Running from: C:\Documents and Settings\Tanmay\Desktop\Win32kDiag.exe Log file at : C:\Documents and Settings\Tanmay\Desktop\Win32kDiag.txt WARNING: Could not get backup privileges! Searching 'C:\WINDOWS'... Found mount point : C:\WINDOWS\assembly\temp\temp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\assembly\tmp\tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\cache\cache Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Config\Config Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Connection Wizard\Connection Wizard Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Debug\UserMode\UserMode Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Downloaded Installations\Downloaded Installations Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\ftpcache\ftpcache Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Help\SBSI\Training\WXPPer\Cbz\Cbz Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Help\SBSI\Training\WXPPer\Lib\Lib Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Help\SBSI\Training\WXPPer\Wave\Wave Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\ime\imejp\applets\applets Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\ime\imejp98\imejp98 Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\D7314F9862C648A4DB8BE2A5B47BE100\1.0.0\1.0.0 Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\java\classes\classes Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\java\trustlib\trustlib Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\Bind Logs\Bind Logs Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\msapps\msinfo\msinfo Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\mui\mui Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\occache\occache Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\pchealth\ERRORREP\QHEADLES\QHEADLES Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\pchealth\ERRORREP\QSIGNOFF\QSIGNOFF Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\pchealth\ERRORREP\UserDumps\UserDumps Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\pchealth\helpctr\BATCH\BATCH Mount point destination : \Device\__max++>\^ Cannot access: C:\WINDOWS\pchealth\helpctr\binaries\HelpSvc.exe [1] 2004-08-04 06:00:00 743936 C:\WINDOWS\pchealth\helpctr\binaries\HelpSvc.exe () [1] 2008-04-13 19:12:21 744448 C:\WINDOWS\SoftwareDistribution\Download\cf8ec753e88561d2ddb53e183dc05c3e\helpsvc.exe (Microsoft Corporation) Found mount point : C:\WINDOWS\pchealth\helpctr\Config\CheckPoint\CheckPoint Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\pchealth\helpctr\HelpFiles\HelpFiles Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\pchealth\helpctr\InstalledSKUs\InstalledSKUs Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\pchealth\helpctr\System\DFS\DFS Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\pchealth\helpctr\System\News\News Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\pchealth\helpctr\Temp\Temp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Registration\CRMLog\CRMLog Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\SoftwareDistribution\AuthCabs\Downloaded\Downloaded Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\SoftwareDistribution\Download\2342e087142544189c3e4dbf170c3418\2342e087142544189c3e4dbf170c3418 Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\SoftwareDistribution\Download\355f788b6de8a3ec79e9aa172e6317f1\backup\backup Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\SoftwareDistribution\Download\71a994314faa34c74b73fcac7756eea1\backup\backup Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\SoftwareDistribution\Download\cf8ec753e88561d2ddb53e183dc05c3e\backup\asms\10\policy\policy Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\SoftwareDistribution\Download\cf8ec753e88561d2ddb53e183dc05c3e\backup\asms\51\msft\msft Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\SoftwareDistribution\Download\cf8ec753e88561d2ddb53e183dc05c3e\backup\asms\51\policy\msft\msft Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\SoftwareDistribution\Download\cf8ec753e88561d2ddb53e183dc05c3e\backup\asms\52\msft\msft Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\SoftwareDistribution\Download\cf8ec753e88561d2ddb53e183dc05c3e\backup\asms\52\policy\msft\msft Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\SoftwareDistribution\Download\cf8ec753e88561d2ddb53e183dc05c3e\backup\asms\60\msft\msft Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\SoftwareDistribution\Download\cf8ec753e88561d2ddb53e183dc05c3e\backup\asms\70\70 Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Sun\Java\Deployment\Deployment Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\SxsCaPendDel\SxsCaPendDel Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\1025\1025 Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\1028\1028 Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\1031\1031 Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\1037\1037 Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\1041\1041 Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\1042\1042 Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\1054\1054 Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\2052\2052 Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\3076\3076 Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\3com_dmi\3com_dmi Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\CatRoot_bak\CatRoot_bak Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Adobe\Flash Player\AssetCache\3BEV3TFW\3BEV3TFW Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch1\ch1 Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch2\ch2 Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Identities\{DFF16927-88E6-4EAA-A097-460B7E65289B}\{DFF16927-88E6-4EAA-A097-460B7E65289B} Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Jasc Software Inc\Paint Shop Pro Studio\Paint Shop Pro Studio Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\Credentials\S-1-5-21-1708537768-616249376-725345543-1003\S-1-5-21-1708537768-616249376-725345543-1003 Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\Credentials\S-1-5-21-4283292653-2942478987-3006737494-1003\S-1-5-21-4283292653-2942478987-3006737494-1003 Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\Crypto\RSA\S-1-5-21-4283292653-2942478987-3006737494-1003\S-1-5-21-4283292653-2942478987-3006737494-1003 Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\Media Player\Media Player Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\SystemCertificates\My\Certificates\Certificates Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\SystemCertificates\My\CRLs\CRLs Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\SystemCertificates\My\CTLs\CTLs Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Sun\Java\Deployment\javaws\cache\cache Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\BVRP Software\NetWaiting\NetWaiting Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Microsoft\CD Burning\CD Burning Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Credentials\S-1-5-21-1708537768-616249376-725345543-1003\S-1-5-21-1708537768-616249376-725345543-1003 Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Credentials\S-1-5-21-4283292653-2942478987-3006737494-1003\S-1-5-21-4283292653-2942478987-3006737494-1003 Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Microsoft\OFFICE\OFFICE Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\config\systemprofile\Local Settings\Temp\Temp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\config\systemprofile\NetHood\NetHood Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\config\systemprofile\PrintHood\PrintHood Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\CTF\CTF Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\dhcp\dhcp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\drivers\disdn\disdn Mount point destination : \Device\__max++>\^ Cannot access: C:\WINDOWS\system32\dumprep.exe [1] 2008-04-13 19:12:18 10752 C:\WINDOWS\SoftwareDistribution\Download\cf8ec753e88561d2ddb53e183dc05c3e\dumprep.exe (Microsoft Corporation) [1] 2004-08-04 06:00:00 10752 C:\WINDOWS\system32\dumprep.exe () [1] 2004-08-04 06:00:00 10752 C:\i386\dumprep.exe (Microsoft Corporation) Cannot access: C:\WINDOWS\system32\eventlog.dll [1] 2008-04-13 19:11:53 56320 C:\WINDOWS\SoftwareDistribution\Download\cf8ec753e88561d2ddb53e183dc05c3e\eventlog.dll (Microsoft Corporation) [1] 2004-08-04 06:00:00 61952 C:\WINDOWS\system32\eventlog.dll () [2] 2004-08-04 06:00:00 55808 C:\WINDOWS\system32\logevent.dll (Microsoft Corporation) [1] 2004-08-04 06:00:00 55808 C:\i386\eventlog.dll (Microsoft Corporation) Found mount point : C:\WINDOWS\system32\export\export Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\inetsrv\inetsrv Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\LogFiles\WUDF\WUDF Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\Microsoft\Crypto\RSA\MachineKeys\MachineKeys Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\mui\dispspec\dispspec Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\oobe\html\ispsgnup\ispsgnup Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\oobe\html\oemcust\oemcust Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\oobe\html\oemhw\oemhw Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\oobe\html\oemreg\oemreg Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\oobe\sample\sample Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\QuickTime\QuickTime Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\ShellExt\ShellExt Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\spool\drivers\IA64\IA64 Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\spool\drivers\WIN40\WIN40 Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\spool\drivers\x64\x64 Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\wbem\mof\bad\bad Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\wbem\mof\good\good Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\wbem\snmp\snmp Mount point destination : \Device\__max++>\^ Cannot access: C:\WINDOWS\system32\wbem\wmiprvse.exe [1] 2009-02-06 04:41:05 227840 C:\WINDOWS\$hf_mig$\KB956572\SP2QFE\wmiprvse.exe (Microsoft Corporation) [1] 2009-02-06 05:10:02 227840 C:\WINDOWS\$hf_mig$\KB956572\SP3GDR\wmiprvse.exe (Microsoft Corporation) [1] 2009-02-06 05:15:13 227840 C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\wmiprvse.exe (Microsoft Corporation) [1] 2004-08-04 06:00:00 218112 C:\WINDOWS\$NtUninstallKB956572$\wmiprvse.exe (Microsoft Corporation) [1] 2008-04-13 19:12:40 218112 C:\WINDOWS\SoftwareDistribution\Download\cf8ec753e88561d2ddb53e183dc05c3e\wmiprvse.exe (Microsoft Corporation) [1] 2009-02-06 11:39:29 227840 C:\WINDOWS\system32\dllcache\wmiprvse.exe (Microsoft Corporation) [1] 2009-02-06 11:39:29 227840 C:\WINDOWS\system32\wbem\wmiprvse.exe () [1] 2004-08-04 06:00:00 218112 C:\i386\wmiprvse.exe (Microsoft Corporation) Found mount point : C:\WINDOWS\system32\wins\wins Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\system32\xircom\xircom Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\1.tmp\1.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\10.tmp\10.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\11.tmp\11.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\12.tmp\12.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\13.tmp\13.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\14.tmp\14.tmp Mount point destination : \Device\__max++>\^ Cannot access: C:\WINDOWS\Temp\17.tmp\FI.exe [1] 2009-10-16 23:28:26 110592 C:\WINDOWS\Temp\17.tmp\FI.exe () [1] 2009-10-16 23:31:47 110592 C:\WINDOWS\Temp\18.tmp\FI.exe () [1] 2009-10-16 23:35:27 110592 C:\WINDOWS\Temp\19.tmp\FI.exe () [1] 2009-10-16 23:39:06 110592 C:\WINDOWS\Temp\1A.tmp\FI.exe () [1] 2009-10-16 23:42:47 110592 C:\WINDOWS\Temp\1B.tmp\FI.exe () [1] 2009-10-16 23:45:36 110592 C:\WINDOWS\Temp\1C.tmp\FI.exe () [1] 2009-10-16 23:49:15 110592 C:\WINDOWS\Temp\1D.tmp\FI.exe () [1] 2009-10-16 23:52:58 110592 C:\WINDOWS\Temp\1E.tmp\FI.exe () [1] 2009-10-16 23:56:37 110592 C:\WINDOWS\Temp\1F.tmp\FI.exe () [1] 2009-10-17 00:00:16 110592 C:\WINDOWS\Temp\20.tmp\FI.exe () [1] 2009-10-17 00:03:55 110592 C:\WINDOWS\Temp\22.tmp\FI.exe () [1] 2009-10-16 23:07:29 110592 C:\WINDOWS\Temp\4.tmp\FI.exe () [1] 2009-10-17 09:42:46 110592 C:\WINDOWS\Temp\44.tmp\FI.exe () [1] 2009-10-19 18:01:15 110592 C:\WINDOWS\Temp\53.tmp\FI.exe () [1] 2009-10-19 18:06:12 110592 C:\WINDOWS\Temp\57.tmp\FI.exe () [1] 2009-10-19 18:09:39 110592 C:\WINDOWS\Temp\58.tmp\FI.exe () [1] 2009-10-19 18:13:03 110592 C:\WINDOWS\Temp\59.tmp\FI.exe () [1] 2009-10-20 04:34:42 110592 C:\WINDOWS\Temp\5B.tmp\FI.exe () [1] 2009-10-19 18:23:38 110592 C:\WINDOWS\Temp\64.tmp\FI.exe () [1] 2009-10-20 18:13:44 110592 C:\WINDOWS\Temp\6C.tmp\FI.exe () [1] 2009-10-19 18:26:36 110592 C:\WINDOWS\Temp\6D.tmp\FI.exe () [1] 2009-10-19 18:30:16 110592 C:\WINDOWS\Temp\6E.tmp\FI.exe () [1] 2009-10-19 18:33:42 110592 C:\WINDOWS\Temp\6F.tmp\FI.exe () [1] 2009-10-20 18:27:34 110592 C:\WINDOWS\Temp\70.tmp\FI.exe () [1] 2009-10-20 18:34:40 110592 C:\WINDOWS\Temp\71.tmp\FI.exe () [1] 2009-10-20 18:41:09 110592 C:\WINDOWS\Temp\72.tmp\FI.exe () [1] 2009-10-20 18:48:52 110592 C:\WINDOWS\Temp\73.tmp\FI.exe () [1] 2009-10-20 18:58:36 110592 C:\WINDOWS\Temp\74.tmp\FI.exe () Cannot access: C:\WINDOWS\Temp\18.tmp\FI.exe [1] 2009-10-16 23:28:26 110592 C:\WINDOWS\Temp\17.tmp\FI.exe () [1] 2009-10-16 23:31:47 110592 C:\WINDOWS\Temp\18.tmp\FI.exe () [1] 2009-10-16 23:35:27 110592 C:\WINDOWS\Temp\19.tmp\FI.exe () [1] 2009-10-16 23:39:06 110592 C:\WINDOWS\Temp\1A.tmp\FI.exe () [1] 2009-10-16 23:42:47 110592 C:\WINDOWS\Temp\1B.tmp\FI.exe () [1] 2009-10-16 23:45:36 110592 C:\WINDOWS\Temp\1C.tmp\FI.exe () [1] 2009-10-16 23:49:15 110592 C:\WINDOWS\Temp\1D.tmp\FI.exe () [1] 2009-10-16 23:52:58 110592 C:\WINDOWS\Temp\1E.tmp\FI.exe () [1] 2009-10-16 23:56:37 110592 C:\WINDOWS\Temp\1F.tmp\FI.exe () [1] 2009-10-17 00:00:16 110592 C:\WINDOWS\Temp\20.tmp\FI.exe () [1] 2009-10-17 00:03:55 110592 C:\WINDOWS\Temp\22.tmp\FI.exe () [1] 2009-10-16 23:07:29 110592 C:\WINDOWS\Temp\4.tmp\FI.exe () [1] 2009-10-17 09:42:46 110592 C:\WINDOWS\Temp\44.tmp\FI.exe () [1] 2009-10-19 18:01:15 110592 C:\WINDOWS\Temp\53.tmp\FI.exe () [1] 2009-10-19 18:06:12 110592 C:\WINDOWS\Temp\57.tmp\FI.exe () [1] 2009-10-19 18:09:39 110592 C:\WINDOWS\Temp\58.tmp\FI.exe () [1] 2009-10-19 18:13:03 110592 C:\WINDOWS\Temp\59.tmp\FI.exe () [1] 2009-10-20 04:34:42 110592 C:\WINDOWS\Temp\5B.tmp\FI.exe () [1] 2009-10-19 18:23:38 110592 C:\WINDOWS\Temp\64.tmp\FI.exe () [1] 2009-10-20 18:13:44 110592 C:\WINDOWS\Temp\6C.tmp\FI.exe () [1] 2009-10-19 18:26:36 110592 C:\WINDOWS\Temp\6D.tmp\FI.exe () [1] 2009-10-19 18:30:16 110592 C:\WINDOWS\Temp\6E.tmp\FI.exe () [1] 2009-10-19 18:33:42 110592 C:\WINDOWS\Temp\6F.tmp\FI.exe () [1] 2009-10-20 18:27:34 110592 C:\WINDOWS\Temp\70.tmp\FI.exe () [1] 2009-10-20 18:34:40 110592 C:\WINDOWS\Temp\71.tmp\FI.exe () [1] 2009-10-20 18:41:09 110592 C:\WINDOWS\Temp\72.tmp\FI.exe () [1] 2009-10-20 18:48:52 110592 C:\WINDOWS\Temp\73.tmp\FI.exe () [1] 2009-10-20 18:58:36 110592 C:\WINDOWS\Temp\74.tmp\FI.exe () Cannot access: C:\WINDOWS\Temp\19.tmp\FI.exe [1] 2009-10-16 23:28:26 110592 C:\WINDOWS\Temp\17.tmp\FI.exe () [1] 2009-10-16 23:31:47 110592 C:\WINDOWS\Temp\18.tmp\FI.exe () [1] 2009-10-16 23:35:27 110592 C:\WINDOWS\Temp\19.tmp\FI.exe () [1] 2009-10-16 23:39:06 110592 C:\WINDOWS\Temp\1A.tmp\FI.exe () [1] 2009-10-16 23:42:47 110592 C:\WINDOWS\Temp\1B.tmp\FI.exe () [1] 2009-10-16 23:45:36 110592 C:\WINDOWS\Temp\1C.tmp\FI.exe () [1] 2009-10-16 23:49:15 110592 C:\WINDOWS\Temp\1D.tmp\FI.exe () [1] 2009-10-16 23:52:58 110592 C:\WINDOWS\Temp\1E.tmp\FI.exe () [1] 2009-10-16 23:56:37 110592 C:\WINDOWS\Temp\1F.tmp\FI.exe () [1] 2009-10-17 00:00:16 110592 C:\WINDOWS\Temp\20.tmp\FI.exe () [1] 2009-10-17 00:03:55 110592 C:\WINDOWS\Temp\22.tmp\FI.exe () [1] 2009-10-16 23:07:29 110592 C:\WINDOWS\Temp\4.tmp\FI.exe () [1] 2009-10-17 09:42:46 110592 C:\WINDOWS\Temp\44.tmp\FI.exe () [1] 2009-10-19 18:01:15 110592 C:\WINDOWS\Temp\53.tmp\FI.exe () [1] 2009-10-19 18:06:12 110592 C:\WINDOWS\Temp\57.tmp\FI.exe () [1] 2009-10-19 18:09:39 110592 C:\WINDOWS\Temp\58.tmp\FI.exe () [1] 2009-10-19 18:13:03 110592 C:\WINDOWS\Temp\59.tmp\FI.exe () [1] 2009-10-20 04:34:42 110592 C:\WINDOWS\Temp\5B.tmp\FI.exe () [1] 2009-10-19 18:23:38 110592 C:\WINDOWS\Temp\64.tmp\FI.exe () [1] 2009-10-20 18:13:44 110592 C:\WINDOWS\Temp\6C.tmp\FI.exe () [1] 2009-10-19 18:26:36 110592 C:\WINDOWS\Temp\6D.tmp\FI.exe () [1] 2009-10-19 18:30:16 110592 C:\WINDOWS\Temp\6E.tmp\FI.exe () [1] 2009-10-19 18:33:42 110592 C:\WINDOWS\Temp\6F.tmp\FI.exe () [1] 2009-10-20 18:27:34 110592 C:\WINDOWS\Temp\70.tmp\FI.exe () [1] 2009-10-20 18:34:40 110592 C:\WINDOWS\Temp\71.tmp\FI.exe () [1] 2009-10-20 18:41:09 110592 C:\WINDOWS\Temp\72.tmp\FI.exe () [1] 2009-10-20 18:48:52 110592 C:\WINDOWS\Temp\73.tmp\FI.exe () [1] 2009-10-20 18:58:36 110592 C:\WINDOWS\Temp\74.tmp\FI.exe () Cannot access: C:\WINDOWS\Temp\1A.tmp\FI.exe [1] 2009-10-16 23:28:26 110592 C:\WINDOWS\Temp\17.tmp\FI.exe () [1] 2009-10-16 23:31:47 110592 C:\WINDOWS\Temp\18.tmp\FI.exe () [1] 2009-10-16 23:35:27 110592 C:\WINDOWS\Temp\19.tmp\FI.exe () [1] 2009-10-16 23:39:06 110592 C:\WINDOWS\Temp\1A.tmp\FI.exe () [1] 2009-10-16 23:42:47 110592 C:\WINDOWS\Temp\1B.tmp\FI.exe () [1] 2009-10-16 23:45:36 110592 C:\WINDOWS\Temp\1C.tmp\FI.exe () [1] 2009-10-16 23:49:15 110592 C:\WINDOWS\Temp\1D.tmp\FI.exe () [1] 2009-10-16 23:52:58 110592 C:\WINDOWS\Temp\1E.tmp\FI.exe () [1] 2009-10-16 23:56:37 110592 C:\WINDOWS\Temp\1F.tmp\FI.exe () [1] 2009-10-17 00:00:16 110592 C:\WINDOWS\Temp\20.tmp\FI.exe () [1] 2009-10-17 00:03:55 110592 C:\WINDOWS\Temp\22.tmp\FI.exe () [1] 2009-10-16 23:07:29 110592 C:\WINDOWS\Temp\4.tmp\FI.exe () [1] 2009-10-17 09:42:46 110592 C:\WINDOWS\Temp\44.tmp\FI.exe () [1] 2009-10-19 18:01:15 110592 C:\WINDOWS\Temp\53.tmp\FI.exe () [1] 2009-10-19 18:06:12 110592 C:\WINDOWS\Temp\57.tmp\FI.exe () [1] 2009-10-19 18:09:39 110592 C:\WINDOWS\Temp\58.tmp\FI.exe () [1] 2009-10-19 18:13:03 110592 C:\WINDOWS\Temp\59.tmp\FI.exe () [1] 2009-10-20 04:34:42 110592 C:\WINDOWS\Temp\5B.tmp\FI.exe () [1] 2009-10-19 18:23:38 110592 C:\WINDOWS\Temp\64.tmp\FI.exe () [1] 2009-10-20 18:13:44 110592 C:\WINDOWS\Temp\6C.tmp\FI.exe () [1] 2009-10-19 18:26:36 110592 C:\WINDOWS\Temp\6D.tmp\FI.exe () [1] 2009-10-19 18:30:16 110592 C:\WINDOWS\Temp\6E.tmp\FI.exe () [1] 2009-10-19 18:33:42 110592 C:\WINDOWS\Temp\6F.tmp\FI.exe () [1] 2009-10-20 18:27:34 110592 C:\WINDOWS\Temp\70.tmp\FI.exe () [1] 2009-10-20 18:34:40 110592 C:\WINDOWS\Temp\71.tmp\FI.exe () [1] 2009-10-20 18:41:09 110592 C:\WINDOWS\Temp\72.tmp\FI.exe () [1] 2009-10-20 18:48:52 110592 C:\WINDOWS\Temp\73.tmp\FI.exe () [1] 2009-10-20 18:58:36 110592 C:\WINDOWS\Temp\74.tmp\FI.exe () Cannot access: C:\WINDOWS\Temp\1B.tmp\FI.exe [1] 2009-10-16 23:28:26 110592 C:\WINDOWS\Temp\17.tmp\FI.exe () [1] 2009-10-16 23:31:47 110592 C:\WINDOWS\Temp\18.tmp\FI.exe () [1] 2009-10-16 23:35:27 110592 C:\WINDOWS\Temp\19.tmp\FI.exe () [1] 2009-10-16 23:39:06 110592 C:\WINDOWS\Temp\1A.tmp\FI.exe () [1] 2009-10-16 23:42:47 110592 C:\WINDOWS\Temp\1B.tmp\FI.exe () [1] 2009-10-16 23:45:36 110592 C:\WINDOWS\Temp\1C.tmp\FI.exe () [1] 2009-10-16 23:49:15 110592 C:\WINDOWS\Temp\1D.tmp\FI.exe () [1] 2009-10-16 23:52:58 110592 C:\WINDOWS\Temp\1E.tmp\FI.exe () [1] 2009-10-16 23:56:37 110592 C:\WINDOWS\Temp\1F.tmp\FI.exe () [1] 2009-10-17 00:00:16 110592 C:\WINDOWS\Temp\20.tmp\FI.exe () [1] 2009-10-17 00:03:55 110592 C:\WINDOWS\Temp\22.tmp\FI.exe () [1] 2009-10-16 23:07:29 110592 C:\WINDOWS\Temp\4.tmp\FI.exe () [1] 2009-10-17 09:42:46 110592 C:\WINDOWS\Temp\44.tmp\FI.exe () [1] 2009-10-19 18:01:15 110592 C:\WINDOWS\Temp\53.tmp\FI.exe () [1] 2009-10-19 18:06:12 110592 C:\WINDOWS\Temp\57.tmp\FI.exe () [1] 2009-10-19 18:09:39 110592 C:\WINDOWS\Temp\58.tmp\FI.exe () [1] 2009-10-19 18:13:03 110592 C:\WINDOWS\Temp\59.tmp\FI.exe () [1] 2009-10-20 04:34:42 110592 C:\WINDOWS\Temp\5B.tmp\FI.exe () [1] 2009-10-19 18:23:38 110592 C:\WINDOWS\Temp\64.tmp\FI.exe () [1] 2009-10-20 18:13:44 110592 C:\WINDOWS\Temp\6C.tmp\FI.exe () [1] 2009-10-19 18:26:36 110592 C:\WINDOWS\Temp\6D.tmp\FI.exe () [1] 2009-10-19 18:30:16 110592 C:\WINDOWS\Temp\6E.tmp\FI.exe () [1] 2009-10-19 18:33:42 110592 C:\WINDOWS\Temp\6F.tmp\FI.exe () [1] 2009-10-20 18:27:34 110592 C:\WINDOWS\Temp\70.tmp\FI.exe () [1] 2009-10-20 18:34:40 110592 C:\WINDOWS\Temp\71.tmp\FI.exe () [1] 2009-10-20 18:41:09 110592 C:\WINDOWS\Temp\72.tmp\FI.exe () [1] 2009-10-20 18:48:52 110592 C:\WINDOWS\Temp\73.tmp\FI.exe () [1] 2009-10-20 18:58:36 110592 C:\WINDOWS\Temp\74.tmp\FI.exe () Cannot access: C:\WINDOWS\Temp\1C.tmp\FI.exe [1] 2009-10-16 23:28:26 110592 C:\WINDOWS\Temp\17.tmp\FI.exe () [1] 2009-10-16 23:31:47 110592 C:\WINDOWS\Temp\18.tmp\FI.exe () [1] 2009-10-16 23:35:27 110592 C:\WINDOWS\Temp\19.tmp\FI.exe () [1] 2009-10-16 23:39:06 110592 C:\WINDOWS\Temp\1A.tmp\FI.exe () [1] 2009-10-16 23:42:47 110592 C:\WINDOWS\Temp\1B.tmp\FI.exe () [1] 2009-10-16 23:45:36 110592 C:\WINDOWS\Temp\1C.tmp\FI.exe () [1] 2009-10-16 23:49:15 110592 C:\WINDOWS\Temp\1D.tmp\FI.exe () [1] 2009-10-16 23:52:58 110592 C:\WINDOWS\Temp\1E.tmp\FI.exe () [1] 2009-10-16 23:56:37 110592 C:\WINDOWS\Temp\1F.tmp\FI.exe () [1] 2009-10-17 00:00:16 110592 C:\WINDOWS\Temp\20.tmp\FI.exe () [1] 2009-10-17 00:03:55 110592 C:\WINDOWS\Temp\22.tmp\FI.exe () [1] 2009-10-16 23:07:29 110592 C:\WINDOWS\Temp\4.tmp\FI.exe () [1] 2009-10-17 09:42:46 110592 C:\WINDOWS\Temp\44.tmp\FI.exe () [1] 2009-10-19 18:01:15 110592 C:\WINDOWS\Temp\53.tmp\FI.exe () [1] 2009-10-19 18:06:12 110592 C:\WINDOWS\Temp\57.tmp\FI.exe () [1] 2009-10-19 18:09:39 110592 C:\WINDOWS\Temp\58.tmp\FI.exe () [1] 2009-10-19 18:13:03 110592 C:\WINDOWS\Temp\59.tmp\FI.exe () [1] 2009-10-20 04:34:42 110592 C:\WINDOWS\Temp\5B.tmp\FI.exe () [1] 2009-10-19 18:23:38 110592 C:\WINDOWS\Temp\64.tmp\FI.exe () [1] 2009-10-20 18:13:44 110592 C:\WINDOWS\Temp\6C.tmp\FI.exe () [1] 2009-10-19 18:26:36 110592 C:\WINDOWS\Temp\6D.tmp\FI.exe () [1] 2009-10-19 18:30:16 110592 C:\WINDOWS\Temp\6E.tmp\FI.exe () [1] 2009-10-19 18:33:42 110592 C:\WINDOWS\Temp\6F.tmp\FI.exe () [1] 2009-10-20 18:27:34 110592 C:\WINDOWS\Temp\70.tmp\FI.exe () [1] 2009-10-20 18:34:40 110592 C:\WINDOWS\Temp\71.tmp\FI.exe () [1] 2009-10-20 18:41:09 110592 C:\WINDOWS\Temp\72.tmp\FI.exe () [1] 2009-10-20 18:48:52 110592 C:\WINDOWS\Temp\73.tmp\FI.exe () [1] 2009-10-20 18:58:36 110592 C:\WINDOWS\Temp\74.tmp\FI.exe () Cannot access: C:\WINDOWS\Temp\1D.tmp\FI.exe [1] 2009-10-16 23:28:26 110592 C:\WINDOWS\Temp\17.tmp\FI.exe () [1] 2009-10-16 23:31:47 110592 C:\WINDOWS\Temp\18.tmp\FI.exe () [1] 2009-10-16 23:35:27 110592 C:\WINDOWS\Temp\19.tmp\FI.exe () [1] 2009-10-16 23:39:06 110592 C:\WINDOWS\Temp\1A.tmp\FI.exe () [1] 2009-10-16 23:42:47 110592 C:\WINDOWS\Temp\1B.tmp\FI.exe () [1] 2009-10-16 23:45:36 110592 C:\WINDOWS\Temp\1C.tmp\FI.exe () [1] 2009-10-16 23:49:15 110592 C:\WINDOWS\Temp\1D.tmp\FI.exe () [1] 2009-10-16 23:52:58 110592 C:\WINDOWS\Temp\1E.tmp\FI.exe () [1] 2009-10-16 23:56:37 110592 C:\WINDOWS\Temp\1F.tmp\FI.exe () [1] 2009-10-17 00:00:16 110592 C:\WINDOWS\Temp\20.tmp\FI.exe () [1] 2009-10-17 00:03:55 110592 C:\WINDOWS\Temp\22.tmp\FI.exe () [1] 2009-10-16 23:07:29 110592 C:\WINDOWS\Temp\4.tmp\FI.exe () [1] 2009-10-17 09:42:46 110592 C:\WINDOWS\Temp\44.tmp\FI.exe () [1] 2009-10-19 18:01:15 110592 C:\WINDOWS\Temp\53.tmp\FI.exe () [1] 2009-10-19 18:06:12 110592 C:\WINDOWS\Temp\57.tmp\FI.exe () [1] 2009-10-19 18:09:39 110592 C:\WINDOWS\Temp\58.tmp\FI.exe () [1] 2009-10-19 18:13:03 110592 C:\WINDOWS\Temp\59.tmp\FI.exe () [1] 2009-10-20 04:34:42 110592 C:\WINDOWS\Temp\5B.tmp\FI.exe () [1] 2009-10-19 18:23:38 110592 C:\WINDOWS\Temp\64.tmp\FI.exe () [1] 2009-10-20 18:13:44 110592 C:\WINDOWS\Temp\6C.tmp\FI.exe () [1] 2009-10-19 18:26:36 110592 C:\WINDOWS\Temp\6D.tmp\FI.exe () [1] 2009-10-19 18:30:16 110592 C:\WINDOWS\Temp\6E.tmp\FI.exe () [1] 2009-10-19 18:33:42 110592 C:\WINDOWS\Temp\6F.tmp\FI.exe () [1] 2009-10-20 18:27:34 110592 C:\WINDOWS\Temp\70.tmp\FI.exe () [1] 2009-10-20 18:34:40 110592 C:\WINDOWS\Temp\71.tmp\FI.exe () [1] 2009-10-20 18:41:09 110592 C:\WINDOWS\Temp\72.tmp\FI.exe () [1] 2009-10-20 18:48:52 110592 C:\WINDOWS\Temp\73.tmp\FI.exe () [1] 2009-10-20 18:58:36 110592 C:\WINDOWS\Temp\74.tmp\FI.exe () Cannot access: C:\WINDOWS\Temp\1E.tmp\FI.exe [1] 2009-10-16 23:28:26 110592 C:\WINDOWS\Temp\17.tmp\FI.exe () [1] 2009-10-16 23:31:47 110592 C:\WINDOWS\Temp\18.tmp\FI.exe () [1] 2009-10-16 23:35:27 110592 C:\WINDOWS\Temp\19.tmp\FI.exe () [1] 2009-10-16 23:39:06 110592 C:\WINDOWS\Temp\1A.tmp\FI.exe () [1] 2009-10-16 23:42:47 110592 C:\WINDOWS\Temp\1B.tmp\FI.exe () [1] 2009-10-16 23:45:36 110592 C:\WINDOWS\Temp\1C.tmp\FI.exe () [1] 2009-10-16 23:49:15 110592 C:\WINDOWS\Temp\1D.tmp\FI.exe () [1] 2009-10-16 23:52:58 110592 C:\WINDOWS\Temp\1E.tmp\FI.exe () [1] 2009-10-16 23:56:37 110592 C:\WINDOWS\Temp\1F.tmp\FI.exe () [1] 2009-10-17 00:00:16 110592 C:\WINDOWS\Temp\20.tmp\FI.exe () [1] 2009-10-17 00:03:55 110592 C:\WINDOWS\Temp\22.tmp\FI.exe () [1] 2009-10-16 23:07:29 110592 C:\WINDOWS\Temp\4.tmp\FI.exe () [1] 2009-10-17 09:42:46 110592 C:\WINDOWS\Temp\44.tmp\FI.exe () [1] 2009-10-19 18:01:15 110592 C:\WINDOWS\Temp\53.tmp\FI.exe () [1] 2009-10-19 18:06:12 110592 C:\WINDOWS\Temp\57.tmp\FI.exe () [1] 2009-10-19 18:09:39 110592 C:\WINDOWS\Temp\58.tmp\FI.exe () [1] 2009-10-19 18:13:03 110592 C:\WINDOWS\Temp\59.tmp\FI.exe () [1] 2009-10-20 04:34:42 110592 C:\WINDOWS\Temp\5B.tmp\FI.exe () [1] 2009-10-19 18:23:38 110592 C:\WINDOWS\Temp\64.tmp\FI.exe () [1] 2009-10-20 18:13:44 110592 C:\WINDOWS\Temp\6C.tmp\FI.exe () [1] 2009-10-19 18:26:36 110592 C:\WINDOWS\Temp\6D.tmp\FI.exe () [1] 2009-10-19 18:30:16 110592 C:\WINDOWS\Temp\6E.tmp\FI.exe () [1] 2009-10-19 18:33:42 110592 C:\WINDOWS\Temp\6F.tmp\FI.exe () [1] 2009-10-20 18:27:34 110592 C:\WINDOWS\Temp\70.tmp\FI.exe () [1] 2009-10-20 18:34:40 110592 C:\WINDOWS\Temp\71.tmp\FI.exe () [1] 2009-10-20 18:41:09 110592 C:\WINDOWS\Temp\72.tmp\FI.exe () [1] 2009-10-20 18:48:52 110592 C:\WINDOWS\Temp\73.tmp\FI.exe () [1] 2009-10-20 18:58:36 110592 C:\WINDOWS\Temp\74.tmp\FI.exe () Cannot access: C:\WINDOWS\Temp\1F.tmp\FI.exe [1] 2009-10-16 23:28:26 110592 C:\WINDOWS\Temp\17.tmp\FI.exe () [1] 2009-10-16 23:31:47 110592 C:\WINDOWS\Temp\18.tmp\FI.exe () [1] 2009-10-16 23:35:27 110592 C:\WINDOWS\Temp\19.tmp\FI.exe () [1] 2009-10-16 23:39:06 110592 C:\WINDOWS\Temp\1A.tmp\FI.exe () [1] 2009-10-16 23:42:47 110592 C:\WINDOWS\Temp\1B.tmp\FI.exe () [1] 2009-10-16 23:45:36 110592 C:\WINDOWS\Temp\1C.tmp\FI.exe () [1] 2009-10-16 23:49:15 110592 C:\WINDOWS\Temp\1D.tmp\FI.exe () [1] 2009-10-16 23:52:58 110592 C:\WINDOWS\Temp\1E.tmp\FI.exe () [1] 2009-10-16 23:56:37 110592 C:\WINDOWS\Temp\1F.tmp\FI.exe () [1] 2009-10-17 00:00:16 110592 C:\WINDOWS\Temp\20.tmp\FI.exe () [1] 2009-10-17 00:03:55 110592 C:\WINDOWS\Temp\22.tmp\FI.exe () [1] 2009-10-16 23:07:29 110592 C:\WINDOWS\Temp\4.tmp\FI.exe () [1] 2009-10-17 09:42:46 110592 C:\WINDOWS\Temp\44.tmp\FI.exe () [1] 2009-10-19 18:01:15 110592 C:\WINDOWS\Temp\53.tmp\FI.exe () [1] 2009-10-19 18:06:12 110592 C:\WINDOWS\Temp\57.tmp\FI.exe () [1] 2009-10-19 18:09:39 110592 C:\WINDOWS\Temp\58.tmp\FI.exe () [1] 2009-10-19 18:13:03 110592 C:\WINDOWS\Temp\59.tmp\FI.exe () [1] 2009-10-20 04:34:42 110592 C:\WINDOWS\Temp\5B.tmp\FI.exe () [1] 2009-10-19 18:23:38 110592 C:\WINDOWS\Temp\64.tmp\FI.exe () [1] 2009-10-20 18:13:44 110592 C:\WINDOWS\Temp\6C.tmp\FI.exe () [1] 2009-10-19 18:26:36 110592 C:\WINDOWS\Temp\6D.tmp\FI.exe () [1] 2009-10-19 18:30:16 110592 C:\WINDOWS\Temp\6E.tmp\FI.exe () [1] 2009-10-19 18:33:42 110592 C:\WINDOWS\Temp\6F.tmp\FI.exe () [1] 2009-10-20 18:27:34 110592 C:\WINDOWS\Temp\70.tmp\FI.exe () [1] 2009-10-20 18:34:40 110592 C:\WINDOWS\Temp\71.tmp\FI.exe () [1] 2009-10-20 18:41:09 110592 C:\WINDOWS\Temp\72.tmp\FI.exe () [1] 2009-10-20 18:48:52 110592 C:\WINDOWS\Temp\73.tmp\FI.exe () [1] 2009-10-20 18:58:36 110592 C:\WINDOWS\Temp\74.tmp\FI.exe () Found mount point : C:\WINDOWS\Temp\2.tmp\2.tmp Mount point destination : \Device\__max++>\^ Cannot access: C:\WINDOWS\Temp\20.tmp\FI.exe [1] 2009-10-16 23:28:26 110592 C:\WINDOWS\Temp\17.tmp\FI.exe () [1] 2009-10-16 23:31:47 110592 C:\WINDOWS\Temp\18.tmp\FI.exe () [1] 2009-10-16 23:35:27 110592 C:\WINDOWS\Temp\19.tmp\FI.exe () [1] 2009-10-16 23:39:06 110592 C:\WINDOWS\Temp\1A.tmp\FI.exe () [1] 2009-10-16 23:42:47 110592 C:\WINDOWS\Temp\1B.tmp\FI.exe () [1] 2009-10-16 23:45:36 110592 C:\WINDOWS\Temp\1C.tmp\FI.exe () [1] 2009-10-16 23:49:15 110592 C:\WINDOWS\Temp\1D.tmp\FI.exe () [1] 2009-10-16 23:52:58 110592 C:\WINDOWS\Temp\1E.tmp\FI.exe () [1] 2009-10-16 23:56:37 110592 C:\WINDOWS\Temp\1F.tmp\FI.exe () [1] 2009-10-17 00:00:16 110592 C:\WINDOWS\Temp\20.tmp\FI.exe () [1] 2009-10-17 00:03:55 110592 C:\WINDOWS\Temp\22.tmp\FI.exe () [1] 2009-10-16 23:07:29 110592 C:\WINDOWS\Temp\4.tmp\FI.exe () [1] 2009-10-17 09:42:46 110592 C:\WINDOWS\Temp\44.tmp\FI.exe () [1] 2009-10-19 18:01:15 110592 C:\WINDOWS\Temp\53.tmp\FI.exe () [1] 2009-10-19 18:06:12 110592 C:\WINDOWS\Temp\57.tmp\FI.exe () [1] 2009-10-19 18:09:39 110592 C:\WINDOWS\Temp\58.tmp\FI.exe () [1] 2009-10-19 18:13:03 110592 C:\WINDOWS\Temp\59.tmp\FI.exe () [1] 2009-10-20 04:34:42 110592 C:\WINDOWS\Temp\5B.tmp\FI.exe () [1] 2009-10-19 18:23:38 110592 C:\WINDOWS\Temp\64.tmp\FI.exe () [1] 2009-10-20 18:13:44 110592 C:\WINDOWS\Temp\6C.tmp\FI.exe () [1] 2009-10-19 18:26:36 110592 C:\WINDOWS\Temp\6D.tmp\FI.exe () [1] 2009-10-19 18:30:16 110592 C:\WINDOWS\Temp\6E.tmp\FI.exe () [1] 2009-10-19 18:33:42 110592 C:\WINDOWS\Temp\6F.tmp\FI.exe () [1] 2009-10-20 18:27:34 110592 C:\WINDOWS\Temp\70.tmp\FI.exe () [1] 2009-10-20 18:34:40 110592 C:\WINDOWS\Temp\71.tmp\FI.exe () [1] 2009-10-20 18:41:09 110592 C:\WINDOWS\Temp\72.tmp\FI.exe () [1] 2009-10-20 18:48:52 110592 C:\WINDOWS\Temp\73.tmp\FI.exe () [1] 2009-10-20 18:58:36 110592 C:\WINDOWS\Temp\74.tmp\FI.exe () Found mount point : C:\WINDOWS\Temp\21.tmp\21.tmp Mount point destination : \Device\__max++>\^ Cannot access: C:\WINDOWS\Temp\22.tmp\FI.exe [1] 2009-10-16 23:28:26 110592 C:\WINDOWS\Temp\17.tmp\FI.exe () [1] 2009-10-16 23:31:47 110592 C:\WINDOWS\Temp\18.tmp\FI.exe () [1] 2009-10-16 23:35:27 110592 C:\WINDOWS\Temp\19.tmp\FI.exe () [1] 2009-10-16 23:39:06 110592 C:\WINDOWS\Temp\1A.tmp\FI.exe () [1] 2009-10-16 23:42:47 110592 C:\WINDOWS\Temp\1B.tmp\FI.exe () [1] 2009-10-16 23:45:36 110592 C:\WINDOWS\Temp\1C.tmp\FI.exe () [1] 2009-10-16 23:49:15 110592 C:\WINDOWS\Temp\1D.tmp\FI.exe () [1] 2009-10-16 23:52:58 110592 C:\WINDOWS\Temp\1E.tmp\FI.exe () [1] 2009-10-16 23:56:37 110592 C:\WINDOWS\Temp\1F.tmp\FI.exe () [1] 2009-10-17 00:00:16 110592 C:\WINDOWS\Temp\20.tmp\FI.exe () [1] 2009-10-17 00:03:55 110592 C:\WINDOWS\Temp\22.tmp\FI.exe () [1] 2009-10-16 23:07:29 110592 C:\WINDOWS\Temp\4.tmp\FI.exe () [1] 2009-10-17 09:42:46 110592 C:\WINDOWS\Temp\44.tmp\FI.exe () [1] 2009-10-19 18:01:15 110592 C:\WINDOWS\Temp\53.tmp\FI.exe () [1] 2009-10-19 18:06:12 110592 C:\WINDOWS\Temp\57.tmp\FI.exe () [1] 2009-10-19 18:09:39 110592 C:\WINDOWS\Temp\58.tmp\FI.exe () [1] 2009-10-19 18:13:03 110592 C:\WINDOWS\Temp\59.tmp\FI.exe () [1] 2009-10-20 04:34:42 110592 C:\WINDOWS\Temp\5B.tmp\FI.exe () [1] 2009-10-19 18:23:38 110592 C:\WINDOWS\Temp\64.tmp\FI.exe () [1] 2009-10-20 18:13:44 110592 C:\WINDOWS\Temp\6C.tmp\FI.exe () [1] 2009-10-19 18:26:36 110592 C:\WINDOWS\Temp\6D.tmp\FI.exe () [1] 2009-10-19 18:30:16 110592 C:\WINDOWS\Temp\6E.tmp\FI.exe () [1] 2009-10-19 18:33:42 110592 C:\WINDOWS\Temp\6F.tmp\FI.exe () [1] 2009-10-20 18:27:34 110592 C:\WINDOWS\Temp\70.tmp\FI.exe () [1] 2009-10-20 18:34:40 110592 C:\WINDOWS\Temp\71.tmp\FI.exe () [1] 2009-10-20 18:41:09 110592 C:\WINDOWS\Temp\72.tmp\FI.exe () [1] 2009-10-20 18:48:52 110592 C:\WINDOWS\Temp\73.tmp\FI.exe () [1] 2009-10-20 18:58:36 110592 C:\WINDOWS\Temp\74.tmp\FI.exe () Found mount point : C:\WINDOWS\Temp\23.tmp\23.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\24.tmp\24.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\25.tmp\25.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\26.tmp\26.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\27.tmp\27.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\28.tmp\28.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\29.tmp\29.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\2A.tmp\2A.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\2B.tmp\2B.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\2C.tmp\2C.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\2D.tmp\2D.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\2E.tmp\2E.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\2F.tmp\2F.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\3.tmp\3.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\30.tmp\30.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\31.tmp\31.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\32.tmp\32.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\33.tmp\33.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\34.tmp\34.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\35.tmp\35.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\35A2\35A2 Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\36.tmp\36.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\38.tmp\38.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\39.tmp\39.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\3A.tmp\3A.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\3B.tmp\3B.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\3C.tmp\3C.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\3D.tmp\3D.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\3E.tmp\3E.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\3F.tmp\3F.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\40.tmp\40.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\41.tmp\41.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\42.tmp\42.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\43.tmp\43.tmp Mount point destination : \Device\__max++>\^ Cannot access: C:\WINDOWS\Temp\44.tmp\FI.exe [1] 2009-10-16 23:28:26 110592 C:\WINDOWS\Temp\17.tmp\FI.exe () [1] 2009-10-16 23:31:47 110592 C:\WINDOWS\Temp\18.tmp\FI.exe () [1] 2009-10-16 23:35:27 110592 C:\WINDOWS\Temp\19.tmp\FI.exe () [1] 2009-10-16 23:39:06 110592 C:\WINDOWS\Temp\1A.tmp\FI.exe () [1] 2009-10-16 23:42:47 110592 C:\WINDOWS\Temp\1B.tmp\FI.exe () [1] 2009-10-16 23:45:36 110592 C:\WINDOWS\Temp\1C.tmp\FI.exe () [1] 2009-10-16 23:49:15 110592 C:\WINDOWS\Temp\1D.tmp\FI.exe () [1] 2009-10-16 23:52:58 110592 C:\WINDOWS\Temp\1E.tmp\FI.exe () [1] 2009-10-16 23:56:37 110592 C:\WINDOWS\Temp\1F.tmp\FI.exe () [1] 2009-10-17 00:00:16 110592 C:\WINDOWS\Temp\20.tmp\FI.exe () [1] 2009-10-17 00:03:55 110592 C:\WINDOWS\Temp\22.tmp\FI.exe () [1] 2009-10-16 23:07:29 110592 C:\WINDOWS\Temp\4.tmp\FI.exe () [1] 2009-10-17 09:42:46 110592 C:\WINDOWS\Temp\44.tmp\FI.exe () [1] 2009-10-19 18:01:15 110592 C:\WINDOWS\Temp\53.tmp\FI.exe () [1] 2009-10-19 18:06:12 110592 C:\WINDOWS\Temp\57.tmp\FI.exe () [1] 2009-10-19 18:09:39 110592 C:\WINDOWS\Temp\58.tmp\FI.exe () [1] 2009-10-19 18:13:03 110592 C:\WINDOWS\Temp\59.tmp\FI.exe () [1] 2009-10-20 04:34:42 110592 C:\WINDOWS\Temp\5B.tmp\FI.exe () [1] 2009-10-19 18:23:38 110592 C:\WINDOWS\Temp\64.tmp\FI.exe () [1] 2009-10-20 18:13:44 110592 C:\WINDOWS\Temp\6C.tmp\FI.exe () [1] 2009-10-19 18:26:36 110592 C:\WINDOWS\Temp\6D.tmp\FI.exe () [1] 2009-10-19 18:30:16 110592 C:\WINDOWS\Temp\6E.tmp\FI.exe () [1] 2009-10-19 18:33:42 110592 C:\WINDOWS\Temp\6F.tmp\FI.exe () [1] 2009-10-20 18:27:34 110592 C:\WINDOWS\Temp\70.tmp\FI.exe () [1] 2009-10-20 18:34:40 110592 C:\WINDOWS\Temp\71.tmp\FI.exe () [1] 2009-10-20 18:41:09 110592 C:\WINDOWS\Temp\72.tmp\FI.exe () [1] 2009-10-20 18:48:52 110592 C:\WINDOWS\Temp\73.tmp\FI.exe () [1] 2009-10-20 18:58:36 110592 C:\WINDOWS\Temp\74.tmp\FI.exe () Found mount point : C:\WINDOWS\Temp\442B\442B Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\44F0\44F0 Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\45.tmp\45.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\46.tmp\46.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\47.tmp\47.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\48.tmp\48.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\49.tmp\49.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\4A.tmp\4A.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\4B.tmp\4B.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\4C.tmp\4C.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\4D.tmp\4D.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\4E.tmp\4E.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\4F.tmp\4F.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\5.tmp\5.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\50.tmp\50.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\51.tmp\51.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\52.tmp\52.tmp Mount point destination : \Device\__max++>\^ Cannot access: C:\WINDOWS\Temp\53.tmp\FI.exe [1] 2009-10-16 23:28:26 110592 C:\WINDOWS\Temp\17.tmp\FI.exe () [1] 2009-10-16 23:31:47 110592 C:\WINDOWS\Temp\18.tmp\FI.exe () [1] 2009-10-16 23:35:27 110592 C:\WINDOWS\Temp\19.tmp\FI.exe () [1] 2009-10-16 23:39:06 110592 C:\WINDOWS\Temp\1A.tmp\FI.exe () [1] 2009-10-16 23:42:47 110592 C:\WINDOWS\Temp\1B.tmp\FI.exe () [1] 2009-10-16 23:45:36 110592 C:\WINDOWS\Temp\1C.tmp\FI.exe () [1] 2009-10-16 23:49:15 110592 C:\WINDOWS\Temp\1D.tmp\FI.exe () [1] 2009-10-16 23:52:58 110592 C:\WINDOWS\Temp\1E.tmp\FI.exe () [1] 2009-10-16 23:56:37 110592 C:\WINDOWS\Temp\1F.tmp\FI.exe () [1] 2009-10-17 00:00:16 110592 C:\WINDOWS\Temp\20.tmp\FI.exe () [1] 2009-10-17 00:03:55 110592 C:\WINDOWS\Temp\22.tmp\FI.exe () [1] 2009-10-16 23:07:29 110592 C:\WINDOWS\Temp\4.tmp\FI.exe () [1] 2009-10-17 09:42:46 110592 C:\WINDOWS\Temp\44.tmp\FI.exe () [1] 2009-10-19 18:01:15 110592 C:\WINDOWS\Temp\53.tmp\FI.exe () [1] 2009-10-19 18:06:12 110592 C:\WINDOWS\Temp\57.tmp\FI.exe () [1] 2009-10-19 18:09:39 110592 C:\WINDOWS\Temp\58.tmp\FI.exe () [1] 2009-10-19 18:13:03 110592 C:\WINDOWS\Temp\59.tmp\FI.exe () [1] 2009-10-20 04:34:42 110592 C:\WINDOWS\Temp\5B.tmp\FI.exe () [1] 2009-10-19 18:23:38 110592 C:\WINDOWS\Temp\64.tmp\FI.exe () [1] 2009-10-20 18:13:44 110592 C:\WINDOWS\Temp\6C.tmp\FI.exe () [1] 2009-10-19 18:26:36 110592 C:\WINDOWS\Temp\6D.tmp\FI.exe () [1] 2009-10-19 18:30:16 110592 C:\WINDOWS\Temp\6E.tmp\FI.exe () [1] 2009-10-19 18:33:42 110592 C:\WINDOWS\Temp\6F.tmp\FI.exe () [1] 2009-10-20 18:27:34 110592 C:\WINDOWS\Temp\70.tmp\FI.exe () [1] 2009-10-20 18:34:40 110592 C:\WINDOWS\Temp\71.tmp\FI.exe () [1] 2009-10-20 18:41:09 110592 C:\WINDOWS\Temp\72.tmp\FI.exe () [1] 2009-10-20 18:48:52 110592 C:\WINDOWS\Temp\73.tmp\FI.exe () [1] 2009-10-20 18:58:36 110592 C:\WINDOWS\Temp\74.tmp\FI.exe () Found mount point : C:\WINDOWS\Temp\54.tmp\54.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\5458\5458 Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\55.tmp\55.tmp Mount point destination : \Device\__max++>\^ Cannot access: C:\WINDOWS\Temp\57.tmp\FI.exe [1] 2009-10-16 23:28:26 110592 C:\WINDOWS\Temp\17.tmp\FI.exe () [1] 2009-10-16 23:31:47 110592 C:\WINDOWS\Temp\18.tmp\FI.exe () [1] 2009-10-16 23:35:27 110592 C:\WINDOWS\Temp\19.tmp\FI.exe () [1] 2009-10-16 23:39:06 110592 C:\WINDOWS\Temp\1A.tmp\FI.exe () [1] 2009-10-16 23:42:47 110592 C:\WINDOWS\Temp\1B.tmp\FI.exe () [1] 2009-10-16 23:45:36 110592 C:\WINDOWS\Temp\1C.tmp\FI.exe () [1] 2009-10-16 23:49:15 110592 C:\WINDOWS\Temp\1D.tmp\FI.exe () [1] 2009-10-16 23:52:58 110592 C:\WINDOWS\Temp\1E.tmp\FI.exe () [1] 2009-10-16 23:56:37 110592 C:\WINDOWS\Temp\1F.tmp\FI.exe () [1] 2009-10-17 00:00:16 110592 C:\WINDOWS\Temp\20.tmp\FI.exe () [1] 2009-10-17 00:03:55 110592 C:\WINDOWS\Temp\22.tmp\FI.exe () [1] 2009-10-16 23:07:29 110592 C:\WINDOWS\Temp\4.tmp\FI.exe () [1] 2009-10-17 09:42:46 110592 C:\WINDOWS\Temp\44.tmp\FI.exe () [1] 2009-10-19 18:01:15 110592 C:\WINDOWS\Temp\53.tmp\FI.exe () [1] 2009-10-19 18:06:12 110592 C:\WINDOWS\Temp\57.tmp\FI.exe () [1] 2009-10-19 18:09:39 110592 C:\WINDOWS\Temp\58.tmp\FI.exe () [1] 2009-10-19 18:13:03 110592 C:\WINDOWS\Temp\59.tmp\FI.exe () [1] 2009-10-20 04:34:42 110592 C:\WINDOWS\Temp\5B.tmp\FI.exe () [1] 2009-10-19 18:23:38 110592 C:\WINDOWS\Temp\64.tmp\FI.exe () [1] 2009-10-20 18:13:44 110592 C:\WINDOWS\Temp\6C.tmp\FI.exe () [1] 2009-10-19 18:26:36 110592 C:\WINDOWS\Temp\6D.tmp\FI.exe () [1] 2009-10-19 18:30:16 110592 C:\WINDOWS\Temp\6E.tmp\FI.exe () [1] 2009-10-19 18:33:42 110592 C:\WINDOWS\Temp\6F.tmp\FI.exe () [1] 2009-10-20 18:27:34 110592 C:\WINDOWS\Temp\70.tmp\FI.exe () [1] 2009-10-20 18:34:40 110592 C:\WINDOWS\Temp\71.tmp\FI.exe () [1] 2009-10-20 18:41:09 110592 C:\WINDOWS\Temp\72.tmp\FI.exe () [1] 2009-10-20 18:48:52 110592 C:\WINDOWS\Temp\73.tmp\FI.exe () [1] 2009-10-20 18:58:36 110592 C:\WINDOWS\Temp\74.tmp\FI.exe () Cannot access: C:\WINDOWS\Temp\58.tmp\FI.exe [1] 2009-10-16 23:28:26 110592 C:\WINDOWS\Temp\17.tmp\FI.exe () [1] 2009-10-16 23:31:47 110592 C:\WINDOWS\Temp\18.tmp\FI.exe () [1] 2009-10-16 23:35:27 110592 C:\WINDOWS\Temp\19.tmp\FI.exe () [1] 2009-10-16 23:39:06 110592 C:\WINDOWS\Temp\1A.tmp\FI.exe () [1] 2009-10-16 23:42:47 110592 C:\WINDOWS\Temp\1B.tmp\FI.exe () [1] 2009-10-16 23:45:36 110592 C:\WINDOWS\Temp\1C.tmp\FI.exe () [1] 2009-10-16 23:49:15 110592 C:\WINDOWS\Temp\1D.tmp\FI.exe () [1] 2009-10-16 23:52:58 110592 C:\WINDOWS\Temp\1E.tmp\FI.exe () [1] 2009-10-16 23:56:37 110592 C:\WINDOWS\Temp\1F.tmp\FI.exe () [1] 2009-10-17 00:00:16 110592 C:\WINDOWS\Temp\20.tmp\FI.exe () [1] 2009-10-17 00:03:55 110592 C:\WINDOWS\Temp\22.tmp\FI.exe () [1] 2009-10-16 23:07:29 110592 C:\WINDOWS\Temp\4.tmp\FI.exe () [1] 2009-10-17 09:42:46 110592 C:\WINDOWS\Temp\44.tmp\FI.exe () [1] 2009-10-19 18:01:15 110592 C:\WINDOWS\Temp\53.tmp\FI.exe () [1] 2009-10-19 18:06:12 110592 C:\WINDOWS\Temp\57.tmp\FI.exe () [1] 2009-10-19 18:09:39 110592 C:\WINDOWS\Temp\58.tmp\FI.exe () [1] 2009-10-19 18:13:03 110592 C:\WINDOWS\Temp\59.tmp\FI.exe () [1] 2009-10-20 04:34:42 110592 C:\WINDOWS\Temp\5B.tmp\FI.exe () [1] 2009-10-19 18:23:38 110592 C:\WINDOWS\Temp\64.tmp\FI.exe () [1] 2009-10-20 18:13:44 110592 C:\WINDOWS\Temp\6C.tmp\FI.exe () [1] 2009-10-19 18:26:36 110592 C:\WINDOWS\Temp\6D.tmp\FI.exe () [1] 2009-10-19 18:30:16 110592 C:\WINDOWS\Temp\6E.tmp\FI.exe () [1] 2009-10-19 18:33:42 110592 C:\WINDOWS\Temp\6F.tmp\FI.exe () [1] 2009-10-20 18:27:34 110592 C:\WINDOWS\Temp\70.tmp\FI.exe () [1] 2009-10-20 18:34:40 110592 C:\WINDOWS\Temp\71.tmp\FI.exe () [1] 2009-10-20 18:41:09 110592 C:\WINDOWS\Temp\72.tmp\FI.exe () [1] 2009-10-20 18:48:52 110592 C:\WINDOWS\Temp\73.tmp\FI.exe () [1] 2009-10-20 18:58:36 110592 C:\WINDOWS\Temp\74.tmp\FI.exe () Cannot access: C:\WINDOWS\Temp\59.tmp\FI.exe [1] 2009-10-16 23:28:26 110592 C:\WINDOWS\Temp\17.tmp\FI.exe () [1] 2009-10-16 23:31:47 110592 C:\WINDOWS\Temp\18.tmp\FI.exe () [1] 2009-10-16 23:35:27 110592 C:\WINDOWS\Temp\19.tmp\FI.exe () [1] 2009-10-16 23:39:06 110592 C:\WINDOWS\Temp\1A.tmp\FI.exe () [1] 2009-10-16 23:42:47 110592 C:\WINDOWS\Temp\1B.tmp\FI.exe () [1] 2009-10-16 23:45:36 110592 C:\WINDOWS\Temp\1C.tmp\FI.exe () [1] 2009-10-16 23:49:15 110592 C:\WINDOWS\Temp\1D.tmp\FI.exe () [1] 2009-10-16 23:52:58 110592 C:\WINDOWS\Temp\1E.tmp\FI.exe () [1] 2009-10-16 23:56:37 110592 C:\WINDOWS\Temp\1F.tmp\FI.exe () [1] 2009-10-17 00:00:16 110592 C:\WINDOWS\Temp\20.tmp\FI.exe () [1] 2009-10-17 00:03:55 110592 C:\WINDOWS\Temp\22.tmp\FI.exe () [1] 2009-10-16 23:07:29 110592 C:\WINDOWS\Temp\4.tmp\FI.exe () [1] 2009-10-17 09:42:46 110592 C:\WINDOWS\Temp\44.tmp\FI.exe () [1] 2009-10-19 18:01:15 110592 C:\WINDOWS\Temp\53.tmp\FI.exe () [1] 2009-10-19 18:06:12 110592 C:\WINDOWS\Temp\57.tmp\FI.exe () [1] 2009-10-19 18:09:39 110592 C:\WINDOWS\Temp\58.tmp\FI.exe () [1] 2009-10-19 18:13:03 110592 C:\WINDOWS\Temp\59.tmp\FI.exe () [1] 2009-10-20 04:34:42 110592 C:\WINDOWS\Temp\5B.tmp\FI.exe () [1] 2009-10-19 18:23:38 110592 C:\WINDOWS\Temp\64.tmp\FI.exe () [1] 2009-10-20 18:13:44 110592 C:\WINDOWS\Temp\6C.tmp\FI.exe () [1] 2009-10-19 18:26:36 110592 C:\WINDOWS\Temp\6D.tmp\FI.exe () [1] 2009-10-19 18:30:16 110592 C:\WINDOWS\Temp\6E.tmp\FI.exe () [1] 2009-10-19 18:33:42 110592 C:\WINDOWS\Temp\6F.tmp\FI.exe () [1] 2009-10-20 18:27:34 110592 C:\WINDOWS\Temp\70.tmp\FI.exe () [1] 2009-10-20 18:34:40 110592 C:\WINDOWS\Temp\71.tmp\FI.exe () [1] 2009-10-20 18:41:09 110592 C:\WINDOWS\Temp\72.tmp\FI.exe () [1] 2009-10-20 18:48:52 110592 C:\WINDOWS\Temp\73.tmp\FI.exe () [1] 2009-10-20 18:58:36 110592 C:\WINDOWS\Temp\74.tmp\FI.exe () Found mount point : C:\WINDOWS\Temp\591D\591D Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\5920\5920 Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\5A.tmp\5A.tmp Mount point destination : \Device\__max++>\^ Cannot access: C:\WINDOWS\Temp\5B.tmp\FI.exe [1] 2009-10-16 23:28:26 110592 C:\WINDOWS\Temp\17.tmp\FI.exe () [1] 2009-10-16 23:31:47 110592 C:\WINDOWS\Temp\18.tmp\FI.exe () [1] 2009-10-16 23:35:27 110592 C:\WINDOWS\Temp\19.tmp\FI.exe () [1] 2009-10-16 23:39:06 110592 C:\WINDOWS\Temp\1A.tmp\FI.exe () [1] 2009-10-16 23:42:47 110592 C:\WINDOWS\Temp\1B.tmp\FI.exe () [1] 2009-10-16 23:45:36 110592 C:\WINDOWS\Temp\1C.tmp\FI.exe () [1] 2009-10-16 23:49:15 110592 C:\WINDOWS\Temp\1D.tmp\FI.exe () [1] 2009-10-16 23:52:58 110592 C:\WINDOWS\Temp\1E.tmp\FI.exe () [1] 2009-10-16 23:56:37 110592 C:\WINDOWS\Temp\1F.tmp\FI.exe () [1] 2009-10-17 00:00:16 110592 C:\WINDOWS\Temp\20.tmp\FI.exe () [1] 2009-10-17 00:03:55 110592 C:\WINDOWS\Temp\22.tmp\FI.exe () [1] 2009-10-16 23:07:29 110592 C:\WINDOWS\Temp\4.tmp\FI.exe () [1] 2009-10-17 09:42:46 110592 C:\WINDOWS\Temp\44.tmp\FI.exe () [1] 2009-10-19 18:01:15 110592 C:\WINDOWS\Temp\53.tmp\FI.exe () [1] 2009-10-19 18:06:12 110592 C:\WINDOWS\Temp\57.tmp\FI.exe () [1] 2009-10-19 18:09:39 110592 C:\WINDOWS\Temp\58.tmp\FI.exe () [1] 2009-10-19 18:13:03 110592 C:\WINDOWS\Temp\59.tmp\FI.exe () [1] 2009-10-20 04:34:42 110592 C:\WINDOWS\Temp\5B.tmp\FI.exe () [1] 2009-10-19 18:23:38 110592 C:\WINDOWS\Temp\64.tmp\FI.exe () [1] 2009-10-20 18:13:44 110592 C:\WINDOWS\Temp\6C.tmp\FI.exe () [1] 2009-10-19 18:26:36 110592 C:\WINDOWS\Temp\6D.tmp\FI.exe () [1] 2009-10-19 18:30:16 110592 C:\WINDOWS\Temp\6E.tmp\FI.exe () [1] 2009-10-19 18:33:42 110592 C:\WINDOWS\Temp\6F.tmp\FI.exe () [1] 2009-10-20 18:27:34 110592 C:\WINDOWS\Temp\70.tmp\FI.exe () [1] 2009-10-20 18:34:40 110592 C:\WINDOWS\Temp\71.tmp\FI.exe () [1] 2009-10-20 18:41:09 110592 C:\WINDOWS\Temp\72.tmp\FI.exe () [1] 2009-10-20 18:48:52 110592 C:\WINDOWS\Temp\73.tmp\FI.exe () [1] 2009-10-20 18:58:36 110592 C:\WINDOWS\Temp\74.tmp\FI.exe () Found mount point : C:\WINDOWS\Temp\5C.tmp\5C.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\5D.tmp\5D.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\5E.tmp\5E.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\5F.tmp\5F.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\6.tmp\6.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\60.tmp\60.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\61.tmp\61.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\62.tmp\62.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\63.tmp\63.tmp Mount point destination : \Device\__max++>\^ Cannot access: C:\WINDOWS\Temp\64.tmp\FI.exe [1] 2009-10-16 23:28:26 110592 C:\WINDOWS\Temp\17.tmp\FI.exe () [1] 2009-10-16 23:31:47 110592 C:\WINDOWS\Temp\18.tmp\FI.exe () [1] 2009-10-16 23:35:27 110592 C:\WINDOWS\Temp\19.tmp\FI.exe () [1] 2009-10-16 23:39:06 110592 C:\WINDOWS\Temp\1A.tmp\FI.exe () [1] 2009-10-16 23:42:47 110592 C:\WINDOWS\Temp\1B.tmp\FI.exe () [1] 2009-10-16 23:45:36 110592 C:\WINDOWS\Temp\1C.tmp\FI.exe () [1] 2009-10-16 23:49:15 110592 C:\WINDOWS\Temp\1D.tmp\FI.exe () [1] 2009-10-16 23:52:58 110592 C:\WINDOWS\Temp\1E.tmp\FI.exe () [1] 2009-10-16 23:56:37 110592 C:\WINDOWS\Temp\1F.tmp\FI.exe () [1] 2009-10-17 00:00:16 110592 C:\WINDOWS\Temp\20.tmp\FI.exe () [1] 2009-10-17 00:03:55 110592 C:\WINDOWS\Temp\22.tmp\FI.exe () [1] 2009-10-16 23:07:29 110592 C:\WINDOWS\Temp\4.tmp\FI.exe () [1] 2009-10-17 09:42:46 110592 C:\WINDOWS\Temp\44.tmp\FI.exe () [1] 2009-10-19 18:01:15 110592 C:\WINDOWS\Temp\53.tmp\FI.exe () [1] 2009-10-19 18:06:12 110592 C:\WINDOWS\Temp\57.tmp\FI.exe () [1] 2009-10-19 18:09:39 110592 C:\WINDOWS\Temp\58.tmp\FI.exe () [1] 2009-10-19 18:13:03 110592 C:\WINDOWS\Temp\59.tmp\FI.exe () [1] 2009-10-20 04:34:42 110592 C:\WINDOWS\Temp\5B.tmp\FI.exe () [1] 2009-10-19 18:23:38 110592 C:\WINDOWS\Temp\64.tmp\FI.exe () [1] 2009-10-20 18:13:44 110592 C:\WINDOWS\Temp\6C.tmp\FI.exe () [1] 2009-10-19 18:26:36 110592 C:\WINDOWS\Temp\6D.tmp\FI.exe () [1] 2009-10-19 18:30:16 110592 C:\WINDOWS\Temp\6E.tmp\FI.exe () [1] 2009-10-19 18:33:42 110592 C:\WINDOWS\Temp\6F.tmp\FI.exe () [1] 2009-10-20 18:27:34 110592 C:\WINDOWS\Temp\70.tmp\FI.exe () [1] 2009-10-20 18:34:40 110592 C:\WINDOWS\Temp\71.tmp\FI.exe () [1] 2009-10-20 18:41:09 110592 C:\WINDOWS\Temp\72.tmp\FI.exe () [1] 2009-10-20 18:48:52 110592 C:\WINDOWS\Temp\73.tmp\FI.exe () [1] 2009-10-20 18:58:36 110592 C:\WINDOWS\Temp\74.tmp\FI.exe () Found mount point : C:\WINDOWS\Temp\65.tmp\65.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\66.tmp\66.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\67.tmp\67.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\68.tmp\68.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\69.tmp\69.tmp Mount point destination : \Device\__max++>\^ Cannot access: C:\WINDOWS\Temp\6C.tmp\FI.exe [1] 2009-10-16 23:28:26 110592 C:\WINDOWS\Temp\17.tmp\FI.exe () [1] 2009-10-16 23:31:47 110592 C:\WINDOWS\Temp\18.tmp\FI.exe () [1] 2009-10-16 23:35:27 110592 C:\WINDOWS\Temp\19.tmp\FI.exe () [1] 2009-10-16 23:39:06 110592 C:\WINDOWS\Temp\1A.tmp\FI.exe () [1] 2009-10-16 23:42:47 110592 C:\WINDOWS\Temp\1B.tmp\FI.exe () [1] 2009-10-16 23:45:36 110592 C:\WINDOWS\Temp\1C.tmp\FI.exe () [1] 2009-10-16 23:49:15 110592 C:\WINDOWS\Temp\1D.tmp\FI.exe () [1] 2009-10-16 23:52:58 110592 C:\WINDOWS\Temp\1E.tmp\FI.exe () [1] 2009-10-16 23:56:37 110592 C:\WINDOWS\Temp\1F.tmp\FI.exe () [1] 2009-10-17 00:00:16 110592 C:\WINDOWS\Temp\20.tmp\FI.exe () [1] 2009-10-17 00:03:55 110592 C:\WINDOWS\Temp\22.tmp\FI.exe () [1] 2009-10-16 23:07:29 110592 C:\WINDOWS\Temp\4.tmp\FI.exe () [1] 2009-10-17 09:42:46 110592 C:\WINDOWS\Temp\44.tmp\FI.exe () [1] 2009-10-19 18:01:15 110592 C:\WINDOWS\Temp\53.tmp\FI.exe () [1] 2009-10-19 18:06:12 110592 C:\WINDOWS\Temp\57.tmp\FI.exe () [1] 2009-10-19 18:09:39 110592 C:\WINDOWS\Temp\58.tmp\FI.exe () [1] 2009-10-19 18:13:03 110592 C:\WINDOWS\Temp\59.tmp\FI.exe () [1] 2009-10-20 04:34:42 110592 C:\WINDOWS\Temp\5B.tmp\FI.exe () [1] 2009-10-19 18:23:38 110592 C:\WINDOWS\Temp\64.tmp\FI.exe () [1] 2009-10-20 18:13:44 110592 C:\WINDOWS\Temp\6C.tmp\FI.exe () [1] 2009-10-19 18:26:36 110592 C:\WINDOWS\Temp\6D.tmp\FI.exe () [1] 2009-10-19 18:30:16 110592 C:\WINDOWS\Temp\6E.tmp\FI.exe () [1] 2009-10-19 18:33:42 110592 C:\WINDOWS\Temp\6F.tmp\FI.exe () [1] 2009-10-20 18:27:34 110592 C:\WINDOWS\Temp\70.tmp\FI.exe () [1] 2009-10-20 18:34:40 110592 C:\WINDOWS\Temp\71.tmp\FI.exe () [1] 2009-10-20 18:41:09 110592 C:\WINDOWS\Temp\72.tmp\FI.exe () [1] 2009-10-20 18:48:52 110592 C:\WINDOWS\Temp\73.tmp\FI.exe () [1] 2009-10-20 18:58:36 110592 C:\WINDOWS\Temp\74.tmp\FI.exe () Cannot access: C:\WINDOWS\Temp\6D.tmp\FI.exe [1] 2009-10-16 23:28:26 110592 C:\WINDOWS\Temp\17.tmp\FI.exe () [1] 2009-10-16 23:31:47 110592 C:\WINDOWS\Temp\18.tmp\FI.exe () [1] 2009-10-16 23:35:27 110592 C:\WINDOWS\Temp\19.tmp\FI.exe () [1] 2009-10-16 23:39:06 110592 C:\WINDOWS\Temp\1A.tmp\FI.exe () [1] 2009-10-16 23:42:47 110592 C:\WINDOWS\Temp\1B.tmp\FI.exe () [1] 2009-10-16 23:45:36 110592 C:\WINDOWS\Temp\1C.tmp\FI.exe () [1] 2009-10-16 23:49:15 110592 C:\WINDOWS\Temp\1D.tmp\FI.exe () [1] 2009-10-16 23:52:58 110592 C:\WINDOWS\Temp\1E.tmp\FI.exe () [1] 2009-10-16 23:56:37 110592 C:\WINDOWS\Temp\1F.tmp\FI.exe () [1] 2009-10-17 00:00:16 110592 C:\WINDOWS\Temp\20.tmp\FI.exe () [1] 2009-10-17 00:03:55 110592 C:\WINDOWS\Temp\22.tmp\FI.exe () [1] 2009-10-16 23:07:29 110592 C:\WINDOWS\Temp\4.tmp\FI.exe () [1] 2009-10-17 09:42:46 110592 C:\WINDOWS\Temp\44.tmp\FI.exe () [1] 2009-10-19 18:01:15 110592 C:\WINDOWS\Temp\53.tmp\FI.exe () [1] 2009-10-19 18:06:12 110592 C:\WINDOWS\Temp\57.tmp\FI.exe () [1] 2009-10-19 18:09:39 110592 C:\WINDOWS\Temp\58.tmp\FI.exe () [1] 2009-10-19 18:13:03 110592 C:\WINDOWS\Temp\59.tmp\FI.exe () [1] 2009-10-20 04:34:42 110592 C:\WINDOWS\Temp\5B.tmp\FI.exe () [1] 2009-10-19 18:23:38 110592 C:\WINDOWS\Temp\64.tmp\FI.exe () [1] 2009-10-20 18:13:44 110592 C:\WINDOWS\Temp\6C.tmp\FI.exe () [1] 2009-10-19 18:26:36 110592 C:\WINDOWS\Temp\6D.tmp\FI.exe () [1] 2009-10-19 18:30:16 110592 C:\WINDOWS\Temp\6E.tmp\FI.exe () [1] 2009-10-19 18:33:42 110592 C:\WINDOWS\Temp\6F.tmp\FI.exe () [1] 2009-10-20 18:27:34 110592 C:\WINDOWS\Temp\70.tmp\FI.exe () [1] 2009-10-20 18:34:40 110592 C:\WINDOWS\Temp\71.tmp\FI.exe () [1] 2009-10-20 18:41:09 110592 C:\WINDOWS\Temp\72.tmp\FI.exe () [1] 2009-10-20 18:48:52 110592 C:\WINDOWS\Temp\73.tmp\FI.exe () [1] 2009-10-20 18:58:36 110592 C:\WINDOWS\Temp\74.tmp\FI.exe () Cannot access: C:\WINDOWS\Temp\6E.tmp\FI.exe [1] 2009-10-16 23:28:26 110592 C:\WINDOWS\Temp\17.tmp\FI.exe () [1] 2009-10-16 23:31:47 110592 C:\WINDOWS\Temp\18.tmp\FI.exe () [1] 2009-10-16 23:35:27 110592 C:\WINDOWS\Temp\19.tmp\FI.exe () [1] 2009-10-16 23:39:06 110592 C:\WINDOWS\Temp\1A.tmp\FI.exe () [1] 2009-10-16 23:42:47 110592 C:\WINDOWS\Temp\1B.tmp\FI.exe () [1] 2009-10-16 23:45:36 110592 C:\WINDOWS\Temp\1C.tmp\FI.exe () [1] 2009-10-16 23:49:15 110592 C:\WINDOWS\Temp\1D.tmp\FI.exe () [1] 2009-10-16 23:52:58 110592 C:\WINDOWS\Temp\1E.tmp\FI.exe () [1] 2009-10-16 23:56:37 110592 C:\WINDOWS\Temp\1F.tmp\FI.exe () [1] 2009-10-17 00:00:16 110592 C:\WINDOWS\Temp\20.tmp\FI.exe () [1] 2009-10-17 00:03:55 110592 C:\WINDOWS\Temp\22.tmp\FI.exe () [1] 2009-10-16 23:07:29 110592 C:\WINDOWS\Temp\4.tmp\FI.exe () [1] 2009-10-17 09:42:46 110592 C:\WINDOWS\Temp\44.tmp\FI.exe () [1] 2009-10-19 18:01:15 110592 C:\WINDOWS\Temp\53.tmp\FI.exe () [1] 2009-10-19 18:06:12 110592 C:\WINDOWS\Temp\57.tmp\FI.exe () [1] 2009-10-19 18:09:39 110592 C:\WINDOWS\Temp\58.tmp\FI.exe () [1] 2009-10-19 18:13:03 110592 C:\WINDOWS\Temp\59.tmp\FI.exe () [1] 2009-10-20 04:34:42 110592 C:\WINDOWS\Temp\5B.tmp\FI.exe () [1] 2009-10-19 18:23:38 110592 C:\WINDOWS\Temp\64.tmp\FI.exe () [1] 2009-10-20 18:13:44 110592 C:\WINDOWS\Temp\6C.tmp\FI.exe () [1] 2009-10-19 18:26:36 110592 C:\WINDOWS\Temp\6D.tmp\FI.exe () [1] 2009-10-19 18:30:16 110592 C:\WINDOWS\Temp\6E.tmp\FI.exe () [1] 2009-10-19 18:33:42 110592 C:\WINDOWS\Temp\6F.tmp\FI.exe () [1] 2009-10-20 18:27:34 110592 C:\WINDOWS\Temp\70.tmp\FI.exe () [1] 2009-10-20 18:34:40 110592 C:\WINDOWS\Temp\71.tmp\FI.exe () [1] 2009-10-20 18:41:09 110592 C:\WINDOWS\Temp\72.tmp\FI.exe () [1] 2009-10-20 18:48:52 110592 C:\WINDOWS\Temp\73.tmp\FI.exe () [1] 2009-10-20 18:58:36 110592 C:\WINDOWS\Temp\74.tmp\FI.exe () Found mount point : C:\WINDOWS\Temp\7.tmp\7.tmp Mount point destination : \Device\__max++>\^ Cannot access: C:\WINDOWS\Temp\70.tmp\FI.exe [1] 2009-10-16 23:28:26 110592 C:\WINDOWS\Temp\17.tmp\FI.exe () [1] 2009-10-16 23:31:47 110592 C:\WINDOWS\Temp\18.tmp\FI.exe () [1] 2009-10-16 23:35:27 110592 C:\WINDOWS\Temp\19.tmp\FI.exe () [1] 2009-10-16 23:39:06 110592 C:\WINDOWS\Temp\1A.tmp\FI.exe () [1] 2009-10-16 23:42:47 110592 C:\WINDOWS\Temp\1B.tmp\FI.exe () [1] 2009-10-16 23:45:36 110592 C:\WINDOWS\Temp\1C.tmp\FI.exe () [1] 2009-10-16 23:49:15 110592 C:\WINDOWS\Temp\1D.tmp\FI.exe () [1] 2009-10-16 23:52:58 110592 C:\WINDOWS\Temp\1E.tmp\FI.exe () [1] 2009-10-16 23:56:37 110592 C:\WINDOWS\Temp\1F.tmp\FI.exe () [1] 2009-10-17 00:00:16 110592 C:\WINDOWS\Temp\20.tmp\FI.exe () [1] 2009-10-17 00:03:55 110592 C:\WINDOWS\Temp\22.tmp\FI.exe () [1] 2009-10-16 23:07:29 110592 C:\WINDOWS\Temp\4.tmp\FI.exe () [1] 2009-10-17 09:42:46 110592 C:\WINDOWS\Temp\44.tmp\FI.exe () [1] 2009-10-19 18:01:15 110592 C:\WINDOWS\Temp\53.tmp\FI.exe () [1] 2009-10-19 18:06:12 110592 C:\WINDOWS\Temp\57.tmp\FI.exe () [1] 2009-10-19 18:09:39 110592 C:\WINDOWS\Temp\58.tmp\FI.exe () [1] 2009-10-19 18:13:03 110592 C:\WINDOWS\Temp\59.tmp\FI.exe () [1] 2009-10-20 04:34:42 110592 C:\WINDOWS\Temp\5B.tmp\FI.exe () [1] 2009-10-19 18:23:38 110592 C:\WINDOWS\Temp\64.tmp\FI.exe () [1] 2009-10-20 18:13:44 110592 C:\WINDOWS\Temp\6C.tmp\FI.exe () [1] 2009-10-19 18:26:36 110592 C:\WINDOWS\Temp\6D.tmp\FI.exe () [1] 2009-10-19 18:30:16 110592 C:\WINDOWS\Temp\6E.tmp\FI.exe () [1] 2009-10-19 18:33:42 110592 C:\WINDOWS\Temp\6F.tmp\FI.exe () [1] 2009-10-20 18:27:34 110592 C:\WINDOWS\Temp\70.tmp\FI.exe () [1] 2009-10-20 18:34:40 110592 C:\WINDOWS\Temp\71.tmp\FI.exe () [1] 2009-10-20 18:41:09 110592 C:\WINDOWS\Temp\72.tmp\FI.exe () [1] 2009-10-20 18:48:52 110592 C:\WINDOWS\Temp\73.tmp\FI.exe () [1] 2009-10-20 18:58:36 110592 C:\WINDOWS\Temp\74.tmp\FI.exe () Cannot access: C:\WINDOWS\Temp\71.tmp\FI.exe [1] 2009-10-16 23:28:26 110592 C:\WINDOWS\Temp\17.tmp\FI.exe () [1] 2009-10-16 23:31:47 110592 C:\WINDOWS\Temp\18.tmp\FI.exe () [1] 2009-10-16 23:35:27 110592 C:\WINDOWS\Temp\19.tmp\FI.exe () [1] 2009-10-16 23:39:06 110592 C:\WINDOWS\Temp\1A.tmp\FI.exe () [1] 2009-10-16 23:42:47 110592 C:\WINDOWS\Temp\1B.tmp\FI.exe () [1] 2009-10-16 23:45:36 110592 C:\WINDOWS\Temp\1C.tmp\FI.exe () [1] 2009-10-16 23:49:15 110592 C:\WINDOWS\Temp\1D.tmp\FI.exe () [1] 2009-10-16 23:52:58 110592 C:\WINDOWS\Temp\1E.tmp\FI.exe () [1] 2009-10-16 23:56:37 110592 C:\WINDOWS\Temp\1F.tmp\FI.exe () [1] 2009-10-17 00:00:16 110592 C:\WINDOWS\Temp\20.tmp\FI.exe () [1] 2009-10-17 00:03:55 110592 C:\WINDOWS\Temp\22.tmp\FI.exe () [1] 2009-10-16 23:07:29 110592 C:\WINDOWS\Temp\4.tmp\FI.exe () [1] 2009-10-17 09:42:46 110592 C:\WINDOWS\Temp\44.tmp\FI.exe () [1] 2009-10-19 18:01:15 110592 C:\WINDOWS\Temp\53.tmp\FI.exe () [1] 2009-10-19 18:06:12 110592 C:\WINDOWS\Temp\57.tmp\FI.exe () [1] 2009-10-19 18:09:39 110592 C:\WINDOWS\Temp\58.tmp\FI.exe () [1] 2009-10-19 18:13:03 110592 C:\WINDOWS\Temp\59.tmp\FI.exe () [1] 2009-10-20 04:34:42 110592 C:\WINDOWS\Temp\5B.tmp\FI.exe () [1] 2009-10-19 18:23:38 110592 C:\WINDOWS\Temp\64.tmp\FI.exe () [1] 2009-10-20 18:13:44 110592 C:\WINDOWS\Temp\6C.tmp\FI.exe () [1] 2009-10-19 18:26:36 110592 C:\WINDOWS\Temp\6D.tmp\FI.exe () [1] 2009-10-19 18:30:16 110592 C:\WINDOWS\Temp\6E.tmp\FI.exe () [1] 2009-10-19 18:33:42 110592 C:\WINDOWS\Temp\6F.tmp\FI.exe () [1] 2009-10-20 18:27:34 110592 C:\WINDOWS\Temp\70.tmp\FI.exe () [1] 2009-10-20 18:34:40 110592 C:\WINDOWS\Temp\71.tmp\FI.exe () [1] 2009-10-20 18:41:09 110592 C:\WINDOWS\Temp\72.tmp\FI.exe () [1] 2009-10-20 18:48:52 110592 C:\WINDOWS\Temp\73.tmp\FI.exe () [1] 2009-10-20 18:58:36 110592 C:\WINDOWS\Temp\74.tmp\FI.exe () Cannot access: C:\WINDOWS\Temp\72.tmp\FI.exe [1] 2009-10-16 23:28:26 110592 C:\WINDOWS\Temp\17.tmp\FI.exe () [1] 2009-10-16 23:31:47 110592 C:\WINDOWS\Temp\18.tmp\FI.exe () [1] 2009-10-16 23:35:27 110592 C:\WINDOWS\Temp\19.tmp\FI.exe () [1] 2009-10-16 23:39:06 110592 C:\WINDOWS\Temp\1A.tmp\FI.exe () [1] 2009-10-16 23:42:47 110592 C:\WINDOWS\Temp\1B.tmp\FI.exe () [1] 2009-10-16 23:45:36 110592 C:\WINDOWS\Temp\1C.tmp\FI.exe () [1] 2009-10-16 23:49:15 110592 C:\WINDOWS\Temp\1D.tmp\FI.exe () [1] 2009-10-16 23:52:58 110592 C:\WINDOWS\Temp\1E.tmp\FI.exe () [1] 2009-10-16 23:56:37 110592 C:\WINDOWS\Temp\1F.tmp\FI.exe () [1] 2009-10-17 00:00:16 110592 C:\WINDOWS\Temp\20.tmp\FI.exe () [1] 2009-10-17 00:03:55 110592 C:\WINDOWS\Temp\22.tmp\FI.exe () [1] 2009-10-16 23:07:29 110592 C:\WINDOWS\Temp\4.tmp\FI.exe () [1] 2009-10-17 09:42:46 110592 C:\WINDOWS\Temp\44.tmp\FI.exe () [1] 2009-10-19 18:01:15 110592 C:\WINDOWS\Temp\53.tmp\FI.exe () [1] 2009-10-19 18:06:12 110592 C:\WINDOWS\Temp\57.tmp\FI.exe () [1] 2009-10-19 18:09:39 110592 C:\WINDOWS\Temp\58.tmp\FI.exe () [1] 2009-10-19 18:13:03 110592 C:\WINDOWS\Temp\59.tmp\FI.exe () [1] 2009-10-20 04:34:42 110592 C:\WINDOWS\Temp\5B.tmp\FI.exe () [1] 2009-10-19 18:23:38 110592 C:\WINDOWS\Temp\64.tmp\FI.exe () [1] 2009-10-20 18:13:44 110592 C:\WINDOWS\Temp\6C.tmp\FI.exe () [1] 2009-10-19 18:26:36 110592 C:\WINDOWS\Temp\6D.tmp\FI.exe () [1] 2009-10-19 18:30:16 110592 C:\WINDOWS\Temp\6E.tmp\FI.exe () [1] 2009-10-19 18:33:42 110592 C:\WINDOWS\Temp\6F.tmp\FI.exe () [1] 2009-10-20 18:27:34 110592 C:\WINDOWS\Temp\70.tmp\FI.exe () [1] 2009-10-20 18:34:40 110592 C:\WINDOWS\Temp\71.tmp\FI.exe () [1] 2009-10-20 18:41:09 110592 C:\WINDOWS\Temp\72.tmp\FI.exe () [1] 2009-10-20 18:48:52 110592 C:\WINDOWS\Temp\73.tmp\FI.exe () [1] 2009-10-20 18:58:36 110592 C:\WINDOWS\Temp\74.tmp\FI.exe () Cannot access: C:\WINDOWS\Temp\73.tmp\FI.exe [1] 2009-10-16 23:28:26 110592 C:\WINDOWS\Temp\17.tmp\FI.exe () [1] 2009-10-16 23:31:47 110592 C:\WINDOWS\Temp\18.tmp\FI.exe () [1] 2009-10-16 23:35:27 110592 C:\WINDOWS\Temp\19.tmp\FI.exe () [1] 2009-10-16 23:39:06 110592 C:\WINDOWS\Temp\1A.tmp\FI.exe () [1] 2009-10-16 23:42:47 110592 C:\WINDOWS\Temp\1B.tmp\FI.exe () [1] 2009-10-16 23:45:36 110592 C:\WINDOWS\Temp\1C.tmp\FI.exe () [1] 2009-10-16 23:49:15 110592 C:\WINDOWS\Temp\1D.tmp\FI.exe () [1] 2009-10-16 23:52:58 110592 C:\WINDOWS\Temp\1E.tmp\FI.exe () [1] 2009-10-16 23:56:37 110592 C:\WINDOWS\Temp\1F.tmp\FI.exe () [1] 2009-10-17 00:00:16 110592 C:\WINDOWS\Temp\20.tmp\FI.exe () [1] 2009-10-17 00:03:55 110592 C:\WINDOWS\Temp\22.tmp\FI.exe () [1] 2009-10-16 23:07:29 110592 C:\WINDOWS\Temp\4.tmp\FI.exe () [1] 2009-10-17 09:42:46 110592 C:\WINDOWS\Temp\44.tmp\FI.exe () [1] 2009-10-19 18:01:15 110592 C:\WINDOWS\Temp\53.tmp\FI.exe () [1] 2009-10-19 18:06:12 110592 C:\WINDOWS\Temp\57.tmp\FI.exe () [1] 2009-10-19 18:09:39 110592 C:\WINDOWS\Temp\58.tmp\FI.exe () [1] 2009-10-19 18:13:03 110592 C:\WINDOWS\Temp\59.tmp\FI.exe () [1] 2009-10-20 04:34:42 110592 C:\WINDOWS\Temp\5B.tmp\FI.exe () [1] 2009-10-19 18:23:38 110592 C:\WINDOWS\Temp\64.tmp\FI.exe () [1] 2009-10-20 18:13:44 110592 C:\WINDOWS\Temp\6C.tmp\FI.exe () [1] 2009-10-19 18:26:36 110592 C:\WINDOWS\Temp\6D.tmp\FI.exe () [1] 2009-10-19 18:30:16 110592 C:\WINDOWS\Temp\6E.tmp\FI.exe () [1] 2009-10-19 18:33:42 110592 C:\WINDOWS\Temp\6F.tmp\FI.exe () [1] 2009-10-20 18:27:34 110592 C:\WINDOWS\Temp\70.tmp\FI.exe () [1] 2009-10-20 18:34:40 110592 C:\WINDOWS\Temp\71.tmp\FI.exe () [1] 2009-10-20 18:41:09 110592 C:\WINDOWS\Temp\72.tmp\FI.exe () [1] 2009-10-20 18:48:52 110592 C:\WINDOWS\Temp\73.tmp\FI.exe () [1] 2009-10-20 18:58:36 110592 C:\WINDOWS\Temp\74.tmp\FI.exe () Cannot access: C:\WINDOWS\Temp\74.tmp\FI.exe [1] 2009-10-16 23:28:26 110592 C:\WINDOWS\Temp\17.tmp\FI.exe () [1] 2009-10-16 23:31:47 110592 C:\WINDOWS\Temp\18.tmp\FI.exe () [1] 2009-10-16 23:35:27 110592 C:\WINDOWS\Temp\19.tmp\FI.exe () [1] 2009-10-16 23:39:06 110592 C:\WINDOWS\Temp\1A.tmp\FI.exe () [1] 2009-10-16 23:42:47 110592 C:\WINDOWS\Temp\1B.tmp\FI.exe () [1] 2009-10-16 23:45:36 110592 C:\WINDOWS\Temp\1C.tmp\FI.exe () [1] 2009-10-16 23:49:15 110592 C:\WINDOWS\Temp\1D.tmp\FI.exe () [1] 2009-10-16 23:52:58 110592 C:\WINDOWS\Temp\1E.tmp\FI.exe () [1] 2009-10-16 23:56:37 110592 C:\WINDOWS\Temp\1F.tmp\FI.exe () [1] 2009-10-17 00:00:16 110592 C:\WINDOWS\Temp\20.tmp\FI.exe () [1] 2009-10-17 00:03:55 110592 C:\WINDOWS\Temp\22.tmp\FI.exe () [1] 2009-10-16 23:07:29 110592 C:\WINDOWS\Temp\4.tmp\FI.exe () [1] 2009-10-17 09:42:46 110592 C:\WINDOWS\Temp\44.tmp\FI.exe () [1] 2009-10-19 18:01:15 110592 C:\WINDOWS\Temp\53.tmp\FI.exe () [1] 2009-10-19 18:06:12 110592 C:\WINDOWS\Temp\57.tmp\FI.exe () [1] 2009-10-19 18:09:39 110592 C:\WINDOWS\Temp\58.tmp\FI.exe () [1] 2009-10-19 18:13:03 110592 C:\WINDOWS\Temp\59.tmp\FI.exe () [1] 2009-10-20 04:34:42 110592 C:\WINDOWS\Temp\5B.tmp\FI.exe () [1] 2009-10-19 18:23:38 110592 C:\WINDOWS\Temp\64.tmp\FI.exe () [1] 2009-10-20 18:13:44 110592 C:\WINDOWS\Temp\6C.tmp\FI.exe () [1] 2009-10-19 18:26:36 110592 C:\WINDOWS\Temp\6D.tmp\FI.exe () [1] 2009-10-19 18:30:16 110592 C:\WINDOWS\Temp\6E.tmp\FI.exe () [1] 2009-10-19 18:33:42 110592 C:\WINDOWS\Temp\6F.tmp\FI.exe () [1] 2009-10-20 18:27:34 110592 C:\WINDOWS\Temp\70.tmp\FI.exe () [1] 2009-10-20 18:34:40 110592 C:\WINDOWS\Temp\71.tmp\FI.exe () [1] 2009-10-20 18:41:09 110592 C:\WINDOWS\Temp\72.tmp\FI.exe () [1] 2009-10-20 18:48:52 110592 C:\WINDOWS\Temp\73.tmp\FI.exe () [1] 2009-10-20 18:58:36 110592 C:\WINDOWS\Temp\74.tmp\FI.exe () Found mount point : C:\WINDOWS\Temp\74F3\74F3 Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\8.tmp\8.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\9.tmp\9.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\A.tmp\A.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\B.tmp\B.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\C.tmp\C.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\chrome_4902\source\Chrome-bin\Dictionaries\Dictionaries Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\chrome_9722\source\Chrome-bin\Dictionaries\Dictionaries Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\D.tmp\D.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\E.tmp\E.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\F.tmp\F.tmp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\IXP000.TMP\IXP000.TMP Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\IXP001.TMP\IXP001.TMP Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Temp\nai45\nai45 Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Vbox\Data\Data Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Vbox\Installers\Installers Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\Vbox\PackingSlips\PackingSlips Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\WinSxS\InstallTemp\InstallTemp Mount point destination : \Device\__max++>\^ Found mount point : C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_39049d00\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_39049d00 Mount point destination : \Device\__max++>\^ Finished!