Process exit

C:\Program Files (x86)\INTERNET EXPLORER

12/11/2009 10:03:59 AM
\IEUSER.EXE
12/11/2009 10:03:58 AM
\IEUSER.EXE
12/11/2009 10:03:58 AM
\IEUSER.EXE
12/11/2009 10:03:58 AM
\IEUSER.EXE
12/11/2009 10:03:58 AM
\IEUSER.EXE
12/11/2009 10:03:58 AM
\IEUSER.EXE
12/11/2009 10:03:58 AM
\IEUSER.EXE
12/11/2009 10:03:58 AM
\IEUSER.EXE
12/11/2009 10:03:58 AM
\IEUSER.EXE
12/11/2009 10:03:58 AM
\IEUSER.EXE
12/11/2009 10:03:58 AM
\IEUSER.EXE
12/11/2009 10:03:58 AM
\IEUSER.EXE
12/11/2009 10:03:58 AM
\IEUSER.EXE
12/11/2009 10:03:58 AM
\IEUSER.EXE
12/11/2009 10:03:58 AM
\IEUSER.EXE
12/11/2009 10:03:57 AM
\IEUSER.EXE
12/11/2009 10:03:56 AM
\IEUSER.EXE
12/11/2009 9:53:13 AM
\IEUSER.EXE
12/11/2009 9:53:13 AM
\IEUSER.EXE
12/11/2009 9:53:13 AM
\IEUSER.EXE
12/11/2009 9:53:13 AM
\IEUSER.EXE
12/11/2009 9:53:13 AM
\IEUSER.EXE
12/11/2009 9:53:13 AM
\IEUSER.EXE
12/11/2009 9:53:13 AM
\IEUSER.EXE
12/11/2009 9:53:13 AM
\IEUSER.EXE
12/11/2009 9:53:13 AM
\IEUSER.EXE
12/11/2009 9:53:13 AM
\IEUSER.EXE
12/11/2009 9:53:13 AM
\IEUSER.EXE
12/11/2009 9:53:13 AM
\IEUSER.EXE
12/11/2009 9:53:13 AM
\IEUSER.EXE

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

12/11/2009 9:53:13
\IEUSER.EXE
12/11/2009 9:53:13
\IEUSER.EXE
12/11/2009 9:53:13
\IEUSER.EXE
12/11/2009 9:53:13
\IEUSER.EXE
12/11/2009 9:53:13
\IEUSER.EXE
12/11/2009 9:53:13
\IEUSER.EXE
12/11/2009 9:53:13
\IEUSER.EXE
12/11/2009 9:53:13
\IEUSER.EXE
12/11/2009 9:53:13
\IEUSER.EXE
12/11/2009 9:53:13
\IEUSER.EXE
12/11/2009 9:53:13
\IEUSER.EXE
12/11/2009 9:53:13
\IEUSER.EXE
12/11/2009 9:53:13
\IEUSER.EXE
12/11/2009 9:52:40
\IEUSER.EXE
12/11/2009 9:52:40
\IEUSER.EXE
12/11/2009 9:47:43
\IEUSER.EXE
12/11/2009 9:47:43
\IEUSER.EXE
12/11/2009 9:47:43
\IEUSER.EXE
12/11/2009 9:47:43
\IEUSER.EXE
12/11/2009 9:47:43
\IEUSER.EXE
12/11/2009 9:47:43
\IEUSER.EXE
12/11/2009 9:47:43
\IEUSER.EXE
12/11/2009 9:47:43
\IEUSER.EXE
12/11/2009 9:47:43
\IEUSER.EXE
12/11/2009 9:47:43
\IEUSER.EXE
12/11/2009 9:47:43
\IEUSER.EXE
12/11/2009 9:47:43
\IEUSER.EXE
12/11/2009 9:47:43
\IEUSER.EXE
12/11/2009 9:47:43
\IEUSER.EXE
12/11/2009 9:47:43
\IEUSER.EXE

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

12/11/2009 9:47:43
\IEUSER.EXE
12/11/2009 9:47:43
\IEUSER.EXE
12/11/2009 9:47:43
\IEUSER.EXE
12/11/2009 9:47:43
\IEUSER.EXE
12/11/2009 9:47:43
\IEUSER.EXE
12/11/2009 9:47:43
\IEUSER.EXE
12/11/2009 9:47:43
\IEUSER.EXE
12/11/2009 9:47:26
\IEUSER.EXE
12/11/2009 9:47:26
\IEUSER.EXE
12/11/2009 9:47:26
\IEUSER.EXE
12/11/2009 9:47:26
\IEUSER.EXE
12/11/2009 9:47:26
\IEUSER.EXE
12/11/2009 9:47:26
\IEUSER.EXE
12/11/2009 9:47:26
\IEUSER.EXE
12/11/2009 9:47:26
\IEUSER.EXE
12/11/2009 9:47:26
\IEUSER.EXE
12/11/2009 9:47:26
\IEUSER.EXE
12/11/2009 9:47:26
\IEUSER.EXE
12/11/2009 9:47:26
\IEUSER.EXE
12/11/2009 9:47:26
\IEUSER.EXE
12/11/2009 9:47:26
\IEUSER.EXE
12/11/2009 9:47:26
\IEUSER.EXE
12/11/2009 9:47:26
\IEUSER.EXE
12/11/2009 9:47:26
\IEUSER.EXE
12/11/2009 9:47:26
\IEUSER.EXE
12/11/2009 9:47:26
\IEUSER.EXE
12/11/2009 9:47:26
\IEUSER.EXE
12/11/2009 9:42:00
\IEUSER.EXE
12/11/2009 9:42:00
\IEUSER.EXE
12/11/2009 9:42:00
\IEUSER.EXE

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

12/11/2009 9:42:00
\IEUSER.EXE
12/11/2009 9:42:00
\IEUSER.EXE
12/11/2009 9:42:00
\IEUSER.EXE
12/11/2009 9:42:00
\IEUSER.EXE
12/11/2009 9:42:00
\IEUSER.EXE
12/11/2009 9:42:00
\IEUSER.EXE
12/11/2009 9:42:00
\IEUSER.EXE
12/11/2009 9:42:00
\IEUSER.EXE
12/11/2009 9:42:00
\IEUSER.EXE
12/11/2009 9:42:00
\IEUSER.EXE
12/11/2009 9:42:00
\IEUSER.EXE
12/11/2009 9:42:00
\IEUSER.EXE
12/11/2009 9:42:00
\IEUSER.EXE
12/11/2009 9:42:00
\IEUSER.EXE
12/11/2009 9:42:00
\IEUSER.EXE
12/11/2009 9:42:00
\IEUSER.EXE
12/11/2009 9:42:00
\IEUSER.EXE
12/11/2009 9:42:00
\IEUSER.EXE
12/11/2009 9:42:00
\IEUSER.EXE
12/11/2009 9:41:44
\IEUSER.EXE
12/11/2009 9:41:44
\IEUSER.EXE
12/11/2009 9:41:44
\IEUSER.EXE
12/11/2009 9:41:44
\IEUSER.EXE
12/11/2009 9:41:44
\IEUSER.EXE
12/11/2009 9:41:44
\IEUSER.EXE
12/11/2009 9:41:44
\IEUSER.EXE
12/11/2009 9:41:44
\IEUSER.EXE
12/11/2009 9:41:44
\IEUSER.EXE
12/11/2009 9:41:44
\IEUSER.EXE
12/11/2009 9:41:44
\IEUSER.EXE

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

12/11/2009 9:41:44
\IEUSER.EXE
12/11/2009 9:41:44
\IEUSER.EXE
12/11/2009 9:41:44
\IEUSER.EXE
12/11/2009 9:41:44
\IEUSER.EXE
12/11/2009 9:41:43
\IEUSER.EXE
12/11/2009 9:41:43
\IEUSER.EXE
12/11/2009 9:41:43
\IEUSER.EXE
12/11/2009 9:41:43
\IEUSER.EXE
12/11/2009 9:41:43
\IEUSER.EXE
12/11/2009 9:41:43
\IEUSER.EXE
12/11/2009 9:41:43
\IEUSER.EXE
12/11/2009 9:41:43
\IEUSER.EXE
12/11/2009 9:41:43
\IEUSER.EXE
12/11/2009 9:37:12
\IEUSER.EXE
12/11/2009 9:37:12
\IEUSER.EXE
12/11/2009 9:37:12
\IEUSER.EXE
12/11/2009 9:37:12
\IEUSER.EXE
12/11/2009 9:37:12
\IEUSER.EXE
12/11/2009 9:37:12
\IEUSER.EXE
12/11/2009 9:37:12
\IEUSER.EXE
12/11/2009 9:37:12
\IEUSER.EXE
12/11/2009 9:37:12
\IEUSER.EXE
12/11/2009 9:37:12
\IEUSER.EXE
12/11/2009 9:37:12
\IEUSER.EXE
12/11/2009 9:37:12
\IEUSER.EXE
12/11/2009 9:37:12
\IEUSER.EXE
12/11/2009 9:37:12
\IEUSER.EXE
12/11/2009 9:37:12
\IEUSER.EXE
12/11/2009 9:37:12
\IEUSER.EXE
12/11/2009 9:37:12
\IEUSER.EXE

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

12/11/2009 9:37:12
\IEUSER.EXE
12/11/2009 9:37:12
\IEUSER.EXE
12/11/2009 9:37:12
\IEUSER.EXE
12/11/2009 9:37:11
\IEUSER.EXE
12/11/2009 9:37:10
\IEUSER.EXE
12/11/2009 9:36:55
\IEUSER.EXE
12/11/2009 9:36:54
\IEUSER.EXE
12/11/2009 9:36:54
\IEUSER.EXE
12/11/2009 9:36:54
\IEUSER.EXE
12/11/2009 9:36:54
\IEUSER.EXE
12/11/2009 9:36:54
\IEUSER.EXE
12/11/2009 9:36:54
\IEUSER.EXE
12/11/2009 9:36:54
\IEUSER.EXE
12/11/2009 9:36:54
\IEUSER.EXE
12/11/2009 9:36:54
\IEUSER.EXE
12/11/2009 9:36:54
\IEUSER.EXE
12/11/2009 9:36:54
\IEUSER.EXE
12/11/2009 9:36:54
\IEUSER.EXE
12/11/2009 9:36:54
\IEUSER.EXE
12/11/2009 9:36:54
\IEUSER.EXE
12/11/2009 9:36:54
\IEUSER.EXE
12/11/2009 9:36:54
\IEUSER.EXE
12/11/2009 9:36:54
\IEUSER.EXE
12/11/2009 9:36:54
\IEUSER.EXE
12/11/2009 9:36:54
\IEUSER.EXE
12/11/2009 9:36:54
\IEUSER.EXE
12/11/2009 9:36:54
\IEUSER.EXE
12/11/2009 9:36:54
\IEUSER.EXE
12/11/2009 9:36:54
\IEUSER.EXE
12/11/2009 9:25:41
\IEUSER.EXE

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

12/11/2009 9:25:41
\IEUSER.EXE
12/11/2009 9:25:41
\IEUSER.EXE
12/11/2009 9:25:41
\IEUSER.EXE
12/11/2009 9:25:40
\IEUSER.EXE
12/11/2009 9:25:40
\IEUSER.EXE
12/11/2009 9:25:40
\IEUSER.EXE
12/11/2009 9:25:40
\IEUSER.EXE
12/11/2009 9:25:40
\IEUSER.EXE
12/11/2009 9:25:40
\IEUSER.EXE
12/11/2009 9:25:40
\IEUSER.EXE
12/11/2009 9:25:40
\IEUSER.EXE
12/11/2009 9:25:40
\IEUSER.EXE
12/11/2009 9:25:40
\IEUSER.EXE
12/11/2009 9:25:40
\IEUSER.EXE
12/11/2009 9:25:40
\IEUSER.EXE
12/11/2009 9:25:40
\IEUSER.EXE
12/11/2009 9:25:40
\IEUSER.EXE
12/11/2009 9:25:40
\IEUSER.EXE
12/11/2009 9:25:39
\IEUSER.EXE
12/11/2009 9:25:23
\IEUSER.EXE
12/11/2009 9:25:23
\IEUSER.EXE
12/11/2009 9:25:23
\IEUSER.EXE
12/11/2009 9:25:23
\IEUSER.EXE
12/11/2009 9:25:23
\IEUSER.EXE
12/11/2009 9:25:23
\IEUSER.EXE
12/11/2009 9:25:23
\IEUSER.EXE
12/11/2009 9:25:23
\IEUSER.EXE
12/11/2009 9:25:23
\IEUSER.EXE
12/11/2009 9:25:23
\IEUSER.EXE
12/11/2009 9:25:23
\IEUSER.EXE

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

AM

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

12/11/2009 9:25:23 AM
\IEUSER.EXE
12/11/2009 9:25:23 AM
\IEUSER.EXE
12/11/2009 9:25:23 AM
\IEUSER.EXE
12/11/2009 9:25:23 AM
\IEUSER.EXE
12/11/2009 9:25:22 AM
\IEUSER.EXE
12/11/2009 9:25:22 AM
\IEUSER.EXE
12/11/2009 9:25:22 AM
\IEUSER.EXE
12/11/2009 9:25:22 AM
\IEUSER.EXE
12/11/2009 9:25:22 AM
\IEUSER.EXE
12/11/2009 9:25:22 AM
\IEUSER.EXE
12/11/2009 9:25:22 AM
\IEUSER.EXE
12/11/2009 9:25:22 AM
\IEUSER.EXE
12/11/2009 9:25:22 AM
\IEUSER.EXE
12/11/2009 9:23:06 AM
\IEUSER.EXE
12/11/2009 9:18:06 AM
\IEUSER.EXE
12/11/2009 9:18:06 AM
\IEUSER.EXE
12/11/2009 9:09:31 AM
\IEUSER.EXE
12/11/2009 6:20:54 AM
\IEUSER.EXE
12/11/2009 5:59:19 AM
\IEUSER.EXE
12/11/2009 4:35:19 AM
\IEUSER.EXE
12/11/2009 3:55:58 AM
\IEUSER.EXE
12/10/2009 3:19:14 PM
\IEUSER.EXE
12/10/2009 2:44:33 PM
\IEUSER.EXE
12/10/2009 2:22:49 PM
\IEUSER.EXE
12/10/2009 1:58:42 PM
\IEUSER.EXE
12/10/2009 4:45:00 AM
\IEUSER.EXE
12/10/2009 4:10:33 AM
\IEUSER.EXE
12/8/2009 9:15:51 PM
\IEUSER.EXE
12/8/2009 9:08:05 PM
\IEUSER.EXE
12/8/2009 2:45:11 PM
\IEUSER.EXE

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

12/8/2009 1:22:51 PM
\IEUSER.EXE
12/8/2009 11:30:55 AM
\IEUSER.EXE
12/8/2009 10:50:43 AM
\IEUSER.EXE
12/8/2009 5:02:21 AM
\IEUSER.EXE
12/8/2009 4:26:39 AM
\IEUSER.EXE
12/8/2009 2:53:39 AM
\IEUSER.EXE
12/7/2009 11:39:27 PM
\IEUSER.EXE
12/7/2009 5:01:32 PM
\IEUSER.EXE
12/7/2009 4:37:37 PM
\IEUSER.EXE
12/7/2009 4:02:54 PM
\IEUSER.EXE
12/7/2009 3:13:20 PM
\IEUSER.EXE
12/7/2009 2:51:13 PM
\IEUSER.EXE
12/7/2009 2:05:53 PM
\IEUSER.EXE
12/7/2009 6:47:11 AM
\IEUSER.EXE
12/7/2009 6:17:51 AM
\IEUSER.EXE
12/7/2009 6:15:06 AM
\IEUSER.EXE
12/7/2009 6:01:23 AM
\IEUSER.EXE
12/7/2009 5:32:38 AM
\IEUSER.EXE
12/7/2009 4:01:44 AM
\IEUSER.EXE
12/6/2009 3:40:26 PM
\IEUSER.EXE
12/6/2009 2:04:54 PM
\IEUSER.EXE
12/6/2009 5:14:56 AM
\IEUSER.EXE
12/6/2009 2:26:08 AM
\IEUSER.EXE
12/5/2009 7:28:55 PM
\IEUSER.EXE
12/5/2009 4:12:02 PM
\IEUSER.EXE
12/5/2009 2:03:52 PM
\IEUSER.EXE
12/5/2009 2:56:18 AM
\IEUSER.EXE
12/4/2009 10:43:14 PM
\IEUSER.EXE
12/4/2009 6:52:10 PM
\IEUSER.EXE
12/4/2009 4:27:47 PM
\IEUSER.EXE

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

12/4/2009 4:21:42 PM
\IEUSER.EXE
12/4/2009 4:11:16 PM
\IEUSER.EXE
12/4/2009 3:43:28 PM
\IEUSER.EXE
12/4/2009 2:56:52 PM
\IEUSER.EXE
12/4/2009 2:36:51 PM
\IEUSER.EXE
12/4/2009 1:43:35 PM
\IEUSER.EXE
12/4/2009 1:21:08 PM
\IEUSER.EXE
12/4/2009 12:43:37 PM
\IEUSER.EXE
12/4/2009 11:59:30 AM
\IEUSER.EXE
12/4/2009 5:07:47 AM
\IEUSER.EXE
12/4/2009 4:18:18 AM
\IEUSER.EXE
12/3/2009 2:48:57 PM
\IEUSER.EXE
12/3/2009 2:06:04 PM
\IEUSER.EXE
12/3/2009 5:15:39 AM
\IEUSER.EXE
12/3/2009 4:08:29 AM
\IEUSER.EXE
12/2/2009 8:42:06 PM
\IEUSER.EXE
12/2/2009 7:36:39 PM
\IEUSER.EXE
12/2/2009 3:43:08 PM
\IEUSER.EXE
12/2/2009 3:32:46 PM
\IEUSER.EXE
12/2/2009 3:23:22 PM
\IEUSER.EXE
12/2/2009 2:59:25 PM
\IEUSER.EXE
12/2/2009 2:48:49 PM
\IEUSER.EXE
12/2/2009 2:41:58 PM
\IEUSER.EXE
12/2/2009 1:50:26 PM
\IEUSER.EXE
12/2/2009 1:41:20 PM
\IEUSER.EXE
12/2/2009 12:28:23 PM
\IEUSER.EXE
12/2/2009 12:09:18 PM
\IEUSER.EXE
12/2/2009 11:59:08 AM
\IEUSER.EXE
12/2/2009 11:29:55 AM
\IEUSER.EXE
12/2/2009 7:04:52 AM
\IEUSER.EXE

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

12/2/2009 6:32:08 AM
\IEUSER.EXE
12/2/2009 6:11:50 AM
\IEUSER.EXE
12/2/2009 5:52:01 AM
\IEUSER.EXE
12/2/2009 3:56:33 AM
\IEUSER.EXE
12/2/2009 3:06:56 AM
\IEUSER.EXE
12/1/2009 6:21:26 PM
\IEUSER.EXE
12/1/2009 6:03:49 PM
\IEUSER.EXE
12/1/2009 3:29:19 PM
\IEUSER.EXE
12/1/2009 3:10:15 PM
\IEUSER.EXE
12/1/2009 2:43:29 PM
\IEUSER.EXE
12/1/2009 1:46:29 PM
\IEUSER.EXE
12/1/2009 6:28:20 AM
\IEUSER.EXE
12/1/2009 5:56:02 AM
\IEUSER.EXE
12/1/2009 4:55:03 AM
\IEUSER.EXE
12/1/2009 4:03:27 AM
\IEUSER.EXE
12/1/2009 3:55:17 AM
\IEUSER.EXE
12/1/2009 3:15:06 AM
\IEUSER.EXE
11/30/2009 4:17:12 PM
\IEUSER.EXE
11/30/2009 3:34:34 PM
\IEUSER.EXE
11/30/2009 10:18:14 AM
\IEUSER.EXE
11/30/2009 10:12:43 AM
\IEUSER.EXE
11/30/2009 6:01:37 AM
\IEUSER.EXE
11/29/2009 2:06:05 PM
\IEUSER.EXE
11/29/2009 5:18:46 AM
\IEUSER.EXE
11/29/2009 4:51:51 AM
\IEUSER.EXE
11/28/2009 6:14:45 PM
\IEUSER.EXE
11/28/2009 5:20:23 PM
\IEUSER.EXE
11/28/2009 4:59:11 PM
\IEUSER.EXE
11/28/2009 4:03:01 PM
\IEUSER.EXE
11/28/2009 3:48:59 PM
\IEUSER.EXE

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

11/28/2009 2:40:41 PM
\IEUSER.EXE
11/28/2009 12:15:59 PM
\IEUSER.EXE
11/28/2009 11:57:08 AM
\IEUSER.EXE
11/28/2009 11:49:05 AM
\IEUSER.EXE
11/27/2009 8:49:41 PM
\IEUSER.EXE
11/27/2009 3:36:03 PM
\IEUSER.EXE
11/27/2009 3:07:45 PM
\IEUSER.EXE
11/27/2009 12:30:43 PM
\IEUSER.EXE
11/27/2009 11:27:25 AM
\IEUSER.EXE
11/27/2009 2:37:06 AM
\IEUSER.EXE
11/27/2009 12:34:19 AM
\IEUSER.EXE
11/26/2009 7:07:02 PM
\IEUSER.EXE
11/26/2009 6:36:22 PM
\IEUSER.EXE
11/26/2009 6:12:24 PM
\IEUSER.EXE
11/26/2009 5:41:41 PM
\IEUSER.EXE
11/26/2009 5:27:32 PM
\IEUSER.EXE
11/26/2009 4:36:57 PM
\IEUSER.EXE
11/26/2009 2:31:42 PM
\IEUSER.EXE
11/26/2009 2:13:36 PM
\IEUSER.EXE
11/26/2009 12:48:14 PM
\IEUSER.EXE
11/26/2009 12:25:51 PM
\IEUSER.EXE
11/26/2009 7:22:32 AM
\IEUSER.EXE
11/26/2009 6:59:24 AM
\IEUSER.EXE
11/26/2009 12:23:49 AM
\IEUSER.EXE
11/25/2009 10:12:34 PM
\IEUSER.EXE
11/25/2009 7:56:26 PM
\IEUSER.EXE
11/25/2009 7:32:05 PM
\IEUSER.EXE
11/25/2009 3:14:00 PM
\IEUSER.EXE
11/25/2009 2:02:51 PM
\IEUSER.EXE
11/25/2009 1:40:38 PM
\IEUSER.EXE

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

11/25/2009 12:59:51 PM
\IEUSER.EXE
11/25/2009 12:45:56 PM
\IEUSER.EXE
11/25/2009 12:22:08 PM
\IEUSER.EXE
11/25/2009 4:52:14 AM
\IEUSER.EXE
11/25/2009 4:01:55 AM
\IEUSER.EXE
11/24/2009 3:37:47 PM
\IEUSER.EXE
11/24/2009 2:54:47 PM
\IEUSER.EXE
11/24/2009 2:41:31 PM
\IEUSER.EXE
11/24/2009 1:27:53 PM
\IEUSER.EXE
11/24/2009 10:37:23 AM
\IEUSER.EXE
11/24/2009 10:05:09 AM
\IEUSER.EXE
11/24/2009 4:34:02 AM
\IEUSER.EXE
11/24/2009 3:50:24 AM
\IEUSER.EXE
11/23/2009 8:20:22 PM
\IEUSER.EXE
11/23/2009 7:57:37 PM
\IEUSER.EXE
11/23/2009 5:18:13 PM
\IEUSER.EXE
11/23/2009 4:59:36 PM
\IEUSER.EXE
11/23/2009 4:52:10 AM
\IEUSER.EXE
11/23/2009 4:12:51 AM
\IEUSER.EXE
11/22/2009 5:25:58 PM
\IEUSER.EXE
11/22/2009 5:12:14 PM
\IEUSER.EXE
11/22/2009 4:25:02 PM
\IEUSER.EXE
11/22/2009 4:19:58 PM
\IEUSER.EXE
11/22/2009 3:42:58 PM
\IEUSER.EXE
11/22/2009 3:13:18 PM
\IEUSER.EXE
11/22/2009 2:34:34 PM
\IEUSER.EXE
11/22/2009 2:02:13 PM
\IEUSER.EXE
11/22/2009 2:57:50 AM
\IEUSER.EXE
11/22/2009 1:57:23 AM
\IEUSER.EXE
11/22/2009 12:50:09 AM
\IEUSER.EXE

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

11/22/2009 12:28:37 AM
\IEUSER.EXE
11/21/2009 7:50:45 PM
\IEUSER.EXE
11/21/2009 7:30:22 PM
\IEUSER.EXE
11/21/2009 7:11:45 PM
\IEUSER.EXE
11/21/2009 4:44:12 PM
\IEUSER.EXE
11/21/2009 4:24:23 PM
\IEUSER.EXE
11/21/2009 3:56:45 PM
\IEUSER.EXE
11/21/2009 3:48:07 PM
\IEUSER.EXE
11/21/2009 12:35:14 PM
\IEUSER.EXE
11/20/2009 6:58:59 PM
\IEUSER.EXE
11/20/2009 2:39:00 PM
\IEUSER.EXE
11/20/2009 2:25:03 PM
\IEUSER.EXE
11/20/2009 2:07:12 PM
\IEUSER.EXE
11/20/2009 1:20:57 PM
\IEUSER.EXE
11/20/2009 12:01:00 PM
\IEUSER.EXE
11/20/2009 9:52:53 AM
\IEUSER.EXE
11/20/2009 9:51:02 AM
\IEUSER.EXE
11/20/2009 5:20:24 AM
\IEUSER.EXE
11/20/2009 4:51:05 AM
\IEUSER.EXE
11/19/2009 5:31:36 PM
\IEUSER.EXE
11/19/2009 4:02:52 PM
\IEUSER.EXE
11/19/2009 3:32:15 PM
\IEUSER.EXE
11/19/2009 2:48:34 PM
\IEUSER.EXE
11/19/2009 12:21:35 PM
\IEUSER.EXE
11/19/2009 11:44:26 AM
\IEUSER.EXE
11/19/2009 11:39:23 AM
\IEUSER.EXE
11/19/2009 10:13:23 AM
\IEUSER.EXE
11/19/2009 5:10:36 AM
\IEUSER.EXE
11/19/2009 4:30:11 AM
\IEUSER.EXE
11/18/2009 7:35:12 PM
\IEUSER.EXE

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

11/18/2009 7:20:49 PM
\IEUSER.EXE
11/18/2009 1:34:48 PM
\IEUSER.EXE
11/18/2009 12:51:29 PM
\IEUSER.EXE
11/18/2009 12:25:18 PM
\IEUSER.EXE
11/18/2009 12:19:44 PM
\IEUSER.EXE
11/18/2009 10:34:53 AM
\IEUSER.EXE
11/18/2009 10:15:17 AM
\IEUSER.EXE
11/18/2009 5:22:49 AM
\IEUSER.EXE
11/18/2009 4:45:52 AM
\IEUSER.EXE
11/17/2009 10:58:17 PM
\IEUSER.EXE
11/17/2009 10:33:09 PM
\IEUSER.EXE
11/17/2009 3:40:33 PM
\IEUSER.EXE
11/17/2009 2:51:38 PM
\IEUSER.EXE
11/17/2009 2:25:03 AM
\IEUSER.EXE
dfsvc.exe (events: 7)
12/16/2009 8:05:58 AM
BAR\WLTUSER.EXE
12/16/2009 7:09:24 AM
BAR\WLTUSER.EXE
12/16/2009 7:02:51 AM
BAR\WLTUSER.EXE
12/16/2009 7:00:12 AM
BAR\WLTUSER.EXE
12/16/2009 6:47:31 AM
BAR\WLTUSER.EXE
12/16/2009 4:53:43 AM
BAR\WLTUSER.EXE
12/16/2009 4:35:02 AM
BAR\WLTUSER.EXE
12/16/2009 3:22:55 AM
BAR\WLTUSER.EXE
12/16/2009 3:18:52 AM
BAR\WLTUSER.EXE
12/16/2009 12:14:19 AM
BAR\WLTUSER.EXE
12/15/2009 7:06:52 PM
BAR\WLTUSER.EXE
12/15/2009 6:44:57 PM
BAR\WLTUSER.EXE
12/15/2009 6:37:11 PM
BAR\WLTUSER.EXE
12/15/2009 5:15:47 PM
BAR\WLTUSER.EXE
12/15/2009 5:01:50 PM
BAR\WLTUSER.EXE
12/15/2009 3:05:16 PM

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process exit

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\INTERNET EXPLORER

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

BAR\WLTUSER.EXE
12/15/2009 2:56:01 PM
BAR\WLTUSER.EXE
12/15/2009 11:24:35 AM
BAR\WLTUSER.EXE
12/15/2009 11:14:51 AM
BAR\WLTUSER.EXE
12/15/2009 7:29:48 AM
BAR\WLTUSER.EXE
12/15/2009 5:32:14 AM
BAR\WLTUSER.EXE
12/15/2009 4:23:02 AM
BAR\WLTUSER.EXE
12/14/2009 7:43:30 PM
BAR\WLTUSER.EXE
12/14/2009 6:28:08 PM
BAR\WLTUSER.EXE
12/14/2009 6:18:24 PM
BAR\WLTUSER.EXE
12/14/2009 5:51:00 PM
BAR\WLTUSER.EXE
12/14/2009 5:39:37 PM
BAR\WLTUSER.EXE
12/14/2009 5:36:46 PM
BAR\WLTUSER.EXE
12/14/2009 4:12:05 PM
BAR\WLTUSER.EXE
12/14/2009 4:12:03 PM
BAR\WLTUSER.EXE
12/14/2009 4:11:57 PM
BAR\WLTUSER.EXE
12/14/2009 3:22:05 PM
BAR\WLTUSER.EXE
12/14/2009 3:08:28 PM
BAR\WLTUSER.EXE
12/14/2009 10:19:13 AM
BAR\WLTUSER.EXE
12/14/2009 10:11:55 AM
BAR\WLTUSER.EXE
12/14/2009 5:11:25 AM
BAR\WLTUSER.EXE
12/14/2009 4:06:28 AM
BAR\WLTUSER.EXE
12/14/2009 12:26:22 AM
BAR\WLTUSER.EXE
12/13/2009 7:49:39 PM
BAR\WLTUSER.EXE
12/13/2009 3:34:37 PM
BAR\WLTUSER.EXE
12/13/2009 3:17:41 PM
BAR\WLTUSER.EXE
12/13/2009 2:37:51 PM
BAR\WLTUSER.EXE
12/13/2009 1:57:56 PM
BAR\WLTUSER.EXE
12/13/2009 5:31:15 AM
BAR\WLTUSER.EXE
12/13/2009 4:41:17 AM
BAR\WLTUSER.EXE
12/12/2009 8:56:01 PM

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

BAR\WLTUSER.EXE
12/12/2009 8:30:30 PM
BAR\WLTUSER.EXE
12/12/2009 8:30:27 PM
BAR\WLTUSER.EXE
12/12/2009 5:35:39 PM
BAR\WLTUSER.EXE
12/12/2009 5:35:38 PM
BAR\WLTUSER.EXE
12/12/2009 5:32:36 PM
BAR\WLTUSER.EXE
12/12/2009 4:07:56 PM
BAR\WLTUSER.EXE
12/12/2009 4:03:33 PM
BAR\WLTUSER.EXE
12/12/2009 4:00:39 PM
BAR\WLTUSER.EXE
12/12/2009 3:32:22 PM
BAR\WLTUSER.EXE
12/12/2009 12:04:11 PM
BAR\WLTUSER.EXE
12/12/2009 11:53:13 AM
BAR\WLTUSER.EXE
12/12/2009 11:49:02 AM
BAR\WLTUSER.EXE
12/12/2009 11:03:31 AM
BAR\WLTUSER.EXE
12/12/2009 6:50:49 AM
BAR\WLTUSER.EXE
12/11/2009 8:00:19 PM
BAR\WLTUSER.EXE
12/11/2009 7:50:10 PM
BAR\WLTUSER.EXE
12/11/2009 5:47:49 PM
BAR\WLTUSER.EXE
12/11/2009 5:27:10 PM
BAR\WLTUSER.EXE
12/11/2009 5:07:18 PM
BAR\WLTUSER.EXE
12/11/2009 4:59:01 PM
BAR\WLTUSER.EXE
12/11/2009 4:50:11 PM
BAR\WLTUSER.EXE
12/11/2009 4:38:11 PM
BAR\WLTUSER.EXE
12/11/2009 9:09:31 AM
BAR\WLTUSER.EXE
12/11/2009 6:22:00 AM
BAR\WLTUSER.EXE
12/11/2009 5:59:19 AM
BAR\WLTUSER.EXE
12/11/2009 4:25:28 AM
BAR\WLTUSER.EXE
12/11/2009 3:55:59 AM
BAR\WLTUSER.EXE
12/10/2009 3:14:30 PM
BAR\WLTUSER.EXE
12/10/2009 2:44:34 PM
BAR\WLTUSER.EXE
12/10/2009 2:22:48 PM

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

BAR\WLTUSER.EXE
12/10/2009 1:58:43 PM
BAR\WLTUSER.EXE
12/10/2009 4:34:01 AM
BAR\WLTUSER.EXE
12/10/2009 4:10:38 AM
BAR\WLTUSER.EXE
12/8/2009 9:15:51 PM
BAR\WLTUSER.EXE
12/8/2009 9:08:06 PM
BAR\WLTUSER.EXE
12/8/2009 2:36:19 PM
BAR\WLTUSER.EXE
12/8/2009 1:22:53 PM
BAR\WLTUSER.EXE
12/8/2009 11:25:57 AM
BAR\WLTUSER.EXE
12/8/2009 10:50:43 AM
BAR\WLTUSER.EXE
12/8/2009 4:57:55 AM
BAR\WLTUSER.EXE
12/8/2009 4:40:40 AM
BAR\WLTUSER.EXE
12/8/2009 4:38:17 AM
BAR\WLTUSER.EXE
12/8/2009 4:26:40 AM
BAR\WLTUSER.EXE
12/8/2009 2:49:29 AM
BAR\WLTUSER.EXE
12/8/2009 12:11:21 AM
BAR\WLTUSER.EXE
12/7/2009 11:57:28 PM
BAR\WLTUSER.EXE
12/7/2009 11:39:27 PM
BAR\WLTUSER.EXE
12/7/2009 4:51:20 PM
BAR\WLTUSER.EXE
12/7/2009 4:37:38 PM
BAR\WLTUSER.EXE
12/7/2009 3:55:09 PM
BAR\WLTUSER.EXE
12/7/2009 3:13:20 PM
BAR\WLTUSER.EXE
12/7/2009 2:44:14 PM
BAR\WLTUSER.EXE
12/7/2009 2:05:57 PM
BAR\WLTUSER.EXE
12/7/2009 6:50:13 AM
BAR\WLTUSER.EXE
12/7/2009 6:17:52 AM
BAR\WLTUSER.EXE
12/7/2009 6:12:08 AM
BAR\WLTUSER.EXE
12/7/2009 6:01:23 AM
BAR\WLTUSER.EXE
12/7/2009 5:27:55 AM
BAR\WLTUSER.EXE
12/7/2009 4:01:44 AM
BAR\WLTUSER.EXE
12/6/2009 3:29:27 PM

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

BAR\WLTUSER.EXE
12/6/2009 2:47:05 PM
BAR\WLTUSER.EXE
12/6/2009 2:46:11 PM
BAR\WLTUSER.EXE
12/6/2009 2:39:52 PM
BAR\WLTUSER.EXE
12/6/2009 2:39:49 PM
BAR\WLTUSER.EXE
12/6/2009 2:04:54 PM
BAR\WLTUSER.EXE
12/6/2009 5:11:59 AM
BAR\WLTUSER.EXE
12/6/2009 2:26:09 AM
BAR\WLTUSER.EXE
12/5/2009 7:28:55 PM
BAR\WLTUSER.EXE
12/5/2009 4:32:25 PM
BAR\WLTUSER.EXE
12/5/2009 4:29:57 PM
BAR\WLTUSER.EXE
12/5/2009 4:27:41 PM
BAR\WLTUSER.EXE
12/5/2009 4:15:09 PM
BAR\WLTUSER.EXE
12/5/2009 4:12:03 PM
BAR\WLTUSER.EXE
12/5/2009 1:58:55 PM
BAR\WLTUSER.EXE
12/5/2009 1:21:20 PM
BAR\WLTUSER.EXE
12/5/2009 1:17:14 PM
BAR\WLTUSER.EXE
12/5/2009 2:56:18 AM
BAR\WLTUSER.EXE
12/4/2009 10:43:14 PM
BAR\WLTUSER.EXE
12/4/2009 6:52:20 PM
BAR\WLTUSER.EXE
12/4/2009 4:27:46 PM
BAR\WLTUSER.EXE
12/4/2009 4:21:43 PM
BAR\WLTUSER.EXE
12/4/2009 3:55:12 PM
BAR\WLTUSER.EXE
12/4/2009 3:53:16 PM
BAR\WLTUSER.EXE
12/4/2009 3:53:12 PM
BAR\WLTUSER.EXE
12/4/2009 3:43:28 PM
BAR\WLTUSER.EXE
12/4/2009 2:45:53 PM
BAR\WLTUSER.EXE
12/4/2009 2:36:52 PM
BAR\WLTUSER.EXE
12/4/2009 1:38:56 PM
BAR\WLTUSER.EXE
12/4/2009 1:21:08 PM
BAR\WLTUSER.EXE
12/4/2009 12:33:19 PM

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

BAR\WLTUSER.EXE
12/4/2009 11:59:31 AM
BAR\WLTUSER.EXE
12/4/2009 5:03:31 AM
BAR\WLTUSER.EXE
12/4/2009 4:18:20 AM
BAR\WLTUSER.EXE
12/3/2009 2:38:35 PM
BAR\WLTUSER.EXE
12/3/2009 2:06:04 PM
BAR\WLTUSER.EXE
12/3/2009 5:11:45 AM
BAR\WLTUSER.EXE
12/3/2009 4:08:52 AM
BAR\WLTUSER.EXE
12/2/2009 8:42:06 PM
BAR\WLTUSER.EXE
12/2/2009 7:36:39 PM
BAR\WLTUSER.EXE
12/2/2009 3:43:07 PM
BAR\WLTUSER.EXE
12/2/2009 3:32:46 PM
BAR\WLTUSER.EXE
12/2/2009 3:20:24 PM
BAR\WLTUSER.EXE
12/2/2009 2:59:25 PM
BAR\WLTUSER.EXE
12/2/2009 2:43:51 PM
BAR\WLTUSER.EXE
12/2/2009 2:41:58 PM
BAR\WLTUSER.EXE
12/2/2009 1:53:29 PM
BAR\WLTUSER.EXE
12/2/2009 1:41:21 PM
BAR\WLTUSER.EXE
12/2/2009 12:23:26 PM
BAR\WLTUSER.EXE
12/2/2009 12:09:19 PM
BAR\WLTUSER.EXE
12/2/2009 11:50:00 AM
BAR\WLTUSER.EXE
12/2/2009 11:29:58 AM
BAR\WLTUSER.EXE
12/2/2009 6:56:20 AM
BAR\WLTUSER.EXE
12/2/2009 6:32:09 AM
BAR\WLTUSER.EXE
12/2/2009 6:06:51 AM
BAR\WLTUSER.EXE
12/2/2009 5:52:02 AM
BAR\WLTUSER.EXE
12/2/2009 3:52:03 AM
BAR\WLTUSER.EXE
12/2/2009 3:06:57 AM
BAR\WLTUSER.EXE
12/1/2009 6:10:26 PM
BAR\WLTUSER.EXE
12/1/2009 6:03:49 PM
BAR\WLTUSER.EXE
12/1/2009 3:18:20 PM

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

BAR\WLTUSER.EXE
12/1/2009 3:10:16 PM
BAR\WLTUSER.EXE
12/1/2009 2:38:42 PM
BAR\WLTUSER.EXE
12/1/2009 1:46:37 PM
BAR\WLTUSER.EXE
12/1/2009 6:24:04 AM
BAR\WLTUSER.EXE
12/1/2009 5:56:02 AM
BAR\WLTUSER.EXE
12/1/2009 4:51:11 AM
BAR\WLTUSER.EXE
12/1/2009 4:12:05 AM
BAR\WLTUSER.EXE
12/1/2009 4:12:04 AM
BAR\WLTUSER.EXE
12/1/2009 4:03:27 AM
BAR\WLTUSER.EXE
12/1/2009 3:51:10 AM
BAR\WLTUSER.EXE
12/1/2009 3:15:25 AM
BAR\WLTUSER.EXE
11/30/2009 4:13:55 PM
BAR\WLTUSER.EXE
11/30/2009 3:34:38 PM
BAR\WLTUSER.EXE
11/30/2009 10:18:09 AM
BAR\WLTUSER.EXE
11/30/2009 10:12:44 AM
BAR\WLTUSER.EXE
11/30/2009 5:51:40 AM
BAR\WLTUSER.EXE
11/29/2009 2:31:53 PM
BAR\WLTUSER.EXE
11/29/2009 2:31:48 PM
BAR\WLTUSER.EXE
11/29/2009 2:28:35 PM
BAR\WLTUSER.EXE
11/29/2009 2:23:57 PM
BAR\WLTUSER.EXE
11/29/2009 2:06:06 PM
BAR\WLTUSER.EXE
11/29/2009 5:07:46 AM
BAR\WLTUSER.EXE
11/29/2009 4:51:52 AM
BAR\WLTUSER.EXE
11/28/2009 6:09:53 PM
BAR\WLTUSER.EXE
11/28/2009 5:20:23 PM
BAR\WLTUSER.EXE
11/28/2009 4:49:01 PM
BAR\WLTUSER.EXE
11/28/2009 4:03:02 PM
BAR\WLTUSER.EXE
11/28/2009 3:41:09 PM
BAR\WLTUSER.EXE
11/28/2009 2:40:42 PM
BAR\WLTUSER.EXE
11/28/2009 12:05:00 PM

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

BAR\WLTUSER.EXE
11/28/2009 11:57:09 AM
BAR\WLTUSER.EXE
11/28/2009 11:44:08 AM
BAR\WLTUSER.EXE
11/27/2009 8:49:41 PM
BAR\WLTUSER.EXE
11/27/2009 3:28:08 PM
BAR\WLTUSER.EXE
11/27/2009 3:07:47 PM
BAR\WLTUSER.EXE
11/27/2009 12:22:13 PM
BAR\WLTUSER.EXE
11/27/2009 11:27:36 AM
BAR\WLTUSER.EXE
11/27/2009 11:27:31 AM
BAR\WLTUSER.EXE
11/27/2009 11:27:26 AM
BAR\WLTUSER.EXE
11/27/2009 2:38:34 AM
BAR\WLTUSER.EXE
11/27/2009 12:34:20 AM
BAR\WLTUSER.EXE
11/26/2009 7:02:13 PM
BAR\WLTUSER.EXE
11/26/2009 6:36:23 PM
BAR\WLTUSER.EXE
11/26/2009 6:08:21 PM
BAR\WLTUSER.EXE
11/26/2009 5:41:42 PM
BAR\WLTUSER.EXE
11/26/2009 5:16:33 PM
BAR\WLTUSER.EXE
11/26/2009 4:36:58 PM
BAR\WLTUSER.EXE
11/26/2009 2:33:35 PM
BAR\WLTUSER.EXE
11/26/2009 2:13:40 PM
BAR\WLTUSER.EXE
11/26/2009 12:45:12 PM
BAR\WLTUSER.EXE
11/26/2009 12:25:53 PM
BAR\WLTUSER.EXE
11/26/2009 7:25:15 AM
BAR\WLTUSER.EXE
11/26/2009 6:59:25 AM
BAR\WLTUSER.EXE
11/26/2009 12:26:18 AM
BAR\WLTUSER.EXE
11/25/2009 10:12:34 PM
BAR\WLTUSER.EXE
11/25/2009 7:52:27 PM
BAR\WLTUSER.EXE
11/25/2009 7:32:06 PM
BAR\WLTUSER.EXE
11/25/2009 3:15:59 PM
BAR\WLTUSER.EXE
11/25/2009 2:02:52 PM
BAR\WLTUSER.EXE
11/25/2009 1:37:35 PM

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

BAR\WLTUSER.EXE
11/25/2009 12:59:51 PM
BAR\WLTUSER.EXE
11/25/2009 12:29:54 PM
BAR\WLTUSER.EXE
11/25/2009 12:22:08 PM
BAR\WLTUSER.EXE
11/25/2009 4:47:53 AM
BAR\WLTUSER.EXE
11/25/2009 4:01:56 AM
BAR\WLTUSER.EXE
11/24/2009 3:26:47 PM
BAR\WLTUSER.EXE
11/24/2009 2:54:48 PM
BAR\WLTUSER.EXE
11/24/2009 2:41:30 PM
BAR\WLTUSER.EXE
11/24/2009 1:27:53 PM
BAR\WLTUSER.EXE
11/24/2009 10:33:10 AM
BAR\WLTUSER.EXE
11/24/2009 10:05:11 AM
BAR\WLTUSER.EXE
11/24/2009 4:29:26 AM
BAR\WLTUSER.EXE
11/24/2009 3:50:25 AM
BAR\WLTUSER.EXE
11/23/2009 8:15:31 PM
BAR\WLTUSER.EXE
11/23/2009 7:57:39 PM
BAR\WLTUSER.EXE
11/23/2009 5:01:29 PM
BAR\WLTUSER.EXE
11/23/2009 4:59:36 PM
BAR\WLTUSER.EXE
11/23/2009 4:47:26 AM
BAR\WLTUSER.EXE
11/23/2009 4:12:56 AM
BAR\WLTUSER.EXE
11/22/2009 5:20:59 PM
BAR\WLTUSER.EXE
11/22/2009 5:12:14 PM
BAR\WLTUSER.EXE
11/22/2009 4:21:09 PM
BAR\WLTUSER.EXE
11/22/2009 4:20:03 PM
BAR\WLTUSER.EXE
11/22/2009 4:20:03 PM
BAR\WLTUSER.EXE
11/22/2009 4:19:59 PM
BAR\WLTUSER.EXE
11/22/2009 3:44:55 PM
BAR\WLTUSER.EXE
11/22/2009 3:13:18 PM
BAR\WLTUSER.EXE
11/22/2009 2:38:11 PM
BAR\WLTUSER.EXE
11/22/2009 2:02:16 PM
BAR\WLTUSER.EXE
11/22/2009 2:53:57 AM

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

BAR\WLTUSER.EXE
11/22/2009 1:57:24 AM
BAR\WLTUSER.EXE
11/22/2009 12:39:10 AM
BAR\WLTUSER.EXE
11/22/2009 12:28:38 AM
BAR\WLTUSER.EXE
11/21/2009 7:39:46 PM
BAR\WLTUSER.EXE
11/21/2009 7:30:22 PM
BAR\WLTUSER.EXE
11/21/2009 7:11:44 PM
BAR\WLTUSER.EXE
11/21/2009 4:57:43 PM
BAR\WLTUSER.EXE
11/21/2009 4:52:25 PM
BAR\WLTUSER.EXE
11/21/2009 4:48:52 PM
BAR\WLTUSER.EXE
11/21/2009 4:46:11 PM
BAR\WLTUSER.EXE
11/21/2009 4:44:13 PM
BAR\WLTUSER.EXE
11/21/2009 4:14:53 PM
BAR\WLTUSER.EXE
11/21/2009 3:56:46 PM
BAR\WLTUSER.EXE
11/21/2009 3:39:27 PM
BAR\WLTUSER.EXE
11/21/2009 12:35:16 PM
BAR\WLTUSER.EXE
11/20/2009 6:58:59 PM
BAR\WLTUSER.EXE
11/20/2009 2:39:01 PM
BAR\WLTUSER.EXE
11/20/2009 2:14:03 PM
BAR\WLTUSER.EXE
11/20/2009 2:07:13 PM
BAR\WLTUSER.EXE
11/20/2009 1:17:31 PM
BAR\WLTUSER.EXE
11/20/2009 12:01:37 PM
BAR\WLTUSER.EXE
11/20/2009 12:01:29 PM
BAR\WLTUSER.EXE
11/20/2009 12:01:01 PM
BAR\WLTUSER.EXE
11/20/2009 9:52:53 AM
BAR\WLTUSER.EXE
11/20/2009 9:51:02 AM
BAR\WLTUSER.EXE
11/20/2009 5:22:54 AM
BAR\WLTUSER.EXE
11/20/2009 4:51:06 AM
BAR\WLTUSER.EXE
11/19/2009 5:23:09 PM
BAR\WLTUSER.EXE
11/19/2009 4:02:52 PM
BAR\WLTUSER.EXE
11/19/2009 3:27:32 PM

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

BAR\WLTUSER.EXE
11/19/2009 2:48:35 PM
BAR\WLTUSER.EXE
11/19/2009 12:12:02 PM
BAR\WLTUSER.EXE
11/19/2009 11:44:26 AM
BAR\WLTUSER.EXE
11/19/2009 11:40:40 AM
BAR\WLTUSER.EXE
11/19/2009 10:13:23 AM
BAR\WLTUSER.EXE
11/19/2009 5:00:27 AM
BAR\WLTUSER.EXE
11/19/2009 4:30:26 AM
BAR\WLTUSER.EXE
11/18/2009 7:31:54 PM
BAR\WLTUSER.EXE
11/18/2009 7:20:50 PM
BAR\WLTUSER.EXE
11/18/2009 1:29:58 PM
BAR\WLTUSER.EXE
11/18/2009 12:51:32 PM
BAR\WLTUSER.EXE
11/18/2009 12:25:14 PM
BAR\WLTUSER.EXE
11/18/2009 12:19:44 PM
BAR\WLTUSER.EXE
11/18/2009 10:34:52 AM
BAR\WLTUSER.EXE
11/18/2009 10:15:18 AM
BAR\WLTUSER.EXE
11/18/2009 5:05:51 AM
BAR\WLTUSER.EXE
11/18/2009 4:45:53 AM
BAR\WLTUSER.EXE
11/17/2009 11:01:16 PM
BAR\WLTUSER.EXE
11/17/2009 10:33:09 PM
BAR\WLTUSER.EXE
11/17/2009 3:37:35 PM
BAR\WLTUSER.EXE
11/17/2009 2:56:29 PM
BAR\WLTUSER.EXE
11/17/2009 2:54:50 PM
BAR\WLTUSER.EXE
11/17/2009 2:51:39 PM
BAR\WLTUSER.EXE
11/17/2009 2:25:04 AM
BAR\WLTUSER.EXE
dfsvc.exe (events: 7)
12/16/2009 8:35:30 AM
t.exe
12/16/2009 8:35:30 AM
t.exe
12/16/2009 8:35:30 AM
t.exe
12/16/2009 8:35:30 AM
t.exe
12/16/2009 8:12:25 AM
t.exe

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process start

C:\Program Files (x86)\WINDOWS LIVE\TOOL

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe

8:12:25 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:12:25 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:12:25 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:06:00 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:06:00 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:06:00 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:06:00 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:05:59 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:05:59 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:05:59 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:05:59 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:07:32 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:07:32 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:07:32 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:07:32 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:03:18 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:03:17 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:03:17 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:03:17 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:03:13 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:02:58 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:02:57 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:02:57 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:51:22 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:51:22 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:51:22 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:51:22 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:50:53 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:50:53 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:50:53 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe

6:50:53 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:47:34 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:47:34 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:47:34 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:47:34 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:47:33 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:47:32 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:47:32 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:47:32 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:42:35 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:42:35 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:42:35 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:42:35 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:29 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:29 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:29 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:29 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:40:57 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:40:57 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:40:57 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:40:57 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:40:12 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:40:12 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:40:12 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:40:12 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:40:08 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:40:07 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:40:07 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:40:07 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:40:00 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe

4:40:00 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:40:00 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:40:00 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:39:39 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:39:39 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:39:39 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:39:39 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:39:38 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:39:38 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:39:38 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:39:38 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:37:22 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:37:21 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:37:21 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:37:21 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:35:54 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:35:54 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:35:54 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:35:54 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:35:45 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:35:45 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:35:45 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:35:45 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:35:05 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:35:04 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:35:04 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:35:04 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:35:04 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:35:03 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:35:03 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe

4:35:03 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:18:55 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:18:55 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:18:55 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:18:55 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:18:54 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:18:53 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:18:53 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:18:53 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:06:05 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:06:05 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:06:05 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:06:05 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:05:45 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:05:45 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:05:45 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:05:45 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:05:40 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:05:40 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:05:40 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:05:40 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:04:40 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:04:40 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:04:40 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:04:40 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:01:05 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:01:04 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:01:04 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:01:04 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:01:01 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/16/2009
t.exe
12/16/2009
t.exe
12/16/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe

12:01:01 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:01:01 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:01:01 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:59:35 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:59:34 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:59:34 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:59:34 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:59:22 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:59:22 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:59:22 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:59:22 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:59:16 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:59:16 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:59:16 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:59:16 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:59:09 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:59:09 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:59:09 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:59:09 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:58:49 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:58:49 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:58:49 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:58:49 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:58:33 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:58:32 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:58:32 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:58:32 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:57:10 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:57:10 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:57:10 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe

11:57:10 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:52:37 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:52:37 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:52:37 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:52:37 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:52:14 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:52:13 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:52:13 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:52:13 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:52:13 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:52:12 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:52:12 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:52:12 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:57:28 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:57:28 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:57:28 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:57:28 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:57:27 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:57:26 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:57:26 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:57:26 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:47:31 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:47:30 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:47:30 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:47:30 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:43:26 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:43:25 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:43:25 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:43:25 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:05:02 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe

10:05:02 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:05:02 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:05:02 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:02:46 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:02:45 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:02:45 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:02:45 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:02:45 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:02:44 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:02:44 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:02:44 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:02:27 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:02:27 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:02:27 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:02:27 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:00:26 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:00:26 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:00:26 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:00:26 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:57:59 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:57:59 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:57:59 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:57:59 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:57:40 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:57:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:57:40 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:57:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:44:56 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:44:55 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:44:55 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe

9:44:55 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:44:25 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:44:25 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:44:25 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:44:25 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:15:05 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:15:05 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:15:05 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:15:05 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:32:38 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:32:38 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:32:38 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:32:38 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:31:49 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:31:49 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:31:49 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:31:49 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:31:48 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:31:48 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:31:48 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:31:48 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:31:09 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:31:08 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:31:08 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:31:08 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:30:12 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:30:11 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:30:11 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:30:11 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:29:17 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe

8:29:16 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:29:16 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:29:16 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:28:34 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:28:34 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:28:34 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:28:34 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:28:01 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:28:00 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:28:00 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:28:00 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:27:56 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:27:56 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:27:56 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:27:56 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:51:12 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:51:12 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:51:12 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:51:12 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:50:48 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:50:48 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:50:48 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:50:48 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:50:12 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:50:11 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:50:11 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:50:11 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:49:15 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:49:15 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:49:15 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe

7:49:15 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:16:33 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:16:32 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:16:32 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:16:32 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:15:38 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:15:38 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:15:38 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:15:38 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:14:29 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:14:28 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:14:28 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:14:28 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:14:16 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:14:15 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:14:15 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:14:15 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:06:54 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:06:54 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:06:54 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:06:54 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:06:53 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:06:53 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:06:53 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:06:53 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:43:55 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:43:54 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:43:54 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:43:54 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:43:38 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe

6:43:37 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:43:37 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:43:37 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:38:55 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:38:55 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:38:55 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:38:55 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:37:13 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:37:13 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:37:13 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:37:13 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:37:12 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:37:12 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:37:12 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:37:12 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:08:06 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:08:06 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:08:06 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:08:06 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:53 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:53 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:53 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:53 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:52 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:51 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:51 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:51 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:58:01 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:58:01 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:58:01 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe

2:58:01 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:57:40 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:57:39 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:57:39 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:57:39 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:04 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:04 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:04 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:04 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:03 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:02 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:02 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:02 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:14:55 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:14:55 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:14:55 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:14:55 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:14:53 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:14:52 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:14:52 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:14:52 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:08:08 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:08:07 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:08:07 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:08:07 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:07:13 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:07:13 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:07:13 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:07:13 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:06:57 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe

7:06:57 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:06:57 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:06:57 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:06:51 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:06:51 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:06:51 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:06:51 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:06:42 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:06:41 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:06:41 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:06:41 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:06:30 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:06:30 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:06:30 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:06:30 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:06:14 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:06:14 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:06:14 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:06:14 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:49:03 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:49:02 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:49:02 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:49:02 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:41:12 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:41:12 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:41:12 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:41:12 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:41:05 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:41:05 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:41:05 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe

5:41:05 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:40:02 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:40:02 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:40:02 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:40:02 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:39:50 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:39:50 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:39:50 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:39:50 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:38:21 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:38:21 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:38:21 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:38:21 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:38:16 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:38:16 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:38:16 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:38:16 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:36:37 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:36:36 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:36:36 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:36:36 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:35:47 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:35:46 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:35:46 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:35:46 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:32:17 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:32:16 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:32:16 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:32:16 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:32:16 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe

5:32:15 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:32:15 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:32:15 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:05:32 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:05:32 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:05:32 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:05:32 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:04:39 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:04:38 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:04:38 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:04:38 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:04:26 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:04:26 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:04:26 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:04:26 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:59:11 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:59:11 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:59:11 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:59:11 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:58:05 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:58:05 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:58:05 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:58:05 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:57:48 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:57:48 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:57:48 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:57:48 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:56:03 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:56:03 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:56:03 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe

3:56:03 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:55:42 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:55:41 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:55:41 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:55:41 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:53:51 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:53:50 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:53:50 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:53:50 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:52:07 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:52:07 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:52:07 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:52:07 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:49:54 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:49:54 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:49:54 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:49:54 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:49:51 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:49:51 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:49:51 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:49:51 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:49:00 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:48:59 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:48:59 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:48:59 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:45:19 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:45:18 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:45:18 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:45:18 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:44:28 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/15/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe

3:44:28 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:44:28 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:44:28 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:43:53 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:43:52 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:43:52 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:43:52 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:41:10 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:41:09 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:41:09 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:41:09 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:40:13 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:40:12 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:40:12 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:40:12 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:39:41 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:39:41 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:39:41 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:39:41 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:39:14 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:39:14 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:39:14 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:39:14 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:43:33 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:43:32 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:43:32 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:43:32 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:43:32 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:43:31 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:43:31 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe

7:43:31 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:20:31 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:20:31 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:20:31 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:20:31 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:20:04 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:20:04 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:20:04 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:20:04 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:18:26 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:18:26 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:18:26 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:18:26 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:18:25 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:18:25 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:18:25 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:18:25 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:42:25 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:42:25 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:42:25 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:42:25 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:41:02 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:41:01 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:41:01 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:41:01 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:40:50 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:40:50 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:40:50 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:40:50 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:40:17 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe

5:40:17 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:40:17 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:40:17 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:39:41 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:39:41 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:39:41 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:39:41 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:39:40 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:39:40 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:39:39 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:39:39 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:22:48 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:22:48 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:22:48 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:22:48 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:07 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:07 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:07 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:07 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:14:43 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:14:43 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:14:43 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:14:43 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:08 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:07 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:07 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:07 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:07 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:06 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:06 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe

4:12:06 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:01 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:00 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:00 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:00 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:08:31 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:08:30 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:08:30 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:08:30 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:08:29 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:08:29 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:08:29 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:08:29 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:11:59 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:11:59 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:11:59 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:11:59 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:11:58 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:11:57 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:11:57 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:11:57 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:03:34 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:03:33 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:03:33 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:03:33 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:13 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:12 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:12 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:12 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:36 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe

4:59:36 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:36 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:36 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:58:18 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:58:17 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:58:17 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:58:17 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:57:43 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:57:43 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:57:43 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:57:43 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:50:01 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:50:01 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:50:01 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:50:01 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:49:16 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:49:15 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:49:15 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:49:15 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:06:31 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:06:30 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:06:30 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:06:30 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:06:29 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:06:29 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:06:29 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:06:29 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:05:56 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:05:56 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:05:56 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/14/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe

12:05:56 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:04:47 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:04:46 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:04:46 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:04:46 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:02:02 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:02:01 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:02:01 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:02:01 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:01:20 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:01:20 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:01:20 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:01:20 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:59:59 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:59:58 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:59:58 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:59:58 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:49:42 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:49:42 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:49:42 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:49:42 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:49:41 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:49:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:49:40 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:49:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:29:33 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:29:33 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:29:33 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:29:33 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:29:09 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe

3:29:09 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:29:09 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:29:09 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:22:48 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:22:47 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:22:47 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:22:47 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:22:04 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:22:04 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:22:04 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:22:04 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:19:48 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:19:47 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:19:47 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:19:47 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:17:44 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:17:43 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:17:43 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:17:43 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:17:42 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:17:42 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:17:42 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:17:42 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:26:52 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:26:52 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:26:52 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:26:52 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:25:17 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:25:17 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:25:17 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe

2:25:17 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:25:09 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:25:08 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:25:08 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:25:08 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:18:26 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:18:26 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:18:26 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:18:26 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:16:46 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:16:46 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:16:46 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:16:46 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:14:51 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:14:51 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:14:51 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:14:51 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:13:28 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:13:27 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:13:27 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:13:27 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:09:21 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:09:21 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:09:21 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:09:21 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:08:08 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:08:07 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:08:07 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:08:07 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:34 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe

2:07:34 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:34 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:34 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:26 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:26 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:26 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:26 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:14 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:13 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:13 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:13 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:13 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:12 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:12 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:12 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:53 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:53 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:53 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:53 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:18 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:18 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:18 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:18 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:04:53 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:04:53 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:04:53 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:04:53 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:04:11 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:04:11 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:04:11 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe

2:04:11 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:01:47 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:01:47 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:01:47 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:01:47 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:59:34 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:59:34 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:59:34 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:59:34 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:59:22 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:59:22 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:59:22 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:59:22 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:57:59 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:57:59 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:57:59 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:57:59 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:57:57 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:57:57 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:57:57 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:57:57 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:17:52 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:17:51 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:17:51 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:17:51 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:17:45 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:17:45 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:17:45 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:17:45 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:17:38 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe

5:17:38 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:17:38 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:17:38 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:17:32 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:17:31 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:17:31 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:17:31 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:16:37 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:16:37 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:16:37 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:16:37 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:13:38 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:13:38 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:13:38 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:13:38 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:13:35 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:13:35 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:13:35 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:13:35 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:13:24 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:13:24 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:13:24 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:13:24 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:11:47 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:11:46 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:11:46 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:11:46 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:11:41 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:11:41 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:11:41 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe

5:11:41 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:11:25 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:11:25 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:11:25 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:11:25 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:11:24 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:11:24 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:11:24 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:11:24 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:11:16 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:11:16 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:11:16 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:11:16 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:11:03 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:11:03 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:11:03 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:11:03 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:08:28 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:08:28 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:08:28 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:08:28 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:44:29 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:44:28 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:44:28 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:44:28 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:43:11 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:43:11 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:43:11 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:43:11 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:26 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/13/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe

4:41:26 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:26 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:26 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:25 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:25 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:24 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:24 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:24 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:24 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:24 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:24 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:20 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:20 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:20 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:20 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:30:33 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:30:32 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:30:32 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:30:32 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:30:32 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:30:31 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:30:31 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:30:31 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:35:42 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:35:41 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:35:41 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:35:41 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:35:41 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:35:40 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:35:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe

5:35:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:32:39 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:32:39 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:32:39 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:32:39 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:32:38 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:32:37 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:32:37 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:32:37 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:35 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:35 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:35 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:35 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:34 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:33 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:33 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:33 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:58:58 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:58:58 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:58:58 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:58:58 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:58:52 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:58:52 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:58:52 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:58:52 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:57:58 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:57:58 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:57:58 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:57:58 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:42:18 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe

3:42:17 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:42:17 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:42:17 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:42:06 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:42:06 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:42:06 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:42:06 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:41:10 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:41:09 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:41:09 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:41:09 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:40:24 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:40:24 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:40:24 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:40:24 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:40:14 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:40:14 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:40:14 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:40:14 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:39:50 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:39:50 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:39:50 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:39:50 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:36:27 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:36:26 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:36:26 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:36:26 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:35:39 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:35:39 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:35:39 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe

3:35:39 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:35:11 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:35:11 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:35:11 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:35:11 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:33:53 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:33:53 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:33:53 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:33:53 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:33:10 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:33:10 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:33:10 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:33:10 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:32:27 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:32:26 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:32:26 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:32:26 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:32:25 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:32:24 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:32:24 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:32:24 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:53:15 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:53:15 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:53:15 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:53:15 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:53:14 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:53:14 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:53:14 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:53:14 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:41:30 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe

11:41:29 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:41:29 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:41:29 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:03:36 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:03:36 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:03:36 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:03:36 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:03:33 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:03:32 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:03:32 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:03:32 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:38:34 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:38:33 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:38:33 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:38:33 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:37:40 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:37:39 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:37:39 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:37:39 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:37:30 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:37:30 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:37:30 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:37:30 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:33:56 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:33:55 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:33:55 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:33:55 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:30:40 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:30:40 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:30:40 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe

6:30:40 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:30:31 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:30:31 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:30:31 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:30:31 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:28:56 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:28:56 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:28:56 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:28:56 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:28:48 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:28:48 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:28:48 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:28:48 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:28:22 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:28:22 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:28:22 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:28:22 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:27:30 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:27:30 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:27:30 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:27:30 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:26:58 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:26:58 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:26:58 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:26:58 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:26:06 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:26:06 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:26:06 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:26:06 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:25:03 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/12/2009
t.exe
12/12/2009
t.exe
12/12/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe

6:25:03 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:25:03 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:25:03 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:00:22 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:00:22 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:00:22 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:00:22 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:00:20 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:00:20 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:00:20 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:00:20 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:38:25 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:38:25 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:38:25 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:38:25 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:37:57 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:37:57 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:37:57 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:37:57 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:37:36 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:37:36 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:37:36 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:37:36 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:34:53 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:34:52 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:34:52 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:34:52 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:34:52 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:34:52 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:34:52 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe

7:34:52 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:34:48 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:34:48 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:34:48 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:34:48 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:34:47 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:34:47 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:34:47 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:34:47 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:34:43 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:34:43 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:34:43 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:34:43 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:34:42 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:34:42 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:34:42 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:34:42 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:25:19 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:25:19 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:25:19 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:25:19 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:25:18 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:25:17 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:25:17 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:25:17 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:47:52 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:47:51 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:47:51 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:47:51 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:47:51 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe

5:47:50 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:47:50 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:47:50 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:07:21 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:07:20 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:07:20 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:07:20 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:07:20 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:07:19 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:07:19 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:07:19 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:50:14 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:50:13 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:50:13 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:50:13 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:50:13 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:50:12 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:50:12 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:50:12 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:34:21 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:34:21 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:34:21 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:34:21 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:34:11 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:34:10 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:34:10 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:34:10 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:33:46 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:33:46 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:33:46 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe

1:33:46 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:33:11 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:33:11 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:33:11 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:33:11 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:32:40 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:32:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:32:40 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:32:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:32:06 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:32:06 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:32:06 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:32:06 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:32:05 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:32:05 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:32:05 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:32:05 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:30:19 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:30:19 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:30:19 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:30:19 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:28:03 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:28:03 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:28:03 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:28:03 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:28:02 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:28:02 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:28:02 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:28:02 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:25:59 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe

1:25:59 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:25:59 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:25:59 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:29:47 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:29:47 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:29:47 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:29:47 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:29:45 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:29:44 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:29:44 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:29:44 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:29:25 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:29:24 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:29:24 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:29:24 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:23:09 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:23:09 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:23:09 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:23:09 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:04:35 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:04:34 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:04:34 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:04:34 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:04:34 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:04:34 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:04:34 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:04:34 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:10:45 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:10:45 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:10:45 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe

9:10:45 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:10:41 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:10:41 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:10:41 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:10:41 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:09:35 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:09:34 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:09:34 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:09:34 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:09:33 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:09:32 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:09:32 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:09:32 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:59:22 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:59:21 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:59:21 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:59:21 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:59:21 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:59:20 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:59:20 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:59:20 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:17:51 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:17:50 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:17:50 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:17:50 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:13:30 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:13:30 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:13:30 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:13:30 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:09:14 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe

4:09:13 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:09:13 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:09:13 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:09:09 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:09:08 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:09:08 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:09:08 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:05:36 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:05:36 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:05:36 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:05:36 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:05:29 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:05:29 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:05:29 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:05:29 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:59:45 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:59:44 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:59:44 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:59:44 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:59:29 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:59:29 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:59:29 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:59:29 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:57:23 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:57:23 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:57:23 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:57:23 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:57:13 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:57:12 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:57:12 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/11/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe

3:57:12 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:56:53 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:56:53 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:56:53 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:56:53 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:56:08 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:56:07 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:56:07 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:56:07 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:56:06 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:56:06 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:56:06 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:56:06 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:07:30 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:07:29 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:07:29 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:07:29 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:06:42 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:06:42 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:06:42 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:06:42 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:06:06 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:06:06 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:06:06 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:06:06 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:05:03 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:05:03 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:05:03 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:05:03 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:04:33 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe

3:04:33 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:04:33 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:04:33 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:58:50 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:58:50 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:58:50 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:58:50 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:57:48 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:57:48 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:57:48 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:57:48 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:47 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:47 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:47 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:47 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:53:32 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:53:32 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:53:32 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:53:32 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:51:23 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:51:23 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:51:23 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:51:23 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:51:13 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:51:13 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:51:13 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:51:13 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:50:56 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:50:55 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:50:55 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe

2:50:55 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:50:02 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:50:02 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:50:02 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:50:02 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:48:39 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:48:39 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:48:39 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:48:39 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:44:40 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:44:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:44:40 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:44:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:44:39 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:44:39 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:44:39 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:44:39 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:51 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:51 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:51 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:51 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:03:12 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:03:12 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:03:12 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:03:12 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:02:02 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:02:02 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:02:02 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:02:02 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:58:49 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe

1:58:49 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:58:49 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:58:49 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:58:46 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:58:45 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:58:45 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:58:45 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:33:32 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:33:31 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:33:31 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:33:31 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:33:10 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:33:10 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:33:10 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:33:10 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:32:59 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:32:58 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:32:58 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:32:58 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:32:28 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:32:27 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:32:27 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:32:27 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:28:57 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:28:57 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:28:57 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:28:57 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:27:40 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:27:39 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:27:39 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe

4:27:39 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:27:30 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:27:30 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:27:30 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:27:30 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:26:02 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:26:02 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:26:02 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:26:02 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:24:32 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:24:31 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:24:31 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:24:31 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:24:19 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:24:19 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:24:19 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:24:19 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:23:19 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:23:19 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:23:19 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:23:19 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:22:11 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:22:11 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:22:11 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:22:11 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:21:31 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:21:30 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:21:30 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:21:30 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:16 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe
12/10/2009
t.exe

4:18:16 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:16 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:16 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:17:18 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:17:18 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:17:18 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:17:18 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:17:06 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:17:06 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:17:05 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:17:05 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:14:54 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:14:53 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:14:53 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:14:53 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:13:43 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:13:42 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:13:42 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:13:42 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:11:59 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:11:58 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:11:58 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:11:58 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:10:50 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:10:50 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:10:50 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:10:50 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:10:44 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:10:43 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:10:43 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/10/2009 4:10:43 AM
t.exe
12/10/2009 4:10:43 AM
t.exe
12/10/2009 4:10:43 AM
t.exe
12/10/2009 4:10:43 AM
t.exe
12/10/2009 4:10:43 AM
t.exe
12/8/2009 9:15:47 PM
t.exe
12/8/2009 9:15:47 PM
t.exe
12/8/2009 9:15:47 PM
t.exe
12/8/2009 9:15:47 PM
t.exe
12/8/2009 9:15:46 PM
t.exe
12/8/2009 9:15:46 PM
t.exe
12/8/2009 9:15:46 PM
t.exe
12/8/2009 9:15:46 PM
t.exe
12/8/2009 9:08:09 PM
t.exe
12/8/2009 9:08:09 PM
t.exe
12/8/2009 9:08:09 PM
t.exe
12/8/2009 9:08:09 PM
t.exe
12/8/2009 9:08:07 PM
t.exe
12/8/2009 9:08:07 PM
t.exe
12/8/2009 9:08:07 PM
t.exe
12/8/2009 9:08:07 PM
t.exe
12/8/2009 2:24:37 PM
t.exe
12/8/2009 2:24:37 PM
t.exe
12/8/2009 2:24:37 PM
t.exe
12/8/2009 2:24:37 PM
t.exe
12/8/2009 2:23:27 PM
t.exe
12/8/2009 2:23:27 PM
t.exe
12/8/2009 2:23:27 PM
t.exe
12/8/2009 2:23:26 PM
t.exe
12/8/2009 2:23:21 PM
t.exe

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe

2:23:20 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:23:20 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:23:20 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:22:37 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:22:37 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:22:37 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:22:37 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:13:22 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:13:21 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:13:21 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:13:21 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:10:20 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:10:20 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:10:20 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:10:20 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:10:18 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:10:18 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:10:18 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:10:18 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:48 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:47 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:47 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:47 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:22 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:21 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:21 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:21 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:56 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:56 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:56 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe

2:05:56 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:26 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:25 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:25 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:25 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:00:04 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:00:04 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:00:04 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:00:04 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:59:50 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:59:50 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:59:50 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:59:50 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:47:50 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:47:50 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:47:50 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:47:50 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:45:23 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:45:22 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:45:22 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:45:22 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:42:19 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:42:19 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:42:19 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:42:19 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:42:01 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:42:01 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:42:01 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:42:01 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:41:13 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe

1:41:13 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:41:13 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:41:13 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:39:41 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:39:41 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:39:41 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:39:41 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:38:00 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:38:00 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:38:00 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:38:00 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:37:14 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:37:14 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:37:14 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:37:14 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:36:01 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:36:00 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:36:00 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:36:00 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:32:07 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:32:06 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:32:06 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:32:06 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:31:20 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:31:20 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:31:20 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:31:20 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:26:22 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:26:22 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:26:22 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe

1:26:22 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:25:56 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:25:56 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:25:56 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:25:56 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:25:41 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:25:41 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:25:41 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:25:41 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:24:33 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:24:33 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:24:33 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:24:33 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:23:08 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:23:08 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:23:08 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:23:08 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:23:06 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:23:06 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:23:05 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:23:05 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:50:46 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:50:46 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:50:46 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:50:46 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:50:45 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:50:45 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:50:44 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:50:44 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:47:01 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe

4:47:00 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:47:00 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:47:00 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:45:28 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:45:28 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:45:28 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:45:28 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:53 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:53 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:53 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:53 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:39 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:39 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:39 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:39 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:19 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:19 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:19 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:19 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:18 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:17 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:17 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:17 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:16 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:15 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:15 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:15 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:15 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:14 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:14 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe

4:41:14 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:40:47 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:40:46 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:40:46 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:40:46 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:40:46 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:40:45 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:40:45 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:40:45 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:40:42 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:40:42 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:40:42 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:40:42 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:40:41 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:40:41 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:40:41 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:40:41 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:30:53 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:30:52 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:30:52 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:30:52 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:29:22 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:29:22 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:29:22 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:29:22 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:27:55 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:27:54 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:27:54 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:27:54 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:27:36 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe

4:27:35 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:27:35 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:27:35 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:27:23 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:27:23 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:27:23 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:27:23 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:26:45 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:26:44 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:26:44 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:26:44 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:26:43 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:26:41 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:26:41 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:26:41 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:41:33 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:41:33 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:41:33 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:41:33 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:41:28 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:41:28 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:41:28 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:41:28 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:40:32 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:40:31 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:40:31 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:40:31 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:40:01 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:40:00 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:40:00 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/8/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe

2:40:00 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:27:48 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:27:48 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:27:48 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:27:48 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:26:33 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:26:33 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:26:33 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:26:33 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:26:07 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:26:07 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:26:07 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:26:07 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:25:14 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:25:13 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:25:13 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:25:13 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:11:23 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:11:23 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:11:23 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:11:23 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:11:22 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:11:22 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:11:22 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:11:22 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:47:27 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:47:26 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:47:26 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:47:26 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:45:58 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe

11:45:58 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:45:58 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:45:58 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:45:56 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:45:55 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:45:55 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:45:55 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:45:50 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:45:49 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:45:49 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:45:49 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:43:37 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:43:37 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:43:37 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:43:37 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:43:32 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:43:32 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:43:32 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:43:32 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:43:08 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:43:08 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:43:08 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:43:08 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:40:02 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:40:01 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:40:01 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:40:01 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:39:30 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:39:29 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:39:29 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe

11:39:29 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:39:28 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:39:28 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:39:28 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:39:28 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:38:38 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:38:37 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:38:37 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:38:37 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:37:41 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:37:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:37:40 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:37:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:37:39 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:37:39 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:37:39 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:37:39 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:45:46 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:45:46 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:45:46 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:45:46 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:41:12 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:41:12 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:41:12 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:41:12 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:39:24 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:39:24 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:39:24 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:39:24 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:39:03 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe

3:39:03 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:39:03 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:39:03 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:37:25 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:37:25 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:37:25 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:37:25 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:33:33 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:33:32 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:33:32 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:33:32 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:31:20 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:31:19 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:31:19 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:31:19 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:27:36 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:27:35 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:27:35 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:27:35 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:27:25 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:27:25 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:27:25 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:27:25 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:26:09 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:26:09 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:26:09 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:26:09 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:22:05 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:22:05 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:22:05 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe

3:22:05 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:21:55 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:21:54 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:21:54 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:21:54 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:21:36 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:21:36 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:21:36 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:21:36 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:21:35 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:21:35 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:21:35 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:21:35 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:20:49 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:20:48 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:20:48 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:20:48 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:17:36 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:17:35 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:17:35 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:17:35 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:15:57 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:15:57 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:15:57 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:15:57 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:15:18 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:15:18 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:15:18 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:15:18 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:13:23 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe

3:13:23 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:13:23 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:13:23 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:13:22 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:13:22 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:13:22 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:13:22 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:33:50 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:33:50 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:33:39 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:33:39 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:30:47 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:30:47 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:30:47 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:30:47 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:59 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:59 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:59 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:59 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:58 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:58 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:58 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:58 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:39:40 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:39:40 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:39:40 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:39:40 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:39:34 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:39:34 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:39:34 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe

6:39:34 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:17:54 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:17:53 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:17:53 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:17:53 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:17:53 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:17:52 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:17:52 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:17:52 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:01:26 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:01:25 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:01:25 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:01:25 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:01:24 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:01:24 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:01:24 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:01:24 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:17:42 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:17:42 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:17:42 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:17:42 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:15:12 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:15:12 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:15:12 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:15:12 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:10:13 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:10:13 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:10:13 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:10:13 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:05:15 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe

5:05:15 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:05:15 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:05:15 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:03:12 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:03:12 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:03:12 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:03:12 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:02:28 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:02:27 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:02:27 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:02:27 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:58:49 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:58:48 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:58:48 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:58:48 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:56:15 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:56:15 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:56:15 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:56:15 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:55:57 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:55:57 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:55:57 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:55:57 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:55:52 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:55:51 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:55:51 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:55:51 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:02:37 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:02:36 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:02:36 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/7/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe

4:02:36 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:01:47 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:01:47 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:01:47 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:01:47 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:01:46 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:01:46 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:01:46 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:01:46 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:20:53 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:20:53 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:20:53 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:20:53 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:47:07 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:47:07 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:47:07 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:47:07 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:47:06 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:47:06 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:47:06 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:47:06 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:44:19 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:44:19 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:44:19 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:44:19 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:43:21 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:43:21 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:43:21 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:43:21 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:40:50 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe

2:40:50 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:40:50 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:40:50 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:40:32 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:40:32 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:40:32 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:40:32 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:40:24 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:40:24 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:40:24 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:40:24 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:39:54 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:39:54 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:39:54 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:39:54 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:39:53 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:39:53 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:39:53 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:39:52 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:39:46 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:39:46 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:39:46 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:39:46 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:33:23 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:33:23 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:33:23 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:33:23 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:33:01 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:33:00 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:33:00 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe

2:33:00 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:30:14 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:30:14 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:30:14 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:30:14 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:29:30 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:29:30 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:29:30 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:29:30 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:27:02 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:27:02 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:27:02 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:27:02 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:24:15 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:24:14 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:24:14 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:24:14 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:23:24 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:23:23 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:23:23 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:23:23 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:15:42 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:15:41 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:15:41 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:15:41 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:12:09 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:12:09 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:12:09 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:12:09 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:11:58 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe

2:11:58 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:11:58 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:11:58 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:10:39 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:10:39 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:10:39 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:10:39 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:09:40 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:09:40 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:09:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:09:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:57 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:57 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:57 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:57 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:12 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:11 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:11 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:11 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:48 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:47 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:47 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:47 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:04:57 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:04:57 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:04:57 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:04:57 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:04:56 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:04:55 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:04:55 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe

2:04:55 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:49:48 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:49:48 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:49:48 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:49:48 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:49:28 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:49:28 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:49:28 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:49:28 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:25:41 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:25:40 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:25:40 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:25:40 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:24:13 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:24:12 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:24:12 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:24:12 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:23:41 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:23:40 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:23:40 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:23:40 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:20:04 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:20:03 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:20:03 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:20:03 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:17:33 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:17:33 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:17:33 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:17:33 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:17:27 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe

4:17:27 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:17:27 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:17:27 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:17:01 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:17:01 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:17:01 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:17:01 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:14:35 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:14:35 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:14:35 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:14:35 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:13:33 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:13:32 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:13:32 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:13:32 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:12 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:12 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:12 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:12 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:57:26 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:57:26 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:57:26 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:57:26 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:55:59 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:55:58 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:55:58 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:55:58 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:55:13 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:55:13 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:55:13 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe

3:55:13 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:52:29 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:52:29 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:52:29 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:52:29 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:52:01 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:52:01 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:52:01 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:52:01 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:52:00 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:52:00 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:52:00 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:52:00 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:50:27 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:50:26 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:50:26 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:50:26 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:47:09 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:47:09 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:47:09 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:47:09 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:43:48 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:43:48 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:43:48 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:43:48 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:42:19 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:42:19 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:42:19 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:42:19 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:41:17 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe

3:41:17 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:41:17 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:41:17 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:40:05 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:40:05 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:40:05 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:40:05 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:39:45 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:39:44 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:39:44 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:39:44 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:39:39 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:39:38 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:39:38 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:39:38 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:37:55 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:37:54 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:37:54 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:37:54 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:34:58 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:34:58 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:34:58 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:34:58 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:31:49 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:31:49 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:31:49 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:31:49 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:29:26 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:29:26 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:29:26 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe

3:29:26 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:28:28 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:28:27 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:28:27 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:28:27 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:22:42 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:22:42 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:22:42 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:22:42 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:19:28 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:19:27 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:19:27 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:19:27 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:55:18 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:55:18 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:55:18 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:55:18 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:54:53 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:54:52 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:54:52 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:54:52 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:53:07 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:53:06 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:53:06 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:53:06 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:33:55 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:33:54 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:33:54 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:33:54 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:33:34 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/6/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe

2:33:34 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:33:34 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:33:34 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:31:39 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:31:39 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:31:39 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:31:39 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:31:37 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:31:37 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:31:37 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:31:37 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:26:12 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:26:11 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:26:11 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:26:11 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:26:10 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:26:10 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:26:10 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:26:10 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:38:20 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:38:19 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:38:19 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:38:19 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:23:43 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:23:43 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:23:43 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:23:43 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:23:42 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:23:42 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:23:42 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe

6:23:42 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:32:27 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:32:27 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:32:27 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:32:27 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:32:26 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:32:26 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:32:26 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:32:26 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:27:43 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:27:43 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:27:43 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:27:43 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:27:42 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:27:42 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:27:42 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:27:42 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:13:51 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:13:51 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:13:51 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:13:51 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:13:17 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:13:17 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:13:17 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:13:17 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:10 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:10 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:10 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:10 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:09 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe

4:12:09 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:09 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:09 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:42:26 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:42:26 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:42:26 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:42:26 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:21:23 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:21:22 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:21:22 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:21:22 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:21:22 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:21:21 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:21:21 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:21:21 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:28:36 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:28:35 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:28:35 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:28:35 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:28:34 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:28:34 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:28:34 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:28:34 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:10:18 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:10:17 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:10:17 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:10:17 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:09:43 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:09:42 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:09:42 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe

3:09:42 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:09:24 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:09:23 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:09:23 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:09:23 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:06:09 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:06:08 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:06:08 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:06:08 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:06:04 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:06:03 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:06:03 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:06:03 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:04:12 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:04:12 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:04:12 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:04:12 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:04:02 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:04:02 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:04:02 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:04:02 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:03:28 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:03:27 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:03:27 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:03:27 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:02:34 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:02:34 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:02:34 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:02:34 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:01:30 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/5/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe

3:01:29 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:01:29 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:01:29 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:01:22 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:01:22 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:01:22 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:01:22 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:57:43 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:57:42 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:57:42 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:57:42 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:21 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:21 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:21 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:21 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:20 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:20 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:20 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:20 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:30:20 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:30:19 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:30:19 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:30:19 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:30:18 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:30:18 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:30:18 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:30:18 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:52:32 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:52:32 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:52:32 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe

6:52:32 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:52:28 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:52:27 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:52:27 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:52:27 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:21:45 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:21:45 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:21:45 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:21:45 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:21:44 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:21:44 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:21:44 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:21:44 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:54:13 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:54:13 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:54:13 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:54:13 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:54:12 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:54:12 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:54:12 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:54:12 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:53:19 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:53:19 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:53:19 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:53:19 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:53:18 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:53:17 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:53:17 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:53:17 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:44:39 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe

3:44:39 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:44:39 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:44:39 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:43:31 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:43:30 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:43:30 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:43:30 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:43:30 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:43:29 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:43:29 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:43:29 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:36:55 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:36:54 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:36:54 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:36:54 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:36:53 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:36:53 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:36:53 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:36:53 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:28:58 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:28:58 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:28:58 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:28:58 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:28:23 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:28:23 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:28:23 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:28:23 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:27:21 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:27:21 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:27:21 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe

1:27:21 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:23:53 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:23:52 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:23:52 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:23:52 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:23:41 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:23:41 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:23:41 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:23:41 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:23:27 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:23:27 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:23:27 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:23:27 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:21:57 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:21:57 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:21:57 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:21:57 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:21:11 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:21:10 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:21:10 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:21:10 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:21:09 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:21:09 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:21:09 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:21:09 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:10:20 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:10:19 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:10:19 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:10:19 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:10:18 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe

12:10:18 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:10:18 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:10:18 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:59:34 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:59:34 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:59:34 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:59:34 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:59:33 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:59:32 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:59:32 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:59:32 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:54:45 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:54:45 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:54:45 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:54:45 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:50:49 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:50:49 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:50:49 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:50:49 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:47:12 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:47:12 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:47:12 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:47:12 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:45:47 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:45:47 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:45:47 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:45:47 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:43:48 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:43:48 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:43:48 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe

4:43:48 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:37:03 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:37:03 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:37:03 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:37:03 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:35:08 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:35:07 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:35:07 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:35:07 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:35:01 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:35:01 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:35:01 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:35:01 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:33:26 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:33:26 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:33:26 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:33:26 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:33:22 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:33:22 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:33:22 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:33:22 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:28:14 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:28:14 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:28:14 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:28:14 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:25:22 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:25:21 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:25:21 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:25:21 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:25:15 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe

4:25:15 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:25:15 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:25:15 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:24:51 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:24:51 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:24:51 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:24:51 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:24:46 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:24:46 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:24:46 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:24:46 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:24:32 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:24:32 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:24:32 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:24:32 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:24:01 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:24:01 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:24:01 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:24:01 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:21:18 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:21:17 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:21:17 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:21:17 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:19:50 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:19:50 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:19:50 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:19:50 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:50 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:49 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:49 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/4/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe

4:18:49 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:25 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:24 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:24 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:24 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:23 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:22 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:22 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:22 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:30:33 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:30:32 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:30:32 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:30:32 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:29:51 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:29:51 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:29:51 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:29:51 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:29:46 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:29:46 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:29:46 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:29:46 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:29:02 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:29:01 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:29:01 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:29:01 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:28:17 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:28:17 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:28:17 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:28:17 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:27:54 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe

2:27:54 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:27:54 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:27:54 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:21:33 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:21:33 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:21:33 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:21:33 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:21:09 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:21:08 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:21:08 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:21:08 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:20:31 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:20:29 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:20:29 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:20:29 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:20:27 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:20:22 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:20:22 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:20:22 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:19:04 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:19:04 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:19:04 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:19:04 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:17:50 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:17:50 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:17:50 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:17:50 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:16:53 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:16:53 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:16:53 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe

2:16:53 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:16:48 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:16:48 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:16:48 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:16:48 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:13:28 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:13:28 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:13:28 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:13:27 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:12:40 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:12:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:12:40 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:12:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:11:38 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:11:38 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:11:38 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:11:38 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:10:56 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:10:55 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:10:55 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:10:55 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:38 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:38 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:38 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:38 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:11 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:10 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:10 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:10 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:09 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe

2:06:08 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:08 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:08 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:53:42 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:53:41 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:53:41 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:53:41 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:37:30 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:37:30 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:37:30 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:37:30 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:29:45 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:29:44 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:29:44 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:29:44 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:16:50 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:16:50 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:16:50 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:16:50 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:16:45 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:16:45 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:16:45 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:16:45 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:16:24 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:16:24 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:16:24 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:16:24 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:14:03 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:14:03 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:14:03 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/3/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe

4:14:03 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:13:47 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:13:47 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:13:47 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:13:47 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:11:28 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:11:28 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:11:28 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:11:28 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:10:34 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:10:34 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:10:34 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:10:34 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:09:06 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:09:06 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:09:06 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:09:06 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:09:02 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:09:02 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:09:01 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:09:01 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:41:37 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:41:37 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:41:37 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:41:37 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:41:17 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:41:16 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:41:16 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:41:16 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:54:49 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe

7:54:49 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:54:49 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:54:49 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:38:06 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:38:05 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:38:05 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:38:05 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:37:52 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:37:52 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:37:32 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:37:22 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:37:22 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:37:22 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:37:22 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:37:22 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:32:49 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:32:49 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:32:49 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:32:49 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:32:48 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:32:47 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:32:47 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:32:47 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:10:49 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:10:49 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:10:49 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:10:49 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:10:48 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:10:48 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:10:48 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe

3:10:48 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:00:36 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:00:36 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:00:36 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:00:36 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:59:28 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:59:27 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:59:27 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:59:27 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:59:27 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:59:26 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:59:26 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:59:26 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:42:01 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:42:01 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:42:01 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:42:01 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:42:00 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:41:59 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:41:59 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:41:59 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:41:23 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:41:23 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:41:23 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:41:23 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:41:22 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:41:22 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:41:22 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:41:22 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:09:21 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe

12:09:21 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:09:21 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:09:21 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:09:20 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:09:20 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:09:20 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:09:20 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:30:08 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:30:07 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:30:07 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:30:07 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:30:04 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:30:03 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:30:03 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:30:03 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:47:22 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:47:22 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:47:22 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:47:22 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:46:21 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:46:21 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:46:21 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:46:21 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:46:17 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:46:16 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:46:16 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:46:16 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:44:50 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:44:50 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:44:50 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe

6:44:50 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:35:27 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:35:26 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:35:26 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:35:26 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:33:59 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:33:58 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:33:58 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:33:58 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:33:13 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:33:13 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:33:13 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:33:13 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:32:11 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:32:11 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:32:11 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:32:11 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:32:10 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:32:10 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:32:10 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:32:10 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:52:07 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:52:06 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:52:06 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:52:06 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:52:04 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:52:03 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:52:03 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:52:03 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:44:38 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe

3:44:38 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:44:38 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:44:38 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:32:37 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:32:37 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:32:37 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:32:37 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:31:55 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:31:54 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:31:54 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:31:54 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:28:37 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:28:37 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:28:37 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:28:37 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:27:10 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:27:10 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:27:10 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:27:10 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:26:20 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:26:19 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:26:19 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:26:19 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:25:41 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:25:41 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:25:41 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:25:41 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:24:37 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:24:37 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:24:37 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe

3:24:37 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:24:09 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:24:09 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:24:09 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:24:09 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:15:51 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:15:51 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:15:51 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:15:51 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:14:10 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:14:09 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:14:09 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:14:09 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:14:03 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:14:03 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:14:03 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:14:03 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:09:59 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:09:59 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:09:59 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:09:59 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:09:33 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:09:33 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:09:33 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:09:33 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:07:23 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:07:23 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:07:23 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:07:23 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:07:04 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/2/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe

3:07:03 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:07:03 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:07:03 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:07:03 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:07:02 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:07:02 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:07:02 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:03:52 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:03:52 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:03:52 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:03:52 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:03:51 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:03:50 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:03:50 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:03:50 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:13:48 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:13:47 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:13:47 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:13:47 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:12:19 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:12:18 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:12:18 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:12:18 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:10:18 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:10:18 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:10:18 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:10:18 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:10:17 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:10:17 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:10:17 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe

3:10:17 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:24:14 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:24:14 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:24:14 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:24:14 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:19:15 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:19:15 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:19:15 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:19:15 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:18:31 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:18:31 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:18:31 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:18:31 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:17:30 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:17:30 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:17:30 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:17:30 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:16:05 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:16:04 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:16:04 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:16:04 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:12:14 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:12:13 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:12:13 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:12:13 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:11:14 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:11:13 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:11:13 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:11:13 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:46 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe

2:06:46 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:46 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:46 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:36 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:36 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:36 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:36 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:33 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:33 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:33 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:33 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:53 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:53 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:53 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:53 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:40 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:40 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:02:44 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:02:44 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:02:44 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:02:44 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:02:35 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:02:35 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:02:35 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:02:35 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:00:32 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:00:31 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:00:31 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe

2:00:31 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:59:14 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:59:13 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:59:13 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:59:13 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:58:52 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:58:52 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:58:52 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:58:52 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:58:30 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:58:30 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:58:30 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:58:30 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:56:00 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:56:00 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:56:00 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:56:00 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:55:39 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:55:39 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:55:39 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:55:39 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:55:14 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:55:13 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:55:13 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:55:13 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:54:39 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:54:39 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:54:39 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:54:39 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:53:32 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe

1:53:31 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:53:31 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:53:31 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:52:29 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:52:29 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:52:29 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:52:29 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:47:55 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:47:55 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:47:55 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:47:55 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:47:41 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:47:41 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:47:41 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:47:41 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:46:41 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:46:41 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:46:41 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:46:41 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:46:40 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:46:38 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:46:38 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:46:38 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:13:17 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:13:17 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:13:17 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:13:17 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:12:13 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:12:12 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:12:12 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe

6:12:12 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:12:12 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:12:11 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:12:11 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:12:11 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:05:39 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:05:39 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:05:39 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:05:39 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:56:05 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:56:05 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:56:05 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:56:05 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:56:04 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:56:03 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:56:03 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:56:03 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:43:03 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:43:02 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:43:02 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:43:02 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:38:43 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:38:42 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:38:42 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:38:42 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:38:35 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:38:35 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:38:35 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:38:35 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:38:18 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe

4:38:18 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:38:18 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:38:18 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:38:13 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:38:13 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:38:13 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:38:13 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:38:10 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:38:10 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:38:10 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:38:10 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:29:33 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:29:32 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:29:32 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:29:32 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:21:11 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:21:11 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:21:11 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:21:11 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:51 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:51 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:51 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:51 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:50 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:50 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:50 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:50 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:41 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:40 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:40 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe

4:18:40 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:40 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:39 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:39 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:39 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:13 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:13 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:13 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:13 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:13 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:12 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:12 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:12 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:25 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:25 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:25 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:25 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:08 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:07 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:07 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:07 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:07 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:06 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:06 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:06 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:11:44 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:11:44 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:11:44 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:11:44 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:10:46 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe

4:10:45 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:10:45 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:10:45 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:08:08 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:08:07 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:08:07 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:08:07 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:05:56 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:05:56 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:05:56 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:05:56 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:04:54 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:04:53 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:04:53 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:04:53 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:30 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:29 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:29 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:29 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:28 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:28 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:28 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:28 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:29:35 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:29:34 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:29:34 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:29:34 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:28:43 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:28:42 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:28:42 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe

3:28:42 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:27:51 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:27:50 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:27:50 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:27:50 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:27:31 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:27:31 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:27:31 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:27:31 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:25:50 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:25:50 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:25:50 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:25:50 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:25:03 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:25:03 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:25:03 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:25:03 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:24:54 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:24:53 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:24:53 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:24:53 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:20:56 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:20:56 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:20:56 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:20:56 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:20:51 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:20:51 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:20:51 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:20:51 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:20:23 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe
12/1/2009
t.exe

3:20:23 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:20:23 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:20:23 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:20:06 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:20:06 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:20:06 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:20:06 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:19:31 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:19:31 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:19:31 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:19:31 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:18:07 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:18:07 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:18:07 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:18:07 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:17:44 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:17:43 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:17:43 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:17:43 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:16:28 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:16:28 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:16:28 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:16:28 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:16:22 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:16:22 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:16:22 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:16:22 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:16:22 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:16:22 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:16:22 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12/1/2009 3:16:22 AM
t.exe
11/30/2009 4:05:06 PM
t.exe
11/30/2009 4:05:05 PM
t.exe
11/30/2009 4:05:05 PM
t.exe
11/30/2009 4:05:05 PM
t.exe
11/30/2009 3:50:33 PM
t.exe
11/30/2009 3:50:33 PM
t.exe
11/30/2009 3:50:33 PM
t.exe
11/30/2009 3:50:33 PM
t.exe
11/30/2009 3:50:29 PM
t.exe
11/30/2009 3:50:29 PM
t.exe
11/30/2009 3:50:29 PM
t.exe
11/30/2009 3:50:29 PM
t.exe
11/30/2009 3:50:13 PM
t.exe
11/30/2009 3:50:12 PM
t.exe
11/30/2009 3:50:12 PM
t.exe
11/30/2009 3:50:12 PM
t.exe
11/30/2009 3:46:39 PM
t.exe
11/30/2009 3:46:39 PM
t.exe
11/30/2009 3:46:39 PM
t.exe
11/30/2009 3:46:39 PM
t.exe
11/30/2009 3:44:56 PM
t.exe
11/30/2009 3:44:55 PM
t.exe
11/30/2009 3:44:55 PM
t.exe
11/30/2009 3:44:55 PM
t.exe
11/30/2009 3:44:15 PM
t.exe
11/30/2009 3:44:15 PM
t.exe
11/30/2009 3:44:15 PM
t.exe
11/30/2009 3:44:15 PM
t.exe
11/30/2009 3:42:33 PM
t.exe

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe

3:42:33 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:42:33 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:42:33 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:42:26 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:42:25 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:42:25 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:42:25 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:40:04 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:40:03 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:40:03 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:40:03 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:39:09 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:39:08 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:39:08 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:39:08 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:37:31 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:37:31 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:37:31 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:37:31 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:35:43 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:35:43 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:35:43 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:35:43 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:34:52 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:34:51 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:34:51 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:34:51 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:34:50 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:34:50 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:34:50 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe

3:34:50 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:12:48 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:12:48 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:12:48 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:12:48 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:12:47 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:12:46 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:12:46 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:12:46 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:42:12 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:42:12 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:42:12 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:42:12 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:41:55 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:41:54 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:41:54 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:41:54 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:35:07 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:35:06 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:35:06 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:35:06 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:35:04 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:35:04 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:35:04 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:35:04 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:33:20 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:33:20 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:33:20 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:33:20 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:33:14 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe

5:33:14 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:33:14 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:33:14 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:32:58 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:32:58 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:32:58 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:32:58 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:32:08 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:32:08 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:32:08 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:32:08 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:29:44 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:29:44 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:29:44 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:29:44 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:29:29 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:29:28 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:29:28 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:29:28 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:27:59 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:27:58 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:27:58 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:27:58 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:23:50 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:23:50 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:23:50 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:23:50 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:19:06 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:19:06 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:19:06 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/30/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe

5:19:06 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:18:25 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:18:24 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:18:24 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:18:24 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:18:22 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:18:22 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:18:22 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:18:22 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:47:22 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:47:22 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:47:22 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:47:22 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:34:18 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:34:18 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:34:18 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:34:18 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:34:16 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:34:16 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:34:16 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:34:16 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:34:13 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:34:13 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:34:13 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:34:13 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:33:36 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:33:35 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:33:35 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:33:35 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:31:56 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe

2:31:55 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:31:55 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:31:55 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:31:55 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:31:54 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:31:54 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:31:54 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:30:10 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:30:09 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:30:09 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:30:09 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:30:02 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:30:01 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:30:01 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:30:01 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:29:53 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:29:53 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:29:53 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:29:53 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:28:38 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:28:37 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:28:37 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:28:37 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:28:37 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:28:36 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:28:36 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:28:36 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:13:29 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:13:29 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:13:29 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe

2:13:29 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:12:38 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:12:37 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:12:37 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:12:37 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:11:34 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:11:33 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:11:33 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:11:33 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:10:41 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:10:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:10:40 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:10:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:08:25 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:08:25 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:08:25 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:08:25 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:21 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:21 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:21 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:21 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:12 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:11 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:11 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:11 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:08 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:07 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:07 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:06:07 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:05:28 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe
11/29/2009
t.exe

5:05:27 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:05:27 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:05:27 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:57:13 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:57:12 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:57:12 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:57:12 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:56:52 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:56:51 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:56:51 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:56:51 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:56:10 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:56:10 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:56:10 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:56:10 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:53:12 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:53:12 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:53:12 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:53:12 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:52:00 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:52:00 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:52:00 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:52:00 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:51:59 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:51:58 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:51:58 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:51:58 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:51:58 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:51:57 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:51:57 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/29/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe

4:51:57 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:37:50 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:37:50 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:37:50 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:37:50 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:37:38 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:37:38 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:37:38 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:37:38 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:20:27 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:20:27 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:20:27 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:20:27 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:20:27 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:20:27 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:20:27 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:20:27 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:20:25 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:20:25 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:20:25 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:20:25 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:20:25 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:20:25 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:20:25 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:20:25 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:51 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:51 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:51 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:51 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:50 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe

4:41:50 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:50 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:41:50 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:36:19 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:36:19 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:36:19 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:36:19 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:34:20 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:34:20 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:34:20 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:34:20 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:05 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:04 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:04 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:04 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:03 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:03 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:03 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:03 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:15:27 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:15:27 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:15:27 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:15:27 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:15:26 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:15:26 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:15:26 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:15:26 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:40:45 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:40:45 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:40:45 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe

2:40:45 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:40:43 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:40:43 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:40:43 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:40:43 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:59:28 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:59:28 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:59:28 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:59:28 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:59:06 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:59:05 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:59:05 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:59:05 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:58:53 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:58:52 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:58:52 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:58:52 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:58:44 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:58:44 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:58:44 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:58:44 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:58:25 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:58:25 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:58:25 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:58:25 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:57:51 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:57:51 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:57:51 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:57:51 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:57:24 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/28/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe

11:57:24 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:57:24 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:57:24 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:57:12 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:57:11 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:57:11 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:57:11 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:57:10 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:57:10 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:57:10 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:57:10 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:23:05 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:23:04 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:23:04 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:23:04 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:21:31 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:21:30 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:21:30 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:21:30 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:30:30 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:30:29 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:30:29 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:30:29 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:49:45 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:49:45 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:49:45 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:49:45 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:49:44 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:49:43 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

8:49:43 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe

8:49:43 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:07:52 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:07:51 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:07:51 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:07:51 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:07:50 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:07:49 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:07:49 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:07:49 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:13:36 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:13:35 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:13:35 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:13:35 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:12:08 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:12:07 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:12:07 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:12:07 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:10:12 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:10:12 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:10:12 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:10:12 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:09:07 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:09:07 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:09:07 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:09:07 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:05:26 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:05:25 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:05:25 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:05:25 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:05:09 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe

12:05:09 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:05:09 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:05:09 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:02:47 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:02:47 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:02:47 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:02:47 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:55:31 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:55:30 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:55:30 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:55:30 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:54:55 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:54:55 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:54:55 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:54:55 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:54:42 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:54:42 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:54:42 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:54:42 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:41:16 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:41:16 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:41:16 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:41:16 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:41:00 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:40:59 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:40:59 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:40:59 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:40:32 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:40:32 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:40:32 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe

11:40:32 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:39:53 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:39:53 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:39:53 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:39:53 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:38:47 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:38:47 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:38:47 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:38:47 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:38:25 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:38:25 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:38:25 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:38:25 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:38:15 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:38:15 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:38:15 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:38:15 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:38:02 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:38:02 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:38:02 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:38:02 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:33:38 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:33:38 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:33:38 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:33:38 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:32:12 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:32:11 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:32:11 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:32:11 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:29:06 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe

11:29:05 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:29:05 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:29:05 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:28:53 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:28:53 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:28:53 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:28:53 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:27:38 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:27:38 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:27:37 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:27:37 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:27:37 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:27:36 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:27:36 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:27:36 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:27:30 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:27:29 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:27:29 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:27:29 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:27:29 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:27:28 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:27:28 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:27:28 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:31:07 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:31:07 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:31:07 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:31:07 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:28:35 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:28:35 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:28:35 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe

2:28:34 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:27:58 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:27:58 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:27:58 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:27:58 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:25:28 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:25:27 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:25:27 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:25:27 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:24:33 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:24:33 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:24:33 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:24:33 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:24:18 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:24:18 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:24:18 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:24:18 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:23:24 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:23:24 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:23:24 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:23:24 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:23:23 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:23:23 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:23:23 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:23:23 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:11:47 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:11:47 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:11:47 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:11:47 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:11:15 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe

2:11:14 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:11:14 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:11:14 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:09:14 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:09:13 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:09:13 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:09:13 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:08:56 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:08:56 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:08:56 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:08:56 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:08:01 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:08:01 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:08:01 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:08:01 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:51:14 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:51:13 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:51:13 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:51:13 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:51:13 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:51:12 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:51:12 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:51:12 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:57:54 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:57:53 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:57:53 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:57:53 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:57:52 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:57:52 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:57:52 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/27/2009
t.exe
11/26/2009
t.exe

12:57:52 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:54:09 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:54:08 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:54:08 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:54:08 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:54:01 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:54:01 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:54:01 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:54:01 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:53:10 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:53:10 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:53:10 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:53:10 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:46:09 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:46:09 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:46:09 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:46:09 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:46:08 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:46:08 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:46:08 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:46:08 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:34:22 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:34:22 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:34:22 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:34:22 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:34:21 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:34:21 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:34:21 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:34:21 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:48:31 PM

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe

6:48:31 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:48:31 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:48:31 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:44:35 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:44:35 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:44:35 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:44:35 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:41:54 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:41:54 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:41:54 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:41:54 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:38:02 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:38:02 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:38:02 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:38:02 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:37:56 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:37:56 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:37:56 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:37:56 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:37:41 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:37:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:37:40 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:37:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:36:25 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:36:25 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:36:25 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:36:25 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:36:24 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:36:24 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:36:24 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe

6:36:24 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:57:20 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:57:20 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:57:20 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:57:20 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:55:34 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:55:34 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:55:34 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:55:34 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:55:21 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:55:21 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:55:21 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:55:21 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:54:36 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:54:35 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:54:35 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:54:35 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:53:38 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:53:38 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:53:38 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:53:38 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:53:20 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:53:19 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:53:19 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:53:19 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:46:05 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:46:04 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:46:04 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:46:04 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:45:54 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe

5:45:54 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:45:54 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:45:54 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:45:46 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:45:46 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:45:46 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:45:46 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:45:17 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:45:16 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:45:16 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:45:16 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:44:32 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:44:31 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:44:31 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:44:31 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:42:58 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:42:57 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:42:57 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:42:57 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:42:49 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:42:48 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:42:48 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:42:48 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:42:44 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:42:44 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:42:44 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:42:44 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:42:30 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:42:30 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:42:30 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe

5:42:30 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:42:17 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:42:16 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:42:16 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:42:16 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:42:16 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:42:15 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:42:15 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:42:15 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:41:44 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:41:44 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:41:44 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:41:44 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:41:43 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:41:43 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:41:43 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:41:43 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:07:30 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:07:30 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:07:30 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:07:30 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:06:55 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:06:55 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:06:55 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:06:55 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:05:19 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:05:19 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:05:19 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:05:19 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:04:19 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe

5:04:19 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:04:19 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:04:19 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:04:06 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:04:05 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:04:05 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:04:05 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:03:51 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:03:51 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:03:51 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:03:51 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:03:48 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:03:47 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:03:47 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:03:47 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:03:07 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:03:07 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:03:07 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:03:07 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:02:52 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:02:52 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:02:52 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:02:52 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:02:29 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:02:29 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:02:29 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:02:29 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:57 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:56 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:56 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe

5:01:56 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:17 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:17 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:17 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:17 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:02 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:02 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:02 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:02 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:00:47 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:00:47 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:00:47 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:00:47 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:30 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:29 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:29 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:29 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:16 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:15 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:15 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:15 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:12 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:12 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:12 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:12 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:49:07 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:49:07 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:49:07 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:49:07 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:44:35 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe

4:44:35 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:44:35 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:44:35 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:44:30 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:44:30 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:44:30 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:44:30 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:44:22 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:44:22 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:44:22 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:44:22 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:40:33 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:40:33 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:40:33 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:40:33 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:39:51 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:39:51 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:39:51 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:39:51 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:37:47 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:37:47 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:37:47 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:37:47 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:37:01 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:37:00 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:37:00 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:37:00 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:36:59 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:36:59 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:36:59 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe

4:36:59 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:17:43 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:17:43 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:17:43 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:17:43 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:15:44 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:15:44 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:15:44 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:15:44 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:15:43 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:15:43 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:15:43 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:15:43 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:13:48 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:13:48 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:13:48 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:13:48 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:13:47 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:13:47 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:13:47 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:13:47 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:25:59 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:25:59 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:25:59 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:25:59 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:25:56 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:25:54 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:25:54 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:25:54 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:14:43 AM

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe

7:14:43 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:14:43 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:14:43 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:14:38 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:14:38 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:14:38 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:14:38 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:09:09 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:09:09 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:09:09 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:09:09 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:09:05 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:09:04 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:09:04 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:09:04 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:06:02 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:06:02 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:06:02 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:06:02 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:03:33 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:03:33 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:03:33 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:03:33 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:02:17 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:02:16 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:02:16 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:02:16 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:01:29 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:01:28 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:01:28 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe

7:01:28 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:01:00 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:01:00 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:01:00 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:01:00 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:00:53 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:00:53 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:00:53 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:00:53 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:59:30 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:59:29 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:59:29 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:59:29 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:59:27 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:59:27 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:59:27 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

6:59:27 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:18:59 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:18:59 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:18:59 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:18:59 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:18:58 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:18:58 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:18:58 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:18:58 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:17:33 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:17:33 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:17:33 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:17:33 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:15:29 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe

12:15:29 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:15:29 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:15:29 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:15:16 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:15:16 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:15:16 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:15:16 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:13:08 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:13:08 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:13:08 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:13:08 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:13:05 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:13:05 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:13:05 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:13:05 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:10:51 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:10:51 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:10:51 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:10:51 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:10:45 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:10:45 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:10:45 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:10:45 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:08:11 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:08:11 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:08:11 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:08:11 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:07:08 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:07:08 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:07:08 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/26/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe

12:07:08 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:05:40 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:05:40 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:05:40 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:05:40 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:56:24 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:56:23 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:56:23 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:56:23 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:54:33 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:54:33 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:54:33 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:54:33 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:44:40 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:44:39 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:44:39 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:44:39 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:44:00 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:44:00 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:44:00 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:44:00 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:42:01 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:42:00 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:42:00 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:42:00 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:40:41 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:40:41 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:40:41 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:40:41 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:40:40 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe

10:40:40 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:40:40 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:40:40 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:39:27 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:39:26 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:39:26 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:39:26 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:36:34 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:36:33 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:36:33 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:36:33 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:34:59 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:34:59 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:34:59 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:34:59 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:34:56 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:34:55 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:34:55 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:34:55 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:32:34 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:32:33 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:32:33 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:32:33 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:32:27 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:32:27 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:32:27 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:32:27 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:30:55 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:30:54 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:30:54 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe

10:30:54 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:29:52 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:29:52 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:29:52 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:29:52 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:28:48 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:28:48 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:28:48 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:28:48 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:27:50 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:27:49 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:27:49 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:27:49 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:27:28 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:27:27 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:27:27 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:27:27 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:27:26 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:27:26 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:27:26 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:27:26 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:26:47 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:26:47 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:26:47 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:26:47 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:25:15 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:25:15 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:25:15 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:25:15 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:25:12 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe

10:25:12 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:25:12 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:25:12 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:24:39 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:24:39 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:24:39 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:24:39 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:17:39 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:17:39 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:17:39 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:17:39 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:17:01 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:17:01 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:17:01 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:17:01 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:16:54 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:16:54 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:16:54 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:16:54 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:13:29 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:13:29 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:13:29 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:13:29 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:12:38 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:12:37 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:12:37 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:12:37 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:12:36 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:12:36 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:12:36 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe

10:12:36 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:32:09 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:32:08 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:32:08 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:32:08 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:32:07 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:32:07 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:32:07 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:32:07 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:26:11 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:26:11 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:26:11 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:26:11 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:26:10 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:26:10 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:26:10 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:26:10 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:02:54 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:02:54 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:02:54 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:02:54 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:02:53 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:02:53 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:02:53 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:59:54 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:59:53 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:59:53 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:59:53 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:59:52 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:59:52 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe

12:59:52 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:59:52 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:22:11 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:22:11 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:22:11 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:22:11 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:22:10 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:22:09 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:22:09 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:22:09 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:39:38 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:39:38 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:39:38 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:39:38 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:36:32 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:36:32 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:36:32 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:36:32 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:34:52 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:34:52 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:34:52 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:34:52 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:32:04 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:32:03 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:32:03 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:32:03 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:31:29 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:31:29 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:31:29 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:31:29 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe

4:28:32 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:28:32 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:28:32 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:28:32 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:16:17 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:16:17 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:16:17 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:16:17 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:15:42 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:15:42 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:15:42 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:15:42 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:15:38 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:15:37 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:15:37 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:15:37 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:13:14 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:13:14 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:13:14 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:13:14 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:04:32 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:04:31 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:04:31 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:04:31 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:04:27 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:04:27 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:04:27 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:04:27 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:34 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:34 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/25/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe

4:03:34 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:34 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:01:59 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:01:59 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:01:59 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:01:59 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:01:58 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:01:57 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:01:57 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:01:57 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:14:19 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:14:19 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:14:19 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:14:19 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:59:36 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:59:36 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:59:36 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:59:36 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:58:53 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:58:53 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:58:53 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:58:53 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:57:13 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:57:13 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:57:13 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:57:12 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:03 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:03 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:03 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:03 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe

2:55:33 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:55:32 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:55:32 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:55:32 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:54:51 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:54:50 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:54:50 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:54:50 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:54:49 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:54:49 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:54:49 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:54:49 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:39:50 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:39:49 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:38:29 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:38:29 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:34:12 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:34:11 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:34:11 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:34:11 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:34:11 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:34:10 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:34:10 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:34:10 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:27:57 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:27:57 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:27:57 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:27:57 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:27:55 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:27:54 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe

1:27:54 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:27:54 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:26:02 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:26:02 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:26:02 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:26:02 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:25:55 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:25:54 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:25:54 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:25:54 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:05:16 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:05:15 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:05:15 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:05:15 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:05:14 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:05:14 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:05:13 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:05:13 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:16:44 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:16:43 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:16:43 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:16:43 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:16:27 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:16:27 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:16:27 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:16:27 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:16:17 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:16:16 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:16:16 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:16:16 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe

4:15:15 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:15:15 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:15:15 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:15:15 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:54 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:53 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:53 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:53 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:47 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:46 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:46 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:46 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:31 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:31 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:31 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:31 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:11:45 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:11:45 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:11:45 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:11:45 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:09:49 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:09:48 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:09:48 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:09:48 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:09:38 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:09:38 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:09:38 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:09:38 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:09:32 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:09:31 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe

4:09:31 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:09:31 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:09:15 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:09:15 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:09:15 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:09:15 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:08:14 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:08:13 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:08:13 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:08:13 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:08:11 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:08:11 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:08:11 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:08:11 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:07:14 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:07:13 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:07:13 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:07:13 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:07:05 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:07:05 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:07:05 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:07:05 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:06:06 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:06:05 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:06:05 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:06:05 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:06:01 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:06:00 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:06:00 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:06:00 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe

4:05:46 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:05:46 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:05:46 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:05:46 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:55:20 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:55:19 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:55:19 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:55:19 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:52:30 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:52:30 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:52:30 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:52:30 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:52:15 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:52:15 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:52:15 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:52:15 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:51:46 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:51:45 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:51:45 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:51:45 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:50:48 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:50:48 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:50:48 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:50:48 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:50:47 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:50:46 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:50:46 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:50:46 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:50:40 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:50:40 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/24/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe

3:50:40 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:50:40 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:50:39 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:50:39 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:50:39 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:50:39 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:50:35 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:50:35 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:50:35 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:50:35 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:50:34 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:50:33 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:50:33 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:50:33 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:50:26 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:50:26 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:50:26 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:50:26 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:57:45 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:57:45 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:57:44 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:57:44 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:57:44 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:57:44 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:57:44 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:57:44 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:57:42 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:57:41 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:57:40 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:57:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe

7:57:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:57:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:57:40 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:57:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:03 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:03 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:03 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:03 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:41 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:40 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:38 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:37 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:37 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:37 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:29:14 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:29:14 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:29:14 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:29:14 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:29:10 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:29:09 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:29:09 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:29:09 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:28:57 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:28:57 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:28:57 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:28:57 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:28:52 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:28:51 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe

4:28:51 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:28:51 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:28:45 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:28:45 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:28:45 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:28:45 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:28:16 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:28:16 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:28:16 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:28:16 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:27:05 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:27:04 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:27:04 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:27:04 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:27:01 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:27:00 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:27:00 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:27:00 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:25:39 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:25:39 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:25:39 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:25:39 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:25:10 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:25:10 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:25:10 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:25:10 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:24:55 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:24:54 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:24:54 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:24:54 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe

4:24:30 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:24:29 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:24:29 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:24:29 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:22:55 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:22:54 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:22:54 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:22:54 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:21:00 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:21:00 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:21:00 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:21:00 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:19:36 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:19:36 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:19:36 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:19:36 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:19:33 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:19:32 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:19:32 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:19:32 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:51 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:51 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:51 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:18:51 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:15:23 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:15:23 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:15:23 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:15:23 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:13:03 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:13:02 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/23/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe

4:13:02 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:13:02 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:59 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:58 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:58 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:12:58 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:17:22 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:17:22 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:17:22 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:17:22 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:12:17 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:12:16 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:12:16 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:12:16 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:12:15 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:12:15 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:12:15 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:12:15 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:20:06 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:20:06 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:20:06 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:20:06 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:20:05 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:20:04 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:20:04 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:20:04 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:20:01 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:20:00 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:20:00 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:20:00 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe

3:36:24 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:36:24 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:36:24 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:36:24 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:30:40 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:30:39 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:30:39 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:30:39 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:29:47 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:29:47 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:29:47 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:29:47 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:28:50 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:28:50 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:28:50 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:28:50 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:28:40 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:28:39 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:28:39 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:28:39 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:28:26 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:28:26 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:28:26 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:28:26 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:28:11 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:28:11 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:28:11 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:28:11 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:27:29 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:27:28 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe

3:27:28 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:27:28 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:26:53 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:26:53 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:26:53 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:26:53 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:26:42 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:26:42 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:26:42 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:26:42 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:24:59 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:24:59 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:24:59 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:24:59 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:18:01 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:18:01 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:18:01 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:18:01 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:15:15 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:15:15 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:15:15 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:15:15 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:14:54 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:14:53 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:14:53 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:14:53 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:14:05 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:14:04 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:14:04 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:14:04 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe

3:13:45 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:13:45 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:13:45 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:13:45 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:13:21 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:13:21 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:13:21 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:13:21 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:13:20 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:13:20 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:13:20 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:13:20 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:29:38 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:29:37 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:29:37 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:29:37 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:28:52 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:28:52 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:28:52 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:28:52 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:27:36 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:27:35 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:27:35 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:27:35 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:23:35 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:23:34 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:23:34 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:23:34 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:23:29 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:23:29 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe

2:23:29 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:23:29 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:21:58 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:21:57 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:21:57 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:21:57 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:20:01 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:20:00 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:20:00 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:20:00 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:16:46 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:16:45 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:16:45 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:16:45 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:15:05 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:15:04 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:15:04 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:15:04 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:13:04 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:13:04 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:13:04 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:13:04 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:11:37 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:11:37 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:11:37 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:11:37 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:09:34 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:09:34 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:09:34 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:09:34 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe

2:09:15 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:09:15 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:09:15 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:09:15 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:53 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:53 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:53 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:53 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:04:05 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:04:05 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:04:05 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:04:05 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:03:14 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:03:14 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:03:14 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:03:14 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:02:55 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:02:55 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:02:55 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:02:55 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:02:19 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:02:19 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:02:19 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:02:19 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:02:18 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:02:17 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:02:17 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:02:17 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:41:46 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:41:46 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe

2:41:46 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:41:46 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:40:01 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:40:01 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:40:01 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:40:01 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:38:57 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:38:56 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:38:56 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:38:56 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:37:50 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:37:50 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:37:50 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:37:50 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:37:40 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:37:40 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:37:40 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:37:40 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:36:43 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:36:43 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:36:43 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:36:43 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:36:07 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:36:07 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:36:07 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:36:07 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:27:11 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:27:10 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:27:10 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:27:10 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe

2:26:28 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:26:28 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:26:28 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:26:28 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:26 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:25 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:25 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:25 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:07 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:06 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:06 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:05:06 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:04:10 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:04:10 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:04:10 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:04:10 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:03:14 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:03:14 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:03:14 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:03:14 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:02:55 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:02:54 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:02:54 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:02:54 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:01:26 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:01:26 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:01:26 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:01:26 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:58:16 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:58:16 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe

1:58:16 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:58:16 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:58:15 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:58:15 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:58:15 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:58:15 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:58:03 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:58:02 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:58:02 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:58:02 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:58:01 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:58:01 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:58:01 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:58:01 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:57:30 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:57:30 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:57:30 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:57:30 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:57:29 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:57:28 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:57:28 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:57:28 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:57:27 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:57:26 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:57:26 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:57:26 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:57:25 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:57:25 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:57:25 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:57:25 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/22/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe

12:28:40 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:28:40 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:28:40 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:28:40 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:28:39 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:28:39 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:28:39 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:28:39 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:39:31 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:39:31 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:39:31 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:39:31 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:37:33 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:37:32 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:37:32 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:37:32 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:37:16 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:37:16 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:37:16 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:37:16 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:37:01 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:37:01 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:37:01 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:37:01 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:33:00 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:32:59 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:32:59 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:32:59 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:32:52 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:32:51 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe

7:32:51 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:32:51 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:32:41 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:32:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:32:40 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:32:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:32:32 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:32:32 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:32:32 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:32:32 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:31:06 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:31:05 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:31:05 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:31:05 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:30:25 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:30:25 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:30:25 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:30:25 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:30:24 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:30:24 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:30:24 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:30:24 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:34:26 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:34:26 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:34:26 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:34:26 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:29:21 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:29:21 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:29:21 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:29:21 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe

5:29:14 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:29:14 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:29:14 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:29:14 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:27:21 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:27:21 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:27:21 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:27:20 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:10:34 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:10:33 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:10:33 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:10:33 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:57:45 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:57:44 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:57:44 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:57:44 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:57:44 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:57:43 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:57:43 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:57:43 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:48:55 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:48:54 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:48:54 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:48:54 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:48:53 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:48:53 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:48:53 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:48:53 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:45:09 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:45:08 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe

4:45:08 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:45:08 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:44:55 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:44:55 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:44:55 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:44:55 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:44:15 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:44:15 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:44:15 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:44:15 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:44:14 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:44:14 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:44:14 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:44:14 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:45 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:44 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:44 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:44 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:25 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:25 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:25 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:25 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:02:48 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:02:48 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:02:48 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:02:47 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:59:20 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:59:20 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:59:20 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:59:20 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe

3:58:49 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:58:49 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:58:49 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:58:49 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:58:37 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:58:37 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:58:37 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:58:37 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:56:48 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:56:48 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:56:48 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:56:48 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:56:47 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:56:47 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:56:47 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:56:47 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:31:06 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:31:06 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:31:06 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:31:06 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:31:01 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:31:01 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:31:01 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:31:01 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:29:01 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:29:00 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:29:00 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:29:00 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:28:24 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:28:24 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe

3:28:24 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:28:24 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:02:47 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:02:46 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:02:46 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:02:46 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:02:24 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:02:23 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:02:23 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:02:23 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:00:40 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:00:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:00:40 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:00:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:00:19 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:00:19 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:00:19 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:00:19 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:59:48 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:59:47 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:59:47 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:59:47 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:59:02 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:59:02 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:59:02 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:59:02 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:20:16 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:20:16 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:20:16 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:20:16 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe

1:55:56 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:55:55 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:55:55 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:55:55 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:55:55 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:55:54 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:55:54 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:55:54 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:55:06 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:55:05 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:55:05 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:55:05 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:55:05 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:55:04 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:55:04 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:55:04 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:50:58 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:50:58 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:50:58 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:50:58 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:42:29 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:42:29 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:42:29 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:42:29 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:34:21 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:34:21 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:34:21 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:34:21 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:34:06 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:34:05 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe

1:34:05 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:34:05 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:13:23 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:13:22 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:13:22 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:13:22 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:12:00 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:12:00 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:12:00 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:12:00 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:05:47 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:05:47 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:05:47 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:05:47 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:02:41 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:02:40 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:02:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:02:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:02:01 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:02:01 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:02:01 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:02:01 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:01:22 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:01:22 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:01:22 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:01:22 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:57:58 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:57:57 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:57:57 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:57:57 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/21/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe

12:57:10 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:57:10 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:57:10 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:57:10 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:56:15 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:56:15 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:56:15 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:56:15 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:52:35 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:52:35 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:52:35 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:52:35 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:49:44 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:49:44 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:49:44 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:49:44 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:35:22 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:35:22 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:35:22 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:35:22 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:35:20 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:35:20 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:35:20 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:35:20 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:40:25 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:40:24 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:40:24 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:40:24 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:40:22 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:40:22 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe

2:40:22 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:40:22 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:39:24 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:39:24 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:39:24 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:39:24 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:39:04 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:39:03 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:39:03 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:39:03 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:39:02 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:39:02 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:39:02 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:39:02 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:15 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:15 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:15 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:15 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:14 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:14 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:14 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:07:14 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:04:20 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:04:20 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:04:20 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:04:20 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:01:07 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:01:07 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:01:07 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:01:07 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe

1:00:30 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:00:30 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:00:30 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:00:30 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:54:29 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:54:29 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:54:29 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:54:29 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:52:54 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:52:53 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:52:53 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:52:53 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:01:40 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:01:40 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:01:40 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:01:40 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:01:39 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:01:38 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:01:38 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:01:38 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:01:21 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:01:21 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:01:21 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:01:21 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:51:05 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:51:05 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:51:05 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:51:05 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:51:04 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:51:03 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe

9:51:03 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

9:51:03 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:14:37 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:14:37 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:14:37 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:14:37 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:13:41 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:13:41 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:13:41 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:13:41 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:07:55 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:07:55 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:07:55 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:07:55 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:07:49 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:07:49 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:07:49 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:07:49 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:32 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:32 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:32 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:32 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:15 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:14 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:14 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:14 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:09 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:08 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:08 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:08 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe

5:01:04 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:04 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:04 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:04 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:01:00 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:00:59 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:00:59 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:00:59 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:00:44 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:00:43 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:00:43 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:00:43 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:58:26 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:58:26 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:58:26 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:58:26 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:57:53 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:57:53 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:57:53 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:57:53 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:57:47 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:57:46 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:57:46 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:57:46 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:57:43 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:57:42 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:57:42 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:57:42 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:57:35 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:57:35 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe
11/20/2009
t.exe

4:57:35 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:57:35 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:56:28 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:56:27 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:56:27 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:56:27 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:55:22 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:55:21 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:55:21 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:55:21 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:52:37 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:52:36 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:52:36 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:52:36 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:52:34 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:52:34 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:52:34 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:52:34 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:51:51 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:51:51 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:51:51 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:51:51 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:51:10 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:51:09 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:51:09 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:51:09 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:51:08 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:51:08 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:51:08 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:51:08 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe

4:59:22 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:22 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:22 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:22 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:49:11 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:49:10 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:49:10 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:49:10 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:10:17 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:10:17 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:10:17 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:10:17 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:09:16 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:09:16 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:09:16 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:09:16 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:07:43 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:07:43 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:07:43 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:07:43 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:07:26 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:07:25 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:07:25 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:07:25 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:05:42 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:05:42 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:05:42 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:05:42 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:50 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:50 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe

4:03:50 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:03:50 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:02:55 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:02:55 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:02:55 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:02:55 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:02:54 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:02:53 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:02:53 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:02:53 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:12:16 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:12:16 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:12:16 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:12:16 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:12:10 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:12:10 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:12:10 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:12:10 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:12:06 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:12:05 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:12:05 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:12:05 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:11:26 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:11:26 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:11:26 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:11:26 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:10:27 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:10:27 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:10:27 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:10:27 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe

3:10:08 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:10:07 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:10:07 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:10:07 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:09:08 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:09:07 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:09:07 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:09:07 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:06:44 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:06:44 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:06:44 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:06:44 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:04:06 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:04:06 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:04:06 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:04:06 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:22 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:22 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:22 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:22 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:55:34 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:55:34 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:55:34 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:55:34 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:54:12 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:54:12 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:54:12 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:54:12 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:51:41 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:51:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe

2:51:40 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:51:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:50:57 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:50:56 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:50:56 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:50:56 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:50:40 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:50:40 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:50:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:50:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:49:19 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:49:19 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:49:19 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:49:19 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:48:42 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:48:41 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:48:41 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:48:41 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:48:40 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:48:40 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:48:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:48:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:55:19 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:55:19 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:55:19 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:55:19 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:44:29 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:44:29 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:44:29 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:44:29 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe

11:44:28 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:44:27 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:44:27 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:44:27 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:32:01 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:32:00 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:32:00 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:32:00 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:31:12 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:31:12 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:31:12 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:31:12 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:31:11 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:31:11 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:31:11 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11:31:11 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:13:26 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:13:26 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:13:26 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:13:26 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:13:25 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:13:24 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:13:24 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:13:24 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:50:18 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:50:18 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:50:18 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:50:18 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:39:08 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:39:08 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe

4:39:08 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:39:08 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:38:52 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:38:51 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:38:51 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:38:51 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:38:39 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:38:38 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:38:38 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:38:38 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:38:37 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:38:37 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:38:37 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:38:37 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:36:42 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:36:41 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:36:41 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:36:41 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:36:37 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:36:37 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:36:37 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:36:37 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:36:12 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:36:12 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:36:12 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:36:12 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:36:05 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:36:05 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:36:05 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:36:05 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/19/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe

4:34:06 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:34:06 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:34:06 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:34:06 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:32:04 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:32:04 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:32:04 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:32:04 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:31:01 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:31:00 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:31:00 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:31:00 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:30:44 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:30:44 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:30:43 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:30:43 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:20:54 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:20:53 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:20:53 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:20:53 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:20:52 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:20:51 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:20:51 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

7:20:51 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:19:36 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:19:36 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:19:36 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:19:36 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:19:30 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:19:30 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe

1:19:30 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:19:30 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:19:14 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:19:14 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:19:14 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:19:14 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:06:29 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:06:29 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:06:29 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

1:06:29 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:51:56 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:51:55 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:51:55 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:51:55 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:51:46 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:51:44 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:51:43 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:51:43 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:21:03 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:21:02 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:21:02 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:21:02 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:19:48 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:19:47 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:19:47 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:19:47 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:19:46 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:19:46 PM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:19:46 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

12:19:46 PM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe

10:32:18 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:32:17 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:32:17 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:32:17 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:32:17 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:32:16 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:32:16 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:32:16 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:15:22 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:15:22 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:15:22 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:15:22 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:15:20 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:15:19 AM Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:15:19 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

10:15:19 AM Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:02:08 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:02:08 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:02:08 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

5:02:08 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:54 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:53 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:53 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:53 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:47 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:46 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:46 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:46 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:32 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:32 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe

4:59:32 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:32 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:28 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:28 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:28 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:59:28 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:55:05 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:55:05 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:55:05 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:55:05 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:54:02 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:54:01 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:54:01 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:54:01 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:53:26 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:53:26 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:53:26 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:53:26 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:52:33 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:52:32 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:52:32 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:52:32 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:51:12 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:51:12 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:51:12 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:51:12 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:51:02 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:51:02 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:51:02 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:51:02 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/18/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe

4:49:52 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:49:52 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:49:52 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:49:52 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:49:29 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:49:29 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:49:29 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:49:29 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:48:36 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:48:36 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:48:36 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:48:36 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:48:30 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:48:29 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:48:29 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:48:29 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:47:47 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:47:46 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:47:46 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:47:46 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:46:00 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:45:59 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:45:59 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:45:59 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:45:57 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:45:55 AM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:45:55 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

4:45:55 AM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:17:42 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:17:42 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe

3:17:42 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:17:42 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:06:43 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:06:43 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:06:43 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:06:43 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:05:29 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:05:29 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:05:29 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:05:29 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:05:26 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:05:26 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:05:26 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:05:26 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:05:20 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:05:20 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:05:20 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:05:20 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:05:12 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:05:12 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:05:12 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:05:12 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:04:58 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:04:58 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:04:58 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:04:58 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:04:30 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:04:30 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:04:30 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:04:30 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe

3:04:02 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:04:01 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:04:01 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:04:01 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:03:41 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:03:41 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:03:41 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:03:41 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:03:36 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:03:36 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:03:36 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:03:36 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:03:34 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:03:33 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:03:33 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:03:33 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:02:29 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:02:29 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:02:29 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

3:02:29 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:59:44 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:59:44 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:59:44 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:59:44 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:54 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:54 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:54 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:54 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:40 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe
11/17/2009
t.exe

2:56:40 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:32 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:31 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:31 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:31 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:30 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:30 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:30 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:56:30 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:52:13 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:52:12 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:52:12 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:52:12 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:52:04 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:52:03 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:52:03 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:52:03 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:51:57 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:51:57 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:51:57 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:51:57 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:51:42 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:51:42 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:51:42 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:51:42 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:51:41 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:51:40 PM

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:51:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

2:51:40 PM

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

11/17/2009 2:30:11 AM
t.exe
11/17/2009 2:30:11 AM
t.exe
11/17/2009 2:30:11 AM
t.exe
11/17/2009 2:30:11 AM
t.exe
11/17/2009 2:29:34 AM
t.exe
11/17/2009 2:29:34 AM
t.exe
11/17/2009 2:29:34 AM
t.exe
11/17/2009 2:29:34 AM
t.exe
11/17/2009 2:26:28 AM
t.exe
11/17/2009 2:26:27 AM
t.exe
11/17/2009 2:26:27 AM
t.exe
11/17/2009 2:26:27 AM
t.exe
11/17/2009 2:25:07 AM
t.exe
11/17/2009 2:25:06 AM
t.exe
11/17/2009 2:25:06 AM
t.exe
11/17/2009 2:25:06 AM
t.exe
11/17/2009 2:25:05 AM
t.exe
11/17/2009 2:25:05 AM
t.exe
11/17/2009 2:25:05 AM
t.exe
11/17/2009 2:25:05 AM
t.exe
dfsvc.exe (events: 7)
11/24/2009 2:41:10 PM
11/24/2009 2:38:36 PM
11/24/2009 2:38:33 PM
11/24/2009 2:32:06 PM
11/24/2009 2:14:46 PM
11/24/2009 1:41:07 PM
dfsvc.exe (events: 7)
12/2/2009 8:41:06 PM
12/2/2009 8:40:47 PM
11/24/2009 2:41:16 PM
11/24/2009 2:32:06 PM
11/24/2009 2:14:52 PM
11/24/2009 1:41:07 PM
dfsvc.exe (events: 7)
11/24/2009 2:41:16 PM
11/24/2009 2:32:06 PM
11/24/2009 2:14:52 PM
11/24/2009 1:41:08 PM
dfsvc.exe (events: 7)

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process exit

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process start

C:\PROGRA~2\Java\JRE16~1.0_0\bin\ssvagen

Process
Process
Process
Process
Process
Process

exit
exit
start
start
exit
start

C:\PROGRA~2\MICROS~1\WksWP.exe
C:\PROGRA~2\MICROS~1\WksWP.exe
C:\PROGRA~2\MICROS~1\WksWP.exe
C:\PROGRA~2\MICROS~1\WksWP.exe
C:\PROGRA~2\MICROS~1\WksWP.exe
C:\PROGRA~2\MICROS~1\WksWP.exe

Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start

C:\PROGRA~2\MICROS~1\WkDStore.exe
C:\PROGRA~2\MICROS~1\WkDStore.exe
C:\PROGRA~2\MICROS~1\WkDStore.exe
C:\PROGRA~2\MICROS~1\WkDStore.exe
C:\PROGRA~2\MICROS~1\WkDStore.exe
C:\PROGRA~2\MICROS~1\WkDStore.exe

Process
Process
Process
Process

exit
start
exit
start

C:\PROGRA~2\MICROS~1\wkgdcach.exe
C:\PROGRA~2\MICROS~1\wkgdcach.exe
C:\PROGRA~2\MICROS~1\wkgdcach.exe
C:\PROGRA~2\MICROS~1\wkgdcach.exe

12/16/2009 7:00:12 AM
12/15/2009 9:13:26 PM
12/14/2009 3:47:50 PM
12/12/2009 7:15:58 PM
12/10/2009 2:22:48 PM
12/10/2009 2:11:07 PM
12/5/2009 1:45:22 PM
12/5/2009 1:41:22 PM
12/5/2009 1:41:22 PM
12/5/2009 1:41:22 PM
12/2/2009 8:42:06 PM
12/2/2009 8:40:25 PM
12/2/2009 3:43:07 PM
12/2/2009 3:42:09 PM
11/24/2009 2:41:30 PM
11/24/2009 1:41:08 PM
11/18/2009 10:34:52 AM
11/18/2009 10:25:28 AM
dfsvc.exe (events: 7)
12/16/2009 7:05:24 AM
12/16/2009 7:00:12 AM
12/15/2009 12:08:36 AM
12/15/2009 12:08:22 AM
12/15/2009 12:08:14 AM
12/15/2009 12:08:05 AM
12/14/2009 4:13:09 PM
12/14/2009 3:47:50 PM
12/10/2009 2:45:24 PM
12/10/2009 2:22:48 PM
12/10/2009 2:11:12 PM
12/10/2009 2:10:58 PM
12/10/2009 2:10:51 PM
12/10/2009 2:10:29 PM
12/10/2009 4:52:21 AM
12/10/2009 4:46:55 AM
12/10/2009 4:17:55 AM
12/10/2009 4:17:41 AM
12/10/2009 4:13:25 AM
12/10/2009 4:12:31 AM
12/10/2009 4:12:26 AM
12/9/2009 3:27:01 AM
12/8/2009 9:15:51 PM
12/8/2009 1:24:17 PM
12/8/2009 11:34:16 AM
12/7/2009 2:17:46 PM
12/7/2009 2:17:32 PM
12/7/2009 2:17:22 PM
12/7/2009 2:17:13 PM
12/6/2009 12:50:53 AM
12/5/2009 7:28:55 PM
12/5/2009 2:27:51 AM
12/4/2009 10:43:14 PM
12/4/2009 6:54:42 PM
12/4/2009 4:27:46 PM
12/3/2009 2:18:27 PM
12/3/2009 2:18:16 PM
12/3/2009 4:10:56 AM
12/2/2009 8:42:06 PM
12/2/2009 7:40:12 PM
12/2/2009 3:43:08 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\SPLWOW64.EXE
C:\WINDOWS\SPLWOW64.EXE
C:\WINDOWS\SPLWOW64.EXE
C:\WINDOWS\SPLWOW64.EXE
C:\WINDOWS\SPLWOW64.EXE
C:\WINDOWS\SPLWOW64.EXE
C:\WINDOWS\SPLWOW64.EXE
C:\WINDOWS\SPLWOW64.EXE
C:\WINDOWS\SPLWOW64.EXE
C:\WINDOWS\SPLWOW64.EXE
C:\WINDOWS\SPLWOW64.EXE
C:\WINDOWS\SPLWOW64.EXE
C:\WINDOWS\SPLWOW64.EXE
C:\WINDOWS\SPLWOW64.EXE
C:\WINDOWS\SPLWOW64.EXE
C:\WINDOWS\SPLWOW64.EXE
C:\WINDOWS\SPLWOW64.EXE
C:\WINDOWS\SPLWOW64.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
start
exit

C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE

12/1/2009 3:17:59 AM
11/30/2009 8:00:27 PM
11/30/2009 7:37:50 PM
11/30/2009 6:55:11 PM
11/30/2009 5:58:55 PM
11/30/2009 5:53:06 PM
11/30/2009 3:38:52 PM
11/30/2009 3:38:38 PM
11/30/2009 3:38:31 PM
11/30/2009 3:37:52 PM
11/30/2009 3:36:21 PM
11/30/2009 10:18:13 AM
11/27/2009 12:45:07 AM
11/27/2009 12:44:53 AM
11/27/2009 12:44:46 AM
11/27/2009 12:44:36 AM
11/27/2009 12:34:11 AM
11/27/2009 12:33:56 AM
11/26/2009 3:22:58 AM
11/26/2009 3:17:53 AM
11/26/2009 3:03:08 AM
11/26/2009 3:02:54 AM
11/26/2009 3:00:36 AM
11/26/2009 3:00:25 AM
11/25/2009 3:01:50 AM
11/25/2009 3:01:35 AM
11/25/2009 3:00:44 AM
11/25/2009 3:00:25 AM
11/24/2009 2:48:41 PM
11/24/2009 2:41:30 PM
11/24/2009 4:00:43 AM
11/24/2009 4:00:29 AM
11/24/2009 4:00:22 AM
11/24/2009 3:59:53 AM
11/21/2009 7:28:48 PM
11/21/2009 7:11:44 PM
11/21/2009 12:35:59 PM
11/20/2009 6:58:59 PM
11/20/2009 12:20:50 PM
11/20/2009 12:20:33 PM
11/20/2009 12:02:39 PM
11/20/2009 9:52:53 AM
11/19/2009 4:32:17 AM
11/18/2009 7:43:43 PM
11/18/2009 7:19:20 PM
11/18/2009 6:03:02 PM
11/18/2009 12:54:01 PM
11/18/2009 12:25:18 PM
11/18/2009 11:21:23 AM
11/18/2009 10:34:52 AM
11/17/2009 10:36:15 PM
11/17/2009 6:17:47 PM
11/17/2009 2:51:58 PM
dfsvc.exe (events: 7)
12/15/2009 10:12:52 PM
E_IARNEKA.EXE
12/15/2009 10:12:39 PM
E_IARNEKA.EXE
12/15/2009 10:12:34 PM
E_IARNEKA.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE
C:\WINDOWS\system32\WUAUCLT.EXE

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

12/15/2009 10:12:34 PM
E_IARNEKA.EXE
12/15/2009 10:07:17 PM
E_IARNEKA.EXE
12/15/2009 10:07:05 PM
E_IARNEKA.EXE
12/15/2009 10:06:16 PM
E_IARNEKA.EXE
12/15/2009 10:05:59 PM
E_IARNEKA.EXE
12/15/2009 10:01:55 PM
E_IARNEKA.EXE
12/15/2009 10:01:41 PM
E_IARNEKA.EXE
12/15/2009 9:53:30 PM
E_IARNEKA.EXE
12/15/2009 9:53:16 PM
E_IARNEKA.EXE
12/15/2009 9:42:21 PM
E_IARNEKA.EXE
12/15/2009 9:42:07 PM
E_IARNEKA.EXE
12/15/2009 9:37:55 PM
E_IARNEKA.EXE
12/15/2009 9:37:41 PM
E_IARNEKA.EXE
12/15/2009 9:37:36 PM
E_IARNEKA.EXE
12/15/2009 9:37:36 PM
E_IARNEKA.EXE
12/15/2009 9:30:20 PM
E_IARNEKA.EXE
12/15/2009 9:30:05 PM
E_IARNEKA.EXE
12/15/2009 9:30:00 PM
E_IARNEKA.EXE
12/15/2009 9:30:00 PM
E_IARNEKA.EXE
12/15/2009 9:13:53 PM
E_IARNEKA.EXE
12/15/2009 9:13:38 PM
E_IARNEKA.EXE
12/15/2009 9:13:33 PM
E_IARNEKA.EXE
12/15/2009 9:13:33 PM
E_IARNEKA.EXE
12/12/2009 7:55:40 PM
E_IARNEKA.EXE
12/12/2009 7:55:21 PM
E_IARNEKA.EXE
12/12/2009 7:16:24 PM
E_IARNEKA.EXE
12/12/2009 7:16:09 PM
E_IARNEKA.EXE
12/12/2009 7:16:04 PM
E_IARNEKA.EXE
12/12/2009 7:16:04 PM
E_IARNEKA.EXE
12/10/2009 2:16:23 PM
E_IARNEKA.EXE

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

12/10/2009 2:16:12 PM
E_IARNEKA.EXE
12/10/2009 2:14:59 PM
E_IARNEKA.EXE
12/10/2009 2:14:51 PM
E_IARNEKA.EXE
12/10/2009 2:14:22 PM
E_IARNEKA.EXE
12/10/2009 2:14:12 PM
E_IARNEKA.EXE
12/10/2009 2:14:01 PM
E_IARNEKA.EXE
12/10/2009 2:13:54 PM
E_IARNEKA.EXE
12/10/2009 2:13:46 PM
E_IARNEKA.EXE
12/10/2009 2:13:34 PM
E_IARNEKA.EXE
12/10/2009 2:13:20 PM
E_IARNEKA.EXE
12/10/2009 2:13:09 PM
E_IARNEKA.EXE
12/10/2009 2:13:03 PM
E_IARNEKA.EXE
12/10/2009 2:13:03 PM
E_IARNEKA.EXE
12/10/2009 2:12:12 PM
E_IARNEKA.EXE
12/10/2009 2:12:08 PM
E_IARNEKA.EXE
12/10/2009 2:12:07 PM
E_IARNEKA.EXE
12/10/2009 2:12:07 PM
E_IARNEKA.EXE
12/10/2009 2:12:02 PM
E_IARNEKA.EXE
12/10/2009 2:11:24 PM
E_IARNEKA.EXE
12/10/2009 2:11:16 PM
E_IARNEKA.EXE
12/10/2009 2:11:15 PM
E_IARNEKA.EXE
12/8/2009 11:20:47 AM
E_IARNEKA.EXE
12/8/2009 11:18:21 AM
E_IARNEKA.EXE
12/2/2009 3:42:48 PM
E_IARNEKA.EXE
12/2/2009 3:42:27 PM
E_IARNEKA.EXE
12/2/2009 3:42:20 PM
E_IARNEKA.EXE
12/2/2009 3:42:20 PM
E_IARNEKA.EXE
11/18/2009 10:28:18 AM
E_IARNEKA.EXE
11/18/2009 10:28:10 AM
E_IARNEKA.EXE
11/18/2009 10:27:05 AM
E_IARNEKA.EXE

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

11/18/2009 10:26:57 AM
E_IARNEKA.EXE
11/18/2009 10:26:38 AM
E_IARNEKA.EXE
11/18/2009 10:26:31 AM
E_IARNEKA.EXE
11/18/2009 10:26:25 AM
E_IARNEKA.EXE
11/18/2009 10:26:24 AM
E_IARNEKA.EXE
11/18/2009 10:25:54 AM
E_IARNEKA.EXE
11/18/2009 10:25:37 AM
E_IARNEKA.EXE
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM
E_IATIEKA.EXE
12/16/2009 7:00:13 AM
E_IATIEKA.EXE
12/14/2009 4:09:33 PM
E_IATIEKA.EXE
12/14/2009 3:47:52 PM
E_IATIEKA.EXE
12/10/2009 2:42:15 PM
E_IATIEKA.EXE
12/10/2009 2:22:49 PM
E_IATIEKA.EXE
12/10/2009 4:49:29 AM
E_IATIEKA.EXE
12/10/2009 4:46:56 AM
E_IATIEKA.EXE
12/10/2009 4:08:57 AM
E_IATIEKA.EXE
12/9/2009 3:23:35 AM
E_IATIEKA.EXE
12/8/2009 9:15:51 PM
E_IATIEKA.EXE
12/8/2009 1:20:42 PM
E_IATIEKA.EXE
12/8/2009 11:34:16 AM
E_IATIEKA.EXE
12/6/2009 12:47:12 AM
E_IATIEKA.EXE
12/5/2009 7:28:55 PM
E_IATIEKA.EXE
12/5/2009 2:24:47 AM
E_IATIEKA.EXE
12/4/2009 10:43:14 PM
E_IATIEKA.EXE
12/4/2009 6:51:08 PM
E_IATIEKA.EXE
12/4/2009 4:27:46 PM
E_IATIEKA.EXE
12/3/2009 4:07:09 AM
E_IATIEKA.EXE
12/2/2009 7:37:03 PM
E_IATIEKA.EXE
12/2/2009 7:36:39 PM
E_IATIEKA.EXE
12/2/2009 3:43:08 PM

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

E_IATIEKA.EXE
12/1/2009 3:13:44 AM
E_IATIEKA.EXE
11/30/2009 7:34:47 PM
E_IATIEKA.EXE
11/30/2009 7:34:03 PM
E_IATIEKA.EXE
11/30/2009 6:55:13 PM
E_IATIEKA.EXE
11/30/2009 5:55:17 PM
E_IATIEKA.EXE
11/30/2009 5:53:07 PM
E_IATIEKA.EXE
11/30/2009 3:32:36 PM
E_IATIEKA.EXE
11/30/2009 10:18:14 AM
E_IATIEKA.EXE
11/26/2009 3:19:56 AM
E_IATIEKA.EXE
11/26/2009 3:17:54 AM
E_IATIEKA.EXE
11/24/2009 2:45:18 PM
E_IATIEKA.EXE
11/24/2009 2:41:31 PM
E_IATIEKA.EXE
11/21/2009 7:25:24 PM
E_IATIEKA.EXE
11/21/2009 7:11:45 PM
E_IATIEKA.EXE
11/21/2009 12:32:51 PM
E_IATIEKA.EXE
11/20/2009 6:58:59 PM
E_IATIEKA.EXE
11/20/2009 11:59:18 AM
E_IATIEKA.EXE
11/20/2009 9:52:53 AM
E_IATIEKA.EXE
11/19/2009 4:27:58 AM
E_IATIEKA.EXE
11/18/2009 7:43:43 PM
E_IATIEKA.EXE
11/18/2009 7:16:14 PM
E_IATIEKA.EXE
11/18/2009 6:03:02 PM
E_IATIEKA.EXE
11/18/2009 12:50:54 PM
E_IATIEKA.EXE
11/18/2009 12:25:18 PM
E_IATIEKA.EXE
11/18/2009 11:18:18 AM
E_IATIEKA.EXE
11/18/2009 10:34:53 AM
E_IATIEKA.EXE
11/17/2009 10:33:09 PM
E_IATIEKA.EXE
11/17/2009 6:17:47 PM
E_IATIEKA.EXE
11/17/2009 2:48:51 PM
E_IATIEKA.EXE
dfsvc.exe (events: 7)

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

12/16/2009 7:02:15 AM Process start C:\Program


OFT\CONNECTION SERVICE\BIN\ACSERVICE.EXE
12/14/2009 4:09:33 PM Process start C:\Program
OFT\CONNECTION SERVICE\BIN\ACSERVICE.EXE
12/10/2009 2:42:15 PM Process start C:\Program
OFT\CONNECTION SERVICE\BIN\ACSERVICE.EXE
12/10/2009 4:49:12 AM Process start C:\Program
OFT\CONNECTION SERVICE\BIN\ACSERVICE.EXE
12/10/2009 4:08:57 AM Process start C:\Program
OFT\CONNECTION SERVICE\BIN\ACSERVICE.EXE
12/9/2009 3:23:35 AM
Process start C:\Program
OFT\CONNECTION SERVICE\BIN\ACSERVICE.EXE
12/8/2009 1:20:42 PM
Process start C:\Program
OFT\CONNECTION SERVICE\BIN\ACSERVICE.EXE
12/6/2009 12:47:12 AM Process start C:\Program
OFT\CONNECTION SERVICE\BIN\ACSERVICE.EXE
12/5/2009 2:24:47 AM
Process start C:\Program
OFT\CONNECTION SERVICE\BIN\ACSERVICE.EXE
12/4/2009 6:51:08 PM
Process start C:\Program
OFT\CONNECTION SERVICE\BIN\ACSERVICE.EXE
12/3/2009 4:07:07 AM
Process start C:\Program
OFT\CONNECTION SERVICE\BIN\ACSERVICE.EXE
12/2/2009 7:36:39 PM
Process start C:\Program
OFT\CONNECTION SERVICE\BIN\ACSERVICE.EXE
12/1/2009 3:13:44 AM
Process start C:\Program
OFT\CONNECTION SERVICE\BIN\ACSERVICE.EXE
11/30/2009 7:34:03 PM Process start C:\Program
OFT\CONNECTION SERVICE\BIN\ACSERVICE.EXE
11/30/2009 5:55:17 PM Process start C:\Program
OFT\CONNECTION SERVICE\BIN\ACSERVICE.EXE
11/30/2009 3:32:36 PM Process start C:\Program
OFT\CONNECTION SERVICE\BIN\ACSERVICE.EXE
11/26/2009 3:19:48 AM Process start C:\Program
OFT\CONNECTION SERVICE\BIN\ACSERVICE.EXE
11/24/2009 2:45:18 PM Process start C:\Program
OFT\CONNECTION SERVICE\BIN\ACSERVICE.EXE
11/21/2009 7:25:24 PM Process start C:\Program
OFT\CONNECTION SERVICE\BIN\ACSERVICE.EXE
11/21/2009 12:32:51 PM Process start C:\Program
OFT\CONNECTION SERVICE\BIN\ACSERVICE.EXE
11/20/2009 11:59:18 AM Process start C:\Program
OFT\CONNECTION SERVICE\BIN\ACSERVICE.EXE
11/19/2009 4:27:58 AM Process start C:\Program
OFT\CONNECTION SERVICE\BIN\ACSERVICE.EXE
11/18/2009 7:16:14 PM Process start C:\Program
OFT\CONNECTION SERVICE\BIN\ACSERVICE.EXE
11/18/2009 12:50:54 PM Process start C:\Program
OFT\CONNECTION SERVICE\BIN\ACSERVICE.EXE
11/18/2009 11:18:18 AM Process start C:\Program
OFT\CONNECTION SERVICE\BIN\ACSERVICE.EXE
11/17/2009 10:33:09 PM Process start C:\Program
OFT\CONNECTION SERVICE\BIN\ACSERVICE.EXE
11/17/2009 2:48:52 PM Process start C:\Program
OFT\CONNECTION SERVICE\BIN\ACSERVICE.EXE
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM Process exit
C:\Program
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
12/16/2009 7:02:15 AM Process start C:\Program
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
12/16/2009 7:00:12 AM Process exit
C:\Program

Files (x86)\COMMON FILES\ARCS


Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS

OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
12/14/2009 4:09:33 PM Process start
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
12/14/2009 3:47:51 PM Process exit
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
12/10/2009 2:42:15 PM Process start
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
12/10/2009 2:22:48 PM Process exit
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
12/10/2009 4:49:36 AM Process start
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
12/10/2009 4:08:57 AM Process start
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
12/9/2009 3:23:35 AM
Process start
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
12/8/2009 9:15:51 PM
Process exit
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
12/8/2009 1:20:42 PM
Process start
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
12/6/2009 12:47:12 AM Process exit
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
12/6/2009 12:47:12 AM Process start
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
12/5/2009 2:24:48 AM
Process exit
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
12/5/2009 2:24:47 AM
Process start
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
12/4/2009 10:43:14 PM Process exit
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
12/4/2009 6:51:08 PM
Process start
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
12/4/2009 4:27:46 PM
Process exit
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
12/3/2009 4:07:20 AM
Process start
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
12/2/2009 7:36:41 PM
Process exit
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
12/2/2009 7:36:39 PM
Process start
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
12/2/2009 3:43:08 PM
Process exit
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
12/1/2009 3:13:44 AM
Process start
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
11/30/2009 8:00:27 PM Process exit
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
11/30/2009 7:34:03 PM Process start
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
11/30/2009 6:55:13 PM Process exit
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
11/30/2009 5:55:17 PM Process start
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
11/30/2009 5:53:06 PM Process exit
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
11/30/2009 3:32:36 PM Process start
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
11/30/2009 10:18:13 AM Process exit
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
11/26/2009 3:20:11 AM Process start
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
11/26/2009 3:17:54 AM Process exit

C:\Program Files (x86)\COMMON FILES\ARCS


C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS

OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
11/24/2009 2:45:18 PM Process start
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
11/21/2009 7:25:24 PM Process exit
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
11/21/2009 7:25:24 PM Process start
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
11/21/2009 12:32:51 PM Process start
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
11/20/2009 11:59:18 AM Process start
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
11/19/2009 4:27:58 AM Process start
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
11/18/2009 7:16:14 PM Process start
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
11/18/2009 12:50:55 PM Process exit
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
11/18/2009 12:50:54 PM Process start
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
11/18/2009 11:18:18 AM Process exit
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
11/18/2009 11:18:18 AM Process start
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
11/17/2009 10:33:09 PM Process exit
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
11/17/2009 10:33:09 PM Process start
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
11/17/2009 6:17:47 PM Process exit
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
11/17/2009 2:48:52 PM Process start
OFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
dfsvc.exe (events: 7)
12/16/2009 7:00:12 AM Process exit
OFT\CONNECTION SERVICE\BIN\ARCCON.AC
12/14/2009 4:09:33 PM Process start
OFT\CONNECTION SERVICE\BIN\ARCCON.AC
12/14/2009 3:47:50 PM Process exit
OFT\CONNECTION SERVICE\BIN\ARCCON.AC
12/10/2009 2:42:15 PM Process start
OFT\CONNECTION SERVICE\BIN\ARCCON.AC
12/10/2009 2:22:48 PM Process exit
OFT\CONNECTION SERVICE\BIN\ARCCON.AC
12/10/2009 4:49:36 AM Process start
OFT\CONNECTION SERVICE\BIN\ARCCON.AC
12/9/2009 3:23:35 AM
Process start
OFT\CONNECTION SERVICE\BIN\ARCCON.AC
12/8/2009 9:15:51 PM
Process exit
OFT\CONNECTION SERVICE\BIN\ARCCON.AC
12/8/2009 1:20:42 PM
Process start
OFT\CONNECTION SERVICE\BIN\ARCCON.AC
12/4/2009 10:43:14 PM Process exit
OFT\CONNECTION SERVICE\BIN\ARCCON.AC
12/4/2009 6:51:08 PM
Process start
OFT\CONNECTION SERVICE\BIN\ARCCON.AC
12/4/2009 4:27:46 PM
Process exit
OFT\CONNECTION SERVICE\BIN\ARCCON.AC
12/3/2009 4:07:21 AM
Process start
OFT\CONNECTION SERVICE\BIN\ARCCON.AC
12/2/2009 3:43:08 PM
Process exit
OFT\CONNECTION SERVICE\BIN\ARCCON.AC

C:\Program Files (x86)\COMMON FILES\ARCS


C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS

12/1/2009 3:13:44 AM
Process start
OFT\CONNECTION SERVICE\BIN\ARCCON.AC
11/30/2009 8:00:27 PM Process exit
OFT\CONNECTION SERVICE\BIN\ARCCON.AC
11/30/2009 7:34:03 PM Process start
OFT\CONNECTION SERVICE\BIN\ARCCON.AC
11/30/2009 6:55:13 PM Process exit
OFT\CONNECTION SERVICE\BIN\ARCCON.AC
11/30/2009 5:55:17 PM Process start
OFT\CONNECTION SERVICE\BIN\ARCCON.AC
11/30/2009 5:53:06 PM Process exit
OFT\CONNECTION SERVICE\BIN\ARCCON.AC
11/30/2009 3:32:36 PM Process start
OFT\CONNECTION SERVICE\BIN\ARCCON.AC
11/30/2009 10:18:13 AM Process exit
OFT\CONNECTION SERVICE\BIN\ARCCON.AC
11/26/2009 3:20:11 AM Process start
OFT\CONNECTION SERVICE\BIN\ARCCON.AC
11/26/2009 3:17:54 AM Process exit
OFT\CONNECTION SERVICE\BIN\ARCCON.AC
11/24/2009 2:45:18 PM Process start
OFT\CONNECTION SERVICE\BIN\ARCCON.AC
11/17/2009 6:17:47 PM Process exit
OFT\CONNECTION SERVICE\BIN\ARCCON.AC
11/17/2009 2:48:52 PM Process start
OFT\CONNECTION SERVICE\BIN\ARCCON.AC
dfsvc.exe (events: 7)
12/15/2009 10:12:56 PM Process exit
E_IAMTEKA.EXE
12/15/2009 10:12:39 PM Process start
E_IAMTEKA.EXE
12/15/2009 10:07:23 PM Process exit
E_IAMTEKA.EXE
12/15/2009 10:07:05 PM Process start
E_IAMTEKA.EXE
12/15/2009 10:06:21 PM Process exit
E_IAMTEKA.EXE
12/15/2009 10:05:59 PM Process start
E_IAMTEKA.EXE
12/15/2009 10:01:58 PM Process exit
E_IAMTEKA.EXE
12/15/2009 10:01:41 PM Process start
E_IAMTEKA.EXE
12/15/2009 9:53:34 PM Process exit
E_IAMTEKA.EXE
12/15/2009 9:53:16 PM Process start
E_IAMTEKA.EXE
12/15/2009 9:42:24 PM Process exit
E_IAMTEKA.EXE
12/15/2009 9:42:07 PM Process start
E_IAMTEKA.EXE
12/15/2009 9:38:03 PM Process exit
E_IAMTEKA.EXE
12/15/2009 9:37:40 PM Process start
E_IAMTEKA.EXE
12/15/2009 9:30:22 PM Process exit
E_IAMTEKA.EXE
12/15/2009 9:30:05 PM Process start
E_IAMTEKA.EXE
12/15/2009 9:13:56 PM Process exit

C:\Program Files (x86)\COMMON FILES\ARCS


C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\Program Files (x86)\COMMON FILES\ARCS
C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\
C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\
C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\
C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\
C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\
C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\
C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\
C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\
C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\
C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\
C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\
C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\
C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\
C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\
C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\
C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\
C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

E_IAMTEKA.EXE
12/15/2009 9:13:38 PM
E_IAMTEKA.EXE
12/12/2009 7:55:44 PM
E_IAMTEKA.EXE
12/12/2009 7:55:21 PM
E_IAMTEKA.EXE
12/12/2009 7:16:26 PM
E_IAMTEKA.EXE
12/12/2009 7:16:09 PM
E_IAMTEKA.EXE
12/10/2009 2:16:29 PM
E_IAMTEKA.EXE
12/10/2009 2:16:12 PM
E_IAMTEKA.EXE
12/10/2009 2:15:04 PM
E_IAMTEKA.EXE
12/10/2009 2:14:51 PM
E_IAMTEKA.EXE
12/10/2009 2:14:24 PM
E_IAMTEKA.EXE
12/10/2009 2:14:12 PM
E_IAMTEKA.EXE
12/10/2009 2:14:06 PM
E_IAMTEKA.EXE
12/10/2009 2:13:54 PM
E_IAMTEKA.EXE
12/10/2009 2:13:51 PM
E_IAMTEKA.EXE
12/10/2009 2:13:34 PM
E_IAMTEKA.EXE
12/10/2009 2:13:21 PM
E_IAMTEKA.EXE
12/10/2009 2:13:09 PM
E_IAMTEKA.EXE
12/10/2009 2:12:22 PM
E_IAMTEKA.EXE
12/10/2009 2:11:24 PM
E_IAMTEKA.EXE
12/8/2009 11:21:04 AM
E_IAMTEKA.EXE
12/8/2009 11:18:21 AM
E_IAMTEKA.EXE
12/2/2009 3:42:55 PM
E_IAMTEKA.EXE
12/2/2009 3:42:27 PM
E_IAMTEKA.EXE
11/18/2009 10:28:22 AM
E_IAMTEKA.EXE
11/18/2009 10:28:10 AM
E_IAMTEKA.EXE
11/18/2009 10:27:04 AM
E_IAMTEKA.EXE
11/18/2009 10:26:57 AM
E_IAMTEKA.EXE
11/18/2009 10:26:43 AM
E_IAMTEKA.EXE
11/18/2009 10:26:31 AM
E_IAMTEKA.EXE
11/18/2009 10:25:59 AM

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

Process exit

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

E_IAMTEKA.EXE
11/18/2009 10:25:37 AM Process
E_IAMTEKA.EXE
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM Process
ENT MANAGER\EEVENTMANAGER.EXE
12/16/2009 7:00:12 AM Process
ENT MANAGER\EEVENTMANAGER.EXE
12/14/2009 4:09:33 PM Process
ENT MANAGER\EEVENTMANAGER.EXE
12/14/2009 3:47:51 PM Process
ENT MANAGER\EEVENTMANAGER.EXE
12/10/2009 2:42:15 PM Process
ENT MANAGER\EEVENTMANAGER.EXE
12/10/2009 2:22:48 PM Process
ENT MANAGER\EEVENTMANAGER.EXE
12/10/2009 4:49:35 AM Process
ENT MANAGER\EEVENTMANAGER.EXE
12/10/2009 4:46:55 AM Process
ENT MANAGER\EEVENTMANAGER.EXE
12/10/2009 4:08:57 AM Process
ENT MANAGER\EEVENTMANAGER.EXE
12/9/2009 3:23:35 AM
Process
ENT MANAGER\EEVENTMANAGER.EXE
12/8/2009 9:15:51 PM
Process
ENT MANAGER\EEVENTMANAGER.EXE
12/8/2009 1:20:42 PM
Process
ENT MANAGER\EEVENTMANAGER.EXE
12/8/2009 11:34:16 AM Process
ENT MANAGER\EEVENTMANAGER.EXE
12/6/2009 12:47:12 AM Process
ENT MANAGER\EEVENTMANAGER.EXE
12/5/2009 7:28:55 PM
Process
ENT MANAGER\EEVENTMANAGER.EXE
12/5/2009 2:24:47 AM
Process
ENT MANAGER\EEVENTMANAGER.EXE
12/4/2009 10:43:14 PM Process
ENT MANAGER\EEVENTMANAGER.EXE
12/4/2009 6:51:08 PM
Process
ENT MANAGER\EEVENTMANAGER.EXE
12/4/2009 4:27:46 PM
Process
ENT MANAGER\EEVENTMANAGER.EXE
12/3/2009 4:07:20 AM
Process
ENT MANAGER\EEVENTMANAGER.EXE
12/2/2009 8:42:06 PM
Process
ENT MANAGER\EEVENTMANAGER.EXE
12/2/2009 7:36:39 PM
Process
ENT MANAGER\EEVENTMANAGER.EXE
12/2/2009 3:43:08 PM
Process
ENT MANAGER\EEVENTMANAGER.EXE
12/1/2009 3:13:44 AM
Process
ENT MANAGER\EEVENTMANAGER.EXE
11/30/2009 8:00:27 PM Process
ENT MANAGER\EEVENTMANAGER.EXE
11/30/2009 7:34:03 PM Process
ENT MANAGER\EEVENTMANAGER.EXE
11/30/2009 6:55:13 PM Process
ENT MANAGER\EEVENTMANAGER.EXE
11/30/2009 5:55:17 PM Process
ENT MANAGER\EEVENTMANAGER.EXE

start

C:\WINDOWS\system32\SPOOL\DRIVERS\X64\3\

start

C:\Program Files (x86)\EPSON SOFTWARE\EV

exit

C:\Program Files (x86)\EPSON SOFTWARE\EV

start

C:\Program Files (x86)\EPSON SOFTWARE\EV

exit

C:\Program Files (x86)\EPSON SOFTWARE\EV

start

C:\Program Files (x86)\EPSON SOFTWARE\EV

exit

C:\Program Files (x86)\EPSON SOFTWARE\EV

start

C:\Program Files (x86)\EPSON SOFTWARE\EV

exit

C:\Program Files (x86)\EPSON SOFTWARE\EV

start

C:\Program Files (x86)\EPSON SOFTWARE\EV

start

C:\Program Files (x86)\EPSON SOFTWARE\EV

exit

C:\Program Files (x86)\EPSON SOFTWARE\EV

start

C:\Program Files (x86)\EPSON SOFTWARE\EV

exit

C:\Program Files (x86)\EPSON SOFTWARE\EV

start

C:\Program Files (x86)\EPSON SOFTWARE\EV

exit

C:\Program Files (x86)\EPSON SOFTWARE\EV

start

C:\Program Files (x86)\EPSON SOFTWARE\EV

exit

C:\Program Files (x86)\EPSON SOFTWARE\EV

start

C:\Program Files (x86)\EPSON SOFTWARE\EV

exit

C:\Program Files (x86)\EPSON SOFTWARE\EV

start

C:\Program Files (x86)\EPSON SOFTWARE\EV

exit

C:\Program Files (x86)\EPSON SOFTWARE\EV

start

C:\Program Files (x86)\EPSON SOFTWARE\EV

exit

C:\Program Files (x86)\EPSON SOFTWARE\EV

start

C:\Program Files (x86)\EPSON SOFTWARE\EV

exit

C:\Program Files (x86)\EPSON SOFTWARE\EV

start

C:\Program Files (x86)\EPSON SOFTWARE\EV

exit

C:\Program Files (x86)\EPSON SOFTWARE\EV

start

C:\Program Files (x86)\EPSON SOFTWARE\EV

11/30/2009 5:53:06 PM Process


ENT MANAGER\EEVENTMANAGER.EXE
11/30/2009 3:32:36 PM Process
ENT MANAGER\EEVENTMANAGER.EXE
11/30/2009 10:18:13 AM Process
ENT MANAGER\EEVENTMANAGER.EXE
11/26/2009 3:20:11 AM Process
ENT MANAGER\EEVENTMANAGER.EXE
11/26/2009 3:17:54 AM Process
ENT MANAGER\EEVENTMANAGER.EXE
11/24/2009 2:45:18 PM Process
ENT MANAGER\EEVENTMANAGER.EXE
11/24/2009 2:41:30 PM Process
ENT MANAGER\EEVENTMANAGER.EXE
11/21/2009 7:25:24 PM Process
ENT MANAGER\EEVENTMANAGER.EXE
11/21/2009 7:11:44 PM Process
ENT MANAGER\EEVENTMANAGER.EXE
11/21/2009 12:32:51 PM Process
ENT MANAGER\EEVENTMANAGER.EXE
11/20/2009 6:58:59 PM Process
ENT MANAGER\EEVENTMANAGER.EXE
11/20/2009 11:59:18 AM Process
ENT MANAGER\EEVENTMANAGER.EXE
11/20/2009 9:52:53 AM Process
ENT MANAGER\EEVENTMANAGER.EXE
11/19/2009 4:27:58 AM Process
ENT MANAGER\EEVENTMANAGER.EXE
11/18/2009 7:43:43 PM Process
ENT MANAGER\EEVENTMANAGER.EXE
11/18/2009 7:16:14 PM Process
ENT MANAGER\EEVENTMANAGER.EXE
11/18/2009 6:03:02 PM Process
ENT MANAGER\EEVENTMANAGER.EXE
11/18/2009 12:50:54 PM Process
ENT MANAGER\EEVENTMANAGER.EXE
11/18/2009 12:25:18 PM Process
ENT MANAGER\EEVENTMANAGER.EXE
11/18/2009 11:18:18 AM Process
ENT MANAGER\EEVENTMANAGER.EXE
11/18/2009 10:34:52 AM Process
ENT MANAGER\EEVENTMANAGER.EXE
11/17/2009 10:33:09 PM Process
ENT MANAGER\EEVENTMANAGER.EXE
11/17/2009 6:17:47 PM Process
ENT MANAGER\EEVENTMANAGER.EXE
11/17/2009 2:48:52 PM Process
ENT MANAGER\EEVENTMANAGER.EXE
dfsvc.exe (events: 7)
12/16/2009 7:16:14 AM Process
12/16/2009 7:16:14 AM Process
12/14/2009 4:23:37 PM Process
12/14/2009 4:23:37 PM Process
12/10/2009 2:56:44 PM Process
12/10/2009 2:56:44 PM Process
12/10/2009 5:03:25 AM Process
12/10/2009 5:03:25 AM Process
12/10/2009 4:23:19 AM Process
12/10/2009 4:23:19 AM Process
12/8/2009 1:34:52 PM
Process

exit

C:\Program Files (x86)\EPSON SOFTWARE\EV

start

C:\Program Files (x86)\EPSON SOFTWARE\EV

exit

C:\Program Files (x86)\EPSON SOFTWARE\EV

start

C:\Program Files (x86)\EPSON SOFTWARE\EV

exit

C:\Program Files (x86)\EPSON SOFTWARE\EV

start

C:\Program Files (x86)\EPSON SOFTWARE\EV

exit

C:\Program Files (x86)\EPSON SOFTWARE\EV

start

C:\Program Files (x86)\EPSON SOFTWARE\EV

exit

C:\Program Files (x86)\EPSON SOFTWARE\EV

start

C:\Program Files (x86)\EPSON SOFTWARE\EV

exit

C:\Program Files (x86)\EPSON SOFTWARE\EV

start

C:\Program Files (x86)\EPSON SOFTWARE\EV

exit

C:\Program Files (x86)\EPSON SOFTWARE\EV

start

C:\Program Files (x86)\EPSON SOFTWARE\EV

exit

C:\Program Files (x86)\EPSON SOFTWARE\EV

start

C:\Program Files (x86)\EPSON SOFTWARE\EV

exit

C:\Program Files (x86)\EPSON SOFTWARE\EV

start

C:\Program Files (x86)\EPSON SOFTWARE\EV

exit

C:\Program Files (x86)\EPSON SOFTWARE\EV

start

C:\Program Files (x86)\EPSON SOFTWARE\EV

exit

C:\Program Files (x86)\EPSON SOFTWARE\EV

start

C:\Program Files (x86)\EPSON SOFTWARE\EV

exit

C:\Program Files (x86)\EPSON SOFTWARE\EV

start

C:\Program Files (x86)\EPSON SOFTWARE\EV

exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE

12/8/2009 1:34:52 PM
12/6/2009 1:01:34 AM
12/6/2009 1:01:34 AM
12/5/2009 2:37:55 AM
12/5/2009 2:37:55 AM
12/4/2009 7:05:43 PM
12/4/2009 7:05:43 PM
12/3/2009 4:21:39 AM
12/3/2009 4:21:39 AM
12/2/2009 7:50:51 PM
12/2/2009 7:50:51 PM
12/1/2009 3:28:03 AM
12/1/2009 3:28:03 AM
11/30/2009 7:48:27 PM
11/30/2009 7:48:27 PM
11/30/2009 6:09:34 PM
11/30/2009 6:09:34 PM
11/30/2009 3:46:04 PM
11/30/2009 3:46:04 PM
11/26/2009 3:34:29 AM
11/26/2009 3:34:29 AM
11/24/2009 2:59:27 PM
11/24/2009 2:59:27 PM
11/21/2009 7:39:46 PM
11/21/2009 7:39:46 PM
11/21/2009 12:47:17 PM
11/21/2009 12:47:17 PM
11/20/2009 12:14:02 PM
11/20/2009 12:14:02 PM
11/19/2009 4:42:33 AM
11/19/2009 4:42:33 AM
11/18/2009 7:30:47 PM
11/18/2009 7:30:47 PM
11/18/2009 1:04:54 PM
11/18/2009 1:04:54 PM
11/18/2009 11:32:34 AM
11/18/2009 11:32:34 AM
11/17/2009 10:46:42 PM
11/17/2009 10:46:42 PM
11/17/2009 3:02:26 PM
11/17/2009 3:02:26 PM
dfsvc.exe (events: 7)
11/26/2009 3:35:30 AM
11/26/2009 3:34:29 AM
dfsvc.exe (events: 7)
12/15/2009 5:43:06 AM
12/15/2009 5:41:25 AM
12/15/2009 5:41:19 AM
12/15/2009 5:41:18 AM
12/15/2009 5:41:15 AM
12/15/2009 5:41:11 AM
12/15/2009 5:41:10 AM
12/15/2009 5:41:08 AM
12/15/2009 5:40:58 AM
12/15/2009 5:40:11 AM
12/15/2009 5:40:08 AM
12/15/2009 5:40:07 AM
12/15/2009 5:40:05 AM
12/15/2009 5:39:57 AM
12/15/2009 5:39:55 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE
C:\WINDOWS\system32\LPREMOVE.EXE

Process exit
Process start

C:\WINDOWS\system32\MCBUILDER.EXE
C:\WINDOWS\system32\MCBUILDER.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE

exit
exit
exit
start
start
exit
start
start
exit
exit
exit
start
start
exit
start

12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009
12/12/2009

5:39:53
5:39:33
5:38:34
5:38:29
5:38:27
5:38:25
5:38:23
5:38:22
5:38:20
5:38:14
5:36:43
5:36:42
5:36:39
5:36:14
5:35:53
5:35:53
5:35:49
3:57:47
3:56:47
3:56:46
3:56:44
3:56:29
3:54:59
3:54:58
3:54:56
3:54:48
3:54:39
3:54:38
3:54:36
3:54:27
3:53:28
3:53:27
3:53:24
3:53:19
3:52:54
3:52:53
3:52:50
3:52:41
3:52:06
3:52:05
3:52:02
3:52:00
3:51:04
3:51:03
3:51:01
3:50:55
3:50:06
3:50:05
3:50:03
3:49:58
3:48:14
3:48:13
3:48:10
3:48:07
3:47:40
3:47:40
3:47:36
3:47:31
3:46:47
3:46:46

AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
AM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
exit
exit
start
start
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start

C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE

12/12/2009 3:46:43 PM
12/12/2009 3:46:36 PM
12/12/2009 3:45:55 PM
12/12/2009 3:45:54 PM
12/12/2009 3:45:51 PM
12/12/2009 3:45:33 PM
12/12/2009 3:44:20 PM
12/12/2009 3:44:19 PM
12/12/2009 3:44:16 PM
12/10/2009 2:19:23 PM
12/10/2009 2:18:41 PM
12/10/2009 2:18:39 PM
12/10/2009 2:18:37 PM
12/8/2009 1:27:23 PM
12/8/2009 1:27:19 PM
12/8/2009 12:24:45 AM
12/8/2009 12:22:49 AM
12/8/2009 12:22:48 AM
12/8/2009 12:22:45 AM
12/8/2009 12:22:43 AM
12/8/2009 12:22:36 AM
12/8/2009 12:22:35 AM
12/8/2009 12:22:33 AM
12/8/2009 12:22:25 AM
12/8/2009 12:21:48 AM
12/8/2009 12:21:47 AM
12/8/2009 12:21:44 AM
12/8/2009 12:21:41 AM
12/8/2009 12:19:01 AM
12/8/2009 12:19:00 AM
12/8/2009 12:18:58 AM
12/8/2009 12:18:55 AM
12/8/2009 12:18:33 AM
12/8/2009 12:18:32 AM
12/8/2009 12:18:29 AM
12/8/2009 12:18:19 AM
12/8/2009 12:17:53 AM
12/8/2009 12:17:52 AM
12/8/2009 12:17:49 AM
12/8/2009 12:17:40 AM
12/8/2009 12:16:44 AM
12/8/2009 12:16:43 AM
12/8/2009 12:16:40 AM
12/8/2009 12:16:35 AM
12/8/2009 12:15:52 AM
12/8/2009 12:15:51 AM
12/8/2009 12:15:49 AM
12/8/2009 12:15:45 AM
12/8/2009 12:14:46 AM
12/8/2009 12:14:45 AM
12/8/2009 12:14:42 AM
12/8/2009 12:14:38 AM
12/8/2009 12:14:16 AM
12/8/2009 12:14:15 AM
12/8/2009 12:14:12 AM
12/8/2009 12:14:08 AM
12/8/2009 12:13:22 AM
12/8/2009 12:13:21 AM
12/8/2009 12:13:19 AM
12/8/2009 12:13:12 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit

C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE

12/8/2009 12:12:34 AM
12/8/2009 12:12:33 AM
12/8/2009 12:12:30 AM
12/7/2009 3:14:56 PM
12/7/2009 3:14:53 PM
12/2/2009 3:20:31 AM
12/2/2009 3:17:14 AM
12/2/2009 3:17:14 AM
12/2/2009 3:17:10 AM
12/2/2009 3:16:52 AM
12/2/2009 3:15:55 AM
12/2/2009 3:15:54 AM
12/2/2009 3:15:51 AM
11/28/2009 12:17:09 AM
11/27/2009 11:33:03 PM
11/27/2009 11:32:49 PM
11/27/2009 10:51:15 PM
11/26/2009 12:18:52 AM
11/26/2009 12:17:40 AM
11/26/2009 12:17:40 AM
11/26/2009 12:17:36 AM
11/26/2009 12:17:26 AM
11/26/2009 12:15:47 AM
11/26/2009 12:15:36 AM
11/26/2009 12:15:35 AM
11/26/2009 12:15:32 AM
11/26/2009 12:15:24 AM
11/26/2009 12:15:23 AM
11/26/2009 12:15:20 AM
11/26/2009 12:15:05 AM
11/26/2009 12:14:11 AM
11/26/2009 12:13:18 AM
11/26/2009 12:13:17 AM
11/26/2009 12:13:14 AM
11/26/2009 12:13:12 AM
11/26/2009 12:13:12 AM
11/26/2009 12:13:08 AM
11/26/2009 12:13:01 AM
11/26/2009 12:12:06 AM
11/26/2009 12:11:00 AM
11/26/2009 12:10:59 AM
11/26/2009 12:10:56 AM
11/26/2009 12:10:53 AM
11/26/2009 12:10:52 AM
11/26/2009 12:10:50 AM
11/26/2009 12:10:35 AM
11/26/2009 12:08:18 AM
11/26/2009 12:08:17 AM
11/26/2009 12:08:15 AM
11/26/2009 12:08:05 AM
11/26/2009 12:07:15 AM
11/26/2009 12:07:14 AM
11/26/2009 12:07:11 AM
11/26/2009 12:07:04 AM
11/26/2009 12:05:47 AM
11/26/2009 12:05:47 AM
11/26/2009 12:05:43 AM
11/25/2009 10:39:53 PM
11/25/2009 10:39:32 PM
11/25/2009 10:39:31 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
start
exit
start
exit
exit
start
start
exit
exit
start
start
exit
start
exit
start
exit
exit
start
start
exit
exit
exit
start
start
exit
start
start
exit
exit
exit
start
start
exit
start
start
exit
exit
exit
start
start
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start

C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE

11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009

10:39:29
10:39:21
10:38:44
10:38:43
10:38:41
10:38:22
10:36:40
10:36:39
10:36:37
10:36:32
10:35:22
10:35:06
10:35:06
10:35:03
10:35:03
10:35:02
10:34:59
10:34:47
10:33:25
10:32:41
10:32:40
10:32:37
10:32:33
10:32:32
10:32:30
10:32:11
10:31:02
10:31:01
10:30:59
10:30:55
10:29:59
10:29:58
10:29:55
10:29:52
10:28:55
10:28:54
10:28:52
10:28:45
10:27:55
10:27:54
10:27:52
10:26:34
10:25:40
10:25:23
10:25:22
10:25:20
10:25:19
10:25:19
10:25:16
10:25:11
10:24:46
10:24:45
10:24:43
10:24:24
10:23:14
10:23:13
10:23:10
10:22:56
10:22:22
10:22:21

PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM
PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
exit
start
start
exit
exit
start
start
exit
exit
exit
start
start
start
exit
start
exit
exit
exit
start
start
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
exit
start
exit
start
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start

C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE

11/25/2009 10:22:19 PM
11/25/2009 10:19:49 PM
11/25/2009 10:18:54 PM
11/25/2009 10:18:54 PM
11/25/2009 10:18:50 PM
11/22/2009 3:24:41 PM
11/22/2009 3:23:00 PM
11/22/2009 3:23:00 PM
11/22/2009 3:22:57 PM
11/22/2009 3:22:50 PM
11/22/2009 3:22:10 PM
11/22/2009 3:22:09 PM
11/22/2009 3:22:07 PM
11/22/2009 3:21:55 PM
11/22/2009 3:21:00 PM
11/22/2009 3:20:55 PM
11/22/2009 3:20:54 PM
11/22/2009 3:20:51 PM
11/22/2009 3:20:47 PM
11/22/2009 3:19:42 PM
11/22/2009 3:19:42 PM
11/22/2009 3:19:38 PM
11/22/2009 3:19:29 PM
11/22/2009 3:18:21 PM
11/22/2009 3:18:20 PM
11/22/2009 3:18:18 PM
11/22/2009 3:17:54 PM
11/22/2009 3:17:53 PM
11/22/2009 3:17:51 PM
11/22/2009 3:17:41 PM
11/22/2009 3:16:40 PM
11/22/2009 3:16:39 PM
11/22/2009 3:16:36 PM
dfsvc.exe (events: 7)
12/15/2009 4:59:59 PM
12/15/2009 4:59:59 PM
12/14/2009 10:00:00 PM
12/14/2009 9:59:59 PM
12/14/2009 4:16:03 AM
12/14/2009 4:16:03 AM
12/13/2009 2:08:01 PM
12/13/2009 2:08:01 PM
12/12/2009 12:59:59 PM
12/12/2009 12:59:59 PM
12/11/2009 5:59:59 PM
12/11/2009 5:59:59 PM
12/11/2009 4:07:02 AM
12/11/2009 4:07:02 AM
12/10/2009 4:58:26 AM
12/10/2009 4:58:26 AM
12/8/2009 2:00:00 PM
12/8/2009 2:00:00 PM
12/7/2009 11:46:33 PM
12/7/2009 11:46:33 PM
12/7/2009 4:12:33 AM
12/7/2009 4:12:33 AM
12/6/2009 5:00:00 AM
12/6/2009 4:59:59 AM
12/5/2009 12:40:21 PM
12/5/2009 12:40:21 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
start
exit
exit
start
exit
start
exit
exit
start
start
exit
exit
start
start
exit
start
start
exit
exit
start
start

C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE
C:\WINDOWS\system32\MFPMP.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE

12/4/2009 2:59:59 PM
12/4/2009 2:59:59 PM
12/4/2009 4:28:12 AM
12/4/2009 4:28:12 AM
12/3/2009 5:38:43 AM
12/3/2009 5:38:43 AM
12/2/2009 6:00:00 AM
12/2/2009 6:00:00 AM
12/1/2009 1:58:21 PM
12/1/2009 1:58:21 PM
11/30/2009 4:00:00 PM
11/30/2009 4:00:00 PM
11/30/2009 5:27:26 AM
11/30/2009 5:27:26 AM
11/29/2009 5:58:47 AM
11/29/2009 5:58:47 AM
11/28/2009 6:59:59 AM
11/28/2009 6:59:59 AM
11/27/2009 12:00:00 PM
11/27/2009 11:59:59 AM
11/26/2009 4:59:59 PM
11/26/2009 4:59:59 PM
11/25/2009 9:59:59 PM
11/25/2009 9:59:59 PM
11/25/2009 5:06:53 AM
11/25/2009 5:06:53 AM
11/25/2009 5:06:53 AM
11/25/2009 5:06:53 AM
11/25/2009 5:06:53 AM
11/25/2009 5:06:53 AM
11/24/2009 10:15:09 AM
11/24/2009 10:15:09 AM
11/23/2009 5:09:26 PM
11/23/2009 5:09:26 PM
11/22/2009 5:59:59 PM
11/22/2009 5:59:59 PM
11/22/2009 12:38:30 AM
11/22/2009 12:38:30 AM
11/21/2009 4:39:21 PM
11/21/2009 4:39:21 PM
11/20/2009 12:09:03 PM
11/20/2009 12:09:03 PM
11/19/2009 2:58:34 PM
11/19/2009 2:58:34 PM
11/18/2009 7:25:47 PM
11/18/2009 7:25:47 PM
11/18/2009 4:55:37 AM
11/18/2009 4:55:37 AM
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM
ENGER\MSNMSGR.EXE
12/14/2009 4:11:11 PM
ENGER\MSNMSGR.EXE
12/14/2009 4:09:33 PM
ENGER\MSNMSGR.EXE
12/10/2009 2:44:30 PM
ENGER\MSNMSGR.EXE
12/10/2009 2:42:15 PM
ENGER\MSNMSGR.EXE
12/10/2009 2:22:49 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE
C:\WINDOWS\system32\SCHTASKS.EXE

Process start

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process exit

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process start

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process exit

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process start

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process exit

C:\Program Files (x86)\WINDOWS LIVE\MESS

ENGER\MSNMSGR.EXE
12/10/2009 4:49:29 AM
ENGER\MSNMSGR.EXE
12/10/2009 4:10:39 AM
ENGER\MSNMSGR.EXE
12/10/2009 4:08:57 AM
ENGER\MSNMSGR.EXE
12/9/2009 3:23:35 AM
ENGER\MSNMSGR.EXE
12/8/2009 1:22:35 PM
ENGER\MSNMSGR.EXE
12/8/2009 1:20:42 PM
ENGER\MSNMSGR.EXE
12/8/2009 11:34:16 AM
ENGER\MSNMSGR.EXE
12/6/2009 12:47:12 AM
ENGER\MSNMSGR.EXE
12/5/2009 7:28:55 PM
ENGER\MSNMSGR.EXE
12/5/2009 2:24:47 AM
ENGER\MSNMSGR.EXE
12/4/2009 10:43:14 PM
ENGER\MSNMSGR.EXE
12/4/2009 6:51:08 PM
ENGER\MSNMSGR.EXE
12/3/2009 4:09:32 AM
ENGER\MSNMSGR.EXE
12/3/2009 4:07:09 AM
ENGER\MSNMSGR.EXE
12/2/2009 8:42:06 PM
ENGER\MSNMSGR.EXE
12/2/2009 7:36:39 PM
ENGER\MSNMSGR.EXE
12/2/2009 3:43:08 PM
ENGER\MSNMSGR.EXE
12/1/2009 3:13:44 AM
ENGER\MSNMSGR.EXE
11/30/2009 8:00:27 PM
ENGER\MSNMSGR.EXE
11/30/2009 7:34:03 PM
ENGER\MSNMSGR.EXE
11/30/2009 6:55:13 PM
ENGER\MSNMSGR.EXE
11/30/2009 5:55:17 PM
ENGER\MSNMSGR.EXE
11/30/2009 5:53:07 PM
ENGER\MSNMSGR.EXE
11/30/2009 3:32:36 PM
ENGER\MSNMSGR.EXE
11/30/2009 10:18:14 AM
ENGER\MSNMSGR.EXE
11/26/2009 3:19:56 AM
ENGER\MSNMSGR.EXE
11/26/2009 3:17:54 AM
ENGER\MSNMSGR.EXE
11/24/2009 2:45:18 PM
ENGER\MSNMSGR.EXE
11/24/2009 2:41:31 PM
ENGER\MSNMSGR.EXE
11/21/2009 7:25:24 PM

Process start

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process exit

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process start

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process start

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process exit

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process start

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process exit

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process start

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process exit

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process start

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process exit

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process start

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process exit

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process start

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process exit

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process start

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process exit

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process start

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process exit

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process start

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process exit

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process start

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process exit

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process start

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process exit

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process start

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process exit

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process start

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process exit

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process start

C:\Program Files (x86)\WINDOWS LIVE\MESS

ENGER\MSNMSGR.EXE
11/21/2009 7:11:45 PM
ENGER\MSNMSGR.EXE
11/21/2009 12:32:51 PM
ENGER\MSNMSGR.EXE
11/20/2009 6:58:59 PM
ENGER\MSNMSGR.EXE
11/20/2009 11:59:18 AM
ENGER\MSNMSGR.EXE
11/20/2009 9:52:53 AM
ENGER\MSNMSGR.EXE
11/19/2009 4:27:58 AM
ENGER\MSNMSGR.EXE
11/18/2009 7:43:43 PM
ENGER\MSNMSGR.EXE
11/18/2009 7:16:14 PM
ENGER\MSNMSGR.EXE
11/18/2009 6:03:02 PM
ENGER\MSNMSGR.EXE
11/18/2009 12:50:54 PM
ENGER\MSNMSGR.EXE
11/18/2009 12:25:18 PM
ENGER\MSNMSGR.EXE
11/18/2009 11:18:18 AM
ENGER\MSNMSGR.EXE
11/18/2009 10:34:53 AM
ENGER\MSNMSGR.EXE
11/17/2009 10:33:09 PM
ENGER\MSNMSGR.EXE
11/17/2009 6:17:47 PM
ENGER\MSNMSGR.EXE
11/17/2009 2:48:52 PM
ENGER\MSNMSGR.EXE
dfsvc.exe (events: 7)
12/15/2009 9:22:08 PM
12/15/2009 9:21:59 PM
12/15/2009 5:33:28 PM
12/15/2009 5:32:59 PM
12/14/2009 8:41:13 PM
12/14/2009 8:40:59 PM
12/14/2009 4:10:42 PM
12/14/2009 4:10:01 PM
12/13/2009 8:00:17 PM
12/13/2009 7:59:59 PM
12/13/2009 7:45:14 PM
12/13/2009 7:45:00 PM
12/13/2009 2:02:13 PM
12/13/2009 2:01:59 PM
12/12/2009 5:34:02 PM
12/12/2009 5:34:00 PM
12/12/2009 6:27:02 AM
12/12/2009 6:27:00 AM
12/11/2009 4:43:04 PM
12/11/2009 4:42:59 PM
12/11/2009 4:28:04 PM
12/11/2009 4:28:00 PM
12/11/2009 4:00:19 AM
12/11/2009 3:59:59 AM
12/10/2009 2:17:21 PM
12/10/2009 2:16:59 PM

Process exit

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process start

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process exit

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process start

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process exit

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process start

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process exit

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process start

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process exit

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process start

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process exit

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process start

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process exit

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process start

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process exit

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process start

C:\Program Files (x86)\WINDOWS LIVE\MESS

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

12/10/2009 2:02:18 PM
12/10/2009 2:02:00 PM
12/8/2009 4:23:06 PM
12/8/2009 4:22:59 PM
12/8/2009 5:35:10 AM
12/8/2009 5:35:00 AM
12/8/2009 5:01:03 AM
12/8/2009 5:01:00 AM
12/8/2009 4:46:00 AM
12/8/2009 4:45:59 AM
12/7/2009 3:04:03 PM
12/7/2009 3:04:00 PM
12/7/2009 4:05:05 AM
12/7/2009 4:05:00 AM
12/6/2009 3:36:22 PM
12/6/2009 3:35:59 PM
12/6/2009 3:03:15 PM
12/6/2009 3:03:00 PM
12/6/2009 2:48:12 PM
12/6/2009 2:47:59 PM
12/6/2009 2:07:05 PM
12/6/2009 2:07:00 PM
12/6/2009 12:50:13 AM
12/6/2009 12:50:00 AM
12/5/2009 12:46:01 PM
12/5/2009 12:45:59 PM
12/5/2009 12:31:32 PM
12/5/2009 12:30:59 PM
12/4/2009 6:53:22 PM
12/4/2009 6:53:00 PM
12/4/2009 4:20:14 AM
12/4/2009 4:20:00 AM
12/3/2009 2:06:11 PM
12/3/2009 2:06:00 PM
12/2/2009 7:52:25 PM
12/2/2009 7:51:59 PM
12/2/2009 7:37:28 PM
12/2/2009 7:37:00 PM
12/2/2009 11:32:25 AM
12/2/2009 11:32:00 AM
12/1/2009 4:16:28 PM
12/1/2009 4:15:59 PM
12/1/2009 1:47:32 PM
12/1/2009 1:47:00 PM
12/1/2009 3:16:11 AM
12/1/2009 3:16:00 AM
11/30/2009 7:44:16 PM
11/30/2009 7:43:59 PM
11/30/2009 5:27:22 PM
11/30/2009 5:26:59 PM
11/30/2009 4:22:09 PM
11/30/2009 4:21:59 PM
11/30/2009 3:50:03 PM
11/30/2009 3:49:59 PM
11/30/2009 3:35:07 PM
11/30/2009 3:35:01 PM
11/29/2009 2:24:33 PM
11/29/2009 2:23:59 PM
11/29/2009 2:09:29 PM
11/29/2009 2:08:59 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE

11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/25/2009
11/25/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/17/2009
11/17/2009
11/17/2009
11/17/2009
dfsvc.exe
12/15/2009
12/15/2009
12/15/2009
12/14/2009
12/14/2009
12/14/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/11/2009

12:28:22 PM
12:27:59 PM
12:13:19 PM
12:12:59 PM
11:47:27 AM
11:46:59 AM
11:32:25 AM
11:32:00 AM
7:16:19 AM
7:15:59 AM
7:01:17 AM
7:01:00 AM
4:05:29 AM
4:04:59 AM
5:15:11 PM
5:14:59 PM
5:00:17 PM
5:00:00 PM
2:19:22 PM
2:18:59 PM
2:04:20 PM
2:04:00 PM
1:20:23 PM
1:19:59 PM
1:05:20 PM
1:04:59 PM
12:50:17 PM
12:49:59 PM
12:35:17 PM
12:35:00 PM
12:18:24 PM
12:17:59 PM
12:03:21 PM
12:03:00 PM
7:56:28 PM
7:55:59 PM
5:42:24 AM
5:41:59 AM
5:27:21 AM
5:26:59 AM
5:52:17 PM
5:51:59 PM
4:46:39 AM
4:46:00 AM
3:35:02 PM
3:34:59 PM
2:25:12 AM
2:25:00 AM
(events: 7)
7:55:06 PM
5:10:04 PM
3:48:56 AM
7:46:56 PM
5:39:40 PM
5:33:22 PM
7:54:06 PM
7:45:52 PM
2:26:21 PM
2:26:16 PM
9:19:27 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE
C:\WINDOWS\system32\MSFEEDSSYNC.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit

C:\WINDOWS\SYSWOW64\DLLHOST.EXE
C:\WINDOWS\SYSWOW64\DLLHOST.EXE
C:\WINDOWS\SYSWOW64\DLLHOST.EXE
C:\WINDOWS\SYSWOW64\DLLHOST.EXE
C:\WINDOWS\SYSWOW64\DLLHOST.EXE
C:\WINDOWS\SYSWOW64\DLLHOST.EXE
C:\WINDOWS\SYSWOW64\DLLHOST.EXE
C:\WINDOWS\SYSWOW64\DLLHOST.EXE
C:\WINDOWS\SYSWOW64\DLLHOST.EXE
C:\WINDOWS\SYSWOW64\DLLHOST.EXE
C:\WINDOWS\SYSWOW64\DLLHOST.EXE

12/11/2009 9:19:21 AM
12/6/2009 2:32:27 AM
12/6/2009 2:32:22 AM
12/4/2009 3:56:03 PM
12/4/2009 3:55:50 PM
12/4/2009 12:09:30 PM
12/4/2009 12:09:25 PM
11/29/2009 2:48:50 PM
11/29/2009 2:48:45 PM
11/27/2009 11:35:00 PM
11/27/2009 11:34:53 PM
11/27/2009 11:37:26 AM
11/27/2009 11:37:21 AM
11/22/2009 2:07:13 AM
11/22/2009 2:07:08 AM
11/20/2009 12:09:08 PM
11/20/2009 12:09:03 PM
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM
.EXE
12/15/2009 8:32:35 PM
.EXE
12/15/2009 5:09:17 PM
.EXE
12/15/2009 5:09:17 PM
.EXE
12/15/2009 6:27:43 AM
.EXE
12/14/2009 4:16:42 PM
.EXE
12/14/2009 4:09:33 PM
.EXE
12/14/2009 3:47:50 PM
.EXE
12/12/2009 7:55:47 PM
.EXE
12/12/2009 7:55:47 PM
.EXE
12/11/2009 7:51:40 PM
.EXE
12/11/2009 7:51:39 PM
.EXE
12/11/2009 4:27:25 PM
.EXE
12/10/2009 2:44:23 PM
.EXE
12/10/2009 2:42:15 PM
.EXE
12/10/2009 2:22:48 PM
.EXE
12/10/2009 4:49:32 AM
.EXE
12/10/2009 4:46:55 AM
.EXE
12/10/2009 4:08:57 AM
.EXE
12/9/2009 3:28:23 AM
.EXE
12/9/2009 3:23:35 AM
.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\SYSWOW64\DLLHOST.EXE
C:\WINDOWS\SYSWOW64\DLLHOST.EXE
C:\WINDOWS\SYSWOW64\DLLHOST.EXE
C:\WINDOWS\SYSWOW64\DLLHOST.EXE
C:\WINDOWS\SYSWOW64\DLLHOST.EXE
C:\WINDOWS\SYSWOW64\DLLHOST.EXE
C:\WINDOWS\SYSWOW64\DLLHOST.EXE
C:\WINDOWS\SYSWOW64\DLLHOST.EXE
C:\WINDOWS\SYSWOW64\DLLHOST.EXE
C:\WINDOWS\SYSWOW64\DLLHOST.EXE
C:\WINDOWS\SYSWOW64\DLLHOST.EXE
C:\WINDOWS\SYSWOW64\DLLHOST.EXE
C:\WINDOWS\SYSWOW64\DLLHOST.EXE
C:\WINDOWS\SYSWOW64\DLLHOST.EXE
C:\WINDOWS\SYSWOW64\DLLHOST.EXE
C:\WINDOWS\SYSWOW64\DLLHOST.EXE
C:\WINDOWS\SYSWOW64\DLLHOST.EXE

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

12/8/2009 2:28:28 PM
.EXE
12/8/2009 1:20:42 PM
.EXE
12/7/2009 3:22:27 PM
.EXE
12/7/2009 2:43:30 PM
.EXE
12/6/2009 3:04:05 AM
.EXE
12/6/2009 12:47:12 AM
.EXE
12/5/2009 7:28:55 PM
.EXE
12/5/2009 5:22:38 PM
.EXE
12/5/2009 5:22:37 PM
.EXE
12/5/2009 2:24:47 AM
.EXE
12/4/2009 10:43:14 PM
.EXE
12/4/2009 6:51:08 PM
.EXE
12/4/2009 4:27:46 PM
.EXE
12/4/2009 4:27:46 PM
.EXE
12/4/2009 3:54:44 PM
.EXE
12/4/2009 2:42:15 PM
.EXE
12/3/2009 2:27:39 PM
.EXE
12/3/2009 4:13:20 AM
.EXE
12/3/2009 4:08:17 AM
.EXE
12/3/2009 4:07:16 AM
.EXE
12/2/2009 8:42:06 PM
.EXE
12/2/2009 7:39:04 PM
.EXE
12/2/2009 7:39:00 PM
.EXE
12/2/2009 7:36:39 PM
.EXE
12/2/2009 3:43:08 PM
.EXE
12/2/2009 3:26:40 PM
.EXE
12/1/2009 4:44:08 AM
.EXE
12/1/2009 3:13:44 AM
.EXE
11/30/2009 8:00:27 PM
.EXE
11/30/2009 7:34:03 PM
.EXE

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

11/30/2009
.EXE
11/30/2009
.EXE
11/30/2009
.EXE
11/30/2009
.EXE
11/30/2009
.EXE
11/27/2009
.EXE
11/26/2009
.EXE
11/26/2009
.EXE
11/26/2009
.EXE
11/26/2009
.EXE
11/26/2009
.EXE
11/25/2009
.EXE
11/25/2009
.EXE
11/24/2009
.EXE
11/24/2009
.EXE
11/24/2009
.EXE
11/24/2009
.EXE
11/21/2009
.EXE
11/21/2009
.EXE
11/21/2009
.EXE
11/21/2009
.EXE
11/21/2009
.EXE
11/21/2009
.EXE
11/21/2009
.EXE
11/20/2009
.EXE
11/20/2009
.EXE
11/19/2009
.EXE
11/19/2009
.EXE
11/18/2009
.EXE
11/18/2009
.EXE

6:55:13 PM

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

5:55:17 PM

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

5:53:06 PM

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

3:32:36 PM

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

10:18:13 AM Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

8:49:54 PM

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

6:48:15 PM

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

6:36:25 PM

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

4:56:46 PM

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

3:20:09 AM

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

3:17:53 AM

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

1:29:41 PM

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

4:41:11 AM

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

2:45:18 PM

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

2:41:30 PM

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

1:44:22 PM

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

1:44:21 PM

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

7:25:24 PM

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

7:11:44 PM

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

5:51:12 PM

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

1:56:07 PM

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

12:34:33 PM Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

12:33:04 PM Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

12:32:51 PM Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

6:58:59 PM

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process exit

11:59:18 AM Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

3:21:19 PM

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

4:27:58 AM

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

7:43:43 PM

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

7:16:14 PM

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

11/18/2009 6:03:02 PM
.EXE
11/18/2009 12:50:54 PM
.EXE
11/18/2009 12:25:18 PM
.EXE
11/18/2009 11:18:18 AM
.EXE
11/18/2009 10:34:52 AM
.EXE
11/17/2009 10:33:09 PM
.EXE
11/17/2009 6:17:47 PM
.EXE
11/17/2009 5:52:12 PM
.EXE
11/17/2009 5:52:11 PM
.EXE
11/17/2009 2:48:52 PM
.EXE
11/17/2009 2:25:13 AM
.EXE
dfsvc.exe (events: 7)
12/15/2009 5:09:25 PM
12/15/2009 5:09:25 PM
12/11/2009 4:28:04 PM
12/11/2009 4:28:04 PM
12/4/2009 3:55:36 PM
12/4/2009 3:55:36 PM
12/2/2009 3:27:16 PM
12/2/2009 3:27:16 PM
12/1/2009 4:16:21 AM
12/1/2009 4:16:21 AM
11/26/2009 6:37:08 PM
11/26/2009 6:37:08 PM
11/26/2009 4:42:36 PM
11/26/2009 4:42:36 PM
11/25/2009 4:12:18 AM
11/25/2009 4:12:18 AM
11/18/2009 12:53:09 PM
11/18/2009 12:53:09 PM
11/17/2009 5:56:33 PM
11/17/2009 5:56:32 PM
dfsvc.exe (events: 7)
12/16/2009 7:40:25 AM
12/16/2009 7:20:23 AM
12/16/2009 5:15:48 AM
12/16/2009 4:55:47 AM
12/16/2009 3:53:03 AM
12/16/2009 3:33:03 AM
12/16/2009 12:33:00 AM
12/16/2009 12:16:27 AM
12/15/2009 11:51:27 PM
12/15/2009 11:44:39 PM
12/15/2009 11:29:30 PM
12/15/2009 11:12:04 PM
12/15/2009 9:05:03 PM
12/15/2009 8:44:52 PM
12/15/2009 8:25:03 PM
12/15/2009 8:05:01 PM

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process start

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process exit

C:\Program Files (x86)\LIMEWIRE\LIMEWIRE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\SYSWOW64\IPCONFIG.EXE
C:\WINDOWS\SYSWOW64\IPCONFIG.EXE
C:\WINDOWS\SYSWOW64\IPCONFIG.EXE
C:\WINDOWS\SYSWOW64\IPCONFIG.EXE
C:\WINDOWS\SYSWOW64\IPCONFIG.EXE
C:\WINDOWS\SYSWOW64\IPCONFIG.EXE
C:\WINDOWS\SYSWOW64\IPCONFIG.EXE
C:\WINDOWS\SYSWOW64\IPCONFIG.EXE
C:\WINDOWS\SYSWOW64\IPCONFIG.EXE
C:\WINDOWS\SYSWOW64\IPCONFIG.EXE
C:\WINDOWS\SYSWOW64\IPCONFIG.EXE
C:\WINDOWS\SYSWOW64\IPCONFIG.EXE
C:\WINDOWS\SYSWOW64\IPCONFIG.EXE
C:\WINDOWS\SYSWOW64\IPCONFIG.EXE
C:\WINDOWS\SYSWOW64\IPCONFIG.EXE
C:\WINDOWS\SYSWOW64\IPCONFIG.EXE
C:\WINDOWS\SYSWOW64\IPCONFIG.EXE
C:\WINDOWS\SYSWOW64\IPCONFIG.EXE
C:\WINDOWS\SYSWOW64\IPCONFIG.EXE
C:\WINDOWS\SYSWOW64\IPCONFIG.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR

12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/15/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/14/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/13/2009
12/12/2009
12/12/2009

7:48:18 PM
7:34:38 PM
7:06:49 PM
6:54:56 PM
6:28:03 PM
6:07:57 PM
5:49:03 PM
5:29:02 PM
3:56:18 PM
3:44:34 PM
3:26:18 PM
3:09:06 PM
11:47:33 AM
11:27:22 AM
8:26:09 AM
8:06:09 AM
7:56:08 AM
7:39:49 AM
7:29:42 AM
7:18:26 AM
6:17:49 AM
6:04:25 AM
4:46:09 AM
4:26:08 AM
8:27:39 PM
8:07:28 PM
7:15:39 PM
6:55:36 PM
6:45:35 PM
6:38:10 PM
6:13:54 PM
5:53:52 PM
3:47:30 PM
3:43:15 PM
3:33:10 PM
3:32:08 PM
11:09:48 AM
10:49:47 AM
10:39:12 AM
10:29:16 AM
5:34:16 AM
5:14:07 AM
4:38:01 AM
4:17:49 AM
12:56:47 AM
12:43:08 AM
12:25:56 AM
12:17:06 AM
8:24:20 PM
8:04:16 PM
4:04:49 PM
3:44:40 PM
3:17:34 PM
3:11:12 PM
3:00:05 PM
2:40:32 PM
5:55:15 AM
5:35:04 AM
9:20:35 PM
9:00:21 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR

12/12/2009 7:37:51 PM
12/12/2009 7:26:28 PM
12/12/2009 6:19:05 PM
12/12/2009 5:59:05 PM
12/12/2009 4:38:03 PM
12/12/2009 4:17:58 PM
12/12/2009 12:34:59 PM
12/12/2009 12:14:56 PM
12/12/2009 7:12:57 AM
12/12/2009 6:52:52 AM
12/11/2009 8:44:53 PM
12/11/2009 8:27:36 PM
12/11/2009 6:29:53 PM
12/11/2009 6:09:47 PM
12/11/2009 5:43:28 PM
12/11/2009 5:30:27 PM
12/11/2009 2:13:21 PM
12/11/2009 2:09:07 PM
12/11/2009 1:59:05 PM
12/11/2009 1:56:04 PM
12/11/2009 6:46:11 AM
12/11/2009 6:25:57 AM
12/11/2009 4:48:44 AM
12/11/2009 4:28:44 AM
12/10/2009 6:17:32 PM
12/10/2009 5:57:31 PM
12/10/2009 3:38:26 PM
12/10/2009 3:18:14 PM
12/10/2009 5:17:50 AM
12/10/2009 5:01:03 AM
12/10/2009 4:46:55 AM
12/10/2009 4:43:59 AM
12/8/2009 3:53:29 PM
12/8/2009 3:33:25 PM
12/8/2009 5:21:30 AM
12/8/2009 5:01:21 AM
12/8/2009 3:12:49 AM
12/8/2009 2:52:39 AM
12/8/2009 12:55:51 AM
12/8/2009 12:43:18 AM
12/8/2009 12:11:19 AM
12/8/2009 12:07:27 AM
12/7/2009 5:15:20 PM
12/7/2009 4:55:12 PM
12/7/2009 4:37:31 PM
12/7/2009 4:35:38 PM
12/7/2009 4:20:49 PM
12/7/2009 4:00:43 PM
12/7/2009 3:13:16 PM
12/7/2009 2:56:01 PM
12/7/2009 7:12:24 AM
12/7/2009 6:52:16 AM
12/7/2009 6:17:31 AM
12/7/2009 6:14:06 AM
12/7/2009 5:51:53 AM
12/7/2009 5:31:39 AM
12/7/2009 4:37:51 AM
12/7/2009 4:17:49 AM
12/6/2009 3:59:33 PM
12/6/2009 3:39:27 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR

12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/6/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/5/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/4/2009
12/3/2009
12/3/2009
12/3/2009
12/3/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009
12/2/2009

3:20:17 PM
3:07:51 PM
5:34:06 AM
5:13:56 AM
1:16:06 AM
12:59:37 AM
6:35:48 PM
6:34:22 PM
4:57:27 PM
4:47:40 PM
4:27:38 PM
4:25:10 PM
2:24:12 PM
2:04:10 PM
1:21:07 PM
1:20:27 PM
3:49:03 AM
3:28:51 AM
2:52:33 AM
2:35:15 AM
10:42:24 PM
10:40:57 PM
10:15:34 PM
9:55:31 PM
8:44:19 PM
8:24:19 PM
7:44:49 PM
7:24:43 PM
4:21:35 PM
4:06:24 PM
3:14:08 PM
3:04:38 PM
2:02:41 PM
1:42:36 PM
12:57:11 PM
12:37:01 PM
5:26:52 AM
5:06:48 AM
3:02:16 PM
2:42:14 PM
5:34:45 AM
5:14:40 AM
3:26:35 PM
3:22:21 PM
2:59:21 PM
2:53:51 PM
2:15:31 PM
1:55:28 PM
1:09:31 PM
12:49:23 PM
12:39:22 PM
12:27:26 PM
12:09:10 PM
11:52:44 AM
7:18:31 AM
6:58:24 AM
6:32:05 AM
6:16:58 AM
4:15:39 AM
3:55:35 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR

12/1/2009 6:40:44 PM
12/1/2009 6:20:32 PM
12/1/2009 3:48:19 PM
12/1/2009 3:46:19 PM
12/1/2009 3:36:19 PM
12/1/2009 3:28:23 PM
12/1/2009 3:09:59 PM
12/1/2009 3:04:51 PM
12/1/2009 2:54:51 PM
12/1/2009 2:42:31 PM
12/1/2009 6:47:30 AM
12/1/2009 6:27:27 AM
12/1/2009 5:14:15 AM
12/1/2009 4:54:11 AM
12/1/2009 4:02:13 AM
12/1/2009 3:54:16 AM
11/30/2009 8:00:14 PM
11/30/2009 7:46:34 PM
11/30/2009 6:54:57 PM
11/30/2009 6:34:54 PM
11/30/2009 6:09:34 PM
11/30/2009 6:09:28 PM
11/30/2009 5:53:05 PM
11/30/2009 5:33:48 PM
11/30/2009 5:07:49 PM
11/30/2009 4:47:46 PM
11/30/2009 4:37:35 PM
11/30/2009 4:25:24 PM
11/30/2009 6:14:53 AM
11/30/2009 5:54:43 AM
11/29/2009 6:24:47 PM
11/29/2009 6:04:49 PM
11/29/2009 3:10:49 PM
11/29/2009 2:59:42 PM
11/29/2009 2:28:32 PM
11/29/2009 2:25:54 PM
11/29/2009 5:37:59 AM
11/29/2009 5:17:51 AM
11/28/2009 6:41:06 PM
11/28/2009 6:21:00 PM
11/28/2009 5:12:36 PM
11/28/2009 4:52:33 PM
11/28/2009 4:02:46 PM
11/28/2009 4:00:00 PM
11/28/2009 3:49:59 PM
11/28/2009 3:43:46 PM
11/28/2009 1:34:03 PM
11/28/2009 1:14:01 PM
11/28/2009 12:37:33 PM
11/28/2009 12:17:19 PM
11/28/2009 11:57:04 AM
11/28/2009 11:48:09 AM
11/28/2009 11:37:51 AM
11/28/2009 11:36:59 AM
11/28/2009 8:07:03 AM
11/28/2009 7:46:49 AM
11/28/2009 6:55:18 AM
11/28/2009 6:35:09 AM
11/28/2009 6:10:33 AM
11/28/2009 5:50:29 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR

11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/28/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/27/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/26/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/25/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/24/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009
11/23/2009

1:17:33 AM
12:57:28 AM
12:45:58 AM
12:43:00 AM
12:29:40 AM
12:28:58 AM
10:20:03 PM
9:59:58 PM
3:52:02 PM
3:31:56 PM
1:08:33 PM
12:48:21 PM
12:38:15 PM
12:25:26 PM
3:02:10 AM
2:42:10 AM
7:28:25 PM
7:08:12 PM
6:31:25 PM
6:11:23 PM
5:41:37 PM
5:32:46 PM
4:00:40 PM
3:40:39 PM
2:48:25 PM
2:37:11 PM
1:07:21 PM
12:47:20 PM
7:47:33 AM
7:27:39 AM
3:48:45 AM
3:31:36 AM
12:49:17 AM
12:43:11 AM
12:33:00 AM
12:29:10 AM
11:20:26 PM
11:00:21 PM
8:15:41 PM
7:55:37 PM
3:40:56 PM
3:20:47 PM
2:00:26 PM
1:40:13 PM
12:59:48 PM
12:50:14 PM
5:11:19 AM
4:51:16 AM
4:05:02 PM
3:44:56 PM
10:58:41 AM
10:38:40 AM
4:52:59 AM
4:32:55 AM
8:39:37 PM
8:19:24 PM
5:40:41 PM
5:20:35 PM
5:11:12 AM
4:51:11 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR

11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/22/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/21/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/20/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/19/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009
11/18/2009

6:09:36 PM
5:31:04 PM
4:51:21 PM
4:31:09 PM
4:08:06 PM
3:48:07 PM
3:13:14 PM
2:57:49 PM
2:47:41 PM
2:39:49 PM
3:17:01 AM
2:56:54 AM
1:09:13 AM
12:49:10 AM
8:09:52 PM
7:49:46 PM
6:58:53 PM
6:57:52 PM
6:23:35 PM
6:03:22 PM
5:51:05 PM
5:46:09 PM
4:43:50 PM
4:23:46 PM
3:56:32 PM
3:41:24 PM
4:02:47 PM
3:42:34 PM
3:11:47 PM
2:51:36 PM
2:38:54 PM
2:24:29 PM
1:40:17 PM
1:20:08 PM
5:45:33 AM
5:25:24 AM
8:23:42 PM
8:03:37 PM
5:45:22 PM
5:25:12 PM
3:51:19 PM
3:31:19 PM
12:34:45 PM
12:14:36 PM
11:44:23 AM
11:43:28 AM
5:23:49 AM
5:03:40 AM
7:43:36 PM
7:34:43 PM
5:57:25 PM
5:51:44 PM
5:11:26 PM
4:51:13 PM
1:53:53 PM
1:33:50 PM
11:47:21 AM
11:29:25 AM
5:36:04 AM
5:15:51 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR

11/17/2009 11:23:24 PM
11/17/2009 11:03:20 PM
11/17/2009 3:59:38 PM
11/17/2009 3:39:33 PM
dfsvc.exe (events: 7)
12/16/2009 2:57:23 AM
12/16/2009 12:59:59 AM
12/13/2009 8:32:13 PM
12/13/2009 8:24:22 PM
12/10/2009 3:35:48 PM
12/10/2009 3:24:21 PM
12/7/2009 5:44:30 AM
12/7/2009 5:37:45 AM
12/4/2009 5:36:03 AM
12/4/2009 5:26:53 AM
12/2/2009 2:05:47 PM
12/2/2009 2:04:03 PM
12/2/2009 12:59:20 PM
12/2/2009 12:57:53 PM
12/2/2009 12:37:47 PM
12/2/2009 12:36:01 PM
12/2/2009 12:05:10 PM
12/2/2009 12:00:50 PM
12/2/2009 7:46:21 AM
12/2/2009 7:06:59 AM
12/2/2009 6:32:06 AM
12/2/2009 6:25:32 AM
12/2/2009 5:51:49 AM
12/2/2009 4:11:11 AM
12/1/2009 5:07:45 AM
12/1/2009 5:00:18 AM
11/28/2009 3:24:44 AM
11/28/2009 3:15:04 AM
11/25/2009 9:59:35 PM
11/25/2009 9:41:38 PM
11/25/2009 12:59:50 PM
11/25/2009 12:58:49 PM
11/25/2009 12:21:54 PM
11/25/2009 5:06:52 AM
11/24/2009 4:38:27 PM
11/24/2009 4:30:04 PM
11/20/2009 1:33:44 PM
11/20/2009 1:26:06 PM
dfsvc.exe (events: 7)
12/16/2009 2:57:18 AM
12/16/2009 1:00:12 AM
12/16/2009 1:00:07 AM
12/16/2009 1:00:00 AM
12/13/2009 8:32:08 PM
12/13/2009 8:24:23 PM
12/10/2009 3:35:43 PM
12/10/2009 3:24:22 PM
12/7/2009 5:44:25 AM
12/7/2009 5:37:45 AM
12/4/2009 5:35:58 AM
12/4/2009 5:26:53 AM
12/2/2009 2:05:43 PM
12/2/2009 2:04:12 PM
12/2/2009 2:04:06 PM
12/2/2009 2:04:03 PM

Process
Process
Process
Process

exit
start
exit
start

C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR
C:\WINDOWS\system32\LOGON.SCR

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\DEFRAG.EXE
C:\WINDOWS\system32\DEFRAG.EXE
C:\WINDOWS\system32\DEFRAG.EXE
C:\WINDOWS\system32\DEFRAG.EXE
C:\WINDOWS\system32\DEFRAG.EXE
C:\WINDOWS\system32\DEFRAG.EXE
C:\WINDOWS\system32\DEFRAG.EXE
C:\WINDOWS\system32\DEFRAG.EXE
C:\WINDOWS\system32\DEFRAG.EXE
C:\WINDOWS\system32\DEFRAG.EXE
C:\WINDOWS\system32\DEFRAG.EXE
C:\WINDOWS\system32\DEFRAG.EXE
C:\WINDOWS\system32\DEFRAG.EXE
C:\WINDOWS\system32\DEFRAG.EXE
C:\WINDOWS\system32\DEFRAG.EXE
C:\WINDOWS\system32\DEFRAG.EXE
C:\WINDOWS\system32\DEFRAG.EXE
C:\WINDOWS\system32\DEFRAG.EXE
C:\WINDOWS\system32\DEFRAG.EXE
C:\WINDOWS\system32\DEFRAG.EXE
C:\WINDOWS\system32\DEFRAG.EXE
C:\WINDOWS\system32\DEFRAG.EXE
C:\WINDOWS\system32\DEFRAG.EXE
C:\WINDOWS\system32\DEFRAG.EXE
C:\WINDOWS\system32\DEFRAG.EXE
C:\WINDOWS\system32\DEFRAG.EXE
C:\WINDOWS\system32\DEFRAG.EXE
C:\WINDOWS\system32\DEFRAG.EXE
C:\WINDOWS\system32\DEFRAG.EXE
C:\WINDOWS\system32\DEFRAG.EXE
C:\WINDOWS\system32\DEFRAG.EXE
C:\WINDOWS\system32\DEFRAG.EXE
C:\WINDOWS\system32\DEFRAG.EXE
C:\WINDOWS\system32\DEFRAG.EXE
C:\WINDOWS\system32\DEFRAG.EXE
C:\WINDOWS\system32\DEFRAG.EXE
C:\WINDOWS\system32\DEFRAG.EXE
C:\WINDOWS\system32\DEFRAG.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE

12/2/2009 12:59:15 PM Process


12/2/2009 12:58:01 PM Process
12/2/2009 12:57:56 PM Process
12/2/2009 12:57:53 PM Process
12/2/2009 12:37:42 PM Process
12/2/2009 12:36:09 PM Process
12/2/2009 12:36:04 PM Process
12/2/2009 12:36:01 PM Process
12/2/2009 12:05:05 PM Process
12/2/2009 12:00:58 PM Process
12/2/2009 12:00:53 PM Process
12/2/2009 12:00:50 PM Process
12/2/2009 7:46:16 AM
Process
12/2/2009 7:46:13 AM
Process
12/2/2009 7:46:08 AM
Process
12/2/2009 7:06:59 AM
Process
12/2/2009 6:32:12 AM
Process
12/2/2009 6:25:32 AM
Process
12/2/2009 5:52:01 AM
Process
12/2/2009 4:11:50 AM
Process
12/2/2009 4:11:46 AM
Process
12/2/2009 4:11:11 AM
Process
12/1/2009 5:07:40 AM
Process
12/1/2009 5:00:18 AM
Process
11/28/2009 3:24:39 AM Process
11/28/2009 3:15:04 AM Process
11/25/2009 9:59:30 PM Process
11/25/2009 9:59:27 PM Process
11/25/2009 9:59:22 PM Process
11/25/2009 9:41:38 PM Process
11/25/2009 12:59:53 PM Process
11/25/2009 12:58:49 PM Process
11/25/2009 12:21:58 PM Process
11/25/2009 5:07:05 AM Process
11/25/2009 5:07:00 AM Process
11/25/2009 5:06:52 AM Process
11/24/2009 4:38:22 PM Process
11/24/2009 4:30:04 PM Process
11/20/2009 1:33:40 PM Process
11/20/2009 1:26:06 PM Process
dfsvc.exe (events: 7)
12/16/2009 7:00:12 AM Process
E\UPDATER6\ADOBE_UPDATER.EXE
12/15/2009 9:58:13 PM Process
E\UPDATER6\ADOBE_UPDATER.EXE
12/15/2009 9:58:13 PM Process
E\UPDATER6\ADOBE_UPDATER.EXE
12/15/2009 9:58:13 PM Process
E\UPDATER6\ADOBE_UPDATER.EXE
11/21/2009 1:12:26 PM Process
E\UPDATER6\ADOBE_UPDATER.EXE
11/21/2009 1:12:23 PM Process
E\UPDATER6\ADOBE_UPDATER.EXE
11/21/2009 1:12:23 PM Process
E\UPDATER6\ADOBE_UPDATER.EXE
11/21/2009 1:12:23 PM Process
E\UPDATER6\ADOBE_UPDATER.EXE
11/21/2009 1:12:23 PM Process
E\UPDATER6\ADOBE_UPDATER.EXE
11/21/2009 1:12:15 PM Process

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE
C:\WINDOWS\system32\DFRGNTFS.EXE

exit

C:\Program Files (x86)\COMMON FILES\ADOB

start

C:\Program Files (x86)\COMMON FILES\ADOB

exit

C:\Program Files (x86)\COMMON FILES\ADOB

start

C:\Program Files (x86)\COMMON FILES\ADOB

exit

C:\Program Files (x86)\COMMON FILES\ADOB

exit

C:\Program Files (x86)\COMMON FILES\ADOB

exit

C:\Program Files (x86)\COMMON FILES\ADOB

start

C:\Program Files (x86)\COMMON FILES\ADOB

start

C:\Program Files (x86)\COMMON FILES\ADOB

exit

C:\Program Files (x86)\COMMON FILES\ADOB

E\UPDATER6\ADOBE_UPDATER.EXE
11/21/2009 1:12:13 PM Process
E\UPDATER6\ADOBE_UPDATER.EXE
11/21/2009 1:12:13 PM Process
E\UPDATER6\ADOBE_UPDATER.EXE
11/21/2009 1:12:13 PM Process
E\UPDATER6\ADOBE_UPDATER.EXE
11/21/2009 1:06:02 PM Process
E\UPDATER6\ADOBE_UPDATER.EXE
11/21/2009 1:06:00 PM Process
E\UPDATER6\ADOBE_UPDATER.EXE
11/21/2009 1:06:00 PM Process
E\UPDATER6\ADOBE_UPDATER.EXE
11/21/2009 1:06:00 PM Process
E\UPDATER6\ADOBE_UPDATER.EXE
11/21/2009 1:03:07 PM Process
E\UPDATER6\ADOBE_UPDATER.EXE
11/21/2009 1:03:07 PM Process
E\UPDATER6\ADOBE_UPDATER.EXE
11/21/2009 1:03:07 PM Process
E\UPDATER6\ADOBE_UPDATER.EXE
11/21/2009 1:03:02 PM Process
E\UPDATER6\ADOBE_UPDATER.EXE
11/21/2009 1:02:59 PM Process
E\UPDATER6\ADOBE_UPDATER.EXE
11/21/2009 1:02:59 PM Process
E\UPDATER6\ADOBE_UPDATER.EXE
11/21/2009 1:02:59 PM Process
E\UPDATER6\ADOBE_UPDATER.EXE
11/21/2009 1:01:48 PM Process
E\UPDATER6\ADOBE_UPDATER.EXE
11/21/2009 1:01:46 PM Process
E\UPDATER6\ADOBE_UPDATER.EXE
11/21/2009 1:01:46 PM Process
E\UPDATER6\ADOBE_UPDATER.EXE
11/21/2009 1:01:46 PM Process
E\UPDATER6\ADOBE_UPDATER.EXE
dfsvc.exe (events: 7)
12/16/2009 4:46:40 AM Process
READER\ACROBROKER.EXE
12/16/2009 4:39:28 AM Process
READER\ACROBROKER.EXE
12/15/2009 9:58:51 PM Process
READER\ACROBROKER.EXE
12/15/2009 9:58:00 PM Process
READER\ACROBROKER.EXE
12/15/2009 9:57:58 PM Process
READER\ACROBROKER.EXE
12/15/2009 9:57:41 PM Process
READER\ACROBROKER.EXE
12/13/2009 2:14:48 PM Process
READER\ACROBROKER.EXE
12/13/2009 2:07:02 PM Process
READER\ACROBROKER.EXE
12/13/2009 5:18:37 AM Process
READER\ACROBROKER.EXE
12/13/2009 5:11:14 AM Process
READER\ACROBROKER.EXE
12/8/2009 4:49:18 AM
Process
READER\ACROBROKER.EXE

exit

C:\Program Files (x86)\COMMON FILES\ADOB

start

C:\Program Files (x86)\COMMON FILES\ADOB

start

C:\Program Files (x86)\COMMON FILES\ADOB

exit

C:\Program Files (x86)\COMMON FILES\ADOB

exit

C:\Program Files (x86)\COMMON FILES\ADOB

start

C:\Program Files (x86)\COMMON FILES\ADOB

start

C:\Program Files (x86)\COMMON FILES\ADOB

exit

C:\Program Files (x86)\COMMON FILES\ADOB

start

C:\Program Files (x86)\COMMON FILES\ADOB

start

C:\Program Files (x86)\COMMON FILES\ADOB

exit

C:\Program Files (x86)\COMMON FILES\ADOB

exit

C:\Program Files (x86)\COMMON FILES\ADOB

start

C:\Program Files (x86)\COMMON FILES\ADOB

start

C:\Program Files (x86)\COMMON FILES\ADOB

exit

C:\Program Files (x86)\COMMON FILES\ADOB

start

C:\Program Files (x86)\COMMON FILES\ADOB

exit

C:\Program Files (x86)\COMMON FILES\ADOB

start

C:\Program Files (x86)\COMMON FILES\ADOB

exit

C:\Program Files (x86)\ADOBE\READER 9.0\

start

C:\Program Files (x86)\ADOBE\READER 9.0\

exit

C:\Program Files (x86)\ADOBE\READER 9.0\

start

C:\Program Files (x86)\ADOBE\READER 9.0\

exit

C:\Program Files (x86)\ADOBE\READER 9.0\

start

C:\Program Files (x86)\ADOBE\READER 9.0\

exit

C:\Program Files (x86)\ADOBE\READER 9.0\

start

C:\Program Files (x86)\ADOBE\READER 9.0\

exit

C:\Program Files (x86)\ADOBE\READER 9.0\

start

C:\Program Files (x86)\ADOBE\READER 9.0\

exit

C:\Program Files (x86)\ADOBE\READER 9.0\

12/8/2009 4:40:57 AM
Process start C:\Program Files
READER\ACROBROKER.EXE
12/7/2009 3:30:11 PM
Process exit
C:\Program Files
READER\ACROBROKER.EXE
12/7/2009 3:21:22 PM
Process start C:\Program Files
READER\ACROBROKER.EXE
11/26/2009 5:50:53 PM Process exit
C:\Program Files
READER\ACROBROKER.EXE
11/26/2009 5:41:59 PM Process start C:\Program Files
READER\ACROBROKER.EXE
11/21/2009 2:04:06 PM Process exit
C:\Program Files
READER\ACROBROKER.EXE
11/21/2009 1:55:44 PM Process start C:\Program Files
READER\ACROBROKER.EXE
11/21/2009 1:12:44 PM Process exit
C:\Program Files
READER\ACROBROKER.EXE
11/21/2009 1:12:00 PM Process start C:\Program Files
READER\ACROBROKER.EXE
11/21/2009 1:06:08 PM Process exit
C:\Program Files
READER\ACROBROKER.EXE
11/21/2009 1:05:47 PM Process start C:\Program Files
READER\ACROBROKER.EXE
11/21/2009 1:03:16 PM Process exit
C:\Program Files
READER\ACROBROKER.EXE
11/21/2009 1:02:41 PM Process start C:\Program Files
READER\ACROBROKER.EXE
11/21/2009 1:01:55 PM Process exit
C:\Program Files
READER\ACROBROKER.EXE
11/21/2009 1:01:23 PM Process start C:\Program Files
READER\ACROBROKER.EXE
11/19/2009 11:40:45 AM Process exit
C:\Program Files
READER\ACROBROKER.EXE
11/19/2009 11:32:02 AM Process start C:\Program Files
READER\ACROBROKER.EXE
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM Process start C:\Program Files
E\MOBILE DEVICE SUPPORT\BIN\APPLEMOBILEDEVICESERVICE.EXE
12/14/2009 4:09:33 PM Process start C:\Program Files
E\MOBILE DEVICE SUPPORT\BIN\APPLEMOBILEDEVICESERVICE.EXE
12/10/2009 2:42:15 PM Process start C:\Program Files
E\MOBILE DEVICE SUPPORT\BIN\APPLEMOBILEDEVICESERVICE.EXE
12/10/2009 4:49:12 AM Process start C:\Program Files
E\MOBILE DEVICE SUPPORT\BIN\APPLEMOBILEDEVICESERVICE.EXE
12/10/2009 4:08:57 AM Process start C:\Program Files
E\MOBILE DEVICE SUPPORT\BIN\APPLEMOBILEDEVICESERVICE.EXE
12/9/2009 3:23:35 AM
Process start C:\Program Files
E\MOBILE DEVICE SUPPORT\BIN\APPLEMOBILEDEVICESERVICE.EXE
12/8/2009 1:20:42 PM
Process start C:\Program Files
E\MOBILE DEVICE SUPPORT\BIN\APPLEMOBILEDEVICESERVICE.EXE
12/6/2009 12:47:12 AM Process start C:\Program Files
E\MOBILE DEVICE SUPPORT\BIN\APPLEMOBILEDEVICESERVICE.EXE
12/5/2009 2:24:47 AM
Process start C:\Program Files
E\MOBILE DEVICE SUPPORT\BIN\APPLEMOBILEDEVICESERVICE.EXE
12/4/2009 6:51:08 PM
Process start C:\Program Files
E\MOBILE DEVICE SUPPORT\BIN\APPLEMOBILEDEVICESERVICE.EXE
12/3/2009 4:07:07 AM
Process start C:\Program Files
E\MOBILE DEVICE SUPPORT\BIN\APPLEMOBILEDEVICESERVICE.EXE
12/2/2009 7:36:39 PM
Process start C:\Program Files
E\MOBILE DEVICE SUPPORT\BIN\APPLEMOBILEDEVICESERVICE.EXE
12/1/2009 3:13:44 AM
Process start C:\Program Files

(x86)\ADOBE\READER 9.0\
(x86)\ADOBE\READER 9.0\
(x86)\ADOBE\READER 9.0\
(x86)\ADOBE\READER 9.0\
(x86)\ADOBE\READER 9.0\
(x86)\ADOBE\READER 9.0\
(x86)\ADOBE\READER 9.0\
(x86)\ADOBE\READER 9.0\
(x86)\ADOBE\READER 9.0\
(x86)\ADOBE\READER 9.0\
(x86)\ADOBE\READER 9.0\
(x86)\ADOBE\READER 9.0\
(x86)\ADOBE\READER 9.0\
(x86)\ADOBE\READER 9.0\
(x86)\ADOBE\READER 9.0\
(x86)\ADOBE\READER 9.0\
(x86)\ADOBE\READER 9.0\
(x86)\COMMON FILES\APPL
(x86)\COMMON FILES\APPL
(x86)\COMMON FILES\APPL
(x86)\COMMON FILES\APPL
(x86)\COMMON FILES\APPL
(x86)\COMMON FILES\APPL
(x86)\COMMON FILES\APPL
(x86)\COMMON FILES\APPL
(x86)\COMMON FILES\APPL
(x86)\COMMON FILES\APPL
(x86)\COMMON FILES\APPL
(x86)\COMMON FILES\APPL
(x86)\COMMON FILES\APPL

E\MOBILE DEVICE SUPPORT\BIN\APPLEMOBILEDEVICESERVICE.EXE


11/30/2009 7:34:03 PM Process start C:\Program Files
E\MOBILE DEVICE SUPPORT\BIN\APPLEMOBILEDEVICESERVICE.EXE
11/30/2009 5:55:17 PM Process start C:\Program Files
E\MOBILE DEVICE SUPPORT\BIN\APPLEMOBILEDEVICESERVICE.EXE
11/30/2009 3:32:36 PM Process start C:\Program Files
E\MOBILE DEVICE SUPPORT\BIN\APPLEMOBILEDEVICESERVICE.EXE
11/26/2009 3:19:48 AM Process start C:\Program Files
E\MOBILE DEVICE SUPPORT\BIN\APPLEMOBILEDEVICESERVICE.EXE
11/24/2009 2:45:18 PM Process start C:\Program Files
E\MOBILE DEVICE SUPPORT\BIN\APPLEMOBILEDEVICESERVICE.EXE
11/21/2009 7:25:24 PM Process start C:\Program Files
E\MOBILE DEVICE SUPPORT\BIN\APPLEMOBILEDEVICESERVICE.EXE
11/21/2009 12:32:51 PM Process start C:\Program Files
E\MOBILE DEVICE SUPPORT\BIN\APPLEMOBILEDEVICESERVICE.EXE
11/20/2009 11:59:18 AM Process start C:\Program Files
E\MOBILE DEVICE SUPPORT\BIN\APPLEMOBILEDEVICESERVICE.EXE
11/19/2009 4:27:58 AM Process start C:\Program Files
E\MOBILE DEVICE SUPPORT\BIN\APPLEMOBILEDEVICESERVICE.EXE
11/18/2009 7:16:14 PM Process start C:\Program Files
E\MOBILE DEVICE SUPPORT\BIN\APPLEMOBILEDEVICESERVICE.EXE
11/18/2009 12:50:54 PM Process start C:\Program Files
E\MOBILE DEVICE SUPPORT\BIN\APPLEMOBILEDEVICESERVICE.EXE
11/18/2009 11:18:18 AM Process start C:\Program Files
E\MOBILE DEVICE SUPPORT\BIN\APPLEMOBILEDEVICESERVICE.EXE
11/17/2009 10:33:09 PM Process start C:\Program Files
E\MOBILE DEVICE SUPPORT\BIN\APPLEMOBILEDEVICESERVICE.EXE
11/17/2009 2:48:52 PM Process start C:\Program Files
E\MOBILE DEVICE SUPPORT\BIN\APPLEMOBILEDEVICESERVICE.EXE
dfsvc.exe (events: 7)
12/13/2009 2:26:16 PM Process exit
C:\Program Files
DATE\SOFTWAREUPDATE.EXE
12/13/2009 2:26:15 PM Process start C:\Program Files
DATE\SOFTWAREUPDATE.EXE
12/11/2009 9:19:41 AM Process exit
C:\Program Files
DATE\SOFTWAREUPDATE.EXE
12/11/2009 9:19:22 AM Process exit
C:\Program Files
DATE\SOFTWAREUPDATE.EXE
12/11/2009 9:19:21 AM Process start C:\Program Files
DATE\SOFTWAREUPDATE.EXE
12/11/2009 9:19:21 AM Process start C:\Program Files
DATE\SOFTWAREUPDATE.EXE
12/6/2009 2:32:22 AM
Process exit
C:\Program Files
DATE\SOFTWAREUPDATE.EXE
12/6/2009 2:32:21 AM
Process start C:\Program Files
DATE\SOFTWAREUPDATE.EXE
12/4/2009 12:09:34 PM Process exit
C:\Program Files
DATE\SOFTWAREUPDATE.EXE
12/4/2009 12:09:25 PM Process exit
C:\Program Files
DATE\SOFTWAREUPDATE.EXE
12/4/2009 12:09:25 PM Process start C:\Program Files
DATE\SOFTWAREUPDATE.EXE
12/4/2009 12:09:24 PM Process start C:\Program Files
DATE\SOFTWAREUPDATE.EXE
11/29/2009 2:48:46 PM Process exit
C:\Program Files
DATE\SOFTWAREUPDATE.EXE
11/29/2009 2:48:45 PM Process start C:\Program Files
DATE\SOFTWAREUPDATE.EXE
11/27/2009 11:37:33 AM Process exit
C:\Program Files
DATE\SOFTWAREUPDATE.EXE

(x86)\COMMON FILES\APPL
(x86)\COMMON FILES\APPL
(x86)\COMMON FILES\APPL
(x86)\COMMON FILES\APPL
(x86)\COMMON FILES\APPL
(x86)\COMMON FILES\APPL
(x86)\COMMON FILES\APPL
(x86)\COMMON FILES\APPL
(x86)\COMMON FILES\APPL
(x86)\COMMON FILES\APPL
(x86)\COMMON FILES\APPL
(x86)\COMMON FILES\APPL
(x86)\COMMON FILES\APPL
(x86)\COMMON FILES\APPL
(x86)\APPLE SOFTWARE UP
(x86)\APPLE SOFTWARE UP
(x86)\APPLE SOFTWARE UP
(x86)\APPLE SOFTWARE UP
(x86)\APPLE SOFTWARE UP
(x86)\APPLE SOFTWARE UP
(x86)\APPLE SOFTWARE UP
(x86)\APPLE SOFTWARE UP
(x86)\APPLE SOFTWARE UP
(x86)\APPLE SOFTWARE UP
(x86)\APPLE SOFTWARE UP
(x86)\APPLE SOFTWARE UP
(x86)\APPLE SOFTWARE UP
(x86)\APPLE SOFTWARE UP
(x86)\APPLE SOFTWARE UP

11/27/2009 11:37:21 AM
DATE\SOFTWAREUPDATE.EXE
11/27/2009 11:37:21 AM
DATE\SOFTWAREUPDATE.EXE
11/27/2009 11:37:20 AM
DATE\SOFTWAREUPDATE.EXE
11/22/2009 2:07:08 AM
DATE\SOFTWAREUPDATE.EXE
11/22/2009 2:07:07 AM
DATE\SOFTWAREUPDATE.EXE
11/20/2009 12:09:10 PM
DATE\SOFTWAREUPDATE.EXE
11/20/2009 12:09:03 PM
DATE\SOFTWAREUPDATE.EXE
11/20/2009 12:09:03 PM
DATE\SOFTWAREUPDATE.EXE
11/20/2009 12:09:02 PM
DATE\SOFTWAREUPDATE.EXE
dfsvc.exe (events: 7)
12/10/2009 4:49:36 AM
EXE
12/10/2009 4:49:36 AM
EXE
12/3/2009 4:07:21 AM
EXE
12/3/2009 4:07:20 AM
EXE
11/26/2009 3:20:11 AM
EXE
11/26/2009 3:20:11 AM
EXE
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM
NDER.EXE
12/14/2009 4:09:33 PM
NDER.EXE
12/10/2009 2:42:15 PM
NDER.EXE
12/10/2009 4:49:12 AM
NDER.EXE
12/10/2009 4:08:57 AM
NDER.EXE
12/9/2009 3:23:35 AM
NDER.EXE
12/8/2009 1:20:42 PM
NDER.EXE
12/6/2009 12:47:12 AM
NDER.EXE
12/5/2009 2:24:47 AM
NDER.EXE
12/4/2009 6:51:08 PM
NDER.EXE
12/3/2009 4:07:07 AM
NDER.EXE
12/2/2009 7:36:39 PM
NDER.EXE
12/1/2009 3:13:45 AM
NDER.EXE
11/30/2009 7:34:03 PM
NDER.EXE

Process exit

C:\Program Files (x86)\APPLE SOFTWARE UP

Process start

C:\Program Files (x86)\APPLE SOFTWARE UP

Process start

C:\Program Files (x86)\APPLE SOFTWARE UP

Process exit

C:\Program Files (x86)\APPLE SOFTWARE UP

Process start

C:\Program Files (x86)\APPLE SOFTWARE UP

Process exit

C:\Program Files (x86)\APPLE SOFTWARE UP

Process exit

C:\Program Files (x86)\APPLE SOFTWARE UP

Process start

C:\Program Files (x86)\APPLE SOFTWARE UP

Process start

C:\Program Files (x86)\APPLE SOFTWARE UP

Process exit

C:\Program Files (x86)\QUICKTIME\QTTASK.

Process start

C:\Program Files (x86)\QUICKTIME\QTTASK.

Process exit

C:\Program Files (x86)\QUICKTIME\QTTASK.

Process start

C:\Program Files (x86)\QUICKTIME\QTTASK.

Process exit

C:\Program Files (x86)\QUICKTIME\QTTASK.

Process start

C:\Program Files (x86)\QUICKTIME\QTTASK.

Process start

C:\Program Files (x86)\BONJOUR\MDNSRESPO

Process start

C:\Program Files (x86)\BONJOUR\MDNSRESPO

Process start

C:\Program Files (x86)\BONJOUR\MDNSRESPO

Process start

C:\Program Files (x86)\BONJOUR\MDNSRESPO

Process start

C:\Program Files (x86)\BONJOUR\MDNSRESPO

Process start

C:\Program Files (x86)\BONJOUR\MDNSRESPO

Process start

C:\Program Files (x86)\BONJOUR\MDNSRESPO

Process start

C:\Program Files (x86)\BONJOUR\MDNSRESPO

Process start

C:\Program Files (x86)\BONJOUR\MDNSRESPO

Process start

C:\Program Files (x86)\BONJOUR\MDNSRESPO

Process start

C:\Program Files (x86)\BONJOUR\MDNSRESPO

Process start

C:\Program Files (x86)\BONJOUR\MDNSRESPO

Process start

C:\Program Files (x86)\BONJOUR\MDNSRESPO

Process start

C:\Program Files (x86)\BONJOUR\MDNSRESPO

11/30/2009 5:55:17 PM
NDER.EXE
11/30/2009 3:32:36 PM
NDER.EXE
11/26/2009 3:19:48 AM
NDER.EXE
11/24/2009 2:45:18 PM
NDER.EXE
11/21/2009 7:25:24 PM
NDER.EXE
11/21/2009 12:32:51 PM
NDER.EXE
11/20/2009 11:59:18 AM
NDER.EXE
11/19/2009 4:27:58 AM
NDER.EXE
11/18/2009 7:16:14 PM
NDER.EXE
11/18/2009 12:50:54 PM
NDER.EXE
11/18/2009 11:18:18 AM
NDER.EXE
11/17/2009 10:33:09 PM
NDER.EXE
11/17/2009 2:48:52 PM
NDER.EXE
dfsvc.exe (events: 7)
12/16/2009 3:22:56 AM
12/16/2009 3:19:01 AM
12/15/2009 11:53:26 PM
12/15/2009 11:53:19 PM
12/15/2009 11:52:10 PM
12/15/2009 11:51:32 PM
12/15/2009 7:55:01 PM
12/15/2009 5:09:40 PM
12/15/2009 3:48:51 AM
12/14/2009 7:46:54 PM
12/14/2009 5:39:35 PM
12/14/2009 5:33:01 PM
12/13/2009 7:54:01 PM
12/13/2009 7:45:52 PM
12/13/2009 7:45:52 PM
12/13/2009 7:45:50 PM
12/13/2009 3:28:44 PM
12/13/2009 2:26:12 PM
12/12/2009 6:42:50 AM
12/11/2009 1:35:06 PM
12/7/2009 3:50:43 PM
12/7/2009 3:32:29 PM
12/7/2009 5:21:39 AM
12/7/2009 5:05:33 AM
12/6/2009 3:29:18 PM
12/6/2009 2:32:17 AM
12/2/2009 8:38:21 PM
12/2/2009 7:39:31 PM
12/2/2009 3:43:08 PM
12/2/2009 3:28:04 PM
12/1/2009 2:32:05 PM
12/1/2009 2:28:10 PM
12/1/2009 2:28:04 PM

Process start

C:\Program Files (x86)\BONJOUR\MDNSRESPO

Process start

C:\Program Files (x86)\BONJOUR\MDNSRESPO

Process start

C:\Program Files (x86)\BONJOUR\MDNSRESPO

Process start

C:\Program Files (x86)\BONJOUR\MDNSRESPO

Process start

C:\Program Files (x86)\BONJOUR\MDNSRESPO

Process start

C:\Program Files (x86)\BONJOUR\MDNSRESPO

Process start

C:\Program Files (x86)\BONJOUR\MDNSRESPO

Process start

C:\Program Files (x86)\BONJOUR\MDNSRESPO

Process start

C:\Program Files (x86)\BONJOUR\MDNSRESPO

Process start

C:\Program Files (x86)\BONJOUR\MDNSRESPO

Process start

C:\Program Files (x86)\BONJOUR\MDNSRESPO

Process start

C:\Program Files (x86)\BONJOUR\MDNSRESPO

Process start

C:\Program Files (x86)\BONJOUR\MDNSRESPO

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files

(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE

12/1/2009 1:58:16 PM
11/30/2009 6:55:13 PM
11/30/2009 5:57:35 PM
11/30/2009 5:53:06 PM
11/30/2009 4:11:53 PM
11/30/2009 10:18:09 AM
11/29/2009 2:48:42 PM
11/28/2009 11:20:31 AM
11/27/2009 11:51:14 PM
11/27/2009 11:33:08 PM
11/27/2009 11:08:24 PM
11/27/2009 12:38:20 PM
11/27/2009 12:15:07 PM
11/27/2009 11:57:48 AM
11/27/2009 11:32:28 AM
11/27/2009 2:14:43 AM
11/27/2009 2:10:45 AM
11/26/2009 6:58:12 PM
11/26/2009 6:40:08 PM
11/26/2009 5:47:30 PM
11/26/2009 4:50:24 PM
11/26/2009 7:14:28 AM
11/26/2009 7:10:30 AM
11/25/2009 12:40:14 PM
11/24/2009 2:59:39 PM
11/24/2009 2:41:16 PM
11/24/2009 1:44:35 PM
11/24/2009 4:22:55 AM
11/24/2009 3:55:51 AM
11/22/2009 5:15:25 PM
11/22/2009 2:29:42 PM
11/22/2009 2:46:53 AM
11/22/2009 2:07:03 AM
11/20/2009 9:51:08 AM
11/19/2009 7:53:00 PM
11/18/2009 7:43:43 PM
11/18/2009 7:24:19 PM
11/18/2009 5:29:57 PM
11/18/2009 12:54:40 PM
11/17/2009 6:17:47 PM
11/17/2009 5:52:21 PM
11/17/2009 2:25:16 AM
dfsvc.exe (events: 7)
12/16/2009 7:02:16 AM
ICE.EXE
12/14/2009 4:09:39 PM
ICE.EXE
12/10/2009 2:42:17 PM
ICE.EXE
12/10/2009 4:49:38 AM
ICE.EXE
12/10/2009 4:08:57 AM
ICE.EXE
12/9/2009 3:24:07 AM
ICE.EXE
12/8/2009 1:20:42 PM
ICE.EXE
12/6/2009 12:47:44 AM
ICE.EXE
12/5/2009 2:24:49 AM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
start

C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program

Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files

(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE
(x86)\ITUNES\ITUNES.EXE

Process start

C:\Program Files (x86)\IPOD\BIN\IPODSERV

Process start

C:\Program Files (x86)\IPOD\BIN\IPODSERV

Process start

C:\Program Files (x86)\IPOD\BIN\IPODSERV

Process start

C:\Program Files (x86)\IPOD\BIN\IPODSERV

Process start

C:\Program Files (x86)\IPOD\BIN\IPODSERV

Process start

C:\Program Files (x86)\IPOD\BIN\IPODSERV

Process start

C:\Program Files (x86)\IPOD\BIN\IPODSERV

Process start

C:\Program Files (x86)\IPOD\BIN\IPODSERV

Process start

C:\Program Files (x86)\IPOD\BIN\IPODSERV

ICE.EXE
12/4/2009 6:51:10 PM
ICE.EXE
12/3/2009 4:07:26 AM
ICE.EXE
12/2/2009 7:36:42 PM
ICE.EXE
12/1/2009 3:14:19 AM
ICE.EXE
11/30/2009 7:34:37 PM
ICE.EXE
11/30/2009 5:55:18 PM
ICE.EXE
11/30/2009 3:32:35 PM
ICE.EXE
11/26/2009 3:20:14 AM
ICE.EXE
11/24/2009 2:45:19 PM
ICE.EXE
11/21/2009 7:25:24 PM
ICE.EXE
11/21/2009 12:32:51 PM
ICE.EXE
11/20/2009 11:59:53 AM
ICE.EXE
11/19/2009 4:27:59 AM
ICE.EXE
11/18/2009 7:16:14 PM
ICE.EXE
11/18/2009 12:50:55 PM
ICE.EXE
11/18/2009 11:18:25 AM
ICE.EXE
11/17/2009 10:33:15 PM
ICE.EXE
11/17/2009 2:49:06 PM
ICE.EXE
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM
ER.EXE
12/16/2009 7:00:12 AM
ER.EXE
12/14/2009 4:09:33 PM
ER.EXE
12/14/2009 3:47:51 PM
ER.EXE
12/10/2009 2:42:15 PM
ER.EXE
12/10/2009 2:22:48 PM
ER.EXE
12/10/2009 4:49:36 AM
ER.EXE
12/10/2009 4:46:55 AM
ER.EXE
12/10/2009 4:08:57 AM
ER.EXE
12/9/2009 3:23:35 AM
ER.EXE
12/8/2009 9:15:51 PM
ER.EXE

Process start

C:\Program Files (x86)\IPOD\BIN\IPODSERV

Process start

C:\Program Files (x86)\IPOD\BIN\IPODSERV

Process start

C:\Program Files (x86)\IPOD\BIN\IPODSERV

Process start

C:\Program Files (x86)\IPOD\BIN\IPODSERV

Process start

C:\Program Files (x86)\IPOD\BIN\IPODSERV

Process start

C:\Program Files (x86)\IPOD\BIN\IPODSERV

Process start

C:\Program Files (x86)\IPOD\BIN\IPODSERV

Process start

C:\Program Files (x86)\IPOD\BIN\IPODSERV

Process start

C:\Program Files (x86)\IPOD\BIN\IPODSERV

Process start

C:\Program Files (x86)\IPOD\BIN\IPODSERV

Process start

C:\Program Files (x86)\IPOD\BIN\IPODSERV

Process start

C:\Program Files (x86)\IPOD\BIN\IPODSERV

Process start

C:\Program Files (x86)\IPOD\BIN\IPODSERV

Process start

C:\Program Files (x86)\IPOD\BIN\IPODSERV

Process start

C:\Program Files (x86)\IPOD\BIN\IPODSERV

Process start

C:\Program Files (x86)\IPOD\BIN\IPODSERV

Process start

C:\Program Files (x86)\IPOD\BIN\IPODSERV

Process start

C:\Program Files (x86)\IPOD\BIN\IPODSERV

Process start

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process exit

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process start

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process exit

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process start

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process exit

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process start

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process exit

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process start

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process start

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process exit

C:\Program Files (x86)\ITUNES\ITUNESHELP

12/8/2009 1:20:42 PM
ER.EXE
12/8/2009 11:34:16 AM
ER.EXE
12/6/2009 12:47:12 AM
ER.EXE
12/5/2009 7:28:55 PM
ER.EXE
12/5/2009 2:24:47 AM
ER.EXE
12/4/2009 10:43:14 PM
ER.EXE
12/4/2009 6:51:08 PM
ER.EXE
12/4/2009 4:27:46 PM
ER.EXE
12/3/2009 4:07:20 AM
ER.EXE
12/2/2009 8:42:06 PM
ER.EXE
12/2/2009 7:36:39 PM
ER.EXE
12/2/2009 3:43:08 PM
ER.EXE
12/1/2009 3:13:44 AM
ER.EXE
11/30/2009 8:00:27 PM
ER.EXE
11/30/2009 7:34:03 PM
ER.EXE
11/30/2009 6:55:13 PM
ER.EXE
11/30/2009 5:55:17 PM
ER.EXE
11/30/2009 5:53:06 PM
ER.EXE
11/30/2009 3:32:36 PM
ER.EXE
11/30/2009 10:18:13 AM
ER.EXE
11/26/2009 3:20:11 AM
ER.EXE
11/26/2009 3:17:54 AM
ER.EXE
11/24/2009 2:45:18 PM
ER.EXE
11/24/2009 2:41:30 PM
ER.EXE
11/21/2009 7:25:24 PM
ER.EXE
11/21/2009 7:11:44 PM
ER.EXE
11/21/2009 12:32:51 PM
ER.EXE
11/20/2009 6:58:59 PM
ER.EXE
11/20/2009 11:59:18 AM
ER.EXE
11/20/2009 9:52:53 AM
ER.EXE

Process start

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process exit

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process start

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process exit

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process start

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process exit

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process start

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process exit

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process start

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process exit

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process start

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process exit

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process start

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process exit

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process start

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process exit

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process start

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process exit

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process start

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process exit

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process start

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process exit

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process start

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process exit

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process start

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process exit

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process start

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process exit

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process start

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process exit

C:\Program Files (x86)\ITUNES\ITUNESHELP

11/19/2009 4:27:58 AM
ER.EXE
11/18/2009 7:43:43 PM
ER.EXE
11/18/2009 7:16:14 PM
ER.EXE
11/18/2009 6:03:02 PM
ER.EXE
11/18/2009 12:50:54 PM
ER.EXE
11/18/2009 12:25:18 PM
ER.EXE
11/18/2009 11:18:18 AM
ER.EXE
11/18/2009 10:34:52 AM
ER.EXE
11/17/2009 10:33:09 PM
ER.EXE
11/17/2009 6:17:47 PM
ER.EXE
11/17/2009 2:48:52 PM
ER.EXE
dfsvc.exe (events: 7)
12/16/2009 7:03:25 AM
12/16/2009 7:02:15 AM
12/14/2009 4:11:27 PM
12/14/2009 4:09:33 PM
12/10/2009 2:43:57 PM
12/10/2009 2:42:15 PM
12/10/2009 1:58:20 PM
12/10/2009 4:49:29 AM
12/10/2009 4:10:54 AM
12/10/2009 4:08:57 AM
12/9/2009 3:28:16 AM
12/9/2009 3:23:35 AM
12/8/2009 9:15:52 PM
12/8/2009 2:24:04 PM
12/8/2009 1:22:35 PM
12/8/2009 1:20:42 PM
12/6/2009 2:26:04 AM
12/6/2009 12:47:12 AM
12/5/2009 2:56:16 AM
12/5/2009 2:24:47 AM
12/4/2009 10:42:32 PM
12/4/2009 6:51:08 PM
12/4/2009 4:27:47 PM
12/4/2009 3:14:11 PM
12/3/2009 4:08:48 AM
12/3/2009 4:07:14 AM
12/2/2009 7:38:47 PM
12/2/2009 7:36:39 PM
12/1/2009 3:15:56 AM
12/1/2009 3:13:44 AM
11/30/2009 8:00:27 PM
11/30/2009 7:34:03 PM
11/30/2009 5:57:19 PM
11/30/2009 5:55:17 PM
11/30/2009 3:53:31 PM
11/30/2009 3:32:36 PM
11/30/2009 10:18:16 AM

Process start

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process exit

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process start

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process exit

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process start

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process exit

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process start

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process exit

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process start

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process exit

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process start

C:\Program Files (x86)\ITUNES\ITUNESHELP

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit

Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files

(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE

11/27/2009 2:11:03 AM
11/26/2009 3:20:20 AM
11/26/2009 3:19:57 AM
11/24/2009 2:54:46 PM
11/24/2009 2:45:18 PM
11/21/2009 7:30:18 PM
11/21/2009 7:25:24 PM
11/21/2009 12:33:34 PM
11/21/2009 12:32:51 PM
11/20/2009 12:01:33 PM
11/20/2009 11:59:18 AM
11/19/2009 4:38:34 AM
11/19/2009 4:27:58 AM
11/18/2009 7:43:44 PM
11/18/2009 7:16:14 PM
11/18/2009 12:51:21 PM
11/18/2009 12:50:54 PM
11/18/2009 12:25:19 PM
11/18/2009 11:18:18 AM
11/17/2009 10:33:28 PM
11/17/2009 10:33:09 PM
11/17/2009 2:51:34 PM
11/17/2009 2:48:52 PM
dfsvc.exe (events: 7)
12/16/2009 7:03:25 AM
M\STEAMSERVICE.EXE
12/16/2009 7:03:13 AM
M\STEAMSERVICE.EXE
12/14/2009 4:11:27 PM
M\STEAMSERVICE.EXE
12/14/2009 4:11:06 PM
M\STEAMSERVICE.EXE
12/10/2009 2:43:57 PM
M\STEAMSERVICE.EXE
12/10/2009 2:43:32 PM
M\STEAMSERVICE.EXE
12/10/2009 1:58:20 PM
M\STEAMSERVICE.EXE
12/10/2009 4:50:17 AM
M\STEAMSERVICE.EXE
12/10/2009 4:10:54 AM
M\STEAMSERVICE.EXE
12/10/2009 4:10:11 AM
M\STEAMSERVICE.EXE
12/9/2009 3:28:16 AM
M\STEAMSERVICE.EXE
12/9/2009 3:25:05 AM
M\STEAMSERVICE.EXE
12/8/2009 9:15:52 PM
M\STEAMSERVICE.EXE
12/8/2009 2:24:06 PM
M\STEAMSERVICE.EXE
12/8/2009 1:22:35 PM
M\STEAMSERVICE.EXE
12/8/2009 1:22:26 PM
M\STEAMSERVICE.EXE
12/6/2009 2:26:04 AM
M\STEAMSERVICE.EXE
12/6/2009 12:49:11 AM
M\STEAMSERVICE.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program
C:\Program

Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files
Files

(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE
(x86)\STEAM\STEAM.EXE

Process exit

C:\Program Files (x86)\COMMON FILES\STEA

Process start

C:\Program Files (x86)\COMMON FILES\STEA

Process exit

C:\Program Files (x86)\COMMON FILES\STEA

Process start

C:\Program Files (x86)\COMMON FILES\STEA

Process exit

C:\Program Files (x86)\COMMON FILES\STEA

Process start

C:\Program Files (x86)\COMMON FILES\STEA

Process exit

C:\Program Files (x86)\COMMON FILES\STEA

Process start

C:\Program Files (x86)\COMMON FILES\STEA

Process exit

C:\Program Files (x86)\COMMON FILES\STEA

Process start

C:\Program Files (x86)\COMMON FILES\STEA

Process exit

C:\Program Files (x86)\COMMON FILES\STEA

Process start

C:\Program Files (x86)\COMMON FILES\STEA

Process exit

C:\Program Files (x86)\COMMON FILES\STEA

Process start

C:\Program Files (x86)\COMMON FILES\STEA

Process exit

C:\Program Files (x86)\COMMON FILES\STEA

Process start

C:\Program Files (x86)\COMMON FILES\STEA

Process exit

C:\Program Files (x86)\COMMON FILES\STEA

Process start

C:\Program Files (x86)\COMMON FILES\STEA

12/5/2009 2:56:16 AM
M\STEAMSERVICE.EXE
12/5/2009 2:24:49 AM
M\STEAMSERVICE.EXE
12/4/2009 10:42:32 PM
M\STEAMSERVICE.EXE
12/4/2009 6:52:58 PM
M\STEAMSERVICE.EXE
12/4/2009 4:27:47 PM
M\STEAMSERVICE.EXE
12/4/2009 3:14:15 PM
M\STEAMSERVICE.EXE
12/3/2009 4:08:48 AM
M\STEAMSERVICE.EXE
12/3/2009 4:08:28 AM
M\STEAMSERVICE.EXE
12/2/2009 7:38:47 PM
M\STEAMSERVICE.EXE
12/2/2009 7:38:25 PM
M\STEAMSERVICE.EXE
12/2/2009 7:38:21 PM
M\STEAMSERVICE.EXE
12/2/2009 7:37:50 PM
M\STEAMSERVICE.EXE
12/1/2009 3:15:56 AM
M\STEAMSERVICE.EXE
12/1/2009 3:15:49 AM
M\STEAMSERVICE.EXE
11/30/2009 8:00:28 PM
M\STEAMSERVICE.EXE
11/30/2009 7:35:55 PM
M\STEAMSERVICE.EXE
11/30/2009 5:57:19 PM
M\STEAMSERVICE.EXE
11/30/2009 5:57:02 PM
M\STEAMSERVICE.EXE
11/30/2009 3:53:31 PM
M\STEAMSERVICE.EXE
11/30/2009 3:35:04 PM
M\STEAMSERVICE.EXE
11/30/2009 3:35:03 PM
M\STEAMSERVICE.EXE
11/30/2009 3:35:02 PM
M\STEAMSERVICE.EXE
11/30/2009 10:18:16 AM
M\STEAMSERVICE.EXE
11/27/2009 2:11:08 AM
M\STEAMSERVICE.EXE
11/24/2009 2:54:46 PM
M\STEAMSERVICE.EXE
11/24/2009 2:46:19 PM
M\STEAMSERVICE.EXE
11/21/2009 7:30:18 PM
M\STEAMSERVICE.EXE
11/21/2009 7:26:46 PM
M\STEAMSERVICE.EXE
11/21/2009 12:33:34 PM
M\STEAMSERVICE.EXE
11/21/2009 12:32:51 PM
M\STEAMSERVICE.EXE

Process exit

C:\Program Files (x86)\COMMON FILES\STEA

Process start

C:\Program Files (x86)\COMMON FILES\STEA

Process exit

C:\Program Files (x86)\COMMON FILES\STEA

Process start

C:\Program Files (x86)\COMMON FILES\STEA

Process exit

C:\Program Files (x86)\COMMON FILES\STEA

Process start

C:\Program Files (x86)\COMMON FILES\STEA

Process exit

C:\Program Files (x86)\COMMON FILES\STEA

Process start

C:\Program Files (x86)\COMMON FILES\STEA

Process exit

C:\Program Files (x86)\COMMON FILES\STEA

Process start

C:\Program Files (x86)\COMMON FILES\STEA

Process exit

C:\Program Files (x86)\COMMON FILES\STEA

Process start

C:\Program Files (x86)\COMMON FILES\STEA

Process exit

C:\Program Files (x86)\COMMON FILES\STEA

Process start

C:\Program Files (x86)\COMMON FILES\STEA

Process exit

C:\Program Files (x86)\COMMON FILES\STEA

Process start

C:\Program Files (x86)\COMMON FILES\STEA

Process exit

C:\Program Files (x86)\COMMON FILES\STEA

Process start

C:\Program Files (x86)\COMMON FILES\STEA

Process exit

C:\Program Files (x86)\COMMON FILES\STEA

Process start

C:\Program Files (x86)\COMMON FILES\STEA

Process exit

C:\Program Files (x86)\COMMON FILES\STEA

Process start

C:\Program Files (x86)\COMMON FILES\STEA

Process exit

C:\Program Files (x86)\COMMON FILES\STEA

Process start

C:\Program Files (x86)\COMMON FILES\STEA

Process exit

C:\Program Files (x86)\COMMON FILES\STEA

Process start

C:\Program Files (x86)\COMMON FILES\STEA

Process exit

C:\Program Files (x86)\COMMON FILES\STEA

Process start

C:\Program Files (x86)\COMMON FILES\STEA

Process exit

C:\Program Files (x86)\COMMON FILES\STEA

Process start

C:\Program Files (x86)\COMMON FILES\STEA

11/20/2009 12:01:33 PM Process exit


M\STEAMSERVICE.EXE
11/20/2009 12:00:15 PM Process start
M\STEAMSERVICE.EXE
11/19/2009 4:38:34 AM Process exit
M\STEAMSERVICE.EXE
11/19/2009 4:31:09 AM Process start
M\STEAMSERVICE.EXE
11/19/2009 4:31:08 AM Process exit
M\STEAMSERVICE.EXE
11/19/2009 4:31:05 AM Process start
M\STEAMSERVICE.EXE
11/18/2009 7:43:44 PM Process exit
M\STEAMSERVICE.EXE
11/18/2009 7:16:14 PM Process start
M\STEAMSERVICE.EXE
11/18/2009 12:51:21 PM Process exit
M\STEAMSERVICE.EXE
11/18/2009 12:50:56 PM Process start
M\STEAMSERVICE.EXE
11/18/2009 12:25:19 PM Process exit
M\STEAMSERVICE.EXE
11/18/2009 11:18:26 AM Process start
M\STEAMSERVICE.EXE
11/17/2009 10:33:28 PM Process exit
M\STEAMSERVICE.EXE
11/17/2009 10:33:20 PM Process start
M\STEAMSERVICE.EXE
11/17/2009 2:51:34 PM Process exit
M\STEAMSERVICE.EXE
11/17/2009 2:48:52 PM Process start
M\STEAMSERVICE.EXE
dfsvc.exe (events: 7)
11/30/2009 3:35:05 PM Process exit
M\STEAMSERVICETMP.EXE
11/30/2009 3:35:03 PM Process start
M\STEAMSERVICETMP.EXE
11/19/2009 4:31:10 AM Process exit
M\STEAMSERVICETMP.EXE
11/19/2009 4:31:08 AM Process start
M\STEAMSERVICETMP.EXE
dfsvc.exe (events: 7)
12/8/2009 3:23:23 PM
Process exit
EETHBRUSHES39\COUNTER-STRIKE\HL.EXE
12/8/2009 2:28:31 PM
Process start
EETHBRUSHES39\COUNTER-STRIKE\HL.EXE
12/4/2009 3:43:17 PM
Process exit
EETHBRUSHES39\COUNTER-STRIKE\HL.EXE
12/4/2009 3:14:48 PM
Process start
EETHBRUSHES39\COUNTER-STRIKE\HL.EXE
11/27/2009 2:21:36 AM Process exit
EETHBRUSHES39\COUNTER-STRIKE\HL.EXE
11/27/2009 2:14:48 AM Process start
EETHBRUSHES39\COUNTER-STRIKE\HL.EXE
dfsvc.exe (events: 7)
12/8/2009 3:23:34 PM
Process exit
UI.EXE
12/8/2009 2:28:38 PM
Process start
UI.EXE
12/4/2009 3:43:17 PM
Process exit

C:\Program Files (x86)\COMMON FILES\STEA


C:\Program Files (x86)\COMMON FILES\STEA
C:\Program Files (x86)\COMMON FILES\STEA
C:\Program Files (x86)\COMMON FILES\STEA
C:\Program Files (x86)\COMMON FILES\STEA
C:\Program Files (x86)\COMMON FILES\STEA
C:\Program Files (x86)\COMMON FILES\STEA
C:\Program Files (x86)\COMMON FILES\STEA
C:\Program Files (x86)\COMMON FILES\STEA
C:\Program Files (x86)\COMMON FILES\STEA
C:\Program Files (x86)\COMMON FILES\STEA
C:\Program Files (x86)\COMMON FILES\STEA
C:\Program Files (x86)\COMMON FILES\STEA
C:\Program Files (x86)\COMMON FILES\STEA
C:\Program Files (x86)\COMMON FILES\STEA
C:\Program Files (x86)\COMMON FILES\STEA
C:\Program Files (x86)\COMMON FILES\STEA
C:\Program Files (x86)\COMMON FILES\STEA
C:\Program Files (x86)\COMMON FILES\STEA
C:\Program Files (x86)\COMMON FILES\STEA
C:\Program Files (x86)\STEAM\STEAMAPPS\T
C:\Program Files (x86)\STEAM\STEAMAPPS\T
C:\Program Files (x86)\STEAM\STEAMAPPS\T
C:\Program Files (x86)\STEAM\STEAMAPPS\T
C:\Program Files (x86)\STEAM\STEAMAPPS\T
C:\Program Files (x86)\STEAM\STEAMAPPS\T
C:\Program Files (x86)\STEAM\GAMEOVERLAY
C:\Program Files (x86)\STEAM\GAMEOVERLAY
C:\Program Files (x86)\STEAM\GAMEOVERLAY

UI.EXE
12/4/2009 3:14:55 PM
UI.EXE
11/27/2009 2:21:36 AM
UI.EXE
11/27/2009 2:14:55 AM
UI.EXE
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM
TDNA.EXE
12/16/2009 7:00:13 AM
TDNA.EXE
12/14/2009 4:09:33 PM
TDNA.EXE
12/14/2009 3:47:52 PM
TDNA.EXE
12/10/2009 2:42:15 PM
TDNA.EXE
12/10/2009 2:22:49 PM
TDNA.EXE
12/10/2009 4:49:29 AM
TDNA.EXE
12/10/2009 4:46:56 AM
TDNA.EXE
12/10/2009 4:08:57 AM
TDNA.EXE
12/9/2009 3:23:35 AM
TDNA.EXE
12/8/2009 9:15:51 PM
TDNA.EXE
12/8/2009 1:20:42 PM
TDNA.EXE
12/8/2009 11:34:16 AM
TDNA.EXE
12/6/2009 12:47:12 AM
TDNA.EXE
12/5/2009 7:28:55 PM
TDNA.EXE
12/5/2009 2:24:47 AM
TDNA.EXE
12/4/2009 10:43:14 PM
TDNA.EXE
12/4/2009 6:51:08 PM
TDNA.EXE
12/4/2009 4:27:46 PM
TDNA.EXE
12/3/2009 4:07:14 AM
TDNA.EXE
12/2/2009 8:42:06 PM
TDNA.EXE
12/2/2009 7:36:39 PM
TDNA.EXE
12/2/2009 3:43:08 PM
TDNA.EXE
12/1/2009 3:13:44 AM
TDNA.EXE
11/30/2009 8:00:27 PM
TDNA.EXE
11/30/2009 7:34:03 PM
TDNA.EXE

Process start

C:\Program Files (x86)\STEAM\GAMEOVERLAY

Process exit

C:\Program Files (x86)\STEAM\GAMEOVERLAY

Process start

C:\Program Files (x86)\STEAM\GAMEOVERLAY

Process start

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process exit

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process start

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process exit

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process start

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process exit

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process start

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process exit

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process start

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process start

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process exit

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process start

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process exit

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process start

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process exit

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process start

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process exit

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process start

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process exit

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process start

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process exit

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process start

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process exit

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process start

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process exit

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process start

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

11/30/2009 6:55:13 PM
TDNA.EXE
11/30/2009 5:55:17 PM
TDNA.EXE
11/30/2009 5:53:07 PM
TDNA.EXE
11/30/2009 3:32:36 PM
TDNA.EXE
11/30/2009 10:18:14 AM
TDNA.EXE
11/26/2009 3:19:57 AM
TDNA.EXE
11/26/2009 3:17:54 AM
TDNA.EXE
11/24/2009 2:45:18 PM
TDNA.EXE
11/24/2009 2:41:31 PM
TDNA.EXE
11/21/2009 7:25:24 PM
TDNA.EXE
11/21/2009 7:11:45 PM
TDNA.EXE
11/21/2009 12:32:51 PM
TDNA.EXE
11/20/2009 6:58:59 PM
TDNA.EXE
11/20/2009 11:59:18 AM
TDNA.EXE
11/20/2009 9:52:53 AM
TDNA.EXE
11/19/2009 4:27:58 AM
TDNA.EXE
11/18/2009 7:43:43 PM
TDNA.EXE
11/18/2009 7:16:14 PM
TDNA.EXE
11/18/2009 6:03:02 PM
TDNA.EXE
11/18/2009 12:50:54 PM
TDNA.EXE
11/18/2009 12:25:18 PM
TDNA.EXE
11/18/2009 11:18:18 AM
TDNA.EXE
11/18/2009 10:34:53 AM
TDNA.EXE
11/17/2009 10:33:09 PM
TDNA.EXE
11/17/2009 6:17:47 PM
TDNA.EXE
11/17/2009 2:48:52 PM
TDNA.EXE
dfsvc.exe (events: 7)
11/20/2009 12:20:48 PM
\INSTALL\MPAS-FE_BD.EXE
11/20/2009 12:20:36 PM
\INSTALL\MPAS-FE_BD.EXE
dfsvc.exe (events: 7)
11/21/2009 7:11:44 PM
11/21/2009 5:03:26 PM

Process exit

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process start

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process exit

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process start

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process exit

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process start

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process exit

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process start

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process exit

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process start

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process exit

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process start

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process exit

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process start

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process exit

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process start

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process exit

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process start

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process exit

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process start

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process exit

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process start

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process exit

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process start

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process exit

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process start

C:\USERS\OWNER\PROGRAM FILES (X86)\DNA\B

Process exit

C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD

Process start

C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD

Process exit
Process start

C:\WINDOWS\HELPPANE.EXE
C:\WINDOWS\HELPPANE.EXE

dfsvc.exe (events: 7)
12/10/2009 4:49:37 AM Process exit
C:\Program
OFT\CONNECTION SERVICE\BIN\ACSTBMHE.EXE
12/10/2009 4:49:37 AM Process start C:\Program
OFT\CONNECTION SERVICE\BIN\ACSTBMHE.EXE
12/9/2009 3:23:52 AM
Process exit
C:\Program
OFT\CONNECTION SERVICE\BIN\ACSTBMHE.EXE
12/3/2009 4:07:25 AM
Process exit
C:\Program
OFT\CONNECTION SERVICE\BIN\ACSTBMHE.EXE
12/3/2009 4:07:25 AM
Process start C:\Program
OFT\CONNECTION SERVICE\BIN\ACSTBMHE.EXE
12/1/2009 3:14:01 AM
Process exit
C:\Program
OFT\CONNECTION SERVICE\BIN\ACSTBMHE.EXE
12/1/2009 3:14:01 AM
Process start C:\Program
OFT\CONNECTION SERVICE\BIN\ACSTBMHE.EXE
11/30/2009 7:34:38 PM Process exit
C:\Program
OFT\CONNECTION SERVICE\BIN\ACSTBMHE.EXE
11/30/2009 7:34:37 PM Process start C:\Program
OFT\CONNECTION SERVICE\BIN\ACSTBMHE.EXE
11/26/2009 3:20:18 AM Process exit
C:\Program
OFT\CONNECTION SERVICE\BIN\ACSTBMHE.EXE
11/26/2009 3:20:18 AM Process start C:\Program
OFT\CONNECTION SERVICE\BIN\ACSTBMHE.EXE
dfsvc.exe (events: 7)
12/15/2009 3:34:33 PM Process exit
C:\Program
OFT\CONNECTION SERVICE\BIN\CHECKUPDATE.AC
12/15/2009 3:34:32 PM Process start C:\Program
OFT\CONNECTION SERVICE\BIN\CHECKUPDATE.AC
12/14/2009 3:33:14 PM Process exit
C:\Program
OFT\CONNECTION SERVICE\BIN\CHECKUPDATE.AC
12/14/2009 3:33:10 PM Process start C:\Program
OFT\CONNECTION SERVICE\BIN\CHECKUPDATE.AC
12/13/2009 3:32:50 PM Process exit
C:\Program
OFT\CONNECTION SERVICE\BIN\CHECKUPDATE.AC
12/13/2009 3:32:49 PM Process start C:\Program
OFT\CONNECTION SERVICE\BIN\CHECKUPDATE.AC
12/12/2009 3:32:17 PM Process exit
C:\Program
OFT\CONNECTION SERVICE\BIN\CHECKUPDATE.AC
12/12/2009 3:32:03 PM Process start C:\Program
OFT\CONNECTION SERVICE\BIN\CHECKUPDATE.AC
12/11/2009 1:59:06 PM Process exit
C:\Program
OFT\CONNECTION SERVICE\BIN\CHECKUPDATE.AC
12/11/2009 1:59:05 PM Process start C:\Program
OFT\CONNECTION SERVICE\BIN\CHECKUPDATE.AC
12/10/2009 1:58:06 PM Process exit
C:\Program
OFT\CONNECTION SERVICE\BIN\CHECKUPDATE.AC
12/10/2009 1:58:01 PM Process start C:\Program
OFT\CONNECTION SERVICE\BIN\CHECKUPDATE.AC
12/8/2009 1:20:56 PM
Process exit
C:\Program
OFT\CONNECTION SERVICE\BIN\CHECKUPDATE.AC
12/8/2009 1:20:42 PM
Process start C:\Program
OFT\CONNECTION SERVICE\BIN\CHECKUPDATE.AC
12/4/2009 4:18:19 AM
Process exit
C:\Program
OFT\CONNECTION SERVICE\BIN\CHECKUPDATE.AC
12/4/2009 4:18:04 AM
Process start C:\Program
OFT\CONNECTION SERVICE\BIN\CHECKUPDATE.AC
12/2/2009 3:39:46 PM
Process exit
C:\Program
OFT\CONNECTION SERVICE\BIN\CHECKUPDATE.AC
12/2/2009 3:39:45 PM
Process start C:\Program
OFT\CONNECTION SERVICE\BIN\CHECKUPDATE.AC

Files (x86)\COMMON FILES\ARCS


Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS
Files (x86)\COMMON FILES\ARCS

12/1/2009 3:36:19 PM
Process exit
C:\Program Files (x86)\COMMON FILES\ARCS
OFT\CONNECTION SERVICE\BIN\CHECKUPDATE.AC
12/1/2009 3:36:19 PM
Process start C:\Program Files (x86)\COMMON FILES\ARCS
OFT\CONNECTION SERVICE\BIN\CHECKUPDATE.AC
11/29/2009 3:10:50 PM Process exit
C:\Program Files (x86)\COMMON FILES\ARCS
OFT\CONNECTION SERVICE\BIN\CHECKUPDATE.AC
11/29/2009 3:10:49 PM Process start C:\Program Files (x86)\COMMON FILES\ARCS
OFT\CONNECTION SERVICE\BIN\CHECKUPDATE.AC
11/28/2009 3:09:52 PM Process exit
C:\Program Files (x86)\COMMON FILES\ARCS
OFT\CONNECTION SERVICE\BIN\CHECKUPDATE.AC
11/28/2009 3:09:51 PM Process start C:\Program Files (x86)\COMMON FILES\ARCS
OFT\CONNECTION SERVICE\BIN\CHECKUPDATE.AC
11/27/2009 3:07:48 PM Process exit
C:\Program Files (x86)\COMMON FILES\ARCS
OFT\CONNECTION SERVICE\BIN\CHECKUPDATE.AC
11/27/2009 3:07:32 PM Process start C:\Program Files (x86)\COMMON FILES\ARCS
OFT\CONNECTION SERVICE\BIN\CHECKUPDATE.AC
11/26/2009 2:48:26 PM Process exit
C:\Program Files (x86)\COMMON FILES\ARCS
OFT\CONNECTION SERVICE\BIN\CHECKUPDATE.AC
11/26/2009 2:48:25 PM Process start C:\Program Files (x86)\COMMON FILES\ARCS
OFT\CONNECTION SERVICE\BIN\CHECKUPDATE.AC
11/25/2009 2:46:41 PM Process exit
C:\Program Files (x86)\COMMON FILES\ARCS
OFT\CONNECTION SERVICE\BIN\CHECKUPDATE.AC
11/25/2009 2:46:41 PM Process start C:\Program Files (x86)\COMMON FILES\ARCS
OFT\CONNECTION SERVICE\BIN\CHECKUPDATE.AC
11/24/2009 2:45:53 PM Process exit
C:\Program Files (x86)\COMMON FILES\ARCS
OFT\CONNECTION SERVICE\BIN\CHECKUPDATE.AC
11/24/2009 2:45:18 PM Process start C:\Program Files (x86)\COMMON FILES\ARCS
OFT\CONNECTION SERVICE\BIN\CHECKUPDATE.AC
dfsvc.exe (events: 7)
12/6/2009 4:22:39 AM
Process exit
C:\Program Files (x86)\JAVA\JRE1.6.0_07\
BIN\JUCHECK.EXE
12/6/2009 4:22:39 AM
Process start C:\Program Files (x86)\JAVA\JRE1.6.0_07\
BIN\JUCHECK.EXE
11/25/2009 4:34:29 AM Process exit
C:\Program Files (x86)\JAVA\JRE1.6.0_07\
BIN\JUCHECK.EXE
11/25/2009 4:34:29 AM Process start C:\Program Files (x86)\JAVA\JRE1.6.0_07\
BIN\JUCHECK.EXE
dfsvc.exe (events: 7)
12/4/2009 3:56:05 PM
Process exit
C:\WINDOWS\SYSWOW64\EXPLORER.EXE
12/4/2009 3:55:49 PM
Process start C:\WINDOWS\SYSWOW64\EXPLORER.EXE
dfsvc.exe (events: 7)
12/10/2009 4:49:26 AM Process exit
C:\WINDOWS\system32\ATBROKER.EXE
12/10/2009 4:49:25 AM Process start C:\WINDOWS\system32\ATBROKER.EXE
11/27/2009 12:34:01 AM Process exit
C:\WINDOWS\system32\ATBROKER.EXE
11/27/2009 12:34:01 AM Process start C:\WINDOWS\system32\ATBROKER.EXE
11/26/2009 3:19:54 AM Process exit
C:\WINDOWS\system32\ATBROKER.EXE
11/26/2009 3:19:54 AM Process start C:\WINDOWS\system32\ATBROKER.EXE
dfsvc.exe (events: 7)
12/2/2009 8:41:27 PM
Process exit
C:\Program Files (x86)\PHOTOSCAPE\PHOTOS
CAPE.EXE
12/2/2009 8:41:03 PM
Process start C:\Program Files (x86)\PHOTOSCAPE\PHOTOS
CAPE.EXE
dfsvc.exe (events: 7)
12/15/2009 10:03:48 PM Process exit
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
12/15/2009 10:03:48 PM Process start C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
12/15/2009 6:00:00 PM Process exit
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
12/15/2009 6:00:00 PM Process start C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
12/15/2009 7:30:04 AM Process exit
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
12/15/2009 7:30:04 AM Process start C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
12/15/2009 7:01:07 AM Process exit
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE

12/15/2009 7:01:05 AM
12/15/2009 7:01:05 AM
12/15/2009 7:01:04 AM
12/15/2009 7:00:59 AM
12/15/2009 7:00:59 AM
12/14/2009 6:00:00 PM
12/14/2009 6:00:00 PM
12/12/2009 6:00:00 PM
12/12/2009 6:00:00 PM
12/11/2009 6:00:00 PM
12/11/2009 5:59:59 PM
12/10/2009 6:00:00 PM
12/10/2009 6:00:00 PM
12/8/2009 2:28:32 PM
12/8/2009 2:28:32 PM
12/6/2009 3:51:58 AM
12/6/2009 3:51:58 AM
12/6/2009 3:26:09 AM
12/6/2009 3:26:09 AM
12/6/2009 3:05:48 AM
12/6/2009 3:05:48 AM
12/6/2009 3:05:46 AM
12/6/2009 3:05:46 AM
12/5/2009 6:00:00 PM
12/5/2009 6:00:00 PM
12/4/2009 3:14:48 PM
12/4/2009 3:14:48 PM
12/4/2009 12:21:53 PM
12/4/2009 12:21:51 PM
12/4/2009 12:21:45 PM
12/4/2009 12:21:45 PM
11/30/2009 6:00:00 PM
11/30/2009 6:00:00 PM
11/29/2009 6:00:00 PM
11/29/2009 6:00:00 PM
11/28/2009 6:00:00 PM
11/28/2009 6:00:00 PM
11/27/2009 2:14:48 AM
11/27/2009 2:14:48 AM
11/26/2009 6:00:00 PM
11/26/2009 6:00:00 PM
11/26/2009 2:26:44 PM
11/26/2009 2:26:41 PM
11/26/2009 2:26:37 PM
11/26/2009 2:26:37 PM
11/25/2009 6:00:00 PM
11/25/2009 6:00:00 PM
11/23/2009 6:00:00 PM
11/23/2009 6:00:00 PM
11/22/2009 6:00:00 PM
11/22/2009 6:00:00 PM
11/22/2009 5:16:25 PM
11/22/2009 5:16:22 PM
11/22/2009 5:16:18 PM
11/22/2009 5:16:18 PM
11/21/2009 6:00:00 PM
11/21/2009 6:00:00 PM
11/19/2009 6:00:00 PM
11/19/2009 6:00:00 PM
11/18/2009 6:00:00 PM

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

exit
start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
start
exit
start
exit

C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE

11/18/2009 6:00:00 PM
11/17/2009 6:00:00 PM
11/17/2009 6:00:00 PM
dfsvc.exe (events: 7)
12/16/2009 4:39:36 AM
12/16/2009 4:39:30 AM
12/13/2009 2:07:11 PM
12/13/2009 2:07:04 PM
12/13/2009 5:11:23 AM
12/13/2009 5:11:16 AM
12/8/2009 4:41:09 AM
12/8/2009 4:41:00 AM
12/7/2009 3:21:33 PM
12/7/2009 3:21:27 PM
12/6/2009 3:51:58 AM
12/6/2009 3:51:41 AM
12/3/2009 2:20:19 PM
12/3/2009 2:20:12 PM
12/1/2009 4:18:49 AM
12/1/2009 4:18:43 AM
12/1/2009 3:15:57 AM
12/1/2009 3:15:48 AM
11/30/2009 5:57:21 PM
11/30/2009 5:57:12 PM
11/26/2009 5:42:08 PM
11/26/2009 5:42:03 PM
11/26/2009 6:59:19 AM
11/26/2009 3:20:20 AM
11/26/2009 3:20:18 AM
11/26/2009 3:20:18 AM
11/21/2009 1:55:50 PM
11/21/2009 1:55:47 PM
11/21/2009 1:52:36 PM
11/21/2009 1:52:33 PM
11/20/2009 12:00:48 PM
11/20/2009 12:00:42 PM
dfsvc.exe (events: 7)
12/16/2009 2:19:26 AM
UN.EXE
12/16/2009 2:18:09 AM
UN.EXE
12/16/2009 2:18:09 AM
UN.EXE
12/16/2009 2:17:59 AM
UN.EXE
12/15/2009 2:22:37 AM
UN.EXE
12/15/2009 2:18:08 AM
UN.EXE
12/15/2009 2:18:08 AM
UN.EXE
12/15/2009 2:17:59 AM
UN.EXE
12/12/2009 7:32:02 PM
UN.EXE
12/12/2009 7:31:08 PM
UN.EXE
12/12/2009 7:31:08 PM
UN.EXE
12/12/2009 7:30:58 PM

Process start
Process exit
Process start

C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE
C:\WINDOWS\SYSWOW64\RUNDLL32.EXE

Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process
Process

C:\WINDOWS\SYSWOW64\WERFAULT.EXE
C:\WINDOWS\SYSWOW64\WERFAULT.EXE
C:\WINDOWS\SYSWOW64\WERFAULT.EXE
C:\WINDOWS\SYSWOW64\WERFAULT.EXE
C:\WINDOWS\SYSWOW64\WERFAULT.EXE
C:\WINDOWS\SYSWOW64\WERFAULT.EXE
C:\WINDOWS\SYSWOW64\WERFAULT.EXE
C:\WINDOWS\SYSWOW64\WERFAULT.EXE
C:\WINDOWS\SYSWOW64\WERFAULT.EXE
C:\WINDOWS\SYSWOW64\WERFAULT.EXE
C:\WINDOWS\SYSWOW64\WERFAULT.EXE
C:\WINDOWS\SYSWOW64\WERFAULT.EXE
C:\WINDOWS\SYSWOW64\WERFAULT.EXE
C:\WINDOWS\SYSWOW64\WERFAULT.EXE
C:\WINDOWS\SYSWOW64\WERFAULT.EXE
C:\WINDOWS\SYSWOW64\WERFAULT.EXE
C:\WINDOWS\SYSWOW64\WERFAULT.EXE
C:\WINDOWS\SYSWOW64\WERFAULT.EXE
C:\WINDOWS\SYSWOW64\WERFAULT.EXE
C:\WINDOWS\SYSWOW64\WERFAULT.EXE
C:\WINDOWS\SYSWOW64\WERFAULT.EXE
C:\WINDOWS\SYSWOW64\WERFAULT.EXE
C:\WINDOWS\SYSWOW64\WERFAULT.EXE
C:\WINDOWS\SYSWOW64\WERFAULT.EXE
C:\WINDOWS\SYSWOW64\WERFAULT.EXE
C:\WINDOWS\SYSWOW64\WERFAULT.EXE
C:\WINDOWS\SYSWOW64\WERFAULT.EXE
C:\WINDOWS\SYSWOW64\WERFAULT.EXE
C:\WINDOWS\SYSWOW64\WERFAULT.EXE
C:\WINDOWS\SYSWOW64\WERFAULT.EXE
C:\WINDOWS\SYSWOW64\WERFAULT.EXE
C:\WINDOWS\SYSWOW64\WERFAULT.EXE

exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
exit
start
start
exit
start
exit
start
exit
start

Process exit

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process exit

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process start

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process start

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process exit

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process exit

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process start

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process start

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process exit

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process exit

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process start

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process start

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

UN.EXE
12/10/2009 3:07:42 PM
UN.EXE
12/10/2009 3:03:09 PM
UN.EXE
12/10/2009 3:03:09 PM
UN.EXE
12/10/2009 3:03:00 PM
UN.EXE
12/8/2009 1:45:24 PM
UN.EXE
12/8/2009 1:40:07 PM
UN.EXE
12/8/2009 1:40:07 PM
UN.EXE
12/8/2009 1:39:57 PM
UN.EXE
12/6/2009 1:50:44 AM
UN.EXE
12/6/2009 1:46:08 AM
UN.EXE
12/6/2009 1:46:08 AM
UN.EXE
12/6/2009 1:45:59 AM
UN.EXE
12/5/2009 2:47:45 AM
UN.EXE
12/5/2009 2:43:05 AM
UN.EXE
12/5/2009 2:43:05 AM
UN.EXE
12/5/2009 2:42:56 AM
UN.EXE
12/2/2009 8:04:08 PM
UN.EXE
12/2/2009 7:59:34 PM
UN.EXE
12/2/2009 7:59:34 PM
UN.EXE
12/2/2009 7:59:24 PM
UN.EXE
11/30/2009 4:05:48 PM
UN.EXE
11/30/2009 3:51:27 PM
UN.EXE
11/30/2009 3:51:27 PM
UN.EXE
11/30/2009 3:51:22 PM
UN.EXE
11/28/2009 2:03:59 AM
UN.EXE
11/28/2009 2:03:08 AM
UN.EXE
11/28/2009 2:03:08 AM
UN.EXE
11/28/2009 2:03:00 AM
UN.EXE
11/27/2009 2:07:31 AM
UN.EXE
11/27/2009 2:03:08 AM

Process exit

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process exit

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process start

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process start

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process exit

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process exit

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process start

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process start

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process exit

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process exit

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process start

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process start

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process exit

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process exit

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process start

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process start

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process exit

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process exit

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process start

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process start

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process exit

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process exit

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process start

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process start

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process exit

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process exit

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process start

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process start

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process exit

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process exit

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

UN.EXE
11/27/2009 2:03:08 AM
UN.EXE
11/27/2009 2:03:00 AM
UN.EXE
11/24/2009 3:12:51 PM
UN.EXE
11/24/2009 3:07:55 PM
UN.EXE
11/24/2009 3:07:55 PM
UN.EXE
11/24/2009 3:07:45 PM
UN.EXE
11/22/2009 2:07:15 AM
UN.EXE
11/22/2009 2:02:09 AM
UN.EXE
11/22/2009 2:02:09 AM
UN.EXE
11/22/2009 2:01:59 AM
UN.EXE
11/20/2009 12:38:03 PM
UN.EXE
11/20/2009 12:20:49 PM
UN.EXE
11/20/2009 12:20:49 PM
UN.EXE
11/20/2009 12:19:03 PM
UN.EXE
11/17/2009 3:12:36 PM
UN.EXE
11/17/2009 3:07:36 PM
UN.EXE
11/17/2009 3:07:36 PM
UN.EXE
11/17/2009 3:07:30 PM
UN.EXE
dfsvc.exe (events: 7)
11/24/2009 2:14:37 PM
E
11/24/2009 2:13:58 PM
E
11/24/2009 2:13:32 PM
E
11/24/2009 2:10:56 PM
E
11/24/2009 2:10:42 PM
E
11/24/2009 2:10:37 PM
E
11/24/2009 2:02:14 PM
E
11/24/2009 2:01:09 PM
E
dfsvc.exe (events: 7)
12/8/2009 11:25:51 AM
WORDPAD.EXE
12/8/2009 10:51:46 AM
WORDPAD.EXE
dfsvc.exe (events: 7)

Process start

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process start

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process exit

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process exit

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process start

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process start

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process exit

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process exit

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process start

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process start

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process exit

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process exit

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process start

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process start

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process exit

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process exit

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process start

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process start

C:\PROGRAM FILES\WINDOWS DEFENDER\MPCMDR

Process exit

C:\PROGRAM FILES\WINDOWS MAIL\WINMAIL.EX

Process exit

C:\PROGRAM FILES\WINDOWS MAIL\WINMAIL.EX

Process start

C:\PROGRAM FILES\WINDOWS MAIL\WINMAIL.EX

Process start

C:\PROGRAM FILES\WINDOWS MAIL\WINMAIL.EX

Process exit

C:\PROGRAM FILES\WINDOWS MAIL\WINMAIL.EX

Process start

C:\PROGRAM FILES\WINDOWS MAIL\WINMAIL.EX

Process exit

C:\PROGRAM FILES\WINDOWS MAIL\WINMAIL.EX

Process start

C:\PROGRAM FILES\WINDOWS MAIL\WINMAIL.EX

Process exit

C:\PROGRAM FILES\WINDOWS NT\ACCESSORIES\

Process start

C:\PROGRAM FILES\WINDOWS NT\ACCESSORIES\

12/1/2009 4:19:52 AM
MEPLAYER.EXE
12/1/2009 4:18:37 AM
MEPLAYER.EXE
12/1/2009 4:18:24 AM
MEPLAYER.EXE
12/1/2009 4:18:09 AM
MEPLAYER.EXE
dfsvc.exe (events: 7)
12/1/2009 4:18:45 AM
M\EXPORTCONTROLLER.EXE
12/1/2009 4:18:38 AM
M\EXPORTCONTROLLER.EXE
12/1/2009 4:18:17 AM
M\EXPORTCONTROLLER.EXE
12/1/2009 4:18:10 AM
M\EXPORTCONTROLLER.EXE
dfsvc.exe (events: 7)
12/15/2009 4:09:53 PM
.EXE
12/15/2009 4:09:52 PM
.EXE
12/14/2009 4:10:00 PM
.EXE
12/14/2009 4:09:33 PM
.EXE
12/11/2009 2:42:16 PM
.EXE
12/11/2009 2:42:14 PM
.EXE
12/10/2009 2:42:19 PM
.EXE
12/10/2009 2:42:15 PM
.EXE
12/10/2009 4:49:45 AM
.EXE
12/10/2009 4:49:41 AM
.EXE
12/9/2009 3:24:30 AM
.EXE
12/9/2009 3:23:35 AM
.EXE
12/8/2009 1:20:58 PM
.EXE
12/8/2009 1:20:42 PM
.EXE
12/6/2009 12:48:14 AM
.EXE
12/6/2009 12:47:12 AM
.EXE
12/4/2009 6:51:11 PM
.EXE
12/4/2009 6:51:08 PM
.EXE
12/2/2009 7:37:53 PM
.EXE
12/2/2009 7:36:39 PM
.EXE
12/2/2009 3:14:51 AM
.EXE

Process exit

C:\Program Files (x86)\QUICKTIME\QUICKTI

Process start

C:\Program Files (x86)\QUICKTIME\QUICKTI

Process exit

C:\Program Files (x86)\QUICKTIME\QUICKTI

Process start

C:\Program Files (x86)\QUICKTIME\QUICKTI

Process exit

C:\Program Files (x86)\QUICKTIME\QTSYSTE

Process start

C:\Program Files (x86)\QUICKTIME\QTSYSTE

Process exit

C:\Program Files (x86)\QUICKTIME\QTSYSTE

Process start

C:\Program Files (x86)\QUICKTIME\QTSYSTE

Process exit

C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL

Process start

C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL

Process exit

C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL

Process start

C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL

Process exit

C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL

Process start

C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL

Process exit

C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL

Process start

C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL

Process exit

C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL

Process start

C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL

Process exit

C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL

Process start

C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL

Process exit

C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL

Process start

C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL

Process exit

C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL

Process start

C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL

Process exit

C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL

Process start

C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL

Process exit

C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL

Process start

C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL

Process exit

C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL

12/2/2009 3:14:49 AM
Process start C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL
.EXE
12/1/2009 3:14:58 AM
Process exit
C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL
.EXE
12/1/2009 3:13:44 AM
Process start C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL
.EXE
11/30/2009 7:35:29 PM Process exit
C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL
.EXE
11/30/2009 7:34:03 PM Process start C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL
.EXE
11/30/2009 5:55:54 PM Process exit
C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL
.EXE
11/30/2009 5:55:17 PM Process start C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL
.EXE
11/28/2009 3:20:27 AM Process exit
C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL
.EXE
11/28/2009 3:20:17 AM Process start C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL
.EXE
11/27/2009 3:20:18 AM Process exit
C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL
.EXE
11/27/2009 3:20:17 AM Process start C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL
.EXE
11/26/2009 3:20:19 AM Process exit
C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL
.EXE
11/26/2009 3:20:09 AM Process start C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL
.EXE
11/25/2009 2:45:54 PM Process exit
C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL
.EXE
11/25/2009 2:45:53 PM Process start C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL
.EXE
11/24/2009 2:45:59 PM Process exit
C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL
.EXE
11/24/2009 2:45:18 PM Process start C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL
.EXE
11/21/2009 7:26:23 PM Process exit
C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL
.EXE
11/21/2009 7:25:24 PM Process start C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL
.EXE
11/20/2009 11:59:26 AM Process exit
C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL
.EXE
11/20/2009 11:59:18 AM Process start C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL
.EXE
11/20/2009 11:59:17 AM Process start C:\PROGRAM FILES\WINDOWS CALENDAR\WINCAL
.EXE
dfsvc.exe (events: 7)
12/10/2009 4:47:08 AM Process exit
C:\WINDOWS\WINSXS\AMD64_MICROSOFT-WINDOW
S-SERVICINGSTACK_31BF3856AD364E35_6.0.6002.18005_NONE_676975D87CC9B6E6\POQEXEC.E
XE
12/10/2009 4:46:58 AM Process start C:\WINDOWS\WINSXS\AMD64_MICROSOFT-WINDOW
S-SERVICINGSTACK_31BF3856AD364E35_6.0.6002.18005_NONE_676975D87CC9B6E6\POQEXEC.E
XE
11/26/2009 3:18:02 AM Process exit
C:\WINDOWS\WINSXS\AMD64_MICROSOFT-WINDOW
S-SERVICINGSTACK_31BF3856AD364E35_6.0.6002.18005_NONE_676975D87CC9B6E6\POQEXEC.E
XE
11/26/2009 3:17:58 AM Process start C:\WINDOWS\WINSXS\AMD64_MICROSOFT-WINDOW
S-SERVICINGSTACK_31BF3856AD364E35_6.0.6002.18005_NONE_676975D87CC9B6E6\POQEXEC.E
XE
dfsvc.exe (events: 7)
12/2/2009 8:41:00 PM
Process exit
C:\PROGRA~2\MICROS~1\wksss.exe
12/2/2009 8:40:46 PM
Process start C:\PROGRA~2\MICROS~1\wksss.exe

dfsvc.exe (events: 7)
12/16/2009 6:49:03 AM Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/16/2009 6:48:03 AM Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/15/2009 5:02:58 PM Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/15/2009 5:01:57 PM Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/15/2009 2:57:32 PM Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/15/2009 2:56:32 PM Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/14/2009 3:09:35 PM Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/14/2009 3:08:35 PM Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/13/2009 1:59:04 PM Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/13/2009 1:58:03 PM Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/12/2009 11:54:44 AM Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/12/2009 11:53:44 AM Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/12/2009 11:04:40 AM Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/12/2009 11:03:40 AM Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/11/2009 5:49:20 PM Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/11/2009 5:48:20 PM Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/11/2009 6:00:26 AM Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/11/2009 5:59:26 AM Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/11/2009 3:57:36 AM Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/11/2009 3:56:36 AM Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/10/2009 4:12:12 AM Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/10/2009 4:11:12 AM Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/10/2009 4:10:23 AM Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/10/2009 4:09:08 AM Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/8/2009 9:09:13 PM
Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/8/2009 9:08:13 PM
Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/8/2009 10:52:16 AM Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/8/2009 10:51:16 AM Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/7/2009 2:34:44 PM
Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/7/2009 2:33:44 PM
Process start

C:\Program Files (x86)\GOOGLE\COMMON\GOO


C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO

GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/7/2009 2:07:28 PM
Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/7/2009 2:06:28 PM
Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/6/2009 2:06:09 PM
Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/6/2009 2:05:01 PM
Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/5/2009 6:25:12 PM
Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/5/2009 6:24:12 PM
Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/5/2009 12:29:39 PM Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/5/2009 12:28:39 PM Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/4/2009 10:31:48 PM Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/4/2009 10:30:48 PM Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/4/2009 4:19:29 AM
Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/4/2009 4:18:28 AM
Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/3/2009 4:31:14 AM
Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/3/2009 4:30:14 AM
Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/2/2009 7:37:50 PM
Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/2/2009 7:37:15 PM
Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/2/2009 11:31:33 AM Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/2/2009 11:30:32 AM Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/1/2009 6:04:57 PM
Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/1/2009 6:03:56 PM
Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/1/2009 1:48:08 PM
Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
12/1/2009 1:47:08 PM
Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/30/2009 3:33:39 PM Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/30/2009 3:32:38 PM Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/30/2009 10:14:18 AM Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/30/2009 10:13:18 AM Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/29/2009 2:07:14 PM Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/29/2009 2:06:14 PM Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/28/2009 11:58:16 AM Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/28/2009 11:57:16 AM Process start

C:\Program Files (x86)\GOOGLE\COMMON\GOO


C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO

GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/28/2009 11:24:35 AM Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/28/2009 11:23:34 AM Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/27/2009 3:09:19 PM Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/27/2009 3:08:19 PM Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/27/2009 11:28:34 AM Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/27/2009 11:27:34 AM Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/26/2009 5:43:45 PM Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/26/2009 5:42:45 PM Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/26/2009 7:00:34 AM Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/26/2009 6:59:33 AM Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/25/2009 10:14:06 PM Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/25/2009 10:13:06 PM Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/25/2009 7:45:28 PM Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/25/2009 7:45:28 PM Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/25/2009 7:33:07 PM Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/25/2009 7:32:07 PM Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/25/2009 4:02:57 AM Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/25/2009 4:01:57 AM Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/24/2009 3:51:26 AM Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/24/2009 3:50:26 AM Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/23/2009 5:00:44 PM Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/23/2009 4:59:44 PM Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/23/2009 4:13:58 AM Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/23/2009 4:12:57 AM Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/22/2009 2:03:23 PM Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/22/2009 2:02:23 PM Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/22/2009 1:58:25 AM Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/22/2009 1:57:24 AM Process start
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/21/2009 12:36:20 PM Process exit
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/21/2009 12:35:20 PM Process start

C:\Program Files (x86)\GOOGLE\COMMON\GOO


C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO
C:\Program Files (x86)\GOOGLE\COMMON\GOO

GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/21/2009 12:33:51 PM Process exit
C:\Program Files
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/21/2009 12:32:51 PM Process start C:\Program Files
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/20/2009 5:14:41 AM Process exit
C:\Program Files
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/20/2009 5:13:41 AM Process start C:\Program Files
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/19/2009 11:32:11 AM Process exit
C:\Program Files
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/19/2009 11:31:11 AM Process start C:\Program Files
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/19/2009 4:28:59 AM Process exit
C:\Program Files
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/19/2009 4:27:59 AM Process start C:\Program Files
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/18/2009 7:21:51 PM Process exit
C:\Program Files
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/18/2009 7:20:51 PM Process start C:\Program Files
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/18/2009 4:46:55 AM Process exit
C:\Program Files
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/18/2009 4:45:55 AM Process start C:\Program Files
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/17/2009 10:34:14 PM Process exit
C:\Program Files
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
11/17/2009 10:33:10 PM Process start C:\Program Files
GLE UPDATER\GOOGLEUPDATERSERVICE.EXE
dfsvc.exe (events: 7)
11/25/2009 7:45:27 PM Process exit
C:\Program Files
LBAR\COMPONENT\GOOGLEUPDATERSERVICE_5898FABCFA121C11.EXE
11/25/2009 7:45:27 PM Process start C:\Program Files
LBAR\COMPONENT\GOOGLEUPDATERSERVICE_5898FABCFA121C11.EXE
dfsvc.exe (events: 7)
12/16/2009 6:48:12 AM Process exit
C:\Program Files
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/16/2009 6:48:03 AM Process start C:\Program Files
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/15/2009 5:02:04 PM Process exit
C:\Program Files
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/15/2009 5:01:53 PM Process start C:\Program Files
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/15/2009 2:56:41 PM Process exit
C:\Program Files
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/15/2009 2:56:32 PM Process start C:\Program Files
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/14/2009 4:09:44 PM Process exit
C:\Program Files
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/14/2009 4:09:33 PM Process start C:\Program Files
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/14/2009 3:09:08 PM Process exit
C:\Program Files
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/14/2009 3:08:59 PM Process start C:\Program Files
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/14/2009 3:08:41 PM Process exit
C:\Program Files
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/14/2009 3:08:31 PM Process start C:\Program Files
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/13/2009 1:58:36 PM Process exit
C:\Program Files

(x86)\GOOGLE\COMMON\GOO
(x86)\GOOGLE\COMMON\GOO
(x86)\GOOGLE\COMMON\GOO
(x86)\GOOGLE\COMMON\GOO
(x86)\GOOGLE\COMMON\GOO
(x86)\GOOGLE\COMMON\GOO
(x86)\GOOGLE\COMMON\GOO
(x86)\GOOGLE\COMMON\GOO
(x86)\GOOGLE\COMMON\GOO
(x86)\GOOGLE\COMMON\GOO
(x86)\GOOGLE\COMMON\GOO
(x86)\GOOGLE\COMMON\GOO
(x86)\GOOGLE\COMMON\GOO
(x86)\GOOGLE\COMMON\GOO
(x86)\GOOGLE\GOOGLE TOO
(x86)\GOOGLE\GOOGLE TOO
(x86)\GOOGLE\GOOGLETOOL
(x86)\GOOGLE\GOOGLETOOL
(x86)\GOOGLE\GOOGLETOOL
(x86)\GOOGLE\GOOGLETOOL
(x86)\GOOGLE\GOOGLETOOL
(x86)\GOOGLE\GOOGLETOOL
(x86)\GOOGLE\GOOGLETOOL
(x86)\GOOGLE\GOOGLETOOL
(x86)\GOOGLE\GOOGLETOOL
(x86)\GOOGLE\GOOGLETOOL
(x86)\GOOGLE\GOOGLETOOL
(x86)\GOOGLE\GOOGLETOOL
(x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/13/2009 1:58:27 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/13/2009 1:58:09 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/13/2009 1:57:59 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/12/2009 11:53:53 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/12/2009 11:53:44 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/12/2009 11:03:46 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/12/2009 11:03:35 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/11/2009 5:48:29 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/11/2009 5:48:20 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/11/2009 5:59:32 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/11/2009 5:59:22 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/11/2009 3:56:45 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/11/2009 3:56:36 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/10/2009 2:42:26 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/10/2009 2:42:15 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/10/2009 4:50:01 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/10/2009 4:49:29 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/10/2009 4:11:21 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/10/2009 4:11:12 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/10/2009 4:09:26 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/10/2009 4:08:57 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/9/2009 3:24:25 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/9/2009 3:23:35 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/8/2009 9:08:20 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/8/2009 9:08:09 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/8/2009 1:21:20 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/8/2009 1:20:42 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/8/2009 10:51:25 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/8/2009 10:51:16 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/7/2009 2:33:50 PM
Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/7/2009 2:33:40 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/7/2009 2:06:37 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/7/2009 2:06:28 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/7/2009 5:20:05 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/7/2009 5:19:56 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/6/2009 2:06:02 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/6/2009 2:05:53 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/6/2009 2:05:35 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/6/2009 2:04:57 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/6/2009 12:48:10 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/6/2009 12:47:12 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/5/2009 6:24:21 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/5/2009 6:24:12 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/5/2009 12:28:48 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/5/2009 12:28:35 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/4/2009 10:30:57 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/4/2009 10:30:48 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/4/2009 6:51:26 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/4/2009 6:51:08 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/4/2009 4:19:02 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/4/2009 4:18:52 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/4/2009 4:18:34 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/4/2009 4:18:24 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/3/2009 4:30:24 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/3/2009 4:30:14 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/3/2009 4:07:24 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/3/2009 4:07:14 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 7:37:59 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 7:36:39 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 11:30:42 AM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 11:30:33 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:39:46 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:39:37 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:35:57 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:35:48 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:35:43 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:35:34 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:35:29 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:35:20 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:34:52 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:34:43 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:34:08 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:33:59 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:33:50 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:33:40 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:33:35 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:33:25 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:33:22 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:33:13 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:33:09 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:33:00 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:32:47 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:32:38 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:32:34 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:32:23 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:32:20 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:32:11 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:06:57 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:06:48 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:06:47 AM
Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:06:37 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:06:30 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:06:20 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:05:42 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:05:32 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:05:31 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:05:22 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:03:31 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:03:21 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:03:12 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:03:03 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:02:21 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:02:12 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:02:08 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:01:58 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:01:58 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:01:49 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:01:42 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:01:33 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:01:04 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:00:55 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:00:25 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 6:00:15 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 5:54:05 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 5:53:56 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 5:53:09 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 5:53:00 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 5:52:56 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 5:52:47 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 5:52:41 AM
Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 5:52:31 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 5:52:15 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 5:52:05 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:45:28 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:45:18 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:44:47 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:44:38 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:44:24 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:44:15 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:44:11 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:44:01 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:43:44 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:43:35 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:39:47 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:39:38 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:39:28 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:39:19 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:38:44 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:38:35 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:38:08 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:37:58 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:35:53 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:35:43 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:35:41 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:35:32 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:35:19 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:35:10 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:34:56 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:34:47 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:34:18 AM
Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:34:09 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:34:00 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:33:51 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:33:19 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:33:10 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:32:41 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:32:32 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:32:26 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:32:17 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:32:14 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:32:05 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:32:04 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:31:55 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:30:51 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:30:42 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:30:42 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:30:33 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:30:31 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:30:22 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:29:09 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:29:00 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:28:46 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:28:37 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:28:04 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:27:55 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:27:40 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:27:31 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:27:30 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:27:21 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:27:17 AM
Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:27:07 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:27:04 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:26:55 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:26:54 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:26:44 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:26:42 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:26:33 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:26:29 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:26:20 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:26:19 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:26:09 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:26:05 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:25:56 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:25:51 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:25:41 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:25:38 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:25:29 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:25:08 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:24:59 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:24:46 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:24:37 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:24:37 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:24:28 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:24:27 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:24:18 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:24:10 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:24:00 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:21:13 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:21:03 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:20:57 AM
Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:20:47 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:20:43 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:20:34 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:17:17 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:17:07 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:16:58 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:16:49 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:16:02 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:15:51 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:15:29 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:15:19 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:15:00 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:14:51 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:14:13 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:14:03 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:10:09 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:09:59 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:09:43 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:09:33 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:07:32 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:07:23 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:07:14 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/2/2009 3:07:04 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:10:32 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:10:23 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:10:22 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:10:13 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:10:12 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:10:03 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:09:25 PM
Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:09:16 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:09:11 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:09:02 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:08:59 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:08:50 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:08:49 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:08:40 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:08:40 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:08:30 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:07:46 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:07:36 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:07:36 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:07:27 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:07:14 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:07:04 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:07:02 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:06:53 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:06:02 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:05:52 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:05:46 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:05:37 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:05:20 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:05:10 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:04:43 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:04:34 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:04:23 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:04:14 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:04:03 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:03:52 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:18:22 PM
Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:18:13 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:18:01 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:17:52 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:17:40 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:17:31 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:17:26 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:17:17 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:17:06 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:16:57 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:16:48 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:16:39 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:16:24 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:16:15 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:16:12 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:16:03 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:15:59 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:15:50 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:15:45 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:15:35 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:15:32 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:15:23 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:15:22 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:15:13 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:15:09 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:15:00 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:14:52 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:14:43 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:14:38 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:14:29 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:14:22 PM
Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:14:13 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:13:57 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:13:48 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:12:45 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:12:36 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:12:28 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:12:19 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:11:36 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:11:27 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:11:22 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:11:13 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:10:48 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:10:39 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:10:36 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:10:27 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:10:27 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:10:18 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:32:30 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:32:21 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:28:07 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:27:58 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:27:57 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:27:47 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:27:36 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:27:27 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:27:25 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:27:16 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:27:15 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:27:06 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:27:04 PM
Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:26:54 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:26:52 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:26:43 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:26:42 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:26:33 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:26:31 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:26:22 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:26:21 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:26:12 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:26:11 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:26:01 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:26:01 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:25:52 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:25:51 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:25:41 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:25:38 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:25:29 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:25:27 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:25:17 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:25:12 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:25:03 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:25:00 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:24:51 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:24:24 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:24:14 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:19:35 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:19:26 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:19:25 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:19:15 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:18:41 PM
Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:18:31 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:18:23 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:18:13 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:17:39 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:17:30 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:17:05 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:16:56 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:16:41 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:16:32 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:16:06 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:15:56 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:15:25 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:15:16 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:12:23 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:12:14 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:11:38 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:11:29 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:11:23 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:11:14 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:06:57 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:06:47 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:06:44 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:06:34 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:06:02 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:05:53 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:05:49 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:05:40 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:05:33 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:05:24 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:05:18 PM
Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:05:08 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:04:43 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:04:34 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:02:54 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:02:45 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:02:45 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:02:35 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:01:43 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:01:33 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:01:06 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:00:57 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:00:53 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:00:44 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:00:42 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:00:32 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:00:32 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:00:23 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:00:13 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 2:00:04 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:59:23 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:59:14 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:59:02 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:58:52 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:58:40 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:58:30 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:58:03 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:57:54 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:57:51 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:57:42 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:57:41 PM
Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:57:32 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:57:30 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:57:21 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:57:12 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:57:02 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:56:59 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:56:49 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:56:44 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:56:35 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:56:10 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:56:01 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:55:49 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:55:40 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:55:33 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:55:23 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:55:23 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:55:14 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:54:48 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:54:39 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:54:09 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:54:00 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:53:36 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:53:27 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:53:23 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:53:14 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:53:11 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:53:02 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:53:02 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:52:53 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:52:39 PM
Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:52:29 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:48:54 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:48:45 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:48:44 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:48:35 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:48:04 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:47:55 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:47:50 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:47:41 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:47:35 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:47:26 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:47:17 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:47:08 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:46:50 PM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 1:46:40 PM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:17:26 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:17:17 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:17:15 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:17:05 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:17:05 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:16:56 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:16:54 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:16:44 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:16:44 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:16:34 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:16:34 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:16:25 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:16:21 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:16:12 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:16:10 AM
Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:16:00 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:15:36 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:15:27 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:15:22 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:15:13 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:14:41 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:14:31 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:13:57 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:13:47 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:13:44 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:13:35 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:13:27 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:13:17 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:12:53 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:12:44 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:12:31 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:12:22 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:11:18 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:11:08 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:10:56 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:10:47 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:10:45 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:10:36 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:10:35 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:10:26 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:10:24 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:10:15 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:10:01 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:09:52 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:09:34 AM
Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:09:25 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:08:45 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:08:36 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:08:36 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:08:27 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:08:23 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:08:14 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:08:11 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:08:02 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:07:54 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:07:45 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:07:44 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:07:35 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:07:34 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:07:25 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:07:23 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:07:14 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:07:11 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:07:02 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:07:02 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:06:53 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:06:50 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:06:41 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:06:39 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:06:30 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:06:29 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:06:19 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:06:18 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:06:09 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:05:59 AM
Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:05:50 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:05:49 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:05:39 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:05:14 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:05:04 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:04:58 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:04:49 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:04:43 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:04:34 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:04:34 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 6:04:24 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 5:57:05 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 5:56:56 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 5:56:53 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 5:56:43 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 5:56:41 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 5:56:32 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 5:56:25 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 5:56:16 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 5:56:14 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 5:56:05 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:44:04 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:43:55 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:43:52 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:43:43 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:43:36 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:43:27 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:43:22 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:43:13 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:43:12 AM
Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:43:03 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:42:37 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:42:28 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:42:22 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:42:13 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:42:11 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:42:02 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:42:01 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:41:52 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:41:32 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:41:23 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:41:17 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:41:07 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:40:58 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:40:49 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:39:56 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:39:47 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:39:42 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:39:33 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:39:32 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:39:23 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:38:44 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:38:35 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:38:20 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:38:11 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:38:05 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:37:56 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:37:52 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:37:43 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:37:34 AM
Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:37:25 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:37:22 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:37:13 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:37:13 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:37:04 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:36:53 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:36:44 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:36:44 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:36:34 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:36:33 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:36:24 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:36:23 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:36:14 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:36:11 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:36:02 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:36:02 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:35:53 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:35:49 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:35:40 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:35:17 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:35:08 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:35:07 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:34:58 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:34:56 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:34:47 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:34:47 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:34:37 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:34:30 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:34:21 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:34:06 AM
Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:33:56 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:33:55 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:33:46 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:33:41 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:33:31 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:33:28 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:33:19 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:33:15 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:33:05 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:33:02 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:32:53 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:32:40 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:32:30 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:32:24 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:32:14 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:32:08 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:31:59 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:31:45 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:31:36 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:31:28 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:31:18 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:30:52 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:30:43 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:30:42 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:30:32 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:30:26 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:30:16 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:30:16 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:30:07 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:30:04 AM
Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:29:54 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:29:54 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:29:44 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:29:42 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:29:33 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:29:29 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:29:20 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:21:20 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:21:11 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:20:18 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:20:09 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:20:06 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:19:57 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:19:01 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:18:52 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:18:51 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:18:42 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:18:23 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:18:14 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:17:31 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:17:21 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:15:01 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:14:52 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:12:26 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:12:17 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:12:16 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:12:07 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:11:53 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:11:44 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:10:55 AM
Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:10:46 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:08:17 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:08:08 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:06:35 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:06:25 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:06:16 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:06:07 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:05:57 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:05:48 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:05:18 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:05:08 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:05:03 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:04:54 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:04:52 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:04:43 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:03:39 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 4:03:29 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:40:02 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:39:52 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:39:38 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:39:28 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:39:26 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:39:17 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:39:03 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:38:53 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:38:53 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:38:44 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:38:14 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:38:04 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:38:00 AM
Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:37:51 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:36:59 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:36:50 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:29:44 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:29:35 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:29:16 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:29:07 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:28:52 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:28:43 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:28:00 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:27:51 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:27:41 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:27:31 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:27:01 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:26:52 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:26:09 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:26:00 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:26:00 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:25:50 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:25:30 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:25:20 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:25:13 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:25:04 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:25:03 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:24:54 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:21:01 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:20:52 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:20:33 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:20:23 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:20:15 AM
Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:20:06 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:19:57 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:19:48 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:19:46 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:19:37 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:19:36 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:19:27 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:19:25 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:19:16 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:19:13 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:19:04 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:18:55 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:18:46 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:18:43 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:18:34 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:18:31 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:18:22 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:18:17 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:18:08 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:18:03 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:17:54 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:17:53 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:17:44 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:17:10 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:17:01 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:16:56 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:16:47 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:16:38 AM
Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:16:29 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:14:26 AM
Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
12/1/2009 3:13:44 AM
Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 7:34:51 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 7:34:03 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:56:02 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:55:17 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 4:06:13 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 4:06:04 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 4:05:53 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 4:05:44 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 4:05:41 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 4:05:32 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 4:05:15 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 4:05:06 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 4:04:20 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 4:04:10 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 4:03:46 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 4:03:37 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 4:03:32 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 4:03:23 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 4:02:51 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 4:02:42 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:59:22 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:59:12 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:55:38 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:55:29 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:55:04 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:54:55 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:54:35 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:54:26 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:54:19 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:54:10 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:53:57 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:53:47 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:53:47 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:53:38 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:53:27 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:53:18 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:53:14 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:53:05 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:52:51 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:52:42 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:52:42 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:52:32 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:52:28 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:52:19 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:52:10 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:52:01 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:51:58 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:51:48 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:51:36 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:51:27 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:51:20 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:51:11 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:51:02 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:50:53 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:50:39 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:50:30 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:50:20 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:50:11 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:49:42 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:49:33 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:49:29 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:49:20 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:49:20 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:49:10 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:49:02 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:48:53 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:48:51 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:48:42 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:48:36 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:48:27 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:48:15 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:48:06 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:47:36 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:47:26 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:46:49 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:46:40 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:46:27 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:46:18 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:46:14 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:46:05 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:45:47 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:45:38 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:45:25 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:45:16 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:45:15 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:45:06 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:45:05 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:44:56 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:44:53 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:44:44 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:44:32 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:44:23 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:44:19 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:44:10 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:42:35 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:42:26 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:42:18 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:42:08 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:41:48 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:41:38 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:40:13 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:40:04 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:39:18 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:39:09 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:38:57 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:38:48 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:38:40 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:38:30 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:38:16 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:38:07 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:37:58 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:37:49 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:37:41 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:37:31 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:35:53 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:35:43 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:35:36 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:35:27 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:35:25 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:35:16 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:35:03 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:34:54 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:32:46 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 3:32:36 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 10:15:26 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 10:15:16 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 10:14:35 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 10:14:26 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 10:14:26 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 10:14:15 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 10:14:08 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 10:13:59 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 10:13:41 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 10:13:32 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 10:13:27 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 10:13:18 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 10:12:57 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 10:12:47 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:44:40 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:44:31 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:44:11 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:44:01 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:44:01 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:43:52 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:43:50 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:43:41 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:43:37 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:43:28 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:43:26 AM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:43:17 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:43:13 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:43:04 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:42:53 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:42:43 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:42:22 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:42:12 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:42:04 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:41:55 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:41:14 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:41:05 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:40:48 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:40:39 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:40:38 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:40:29 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:35:15 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:35:04 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:33:24 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:33:14 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:33:08 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:32:59 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:32:18 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:32:09 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:31:44 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:31:35 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:30:34 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:30:25 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:30:11 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:30:02 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:29:54 AM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:29:44 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:29:38 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:29:29 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:28:09 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:27:59 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:27:57 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:27:48 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:24:00 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:23:50 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:23:18 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:23:08 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:23:05 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:22:56 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:22:33 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:22:24 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:22:14 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:22:05 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:22:04 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:21:55 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:21:52 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:21:43 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:21:42 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:21:32 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:21:31 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:21:22 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:21:21 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:21:12 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:21:10 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:21:01 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:20:58 AM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:20:48 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:20:39 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:20:30 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:20:24 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:20:15 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:20:13 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:20:04 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:20:01 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:19:52 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:19:51 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:19:42 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:19:16 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:19:06 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:18:51 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:18:42 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:18:36 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:18:27 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:18:25 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:18:16 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:18:09 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:18:00 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:18:00 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/30/2009 5:17:50 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:48:34 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:48:25 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:48:19 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:48:10 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:48:10 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:48:00 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:47:32 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:47:22 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:34:29 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:34:19 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:34:18 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:34:09 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:34:07 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:33:58 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:33:45 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:33:36 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:33:26 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:33:17 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:32:53 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:32:44 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:32:43 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:32:34 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:32:32 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:32:23 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:32:16 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:32:06 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:32:04 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:31:55 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:30:19 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:30:10 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:30:02 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:29:53 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:29:51 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:29:42 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:29:33 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:29:24 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:29:21 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:29:12 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:28:46 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:28:37 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:15:48 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:15:39 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:15:38 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:15:29 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:15:28 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:15:18 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:15:06 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:14:57 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:14:56 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:14:47 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:14:43 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:14:34 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:14:33 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:14:24 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:14:23 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:14:14 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:14:09 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:13:59 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:13:59 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:13:49 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:13:48 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:13:39 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:13:39 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:13:30 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:13:25 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:13:16 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:13:02 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:12:53 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:12:47 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:12:38 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:12:34 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:12:25 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:12:24 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:12:14 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:12:11 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:12:02 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:12:02 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:11:52 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:11:51 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:11:42 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:11:35 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:11:26 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:11:23 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:11:13 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:11:11 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:11:02 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:11:00 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:10:50 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:10:42 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:10:33 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:10:32 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:10:23 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:10:20 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:10:11 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:10:02 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:09:53 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:08:58 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:08:49 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:08:35 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:08:26 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:08:17 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:08:08 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:08:07 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:07:57 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:07:56 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:07:47 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:07:44 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:07:35 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:07:31 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:07:22 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:06:51 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:06:41 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:06:34 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:06:25 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:06:20 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 2:06:09 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 5:07:51 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 5:07:42 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 5:07:40 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 5:07:31 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 5:07:29 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 5:07:20 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 5:07:19 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 5:07:10 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 5:07:06 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 5:06:56 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 5:06:55 AM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 5:06:45 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 5:06:44 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 5:06:34 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 5:06:30 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 5:06:21 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 5:06:21 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 5:06:12 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 5:06:10 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 5:06:01 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 5:06:00 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 5:05:51 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 5:05:50 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 5:05:41 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 5:05:28 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 5:05:19 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 4:57:37 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 4:57:28 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 4:57:23 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 4:57:13 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 4:57:01 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 4:56:52 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 4:56:49 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 4:56:40 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 4:56:20 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 4:56:11 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 4:55:56 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 4:55:46 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 4:55:45 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 4:55:36 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 4:55:35 AM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 4:55:26 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 4:55:23 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 4:55:14 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 4:55:05 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 4:54:56 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 4:54:50 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 4:54:40 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 4:53:45 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 4:53:36 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 4:53:22 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 4:53:12 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 4:53:02 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 4:52:53 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 4:52:46 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 4:52:37 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 4:52:24 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 4:52:14 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 4:52:13 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/29/2009 4:52:04 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 6:03:41 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 6:03:32 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 6:03:26 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 6:03:16 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 6:02:02 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 6:01:52 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 6:01:49 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 6:01:40 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 6:01:09 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 6:00:59 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 6:00:57 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 6:00:48 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 6:00:45 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 6:00:36 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 6:00:29 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 6:00:20 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 6:00:14 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 6:00:05 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:59:42 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:59:32 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:58:26 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:58:16 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:58:16 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:58:07 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:58:05 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:57:56 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:51:39 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:51:30 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:51:16 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:51:07 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:39:59 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:39:50 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:39:29 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:39:20 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:38:56 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:38:47 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:38:30 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:38:20 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:38:00 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:37:51 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:37:48 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:37:39 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:37:24 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:37:15 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:37:02 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:36:52 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:36:51 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:36:42 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:36:38 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:36:28 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:36:26 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:36:16 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:36:16 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:36:06 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:36:05 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:35:56 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:35:47 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:35:38 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:35:26 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:35:17 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:35:05 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:34:56 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:34:42 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:34:32 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:34:31 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:34:22 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:34:22 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:34:13 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:34:10 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:34:00 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:33:29 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:33:19 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:33:07 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:32:58 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:32:44 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:32:34 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:32:18 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:32:09 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:31:31 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:31:22 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:31:02 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:30:53 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:30:50 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:30:41 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:30:33 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:30:24 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:30:14 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:30:05 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:30:01 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:29:52 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:29:48 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:29:39 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:29:39 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:29:29 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:29:23 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:29:14 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:29:14 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:29:05 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:28:58 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:28:49 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:28:35 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:28:25 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:27:06 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:26:56 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:22:09 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:22:00 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:21:49 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:21:40 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:21:38 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:21:29 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:21:12 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:21:02 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:20:46 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:20:37 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:20:35 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 5:20:26 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:42:32 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:42:23 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:42:14 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:42:05 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:42:00 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:41:51 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:40:18 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:40:09 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:40:01 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:39:52 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:39:34 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:39:25 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:39:16 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:39:07 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:39:05 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:38:56 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:38:44 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:38:34 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:38:32 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:38:23 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:38:22 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:38:13 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:38:04 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:37:55 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:37:37 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:37:27 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:37:27 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:37:17 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:36:26 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:36:13 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:36:12 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:36:03 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:35:31 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:35:22 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:35:21 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:35:12 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:35:09 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:34:59 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:34:47 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:34:38 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:34:30 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:34:21 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:32:53 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:32:44 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:32:36 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:32:27 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:32:22 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:32:13 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:32:12 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:32:03 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:31:54 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:31:45 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:31:38 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:31:29 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:31:21 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:31:12 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:30:58 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:30:49 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:30:31 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:30:21 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:30:20 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:30:10 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:28:45 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:28:36 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:28:22 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:28:13 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:27:56 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:27:47 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:27:42 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:27:32 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:26:21 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:26:12 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:26:08 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:25:59 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:25:52 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:25:42 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:25:38 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:25:29 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:25:29 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:25:20 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:25:19 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:25:09 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:24:56 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:24:47 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:24:41 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:24:32 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:24:25 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:24:15 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:23:43 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:23:34 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:23:22 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:23:12 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:23:09 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:23:00 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:22:54 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:22:45 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:22:10 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:22:01 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:21:59 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:21:49 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:21:32 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:21:23 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:21:21 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:21:12 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:21:11 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:21:02 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:21:02 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:20:53 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:20:52 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:20:43 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:20:38 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:20:29 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:20:28 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:20:19 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:20:15 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:20:05 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:20:04 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:19:55 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:19:54 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:19:45 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:19:44 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:19:35 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:19:32 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:19:23 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:19:20 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:19:10 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:19:10 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:19:00 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:18:55 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:18:46 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:18:46 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:18:37 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:18:35 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:18:25 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:18:25 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:18:16 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:18:06 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:17:56 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:17:46 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:17:37 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:16:58 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:16:49 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:16:46 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:16:37 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:16:35 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:16:26 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:16:24 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:16:15 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:16:12 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:16:02 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:16:02 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:15:53 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:15:42 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:15:33 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:15:29 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:15:20 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:15:17 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:15:08 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:15:04 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:14:54 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:14:54 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:14:44 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:14:44 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:14:35 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:14:32 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:14:23 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:14:21 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:14:12 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:14:11 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:14:02 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:14:00 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:13:51 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:13:42 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:13:33 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:13:26 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:13:16 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:13:16 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:13:07 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:12:50 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:12:41 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:12:39 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:12:30 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:12:29 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:12:20 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:12:19 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:12:09 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:12:02 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:11:53 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:11:50 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:11:40 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:11:37 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:11:28 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:11:18 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:11:09 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:11:06 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:10:57 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:10:50 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:10:41 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:10:40 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:10:31 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:10:29 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:10:20 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:10:19 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:10:09 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:10:07 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:09:58 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:09:57 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:09:48 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:09:30 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:09:21 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:08:58 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:08:49 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:08:40 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:08:31 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:08:30 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:08:21 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:08:20 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:08:11 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:08:05 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:07:56 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:07:46 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:07:37 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:07:15 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:07:06 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:06:58 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:06:48 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:06:38 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:06:28 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:03:47 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:03:38 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:03:25 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:03:16 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:03:14 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 4:03:04 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:32:58 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:32:49 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:32:19 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:32:10 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:32:06 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:31:57 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:31:44 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:31:35 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:31:34 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:31:24 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:31:21 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:31:12 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:31:03 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:30:54 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:30:40 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:30:30 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:30:30 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:30:21 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:29:45 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:29:36 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:29:32 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:29:23 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:29:08 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:28:59 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:28:48 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:28:38 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:27:44 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:27:35 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:27:06 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:26:57 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:26:56 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:26:47 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:26:38 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:26:29 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:26:12 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:26:02 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:25:59 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:25:49 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:25:39 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:25:30 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:25:21 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:25:12 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:25:08 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:24:58 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:24:42 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:24:32 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:24:29 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:24:19 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:22:57 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:22:48 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:22:44 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:22:35 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:22:22 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:22:12 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:22:08 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:21:59 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:21:55 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:21:46 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:21:35 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:21:26 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:21:19 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:21:09 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:20:55 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:20:46 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:19:46 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:19:37 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:19:33 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:19:23 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:19:06 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:18:56 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:18:46 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:18:37 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:18:35 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:18:26 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:18:19 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:18:09 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:17:55 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:17:46 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:17:45 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:17:35 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:17:29 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:17:20 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:17:17 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:17:08 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:17:08 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:16:59 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:16:57 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:16:48 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:16:33 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:16:24 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:16:10 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:16:00 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:15:36 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:15:27 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:07:19 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:07:10 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:07:02 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 3:06:53 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:57:01 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:56:52 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:49:17 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:49:07 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:48:50 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:48:41 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:48:39 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:48:30 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:47:54 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:47:45 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:47:38 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:47:29 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:47:27 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:47:18 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:47:18 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:47:09 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:46:59 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:46:49 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:46:48 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:46:39 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:46:37 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:46:28 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:46:27 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:46:17 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:46:14 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:46:05 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:46:04 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:45:55 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:44:58 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:44:49 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:44:45 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:44:36 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:44:35 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:44:26 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:44:22 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:44:13 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:44:12 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:44:03 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:44:03 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:43:54 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:43:53 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:43:44 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:43:43 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:43:34 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:43:26 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:43:17 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:42:48 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:42:34 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:42:34 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:42:25 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:42:24 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:42:14 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:42:12 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:42:02 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:41:38 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:41:29 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:41:18 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:41:09 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:40:54 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 2:40:44 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:59:38 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:59:28 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:59:15 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:59:06 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:58:55 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:58:44 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:58:35 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:58:25 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:58:01 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:57:51 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:57:34 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:57:25 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:57:22 AM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:57:12 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:26:49 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:26:40 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:26:39 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:26:30 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:25:19 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:25:10 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:24:18 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:24:08 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:23:44 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:23:35 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:23:26 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:23:17 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:23:14 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:23:05 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:23:05 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:22:56 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:22:46 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:22:37 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:22:35 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:22:26 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:22:06 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:21:57 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:21:56 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:21:47 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:21:40 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:21:31 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:20:27 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:20:18 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:20:09 AM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:20:00 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:15:30 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:15:21 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:15:10 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:15:01 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:14:52 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:14:43 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:14:14 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 11:14:05 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:14:11 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:14:02 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:13:57 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:13:48 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:12:06 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:11:57 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:10:23 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:10:13 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:10:12 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:10:03 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:09:36 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:09:27 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:09:14 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:09:05 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:08:51 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:08:42 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:07:16 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:07:07 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:06:30 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:06:21 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:06:18 AM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:06:09 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:05:58 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:05:49 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:03:38 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:03:29 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:02:12 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:02:03 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:02:02 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:01:53 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:01:52 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:01:43 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:01:37 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:01:28 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:00:59 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:00:49 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:00:35 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:00:26 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:00:21 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:00:11 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/28/2009 12:00:08 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:59:58 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:59:57 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:59:48 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:59:32 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:59:23 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:59:02 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:58:53 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:58:37 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:58:28 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:49:47 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:49:38 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:49:33 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:49:24 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:48:59 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:48:50 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:48:49 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:48:40 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:48:37 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:48:28 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:48:15 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:48:06 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:47:55 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:47:46 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:47:43 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:47:34 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:47:21 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:47:12 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:47:10 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:47:01 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:46:49 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:46:40 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:46:19 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:46:10 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:45:38 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:45:29 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:45:18 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:45:08 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:45:04 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:44:55 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:44:47 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:44:38 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:44:33 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:44:24 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:44:19 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:44:10 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:44:00 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:43:51 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:43:49 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:43:40 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:43:39 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:43:30 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:43:30 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:43:21 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:43:20 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:43:11 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:43:10 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:43:01 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:42:48 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:42:39 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:42:31 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:42:22 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:42:22 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:42:12 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:42:09 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:42:00 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:41:59 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:41:50 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:41:22 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:41:13 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:41:00 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:40:51 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:40:48 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:40:39 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:40:11 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:40:02 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:39:59 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:39:50 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:38:57 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:38:47 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:36:57 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:36:48 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:36:48 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:36:39 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:36:31 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:36:21 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:36:13 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:36:04 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:35:54 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:35:45 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:34:20 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:34:11 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:32:08 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:31:59 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:31:30 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:31:21 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:31:20 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:31:10 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:30:39 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:30:30 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:30:26 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:30:17 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:29:23 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:29:14 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:29:03 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:28:54 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:28:47 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:28:38 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:27:14 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:27:05 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:27:04 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:26:55 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:26:55 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:26:46 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:26:40 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:26:30 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:26:29 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:26:20 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:26:18 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:26:09 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:26:06 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:25:57 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:25:36 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:25:27 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:25:00 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:24:51 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:22:21 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:22:12 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:22:11 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:22:02 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:21:28 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:21:19 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:19:48 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:19:39 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:19:35 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:19:26 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:18:12 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:18:03 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:17:59 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:17:50 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:17:50 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:17:41 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:17:39 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:17:30 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:17:24 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:17:14 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:17:08 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:16:59 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:16:48 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:16:38 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:15:30 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:15:21 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:15:13 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:15:04 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:14:57 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:14:48 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:14:07 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:13:58 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:13:56 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:13:47 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:13:32 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:13:22 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:12:48 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:12:39 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:11:30 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:11:21 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:09:52 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:09:43 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:09:15 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:09:05 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:08:17 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:08:08 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:08:05 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:07:56 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:07:52 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:07:43 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:07:39 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:07:30 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:07:14 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:07:04 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:03:52 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:03:43 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:03:21 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:03:12 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:03:07 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:02:57 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:02:54 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:02:45 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:02:44 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:02:35 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:02:31 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 9:02:22 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 8:59:29 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 8:59:20 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 8:59:16 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 8:59:07 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 8:59:07 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 8:58:58 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 8:58:43 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 8:58:34 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 8:58:10 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 8:58:01 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 8:57:51 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 8:57:42 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 8:57:37 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 8:57:28 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 8:49:55 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 8:49:45 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:19:08 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:18:59 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:18:16 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:18:07 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:17:35 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:17:26 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:17:11 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:17:02 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:16:49 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:16:40 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:16:35 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:16:26 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:16:23 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:16:14 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:15:55 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:15:46 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:15:43 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:15:34 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:15:15 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:15:06 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:14:56 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:14:47 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:14:44 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:14:35 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:13:28 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:13:19 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:12:56 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:12:47 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:12:45 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:12:36 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:10:49 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:10:40 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:10:27 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:10:18 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:10:16 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:10:07 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:10:00 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:09:51 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:09:40 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:09:30 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:09:23 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:09:14 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:09:13 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:09:03 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:08:41 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:08:32 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:08:28 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:08:19 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:08:00 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 3:07:51 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:14:54 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:14:45 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:13:45 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:13:36 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:12:18 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:12:08 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:11:26 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:11:16 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:10:53 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:10:44 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:10:22 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:10:13 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:09:24 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:09:15 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:09:09 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:09:00 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:08:51 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:08:42 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:08:35 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:08:25 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:08:09 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:08:00 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:07:55 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:07:45 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:07:42 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:07:33 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:05:35 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:05:26 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:05:19 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:05:09 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:04:19 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:04:10 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:02:56 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:02:47 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:02:22 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:02:13 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:01:47 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:01:38 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:59:27 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:59:18 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:58:18 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:58:08 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:57:54 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:57:44 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:55:40 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:55:31 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:55:04 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:54:55 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:54:52 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:54:42 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:54:28 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:54:18 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:47:29 AM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:47:20 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:46:54 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:46:44 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:46:43 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:46:33 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:46:29 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:46:20 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:46:19 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:46:10 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:46:09 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:45:56 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:45:55 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:45:46 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:45:45 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:45:36 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:45:32 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:45:22 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:45:14 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:45:05 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:44:58 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:44:49 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:44:45 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:44:35 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:44:22 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:44:12 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:44:11 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:44:02 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:43:58 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:43:48 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:43:48 AM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:43:39 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:43:38 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:43:29 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:43:29 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:43:19 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:43:18 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:43:09 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:43:06 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:42:57 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:42:54 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:42:45 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:42:44 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:42:35 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:42:35 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:42:25 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:42:24 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:42:15 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:42:11 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:42:01 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:41:58 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:41:49 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:41:26 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:41:16 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:41:09 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:41:00 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:40:42 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:40:33 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:40:02 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:39:53 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:39:23 AM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:39:14 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:38:56 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:38:47 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:38:35 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:38:25 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:38:25 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:38:15 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:38:03 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:37:54 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:36:45 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:36:36 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:36:33 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:36:23 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:36:20 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:36:11 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:36:11 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:36:01 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:35:41 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:35:31 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:35:19 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:35:09 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:35:04 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:34:55 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:34:51 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:34:42 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:34:37 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:34:28 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:34:24 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:34:15 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:34:13 AM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:34:04 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:34:01 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:33:51 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:33:40 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:33:31 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:33:23 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:33:13 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:32:21 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:32:12 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:32:00 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:31:50 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:31:49 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:31:40 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:31:24 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:31:14 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:30:57 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:30:48 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:30:46 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:30:37 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:30:17 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:30:07 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:30:01 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:29:52 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:29:47 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:29:37 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:29:30 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:29:20 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:29:16 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:29:06 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:29:02 AM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:28:53 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:28:24 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:28:14 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:28:11 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:28:01 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:27:51 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:27:42 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:27:40 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 11:27:30 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:32:05 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:31:55 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:31:46 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:31:37 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:31:27 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:31:18 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:31:17 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:31:07 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:28:44 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:28:35 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:28:31 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:28:22 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:28:12 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:28:02 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:28:00 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:27:50 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:25:37 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:25:28 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:24:42 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:24:33 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:24:28 AM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:24:18 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:23:44 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:23:35 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:23:33 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:23:23 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:23:11 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:23:02 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:22:48 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:22:38 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:22:27 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:22:17 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:22:15 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:22:06 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:22:05 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:21:56 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:21:56 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:21:47 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:14:38 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:14:29 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:14:25 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:14:16 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:14:04 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:13:55 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:13:46 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:13:36 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:13:35 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:13:26 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:13:24 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:13:14 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:13:10 AM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:13:01 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:13:00 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:12:51 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:12:36 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:12:27 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:11:57 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:11:47 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:11:36 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:11:27 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:11:21 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:11:08 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:10:35 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:10:26 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:10:23 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:10:14 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:10:09 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:10:00 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:09:44 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:09:35 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:09:23 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:09:14 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:09:05 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:08:56 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:08:11 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:08:01 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:07:51 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:07:42 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:04:19 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:04:09 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:03:47 AM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:03:37 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:00:49 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:00:40 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:00:11 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 2:00:02 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:59:10 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:59:01 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:58:46 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:58:37 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:57:56 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:57:47 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:56:46 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:56:36 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:52:35 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:52:26 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:51:45 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:51:36 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:51:35 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:51:26 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:51:24 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:51:14 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:51:04 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:50:55 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:44:39 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:44:30 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:43:27 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:43:17 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:37:44 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:37:35 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:35:57 AM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:35:48 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:34:38 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:34:29 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:34:10 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:34:01 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:32:07 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:31:58 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:31:26 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:31:17 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:27:52 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:27:43 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:24:58 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:24:49 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:24:43 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:24:33 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:23:07 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:22:58 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:22:12 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:22:03 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:21:15 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:21:06 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:20:33 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:20:24 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:20:18 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:20:08 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:18:32 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:18:23 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:16:29 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:16:19 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:16:03 AM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:15:54 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:15:10 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:15:01 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:14:58 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:14:49 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:13:05 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:12:56 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:09:43 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:09:34 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:07:50 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:07:41 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:04:16 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:04:07 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:03:13 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:03:04 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:01:32 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:01:23 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:01:03 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:00:54 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:00:53 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:00:44 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:00:09 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 1:00:00 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:59:56 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:59:47 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:59:41 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:59:32 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:59:10 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:59:00 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:59:00 AM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:58:51 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:58:48 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:58:39 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:58:31 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:58:22 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:58:02 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:57:53 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:57:43 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:57:34 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:56:09 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:56:00 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:55:50 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:55:41 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:55:33 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:55:24 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:55:21 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:55:12 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:55:06 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:54:57 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:54:47 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:54:38 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:54:27 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:54:18 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:54:11 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:54:02 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:53:51 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:53:41 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:53:40 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:53:31 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:53:14 AM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:53:05 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:52:52 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:52:42 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:52:28 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:52:19 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:52:15 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:52:06 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:49:01 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:48:51 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:48:31 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:48:22 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:47:45 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:47:35 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:47:33 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:47:24 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:47:14 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:47:05 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:47:02 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:46:53 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:46:49 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:46:40 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:46:31 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:46:22 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:46:18 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:46:09 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:44:31 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:44:22 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:44:16 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:44:07 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:43:35 AM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:43:25 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:42:35 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:42:26 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:42:18 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:42:09 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:41:07 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:40:58 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:40:56 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:40:47 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:40:41 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:40:32 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:40:11 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:40:02 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:38:48 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:38:38 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:38:34 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:38:25 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:38:21 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:38:11 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:38:08 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:37:58 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:37:40 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:37:31 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:37:27 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:37:18 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:37:04 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:36:55 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:35:46 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:35:37 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:35:22 AM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:35:13 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:35:01 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:34:52 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:34:32 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/27/2009 12:34:23 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:55:40 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:55:31 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:54:19 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:54:10 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:49:09 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:48:59 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:48:41 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:48:31 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:48:14 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:48:05 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:44:45 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:44:36 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:44:25 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:44:16 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:44:12 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:44:03 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:43:44 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:43:34 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:43:34 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:43:24 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:43:24 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:43:15 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:43:14 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:43:05 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:43:02 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:42:53 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:42:52 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:42:43 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:42:42 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:42:32 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:42:24 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:42:15 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:42:04 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:41:54 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:41:46 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:41:37 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:41:37 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:41:28 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:41:27 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:41:17 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:41:16 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:41:07 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:41:01 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:40:52 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:40:50 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:40:41 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:40:39 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:40:30 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:40:25 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:40:16 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:40:14 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:40:05 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:40:02 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:39:53 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:39:48 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:39:39 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:39:38 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:39:29 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:39:29 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:39:20 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:39:20 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:39:10 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:39:08 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:38:59 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:38:59 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:38:50 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:38:49 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:38:40 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:38:36 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:38:27 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:38:26 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:38:17 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:38:06 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:37:56 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:37:47 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:37:37 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:36:45 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:36:35 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:36:34 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:36:25 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:01:19 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:01:10 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:01:06 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:00:57 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:59:37 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:59:28 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:59:11 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:59:02 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:58:37 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:58:28 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:58:27 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:58:18 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:58:17 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:58:08 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:58:07 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:57:58 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:57:57 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:57:48 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:57:47 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:57:37 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:57:30 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:57:21 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:56:54 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:56:45 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:56:41 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:56:31 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:56:28 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:56:19 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:56:18 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:56:09 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:56:08 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:55:59 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:55:58 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:55:48 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:55:44 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:55:35 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:55:31 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:55:21 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:54:45 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:54:36 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:54:12 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:54:03 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:53:47 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:53:38 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:53:29 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:53:20 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:52:50 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:52:41 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:46:16 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:46:07 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:46:05 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:45:56 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:45:56 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:45:46 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:45:27 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:45:17 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:44:41 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:44:32 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:43:03 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:42:54 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:42:53 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:42:44 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:42:40 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:42:30 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:42:25 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:42:16 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:41:53 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:41:44 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:16:29 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:16:20 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:16:15 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:16:06 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:15:57 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:15:48 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:15:46 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:15:37 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:08:06 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:07:57 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:07:53 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:07:44 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:07:40 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:07:31 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:07:23 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:07:13 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:07:10 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:07:01 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:07:00 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:06:50 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:06:24 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:06:15 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:05:58 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:05:49 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:05:48 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:05:39 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:05:29 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:05:19 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:04:29 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:04:20 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:04:15 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:04:06 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:03:57 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:03:48 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:03:40 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:03:31 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:03:30 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:03:21 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:03:16 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:03:07 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:03:01 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:02:52 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:02:39 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:02:30 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:02:06 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:01:57 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:01:26 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:01:17 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:01:11 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:01:02 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:00:49 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 5:00:40 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:59:39 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:59:30 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:59:22 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:59:12 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:59:11 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:59:02 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:57:26 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:57:17 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:56:47 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:56:38 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:56:37 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:56:27 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:56:13 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:56:04 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:56:04 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:55:55 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:55:24 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:55:15 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:55:04 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:54:54 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:49:17 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:49:07 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:45:24 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:45:15 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:44:44 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:44:35 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:44:32 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:44:23 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:44:08 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:43:59 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:43:53 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:43:44 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:43:26 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:43:16 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:42:31 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:42:22 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:41:26 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:41:17 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:41:12 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:41:02 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:41:00 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:40:51 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:40:43 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:40:34 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:40:29 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:40:20 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:40:18 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:40:09 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:40:00 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:39:51 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:38:13 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:38:04 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:37:57 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:37:48 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:37:40 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:37:30 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:37:19 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:37:10 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:37:09 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 4:37:00 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:26:14 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:26:05 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:25:36 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:25:27 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:24:39 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:24:29 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:24:09 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:24:00 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:23:39 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:23:30 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:23:23 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:23:14 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:23:03 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:22:54 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:22:54 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:22:44 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:22:30 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:22:21 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:22:21 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:22:12 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:21:04 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:20:55 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:20:53 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:20:44 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:20:05 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:19:56 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:18:38 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:18:28 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:18:16 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:18:07 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:17:53 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:17:43 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:17:35 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:17:25 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:16:35 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:16:26 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:16:25 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:16:16 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:16:16 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:16:06 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:15:53 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:15:44 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:15:24 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:15:14 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:14:48 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:14:39 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:14:28 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:14:18 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:14:12 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:14:03 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:13:58 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 2:13:48 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:37:20 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:37:11 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:36:50 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:36:41 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:36:36 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:36:26 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:36:25 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:36:16 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:36:06 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:35:57 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:35:50 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:35:41 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:35:41 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:35:32 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:34:51 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:34:42 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:34:33 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:34:24 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:33:53 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:33:44 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:33:33 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:33:23 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:33:23 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:33:13 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:32:19 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:32:09 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:32:00 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:31:51 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:31:50 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:31:41 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:31:39 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:31:30 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:31:27 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:31:18 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:31:12 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:31:03 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:30:59 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:30:50 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:30:36 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:30:26 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:29:32 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:29:22 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:29:20 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:29:11 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:29:08 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:28:59 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:28:55 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:28:46 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:28:40 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:28:31 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:28:30 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:28:20 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:28:19 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:28:10 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:27:46 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:27:37 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:27:37 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:27:28 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:27:26 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:27:17 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:27:04 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:26:55 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:26:38 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:26:29 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:26:20 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:26:10 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:26:08 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:25:59 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:17:38 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:17:29 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:17:25 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:17:16 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:17:12 AM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:17:02 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:16:56 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:16:47 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:16:46 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:16:36 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:16:26 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:16:17 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:16:13 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:16:04 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:15:18 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:15:09 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:15:04 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:14:54 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:14:52 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:14:43 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:14:40 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:14:31 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:14:28 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:14:19 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:14:18 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:14:09 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:14:08 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:13:51 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:13:50 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:13:40 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:13:40 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:13:30 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:13:23 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:13:14 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:13:10 AM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:13:01 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:12:59 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:12:45 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:12:37 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:12:28 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:12:25 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:12:15 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:12:12 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:12:03 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:12:00 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:11:51 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:11:49 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:11:39 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:11:39 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:11:29 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:11:27 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:11:17 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:11:16 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:11:07 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:11:04 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:10:55 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:10:14 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:10:04 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:10:04 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:09:55 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:09:15 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:09:05 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:09:05 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:08:56 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:08:52 AM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:08:43 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:08:39 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:08:30 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:08:14 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:08:05 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:08:01 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:07:52 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:07:52 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:07:42 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:07:39 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:07:30 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:07:19 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:07:10 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:06:57 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:06:47 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:06:45 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:06:36 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:06:29 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:06:20 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:06:11 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:06:02 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:05:58 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:05:48 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:05:47 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:05:37 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:05:33 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:05:24 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:05:21 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:05:12 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:05:06 AM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:04:57 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:04:54 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:04:45 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:04:45 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:04:35 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:04:33 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:04:23 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:04:23 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:04:13 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:04:11 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:04:02 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:03:58 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:03:48 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:03:42 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:03:33 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:02:21 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:02:12 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:02:11 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:02:02 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:01:52 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:01:42 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:01:38 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:01:29 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:01:02 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:00:53 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:00:36 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:00:27 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:00:21 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:00:12 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 7:00:06 AM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:59:56 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:59:50 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:59:40 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:59:39 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 6:59:29 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 3:20:15 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 3:19:57 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:19:09 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:19:00 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:17:43 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:17:34 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:15:39 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:15:29 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:15:17 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:15:08 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:13:15 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:13:05 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:10:55 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:10:45 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:08:20 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:08:11 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:07:18 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:07:08 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:05:42 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:05:33 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:05:33 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:05:23 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:05:21 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/26/2009 12:05:12 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 11:56:33 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 11:56:24 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 11:56:06 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 11:55:57 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 11:55:52 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 11:55:43 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 11:55:40 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 11:55:31 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 11:55:28 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 11:55:19 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 11:55:18 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 11:55:09 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 11:54:42 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 11:54:33 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 11:54:29 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 11:54:20 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:49:14 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:49:04 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:46:12 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:46:03 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:45:33 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:45:24 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:45:23 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:45:14 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:45:13 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:45:03 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:45:01 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:44:52 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:44:49 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:44:40 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:44:39 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:44:30 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:44:26 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:44:16 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:44:09 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:44:00 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:43:48 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:43:38 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:43:37 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:43:28 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:42:10 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:42:01 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:41:40 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:41:30 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:41:19 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:41:10 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:41:10 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:41:00 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:40:50 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:40:40 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:39:28 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:39:18 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:38:48 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:38:39 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:36:43 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:36:34 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:35:05 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:34:56 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:32:36 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:32:27 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:32:26 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:32:16 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:31:04 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:30:55 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:30:02 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:29:53 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:28:57 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:28:48 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:27:59 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:27:50 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:27:47 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:27:38 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:27:36 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:27:27 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:26:57 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:26:47 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:26:45 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:26:35 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:25:22 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:25:12 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:24:49 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:24:40 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:24:30 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:24:21 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:23:17 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:23:08 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:23:02 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:22:53 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:22:26 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:22:16 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:20:06 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:19:57 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:19:56 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:19:47 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:18:37 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:18:28 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:18:23 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:18:14 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:17:48 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:17:39 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:17:15 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:17:05 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:17:04 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:16:54 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:16:35 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:16:26 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:16:17 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:16:08 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:15:58 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:15:49 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:15:32 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:15:23 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:14:09 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:14:00 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:13:33 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:13:24 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:13:22 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:13:13 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:13:08 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:12:59 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:12:45 PM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 10:12:35 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 7:45:36 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 7:45:27 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 7:32:16 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 7:32:07 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 4:02:18 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/25/2009 4:01:57 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/24/2009 2:46:03 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/24/2009 2:45:18 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/24/2009 3:50:35 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/24/2009 3:50:26 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/23/2009 4:59:50 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/23/2009 4:59:40 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/23/2009 4:13:07 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/23/2009 4:12:58 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/22/2009 2:02:37 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/22/2009 2:02:19 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/22/2009 1:57:34 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/22/2009 1:57:25 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/21/2009 7:26:10 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/21/2009 7:25:24 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/21/2009 12:35:30 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/21/2009 12:35:20 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/21/2009 12:33:31 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/21/2009 12:32:51 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/20/2009 11:59:19 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/20/2009 11:59:18 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/20/2009 5:13:51 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/20/2009 5:13:41 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/19/2009 11:31:20 AM Process exit

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL

BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/19/2009 11:31:11 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/19/2009 4:28:19 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/19/2009 4:27:58 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/18/2009 7:21:00 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/18/2009 7:20:51 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/18/2009 4:46:06 AM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/18/2009 4:45:55 AM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/17/2009 10:33:20 PM Process exit
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
11/17/2009 10:33:09 PM Process start
BARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM Process start
VIEWPOINTSERVICE.EXE
12/14/2009 4:09:33 PM Process start
VIEWPOINTSERVICE.EXE
12/10/2009 2:42:15 PM Process start
VIEWPOINTSERVICE.EXE
12/10/2009 4:49:12 AM Process start
VIEWPOINTSERVICE.EXE
12/10/2009 4:08:57 AM Process start
VIEWPOINTSERVICE.EXE
12/9/2009 3:23:36 AM
Process start
VIEWPOINTSERVICE.EXE
12/8/2009 1:20:42 PM
Process start
VIEWPOINTSERVICE.EXE
12/6/2009 12:47:12 AM Process start
VIEWPOINTSERVICE.EXE
12/5/2009 2:24:47 AM
Process start
VIEWPOINTSERVICE.EXE
12/4/2009 6:51:08 PM
Process start
VIEWPOINTSERVICE.EXE
12/3/2009 4:07:07 AM
Process start
VIEWPOINTSERVICE.EXE
12/2/2009 7:36:39 PM
Process start
VIEWPOINTSERVICE.EXE
12/1/2009 3:13:45 AM
Process start
VIEWPOINTSERVICE.EXE
11/30/2009 7:34:03 PM Process start
VIEWPOINTSERVICE.EXE
11/30/2009 5:55:17 PM Process start
VIEWPOINTSERVICE.EXE
11/30/2009 3:32:36 PM Process start
VIEWPOINTSERVICE.EXE
11/26/2009 3:19:48 AM Process start
VIEWPOINTSERVICE.EXE
11/24/2009 2:45:18 PM Process start
VIEWPOINTSERVICE.EXE
11/21/2009 7:25:24 PM Process start
VIEWPOINTSERVICE.EXE
11/21/2009 12:32:51 PM Process start
VIEWPOINTSERVICE.EXE

C:\Program Files (x86)\GOOGLE\GOOGLETOOL


C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\GOOGLE\GOOGLETOOL
C:\Program Files (x86)\VIEWPOINT\COMMON\
C:\Program Files (x86)\VIEWPOINT\COMMON\
C:\Program Files (x86)\VIEWPOINT\COMMON\
C:\Program Files (x86)\VIEWPOINT\COMMON\
C:\Program Files (x86)\VIEWPOINT\COMMON\
C:\Program Files (x86)\VIEWPOINT\COMMON\
C:\Program Files (x86)\VIEWPOINT\COMMON\
C:\Program Files (x86)\VIEWPOINT\COMMON\
C:\Program Files (x86)\VIEWPOINT\COMMON\
C:\Program Files (x86)\VIEWPOINT\COMMON\
C:\Program Files (x86)\VIEWPOINT\COMMON\
C:\Program Files (x86)\VIEWPOINT\COMMON\
C:\Program Files (x86)\VIEWPOINT\COMMON\
C:\Program Files (x86)\VIEWPOINT\COMMON\
C:\Program Files (x86)\VIEWPOINT\COMMON\
C:\Program Files (x86)\VIEWPOINT\COMMON\
C:\Program Files (x86)\VIEWPOINT\COMMON\
C:\Program Files (x86)\VIEWPOINT\COMMON\
C:\Program Files (x86)\VIEWPOINT\COMMON\
C:\Program Files (x86)\VIEWPOINT\COMMON\

11/20/2009 11:59:18 AM Process start C:\Program


VIEWPOINTSERVICE.EXE
11/19/2009 4:27:58 AM Process start C:\Program
VIEWPOINTSERVICE.EXE
11/18/2009 7:16:14 PM Process start C:\Program
VIEWPOINTSERVICE.EXE
11/18/2009 12:50:54 PM Process start C:\Program
VIEWPOINTSERVICE.EXE
11/18/2009 11:18:18 AM Process start C:\Program
VIEWPOINTSERVICE.EXE
11/17/2009 10:33:09 PM Process start C:\Program
VIEWPOINTSERVICE.EXE
11/17/2009 2:48:52 PM Process start C:\Program
VIEWPOINTSERVICE.EXE
dfsvc.exe (events: 7)
12/8/2009 11:34:16 AM Process exit
C:\Program
12/6/2009 3:05:42 AM
Process start C:\Program
12/6/2009 3:05:40 AM
Process exit
C:\Program
12/6/2009 3:05:40 AM
Process start C:\Program
dfsvc.exe (events: 7)
12/8/2009 11:34:16 AM Process exit
C:\Program
EXE
12/6/2009 3:06:50 AM
Process exit
C:\Program
EXE
12/6/2009 3:05:48 AM
Process start C:\Program
EXE
12/6/2009 3:05:45 AM
Process start C:\Program
EXE
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM Process start C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
12/16/2009 7:00:12 AM Process exit
C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
12/14/2009 4:09:33 PM Process start C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
12/14/2009 3:47:50 PM Process exit
C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
12/10/2009 2:42:15 PM Process start C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
12/10/2009 2:22:48 PM Process exit
C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
12/10/2009 4:49:36 AM Process start C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
12/10/2009 4:46:55 AM Process exit
C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
12/10/2009 4:08:57 AM Process start C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
12/9/2009 3:23:35 AM
Process start C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
12/8/2009 9:15:51 PM
Process exit
C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
12/8/2009 1:20:42 PM
Process start C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
12/8/2009 11:34:16 AM Process exit
C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
12/6/2009 12:47:12 AM Process start C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
12/5/2009 7:28:55 PM
Process exit
C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
12/5/2009 2:24:47 AM
Process start C:\Program

Files (x86)\VIEWPOINT\COMMON\
Files (x86)\VIEWPOINT\COMMON\
Files (x86)\VIEWPOINT\COMMON\
Files (x86)\VIEWPOINT\COMMON\
Files (x86)\VIEWPOINT\COMMON\
Files (x86)\VIEWPOINT\COMMON\
Files (x86)\VIEWPOINT\COMMON\
Files
Files
Files
Files

(x86)\AIM6\AIM6.EXE
(x86)\AIM6\AIM6.EXE
(x86)\AIM6\AIM6.EXE
(x86)\AIM6\AIM6.EXE

Files (x86)\AIM6\AOLSOFTWARE.
Files (x86)\AIM6\AOLSOFTWARE.
Files (x86)\AIM6\AOLSOFTWARE.
Files (x86)\AIM6\AOLSOFTWARE.
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE

ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE


12/4/2009 10:43:14 PM Process exit
C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
12/4/2009 6:51:08 PM
Process start C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
12/4/2009 4:27:46 PM
Process exit
C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
12/3/2009 4:07:22 AM
Process start C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
12/2/2009 8:42:06 PM
Process exit
C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
12/2/2009 7:36:39 PM
Process start C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
12/2/2009 3:43:08 PM
Process exit
C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
12/1/2009 3:13:44 AM
Process start C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
11/30/2009 8:00:27 PM Process exit
C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
11/30/2009 7:34:03 PM Process start C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
11/30/2009 6:55:13 PM Process exit
C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
11/30/2009 5:55:17 PM Process start C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
11/30/2009 5:53:06 PM Process exit
C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
11/30/2009 3:32:36 PM Process start C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
11/30/2009 10:18:13 AM Process exit
C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
11/26/2009 3:20:11 AM Process start C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
11/26/2009 3:17:54 AM Process exit
C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
11/24/2009 2:45:18 PM Process start C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
11/24/2009 2:41:30 PM Process exit
C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
11/21/2009 7:25:24 PM Process start C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
11/21/2009 7:11:44 PM Process exit
C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
11/21/2009 12:32:51 PM Process start C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
11/20/2009 6:58:59 PM Process exit
C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
11/20/2009 11:59:18 AM Process start C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
11/20/2009 9:52:53 AM Process exit
C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
11/19/2009 4:27:58 AM Process start C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
11/18/2009 7:43:43 PM Process exit
C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
11/18/2009 7:16:14 PM Process start C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
11/18/2009 6:03:02 PM Process exit
C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
11/18/2009 12:50:54 PM Process start C:\Program

Files (x86)\COMMON FILES\RESE


Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE

ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE


11/18/2009 12:25:18 PM Process exit
C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
11/18/2009 11:18:18 AM Process start C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
11/18/2009 10:34:52 AM Process exit
C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
11/17/2009 10:33:09 PM Process start C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
11/17/2009 6:17:47 PM Process exit
C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
11/17/2009 2:48:52 PM Process start C:\Program
ARCH IN MOTION\AUTO UPDATE\RIMAUTOUPDATE.EXE
dfsvc.exe (events: 7)
12/16/2009 7:03:32 AM Process exit
C:\Program
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
12/16/2009 7:02:41 AM Process start C:\Program
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
12/14/2009 4:11:36 PM Process exit
C:\Program
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
12/14/2009 4:10:58 PM Process start C:\Program
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
12/10/2009 2:44:04 PM Process exit
C:\Program
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
12/10/2009 2:43:11 PM Process start C:\Program
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
12/10/2009 1:58:21 PM Process exit
C:\Program
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
12/10/2009 4:50:52 AM Process start C:\Program
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
12/10/2009 4:10:21 AM Process exit
C:\Program
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
12/10/2009 4:09:41 AM Process start C:\Program
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
12/9/2009 3:28:24 AM
Process exit
C:\Program
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
12/9/2009 3:24:54 AM
Process start C:\Program
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
12/8/2009 1:22:48 PM
Process exit
C:\Program
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
12/8/2009 1:22:19 PM
Process start C:\Program
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
12/6/2009 2:26:11 AM
Process exit
C:\Program
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
12/6/2009 12:48:42 AM Process start C:\Program
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
12/5/2009 2:56:21 AM
Process exit
C:\Program
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
12/5/2009 2:24:47 AM
Process start C:\Program
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
12/4/2009 10:42:46 PM Process exit
C:\Program
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
12/4/2009 6:52:14 PM
Process start C:\Program
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
12/3/2009 4:09:32 AM
Process exit
C:\Program
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
12/3/2009 4:08:44 AM
Process start C:\Program
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
12/2/2009 8:42:06 PM
Process exit
C:\Program
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE

Files (x86)\COMMON FILES\RESE


Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE
Files (x86)\COMMON FILES\RESE

12/2/2009 7:37:53 PM
Process start
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
12/1/2009 3:16:16 AM
Process exit
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
12/1/2009 3:15:24 AM
Process start
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
11/30/2009 8:00:27 PM Process exit
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
11/30/2009 7:35:53 PM Process start
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
11/30/2009 6:05:23 PM Process exit
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
11/30/2009 5:56:50 PM Process start
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
11/30/2009 3:33:59 PM Process exit
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
11/30/2009 3:32:36 PM Process start
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
11/26/2009 6:59:26 AM Process exit
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
11/26/2009 3:20:33 AM Process start
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
11/24/2009 2:54:50 PM Process exit
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
11/24/2009 2:46:37 PM Process start
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
11/21/2009 7:30:24 PM Process exit
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
11/21/2009 7:27:00 PM Process start
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
11/21/2009 12:34:31 PM Process exit
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
11/21/2009 12:33:43 PM Process start
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
11/20/2009 12:01:07 PM Process exit
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
11/20/2009 12:00:27 PM Process start
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
11/19/2009 4:30:11 AM Process exit
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
11/19/2009 4:29:02 AM Process start
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
11/18/2009 7:24:31 PM Process exit
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
11/18/2009 7:16:14 PM Process start
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
11/18/2009 6:03:02 PM Process exit
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
11/18/2009 5:57:33 PM Process start
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
11/18/2009 5:49:29 PM Process exit
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
11/18/2009 5:30:11 PM Process start
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
11/18/2009 12:51:22 PM Process exit
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
11/18/2009 12:50:54 PM Process start
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
11/18/2009 12:25:18 PM Process exit
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE

C:\Program Files (x86)\COMMON FILES\RESE


C:\Program Files (x86)\COMMON FILES\RESE
C:\Program Files (x86)\COMMON FILES\RESE
C:\Program Files (x86)\COMMON FILES\RESE
C:\Program Files (x86)\COMMON FILES\RESE
C:\Program Files (x86)\COMMON FILES\RESE
C:\Program Files (x86)\COMMON FILES\RESE
C:\Program Files (x86)\COMMON FILES\RESE
C:\Program Files (x86)\COMMON FILES\RESE
C:\Program Files (x86)\COMMON FILES\RESE
C:\Program Files (x86)\COMMON FILES\RESE
C:\Program Files (x86)\COMMON FILES\RESE
C:\Program Files (x86)\COMMON FILES\RESE
C:\Program Files (x86)\COMMON FILES\RESE
C:\Program Files (x86)\COMMON FILES\RESE
C:\Program Files (x86)\COMMON FILES\RESE
C:\Program Files (x86)\COMMON FILES\RESE
C:\Program Files (x86)\COMMON FILES\RESE
C:\Program Files (x86)\COMMON FILES\RESE
C:\Program Files (x86)\COMMON FILES\RESE
C:\Program Files (x86)\COMMON FILES\RESE
C:\Program Files (x86)\COMMON FILES\RESE
C:\Program Files (x86)\COMMON FILES\RESE
C:\Program Files (x86)\COMMON FILES\RESE
C:\Program Files (x86)\COMMON FILES\RESE
C:\Program Files (x86)\COMMON FILES\RESE
C:\Program Files (x86)\COMMON FILES\RESE
C:\Program Files (x86)\COMMON FILES\RESE
C:\Program Files (x86)\COMMON FILES\RESE
C:\Program Files (x86)\COMMON FILES\RESE

11/18/2009 11:18:18 AM Process start


ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
11/17/2009 10:53:25 PM Process exit
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
11/17/2009 10:33:09 PM Process start
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
11/17/2009 2:51:41 PM Process exit
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
11/17/2009 2:48:52 PM Process start
ARCH IN MOTION\USB DRIVERS\BBDEVMGR.EXE
dfsvc.exe (events: 7)
12/16/2009 7:03:26 AM Process exit
N\BLACKBERRY\DESKTOPMGR.EXE
12/16/2009 7:02:15 AM Process start
N\BLACKBERRY\DESKTOPMGR.EXE
12/14/2009 4:11:30 PM Process exit
N\BLACKBERRY\DESKTOPMGR.EXE
12/14/2009 4:09:33 PM Process start
N\BLACKBERRY\DESKTOPMGR.EXE
12/10/2009 2:43:58 PM Process exit
N\BLACKBERRY\DESKTOPMGR.EXE
12/10/2009 2:42:15 PM Process start
N\BLACKBERRY\DESKTOPMGR.EXE
12/10/2009 1:58:15 PM Process exit
N\BLACKBERRY\DESKTOPMGR.EXE
12/10/2009 4:49:32 AM Process start
N\BLACKBERRY\DESKTOPMGR.EXE
12/10/2009 4:10:15 AM Process exit
N\BLACKBERRY\DESKTOPMGR.EXE
12/10/2009 4:08:57 AM Process start
N\BLACKBERRY\DESKTOPMGR.EXE
12/9/2009 3:28:19 AM
Process exit
N\BLACKBERRY\DESKTOPMGR.EXE
12/9/2009 3:23:35 AM
Process start
N\BLACKBERRY\DESKTOPMGR.EXE
12/8/2009 1:22:43 PM
Process exit
N\BLACKBERRY\DESKTOPMGR.EXE
12/8/2009 1:20:42 PM
Process start
N\BLACKBERRY\DESKTOPMGR.EXE
12/6/2009 2:26:06 AM
Process exit
N\BLACKBERRY\DESKTOPMGR.EXE
12/6/2009 12:47:12 AM Process start
N\BLACKBERRY\DESKTOPMGR.EXE
12/5/2009 2:56:15 AM
Process exit
N\BLACKBERRY\DESKTOPMGR.EXE
12/5/2009 2:24:47 AM
Process start
N\BLACKBERRY\DESKTOPMGR.EXE
12/4/2009 10:42:41 PM Process exit
N\BLACKBERRY\DESKTOPMGR.EXE
12/4/2009 6:51:08 PM
Process start
N\BLACKBERRY\DESKTOPMGR.EXE
12/3/2009 4:09:26 AM
Process exit
N\BLACKBERRY\DESKTOPMGR.EXE
12/3/2009 4:07:16 AM
Process start
N\BLACKBERRY\DESKTOPMGR.EXE
12/2/2009 8:42:06 PM
Process exit
N\BLACKBERRY\DESKTOPMGR.EXE
12/2/2009 7:36:39 PM
Process start
N\BLACKBERRY\DESKTOPMGR.EXE
12/1/2009 3:16:11 AM
Process exit

C:\Program Files (x86)\COMMON FILES\RESE


C:\Program Files (x86)\COMMON FILES\RESE
C:\Program Files (x86)\COMMON FILES\RESE
C:\Program Files (x86)\COMMON FILES\RESE
C:\Program Files (x86)\COMMON FILES\RESE
C:\Program Files (x86)\RESEARCH IN MOTIO
C:\Program Files (x86)\RESEARCH IN MOTIO
C:\Program Files (x86)\RESEARCH IN MOTIO
C:\Program Files (x86)\RESEARCH IN MOTIO
C:\Program Files (x86)\RESEARCH IN MOTIO
C:\Program Files (x86)\RESEARCH IN MOTIO
C:\Program Files (x86)\RESEARCH IN MOTIO
C:\Program Files (x86)\RESEARCH IN MOTIO
C:\Program Files (x86)\RESEARCH IN MOTIO
C:\Program Files (x86)\RESEARCH IN MOTIO
C:\Program Files (x86)\RESEARCH IN MOTIO
C:\Program Files (x86)\RESEARCH IN MOTIO
C:\Program Files (x86)\RESEARCH IN MOTIO
C:\Program Files (x86)\RESEARCH IN MOTIO
C:\Program Files (x86)\RESEARCH IN MOTIO
C:\Program Files (x86)\RESEARCH IN MOTIO
C:\Program Files (x86)\RESEARCH IN MOTIO
C:\Program Files (x86)\RESEARCH IN MOTIO
C:\Program Files (x86)\RESEARCH IN MOTIO
C:\Program Files (x86)\RESEARCH IN MOTIO
C:\Program Files (x86)\RESEARCH IN MOTIO
C:\Program Files (x86)\RESEARCH IN MOTIO
C:\Program Files (x86)\RESEARCH IN MOTIO
C:\Program Files (x86)\RESEARCH IN MOTIO
C:\Program Files (x86)\RESEARCH IN MOTIO

N\BLACKBERRY\DESKTOPMGR.EXE
12/1/2009 3:13:44 AM
Process
N\BLACKBERRY\DESKTOPMGR.EXE
11/30/2009 8:00:27 PM Process
N\BLACKBERRY\DESKTOPMGR.EXE
11/30/2009 7:34:03 PM Process
N\BLACKBERRY\DESKTOPMGR.EXE
11/30/2009 5:57:21 PM Process
N\BLACKBERRY\DESKTOPMGR.EXE
11/30/2009 5:55:17 PM Process
N\BLACKBERRY\DESKTOPMGR.EXE
11/30/2009 3:33:53 PM Process
N\BLACKBERRY\DESKTOPMGR.EXE
11/30/2009 3:32:36 PM Process
N\BLACKBERRY\DESKTOPMGR.EXE
11/26/2009 6:59:21 AM Process
N\BLACKBERRY\DESKTOPMGR.EXE
11/26/2009 3:20:09 AM Process
N\BLACKBERRY\DESKTOPMGR.EXE
11/24/2009 2:54:44 PM Process
N\BLACKBERRY\DESKTOPMGR.EXE
11/24/2009 2:45:18 PM Process
N\BLACKBERRY\DESKTOPMGR.EXE
11/21/2009 7:30:18 PM Process
N\BLACKBERRY\DESKTOPMGR.EXE
11/21/2009 7:25:24 PM Process
N\BLACKBERRY\DESKTOPMGR.EXE
11/21/2009 12:34:26 PM Process
N\BLACKBERRY\DESKTOPMGR.EXE
11/21/2009 12:32:51 PM Process
N\BLACKBERRY\DESKTOPMGR.EXE
11/20/2009 12:01:01 PM Process
N\BLACKBERRY\DESKTOPMGR.EXE
11/20/2009 11:59:18 AM Process
N\BLACKBERRY\DESKTOPMGR.EXE
11/19/2009 4:30:04 AM Process
N\BLACKBERRY\DESKTOPMGR.EXE
11/19/2009 4:27:58 AM Process
N\BLACKBERRY\DESKTOPMGR.EXE
11/18/2009 7:24:26 PM Process
N\BLACKBERRY\DESKTOPMGR.EXE
11/18/2009 7:16:14 PM Process
N\BLACKBERRY\DESKTOPMGR.EXE
11/18/2009 6:02:57 PM Process
N\BLACKBERRY\DESKTOPMGR.EXE
11/18/2009 5:57:31 PM Process
N\BLACKBERRY\DESKTOPMGR.EXE
11/18/2009 5:41:40 PM Process
N\BLACKBERRY\DESKTOPMGR.EXE
11/18/2009 5:30:09 PM Process
N\BLACKBERRY\DESKTOPMGR.EXE
11/18/2009 12:51:17 PM Process
N\BLACKBERRY\DESKTOPMGR.EXE
11/18/2009 12:50:54 PM Process
N\BLACKBERRY\DESKTOPMGR.EXE
11/18/2009 12:25:18 PM Process
N\BLACKBERRY\DESKTOPMGR.EXE
11/18/2009 11:18:18 AM Process
N\BLACKBERRY\DESKTOPMGR.EXE
11/17/2009 10:53:20 PM Process

start

C:\Program Files (x86)\RESEARCH IN MOTIO

exit

C:\Program Files (x86)\RESEARCH IN MOTIO

start

C:\Program Files (x86)\RESEARCH IN MOTIO

exit

C:\Program Files (x86)\RESEARCH IN MOTIO

start

C:\Program Files (x86)\RESEARCH IN MOTIO

exit

C:\Program Files (x86)\RESEARCH IN MOTIO

start

C:\Program Files (x86)\RESEARCH IN MOTIO

exit

C:\Program Files (x86)\RESEARCH IN MOTIO

start

C:\Program Files (x86)\RESEARCH IN MOTIO

exit

C:\Program Files (x86)\RESEARCH IN MOTIO

start

C:\Program Files (x86)\RESEARCH IN MOTIO

exit

C:\Program Files (x86)\RESEARCH IN MOTIO

start

C:\Program Files (x86)\RESEARCH IN MOTIO

exit

C:\Program Files (x86)\RESEARCH IN MOTIO

start

C:\Program Files (x86)\RESEARCH IN MOTIO

exit

C:\Program Files (x86)\RESEARCH IN MOTIO

start

C:\Program Files (x86)\RESEARCH IN MOTIO

exit

C:\Program Files (x86)\RESEARCH IN MOTIO

start

C:\Program Files (x86)\RESEARCH IN MOTIO

exit

C:\Program Files (x86)\RESEARCH IN MOTIO

start

C:\Program Files (x86)\RESEARCH IN MOTIO

exit

C:\Program Files (x86)\RESEARCH IN MOTIO

start

C:\Program Files (x86)\RESEARCH IN MOTIO

exit

C:\Program Files (x86)\RESEARCH IN MOTIO

start

C:\Program Files (x86)\RESEARCH IN MOTIO

exit

C:\Program Files (x86)\RESEARCH IN MOTIO

start

C:\Program Files (x86)\RESEARCH IN MOTIO

exit

C:\Program Files (x86)\RESEARCH IN MOTIO

start

C:\Program Files (x86)\RESEARCH IN MOTIO

exit

C:\Program Files (x86)\RESEARCH IN MOTIO

N\BLACKBERRY\DESKTOPMGR.EXE
11/17/2009 10:33:09 PM Process start C:\Program Files
N\BLACKBERRY\DESKTOPMGR.EXE
11/17/2009 2:51:36 PM Process exit
C:\Program Files
N\BLACKBERRY\DESKTOPMGR.EXE
11/17/2009 2:48:52 PM Process start C:\Program Files
N\BLACKBERRY\DESKTOPMGR.EXE
dfsvc.exe (events: 7)
12/16/2009 7:03:32 AM Process exit
C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
12/16/2009 7:02:38 AM Process start C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
12/14/2009 4:11:36 PM Process exit
C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
12/14/2009 4:10:38 PM Process start C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
12/10/2009 2:44:04 PM Process exit
C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
12/10/2009 2:43:07 PM Process start C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
12/10/2009 1:58:21 PM Process exit
C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
12/10/2009 4:50:31 AM Process start C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
12/10/2009 4:10:21 AM Process exit
C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
12/10/2009 4:09:40 AM Process start C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
12/9/2009 3:28:25 AM
Process exit
C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
12/9/2009 3:24:53 AM
Process start C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
12/8/2009 1:22:49 PM
Process exit
C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
12/8/2009 1:21:54 PM
Process start C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
12/6/2009 2:26:12 AM
Process exit
C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
12/6/2009 12:48:35 AM Process start C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
12/5/2009 2:56:21 AM
Process exit
C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
12/5/2009 2:24:47 AM
Process start C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
12/4/2009 10:42:47 PM Process exit
C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
12/4/2009 6:52:12 PM
Process start C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
12/3/2009 4:09:32 AM
Process exit
C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
12/3/2009 4:08:37 AM
Process start C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
12/2/2009 8:42:06 PM
Process exit
C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
12/2/2009 7:37:32 PM
Process start C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
12/1/2009 3:16:17 AM
Process exit
C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
12/1/2009 3:15:21 AM
Process start C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE

(x86)\RESEARCH IN MOTIO
(x86)\RESEARCH IN MOTIO
(x86)\RESEARCH IN MOTIO
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE

11/30/2009 8:00:27 PM Process exit


C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
11/30/2009 7:35:35 PM Process start C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
11/30/2009 6:05:24 PM Process exit
C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
11/30/2009 5:56:35 PM Process start C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
11/30/2009 3:34:00 PM Process exit
C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
11/30/2009 3:32:36 PM Process start C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
11/26/2009 6:59:27 AM Process exit
C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
11/26/2009 3:20:31 AM Process start C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
11/24/2009 2:54:50 PM Process exit
C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
11/24/2009 2:46:36 PM Process start C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
11/21/2009 7:30:24 PM Process exit
C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
11/21/2009 7:26:38 PM Process start C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
11/21/2009 12:34:32 PM Process exit
C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
11/21/2009 12:33:34 PM Process start C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
11/20/2009 12:01:07 PM Process exit
C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
11/20/2009 12:00:22 PM Process start C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
11/19/2009 4:30:11 AM Process exit
C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
11/19/2009 4:29:00 AM Process start C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
11/18/2009 7:24:32 PM Process exit
C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
11/18/2009 7:16:14 PM Process start C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
11/18/2009 6:03:02 PM Process exit
C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
11/18/2009 5:57:33 PM Process start C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
11/18/2009 5:49:29 PM Process exit
C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
11/18/2009 5:30:11 PM Process start C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
11/18/2009 12:51:23 PM Process exit
C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
11/18/2009 12:50:54 PM Process start C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
11/18/2009 12:25:18 PM Process exit
C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
11/18/2009 11:18:18 AM Process start C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
11/17/2009 10:53:26 PM Process exit
C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
11/17/2009 10:33:09 PM Process start C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE

(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE

11/17/2009 2:51:42 PM Process exit


C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
11/17/2009 2:48:52 PM Process start C:\Program Files
ARCH IN MOTION\RIMDEVICEMANAGER\RIMDEVICEMANAGER.EXE
dfsvc.exe (events: 7)
12/16/2009 8:05:58 AM Process exit
C:\Program Files
LBAR\GOOGLETOOLBARUSER_32.EXE
12/16/2009 8:05:58 AM Process start C:\Program Files
LBAR\GOOGLETOOLBARUSER_32.EXE
12/16/2009 8:05:58 AM Process start C:\Program Files
LBAR\GOOGLETOOLBARUSER_32.EXE
12/16/2009 7:09:23 AM Process exit
C:\Program Files
LBAR\GOOGLETOOLBARUSER_32.EXE
12/16/2009 7:02:56 AM Process exit
C:\Program Files
LBAR\GOOGLETOOLBARUSER_32.EXE
12/16/2009 7:02:55 AM Process start C:\Program Files
LBAR\GOOGLETOOLBARUSER_32.EXE
12/16/2009 7:02:55 AM Process start C:\Program Files
LBAR\GOOGLETOOLBARUSER_32.EXE
12/16/2009 7:00:12 AM Process exit
C:\Program Files
LBAR\GOOGLETOOLBARUSER_32.EXE
12/16/2009 6:47:32 AM Process exit
C:\Program Files
LBAR\GOOGLETOOLBARUSER_32.EXE
12/16/2009 6:47:32 AM Process start C:\Program Files
LBAR\GOOGLETOOLBARUSER_32.EXE
12/16/2009 6:47:32 AM Process start C:\Program Files
LBAR\GOOGLETOOLBARUSER_32.EXE
12/16/2009 4:45:47 AM Process exit
C:\Program Files
LBAR\GOOGLETOOLBARUSER_32.EXE
12/16/2009 4:39:37 AM Process exit
C:\Program Files
LBAR\GOOGLETOOLBARUSER_32.EXE
12/16/2009 4:39:37 AM Process start C:\Program Files
LBAR\GOOGLETOOLBARUSER_32.EXE
12/16/2009 4:39:37 AM Process start C:\Program Files
LBAR\GOOGLETOOLBARUSER_32.EXE
12/16/2009 4:39:37 AM Process exit
C:\Program Files
LBAR\GOOGLETOOLBARUSER_32.EXE
12/16/2009 4:35:03 AM Process exit
C:\Program Files
LBAR\GOOGLETOOLBARUSER_32.EXE
12/16/2009 4:35:03 AM Process start C:\Program Files
LBAR\GOOGLETOOLBARUSER_32.EXE
12/16/2009 4:35:03 AM Process start C:\Program Files
LBAR\GOOGLETOOLBARUSER_32.EXE
12/16/2009 3:22:54 AM Process exit
C:\Program Files
LBAR\GOOGLETOOLBARUSER_32.EXE
12/16/2009 3:18:53 AM Process start C:\Program Files
LBAR\GOOGLETOOLBARUSER_32.EXE
12/16/2009 3:18:53 AM Process exit
C:\Program Files
LBAR\GOOGLETOOLBARUSER_32.EXE
12/16/2009 3:18:53 AM Process start C:\Program Files
LBAR\GOOGLETOOLBARUSER_32.EXE
12/16/2009 12:06:27 AM Process exit
C:\Program Files
LBAR\GOOGLETOOLBARUSER_32.EXE
12/15/2009 10:57:26 PM Process exit
C:\Program Files
LBAR\GOOGLETOOLBARUSER_32.EXE
12/15/2009 10:57:26 PM Process start C:\Program Files
LBAR\GOOGLETOOLBARUSER_32.EXE
12/15/2009 10:57:26 PM Process start C:\Program Files
LBAR\GOOGLETOOLBARUSER_32.EXE
12/15/2009 10:50:57 PM Process exit
C:\Program Files

(x86)\COMMON FILES\RESE
(x86)\COMMON FILES\RESE
(x86)\GOOGLE\GOOGLE TOO
(x86)\GOOGLE\GOOGLE TOO
(x86)\GOOGLE\GOOGLE TOO
(x86)\GOOGLE\GOOGLE TOO
(x86)\GOOGLE\GOOGLE TOO
(x86)\GOOGLE\GOOGLE TOO
(x86)\GOOGLE\GOOGLE TOO
(x86)\GOOGLE\GOOGLE TOO
(x86)\GOOGLE\GOOGLE TOO
(x86)\GOOGLE\GOOGLE TOO
(x86)\GOOGLE\GOOGLE TOO
(x86)\GOOGLE\GOOGLE TOO
(x86)\GOOGLE\GOOGLE TOO
(x86)\GOOGLE\GOOGLE TOO
(x86)\GOOGLE\GOOGLE TOO
(x86)\GOOGLE\GOOGLE TOO
(x86)\GOOGLE\GOOGLE TOO
(x86)\GOOGLE\GOOGLE TOO
(x86)\GOOGLE\GOOGLE TOO
(x86)\GOOGLE\GOOGLE TOO
(x86)\GOOGLE\GOOGLE TOO
(x86)\GOOGLE\GOOGLE TOO
(x86)\GOOGLE\GOOGLE TOO
(x86)\GOOGLE\GOOGLE TOO
(x86)\GOOGLE\GOOGLE TOO
(x86)\GOOGLE\GOOGLE TOO
(x86)\GOOGLE\GOOGLE TOO
(x86)\GOOGLE\GOOGLE TOO

LBAR\GOOGLETOOLBARUSER_32.EXE
12/15/2009 8:31:48 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/15/2009 8:31:48 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/15/2009 8:31:48 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/15/2009 8:31:45 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/15/2009 7:06:53 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/15/2009 7:06:53 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/15/2009 7:06:53 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/15/2009 6:44:56 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/15/2009 6:37:12 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/15/2009 6:37:12 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/15/2009 6:37:12 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/15/2009 5:09:04 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/15/2009 5:01:51 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/15/2009 5:01:51 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/15/2009 5:01:51 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/15/2009 2:59:04 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/15/2009 2:56:02 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/15/2009 2:56:02 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/15/2009 2:56:02 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/15/2009 11:17:16 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/15/2009 11:14:52 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/15/2009 11:14:52 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/15/2009 11:14:52 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/15/2009 7:29:47 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/15/2009 5:32:15 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/15/2009 5:32:15 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/15/2009 5:32:15 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/15/2009 4:16:07 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/14/2009 7:43:31 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/14/2009 7:43:31 PM Process

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

LBAR\GOOGLETOOLBARUSER_32.EXE
12/14/2009 7:43:31 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/14/2009 6:28:07 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/14/2009 6:18:24 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/14/2009 6:18:24 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/14/2009 6:18:24 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/14/2009 5:43:51 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/14/2009 5:39:39 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/14/2009 5:39:38 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/14/2009 5:39:38 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/14/2009 4:27:22 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/14/2009 4:12:06 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/14/2009 4:12:06 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/14/2009 4:12:06 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/14/2009 4:12:02 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/14/2009 4:11:59 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/14/2009 4:11:58 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/14/2009 4:11:58 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/14/2009 3:22:04 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/14/2009 3:08:28 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/14/2009 3:08:28 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/14/2009 3:08:28 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/14/2009 10:19:12 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/14/2009 10:11:57 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/14/2009 10:11:57 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/14/2009 10:11:57 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/14/2009 5:04:06 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/14/2009 4:06:29 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/14/2009 4:06:29 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/14/2009 4:06:29 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/14/2009 12:26:21 AM Process

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

LBAR\GOOGLETOOLBARUSER_32.EXE
12/13/2009 7:49:40 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/13/2009 7:49:40 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/13/2009 7:49:40 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/13/2009 3:34:36 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/13/2009 3:17:42 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/13/2009 3:17:42 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/13/2009 3:17:42 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/13/2009 2:30:30 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/13/2009 2:07:12 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/13/2009 2:07:12 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/13/2009 2:07:12 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/13/2009 2:07:11 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/13/2009 1:57:57 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/13/2009 1:57:57 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/13/2009 1:57:57 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/13/2009 5:25:01 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/13/2009 5:11:24 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/13/2009 5:11:24 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/13/2009 5:11:24 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/13/2009 5:11:23 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/13/2009 4:41:18 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/13/2009 4:41:18 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/13/2009 4:41:18 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/12/2009 8:48:03 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/12/2009 8:30:31 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/12/2009 8:30:31 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/12/2009 8:30:31 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/12/2009 8:23:53 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/12/2009 5:35:40 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/12/2009 5:35:40 PM Process

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

LBAR\GOOGLETOOLBARUSER_32.EXE
12/12/2009 5:35:40 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/12/2009 5:35:37 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/12/2009 5:32:37 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/12/2009 5:32:37 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/12/2009 5:32:37 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/12/2009 4:07:55 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/12/2009 4:03:33 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/12/2009 4:03:33 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/12/2009 4:03:33 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/12/2009 4:00:37 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/12/2009 3:32:23 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/12/2009 3:32:23 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/12/2009 3:32:23 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/12/2009 12:04:10 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/12/2009 11:53:14 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/12/2009 11:53:14 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/12/2009 11:53:14 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/12/2009 11:42:44 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/12/2009 11:03:32 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/12/2009 11:03:32 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/12/2009 11:03:32 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/12/2009 6:42:48 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 8:00:20 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 8:00:20 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 8:00:20 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 7:43:04 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 7:34:51 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 7:34:51 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 7:34:51 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 7:34:48 PM Process

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 7:34:46 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 7:34:46 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 7:34:46 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 7:34:44 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 7:34:41 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 7:34:41 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 7:34:41 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 7:29:17 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 7:25:17 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 7:25:17 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 7:25:17 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 7:25:11 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 5:47:50 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 5:47:50 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 5:47:50 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 5:19:57 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 5:07:19 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 5:07:19 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 5:07:19 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 4:59:00 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 4:50:12 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 4:50:12 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 4:50:12 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 4:31:53 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 1:32:05 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 1:32:05 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 1:32:05 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 1:30:58 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 1:28:02 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 1:28:01 PM Process

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 1:28:01 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 1:26:24 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 10:04:33 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 10:04:33 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 10:04:33 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 10:04:30 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 9:09:32 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 9:09:32 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 9:09:32 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 6:15:54 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 5:59:20 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 5:59:20 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 5:59:20 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 4:18:42 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 3:56:06 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 3:56:06 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/11/2009 3:56:06 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/10/2009 3:08:14 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/10/2009 2:44:37 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/10/2009 2:44:36 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/10/2009 2:44:36 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/10/2009 2:22:42 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/10/2009 1:58:44 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/10/2009 1:58:44 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/10/2009 1:58:44 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/10/2009 4:33:59 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/10/2009 4:10:42 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/10/2009 4:10:41 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/10/2009 4:10:41 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/8/2009 9:15:51 PM
Process

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

LBAR\GOOGLETOOLBARUSER_32.EXE
12/8/2009 9:15:46 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/8/2009 9:15:46 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/8/2009 9:15:46 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/8/2009 9:15:41 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/8/2009 9:08:06 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/8/2009 9:08:06 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/8/2009 9:08:06 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/8/2009 2:28:21 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/8/2009 1:23:05 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/8/2009 1:23:03 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/8/2009 1:23:02 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/8/2009 11:25:55 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/8/2009 10:50:44 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/8/2009 10:50:44 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/8/2009 10:50:44 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/8/2009 4:51:20 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/8/2009 4:41:14 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/8/2009 4:41:14 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/8/2009 4:41:14 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/8/2009 4:41:09 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/8/2009 4:40:45 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/8/2009 4:40:45 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/8/2009 4:40:45 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/8/2009 4:40:42 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/8/2009 4:40:40 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/8/2009 4:40:40 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/8/2009 4:40:40 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/8/2009 4:38:16 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/8/2009 4:26:41 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/8/2009 4:26:41 AM
Process

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

LBAR\GOOGLETOOLBARUSER_32.EXE
12/8/2009 4:26:41 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/8/2009 2:42:39 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/8/2009 12:11:21 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/8/2009 12:11:21 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/8/2009 12:11:21 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/7/2009 11:57:25 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/7/2009 11:39:28 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/7/2009 11:39:28 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/7/2009 11:39:28 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/7/2009 4:45:11 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/7/2009 4:37:39 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/7/2009 4:37:39 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/7/2009 4:37:39 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/7/2009 3:48:56 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/7/2009 3:21:34 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/7/2009 3:21:34 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/7/2009 3:21:34 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/7/2009 3:21:33 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/7/2009 3:13:21 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/7/2009 3:13:21 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/7/2009 3:13:21 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/7/2009 2:36:15 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/7/2009 2:05:57 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/7/2009 2:05:57 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/7/2009 2:05:57 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/7/2009 6:42:11 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/7/2009 6:17:52 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/7/2009 6:17:52 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/7/2009 6:17:52 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/7/2009 6:04:05 AM
Process

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

LBAR\GOOGLETOOLBARUSER_32.EXE
12/7/2009 6:01:24 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/7/2009 6:01:24 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/7/2009 6:01:24 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/7/2009 5:21:37 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/7/2009 4:01:45 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/7/2009 4:01:45 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/7/2009 4:01:45 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/6/2009 3:29:26 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/6/2009 2:47:05 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/6/2009 2:47:05 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/6/2009 2:47:05 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/6/2009 2:46:10 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/6/2009 2:39:52 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/6/2009 2:39:52 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/6/2009 2:39:52 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/6/2009 2:39:49 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/6/2009 2:04:55 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/6/2009 2:04:55 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/6/2009 2:04:55 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/6/2009 5:03:56 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/6/2009 3:51:59 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/6/2009 3:51:59 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/6/2009 3:51:59 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/6/2009 3:51:59 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/6/2009 2:26:09 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/6/2009 2:26:09 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/6/2009 2:26:09 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/5/2009 7:28:55 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/5/2009 6:23:42 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/5/2009 6:23:42 PM
Process

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

LBAR\GOOGLETOOLBARUSER_32.EXE
12/5/2009 6:23:42 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/5/2009 6:22:05 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/5/2009 4:32:25 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/5/2009 4:32:25 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/5/2009 4:32:25 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/5/2009 4:29:56 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/5/2009 4:27:42 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/5/2009 4:27:42 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/5/2009 4:27:42 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/5/2009 4:15:08 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/5/2009 4:12:09 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/5/2009 4:12:09 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/5/2009 4:12:09 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/5/2009 1:52:51 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/5/2009 1:21:21 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/5/2009 1:21:21 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/5/2009 1:21:21 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/5/2009 1:10:27 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/5/2009 12:28:33 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/5/2009 12:28:33 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/5/2009 12:28:33 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/5/2009 12:28:31 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/5/2009 2:56:19 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/5/2009 2:56:19 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/5/2009 2:56:19 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/4/2009 10:42:45 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/4/2009 6:52:25 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/4/2009 6:52:24 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/4/2009 6:52:24 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/4/2009 4:27:39 PM
Process

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

LBAR\GOOGLETOOLBARUSER_32.EXE
12/4/2009 4:21:43 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/4/2009 4:21:43 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/4/2009 4:21:43 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/4/2009 3:55:11 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/4/2009 3:53:17 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/4/2009 3:53:17 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/4/2009 3:53:17 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/4/2009 3:53:11 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/4/2009 3:43:29 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/4/2009 3:43:29 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/4/2009 3:43:29 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/4/2009 2:45:52 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/4/2009 2:36:53 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/4/2009 2:36:53 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/4/2009 2:36:53 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/4/2009 1:32:34 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/4/2009 1:21:09 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/4/2009 1:21:09 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/4/2009 1:21:09 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/4/2009 12:26:37 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/4/2009 12:10:18 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/4/2009 12:10:18 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/4/2009 12:10:18 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/4/2009 12:10:06 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/4/2009 11:59:32 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/4/2009 11:59:32 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/4/2009 11:59:32 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/4/2009 4:56:46 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/4/2009 4:18:22 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/4/2009 4:18:22 AM
Process

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

LBAR\GOOGLETOOLBARUSER_32.EXE
12/4/2009 4:18:22 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/3/2009 2:32:10 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/3/2009 2:20:21 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/3/2009 2:20:20 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/3/2009 2:20:20 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/3/2009 2:20:19 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/3/2009 2:06:07 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/3/2009 2:06:07 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/3/2009 2:06:07 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/3/2009 5:04:39 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/3/2009 4:08:59 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/3/2009 4:08:58 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/3/2009 4:08:57 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 8:41:58 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 8:41:16 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 8:41:16 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 8:41:16 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 8:38:14 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 7:36:57 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 7:36:56 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 7:36:56 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 3:43:02 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 3:32:47 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 3:32:47 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 3:32:47 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 3:12:21 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 3:10:47 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 3:10:47 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 3:10:47 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 3:04:28 PM
Process

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 2:59:26 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 2:59:26 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 2:59:26 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 2:43:49 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 2:41:59 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 2:41:59 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 2:41:59 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 1:45:26 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 1:41:21 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 1:41:21 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 1:41:21 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 12:17:22 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 12:09:19 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 12:09:19 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 12:09:19 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 11:42:42 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 11:30:02 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 11:30:02 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 11:30:02 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 6:48:22 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 6:32:09 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 6:32:09 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 6:32:09 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 6:06:50 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 5:52:03 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 5:52:03 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 5:52:03 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 3:45:33 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 3:07:02 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 3:07:02 AM
Process

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

LBAR\GOOGLETOOLBARUSER_32.EXE
12/2/2009 3:07:02 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/1/2009 6:10:25 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/1/2009 6:03:50 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/1/2009 6:03:50 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/1/2009 6:03:50 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/1/2009 3:18:19 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/1/2009 3:10:16 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/1/2009 3:10:16 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/1/2009 3:10:16 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/1/2009 2:32:28 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/1/2009 1:46:38 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/1/2009 1:46:38 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/1/2009 1:46:38 PM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/1/2009 6:17:20 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/1/2009 5:56:03 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/1/2009 5:56:03 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/1/2009 5:56:03 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/1/2009 4:44:02 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/1/2009 4:18:49 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/1/2009 4:18:49 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/1/2009 4:18:49 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/1/2009 4:18:49 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/1/2009 4:12:06 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/1/2009 4:12:06 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/1/2009 4:12:06 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/1/2009 4:12:04 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/1/2009 4:03:28 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/1/2009 4:03:28 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/1/2009 4:03:28 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/1/2009 3:44:16 AM
Process

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

LBAR\GOOGLETOOLBARUSER_32.EXE
12/1/2009 3:16:17 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/1/2009 3:16:15 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
12/1/2009 3:16:15 AM
Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/30/2009 4:06:11 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/30/2009 3:34:48 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/30/2009 3:34:46 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/30/2009 3:34:46 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/30/2009 10:18:08 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/30/2009 10:12:45 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/30/2009 10:12:45 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/30/2009 10:12:45 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/30/2009 5:44:38 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/29/2009 2:31:54 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/29/2009 2:31:54 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/29/2009 2:31:54 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/29/2009 2:31:47 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/29/2009 2:28:36 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/29/2009 2:28:36 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/29/2009 2:28:36 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/29/2009 2:15:54 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/29/2009 2:06:07 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/29/2009 2:06:07 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/29/2009 2:06:07 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/29/2009 5:07:45 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/29/2009 4:51:56 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/29/2009 4:51:56 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/29/2009 4:51:56 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/28/2009 6:03:44 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/28/2009 5:20:24 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/28/2009 5:20:24 PM Process

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

LBAR\GOOGLETOOLBARUSER_32.EXE
11/28/2009 5:20:24 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/28/2009 4:42:24 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/28/2009 4:41:49 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/28/2009 4:41:49 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/28/2009 4:41:49 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/28/2009 4:41:06 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/28/2009 4:03:03 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/28/2009 4:03:03 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/28/2009 4:03:03 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/28/2009 3:33:45 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/28/2009 3:15:25 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/28/2009 3:15:25 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/28/2009 3:15:25 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/28/2009 3:14:06 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/28/2009 2:40:42 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/28/2009 2:40:42 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/28/2009 2:40:42 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/28/2009 12:04:59 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/28/2009 11:57:10 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/28/2009 11:57:09 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/28/2009 11:57:09 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/28/2009 11:38:05 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/27/2009 8:49:42 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/27/2009 8:49:42 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/27/2009 8:49:42 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/27/2009 3:21:06 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/27/2009 3:07:49 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/27/2009 3:07:49 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/27/2009 3:07:49 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/27/2009 12:15:02 PM Process

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

LBAR\GOOGLETOOLBARUSER_32.EXE
11/27/2009 11:27:36 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/27/2009 11:27:36 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/27/2009 11:27:36 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/27/2009 11:27:30 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/27/2009 11:27:28 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/27/2009 11:27:28 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/27/2009 11:27:28 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/27/2009 2:32:06 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/27/2009 2:23:22 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/27/2009 2:23:22 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/27/2009 2:23:22 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/27/2009 2:23:15 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/27/2009 1:51:12 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/27/2009 1:51:12 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/27/2009 1:51:12 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/27/2009 1:51:06 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/27/2009 12:34:20 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/27/2009 12:34:20 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/27/2009 12:34:20 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/26/2009 6:56:01 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/26/2009 6:36:23 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/26/2009 6:36:23 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/26/2009 6:36:23 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/26/2009 6:01:23 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/26/2009 5:42:15 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/26/2009 5:42:15 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/26/2009 5:42:15 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/26/2009 5:42:08 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/26/2009 5:41:42 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/26/2009 5:41:42 PM Process

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

LBAR\GOOGLETOOLBARUSER_32.EXE
11/26/2009 5:41:42 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/26/2009 5:16:32 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/26/2009 4:36:58 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/26/2009 4:36:58 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/26/2009 4:36:58 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/26/2009 2:26:42 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/26/2009 2:15:42 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/26/2009 2:15:42 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/26/2009 2:15:42 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/26/2009 2:15:36 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/26/2009 2:13:47 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/26/2009 2:13:47 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/26/2009 2:13:47 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/26/2009 12:37:13 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/26/2009 12:25:54 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/26/2009 12:25:54 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/26/2009 12:25:54 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/26/2009 7:17:33 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/26/2009 6:59:26 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/26/2009 6:59:26 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/26/2009 6:59:26 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/26/2009 12:19:05 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/26/2009 12:18:58 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/26/2009 12:18:58 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/26/2009 12:18:57 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/26/2009 12:18:49 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/25/2009 10:40:39 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/25/2009 10:40:39 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/25/2009 10:40:39 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/25/2009 10:39:50 PM Process

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

LBAR\GOOGLETOOLBARUSER_32.EXE
11/25/2009 10:27:25 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/25/2009 10:27:25 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/25/2009 10:27:25 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/25/2009 10:27:23 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/25/2009 10:12:35 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/25/2009 10:12:35 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/25/2009 10:12:35 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/25/2009 7:45:25 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/25/2009 7:32:06 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/25/2009 7:32:06 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/25/2009 7:32:06 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/25/2009 3:09:00 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/25/2009 2:26:09 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/25/2009 2:26:09 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/25/2009 2:26:09 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/25/2009 2:25:02 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/25/2009 2:02:52 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/25/2009 2:02:52 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/25/2009 2:02:52 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/25/2009 1:29:37 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/25/2009 12:59:52 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/25/2009 12:59:52 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/25/2009 12:59:52 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/25/2009 12:29:53 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/25/2009 12:22:09 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/25/2009 12:22:09 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/25/2009 12:22:09 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/25/2009 4:41:14 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/25/2009 4:01:57 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/25/2009 4:01:57 AM Process

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

LBAR\GOOGLETOOLBARUSER_32.EXE
11/25/2009 4:01:57 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/24/2009 3:26:46 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/24/2009 2:54:49 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/24/2009 2:54:49 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/24/2009 2:54:49 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/24/2009 2:41:03 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/24/2009 1:27:54 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/24/2009 1:27:54 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/24/2009 1:27:54 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/24/2009 10:26:22 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/24/2009 10:05:13 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/24/2009 10:05:12 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/24/2009 10:05:12 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/24/2009 4:22:48 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/24/2009 3:50:46 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/24/2009 3:50:46 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/24/2009 3:50:46 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/24/2009 3:50:44 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/24/2009 3:50:38 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/24/2009 3:50:38 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/24/2009 3:50:38 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/24/2009 3:50:36 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/24/2009 3:50:33 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/24/2009 3:50:33 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/24/2009 3:50:33 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/24/2009 3:50:26 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/24/2009 3:50:25 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/24/2009 3:50:25 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/24/2009 3:50:25 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/23/2009 8:09:23 PM Process

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

LBAR\GOOGLETOOLBARUSER_32.EXE
11/23/2009 7:57:40 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/23/2009 7:57:40 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/23/2009 7:57:40 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/23/2009 5:01:28 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/23/2009 4:59:37 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/23/2009 4:59:37 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/23/2009 4:59:37 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/23/2009 4:41:09 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/23/2009 4:12:57 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/23/2009 4:12:57 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/23/2009 4:12:57 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 5:20:58 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 5:12:15 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 5:12:15 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 5:12:15 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 4:21:08 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 4:20:04 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 4:20:04 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 4:20:04 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 4:20:02 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 4:20:00 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 4:20:00 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 4:20:00 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 3:37:58 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 3:13:19 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 3:13:19 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 3:13:19 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 2:29:38 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 2:29:37 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 2:29:37 PM Process

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 2:29:37 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 2:29:35 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 2:02:16 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 2:02:16 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 2:02:16 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 2:46:50 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 1:58:14 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 1:58:14 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 1:58:14 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 1:58:05 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 1:58:01 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 1:58:01 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 1:58:01 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 1:57:59 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 1:57:24 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 1:57:24 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 1:57:24 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 12:39:08 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 12:28:38 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 12:28:38 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/22/2009 12:28:38 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/21/2009 7:39:45 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/21/2009 7:30:23 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/21/2009 7:30:23 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/21/2009 7:30:23 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/21/2009 7:11:44 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/21/2009 4:57:43 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/21/2009 4:57:43 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/21/2009 4:57:43 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/21/2009 4:52:24 PM Process

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

LBAR\GOOGLETOOLBARUSER_32.EXE
11/21/2009 4:48:53 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/21/2009 4:48:53 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/21/2009 4:48:53 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/21/2009 4:46:10 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/21/2009 4:44:13 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/21/2009 4:44:13 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/21/2009 4:44:13 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/21/2009 4:08:02 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/21/2009 3:56:46 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/21/2009 3:56:46 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/21/2009 3:56:46 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/21/2009 3:31:23 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/21/2009 1:55:54 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/21/2009 1:55:54 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/21/2009 1:55:54 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/21/2009 1:55:51 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/21/2009 1:55:04 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/21/2009 1:55:04 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/21/2009 1:55:04 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/21/2009 1:52:36 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/21/2009 12:35:19 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/21/2009 12:35:18 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/21/2009 12:35:18 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/20/2009 6:58:54 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/20/2009 2:39:02 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/20/2009 2:39:02 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/20/2009 2:39:02 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/20/2009 2:14:02 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/20/2009 2:07:13 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/20/2009 2:07:13 PM Process

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

LBAR\GOOGLETOOLBARUSER_32.EXE
11/20/2009 2:07:13 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/20/2009 1:09:56 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/20/2009 12:01:38 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/20/2009 12:01:38 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/20/2009 12:01:38 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/20/2009 12:01:28 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/20/2009 12:01:16 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/20/2009 12:01:14 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/20/2009 12:01:14 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/20/2009 9:52:49 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/20/2009 9:51:03 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/20/2009 9:51:03 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/20/2009 9:51:03 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/20/2009 5:15:24 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/20/2009 4:51:07 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/20/2009 4:51:07 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/20/2009 4:51:07 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/19/2009 5:15:06 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/19/2009 4:02:53 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/19/2009 4:02:53 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/19/2009 4:02:53 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/19/2009 3:21:14 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/19/2009 2:48:40 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/19/2009 2:48:40 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/19/2009 2:48:40 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/19/2009 12:04:35 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/19/2009 11:44:27 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/19/2009 11:44:27 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/19/2009 11:44:27 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/19/2009 11:33:25 AM Process

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

LBAR\GOOGLETOOLBARUSER_32.EXE
11/19/2009 11:31:10 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/19/2009 11:31:10 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/19/2009 11:31:10 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/19/2009 11:28:23 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/19/2009 10:13:24 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/19/2009 10:13:24 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/19/2009 10:13:24 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/19/2009 4:53:39 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/19/2009 4:38:37 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/19/2009 4:38:37 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/19/2009 4:38:37 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/19/2009 4:38:33 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/19/2009 4:30:42 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/19/2009 4:30:42 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/19/2009 4:30:42 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/18/2009 7:24:11 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/18/2009 7:20:51 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/18/2009 7:20:51 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/18/2009 7:20:50 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/18/2009 1:23:47 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/18/2009 12:51:37 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/18/2009 12:51:35 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/18/2009 12:51:35 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/18/2009 12:25:13 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/18/2009 12:19:45 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/18/2009 12:19:45 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/18/2009 12:19:45 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/18/2009 10:34:43 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/18/2009 10:15:19 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/18/2009 10:15:19 AM Process

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

LBAR\GOOGLETOOLBARUSER_32.EXE
11/18/2009 10:15:19 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/18/2009 5:05:50 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/18/2009 4:45:54 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/18/2009 4:45:54 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/18/2009 4:45:54 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/17/2009 10:53:17 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/17/2009 10:33:09 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/17/2009 3:29:32 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/17/2009 2:56:30 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/17/2009 2:56:30 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/17/2009 2:56:30 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/17/2009 2:54:48 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/17/2009 2:51:40 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/17/2009 2:51:39 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/17/2009 2:51:39 PM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/17/2009 2:25:05 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/17/2009 2:25:05 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
11/17/2009 2:25:05 AM Process
LBAR\GOOGLETOOLBARUSER_32.EXE
dfsvc.exe (events: 7)
12/16/2009 7:02:56 AM Process
YAHOOMESSENGER.EXE
12/16/2009 7:02:15 AM Process
YAHOOMESSENGER.EXE
12/14/2009 4:10:38 PM Process
YAHOOMESSENGER.EXE
12/14/2009 4:09:33 PM Process
YAHOOMESSENGER.EXE
12/10/2009 2:43:10 PM Process
YAHOOMESSENGER.EXE
12/10/2009 2:42:15 PM Process
YAHOOMESSENGER.EXE
12/10/2009 4:50:20 AM Process
YAHOOMESSENGER.EXE
12/10/2009 4:49:29 AM Process
YAHOOMESSENGER.EXE
12/10/2009 4:09:45 AM Process
YAHOOMESSENGER.EXE
12/10/2009 4:08:57 AM Process
YAHOOMESSENGER.EXE
12/9/2009 3:24:59 AM
Process
YAHOOMESSENGER.EXE

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

start

C:\Program Files (x86)\GOOGLE\GOOGLE TOO

exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

start

C:\Program Files (x86)\YAHOO!\MESSENGER\

exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

start

C:\Program Files (x86)\YAHOO!\MESSENGER\

exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

start

C:\Program Files (x86)\YAHOO!\MESSENGER\

exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

start

C:\Program Files (x86)\YAHOO!\MESSENGER\

exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

start

C:\Program Files (x86)\YAHOO!\MESSENGER\

exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

12/9/2009 3:23:35 AM
YAHOOMESSENGER.EXE
12/8/2009 1:22:03 PM
YAHOOMESSENGER.EXE
12/8/2009 1:20:42 PM
YAHOOMESSENGER.EXE
12/6/2009 12:48:40 AM
YAHOOMESSENGER.EXE
12/6/2009 12:47:12 AM
YAHOOMESSENGER.EXE
12/5/2009 2:25:06 AM
YAHOOMESSENGER.EXE
12/5/2009 2:24:47 AM
YAHOOMESSENGER.EXE
12/4/2009 6:52:25 PM
YAHOOMESSENGER.EXE
12/4/2009 6:51:08 PM
YAHOOMESSENGER.EXE
12/3/2009 4:09:11 AM
YAHOOMESSENGER.EXE
12/3/2009 4:07:15 AM
YAHOOMESSENGER.EXE
12/2/2009 7:38:46 PM
YAHOOMESSENGER.EXE
12/2/2009 7:36:39 PM
YAHOOMESSENGER.EXE
12/1/2009 3:15:27 AM
YAHOOMESSENGER.EXE
12/1/2009 3:13:44 AM
YAHOOMESSENGER.EXE
11/30/2009 7:36:07 PM
YAHOOMESSENGER.EXE
11/30/2009 7:34:03 PM
YAHOOMESSENGER.EXE
11/30/2009 5:56:42 PM
YAHOOMESSENGER.EXE
11/30/2009 5:55:17 PM
YAHOOMESSENGER.EXE
11/30/2009 3:33:12 PM
YAHOOMESSENGER.EXE
11/30/2009 3:32:36 PM
YAHOOMESSENGER.EXE
11/26/2009 3:20:29 AM
YAHOOMESSENGER.EXE
11/26/2009 3:19:59 AM
YAHOOMESSENGER.EXE
11/24/2009 2:46:35 PM
YAHOOMESSENGER.EXE
11/24/2009 2:45:18 PM
YAHOOMESSENGER.EXE
11/21/2009 7:26:41 PM
YAHOOMESSENGER.EXE
11/21/2009 7:25:24 PM
YAHOOMESSENGER.EXE
11/21/2009 12:33:26 PM
YAHOOMESSENGER.EXE
11/21/2009 12:32:51 PM
YAHOOMESSENGER.EXE
11/20/2009 12:00:10 PM
YAHOOMESSENGER.EXE

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

11/20/2009 11:59:18 AM
YAHOOMESSENGER.EXE
11/19/2009 4:28:54 AM
YAHOOMESSENGER.EXE
11/19/2009 4:27:58 AM
YAHOOMESSENGER.EXE
11/18/2009 7:16:22 PM
YAHOOMESSENGER.EXE
11/18/2009 7:16:14 PM
YAHOOMESSENGER.EXE
11/18/2009 11:18:46 AM
YAHOOMESSENGER.EXE
11/18/2009 11:18:18 AM
YAHOOMESSENGER.EXE
11/17/2009 10:33:21 PM
YAHOOMESSENGER.EXE
11/17/2009 10:33:09 PM
YAHOOMESSENGER.EXE
dfsvc.exe (events: 7)
12/16/2009 7:02:55 AM
YMSGR_TRAY.EXE
12/14/2009 4:11:14 PM
YMSGR_TRAY.EXE
12/14/2009 4:10:37 PM
YMSGR_TRAY.EXE
12/10/2009 2:44:30 PM
YMSGR_TRAY.EXE
12/10/2009 2:43:05 PM
YMSGR_TRAY.EXE
12/10/2009 2:22:48 PM
YMSGR_TRAY.EXE
12/10/2009 4:50:18 AM
YMSGR_TRAY.EXE
12/10/2009 4:10:23 AM
YMSGR_TRAY.EXE
12/10/2009 4:09:43 AM
YMSGR_TRAY.EXE
12/9/2009 3:28:26 AM
YMSGR_TRAY.EXE
12/9/2009 3:24:58 AM
YMSGR_TRAY.EXE
12/8/2009 1:22:22 PM
YMSGR_TRAY.EXE
12/8/2009 1:22:02 PM
YMSGR_TRAY.EXE
12/6/2009 4:22:38 AM
YMSGR_TRAY.EXE
12/6/2009 12:48:40 AM
YMSGR_TRAY.EXE
12/5/2009 7:28:55 PM
YMSGR_TRAY.EXE
12/5/2009 2:25:06 AM
YMSGR_TRAY.EXE
12/4/2009 10:43:14 PM
YMSGR_TRAY.EXE
12/4/2009 6:52:24 PM
YMSGR_TRAY.EXE
12/3/2009 4:09:21 AM
YMSGR_TRAY.EXE
12/3/2009 4:09:09 AM

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

YMSGR_TRAY.EXE
12/2/2009 8:42:06 PM
YMSGR_TRAY.EXE
12/2/2009 7:38:45 PM
YMSGR_TRAY.EXE
12/1/2009 3:15:43 AM
YMSGR_TRAY.EXE
12/1/2009 3:15:25 AM
YMSGR_TRAY.EXE
11/30/2009 8:00:27 PM
YMSGR_TRAY.EXE
11/30/2009 7:36:06 PM
YMSGR_TRAY.EXE
11/30/2009 6:55:13 PM
YMSGR_TRAY.EXE
11/30/2009 5:56:42 PM
YMSGR_TRAY.EXE
11/30/2009 5:53:06 PM
YMSGR_TRAY.EXE
11/30/2009 3:33:11 PM
YMSGR_TRAY.EXE
11/30/2009 10:18:13 AM
YMSGR_TRAY.EXE
11/26/2009 3:20:28 AM
YMSGR_TRAY.EXE
11/26/2009 3:17:54 AM
YMSGR_TRAY.EXE
11/24/2009 2:46:35 PM
YMSGR_TRAY.EXE
11/24/2009 2:41:30 PM
YMSGR_TRAY.EXE
11/21/2009 7:26:41 PM
YMSGR_TRAY.EXE
11/21/2009 7:11:44 PM
YMSGR_TRAY.EXE
11/21/2009 12:33:20 PM
YMSGR_TRAY.EXE
11/20/2009 6:58:59 PM
YMSGR_TRAY.EXE
11/20/2009 12:00:10 PM
YMSGR_TRAY.EXE
11/20/2009 9:52:53 AM
YMSGR_TRAY.EXE
11/19/2009 4:28:53 AM
YMSGR_TRAY.EXE
11/18/2009 7:43:43 PM
YMSGR_TRAY.EXE
11/18/2009 7:16:21 PM
YMSGR_TRAY.EXE
11/18/2009 6:03:02 PM
YMSGR_TRAY.EXE
11/18/2009 12:50:54 PM
YMSGR_TRAY.EXE
11/18/2009 12:25:18 PM
YMSGR_TRAY.EXE
11/18/2009 11:18:46 AM
YMSGR_TRAY.EXE
11/18/2009 10:34:52 AM
YMSGR_TRAY.EXE
11/17/2009 10:33:21 PM

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

YMSGR_TRAY.EXE
11/17/2009 6:17:47 PM
YMSGR_TRAY.EXE
11/17/2009 2:48:52 PM
YMSGR_TRAY.EXE
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM
DATE\YAHOOAUSERVICE.EXE
12/14/2009 4:09:33 PM
DATE\YAHOOAUSERVICE.EXE
12/10/2009 2:42:15 PM
DATE\YAHOOAUSERVICE.EXE
12/10/2009 4:49:12 AM
DATE\YAHOOAUSERVICE.EXE
12/10/2009 4:08:57 AM
DATE\YAHOOAUSERVICE.EXE
12/9/2009 3:23:36 AM
DATE\YAHOOAUSERVICE.EXE
12/8/2009 1:20:42 PM
DATE\YAHOOAUSERVICE.EXE
12/6/2009 12:47:12 AM
DATE\YAHOOAUSERVICE.EXE
12/5/2009 2:24:47 AM
DATE\YAHOOAUSERVICE.EXE
12/4/2009 6:51:08 PM
DATE\YAHOOAUSERVICE.EXE
12/3/2009 4:07:07 AM
DATE\YAHOOAUSERVICE.EXE
12/2/2009 7:36:39 PM
DATE\YAHOOAUSERVICE.EXE
12/1/2009 3:13:45 AM
DATE\YAHOOAUSERVICE.EXE
11/30/2009 7:34:30 PM
DATE\YAHOOAUSERVICE.EXE
11/30/2009 7:34:03 PM
DATE\YAHOOAUSERVICE.EXE
11/30/2009 5:55:17 PM
DATE\YAHOOAUSERVICE.EXE
11/30/2009 3:32:36 PM
DATE\YAHOOAUSERVICE.EXE
11/26/2009 3:19:48 AM
DATE\YAHOOAUSERVICE.EXE
11/24/2009 2:45:18 PM
DATE\YAHOOAUSERVICE.EXE
11/21/2009 7:25:24 PM
DATE\YAHOOAUSERVICE.EXE
11/21/2009 12:32:51 PM
DATE\YAHOOAUSERVICE.EXE
11/20/2009 11:59:18 AM
DATE\YAHOOAUSERVICE.EXE
11/19/2009 4:27:59 AM
DATE\YAHOOAUSERVICE.EXE
11/18/2009 7:16:14 PM
DATE\YAHOOAUSERVICE.EXE
11/18/2009 12:50:54 PM
DATE\YAHOOAUSERVICE.EXE
11/18/2009 11:18:18 AM
DATE\YAHOOAUSERVICE.EXE
11/17/2009 10:33:09 PM
DATE\YAHOOAUSERVICE.EXE

Process exit

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\MESSENGER\

Process start

C:\Program Files (x86)\YAHOO!\SOFTWAREUP

Process start

C:\Program Files (x86)\YAHOO!\SOFTWAREUP

Process start

C:\Program Files (x86)\YAHOO!\SOFTWAREUP

Process start

C:\Program Files (x86)\YAHOO!\SOFTWAREUP

Process start

C:\Program Files (x86)\YAHOO!\SOFTWAREUP

Process start

C:\Program Files (x86)\YAHOO!\SOFTWAREUP

Process start

C:\Program Files (x86)\YAHOO!\SOFTWAREUP

Process start

C:\Program Files (x86)\YAHOO!\SOFTWAREUP

Process start

C:\Program Files (x86)\YAHOO!\SOFTWAREUP

Process start

C:\Program Files (x86)\YAHOO!\SOFTWAREUP

Process start

C:\Program Files (x86)\YAHOO!\SOFTWAREUP

Process start

C:\Program Files (x86)\YAHOO!\SOFTWAREUP

Process start

C:\Program Files (x86)\YAHOO!\SOFTWAREUP

Process exit

C:\Program Files (x86)\YAHOO!\SOFTWAREUP

Process start

C:\Program Files (x86)\YAHOO!\SOFTWAREUP

Process start

C:\Program Files (x86)\YAHOO!\SOFTWAREUP

Process start

C:\Program Files (x86)\YAHOO!\SOFTWAREUP

Process start

C:\Program Files (x86)\YAHOO!\SOFTWAREUP

Process start

C:\Program Files (x86)\YAHOO!\SOFTWAREUP

Process start

C:\Program Files (x86)\YAHOO!\SOFTWAREUP

Process start

C:\Program Files (x86)\YAHOO!\SOFTWAREUP

Process start

C:\Program Files (x86)\YAHOO!\SOFTWAREUP

Process start

C:\Program Files (x86)\YAHOO!\SOFTWAREUP

Process start

C:\Program Files (x86)\YAHOO!\SOFTWAREUP

Process start

C:\Program Files (x86)\YAHOO!\SOFTWAREUP

Process start

C:\Program Files (x86)\YAHOO!\SOFTWAREUP

Process start

C:\Program Files (x86)\YAHOO!\SOFTWAREUP

11/17/2009 2:48:52 PM Process


DATE\YAHOOAUSERVICE.EXE
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM Process
TECTION\SEARCHPROTECTION.EXE
12/16/2009 7:00:12 AM Process
TECTION\SEARCHPROTECTION.EXE
12/14/2009 4:09:33 PM Process
TECTION\SEARCHPROTECTION.EXE
12/14/2009 3:47:52 PM Process
TECTION\SEARCHPROTECTION.EXE
12/10/2009 2:42:15 PM Process
TECTION\SEARCHPROTECTION.EXE
12/10/2009 2:22:49 PM Process
TECTION\SEARCHPROTECTION.EXE
12/10/2009 4:49:36 AM Process
TECTION\SEARCHPROTECTION.EXE
12/10/2009 4:49:36 AM Process
TECTION\SEARCHPROTECTION.EXE
12/10/2009 4:49:29 AM Process
TECTION\SEARCHPROTECTION.EXE
12/10/2009 4:46:56 AM Process
TECTION\SEARCHPROTECTION.EXE
12/10/2009 4:08:57 AM Process
TECTION\SEARCHPROTECTION.EXE
12/9/2009 3:23:35 AM
Process
TECTION\SEARCHPROTECTION.EXE
12/8/2009 9:15:51 PM
Process
TECTION\SEARCHPROTECTION.EXE
12/8/2009 1:20:42 PM
Process
TECTION\SEARCHPROTECTION.EXE
12/8/2009 11:34:16 AM Process
TECTION\SEARCHPROTECTION.EXE
12/6/2009 12:47:12 AM Process
TECTION\SEARCHPROTECTION.EXE
12/5/2009 7:28:55 PM
Process
TECTION\SEARCHPROTECTION.EXE
12/5/2009 2:24:47 AM
Process
TECTION\SEARCHPROTECTION.EXE
12/4/2009 10:43:14 PM Process
TECTION\SEARCHPROTECTION.EXE
12/4/2009 6:51:08 PM
Process
TECTION\SEARCHPROTECTION.EXE
12/4/2009 4:27:46 PM
Process
TECTION\SEARCHPROTECTION.EXE
12/3/2009 4:07:24 AM
Process
TECTION\SEARCHPROTECTION.EXE
12/3/2009 4:07:22 AM
Process
TECTION\SEARCHPROTECTION.EXE
12/3/2009 4:07:16 AM
Process
TECTION\SEARCHPROTECTION.EXE
12/2/2009 8:42:06 PM
Process
TECTION\SEARCHPROTECTION.EXE
12/2/2009 7:36:39 PM
Process
TECTION\SEARCHPROTECTION.EXE
12/2/2009 3:43:08 PM
Process
TECTION\SEARCHPROTECTION.EXE
12/1/2009 3:13:44 AM
Process
TECTION\SEARCHPROTECTION.EXE
11/30/2009 8:00:27 PM Process

start

C:\Program Files (x86)\YAHOO!\SOFTWAREUP

start

C:\Program Files (x86)\YAHOO!\SEARCH PRO

exit

C:\Program Files (x86)\YAHOO!\SEARCH PRO

start

C:\Program Files (x86)\YAHOO!\SEARCH PRO

exit

C:\Program Files (x86)\YAHOO!\SEARCH PRO

start

C:\Program Files (x86)\YAHOO!\SEARCH PRO

exit

C:\Program Files (x86)\YAHOO!\SEARCH PRO

exit

C:\Program Files (x86)\YAHOO!\SEARCH PRO

start

C:\Program Files (x86)\YAHOO!\SEARCH PRO

start

C:\Program Files (x86)\YAHOO!\SEARCH PRO

exit

C:\Program Files (x86)\YAHOO!\SEARCH PRO

start

C:\Program Files (x86)\YAHOO!\SEARCH PRO

start

C:\Program Files (x86)\YAHOO!\SEARCH PRO

exit

C:\Program Files (x86)\YAHOO!\SEARCH PRO

start

C:\Program Files (x86)\YAHOO!\SEARCH PRO

exit

C:\Program Files (x86)\YAHOO!\SEARCH PRO

start

C:\Program Files (x86)\YAHOO!\SEARCH PRO

exit

C:\Program Files (x86)\YAHOO!\SEARCH PRO

start

C:\Program Files (x86)\YAHOO!\SEARCH PRO

exit

C:\Program Files (x86)\YAHOO!\SEARCH PRO

start

C:\Program Files (x86)\YAHOO!\SEARCH PRO

exit

C:\Program Files (x86)\YAHOO!\SEARCH PRO

exit

C:\Program Files (x86)\YAHOO!\SEARCH PRO

start

C:\Program Files (x86)\YAHOO!\SEARCH PRO

start

C:\Program Files (x86)\YAHOO!\SEARCH PRO

exit

C:\Program Files (x86)\YAHOO!\SEARCH PRO

start

C:\Program Files (x86)\YAHOO!\SEARCH PRO

exit

C:\Program Files (x86)\YAHOO!\SEARCH PRO

start

C:\Program Files (x86)\YAHOO!\SEARCH PRO

exit

C:\Program Files (x86)\YAHOO!\SEARCH PRO

TECTION\SEARCHPROTECTION.EXE
11/30/2009 7:34:03 PM Process
TECTION\SEARCHPROTECTION.EXE
11/30/2009 6:55:13 PM Process
TECTION\SEARCHPROTECTION.EXE
11/30/2009 5:55:17 PM Process
TECTION\SEARCHPROTECTION.EXE
11/30/2009 5:53:07 PM Process
TECTION\SEARCHPROTECTION.EXE
11/30/2009 3:32:36 PM Process
TECTION\SEARCHPROTECTION.EXE
11/30/2009 10:18:14 AM Process
TECTION\SEARCHPROTECTION.EXE
11/26/2009 3:20:11 AM Process
TECTION\SEARCHPROTECTION.EXE
11/26/2009 3:20:11 AM Process
TECTION\SEARCHPROTECTION.EXE
11/26/2009 3:20:02 AM Process
TECTION\SEARCHPROTECTION.EXE
11/26/2009 3:17:54 AM Process
TECTION\SEARCHPROTECTION.EXE
11/24/2009 2:45:18 PM Process
TECTION\SEARCHPROTECTION.EXE
11/24/2009 2:41:31 PM Process
TECTION\SEARCHPROTECTION.EXE
11/21/2009 7:25:24 PM Process
TECTION\SEARCHPROTECTION.EXE
11/21/2009 7:11:44 PM Process
TECTION\SEARCHPROTECTION.EXE
11/21/2009 12:32:51 PM Process
TECTION\SEARCHPROTECTION.EXE
11/20/2009 6:58:59 PM Process
TECTION\SEARCHPROTECTION.EXE
11/20/2009 11:59:18 AM Process
TECTION\SEARCHPROTECTION.EXE
11/20/2009 9:52:53 AM Process
TECTION\SEARCHPROTECTION.EXE
11/19/2009 4:27:58 AM Process
TECTION\SEARCHPROTECTION.EXE
11/18/2009 7:43:43 PM Process
TECTION\SEARCHPROTECTION.EXE
11/18/2009 7:16:14 PM Process
TECTION\SEARCHPROTECTION.EXE
11/18/2009 6:03:02 PM Process
TECTION\SEARCHPROTECTION.EXE
11/18/2009 12:50:54 PM Process
TECTION\SEARCHPROTECTION.EXE
11/18/2009 12:25:18 PM Process
TECTION\SEARCHPROTECTION.EXE
11/18/2009 11:18:18 AM Process
TECTION\SEARCHPROTECTION.EXE
11/18/2009 10:34:52 AM Process
TECTION\SEARCHPROTECTION.EXE
11/17/2009 10:33:09 PM Process
TECTION\SEARCHPROTECTION.EXE
11/17/2009 6:17:47 PM Process
TECTION\SEARCHPROTECTION.EXE
11/17/2009 2:48:52 PM Process
TECTION\SEARCHPROTECTION.EXE
dfsvc.exe (events: 7)

start

C:\Program Files (x86)\YAHOO!\SEARCH PRO

exit

C:\Program Files (x86)\YAHOO!\SEARCH PRO

start

C:\Program Files (x86)\YAHOO!\SEARCH PRO

exit

C:\Program Files (x86)\YAHOO!\SEARCH PRO

start

C:\Program Files (x86)\YAHOO!\SEARCH PRO

exit

C:\Program Files (x86)\YAHOO!\SEARCH PRO

exit

C:\Program Files (x86)\YAHOO!\SEARCH PRO

start

C:\Program Files (x86)\YAHOO!\SEARCH PRO

start

C:\Program Files (x86)\YAHOO!\SEARCH PRO

exit

C:\Program Files (x86)\YAHOO!\SEARCH PRO

start

C:\Program Files (x86)\YAHOO!\SEARCH PRO

exit

C:\Program Files (x86)\YAHOO!\SEARCH PRO

start

C:\Program Files (x86)\YAHOO!\SEARCH PRO

exit

C:\Program Files (x86)\YAHOO!\SEARCH PRO

start

C:\Program Files (x86)\YAHOO!\SEARCH PRO

exit

C:\Program Files (x86)\YAHOO!\SEARCH PRO

start

C:\Program Files (x86)\YAHOO!\SEARCH PRO

exit

C:\Program Files (x86)\YAHOO!\SEARCH PRO

start

C:\Program Files (x86)\YAHOO!\SEARCH PRO

exit

C:\Program Files (x86)\YAHOO!\SEARCH PRO

start

C:\Program Files (x86)\YAHOO!\SEARCH PRO

exit

C:\Program Files (x86)\YAHOO!\SEARCH PRO

start

C:\Program Files (x86)\YAHOO!\SEARCH PRO

exit

C:\Program Files (x86)\YAHOO!\SEARCH PRO

start

C:\Program Files (x86)\YAHOO!\SEARCH PRO

exit

C:\Program Files (x86)\YAHOO!\SEARCH PRO

start

C:\Program Files (x86)\YAHOO!\SEARCH PRO

exit

C:\Program Files (x86)\YAHOO!\SEARCH PRO

start

C:\Program Files (x86)\YAHOO!\SEARCH PRO

12/16/2009 8:06:00 AM
UTIL10C.EXE
12/16/2009 7:09:23 AM
UTIL10C.EXE
12/16/2009 7:03:30 AM
UTIL10C.EXE
12/16/2009 7:00:12 AM
UTIL10C.EXE
12/16/2009 6:47:34 AM
UTIL10C.EXE
12/16/2009 4:53:42 AM
UTIL10C.EXE
12/16/2009 4:35:05 AM
UTIL10C.EXE
12/16/2009 3:30:38 AM
UTIL10C.EXE
12/16/2009 3:18:56 AM
UTIL10C.EXE
12/16/2009 12:14:18 AM
UTIL10C.EXE
12/15/2009 10:57:28 PM
UTIL10C.EXE
12/15/2009 10:50:53 PM
UTIL10C.EXE
12/15/2009 7:06:55 PM
UTIL10C.EXE
12/15/2009 6:52:14 PM
UTIL10C.EXE
12/15/2009 6:37:14 PM
UTIL10C.EXE
12/15/2009 5:15:46 PM
UTIL10C.EXE
12/15/2009 5:01:53 PM
UTIL10C.EXE
12/15/2009 3:05:15 PM
UTIL10C.EXE
12/15/2009 2:56:04 PM
UTIL10C.EXE
12/15/2009 11:24:33 AM
UTIL10C.EXE
12/15/2009 11:14:55 AM
UTIL10C.EXE
12/15/2009 7:37:49 AM
UTIL10C.EXE
12/15/2009 7:01:31 AM
UTIL10C.EXE
12/15/2009 7:01:11 AM
UTIL10C.EXE
12/15/2009 5:32:17 AM
UTIL10C.EXE
12/15/2009 4:23:01 AM
UTIL10C.EXE
12/14/2009 7:43:33 PM
UTIL10C.EXE
12/14/2009 6:34:47 PM
UTIL10C.EXE
12/14/2009 6:18:26 PM
UTIL10C.EXE
12/14/2009 5:50:59 PM
UTIL10C.EXE

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

12/14/2009 5:39:41 PM
UTIL10C.EXE
12/14/2009 5:36:44 PM
UTIL10C.EXE
12/14/2009 4:12:09 PM
UTIL10C.EXE
12/14/2009 3:29:55 PM
UTIL10C.EXE
12/14/2009 3:08:32 PM
UTIL10C.EXE
12/14/2009 10:19:12 AM
UTIL10C.EXE
12/14/2009 10:12:00 AM
UTIL10C.EXE
12/14/2009 5:11:24 AM
UTIL10C.EXE
12/14/2009 4:06:31 AM
UTIL10C.EXE
12/14/2009 12:34:08 AM
UTIL10C.EXE
12/13/2009 7:49:44 PM
UTIL10C.EXE
12/13/2009 3:42:34 PM
UTIL10C.EXE
12/13/2009 3:17:44 PM
UTIL10C.EXE
12/13/2009 2:37:50 PM
UTIL10C.EXE
12/13/2009 1:58:00 PM
UTIL10C.EXE
12/13/2009 5:31:13 AM
UTIL10C.EXE
12/13/2009 4:41:26 AM
UTIL10C.EXE
12/12/2009 8:56:00 PM
UTIL10C.EXE
12/12/2009 8:30:33 PM
UTIL10C.EXE
12/12/2009 8:30:26 PM
UTIL10C.EXE
12/12/2009 5:35:42 PM
UTIL10C.EXE
12/12/2009 5:35:37 PM
UTIL10C.EXE
12/12/2009 5:32:40 PM
UTIL10C.EXE
12/12/2009 4:07:55 PM
UTIL10C.EXE
12/12/2009 3:32:26 PM
UTIL10C.EXE
12/12/2009 12:04:10 PM
UTIL10C.EXE
12/12/2009 11:53:16 AM
UTIL10C.EXE
12/12/2009 11:49:01 AM
UTIL10C.EXE
12/12/2009 11:03:37 AM
UTIL10C.EXE
12/12/2009 6:50:47 AM
UTIL10C.EXE

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

12/11/2009 8:00:22 PM
UTIL10C.EXE
12/11/2009 7:50:09 PM
UTIL10C.EXE
12/11/2009 5:47:53 PM
UTIL10C.EXE
12/11/2009 5:27:09 PM
UTIL10C.EXE
12/11/2009 5:07:21 PM
UTIL10C.EXE
12/11/2009 4:59:00 PM
UTIL10C.EXE
12/11/2009 4:50:14 PM
UTIL10C.EXE
12/11/2009 4:38:09 PM
UTIL10C.EXE
12/11/2009 9:09:34 AM
UTIL10C.EXE
12/11/2009 6:21:59 AM
UTIL10C.EXE
12/11/2009 5:59:23 AM
UTIL10C.EXE
12/11/2009 4:25:27 AM
UTIL10C.EXE
12/11/2009 3:56:08 AM
UTIL10C.EXE
12/10/2009 3:14:28 PM
UTIL10C.EXE
12/10/2009 2:44:42 PM
UTIL10C.EXE
12/10/2009 2:22:48 PM
UTIL10C.EXE
12/10/2009 1:58:49 PM
UTIL10C.EXE
12/10/2009 4:41:06 AM
UTIL10C.EXE
12/10/2009 4:10:55 AM
UTIL10C.EXE
12/8/2009 9:15:51 PM
UTIL10C.EXE
12/8/2009 9:08:10 PM
UTIL10C.EXE
12/8/2009 2:36:18 PM
UTIL10C.EXE
12/8/2009 1:23:10 PM
UTIL10C.EXE
12/8/2009 11:33:12 AM
UTIL10C.EXE
12/8/2009 10:50:46 AM
UTIL10C.EXE
12/8/2009 4:57:54 AM
UTIL10C.EXE
12/8/2009 4:26:45 AM
UTIL10C.EXE
12/8/2009 2:49:28 AM
UTIL10C.EXE
12/8/2009 12:11:23 AM
UTIL10C.EXE
12/8/2009 12:04:57 AM
UTIL10C.EXE

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

12/7/2009 11:39:30 PM
UTIL10C.EXE
12/7/2009 4:51:19 PM
UTIL10C.EXE
12/7/2009 4:37:41 PM
UTIL10C.EXE
12/7/2009 3:55:08 PM
UTIL10C.EXE
12/7/2009 3:13:23 PM
UTIL10C.EXE
12/7/2009 2:44:12 PM
UTIL10C.EXE
12/7/2009 2:06:00 PM
UTIL10C.EXE
12/7/2009 6:50:12 AM
UTIL10C.EXE
12/7/2009 6:17:54 AM
UTIL10C.EXE
12/7/2009 6:12:07 AM
UTIL10C.EXE
12/7/2009 6:01:26 AM
UTIL10C.EXE
12/7/2009 5:27:53 AM
UTIL10C.EXE
12/7/2009 4:01:48 AM
UTIL10C.EXE
12/6/2009 3:37:21 PM
UTIL10C.EXE
12/6/2009 2:47:07 PM
UTIL10C.EXE
12/6/2009 2:46:10 PM
UTIL10C.EXE
12/6/2009 2:39:55 PM
UTIL10C.EXE
12/6/2009 2:39:48 PM
UTIL10C.EXE
12/6/2009 2:04:57 PM
UTIL10C.EXE
12/6/2009 5:11:57 AM
UTIL10C.EXE
12/6/2009 2:26:12 AM
UTIL10C.EXE
12/5/2009 7:28:55 PM
UTIL10C.EXE
12/5/2009 4:27:43 PM
UTIL10C.EXE
12/5/2009 4:21:51 PM
UTIL10C.EXE
12/5/2009 4:12:11 PM
UTIL10C.EXE
12/5/2009 1:58:54 PM
UTIL10C.EXE
12/5/2009 1:21:24 PM
UTIL10C.EXE
12/5/2009 1:17:11 PM
UTIL10C.EXE
12/5/2009 2:56:21 AM
UTIL10C.EXE
12/4/2009 10:43:14 PM
UTIL10C.EXE

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

12/4/2009 6:52:43 PM
UTIL10C.EXE
12/4/2009 4:27:46 PM
UTIL10C.EXE
12/4/2009 4:21:45 PM
UTIL10C.EXE
12/4/2009 4:02:47 PM
UTIL10C.EXE
12/4/2009 3:43:31 PM
UTIL10C.EXE
12/4/2009 2:53:05 PM
UTIL10C.EXE
12/4/2009 2:36:55 PM
UTIL10C.EXE
12/4/2009 1:38:55 PM
UTIL10C.EXE
12/4/2009 1:21:11 PM
UTIL10C.EXE
12/4/2009 12:33:18 PM
UTIL10C.EXE
12/4/2009 11:59:36 AM
UTIL10C.EXE
12/4/2009 5:03:30 AM
UTIL10C.EXE
12/4/2009 4:18:25 AM
UTIL10C.EXE
12/3/2009 2:38:34 PM
UTIL10C.EXE
12/3/2009 2:06:11 PM
UTIL10C.EXE
12/3/2009 5:11:43 AM
UTIL10C.EXE
12/3/2009 4:09:20 AM
UTIL10C.EXE
12/2/2009 8:42:06 PM
UTIL10C.EXE
12/2/2009 7:38:14 PM
UTIL10C.EXE
12/2/2009 3:43:07 PM
UTIL10C.EXE
12/2/2009 3:32:49 PM
UTIL10C.EXE
12/2/2009 3:20:23 PM
UTIL10C.EXE
12/2/2009 2:59:28 PM
UTIL10C.EXE
12/2/2009 2:51:31 PM
UTIL10C.EXE
12/2/2009 2:42:01 PM
UTIL10C.EXE
12/2/2009 1:53:28 PM
UTIL10C.EXE
12/2/2009 1:41:23 PM
UTIL10C.EXE
12/2/2009 12:23:25 PM
UTIL10C.EXE
12/2/2009 12:09:21 PM
UTIL10C.EXE
12/2/2009 11:49:58 AM
UTIL10C.EXE

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

12/2/2009 11:30:08 AM
UTIL10C.EXE
12/2/2009 6:56:19 AM
UTIL10C.EXE
12/2/2009 6:32:11 AM
UTIL10C.EXE
12/2/2009 6:06:50 AM
UTIL10C.EXE
12/2/2009 5:52:08 AM
UTIL10C.EXE
12/2/2009 3:52:01 AM
UTIL10C.EXE
12/2/2009 3:07:05 AM
UTIL10C.EXE
12/1/2009 6:10:25 PM
UTIL10C.EXE
12/1/2009 6:03:53 PM
UTIL10C.EXE
12/1/2009 3:25:25 PM
UTIL10C.EXE
12/1/2009 3:10:19 PM
UTIL10C.EXE
12/1/2009 2:40:41 PM
UTIL10C.EXE
12/1/2009 1:46:41 PM
UTIL10C.EXE
12/1/2009 6:24:03 AM
UTIL10C.EXE
12/1/2009 5:56:05 AM
UTIL10C.EXE
12/1/2009 4:51:10 AM
UTIL10C.EXE
12/1/2009 4:03:30 AM
UTIL10C.EXE
12/1/2009 3:51:09 AM
UTIL10C.EXE
12/1/2009 3:16:34 AM
UTIL10C.EXE
11/30/2009 4:13:54 PM
UTIL10C.EXE
11/30/2009 3:34:58 PM
UTIL10C.EXE
11/30/2009 10:18:08 AM
UTIL10C.EXE
11/30/2009 10:12:49 AM
UTIL10C.EXE
11/30/2009 5:51:39 AM
UTIL10C.EXE
11/29/2009 2:31:56 PM
UTIL10C.EXE
11/29/2009 2:31:47 PM
UTIL10C.EXE
11/29/2009 2:28:38 PM
UTIL10C.EXE
11/29/2009 2:23:56 PM
UTIL10C.EXE
11/29/2009 2:06:14 PM
UTIL10C.EXE
11/29/2009 5:15:11 AM
UTIL10C.EXE

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

11/29/2009 4:52:04 AM
UTIL10C.EXE
11/28/2009 6:03:44 PM
UTIL10C.EXE
11/28/2009 5:20:27 PM
UTIL10C.EXE
11/28/2009 4:51:01 PM
UTIL10C.EXE
11/28/2009 4:03:05 PM
UTIL10C.EXE
11/28/2009 3:41:08 PM
UTIL10C.EXE
11/28/2009 2:40:45 PM
UTIL10C.EXE
11/28/2009 12:11:25 PM
UTIL10C.EXE
11/28/2009 11:57:12 AM
UTIL10C.EXE
11/28/2009 11:44:07 AM
UTIL10C.EXE
11/27/2009 8:49:45 PM
UTIL10C.EXE
11/27/2009 3:28:07 PM
UTIL10C.EXE
11/27/2009 3:07:52 PM
UTIL10C.EXE
11/27/2009 12:22:12 PM
UTIL10C.EXE
11/27/2009 11:27:38 AM
UTIL10C.EXE
11/27/2009 2:32:06 AM
UTIL10C.EXE
11/27/2009 12:34:23 AM
UTIL10C.EXE
11/26/2009 7:04:13 PM
UTIL10C.EXE
11/26/2009 6:36:26 PM
UTIL10C.EXE
11/26/2009 6:09:31 PM
UTIL10C.EXE
11/26/2009 5:41:44 PM
UTIL10C.EXE
11/26/2009 5:23:08 PM
UTIL10C.EXE
11/26/2009 4:37:01 PM
UTIL10C.EXE
11/26/2009 2:33:34 PM
UTIL10C.EXE
11/26/2009 2:13:49 PM
UTIL10C.EXE
11/26/2009 12:45:11 PM
UTIL10C.EXE
11/26/2009 12:26:00 PM
UTIL10C.EXE
11/26/2009 7:25:14 AM
UTIL10C.EXE
11/26/2009 6:59:30 AM
UTIL10C.EXE
11/26/2009 12:26:17 AM
UTIL10C.EXE

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

11/25/2009 10:12:38 PM
UTIL10C.EXE
11/25/2009 7:52:26 PM
UTIL10C.EXE
11/25/2009 7:32:10 PM
UTIL10C.EXE
11/25/2009 3:15:58 PM
UTIL10C.EXE
11/25/2009 2:02:55 PM
UTIL10C.EXE
11/25/2009 1:37:34 PM
UTIL10C.EXE
11/25/2009 12:59:54 PM
UTIL10C.EXE
11/25/2009 12:29:53 PM
UTIL10C.EXE
11/25/2009 12:22:12 PM
UTIL10C.EXE
11/25/2009 4:47:52 AM
UTIL10C.EXE
11/25/2009 4:02:02 AM
UTIL10C.EXE
11/24/2009 3:26:46 PM
UTIL10C.EXE
11/24/2009 2:54:51 PM
UTIL10C.EXE
11/24/2009 2:41:30 PM
UTIL10C.EXE
11/24/2009 1:27:58 PM
UTIL10C.EXE
11/24/2009 10:33:09 AM
UTIL10C.EXE
11/24/2009 10:05:16 AM
UTIL10C.EXE
11/24/2009 4:29:24 AM
UTIL10C.EXE
11/24/2009 3:50:41 AM
UTIL10C.EXE
11/23/2009 8:15:30 PM
UTIL10C.EXE
11/23/2009 7:57:44 PM
UTIL10C.EXE
11/23/2009 5:09:15 PM
UTIL10C.EXE
11/23/2009 4:59:42 PM
UTIL10C.EXE
11/23/2009 4:47:24 AM
UTIL10C.EXE
11/23/2009 4:13:02 AM
UTIL10C.EXE
11/22/2009 5:29:00 PM
UTIL10C.EXE
11/22/2009 5:12:17 PM
UTIL10C.EXE
11/22/2009 4:21:08 PM
UTIL10C.EXE
11/22/2009 4:20:07 PM
UTIL10C.EXE
11/22/2009 3:44:53 PM
UTIL10C.EXE

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

11/22/2009 3:13:22 PM
UTIL10C.EXE
11/22/2009 2:36:08 PM
UTIL10C.EXE
11/22/2009 2:02:22 PM
UTIL10C.EXE
11/22/2009 2:53:56 AM
UTIL10C.EXE
11/22/2009 1:57:27 AM
UTIL10C.EXE
11/22/2009 12:39:08 AM
UTIL10C.EXE
11/22/2009 12:28:41 AM
UTIL10C.EXE
11/21/2009 7:39:45 PM
UTIL10C.EXE
11/21/2009 7:30:26 PM
UTIL10C.EXE
11/21/2009 7:11:44 PM
UTIL10C.EXE
11/21/2009 4:48:55 PM
UTIL10C.EXE
11/21/2009 4:46:10 PM
UTIL10C.EXE
11/21/2009 4:44:16 PM
UTIL10C.EXE
11/21/2009 4:14:52 PM
UTIL10C.EXE
11/21/2009 3:56:49 PM
UTIL10C.EXE
11/21/2009 3:39:25 PM
UTIL10C.EXE
11/21/2009 12:35:26 PM
UTIL10C.EXE
11/20/2009 6:58:59 PM
UTIL10C.EXE
11/20/2009 2:39:04 PM
UTIL10C.EXE
11/20/2009 2:21:08 PM
UTIL10C.EXE
11/20/2009 2:07:15 PM
UTIL10C.EXE
11/20/2009 1:17:30 PM
UTIL10C.EXE
11/20/2009 12:01:41 PM
UTIL10C.EXE
11/20/2009 9:52:53 AM
UTIL10C.EXE
11/20/2009 9:51:06 AM
UTIL10C.EXE
11/20/2009 5:22:52 AM
UTIL10C.EXE
11/20/2009 4:51:10 AM
UTIL10C.EXE
11/19/2009 5:23:08 PM
UTIL10C.EXE
11/19/2009 4:02:56 PM
UTIL10C.EXE
11/19/2009 3:27:31 PM
UTIL10C.EXE

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process start

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH

11/19/2009 2:48:42 PM Process start


UTIL10C.EXE
11/19/2009 12:12:01 PM Process exit
UTIL10C.EXE
11/19/2009 11:44:29 AM Process start
UTIL10C.EXE
11/19/2009 11:34:36 AM Process exit
UTIL10C.EXE
11/19/2009 10:13:27 AM Process start
UTIL10C.EXE
11/19/2009 5:00:26 AM Process exit
UTIL10C.EXE
11/19/2009 4:31:04 AM Process start
UTIL10C.EXE
11/18/2009 7:31:53 PM Process exit
UTIL10C.EXE
11/18/2009 7:20:53 PM Process start
UTIL10C.EXE
11/18/2009 1:29:57 PM Process exit
UTIL10C.EXE
11/18/2009 12:52:03 PM Process start
UTIL10C.EXE
11/18/2009 12:25:18 PM Process exit
UTIL10C.EXE
11/18/2009 12:19:48 PM Process start
UTIL10C.EXE
11/18/2009 10:34:52 AM Process exit
UTIL10C.EXE
11/18/2009 10:15:22 AM Process start
UTIL10C.EXE
11/18/2009 5:12:09 AM Process exit
UTIL10C.EXE
11/18/2009 4:46:03 AM Process start
UTIL10C.EXE
11/17/2009 11:01:15 PM Process exit
UTIL10C.EXE
11/17/2009 10:33:09 PM Process start
UTIL10C.EXE
11/17/2009 3:37:34 PM Process exit
UTIL10C.EXE
11/17/2009 2:51:42 PM Process start
UTIL10C.EXE
11/17/2009 2:25:08 AM Process start
UTIL10C.EXE
dfsvc.exe (events: 7)
11/18/2009 5:40:24 PM Process exit
ARCH IN MOTION\APPLOADER\LOADER.EXE
11/18/2009 5:40:18 PM Process start
ARCH IN MOTION\APPLOADER\LOADER.EXE
11/18/2009 5:39:28 PM Process exit
ARCH IN MOTION\APPLOADER\LOADER.EXE
11/18/2009 5:30:35 PM Process start
ARCH IN MOTION\APPLOADER\LOADER.EXE
dfsvc.exe (events: 7)
12/16/2009 7:02:15 AM Process start
12/16/2009 7:00:13 AM Process exit
12/14/2009 4:09:33 PM Process start
12/14/2009 3:47:52 PM Process exit
12/10/2009 2:42:15 PM Process start
12/10/2009 2:22:49 PM Process exit

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH
C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH
C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH
C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH
C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH
C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH
C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH
C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH
C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH
C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH
C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH
C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH
C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH
C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH
C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH
C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH
C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH
C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH
C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH
C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH
C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH
C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASH
C:\Program Files (x86)\COMMON FILES\RESE
C:\Program Files (x86)\COMMON FILES\RESE
C:\Program Files (x86)\COMMON FILES\RESE
C:\Program Files (x86)\COMMON FILES\RESE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE

12/10/2009 4:49:28 AM Process


12/10/2009 4:46:56 AM Process
12/10/2009 4:08:57 AM Process
12/9/2009 3:23:35 AM
Process
12/8/2009 9:15:51 PM
Process
12/8/2009 1:20:42 PM
Process
12/8/2009 11:34:16 AM Process
12/6/2009 12:47:12 AM Process
12/5/2009 7:28:55 PM
Process
12/5/2009 2:24:47 AM
Process
12/4/2009 10:43:14 PM Process
12/4/2009 6:51:08 PM
Process
12/4/2009 4:27:47 PM
Process
12/3/2009 4:07:09 AM
Process
12/2/2009 8:42:06 PM
Process
12/2/2009 7:36:39 PM
Process
12/2/2009 3:43:08 PM
Process
12/1/2009 3:13:44 AM
Process
11/30/2009 8:00:27 PM Process
11/30/2009 7:34:03 PM Process
11/30/2009 6:55:13 PM Process
11/30/2009 5:55:17 PM Process
11/30/2009 5:53:07 PM Process
11/30/2009 3:32:36 PM Process
11/30/2009 10:18:14 AM Process
11/26/2009 3:19:56 AM Process
11/26/2009 3:17:54 AM Process
11/24/2009 2:45:18 PM Process
11/24/2009 2:41:31 PM Process
11/21/2009 7:25:24 PM Process
11/21/2009 7:11:45 PM Process
11/21/2009 12:32:51 PM Process
11/20/2009 6:58:59 PM Process
11/20/2009 11:59:18 AM Process
11/20/2009 9:52:53 AM Process
11/19/2009 4:27:58 AM Process
11/18/2009 7:43:43 PM Process
11/18/2009 7:16:14 PM Process
11/18/2009 6:03:02 PM Process
11/18/2009 12:50:54 PM Process
11/18/2009 12:25:18 PM Process
11/18/2009 11:18:18 AM Process
11/18/2009 10:34:53 AM Process
11/17/2009 10:33:09 PM Process
11/17/2009 6:17:47 PM Process
11/17/2009 2:48:51 PM Process
dfsvc.exe (events: 7)
12/16/2009 12:33:05 AM Process
TOLOGIC\UUS2\PARETO_UPDATE.EXE
12/16/2009 12:33:00 AM Process
TOLOGIC\UUS2\PARETO_UPDATE.EXE
12/15/2009 12:33:03 AM Process
TOLOGIC\UUS2\PARETO_UPDATE.EXE
12/15/2009 12:33:00 AM Process
TOLOGIC\UUS2\PARETO_UPDATE.EXE
12/14/2009 12:33:08 AM Process
TOLOGIC\UUS2\PARETO_UPDATE.EXE
12/14/2009 12:32:59 AM Process
TOLOGIC\UUS2\PARETO_UPDATE.EXE
12/10/2009 4:49:31 AM Process

start
exit
start
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start
exit
start

C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE
C:\WINDOWS\VVX6000.EXE

exit

C:\Program Files (x86)\COMMON FILES\PARE

start

C:\Program Files (x86)\COMMON FILES\PARE

exit

C:\Program Files (x86)\COMMON FILES\PARE

start

C:\Program Files (x86)\COMMON FILES\PARE

exit

C:\Program Files (x86)\COMMON FILES\PARE

start

C:\Program Files (x86)\COMMON FILES\PARE

exit

C:\Program Files (x86)\COMMON FILES\PARE

TOLOGIC\UUS2\PARETO_UPDATE.EXE
12/10/2009 4:49:29 AM Process start
TOLOGIC\UUS2\PARETO_UPDATE.EXE
12/8/2009 12:33:18 AM Process exit
TOLOGIC\UUS2\PARETO_UPDATE.EXE
12/8/2009 12:33:00 AM Process start
TOLOGIC\UUS2\PARETO_UPDATE.EXE
12/3/2009 4:07:16 AM
Process exit
TOLOGIC\UUS2\PARETO_UPDATE.EXE
12/3/2009 4:07:16 AM
Process start
TOLOGIC\UUS2\PARETO_UPDATE.EXE
11/28/2009 12:33:01 AM Process exit
TOLOGIC\UUS2\PARETO_UPDATE.EXE
11/28/2009 12:33:00 AM Process start
TOLOGIC\UUS2\PARETO_UPDATE.EXE
11/27/2009 12:33:04 AM Process exit
TOLOGIC\UUS2\PARETO_UPDATE.EXE
11/27/2009 12:33:00 AM Process start
TOLOGIC\UUS2\PARETO_UPDATE.EXE
11/26/2009 3:20:08 AM Process exit
TOLOGIC\UUS2\PARETO_UPDATE.EXE
11/26/2009 3:20:08 AM Process start
TOLOGIC\UUS2\PARETO_UPDATE.EXE
11/26/2009 12:33:10 AM Process exit
TOLOGIC\UUS2\PARETO_UPDATE.EXE
11/26/2009 12:33:00 AM Process start
TOLOGIC\UUS2\PARETO_UPDATE.EXE
11/22/2009 12:33:12 AM Process exit
TOLOGIC\UUS2\PARETO_UPDATE.EXE
11/22/2009 12:33:00 AM Process start
TOLOGIC\UUS2\PARETO_UPDATE.EXE
dfsvc.exe (events: 7)
12/14/2009 3:47:50 PM Process exit
RCURE\DRIVERCURE.EXE
12/14/2009 12:00:00 AM Process start
RCURE\DRIVERCURE.EXE
dfsvc.exe (events: 7)
12/10/2009 4:31:56 AM Process exit
OSOFT SHARED\SOURCE ENGINE\OSE.EXE
12/10/2009 4:15:56 AM Process start
OSOFT SHARED\SOURCE ENGINE\OSE.EXE
dfsvc.exe (events: 7)
12/13/2009 2:07:15 PM Process exit
12/13/2009 2:07:11 PM Process start
12/13/2009 5:11:32 AM Process exit
12/13/2009 5:11:22 AM Process start
12/7/2009 3:21:42 PM
Process exit
12/7/2009 3:21:33 PM
Process start
11/26/2009 6:59:28 AM Process exit
11/26/2009 6:59:19 AM Process start
dfsvc.exe (events: 7)
11/18/2009 5:59:22 PM Process exit
11/18/2009 5:59:22 PM Process start
dfsvc.exe (events: 7)
11/20/2009 12:20:48 PM Process exit
E
11/20/2009 12:20:38 PM Process start
E
dfsvc.exe (events: 7)
11/24/2009 3:57:28 AM Process exit

C:\Program Files (x86)\COMMON FILES\PARE


C:\Program Files (x86)\COMMON FILES\PARE
C:\Program Files (x86)\COMMON FILES\PARE
C:\Program Files (x86)\COMMON FILES\PARE
C:\Program Files (x86)\COMMON FILES\PARE
C:\Program Files (x86)\COMMON FILES\PARE
C:\Program Files (x86)\COMMON FILES\PARE
C:\Program Files (x86)\COMMON FILES\PARE
C:\Program Files (x86)\COMMON FILES\PARE
C:\Program Files (x86)\COMMON FILES\PARE
C:\Program Files (x86)\COMMON FILES\PARE
C:\Program Files (x86)\COMMON FILES\PARE
C:\Program Files (x86)\COMMON FILES\PARE
C:\Program Files (x86)\COMMON FILES\PARE
C:\Program Files (x86)\COMMON FILES\PARE
C:\Program Files (x86)\PARETOLOGIC\DRIVE
C:\Program Files (x86)\PARETOLOGIC\DRIVE
C:\Program Files (x86)\COMMON FILES\MICR
C:\Program Files (x86)\COMMON FILES\MICR
C:\WINDOWS\SYSWOW64\WERMGR.EXE
C:\WINDOWS\SYSWOW64\WERMGR.EXE
C:\WINDOWS\SYSWOW64\WERMGR.EXE
C:\WINDOWS\SYSWOW64\WERMGR.EXE
C:\WINDOWS\SYSWOW64\WERMGR.EXE
C:\WINDOWS\SYSWOW64\WERMGR.EXE
C:\WINDOWS\SYSWOW64\WERMGR.EXE
C:\WINDOWS\SYSWOW64\WERMGR.EXE
C:\WINDOWS\system32\WPDSHEXTAUTOPLAY.EXE
C:\WINDOWS\system32\WPDSHEXTAUTOPLAY.EXE
C:\C353750B68B664333EF69534\MPSIGSTUB.EX
C:\C353750B68B664333EF69534\MPSIGSTUB.EX
C:\USERS\OWNER\APPDATA\LOCAL\MICROSOFT\W

INDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\FBFE78Q2\GOOGLEUPDATESETUP[1].EXE


11/24/2009 3:57:22 AM Process start C:\USERS\OWNER\APPDATA\LOCAL\MICROSOFT\W
INDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\FBFE78Q2\GOOGLEUPDATESETUP[1].EXE
11/24/2009 3:57:20 AM Process exit
C:\USERS\OWNER\APPDATA\LOCAL\MICROSOFT\W
INDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\FBFE78Q2\GOOGLEUPDATESETUP[1].EXE
11/24/2009 3:57:20 AM Process start C:\USERS\OWNER\APPDATA\LOCAL\MICROSOFT\W
INDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\FBFE78Q2\GOOGLEUPDATESETUP[1].EXE
dfsvc.exe (events: 7)
11/24/2009 3:57:28 AM
C:\USERS\OWNER\APPDATA\LOCAL\TEMP\GUMA092.TMP\GO
OGLEUPDATE.EXE Cannot be quarantined: Trojan.generic
11/24/2009 3:57:28 AM
C:\USERS\OWNER\APPDATA\LOCAL\TEMP\GUMA092.TMP\GO
OGLEUPDATE.EXE Terminated: Trojan.generic
11/24/2009 3:57:28 AM Process exit
C:\USERS\OWNER\APPDATA\LOCAL\TEMP\GUMA09
2.TMP\GOOGLEUPDATE.EXE
11/24/2009 3:57:28 AM Process exit
C:\USERS\OWNER\APPDATA\LOCAL\TEMP\GUMA09
2.TMP\GOOGLEUPDATE.EXE
11/24/2009 3:57:28 AM
C:\USERS\OWNER\APPDATA\LOCAL\TEMP\GUMA092.TMP\GO
OGLEUPDATE.EXE Detected: Trojan.generic
11/24/2009 3:57:28 AM
C:\USERS\OWNER\APPDATA\LOCAL\TEMP\GUMA092.TMP\GO
OGLEUPDATE.EXE Detected: Trojan.generic
11/24/2009 3:57:26 AM Process start C:\USERS\OWNER\APPDATA\LOCAL\TEMP\GUMA09
2.TMP\GOOGLEUPDATE.EXE
11/24/2009 3:57:23 AM Process start C:\USERS\OWNER\APPDATA\LOCAL\TEMP\GUMA09
2.TMP\GOOGLEUPDATE.EXE
dfsvc.exe (events: 7)
12/16/2009 8:02:00 AM Process exit
C:\Program Files (x86)\GOOGLE\UPDATE\GOO
GLEUPDATE.EXE
12/16/2009 8:01:59 AM Process start C:\Program Files (x86)\GOOGLE\UPDATE\GOO
GLEUPDATE.EXE
12/16/2009 7:02:18 AM Process exit
C:\Program Files (x86)\GOOGLE\UPDATE\GOO
GLEUPDATE.EXE
12/16/2009 7:02:18 AM Process exit
C:\Program Files (x86)\GOOGLE\UPDATE\GOO
GLEUPDATE.EXE
12/16/2009 7:02:15 AM Process exit
C:\Program Files (x86)\GOOGLE\UPDATE\GOO
GLEUPDATE.EXE
12/16/2009 7:02:15 AM Process start C:\Program Files (x86)\GOOGLE\UPDATE\GOO
GLEUPDATE.EXE
12/16/2009 7:02:15 AM Process start C:\Program Files (x86)\GOOGLE\UPDATE\GOO
GLEUPDATE.EXE
12/16/2009 7:02:15 AM Process start C:\Program Files (x86)\GOOGLE\UPDATE\GOO
GLEUPDATE.EXE
12/16/2009 6:01:59 AM Process exit
C:\Program Files (x86)\GOOGLE\UPDATE\GOO
GLEUPDATE.EXE
12/16/2009 6:01:59 AM Process start C:\Program Files (x86)\GOOGLE\UPDATE\GOO
GLEUPDATE.EXE
12/16/2009 5:02:00 AM Process exit
C:\Program Files (x86)\GOOGLE\UPDATE\GOO
GLEUPDATE.EXE
12/16/2009 5:02:00 AM Process start C:\Program Files (x86)\GOOGLE\UPDATE\GOO
GLEUPDATE.EXE
12/16/2009 5:01:59 AM Process exit
C:\Program Files (x86)\GOOGLE\UPDATE\GOO
GLEUPDATE.EXE
12/16/2009 5:01:59 AM Process start C:\Program Files (x86)\GOOGLE\UPDATE\GOO
GLEUPDATE.EXE
12/16/2009 4:02:00 AM Process exit
C:\Program Files (x86)\GOOGLE\UPDATE\GOO
GLEUPDATE.EXE
12/16/2009 4:02:00 AM Process exit
C:\Program Files (x86)\GOOGLE\UPDATE\GOO
GLEUPDATE.EXE
12/16/2009 4:02:00 AM Process exit
C:\Program Files (x86)\GOOGLE\UPDATE\GOO
GLEUPDATE.EXE
12/16/2009 4:02:00 AM Process start C:\Program Files (x86)\GOOGLE\UPDATE\GOO

GLEUPDATE.EXE
12/16/2009 4:02:00 AM
GLEUPDATE.EXE
12/16/2009 4:02:00 AM
GLEUPDATE.EXE
12/16/2009 3:02:00 AM
GLEUPDATE.EXE
12/16/2009 3:01:59 AM
GLEUPDATE.EXE
12/16/2009 2:02:00 AM
GLEUPDATE.EXE
12/16/2009 2:02:00 AM
GLEUPDATE.EXE
12/16/2009 1:02:00 AM
GLEUPDATE.EXE
12/16/2009 1:02:00 AM
GLEUPDATE.EXE
12/16/2009 12:02:00 AM
GLEUPDATE.EXE
12/16/2009 12:02:00 AM
GLEUPDATE.EXE
12/15/2009 11:02:00 PM
GLEUPDATE.EXE
12/15/2009 11:02:00 PM
GLEUPDATE.EXE
12/15/2009 10:02:00 PM
GLEUPDATE.EXE
12/15/2009 10:01:59 PM
GLEUPDATE.EXE
12/15/2009 9:01:59 PM
GLEUPDATE.EXE
12/15/2009 9:01:59 PM
GLEUPDATE.EXE
12/15/2009 8:02:00 PM
GLEUPDATE.EXE
12/15/2009 8:02:00 PM
GLEUPDATE.EXE
12/15/2009 8:01:59 PM
GLEUPDATE.EXE
12/15/2009 8:01:59 PM
GLEUPDATE.EXE
12/15/2009 7:02:00 PM
GLEUPDATE.EXE
12/15/2009 7:02:00 PM
GLEUPDATE.EXE
12/15/2009 6:02:00 PM
GLEUPDATE.EXE
12/15/2009 6:02:00 PM
GLEUPDATE.EXE
12/15/2009 5:02:00 PM
GLEUPDATE.EXE
12/15/2009 5:01:59 PM
GLEUPDATE.EXE
12/15/2009 4:02:00 PM
GLEUPDATE.EXE
12/15/2009 4:02:00 PM
GLEUPDATE.EXE
12/15/2009 3:01:59 PM
GLEUPDATE.EXE
12/15/2009 3:01:59 PM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

GLEUPDATE.EXE
12/15/2009 2:02:00 PM
GLEUPDATE.EXE
12/15/2009 2:02:00 PM
GLEUPDATE.EXE
12/15/2009 2:01:59 PM
GLEUPDATE.EXE
12/15/2009 2:01:59 PM
GLEUPDATE.EXE
12/15/2009 1:02:00 PM
GLEUPDATE.EXE
12/15/2009 1:02:00 PM
GLEUPDATE.EXE
12/15/2009 12:02:00 PM
GLEUPDATE.EXE
12/15/2009 12:01:59 PM
GLEUPDATE.EXE
12/15/2009 8:02:00 AM
GLEUPDATE.EXE
12/15/2009 8:02:00 AM
GLEUPDATE.EXE
12/15/2009 8:01:59 AM
GLEUPDATE.EXE
12/15/2009 8:01:59 AM
GLEUPDATE.EXE
12/15/2009 7:02:00 AM
GLEUPDATE.EXE
12/15/2009 7:02:00 AM
GLEUPDATE.EXE
12/15/2009 6:01:59 AM
GLEUPDATE.EXE
12/15/2009 6:01:59 AM
GLEUPDATE.EXE
12/15/2009 5:02:00 AM
GLEUPDATE.EXE
12/15/2009 5:02:00 AM
GLEUPDATE.EXE
12/15/2009 5:01:59 AM
GLEUPDATE.EXE
12/15/2009 5:01:59 AM
GLEUPDATE.EXE
12/15/2009 4:02:00 AM
GLEUPDATE.EXE
12/15/2009 4:02:00 AM
GLEUPDATE.EXE
12/15/2009 4:02:00 AM
GLEUPDATE.EXE
12/15/2009 4:02:00 AM
GLEUPDATE.EXE
12/15/2009 4:02:00 AM
GLEUPDATE.EXE
12/15/2009 4:02:00 AM
GLEUPDATE.EXE
12/15/2009 3:02:00 AM
GLEUPDATE.EXE
12/15/2009 3:01:59 AM
GLEUPDATE.EXE
12/15/2009 2:02:00 AM
GLEUPDATE.EXE
12/15/2009 2:02:00 AM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

GLEUPDATE.EXE
12/15/2009 1:02:00 AM
GLEUPDATE.EXE
12/15/2009 1:01:59 AM
GLEUPDATE.EXE
12/15/2009 12:02:00 AM
GLEUPDATE.EXE
12/15/2009 12:02:00 AM
GLEUPDATE.EXE
12/14/2009 11:02:00 PM
GLEUPDATE.EXE
12/14/2009 11:02:00 PM
GLEUPDATE.EXE
12/14/2009 10:02:00 PM
GLEUPDATE.EXE
12/14/2009 10:02:00 PM
GLEUPDATE.EXE
12/14/2009 9:02:00 PM
GLEUPDATE.EXE
12/14/2009 9:01:59 PM
GLEUPDATE.EXE
12/14/2009 8:02:00 PM
GLEUPDATE.EXE
12/14/2009 8:02:00 PM
GLEUPDATE.EXE
12/14/2009 8:01:59 PM
GLEUPDATE.EXE
12/14/2009 8:01:59 PM
GLEUPDATE.EXE
12/14/2009 7:02:00 PM
GLEUPDATE.EXE
12/14/2009 7:02:00 PM
GLEUPDATE.EXE
12/14/2009 6:02:00 PM
GLEUPDATE.EXE
12/14/2009 6:02:00 PM
GLEUPDATE.EXE
12/14/2009 4:09:38 PM
GLEUPDATE.EXE
12/14/2009 4:09:38 PM
GLEUPDATE.EXE
12/14/2009 4:09:35 PM
GLEUPDATE.EXE
12/14/2009 4:09:33 PM
GLEUPDATE.EXE
12/14/2009 4:09:33 PM
GLEUPDATE.EXE
12/14/2009 4:09:33 PM
GLEUPDATE.EXE
12/14/2009 11:02:00 AM
GLEUPDATE.EXE
12/14/2009 11:01:59 AM
GLEUPDATE.EXE
12/14/2009 6:02:00 AM
GLEUPDATE.EXE
12/14/2009 6:02:00 AM
GLEUPDATE.EXE
12/14/2009 5:02:00 AM
GLEUPDATE.EXE
12/14/2009 5:01:59 AM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

GLEUPDATE.EXE
12/14/2009 1:02:00 AM
GLEUPDATE.EXE
12/14/2009 1:01:59 AM
GLEUPDATE.EXE
12/14/2009 12:02:00 AM
GLEUPDATE.EXE
12/14/2009 12:02:00 AM
GLEUPDATE.EXE
12/13/2009 10:01:59 PM
GLEUPDATE.EXE
12/13/2009 10:01:59 PM
GLEUPDATE.EXE
12/13/2009 9:02:00 PM
GLEUPDATE.EXE
12/13/2009 9:02:00 PM
GLEUPDATE.EXE
12/13/2009 8:02:00 PM
GLEUPDATE.EXE
12/13/2009 8:02:00 PM
GLEUPDATE.EXE
12/13/2009 5:02:00 PM
GLEUPDATE.EXE
12/13/2009 5:02:00 PM
GLEUPDATE.EXE
12/13/2009 5:01:59 PM
GLEUPDATE.EXE
12/13/2009 5:01:59 PM
GLEUPDATE.EXE
12/13/2009 4:02:00 PM
GLEUPDATE.EXE
12/13/2009 4:02:00 PM
GLEUPDATE.EXE
12/13/2009 3:01:59 PM
GLEUPDATE.EXE
12/13/2009 3:01:59 PM
GLEUPDATE.EXE
12/13/2009 2:02:00 PM
GLEUPDATE.EXE
12/13/2009 2:01:59 PM
GLEUPDATE.EXE
12/13/2009 6:02:00 AM
GLEUPDATE.EXE
12/13/2009 6:02:00 AM
GLEUPDATE.EXE
12/13/2009 5:02:00 AM
GLEUPDATE.EXE
12/13/2009 5:01:59 AM
GLEUPDATE.EXE
12/12/2009 10:02:00 PM
GLEUPDATE.EXE
12/12/2009 10:01:59 PM
GLEUPDATE.EXE
12/12/2009 9:02:00 PM
GLEUPDATE.EXE
12/12/2009 9:02:00 PM
GLEUPDATE.EXE
12/12/2009 8:01:59 PM
GLEUPDATE.EXE
12/12/2009 8:01:59 PM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

GLEUPDATE.EXE
12/12/2009 6:02:00 PM
GLEUPDATE.EXE
12/12/2009 6:02:00 PM
GLEUPDATE.EXE
12/12/2009 5:02:00 PM
GLEUPDATE.EXE
12/12/2009 5:02:00 PM
GLEUPDATE.EXE
12/12/2009 4:02:00 PM
GLEUPDATE.EXE
12/12/2009 4:01:59 PM
GLEUPDATE.EXE
12/12/2009 1:02:00 PM
GLEUPDATE.EXE
12/12/2009 1:02:00 PM
GLEUPDATE.EXE
12/12/2009 12:02:00 PM
GLEUPDATE.EXE
12/12/2009 12:01:59 PM
GLEUPDATE.EXE
12/12/2009 7:02:00 AM
GLEUPDATE.EXE
12/12/2009 7:01:59 AM
GLEUPDATE.EXE
12/11/2009 10:02:00 PM
GLEUPDATE.EXE
12/11/2009 10:01:59 PM
GLEUPDATE.EXE
12/11/2009 9:01:59 PM
GLEUPDATE.EXE
12/11/2009 9:01:59 PM
GLEUPDATE.EXE
12/11/2009 8:02:00 PM
GLEUPDATE.EXE
12/11/2009 8:02:00 PM
GLEUPDATE.EXE
12/11/2009 8:01:59 PM
GLEUPDATE.EXE
12/11/2009 8:01:59 PM
GLEUPDATE.EXE
12/11/2009 7:02:00 PM
GLEUPDATE.EXE
12/11/2009 7:02:00 PM
GLEUPDATE.EXE
12/11/2009 6:02:00 PM
GLEUPDATE.EXE
12/11/2009 6:02:00 PM
GLEUPDATE.EXE
12/11/2009 5:02:00 PM
GLEUPDATE.EXE
12/11/2009 5:01:59 PM
GLEUPDATE.EXE
12/11/2009 2:02:00 PM
GLEUPDATE.EXE
12/11/2009 2:02:00 PM
GLEUPDATE.EXE
12/11/2009 1:02:00 PM
GLEUPDATE.EXE
12/11/2009 1:01:59 PM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

GLEUPDATE.EXE
12/11/2009 12:02:00 PM
GLEUPDATE.EXE
12/11/2009 12:01:59 PM
GLEUPDATE.EXE
12/11/2009 11:02:00 AM
GLEUPDATE.EXE
12/11/2009 11:02:00 AM
GLEUPDATE.EXE
12/11/2009 10:02:00 AM
GLEUPDATE.EXE
12/11/2009 10:01:59 AM
GLEUPDATE.EXE
12/11/2009 7:02:00 AM
GLEUPDATE.EXE
12/11/2009 7:02:00 AM
GLEUPDATE.EXE
12/11/2009 6:02:00 AM
GLEUPDATE.EXE
12/11/2009 6:02:00 AM
GLEUPDATE.EXE
12/11/2009 5:02:00 AM
GLEUPDATE.EXE
12/11/2009 5:02:00 AM
GLEUPDATE.EXE
12/11/2009 4:02:00 AM
GLEUPDATE.EXE
12/11/2009 4:02:00 AM
GLEUPDATE.EXE
12/11/2009 4:02:00 AM
GLEUPDATE.EXE
12/11/2009 4:02:00 AM
GLEUPDATE.EXE
12/11/2009 4:02:00 AM
GLEUPDATE.EXE
12/11/2009 4:02:00 AM
GLEUPDATE.EXE
12/10/2009 7:02:00 PM
GLEUPDATE.EXE
12/10/2009 7:02:00 PM
GLEUPDATE.EXE
12/10/2009 6:02:00 PM
GLEUPDATE.EXE
12/10/2009 6:02:00 PM
GLEUPDATE.EXE
12/10/2009 5:02:00 PM
GLEUPDATE.EXE
12/10/2009 5:02:00 PM
GLEUPDATE.EXE
12/10/2009 4:02:00 PM
GLEUPDATE.EXE
12/10/2009 4:02:00 PM
GLEUPDATE.EXE
12/10/2009 3:02:00 PM
GLEUPDATE.EXE
12/10/2009 3:01:59 PM
GLEUPDATE.EXE
12/10/2009 2:42:43 PM
GLEUPDATE.EXE
12/10/2009 2:42:16 PM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

GLEUPDATE.EXE
12/10/2009 2:42:16 PM
GLEUPDATE.EXE
12/10/2009 2:42:15 PM
GLEUPDATE.EXE
12/10/2009 2:42:15 PM
GLEUPDATE.EXE
12/10/2009 2:42:15 PM
GLEUPDATE.EXE
12/10/2009 2:02:00 PM
GLEUPDATE.EXE
12/10/2009 2:01:59 PM
GLEUPDATE.EXE
12/10/2009 5:02:00 AM
GLEUPDATE.EXE
12/10/2009 5:01:59 AM
GLEUPDATE.EXE
12/10/2009 4:49:44 AM
GLEUPDATE.EXE
12/10/2009 4:49:27 AM
GLEUPDATE.EXE
12/10/2009 4:49:27 AM
GLEUPDATE.EXE
12/10/2009 4:49:27 AM
GLEUPDATE.EXE
12/10/2009 4:49:26 AM
GLEUPDATE.EXE
12/10/2009 4:49:16 AM
GLEUPDATE.EXE
12/10/2009 4:49:12 AM
GLEUPDATE.EXE
12/10/2009 4:49:12 AM
GLEUPDATE.EXE
12/10/2009 4:09:27 AM
GLEUPDATE.EXE
12/10/2009 4:09:08 AM
GLEUPDATE.EXE
12/10/2009 4:09:08 AM
GLEUPDATE.EXE
12/10/2009 4:08:57 AM
GLEUPDATE.EXE
12/10/2009 4:08:57 AM
GLEUPDATE.EXE
12/10/2009 4:08:57 AM
GLEUPDATE.EXE
12/9/2009 3:23:52 AM
GLEUPDATE.EXE
12/9/2009 3:23:42 AM
GLEUPDATE.EXE
12/9/2009 3:23:42 AM
GLEUPDATE.EXE
12/9/2009 3:23:36 AM
GLEUPDATE.EXE
12/9/2009 3:23:36 AM
GLEUPDATE.EXE
12/9/2009 3:23:35 AM
GLEUPDATE.EXE
12/8/2009 4:02:00 PM
GLEUPDATE.EXE
12/8/2009 4:02:00 PM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

GLEUPDATE.EXE
12/8/2009 3:02:00 PM
GLEUPDATE.EXE
12/8/2009 3:02:00 PM
GLEUPDATE.EXE
12/8/2009 2:02:00 PM
GLEUPDATE.EXE
12/8/2009 2:02:00 PM
GLEUPDATE.EXE
12/8/2009 1:20:56 PM
GLEUPDATE.EXE
12/8/2009 1:20:55 PM
GLEUPDATE.EXE
12/8/2009 1:20:46 PM
GLEUPDATE.EXE
12/8/2009 1:20:42 PM
GLEUPDATE.EXE
12/8/2009 1:20:42 PM
GLEUPDATE.EXE
12/8/2009 1:20:42 PM
GLEUPDATE.EXE
12/8/2009 11:02:00 AM
GLEUPDATE.EXE
12/8/2009 11:02:00 AM
GLEUPDATE.EXE
12/8/2009 5:02:00 AM
GLEUPDATE.EXE
12/8/2009 5:02:00 AM
GLEUPDATE.EXE
12/8/2009 3:02:00 AM
GLEUPDATE.EXE
12/8/2009 3:02:00 AM
GLEUPDATE.EXE
12/8/2009 1:02:00 AM
GLEUPDATE.EXE
12/8/2009 1:02:00 AM
GLEUPDATE.EXE
12/8/2009 12:02:00 AM
GLEUPDATE.EXE
12/8/2009 12:02:00 AM
GLEUPDATE.EXE
12/7/2009 5:02:00 PM
GLEUPDATE.EXE
12/7/2009 5:02:00 PM
GLEUPDATE.EXE
12/7/2009 4:02:00 PM
GLEUPDATE.EXE
12/7/2009 4:01:59 PM
GLEUPDATE.EXE
12/7/2009 3:02:01 PM
GLEUPDATE.EXE
12/7/2009 3:02:00 PM
GLEUPDATE.EXE
12/7/2009 7:02:00 AM
GLEUPDATE.EXE
12/7/2009 7:01:59 AM
GLEUPDATE.EXE
12/7/2009 6:02:00 AM
GLEUPDATE.EXE
12/7/2009 6:02:00 AM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

GLEUPDATE.EXE
12/7/2009 5:02:00 AM
GLEUPDATE.EXE
12/7/2009 5:01:59 AM
GLEUPDATE.EXE
12/7/2009 4:02:00 AM
GLEUPDATE.EXE
12/7/2009 4:02:00 AM
GLEUPDATE.EXE
12/7/2009 4:02:00 AM
GLEUPDATE.EXE
12/7/2009 4:02:00 AM
GLEUPDATE.EXE
12/7/2009 4:02:00 AM
GLEUPDATE.EXE
12/7/2009 4:02:00 AM
GLEUPDATE.EXE
12/6/2009 4:02:00 PM
GLEUPDATE.EXE
12/6/2009 4:02:00 PM
GLEUPDATE.EXE
12/6/2009 3:02:00 PM
GLEUPDATE.EXE
12/6/2009 3:01:59 PM
GLEUPDATE.EXE
12/6/2009 6:02:00 AM
GLEUPDATE.EXE
12/6/2009 6:02:00 AM
GLEUPDATE.EXE
12/6/2009 5:02:00 AM
GLEUPDATE.EXE
12/6/2009 5:02:00 AM
GLEUPDATE.EXE
12/6/2009 4:02:00 AM
GLEUPDATE.EXE
12/6/2009 4:02:00 AM
GLEUPDATE.EXE
12/6/2009 4:02:00 AM
GLEUPDATE.EXE
12/6/2009 4:02:00 AM
GLEUPDATE.EXE
12/6/2009 4:02:00 AM
GLEUPDATE.EXE
12/6/2009 4:02:00 AM
GLEUPDATE.EXE
12/6/2009 3:02:00 AM
GLEUPDATE.EXE
12/6/2009 3:02:00 AM
GLEUPDATE.EXE
12/6/2009 2:02:00 AM
GLEUPDATE.EXE
12/6/2009 2:01:59 AM
GLEUPDATE.EXE
12/6/2009 1:02:00 AM
GLEUPDATE.EXE
12/6/2009 1:01:59 AM
GLEUPDATE.EXE
12/6/2009 12:47:50 AM
GLEUPDATE.EXE
12/6/2009 12:47:49 AM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

GLEUPDATE.EXE
12/6/2009 12:47:39 AM
GLEUPDATE.EXE
12/6/2009 12:47:12 AM
GLEUPDATE.EXE
12/6/2009 12:47:12 AM
GLEUPDATE.EXE
12/6/2009 12:47:12 AM
GLEUPDATE.EXE
12/5/2009 7:02:00 PM
GLEUPDATE.EXE
12/5/2009 7:02:00 PM
GLEUPDATE.EXE
12/5/2009 6:02:00 PM
GLEUPDATE.EXE
12/5/2009 6:02:00 PM
GLEUPDATE.EXE
12/5/2009 5:02:00 PM
GLEUPDATE.EXE
12/5/2009 5:01:59 PM
GLEUPDATE.EXE
12/5/2009 3:02:00 PM
GLEUPDATE.EXE
12/5/2009 3:02:00 PM
GLEUPDATE.EXE
12/5/2009 2:02:00 PM
GLEUPDATE.EXE
12/5/2009 2:02:00 PM
GLEUPDATE.EXE
12/5/2009 1:02:00 PM
GLEUPDATE.EXE
12/5/2009 1:01:59 PM
GLEUPDATE.EXE
12/5/2009 4:02:00 AM
GLEUPDATE.EXE
12/5/2009 4:02:00 AM
GLEUPDATE.EXE
12/5/2009 4:02:00 AM
GLEUPDATE.EXE
12/5/2009 4:02:00 AM
GLEUPDATE.EXE
12/5/2009 4:02:00 AM
GLEUPDATE.EXE
12/5/2009 4:02:00 AM
GLEUPDATE.EXE
12/5/2009 3:02:00 AM
GLEUPDATE.EXE
12/5/2009 3:01:59 AM
GLEUPDATE.EXE
12/5/2009 2:24:51 AM
GLEUPDATE.EXE
12/5/2009 2:24:51 AM
GLEUPDATE.EXE
12/5/2009 2:24:48 AM
GLEUPDATE.EXE
12/5/2009 2:24:47 AM
GLEUPDATE.EXE
12/5/2009 2:24:47 AM
GLEUPDATE.EXE
12/5/2009 2:24:47 AM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

GLEUPDATE.EXE
12/4/2009 10:02:00 PM
GLEUPDATE.EXE
12/4/2009 10:01:59 PM
GLEUPDATE.EXE
12/4/2009 9:02:00 PM
GLEUPDATE.EXE
12/4/2009 9:02:00 PM
GLEUPDATE.EXE
12/4/2009 8:02:00 PM
GLEUPDATE.EXE
12/4/2009 8:02:00 PM
GLEUPDATE.EXE
12/4/2009 7:02:00 PM
GLEUPDATE.EXE
12/4/2009 7:01:59 PM
GLEUPDATE.EXE
12/4/2009 6:51:33 PM
GLEUPDATE.EXE
12/4/2009 6:51:08 PM
GLEUPDATE.EXE
12/4/2009 6:51:08 PM
GLEUPDATE.EXE
12/4/2009 6:51:08 PM
GLEUPDATE.EXE
12/4/2009 6:51:08 PM
GLEUPDATE.EXE
12/4/2009 6:51:08 PM
GLEUPDATE.EXE
12/4/2009 4:02:00 PM
GLEUPDATE.EXE
12/4/2009 4:02:00 PM
GLEUPDATE.EXE
12/4/2009 3:02:00 PM
GLEUPDATE.EXE
12/4/2009 3:02:00 PM
GLEUPDATE.EXE
12/4/2009 2:02:00 PM
GLEUPDATE.EXE
12/4/2009 2:02:00 PM
GLEUPDATE.EXE
12/4/2009 2:01:59 PM
GLEUPDATE.EXE
12/4/2009 2:01:59 PM
GLEUPDATE.EXE
12/4/2009 1:02:00 PM
GLEUPDATE.EXE
12/4/2009 1:02:00 PM
GLEUPDATE.EXE
12/4/2009 12:02:00 PM
GLEUPDATE.EXE
12/4/2009 12:02:00 PM
GLEUPDATE.EXE
12/4/2009 6:02:00 AM
GLEUPDATE.EXE
12/4/2009 6:02:00 AM
GLEUPDATE.EXE
12/4/2009 5:02:00 AM
GLEUPDATE.EXE
12/4/2009 5:01:59 AM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

GLEUPDATE.EXE
12/3/2009 3:02:00 PM
GLEUPDATE.EXE
12/3/2009 3:01:59 PM
GLEUPDATE.EXE
12/3/2009 6:02:00 AM
GLEUPDATE.EXE
12/3/2009 6:02:00 AM
GLEUPDATE.EXE
12/3/2009 5:02:00 AM
GLEUPDATE.EXE
12/3/2009 5:01:59 AM
GLEUPDATE.EXE
12/3/2009 4:07:26 AM
GLEUPDATE.EXE
12/3/2009 4:07:09 AM
GLEUPDATE.EXE
12/3/2009 4:07:09 AM
GLEUPDATE.EXE
12/3/2009 4:07:07 AM
GLEUPDATE.EXE
12/3/2009 4:07:07 AM
GLEUPDATE.EXE
12/3/2009 4:07:07 AM
GLEUPDATE.EXE
12/2/2009 8:02:01 PM
GLEUPDATE.EXE
12/2/2009 8:02:00 PM
GLEUPDATE.EXE
12/2/2009 7:36:46 PM
GLEUPDATE.EXE
12/2/2009 7:36:43 PM
GLEUPDATE.EXE
12/2/2009 7:36:43 PM
GLEUPDATE.EXE
12/2/2009 7:36:39 PM
GLEUPDATE.EXE
12/2/2009 7:36:39 PM
GLEUPDATE.EXE
12/2/2009 7:36:39 PM
GLEUPDATE.EXE
12/2/2009 3:02:00 PM
GLEUPDATE.EXE
12/2/2009 3:01:59 PM
GLEUPDATE.EXE
12/2/2009 2:02:00 PM
GLEUPDATE.EXE
12/2/2009 2:02:00 PM
GLEUPDATE.EXE
12/2/2009 2:01:59 PM
GLEUPDATE.EXE
12/2/2009 2:01:59 PM
GLEUPDATE.EXE
12/2/2009 1:02:00 PM
GLEUPDATE.EXE
12/2/2009 1:02:00 PM
GLEUPDATE.EXE
12/2/2009 12:02:00 PM
GLEUPDATE.EXE
12/2/2009 12:01:59 PM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

GLEUPDATE.EXE
12/2/2009 8:02:00
GLEUPDATE.EXE
12/2/2009 8:02:00
GLEUPDATE.EXE
12/2/2009 8:01:59
GLEUPDATE.EXE
12/2/2009 8:01:59
GLEUPDATE.EXE
12/2/2009 7:02:00
GLEUPDATE.EXE
12/2/2009 7:02:00
GLEUPDATE.EXE
12/2/2009 6:02:00
GLEUPDATE.EXE
12/2/2009 6:02:00
GLEUPDATE.EXE
12/2/2009 5:02:00
GLEUPDATE.EXE
12/2/2009 5:02:00
GLEUPDATE.EXE
12/2/2009 4:02:00
GLEUPDATE.EXE
12/2/2009 4:02:00
GLEUPDATE.EXE
12/2/2009 4:01:59
GLEUPDATE.EXE
12/2/2009 4:01:59
GLEUPDATE.EXE
12/2/2009 4:01:59
GLEUPDATE.EXE
12/2/2009 4:01:59
GLEUPDATE.EXE
12/1/2009 7:02:00
GLEUPDATE.EXE
12/1/2009 7:01:59
GLEUPDATE.EXE
12/1/2009 5:02:00
GLEUPDATE.EXE
12/1/2009 5:01:59
GLEUPDATE.EXE
12/1/2009 4:02:00
GLEUPDATE.EXE
12/1/2009 4:02:00
GLEUPDATE.EXE
12/1/2009 4:01:59
GLEUPDATE.EXE
12/1/2009 4:01:59
GLEUPDATE.EXE
12/1/2009 3:02:00
GLEUPDATE.EXE
12/1/2009 3:02:00
GLEUPDATE.EXE
12/1/2009 2:02:00
GLEUPDATE.EXE
12/1/2009 2:01:59
GLEUPDATE.EXE
12/1/2009 7:02:00
GLEUPDATE.EXE
12/1/2009 7:02:00

AM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

GLEUPDATE.EXE
12/1/2009 7:01:59 AM
GLEUPDATE.EXE
12/1/2009 7:01:59 AM
GLEUPDATE.EXE
12/1/2009 6:02:00 AM
GLEUPDATE.EXE
12/1/2009 6:02:00 AM
GLEUPDATE.EXE
12/1/2009 5:02:00 AM
GLEUPDATE.EXE
12/1/2009 5:02:00 AM
GLEUPDATE.EXE
12/1/2009 4:02:00 AM
GLEUPDATE.EXE
12/1/2009 4:02:00 AM
GLEUPDATE.EXE
12/1/2009 4:02:00 AM
GLEUPDATE.EXE
12/1/2009 4:01:59 AM
GLEUPDATE.EXE
12/1/2009 4:01:59 AM
GLEUPDATE.EXE
12/1/2009 4:01:59 AM
GLEUPDATE.EXE
12/1/2009 3:14:30 AM
GLEUPDATE.EXE
12/1/2009 3:14:30 AM
GLEUPDATE.EXE
12/1/2009 3:14:16 AM
GLEUPDATE.EXE
12/1/2009 3:13:45 AM
GLEUPDATE.EXE
12/1/2009 3:13:45 AM
GLEUPDATE.EXE
12/1/2009 3:13:44 AM
GLEUPDATE.EXE
11/30/2009 7:34:37 PM
GLEUPDATE.EXE
11/30/2009 7:34:37 PM
GLEUPDATE.EXE
11/30/2009 7:34:36 PM
GLEUPDATE.EXE
11/30/2009 7:34:03 PM
GLEUPDATE.EXE
11/30/2009 7:34:03 PM
GLEUPDATE.EXE
11/30/2009 7:34:03 PM
GLEUPDATE.EXE
11/30/2009 6:02:00 PM
GLEUPDATE.EXE
11/30/2009 6:02:00 PM
GLEUPDATE.EXE
11/30/2009 5:55:32 PM
GLEUPDATE.EXE
11/30/2009 5:55:20 PM
GLEUPDATE.EXE
11/30/2009 5:55:20 PM
GLEUPDATE.EXE
11/30/2009 5:55:17 PM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

GLEUPDATE.EXE
11/30/2009 5:55:17
GLEUPDATE.EXE
11/30/2009 5:55:17
GLEUPDATE.EXE
11/30/2009 5:02:00
GLEUPDATE.EXE
11/30/2009 5:01:59
GLEUPDATE.EXE
11/30/2009 4:02:00
GLEUPDATE.EXE
11/30/2009 4:02:00
GLEUPDATE.EXE
11/30/2009 3:32:41
GLEUPDATE.EXE
11/30/2009 3:32:41
GLEUPDATE.EXE
11/30/2009 3:32:36
GLEUPDATE.EXE
11/30/2009 3:32:36
GLEUPDATE.EXE
11/30/2009 3:32:36
GLEUPDATE.EXE
11/30/2009 6:02:00
GLEUPDATE.EXE
11/30/2009 6:01:59
GLEUPDATE.EXE
11/29/2009 6:02:00
GLEUPDATE.EXE
11/29/2009 6:02:00
GLEUPDATE.EXE
11/29/2009 3:02:00
GLEUPDATE.EXE
11/29/2009 3:01:59
GLEUPDATE.EXE
11/29/2009 6:02:00
GLEUPDATE.EXE
11/29/2009 6:02:00
GLEUPDATE.EXE
11/29/2009 5:02:00
GLEUPDATE.EXE
11/29/2009 5:02:00
GLEUPDATE.EXE
11/28/2009 7:02:00
GLEUPDATE.EXE
11/28/2009 7:02:00
GLEUPDATE.EXE
11/28/2009 6:02:00
GLEUPDATE.EXE
11/28/2009 6:02:00
GLEUPDATE.EXE
11/28/2009 5:02:00
GLEUPDATE.EXE
11/28/2009 5:01:59
GLEUPDATE.EXE
11/28/2009 4:02:00
GLEUPDATE.EXE
11/28/2009 4:02:00
GLEUPDATE.EXE
11/28/2009 3:02:00

PM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

GLEUPDATE.EXE
11/28/2009 3:01:59 PM
GLEUPDATE.EXE
11/28/2009 2:02:00 PM
GLEUPDATE.EXE
11/28/2009 2:02:00 PM
GLEUPDATE.EXE
11/28/2009 1:02:00 PM
GLEUPDATE.EXE
11/28/2009 1:01:59 PM
GLEUPDATE.EXE
11/28/2009 12:02:00 PM
GLEUPDATE.EXE
11/28/2009 12:01:59 PM
GLEUPDATE.EXE
11/28/2009 11:02:00 AM
GLEUPDATE.EXE
11/28/2009 11:02:00 AM
GLEUPDATE.EXE
11/28/2009 10:02:00 AM
GLEUPDATE.EXE
11/28/2009 10:01:59 AM
GLEUPDATE.EXE
11/28/2009 9:01:59 AM
GLEUPDATE.EXE
11/28/2009 9:01:59 AM
GLEUPDATE.EXE
11/28/2009 8:02:00 AM
GLEUPDATE.EXE
11/28/2009 8:02:00 AM
GLEUPDATE.EXE
11/28/2009 7:02:00 AM
GLEUPDATE.EXE
11/28/2009 7:02:00 AM
GLEUPDATE.EXE
11/28/2009 6:01:59 AM
GLEUPDATE.EXE
11/28/2009 6:01:59 AM
GLEUPDATE.EXE
11/28/2009 5:02:01 AM
GLEUPDATE.EXE
11/28/2009 5:02:01 AM
GLEUPDATE.EXE
11/28/2009 4:02:00 AM
GLEUPDATE.EXE
11/28/2009 4:02:00 AM
GLEUPDATE.EXE
11/28/2009 4:02:00 AM
GLEUPDATE.EXE
11/28/2009 4:01:59 AM
GLEUPDATE.EXE
11/28/2009 4:01:59 AM
GLEUPDATE.EXE
11/28/2009 4:01:59 AM
GLEUPDATE.EXE
11/28/2009 3:01:59 AM
GLEUPDATE.EXE
11/28/2009 3:01:59 AM
GLEUPDATE.EXE
11/28/2009 2:02:00 AM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

GLEUPDATE.EXE
11/28/2009 2:02:00 AM
GLEUPDATE.EXE
11/28/2009 1:02:00 AM
GLEUPDATE.EXE
11/28/2009 1:01:59 AM
GLEUPDATE.EXE
11/28/2009 12:02:00 AM
GLEUPDATE.EXE
11/28/2009 12:01:59 AM
GLEUPDATE.EXE
11/27/2009 11:01:59 PM
GLEUPDATE.EXE
11/27/2009 11:01:59 PM
GLEUPDATE.EXE
11/27/2009 10:02:00 PM
GLEUPDATE.EXE
11/27/2009 10:02:00 PM
GLEUPDATE.EXE
11/27/2009 10:01:59 PM
GLEUPDATE.EXE
11/27/2009 10:01:59 PM
GLEUPDATE.EXE
11/27/2009 9:02:00 PM
GLEUPDATE.EXE
11/27/2009 9:02:00 PM
GLEUPDATE.EXE
11/27/2009 4:01:59 PM
GLEUPDATE.EXE
11/27/2009 4:01:59 PM
GLEUPDATE.EXE
11/27/2009 1:02:00 PM
GLEUPDATE.EXE
11/27/2009 1:02:00 PM
GLEUPDATE.EXE
11/27/2009 12:02:00 PM
GLEUPDATE.EXE
11/27/2009 12:02:00 PM
GLEUPDATE.EXE
11/27/2009 3:01:59 AM
GLEUPDATE.EXE
11/27/2009 3:01:59 AM
GLEUPDATE.EXE
11/27/2009 2:02:00 AM
GLEUPDATE.EXE
11/27/2009 2:02:00 AM
GLEUPDATE.EXE
11/27/2009 1:02:00 AM
GLEUPDATE.EXE
11/27/2009 1:01:59 AM
GLEUPDATE.EXE
11/26/2009 8:02:00 PM
GLEUPDATE.EXE
11/26/2009 8:02:00 PM
GLEUPDATE.EXE
11/26/2009 8:01:59 PM
GLEUPDATE.EXE
11/26/2009 8:01:59 PM
GLEUPDATE.EXE
11/26/2009 7:02:00 PM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

GLEUPDATE.EXE
11/26/2009 7:02:00
GLEUPDATE.EXE
11/26/2009 6:02:00
GLEUPDATE.EXE
11/26/2009 6:02:00
GLEUPDATE.EXE
11/26/2009 5:02:00
GLEUPDATE.EXE
11/26/2009 5:02:00
GLEUPDATE.EXE
11/26/2009 4:02:00
GLEUPDATE.EXE
11/26/2009 4:02:00
GLEUPDATE.EXE
11/26/2009 3:01:59
GLEUPDATE.EXE
11/26/2009 3:01:59
GLEUPDATE.EXE
11/26/2009 1:02:00
GLEUPDATE.EXE
11/26/2009 1:01:59
GLEUPDATE.EXE
11/26/2009 8:02:00
GLEUPDATE.EXE
11/26/2009 8:01:59
GLEUPDATE.EXE
11/26/2009 7:02:00
GLEUPDATE.EXE
11/26/2009 7:02:00
GLEUPDATE.EXE
11/26/2009 4:02:00
GLEUPDATE.EXE
11/26/2009 4:02:00
GLEUPDATE.EXE
11/26/2009 4:02:00
GLEUPDATE.EXE
11/26/2009 4:02:00
GLEUPDATE.EXE
11/26/2009 4:01:59
GLEUPDATE.EXE
11/26/2009 4:01:59
GLEUPDATE.EXE
11/26/2009 3:20:19
GLEUPDATE.EXE
11/26/2009 3:19:54
GLEUPDATE.EXE
11/26/2009 3:19:54
GLEUPDATE.EXE
11/26/2009 3:19:54
GLEUPDATE.EXE
11/26/2009 3:19:54
GLEUPDATE.EXE
11/26/2009 3:19:53
GLEUPDATE.EXE
11/26/2009 3:19:48
GLEUPDATE.EXE
11/26/2009 3:19:48
GLEUPDATE.EXE
11/26/2009 3:02:11

PM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

PM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

AM

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

GLEUPDATE.EXE
11/26/2009 3:02:10 AM
GLEUPDATE.EXE
11/26/2009 1:02:00 AM
GLEUPDATE.EXE
11/26/2009 1:01:59 AM
GLEUPDATE.EXE
11/26/2009 12:02:00 AM
GLEUPDATE.EXE
11/26/2009 12:01:59 AM
GLEUPDATE.EXE
11/25/2009 11:02:00 PM
GLEUPDATE.EXE
11/25/2009 11:02:00 PM
GLEUPDATE.EXE
11/25/2009 10:02:00 PM
GLEUPDATE.EXE
11/25/2009 10:02:00 PM
GLEUPDATE.EXE
11/25/2009 9:02:00 PM
GLEUPDATE.EXE
11/25/2009 9:02:00 PM
GLEUPDATE.EXE
11/25/2009 8:02:00 PM
GLEUPDATE.EXE
11/25/2009 8:02:00 PM
GLEUPDATE.EXE
11/25/2009 8:01:59 PM
GLEUPDATE.EXE
11/25/2009 8:01:59 PM
GLEUPDATE.EXE
11/25/2009 7:02:00 PM
GLEUPDATE.EXE
11/25/2009 7:02:00 PM
GLEUPDATE.EXE
11/25/2009 6:02:00 PM
GLEUPDATE.EXE
11/25/2009 6:02:00 PM
GLEUPDATE.EXE
11/25/2009 5:02:00 PM
GLEUPDATE.EXE
11/25/2009 5:02:00 PM
GLEUPDATE.EXE
11/25/2009 5:01:59 PM
GLEUPDATE.EXE
11/25/2009 5:01:59 PM
GLEUPDATE.EXE
11/25/2009 4:02:00 PM
GLEUPDATE.EXE
11/25/2009 4:02:00 PM
GLEUPDATE.EXE
11/25/2009 3:02:00 PM
GLEUPDATE.EXE
11/25/2009 3:01:59 PM
GLEUPDATE.EXE
11/25/2009 2:02:00 PM
GLEUPDATE.EXE
11/25/2009 2:02:00 PM
GLEUPDATE.EXE
11/25/2009 1:02:00 PM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

GLEUPDATE.EXE
11/25/2009 1:01:59 PM
GLEUPDATE.EXE
11/25/2009 6:02:00 AM
GLEUPDATE.EXE
11/25/2009 6:02:00 AM
GLEUPDATE.EXE
11/25/2009 5:01:59 AM
GLEUPDATE.EXE
11/25/2009 5:01:59 AM
GLEUPDATE.EXE
11/25/2009 4:02:01 AM
GLEUPDATE.EXE
11/25/2009 4:02:00 AM
GLEUPDATE.EXE
11/25/2009 4:02:00 AM
GLEUPDATE.EXE
11/25/2009 4:02:00 AM
GLEUPDATE.EXE
11/25/2009 4:02:00 AM
GLEUPDATE.EXE
11/25/2009 4:02:00 AM
GLEUPDATE.EXE
11/25/2009 3:02:01 AM
GLEUPDATE.EXE
11/25/2009 3:02:00 AM
GLEUPDATE.EXE
11/24/2009 5:02:00 PM
GLEUPDATE.EXE
11/24/2009 5:02:00 PM
GLEUPDATE.EXE
11/24/2009 4:02:00 PM
GLEUPDATE.EXE
11/24/2009 4:02:00 PM
GLEUPDATE.EXE
11/24/2009 3:02:00 PM
GLEUPDATE.EXE
11/24/2009 3:01:59 PM
GLEUPDATE.EXE
11/24/2009 2:45:41 PM
GLEUPDATE.EXE
11/24/2009 2:45:41 PM
GLEUPDATE.EXE
11/24/2009 2:45:33 PM
GLEUPDATE.EXE
11/24/2009 2:45:18 PM
GLEUPDATE.EXE
11/24/2009 2:45:18 PM
GLEUPDATE.EXE
11/24/2009 2:45:18 PM
GLEUPDATE.EXE
11/24/2009 2:02:00 PM
GLEUPDATE.EXE
11/24/2009 2:01:59 PM
GLEUPDATE.EXE
11/24/2009 11:02:00 AM
GLEUPDATE.EXE
11/24/2009 11:01:59 AM
GLEUPDATE.EXE
11/24/2009 5:02:00 AM

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

Process exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

GLEUPDATE.EXE
11/24/2009 5:02:00 AM Process
GLEUPDATE.EXE
11/24/2009 4:02:00 AM Process
GLEUPDATE.EXE
11/24/2009 4:02:00 AM Process
GLEUPDATE.EXE
11/24/2009 4:02:00 AM Process
GLEUPDATE.EXE
11/24/2009 4:02:00 AM Process
GLEUPDATE.EXE
11/24/2009 4:02:00 AM Process
GLEUPDATE.EXE
11/24/2009 4:02:00 AM Process
GLEUPDATE.EXE
11/24/2009 4:01:44 AM Process
GLEUPDATE.EXE
11/24/2009 4:01:44 AM Process
GLEUPDATE.EXE
11/24/2009 4:01:42 AM Process
GLEUPDATE.EXE
11/24/2009 3:58:09 AM Process
GLEUPDATE.EXE
11/24/2009 3:57:34 AM Process
GLEUPDATE.EXE
11/24/2009 3:57:33 AM Process
GLEUPDATE.EXE
11/24/2009 3:57:33 AM Process
GLEUPDATE.EXE
11/24/2009 3:57:33 AM Process
GLEUPDATE.EXE
11/24/2009 3:57:33 AM Process
GLEUPDATE.EXE
11/24/2009 3:57:33 AM Process
GLEUPDATE.EXE
11/24/2009 3:57:33 AM Process
GLEUPDATE.EXE
11/24/2009 3:57:27 AM Process
GLEUPDATE.EXE
dfsvc.exe (events: 7)
12/16/2009 4:02:00 AM Process
.183.13\GOOGLECRASHHANDLER.EXE
12/16/2009 4:02:00 AM Process
.183.13\GOOGLECRASHHANDLER.EXE
12/15/2009 4:02:00 AM Process
.183.13\GOOGLECRASHHANDLER.EXE
12/15/2009 4:02:00 AM Process
.183.13\GOOGLECRASHHANDLER.EXE
12/11/2009 4:02:00 AM Process
.183.13\GOOGLECRASHHANDLER.EXE
12/11/2009 4:02:00 AM Process
.183.13\GOOGLECRASHHANDLER.EXE
12/10/2009 4:49:27 AM Process
.183.13\GOOGLECRASHHANDLER.EXE
12/10/2009 4:49:27 AM Process
.183.13\GOOGLECRASHHANDLER.EXE
12/7/2009 4:02:00 AM
Process
.183.13\GOOGLECRASHHANDLER.EXE
12/7/2009 4:02:00 AM
Process
.183.13\GOOGLECRASHHANDLER.EXE

start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

exit

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

start

C:\Program Files (x86)\GOOGLE\UPDATE\GOO

exit

C:\Program Files (x86)\GOOGLE\UPDATE\1.2

start

C:\Program Files (x86)\GOOGLE\UPDATE\1.2

exit

C:\Program Files (x86)\GOOGLE\UPDATE\1.2

start

C:\Program Files (x86)\GOOGLE\UPDATE\1.2

exit

C:\Program Files (x86)\GOOGLE\UPDATE\1.2

start

C:\Program Files (x86)\GOOGLE\UPDATE\1.2

exit

C:\Program Files (x86)\GOOGLE\UPDATE\1.2

start

C:\Program Files (x86)\GOOGLE\UPDATE\1.2

exit

C:\Program Files (x86)\GOOGLE\UPDATE\1.2

start

C:\Program Files (x86)\GOOGLE\UPDATE\1.2

12/6/2009 4:02:00 AM
Process exit
C:\Program Files (x86)\GOOGLE\UPDATE\1.2
.183.13\GOOGLECRASHHANDLER.EXE
12/6/2009 4:02:00 AM
Process start C:\Program Files (x86)\GOOGLE\UPDATE\1.2
.183.13\GOOGLECRASHHANDLER.EXE
12/5/2009 4:02:00 AM
Process exit
C:\Program Files (x86)\GOOGLE\UPDATE\1.2
.183.13\GOOGLECRASHHANDLER.EXE
12/5/2009 4:02:00 AM
Process start C:\Program Files (x86)\GOOGLE\UPDATE\1.2
.183.13\GOOGLECRASHHANDLER.EXE
12/2/2009 4:02:00 AM
Process exit
C:\Program Files (x86)\GOOGLE\UPDATE\1.2
.183.13\GOOGLECRASHHANDLER.EXE
12/2/2009 4:01:59 AM
Process start C:\Program Files (x86)\GOOGLE\UPDATE\1.2
.183.13\GOOGLECRASHHANDLER.EXE
12/1/2009 4:02:00 AM
Process exit
C:\Program Files (x86)\GOOGLE\UPDATE\1.2
.183.13\GOOGLECRASHHANDLER.EXE
12/1/2009 4:02:00 AM
Process start C:\Program Files (x86)\GOOGLE\UPDATE\1.2
.183.13\GOOGLECRASHHANDLER.EXE
11/28/2009 4:02:00 AM Process exit
C:\Program Files (x86)\GOOGLE\UPDATE\1.2
.183.13\GOOGLECRASHHANDLER.EXE
11/28/2009 4:02:00 AM Process start C:\Program Files (x86)\GOOGLE\UPDATE\1.2
.183.13\GOOGLECRASHHANDLER.EXE
11/26/2009 4:02:00 AM Process exit
C:\Program Files (x86)\GOOGLE\UPDATE\1.2
.183.13\GOOGLECRASHHANDLER.EXE
11/26/2009 4:02:00 AM Process start C:\Program Files (x86)\GOOGLE\UPDATE\1.2
.183.13\GOOGLECRASHHANDLER.EXE
11/26/2009 3:19:54 AM Process exit
C:\Program Files (x86)\GOOGLE\UPDATE\1.2
.183.13\GOOGLECRASHHANDLER.EXE
11/26/2009 3:19:54 AM Process start C:\Program Files (x86)\GOOGLE\UPDATE\1.2
.183.13\GOOGLECRASHHANDLER.EXE
11/25/2009 4:02:00 AM Process exit
C:\Program Files (x86)\GOOGLE\UPDATE\1.2
.183.13\GOOGLECRASHHANDLER.EXE
11/25/2009 4:02:00 AM Process start C:\Program Files (x86)\GOOGLE\UPDATE\1.2
.183.13\GOOGLECRASHHANDLER.EXE
11/24/2009 4:02:00 AM Process exit
C:\Program Files (x86)\GOOGLE\UPDATE\1.2
.183.13\GOOGLECRASHHANDLER.EXE
11/24/2009 4:02:00 AM Process start C:\Program Files (x86)\GOOGLE\UPDATE\1.2
.183.13\GOOGLECRASHHANDLER.EXE
11/24/2009 3:57:34 AM Process exit
C:\Program Files (x86)\GOOGLE\UPDATE\1.2
.183.13\GOOGLECRASHHANDLER.EXE
11/24/2009 3:57:34 AM Process start C:\Program Files (x86)\GOOGLE\UPDATE\1.2
.183.13\GOOGLECRASHHANDLER.EXE
dfsvc.exe (events: 7)
11/24/2009 4:01:12 AM Process exit
C:\Program Files (x86)\GOOGLE\UPDATE\DOW
NLOAD\{BA61FFF7-88FD-4501-B193-A3596E546D1C}\GOOGLEEARTH-WIN-5.1.3533.1731.EXE
11/24/2009 3:58:33 AM Process start C:\Program Files (x86)\GOOGLE\UPDATE\DOW
NLOAD\{BA61FFF7-88FD-4501-B193-A3596E546D1C}\GOOGLEEARTH-WIN-5.1.3533.1731.EXE
dfsvc.exe (events: 7)
11/24/2009 4:01:09 AM Process exit
C:\USERS\OWNER\APPDATA\LOCAL\TEMP\7ZIPSF
X.000\GOOGLEEARTH.EXE
11/24/2009 3:58:43 AM Process start C:\USERS\OWNER\APPDATA\LOCAL\TEMP\7ZIPSF
X.000\GOOGLEEARTH.EXE
dfsvc.exe (events: 7)
12/15/2009 12:08:20 AM Process exit
C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD
\INSTALL\MPAS-D_BD1.EXE
12/15/2009 12:08:15 AM Process start C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD
\INSTALL\MPAS-D_BD1.EXE
12/10/2009 2:10:57 PM Process exit
C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD
\INSTALL\MPAS-D_BD1.EXE
12/10/2009 2:10:51 PM Process start C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD
\INSTALL\MPAS-D_BD1.EXE
12/7/2009 2:17:31 PM
Process exit
C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD

\INSTALL\MPAS-D_BD1.EXE
12/7/2009 2:17:24 PM
Process start C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD
\INSTALL\MPAS-D_BD1.EXE
12/3/2009 2:18:25 PM
Process exit
C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD
\INSTALL\MPAS-D_BD1.EXE
12/3/2009 2:18:18 PM
Process start C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD
\INSTALL\MPAS-D_BD1.EXE
11/30/2009 3:38:36 PM Process exit
C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD
\INSTALL\MPAS-D_BD1.EXE
11/30/2009 3:38:32 PM Process start C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD
\INSTALL\MPAS-D_BD1.EXE
11/27/2009 12:44:51 AM Process exit
C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD
\INSTALL\MPAS-D_BD1.EXE
11/27/2009 12:44:46 AM Process start C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD
\INSTALL\MPAS-D_BD1.EXE
11/24/2009 4:00:28 AM Process exit
C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD
\INSTALL\MPAS-D_BD1.EXE
11/24/2009 4:00:23 AM Process start C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD
\INSTALL\MPAS-D_BD1.EXE
dfsvc.exe (events: 7)
11/24/2009 4:00:28 AM Process exit
C:\DADEA64AE731F48709289D\MPMINISIGSTUB.
EXE
11/24/2009 4:00:25 AM Process start C:\DADEA64AE731F48709289D\MPMINISIGSTUB.
EXE
dfsvc.exe (events: 7)
12/15/2009 12:08:20 AM Process exit
C:\WINDOWS\system32\MPSIGSTUB.EXE
12/15/2009 12:08:17 AM Process start C:\WINDOWS\system32\MPSIGSTUB.EXE
12/10/2009 2:10:57 PM Process exit
C:\WINDOWS\system32\MPSIGSTUB.EXE
12/10/2009 2:10:53 PM Process start C:\WINDOWS\system32\MPSIGSTUB.EXE
12/7/2009 2:17:30 PM
Process exit
C:\WINDOWS\system32\MPSIGSTUB.EXE
12/7/2009 2:17:27 PM
Process start C:\WINDOWS\system32\MPSIGSTUB.EXE
12/3/2009 2:18:25 PM
Process exit
C:\WINDOWS\system32\MPSIGSTUB.EXE
12/3/2009 2:18:20 PM
Process start C:\WINDOWS\system32\MPSIGSTUB.EXE
11/30/2009 3:38:36 PM Process exit
C:\WINDOWS\system32\MPSIGSTUB.EXE
11/30/2009 3:38:34 PM Process start C:\WINDOWS\system32\MPSIGSTUB.EXE
11/27/2009 12:44:51 AM Process exit
C:\WINDOWS\system32\MPSIGSTUB.EXE
11/27/2009 12:44:48 AM Process start C:\WINDOWS\system32\MPSIGSTUB.EXE
11/24/2009 4:00:28 AM Process exit
C:\WINDOWS\system32\MPSIGSTUB.EXE
11/24/2009 4:00:25 AM Process start C:\WINDOWS\system32\MPSIGSTUB.EXE
dfsvc.exe (events: 7)
11/24/2009 4:01:42 AM Process exit
C:\Program Files (x86)\GOOGLE\UPDATE\DOW
NLOAD\{EE1F72EE-3F59-4520-944F-FDD7025AC009}\CHROME_INSTALLER.EXE
11/24/2009 4:01:18 AM Process start C:\Program Files (x86)\GOOGLE\UPDATE\DOW
NLOAD\{EE1F72EE-3F59-4520-944F-FDD7025AC009}\CHROME_INSTALLER.EXE
dfsvc.exe (events: 7)
11/24/2009 4:01:21 AM Process exit
C:\WINDOWS\SYSWOW64\EXPAND.EXE
11/24/2009 4:01:19 AM Process start C:\WINDOWS\SYSWOW64\EXPAND.EXE
dfsvc.exe (events: 7)
11/24/2009 4:01:42 AM Process exit
C:\USERS\OWNER\APPDATA\LOCAL\TEMP\CR_39E
3.TMP\SETUP.EXE
11/24/2009 4:01:22 AM Process start C:\USERS\OWNER\APPDATA\LOCAL\TEMP\CR_39E
3.TMP\SETUP.EXE
dfsvc.exe (events: 7)
11/24/2009 4:05:30 AM Process exit
C:\Program Files (x86)\GOOGLE\GOOGLE EAR
TH\CLIENT\GOOGLEEARTH.EXE
11/24/2009 4:01:44 AM Process start C:\Program Files (x86)\GOOGLE\GOOGLE EAR
TH\CLIENT\GOOGLEEARTH.EXE
dfsvc.exe (events: 7)
11/25/2009 12:30:34 PM Process exit
C:\Program Files (x86)\GOOGLE\CHROME\APP
LICATION\CHROME.EXE

11/25/2009 12:30:34 PM
LICATION\CHROME.EXE
11/25/2009 12:30:34 PM
LICATION\CHROME.EXE
11/25/2009 12:30:32 PM
LICATION\CHROME.EXE
11/25/2009 12:30:32 PM
LICATION\CHROME.EXE
11/25/2009 12:30:29 PM
LICATION\CHROME.EXE
11/25/2009 12:30:26 PM
LICATION\CHROME.EXE
11/25/2009 12:30:26 PM
LICATION\CHROME.EXE
11/25/2009 12:30:25 PM
LICATION\CHROME.EXE
11/25/2009 12:30:25 PM
LICATION\CHROME.EXE
11/25/2009 12:30:17 PM
LICATION\CHROME.EXE
11/25/2009 12:30:17 PM
LICATION\CHROME.EXE
11/25/2009 12:30:14 PM
LICATION\CHROME.EXE
11/25/2009 12:30:12 PM
LICATION\CHROME.EXE
11/25/2009 12:30:11 PM
LICATION\CHROME.EXE
11/25/2009 12:30:11 PM
LICATION\CHROME.EXE
11/25/2009 12:30:09 PM
LICATION\CHROME.EXE
11/25/2009 12:30:09 PM
LICATION\CHROME.EXE
dfsvc.exe (events: 7)
11/25/2009 12:30:26 PM
LICATION\WOW_HELPER.EXE
11/25/2009 12:30:26 PM
LICATION\WOW_HELPER.EXE
11/25/2009 12:30:25 PM
LICATION\WOW_HELPER.EXE
11/25/2009 12:30:25 PM
LICATION\WOW_HELPER.EXE
11/25/2009 12:30:17 PM
LICATION\WOW_HELPER.EXE
11/25/2009 12:30:17 PM
LICATION\WOW_HELPER.EXE
11/25/2009 12:30:12 PM
LICATION\WOW_HELPER.EXE
11/25/2009 12:30:12 PM
LICATION\WOW_HELPER.EXE
11/25/2009 12:30:11 PM
LICATION\WOW_HELPER.EXE
11/25/2009 12:30:11 PM
LICATION\WOW_HELPER.EXE
dfsvc.exe (events: 7)
11/25/2009 7:45:29 PM
ATE\GTB5A23.TMP.EXE
11/25/2009 7:32:19 PM
ATE\GTB5A23.TMP.EXE

Process exit

C:\Program Files (x86)\GOOGLE\CHROME\APP

Process exit

C:\Program Files (x86)\GOOGLE\CHROME\APP

Process exit

C:\Program Files (x86)\GOOGLE\CHROME\APP

Process exit

C:\Program Files (x86)\GOOGLE\CHROME\APP

Process exit

C:\Program Files (x86)\GOOGLE\CHROME\APP

Process start

C:\Program Files (x86)\GOOGLE\CHROME\APP

Process start

C:\Program Files (x86)\GOOGLE\CHROME\APP

Process exit

C:\Program Files (x86)\GOOGLE\CHROME\APP

Process start

C:\Program Files (x86)\GOOGLE\CHROME\APP

Process exit

C:\Program Files (x86)\GOOGLE\CHROME\APP

Process start

C:\Program Files (x86)\GOOGLE\CHROME\APP

Process start

C:\Program Files (x86)\GOOGLE\CHROME\APP

Process start

C:\Program Files (x86)\GOOGLE\CHROME\APP

Process start

C:\Program Files (x86)\GOOGLE\CHROME\APP

Process exit

C:\Program Files (x86)\GOOGLE\CHROME\APP

Process start

C:\Program Files (x86)\GOOGLE\CHROME\APP

Process start

C:\Program Files (x86)\GOOGLE\CHROME\APP

Process exit

C:\Program Files (x86)\GOOGLE\CHROME\APP

Process start

C:\Program Files (x86)\GOOGLE\CHROME\APP

Process exit

C:\Program Files (x86)\GOOGLE\CHROME\APP

Process start

C:\Program Files (x86)\GOOGLE\CHROME\APP

Process exit

C:\Program Files (x86)\GOOGLE\CHROME\APP

Process start

C:\Program Files (x86)\GOOGLE\CHROME\APP

Process exit

C:\Program Files (x86)\GOOGLE\CHROME\APP

Process start

C:\Program Files (x86)\GOOGLE\CHROME\APP

Process exit

C:\Program Files (x86)\GOOGLE\CHROME\APP

Process start

C:\Program Files (x86)\GOOGLE\CHROME\APP

Process exit

C:\PROGRAMDATA\GOOGLE\GOOGLE TOOLBAR\UPD

Process exit

C:\PROGRAMDATA\GOOGLE\GOOGLE TOOLBAR\UPD

11/25/2009 7:32:18 PM Process start C:\PROGRAMDATA\GOOGLE\GOOGLE TOOLBAR\UPD


ATE\GTB5A23.TMP.EXE
11/25/2009 7:32:18 PM Process start C:\PROGRAMDATA\GOOGLE\GOOGLE TOOLBAR\UPD
ATE\GTB5A23.TMP.EXE
dfsvc.exe (events: 7)
11/25/2009 7:45:29 PM Process exit
C:\Program Files (x86)\GOOGLE\GOOGLE TOO
LBAR\COMPONENT\GOOGLETOOLBARMANAGER_0E996B068B56FCA2.EXE
11/25/2009 7:45:29 PM Process start C:\Program Files (x86)\GOOGLE\GOOGLE TOO
LBAR\COMPONENT\GOOGLETOOLBARMANAGER_0E996B068B56FCA2.EXE
11/25/2009 7:45:29 PM Process exit
C:\Program Files (x86)\GOOGLE\GOOGLE TOO
LBAR\COMPONENT\GOOGLETOOLBARMANAGER_0E996B068B56FCA2.EXE
11/25/2009 7:45:29 PM Process start C:\Program Files (x86)\GOOGLE\GOOGLE TOO
LBAR\COMPONENT\GOOGLETOOLBARMANAGER_0E996B068B56FCA2.EXE
11/25/2009 7:45:29 PM Process exit
C:\Program Files (x86)\GOOGLE\GOOGLE TOO
LBAR\COMPONENT\GOOGLETOOLBARMANAGER_0E996B068B56FCA2.EXE
11/25/2009 7:45:26 PM Process start C:\Program Files (x86)\GOOGLE\GOOGLE TOO
LBAR\COMPONENT\GOOGLETOOLBARMANAGER_0E996B068B56FCA2.EXE
dfsvc.exe (events: 7)
11/25/2009 7:45:28 PM Process exit
C:\Program Files (x86)\GOOGLE\GOOGLE TOO
LBAR\COMPONENT\SEARCHWITHGOOGLEUPDATE_C58171F2E8870EA4.EXE
11/25/2009 7:45:28 PM Process start C:\Program Files (x86)\GOOGLE\GOOGLE TOO
LBAR\COMPONENT\SEARCHWITHGOOGLEUPDATE_C58171F2E8870EA4.EXE
dfsvc.exe (events: 7)
11/26/2009 3:19:49 AM Process exit
C:\WINDOWS\WINSXS\X86_MICROSOFT-WINDOWSI..RNATIONAL-TIMEZONES_31BF3856AD364E35_6.0.6001.18351_NONE_15124CD609B9AD64\TZU
PD.EXE
11/26/2009 3:19:49 AM Process start C:\WINDOWS\WINSXS\X86_MICROSOFT-WINDOWSI..RNATIONAL-TIMEZONES_31BF3856AD364E35_6.0.6001.18351_NONE_15124CD609B9AD64\TZU
PD.EXE
dfsvc.exe (events: 7)
11/26/2009 3:19:49 AM Process exit
C:\WINDOWS\WINSXS\AMD64_MICROSOFT-WINDOW
S-I..RNATIONAL-TIMEZONES_31BF3856AD364E35_6.0.6001.18351_NONE_7130E859C2171E9A\T
ZUPD.EXE
11/26/2009 3:19:49 AM Process start C:\WINDOWS\WINSXS\AMD64_MICROSOFT-WINDOW
S-I..RNATIONAL-TIMEZONES_31BF3856AD364E35_6.0.6001.18351_NONE_7130E859C2171E9A\T
ZUPD.EXE
dfsvc.exe (events: 7)
11/27/2009 12:44:51 AM Process exit
C:\67BF7500BFD5D4C72B48D946003D0803\MPMI
NISIGSTUB.EXE
11/27/2009 12:44:48 AM Process start C:\67BF7500BFD5D4C72B48D946003D0803\MPMI
NISIGSTUB.EXE
dfsvc.exe (events: 7)
11/30/2009 3:38:36 PM Process exit
C:\4E12AD808ADCF5CF54F3AC515841EB\MPMINI
SIGSTUB.EXE
11/30/2009 3:38:34 PM Process start C:\4E12AD808ADCF5CF54F3AC515841EB\MPMINI
SIGSTUB.EXE
dfsvc.exe (events: 7)
12/2/2009 8:40:36 PM
Process exit
C:\Program Files (x86)\ARCSOFT\PRINT CRE
ATIONS\PRINTCREATIONS.EXE
12/2/2009 8:39:41 PM
Process start C:\Program Files (x86)\ARCSOFT\PRINT CRE
ATIONS\PRINTCREATIONS.EXE
dfsvc.exe (events: 7)
12/2/2009 8:40:41 PM
Process exit
C:\Program Files (x86)\ARCSOFT\PRINT CRE
ATIONS\CHECKUPDATE.EXE
12/2/2009 8:39:42 PM
Process start C:\Program Files (x86)\ARCSOFT\PRINT CRE
ATIONS\CHECKUPDATE.EXE
dfsvc.exe (events: 7)
12/2/2009 8:39:43 PM
Process exit
C:\Program Files (x86)\ARCSOFT\PRINT CRE
ATIONS\PRINTCREATIONSUP.EXE
12/2/2009 8:39:42 PM
Process start C:\Program Files (x86)\ARCSOFT\PRINT CRE

ATIONS\PRINTCREATIONSUP.EXE
dfsvc.exe (events: 7)
12/3/2009 2:18:25 PM
Process exit
C:\761B8BF3E0D8F91A9444C26AD01CD1\MPMINI
SIGSTUB.EXE
12/3/2009 2:18:20 PM
Process start C:\761B8BF3E0D8F91A9444C26AD01CD1\MPMINI
SIGSTUB.EXE
dfsvc.exe (events: 7)
12/7/2009 2:17:30 PM
Process exit
C:\F9790F311036E66521F6\MPMINISIGSTUB.EX
E
12/7/2009 2:17:26 PM
Process start C:\F9790F311036E66521F6\MPMINISIGSTUB.EX
E
dfsvc.exe (events: 7)
12/10/2009 2:10:57 PM Process exit
C:\AF49481D0913CFE108B495D5F43713C2\MPMI
NISIGSTUB.EXE
12/10/2009 2:10:53 PM Process start C:\AF49481D0913CFE108B495D5F43713C2\MPMI
NISIGSTUB.EXE
dfsvc.exe (events: 7)
12/11/2009 9:18:06 AM Process exit
C:\USERS\OWNER\APPDATA\ROAMING\MOVE NETW
ORKS\IE_BIN\MOVEPLAYERUPGRADE.EXE
12/11/2009 9:18:04 AM Process start C:\USERS\OWNER\APPDATA\ROAMING\MOVE NETW
ORKS\IE_BIN\MOVEPLAYERUPGRADE.EXE
12/11/2009 9:18:04 AM Process exit
C:\USERS\OWNER\APPDATA\ROAMING\MOVE NETW
ORKS\IE_BIN\MOVEPLAYERUPGRADE.EXE
12/11/2009 9:18:04 AM Process start C:\USERS\OWNER\APPDATA\ROAMING\MOVE NETW
ORKS\IE_BIN\MOVEPLAYERUPGRADE.EXE
dfsvc.exe (events: 7)
12/11/2009 9:18:06 AM Process exit
C:\USERS\OWNER\APPDATA\ROAMING\MOVE NETW
ORKS\MOVEMEDIAPLAYERWIN_071701000002.EXE
12/11/2009 9:18:05 AM Process start C:\USERS\OWNER\APPDATA\ROAMING\MOVE NETW
ORKS\MOVEMEDIAPLAYERWIN_071701000002.EXE
dfsvc.exe (events: 7)
12/15/2009 12:08:20 AM Process exit
C:\385B9F839C1DA47144\MPMINISIGSTUB.EXE
12/15/2009 12:08:17 AM Process start C:\385B9F839C1DA47144\MPMINISIGSTUB.EXE
dfsvc.exe (events: 7)
12/16/2009 8:50:41 AM Process start C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.
0.50727\DFSVC.EXE
12/16/2009 8:50:41 AM Process exit
C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.
0.50727\DFSVC.EXE
12/16/2009 8:50:41 AM Process start C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.
0.50727\DFSVC.EXE
12/16/2009 8:51:27 AM
C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.0.50727\
DFSVC.EXE
Detected: Worm.P2P.generic
12/16/2009 8:51:27 AM
C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.0.50727\
DFSVC.EXE
Detected: Worm.P2P.generic
12/16/2009 8:51:27 AM Process exit
C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.
0.50727\DFSVC.EXE
12/16/2009 8:51:27 AM
C:\WINDOWS\MICROSOFT.NET\FRAMEWORK64\V2.0.50727\
DFSVC.EXE
Terminated: Worm.P2P.generic
dfsvc.exe (events: 7)
12/16/2009 8:51:27 AM
C:\USERS\OWNER\APPDATA\LOCAL\APPS\2.0\PQN41WA7.X
QL\XC2GQ7V8.6AQ\CITR..RTER_1F7B1EA3A3243E4A_0001.0000_700DA25142ADCBB3\APPCORE.E
XE
Not terminated: Worm.P2P.generic
12/16/2009 8:51:27 AM
C:\USERS\OWNER\APPDATA\LOCAL\APPS\2.0\PQN41WA7.X
QL\XC2GQ7V8.6AQ\CITR..RTER_1F7B1EA3A3243E4A_0001.0000_700DA25142ADCBB3\APPCORE.E
XE
Detected: Worm.P2P.generic
12/16/2009 8:51:27 AM
C:\USERS\OWNER\APPDATA\LOCAL\APPS\2.0\PQN41WA7.X
QL\XC2GQ7V8.6AQ\CITR..RTER_1F7B1EA3A3243E4A_0001.0000_700DA25142ADCBB3\APPCORE.E
XE
Detected: Worm.P2P.generic
12/16/2009 8:51:26 AM Process exit
C:\USERS\OWNER\APPDATA\LOCAL\APPS\2.0\PQ
N41WA7.XQL\XC2GQ7V8.6AQ\CITR..RTER_1F7B1EA3A3243E4A_0001.0000_700DA25142ADCBB3\A

PPCORE.EXE
12/16/2009 8:51:03 AM Process start C:\USERS\OWNER\APPDATA\LOCAL\APPS\2.0\PQ
N41WA7.XQL\XC2GQ7V8.6AQ\CITR..RTER_1F7B1EA3A3243E4A_0001.0000_700DA25142ADCBB3\A
PPCORE.EXE
dfsvc.exe (events: 7)
12/16/2009 8:51:19 AM Process exit
C:\USERS\OWNER\GOTOASSISTDOWNLOADHELPER.
EXE
12/16/2009 8:51:19 AM Process start C:\USERS\OWNER\GOTOASSISTDOWNLOADHELPER.
EXE
dfsvc.exe (events: 7)
12/16/2009 8:51:27 AM
C:\USERS\OWNER\APPDATA\LOCAL\CITRIX\GOTOASSIST\G
OTOASSIST_CHAT2WAY_SERVICE_570_EN.EXE Terminated: Worm.P2P.generic
12/16/2009 8:51:27 AM Process exit
C:\USERS\OWNER\APPDATA\LOCAL\CITRIX\GOTO
ASSIST\GOTOASSIST_CHAT2WAY_SERVICE_570_EN.EXE
12/16/2009 8:51:27 AM
C:\USERS\OWNER\APPDATA\LOCAL\CITRIX\GOTOASSIST\G
OTOASSIST_CHAT2WAY_SERVICE_570_EN.EXE Detected: Worm.P2P.generic
12/16/2009 8:51:27 AM
C:\USERS\OWNER\APPDATA\LOCAL\CITRIX\GOTOASSIST\G
OTOASSIST_CHAT2WAY_SERVICE_570_EN.EXE Detected: Worm.P2P.generic
12/16/2009 8:51:25 AM Process start C:\USERS\OWNER\APPDATA\LOCAL\CITRIX\GOTO
ASSIST\GOTOASSIST_CHAT2WAY_SERVICE_570_EN.EXE
dfsvc.exe (events: 7)
12/16/2009 8:51:27 AM Process exit
C:\USERS\OWNER\APPDATA\LOCAL\TEMP\CITRIX
\GOTOASSIST\570\G2A5A71.TMP\G2AINSTALLER.EXE
12/16/2009 8:51:26 AM
C:\USERS\OWNER\APPDATA\LOCAL\TEMP\CITRIX\GOTOASS
IST\570\G2A5A71.TMP\G2AINSTALLER.EXE
Terminated: Worm.P2P.generic
12/16/2009 8:51:26 AM
C:\USERS\OWNER\APPDATA\LOCAL\TEMP\CITRIX\GOTOASS
IST\570\G2A5A71.TMP\G2AINSTALLER.EXE
Detected: Worm.P2P.generic
12/16/2009 8:51:26 AM
C:\USERS\OWNER\APPDATA\LOCAL\TEMP\CITRIX\GOTOASS
IST\570\G2A5A71.TMP\G2AINSTALLER.EXE
Detected: Worm.P2P.generic
12/16/2009 8:51:26 AM Process start C:\USERS\OWNER\APPDATA\LOCAL\TEMP\CITRIX
\GOTOASSIST\570\G2A5A71.TMP\G2AINSTALLER.EXE
dfsvc.exe (events: 7)
12/10/2009 4:47:08 AM Process exit
C:\WINDOWS\system32\SPOOLSV.EXE
12/10/2009 4:47:08 AM Process exit
C:\WINDOWS\system32\SVCHOST.EXE
12/10/2009 4:47:08 AM Process start C:\Program Files (x86)\Kaspersky Lab\Kas
persky Anti-Virus 2009\X64\WMI64.EXE
12/9/2009 3:28:28 AM
Process start C:\Program Files (x86)\Kaspersky Lab\Kas
persky Anti-Virus 2009\X64\WMI64.EXE
12/8/2009 9:15:56 PM
Process start C:\Program Files (x86)\Kaspersky Lab\Kas
persky Anti-Virus 2009\X64\WMI64.EXE
12/5/2009 7:28:59 PM
Process start C:\Program Files (x86)\Kaspersky Lab\Kas
persky Anti-Virus 2009\X64\WMI64.EXE
12/4/2009 10:43:18 PM Process start C:\Program Files (x86)\Kaspersky Lab\Kas
persky Anti-Virus 2009\X64\WMI64.EXE
12/4/2009 4:27:52 PM
Process start C:\Program Files (x86)\Kaspersky Lab\Kas
persky Anti-Virus 2009\X64\WMI64.EXE
12/2/2009 8:42:10 PM
Process start C:\Program Files (x86)\Kaspersky Lab\Kas
persky Anti-Virus 2009\X64\WMI64.EXE
12/2/2009 3:43:12 PM
Process start C:\Program Files (x86)\Kaspersky Lab\Kas
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 8:00:32 PM Process start C:\Program Files (x86)\Kaspersky Lab\Kas
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 6:55:17 PM Process start C:\Program Files (x86)\Kaspersky Lab\Kas
persky Anti-Virus 2009\X64\WMI64.EXE
11/30/2009 5:53:11 PM Process start C:\Program Files (x86)\Kaspersky Lab\Kas
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:18:03 AM Process start C:\Program Files (x86)\Kaspersky Lab\Kas
persky Anti-Virus 2009\X64\WMI64.EXE
11/26/2009 3:18:02 AM Process exit
C:\WINDOWS\system32\SVCHOST.EXE
11/20/2009 6:59:04 PM Process start C:\Program Files (x86)\Kaspersky Lab\Kas

persky Anti-Virus 2009\X64\WMI64.EXE


11/18/2009 6:03:06 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/18/2009 6:03:06 PM Process exit
11/18/2009 10:34:57 AM Process exit
11/17/2009 6:17:51 PM Process start
persky Anti-Virus 2009\X64\WMI64.EXE
11/17/2009 2:30:16 AM Process start
persky Anti-Virus 2009\X64\WMI64.EXE

C:\Program Files (x86)\Kaspersky Lab\Kas


C:\WINDOWS\system32\AUDIODG.EXE
C:\WINDOWS\system32\SVCHOST.EXE
C:\Program Files (x86)\Kaspersky Lab\Kas
C:\Program Files (x86)\Kaspersky Lab\Kas

Vous aimerez peut-être aussi