|
file
|
04/27 15:12:20
|
C:\Program Files\Internet Explorer\IEXPLORE.EXE
|
C:\avmhto.exe
|
-
|
|
|
file
|
04/27 15:12:20
|
C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
|
C:\WINDOWS\system32\sdra64.exe
|
-
|
|
|
file
|
04/27 15:12:21
|
C:\WINDOWS\system32\services.exe
|
C:\WINDOWS\system32\lowsec\user.ds
|
-
|
|
|
registry
|
04/27 15:12:21
|
C:\WINDOWS\system32\lsass.exe
|
HKU\.DEFAULT\Software\Microsoft\Protected Storage System Provider\S-1-5-18\Data 2\Windows\Value
|
-
|
|
|
registry
|
04/27 15:12:21
|
C:\WINDOWS\system32\lsass.exe
|
HKU\.DEFAULT\Software\Microsoft\Protected Storage System Provider\S-1-5-18\Migrate
|
-
|
|
|
registry
|
04/27 15:12:21
|
C:\WINDOWS\system32\services.exe
|
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Cache
|
-
|
|
|
registry
|
04/27 15:12:21
|
C:\WINDOWS\system32\services.exe
|
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\Directory
|
-
|
|
|
registry
|
04/27 15:12:21
|
C:\WINDOWS\system32\services.exe
|
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\Paths
|
-
|
|
|
registry
|
04/27 15:12:21
|
C:\WINDOWS\system32\services.exe
|
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1\CachePath
|
-
|
|
|
registry
|
04/27 15:12:21
|
C:\WINDOWS\system32\services.exe
|
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2\CachePath
|
-
|
|
|
registry
|
04/27 15:12:21
|
C:\WINDOWS\system32\services.exe
|
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3\CachePath
|
-
|
|
|
registry
|
04/27 15:12:21
|
C:\WINDOWS\system32\services.exe
|
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4\CachePath
|
-
|
|
|
registry
|
04/27 15:12:21
|
C:\WINDOWS\system32\services.exe
|
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1\CacheLimit
|
-
|
|
|
registry
|
04/27 15:12:21
|
C:\WINDOWS\system32\services.exe
|
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2\CacheLimit
|
-
|
|
|
registry
|
04/27 15:12:21
|
C:\WINDOWS\system32\services.exe
|
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3\CacheLimit
|
-
|
|
|
registry
|
04/27 15:12:21
|
C:\WINDOWS\system32\services.exe
|
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4\CacheLimit
|
-
|
|
|
registry
|
04/27 15:12:21
|
C:\WINDOWS\system32\services.exe
|
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Cookies
|
-
|
|
|
registry
|
04/27 15:12:21
|
C:\WINDOWS\system32\services.exe
|
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\History
|
-
|
|
|
file
|
04/27 15:12:21
|
C:\WINDOWS\system32\svchost.exe
|
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\L7BRFQGI\desktop.ini
|
-
|
|
|
file
|
04/27 15:12:22
|
C:\WINDOWS\system32\svchost.exe
|
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\92LWX2HK\desktop.ini
|
-
|
|
|
file
|
04/27 15:12:22
|
C:\WINDOWS\system32\svchost.exe
|
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\470BMV6L\desktop.ini
|
-
|
|
|
file
|
04/27 15:12:22
|
System
|
C:\WINDOWS\system32\sdra64.exe
|
-
|
|
|
registry
|
04/27 15:12:21
|
C:\WINDOWS\system32\services.exe
|
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\AppData
|
-
|
|
|
file
|
04/27 15:12:22
|
C:\WINDOWS\system32\svchost.exe
|
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\Q52ZY3MX\desktop.ini
|
-
|
|
|
registry
|
04/27 15:12:21
|
C:\WINDOWS\system32\services.exe
|
HKU\.DEFAULT\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\ParseAutoexec
|
-
|
|
|
registry
|
04/27 15:12:21
|
C:\WINDOWS\system32\services.exe
|
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Common AppData
|
-
|
|
|
file
|
04/27 15:12:22
|
C:\WINDOWS\system32\svchost.exe
|
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\40J8GL1X\desktop.ini
|
-
|
|
|
file
|
04/27 15:12:23
|
C:\WINDOWS\system32\svchost.exe
|
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\40J8GL1X
|
-
|
|
|
registry
|
04/27 15:12:21
|
C:\WINDOWS\system32\lsass.exe
|
HKU\S-1-5-20\Software\Microsoft\Protected Storage System Provider\S-1-5-20\Data 2\Windows\Value
|
-
|
|
|
registry
|
04/27 15:12:21
|
C:\WINDOWS\system32\lsass.exe
|
HKU\S-1-5-20\Software\Microsoft\Protected Storage System Provider\S-1-5-20\Migrate
|
-
|
|
|
file
|
04/27 15:12:23
|
C:\WINDOWS\system32\svchost.exe
|
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\BFS2DG34\desktop.ini
|
-
|
|
|
file
|
04/27 15:12:23
|
C:\WINDOWS\system32\svchost.exe
|
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\BFS2DG34
|
-
|
|
|
file
|
04/27 15:12:23
|
C:\WINDOWS\system32\svchost.exe
|
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\FRHBQUW2\desktop.ini
|
-
|
|
|
file
|
04/27 15:12:23
|
C:\WINDOWS\system32\svchost.exe
|
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\FRHBQUW2
|
-
|
|
|
file
|
04/27 15:12:23
|
C:\WINDOWS\system32\svchost.exe
|
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\LERRV50T\desktop.ini
|
-
|
|
|
file
|
04/27 15:12:23
|
C:\WINDOWS\system32\svchost.exe
|
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\LERRV50T
|
-
|
|
|
file
|
04/27 15:12:23
|
System
|
C:\WINDOWS\system32\sdra64.exe
|
-
|
|
|
registry
|
04/27 15:12:22
|
C:\WINDOWS\system32\alg.exe
|
HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\AppData
|
-
|
|
|
file
|
04/27 15:12:24
|
C:\WINDOWS\system32\svchost.exe
|
C:\WINDOWS\system32\lowsec\local.ds
|
-
|
|
|
file
|
04/27 15:12:54
|
C:\WINDOWS\system32\svchost.exe
|
C:\WINDOWS\system32\lowsec\user.ds.lll
|
-
|
|
