:processes
explorer.exe
iexplore.exe
firefox.exe
msnmsgr.exe
Teatimer.exe

:OTL
IE - HKLM\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}     
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd1202&cd=2XzuyEtN2Y1L1Qzu0EzzyEtD0FtB0AyC0CtAzztB0D0AyE0BtN0D0Tzu0SyBtCyBtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1953359662&ir= 
IE - HKU\S-1-5-21-3885057622-3054522135-2263952012-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Preserve 
FF - HKLM\Software\MozillaPlugins\@oberon-media.com/ONCAdapter: C:\Program Files (x86)\Common Files\Oberon Media\NCAdapter\1.0.0.14\npapicomadapter.dll File not found
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf: C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll File not found
O2 - BHO: (no name) - {E480F4D1-BE6B-468E-B140-2B2DA5773F4F} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {63A03534-3C7A-4F5C-9BCB-AB671AA84B22} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1     
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1     
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab (Reg Error: Key error.)
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} http://h20614.www2.hp.com/ediags/gmd/Install/Cab/hpIdfPlugin.cab (Reg Error: Key error.)

:reg
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] 
"EnableFirewall"=DWORD:0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 
"EnableFirewall"=DWORD:0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] 
"EnableFirewall"=DWORD:0

:Files
C:\WINDOWS\Temp\*  
@Alternate Data Stream - 95 bytes -> C:\ProgramData\Temp:31106FCB 
@Alternate Data Stream - 401 bytes -> C:\ProgramData\Temp:9F6AB9FA 
@Alternate Data Stream - 384 bytes -> C:\ProgramData\Temp:831B2461 
@Alternate Data Stream - 381 bytes -> C:\ProgramData\Temp:9344C1D9 
@Alternate Data Stream - 372 bytes -> C:\ProgramData\Temp:85C5C53E 
@Alternate Data Stream - 370 bytes -> C:\ProgramData\Temp:A6A0269E 
@Alternate Data Stream - 365 bytes -> C:\ProgramData\Temp:90E02BAB 
@Alternate Data Stream - 362 bytes -> C:\ProgramData\Temp:2C515259 
@Alternate Data Stream - 358 bytes -> C:\ProgramData\Temp:CF52839E 
@Alternate Data Stream - 356 bytes -> C:\ProgramData\Temp:7898E5D2 
@Alternate Data Stream - 354 bytes -> C:\ProgramData\Temp:FB208757 
@Alternate Data Stream - 353 bytes -> C:\ProgramData\Temp:A757EEE2 
@Alternate Data Stream - 155 bytes -> C:\ProgramData\Temp:C5D15631 
@Alternate Data Stream - 155 bytes -> C:\ProgramData\Temp:5C42F64A 
@Alternate Data Stream - 154 bytes -> C:\ProgramData\Temp:97427454 
@Alternate Data Stream - 154 bytes -> C:\ProgramData\Temp:0F64164E 
@Alternate Data Stream - 153 bytes -> C:\ProgramData\Temp:C5340FA1 
@Alternate Data Stream - 153 bytes -> C:\ProgramData\Temp:7D04F8E2 
@Alternate Data Stream - 153 bytes -> C:\ProgramData\Temp:6E65510A 
@Alternate Data Stream - 153 bytes -> C:\ProgramData\Temp:282CE153 
@Alternate Data Stream - 152 bytes -> C:\ProgramData\Temp:ADEBE9CA 
@Alternate Data Stream - 151 bytes -> C:\ProgramData\Temp:EC752217 
@Alternate Data Stream - 151 bytes -> C:\ProgramData\Temp:7FD60FAD 
@Alternate Data Stream - 151 bytes -> C:\ProgramData\Temp:69F562A6 
@Alternate Data Stream - 151 bytes -> C:\ProgramData\Temp:5008417E 
@Alternate Data Stream - 151 bytes -> C:\ProgramData\Temp:49EB69E2 
@Alternate Data Stream - 151 bytes -> C:\ProgramData\Temp:460638C7 
@Alternate Data Stream - 150 bytes -> C:\ProgramData\Temp:CB5AA1E6 
@Alternate Data Stream - 150 bytes -> C:\ProgramData\Temp:31C9BA96 
@Alternate Data Stream - 149 bytes -> C:\ProgramData\Temp:AED4A2B7 
@Alternate Data Stream - 149 bytes -> C:\ProgramData\Temp:9A88B65D 
@Alternate Data Stream - 149 bytes -> C:\ProgramData\Temp:9338F136 
@Alternate Data Stream - 149 bytes -> C:\ProgramData\Temp:7BB20DE8 
@Alternate Data Stream - 149 bytes -> C:\ProgramData\Temp:6AF6BB0E 
@Alternate Data Stream - 149 bytes -> C:\ProgramData\Temp:66F7E5A9 
@Alternate Data Stream - 149 bytes -> C:\ProgramData\Temp:26991AB9 
@Alternate Data Stream - 149 bytes -> C:\ProgramData\Temp:26499772 
@Alternate Data Stream - 148 bytes -> C:\ProgramData\Temp:EA10407C 
@Alternate Data Stream - 148 bytes -> C:\ProgramData\Temp:C0893153 
@Alternate Data Stream - 148 bytes -> C:\ProgramData\Temp:B139DDF3 
@Alternate Data Stream - 148 bytes -> C:\ProgramData\Temp:B0EA26E5 
@Alternate Data Stream - 148 bytes -> C:\ProgramData\Temp:902C848D 
@Alternate Data Stream - 148 bytes -> C:\ProgramData\Temp:8FC1A8C4 
@Alternate Data Stream - 148 bytes -> C:\ProgramData\Temp:8AE92FD3 
@Alternate Data Stream - 148 bytes -> C:\ProgramData\Temp:7D9B1030 
@Alternate Data Stream - 148 bytes -> C:\ProgramData\Temp:53F09A92 
@Alternate Data Stream - 148 bytes -> C:\ProgramData\Temp:401CAF8F 
@Alternate Data Stream - 148 bytes -> C:\ProgramData\Temp:2F5A06FD 
@Alternate Data Stream - 148 bytes -> C:\ProgramData\Temp:2A874675 
@Alternate Data Stream - 148 bytes -> C:\ProgramData\Temp:1E87A273 
@Alternate Data Stream - 147 bytes -> C:\ProgramData\Temp:D987CB43 
@Alternate Data Stream - 147 bytes -> C:\ProgramData\Temp:9836B5E4 
@Alternate Data Stream - 147 bytes -> C:\ProgramData\Temp:8F6B75BF 
@Alternate Data Stream - 147 bytes -> C:\ProgramData\Temp:8751B175 
@Alternate Data Stream - 147 bytes -> C:\ProgramData\Temp:59465B40 
@Alternate Data Stream - 147 bytes -> C:\ProgramData\Temp:2B9555D8 
@Alternate Data Stream - 147 bytes -> C:\ProgramData\Temp:0C9E06A2 
@Alternate Data Stream - 146 bytes -> C:\ProgramData\Temp:32289BE8 
@Alternate Data Stream - 146 bytes -> C:\ProgramData\Temp:27A88EF2 
@Alternate Data Stream - 145 bytes -> C:\ProgramData\Temp:CE3AADB7 
@Alternate Data Stream - 145 bytes -> C:\ProgramData\Temp:B4530133 
@Alternate Data Stream - 145 bytes -> C:\ProgramData\Temp:AC9F291E 
@Alternate Data Stream - 145 bytes -> C:\ProgramData\Temp:922DA2DB 
@Alternate Data Stream - 145 bytes -> C:\ProgramData\Temp:88FB7F72 
@Alternate Data Stream - 145 bytes -> C:\ProgramData\Temp:607A99D7 
@Alternate Data Stream - 145 bytes -> C:\ProgramData\Temp:4EFA2FC7 
@Alternate Data Stream - 145 bytes -> C:\ProgramData\Temp:44712999 
@Alternate Data Stream - 145 bytes -> C:\ProgramData\Temp:3B71586E 
@Alternate Data Stream - 145 bytes -> C:\ProgramData\Temp:35501BA4 
@Alternate Data Stream - 145 bytes -> C:\ProgramData\Temp:3241739E 
@Alternate Data Stream - 144 bytes -> C:\ProgramData\Temp:E94FA418 
@Alternate Data Stream - 144 bytes -> C:\ProgramData\Temp:E402E439 
@Alternate Data Stream - 144 bytes -> C:\ProgramData\Temp:86B7FDDB 
@Alternate Data Stream - 144 bytes -> C:\ProgramData\Temp:398D2775 
@Alternate Data Stream - 144 bytes -> C:\ProgramData\Temp:114C90CA 
@Alternate Data Stream - 144 bytes -> C:\ProgramData\Temp:0B79AB8D 
@Alternate Data Stream - 143 bytes -> C:\ProgramData\Temp:E8CB831A 
@Alternate Data Stream - 143 bytes -> C:\ProgramData\Temp:841E0E1B 
@Alternate Data Stream - 143 bytes -> C:\ProgramData\Temp:54403233 
@Alternate Data Stream - 143 bytes -> C:\ProgramData\Temp:4D566843 
@Alternate Data Stream - 143 bytes -> C:\ProgramData\Temp:371060CE 
@Alternate Data Stream - 143 bytes -> C:\ProgramData\Temp:18A25CF1 
@Alternate Data Stream - 143 bytes -> C:\ProgramData\Temp:104A1C3E 
@Alternate Data Stream - 142 bytes -> C:\ProgramData\Temp:E40D7F76 
@Alternate Data Stream - 142 bytes -> C:\ProgramData\Temp:D7D0B4AF 
@Alternate Data Stream - 142 bytes -> C:\ProgramData\Temp:D1FE35E7 
@Alternate Data Stream - 142 bytes -> C:\ProgramData\Temp:CA7E8F16 
@Alternate Data Stream - 142 bytes -> C:\ProgramData\Temp:A6B07419 
@Alternate Data Stream - 142 bytes -> C:\ProgramData\Temp:A4AF8D0D 
@Alternate Data Stream - 142 bytes -> C:\ProgramData\Temp:6FF14C72 
@Alternate Data Stream - 142 bytes -> C:\ProgramData\Temp:67CF910D 
@Alternate Data Stream - 142 bytes -> C:\ProgramData\Temp:491270B8 
@Alternate Data Stream - 142 bytes -> C:\ProgramData\Temp:3ADE134E 
@Alternate Data Stream - 142 bytes -> C:\ProgramData\Temp:2C86E2AD 
@Alternate Data Stream - 142 bytes -> C:\ProgramData\Temp:2339C9FD 
@Alternate Data Stream - 142 bytes -> C:\ProgramData\Temp:120E44A4 
@Alternate Data Stream - 142 bytes -> C:\ProgramData\Temp:0CEE6109 
@Alternate Data Stream - 142 bytes -> C:\ProgramData\Temp:02CC0035 
@Alternate Data Stream - 141 bytes -> C:\ProgramData\Temp:E9FAC3AB 
@Alternate Data Stream - 141 bytes -> C:\ProgramData\Temp:E517FE76 
@Alternate Data Stream - 141 bytes -> C:\ProgramData\Temp:B5FD4AA1 
@Alternate Data Stream - 141 bytes -> C:\ProgramData\Temp:A7C40691 
@Alternate Data Stream - 141 bytes -> C:\ProgramData\Temp:9EDA68BD 
@Alternate Data Stream - 141 bytes -> C:\ProgramData\Temp:80FA23CA 
@Alternate Data Stream - 141 bytes -> C:\ProgramData\Temp:67E674B0 
@Alternate Data Stream - 141 bytes -> C:\ProgramData\Temp:4E79C4F8 
@Alternate Data Stream - 141 bytes -> C:\ProgramData\Temp:4A8EB1C4 
@Alternate Data Stream - 141 bytes -> C:\ProgramData\Temp:345A9A38 
@Alternate Data Stream - 141 bytes -> C:\ProgramData\Temp:0ED1C542 
@Alternate Data Stream - 141 bytes -> C:\ProgramData\Temp:092BD83A 
@Alternate Data Stream - 141 bytes -> C:\ProgramData\Temp:072CBE6D 
@Alternate Data Stream - 140 bytes -> C:\ProgramData\Temp:A9562832 
@Alternate Data Stream - 140 bytes -> C:\ProgramData\Temp:A774141A 
@Alternate Data Stream - 140 bytes -> C:\ProgramData\Temp:A1FD5369 
@Alternate Data Stream - 140 bytes -> C:\ProgramData\Temp:8318A814 
@Alternate Data Stream - 140 bytes -> C:\ProgramData\Temp:67A91473 
@Alternate Data Stream - 140 bytes -> C:\ProgramData\Temp:5CE91C67 
@Alternate Data Stream - 140 bytes -> C:\ProgramData\Temp:2E928E6E 
@Alternate Data Stream - 140 bytes -> C:\ProgramData\Temp:23834E1E 
@Alternate Data Stream - 140 bytes -> C:\ProgramData\Temp:17EB5BAE 
@Alternate Data Stream - 140 bytes -> C:\ProgramData\Temp:140AD176 
@Alternate Data Stream - 140 bytes -> C:\ProgramData\Temp:12D9D48F 
@Alternate Data Stream - 139 bytes -> C:\ProgramData\Temp:EF0F3F33 
@Alternate Data Stream - 139 bytes -> C:\ProgramData\Temp:B6D84F71 
@Alternate Data Stream - 139 bytes -> C:\ProgramData\Temp:85EA4795 
@Alternate Data Stream - 139 bytes -> C:\ProgramData\Temp:3651A580 
@Alternate Data Stream - 138 bytes -> C:\ProgramData\Temp:F41E22A9 
@Alternate Data Stream - 138 bytes -> C:\ProgramData\Temp:EBF0842B 
@Alternate Data Stream - 138 bytes -> C:\ProgramData\Temp:B6E6C4EA 
@Alternate Data Stream - 138 bytes -> C:\ProgramData\Temp:AAA06E15 
@Alternate Data Stream - 138 bytes -> C:\ProgramData\Temp:A6FE7BCC 
@Alternate Data Stream - 138 bytes -> C:\ProgramData\Temp:A42FABF7 
@Alternate Data Stream - 138 bytes -> C:\ProgramData\Temp:96372A73 
@Alternate Data Stream - 138 bytes -> C:\ProgramData\Temp:6757F885 
@Alternate Data Stream - 138 bytes -> C:\ProgramData\Temp:641A21EA 
@Alternate Data Stream - 138 bytes -> C:\ProgramData\Temp:5A5477A9 
@Alternate Data Stream - 138 bytes -> C:\ProgramData\Temp:2C4F33F6 
@Alternate Data Stream - 138 bytes -> C:\ProgramData\Temp:19474103 
@Alternate Data Stream - 138 bytes -> C:\ProgramData\Temp:09629F6E 
@Alternate Data Stream - 137 bytes -> C:\ProgramData\Temp:F817E159 
@Alternate Data Stream - 137 bytes -> C:\ProgramData\Temp:C2E091F5 
@Alternate Data Stream - 137 bytes -> C:\ProgramData\Temp:C0BCE04B 
@Alternate Data Stream - 137 bytes -> C:\ProgramData\Temp:B0A727D1 
@Alternate Data Stream - 137 bytes -> C:\ProgramData\Temp:A819A132 
@Alternate Data Stream - 137 bytes -> C:\ProgramData\Temp:98CD9221 
@Alternate Data Stream - 137 bytes -> C:\ProgramData\Temp:9254F782 
@Alternate Data Stream - 137 bytes -> C:\ProgramData\Temp:8FC568E1 
@Alternate Data Stream - 137 bytes -> C:\ProgramData\Temp:65484F45 
@Alternate Data Stream - 137 bytes -> C:\ProgramData\Temp:60E755E6 
@Alternate Data Stream - 137 bytes -> C:\ProgramData\Temp:48D6EA0F 
@Alternate Data Stream - 137 bytes -> C:\ProgramData\Temp:3480F458 
@Alternate Data Stream - 137 bytes -> C:\ProgramData\Temp:16A4620C 
@Alternate Data Stream - 136 bytes -> C:\ProgramData\Temp:FBA79096 
@Alternate Data Stream - 136 bytes -> C:\ProgramData\Temp:BD50071F 
@Alternate Data Stream - 136 bytes -> C:\ProgramData\Temp:BACC4A79 
@Alternate Data Stream - 136 bytes -> C:\ProgramData\Temp:AE8FDB48 
@Alternate Data Stream - 136 bytes -> C:\ProgramData\Temp:AB0A5A80 
@Alternate Data Stream - 136 bytes -> C:\ProgramData\Temp:9C3AAD57 
@Alternate Data Stream - 136 bytes -> C:\ProgramData\Temp:6212DF7A 
@Alternate Data Stream - 136 bytes -> C:\ProgramData\Temp:366EFA1A 
@Alternate Data Stream - 136 bytes -> C:\ProgramData\Temp:254AD2ED 
@Alternate Data Stream - 136 bytes -> C:\ProgramData\Temp:164561C8 
@Alternate Data Stream - 136 bytes -> C:\ProgramData\Temp:10B970A9 
@Alternate Data Stream - 136 bytes -> C:\ProgramData\Temp:02172F27 
@Alternate Data Stream - 135 bytes -> C:\ProgramData\Temp:94B25DF5 
@Alternate Data Stream - 135 bytes -> C:\ProgramData\Temp:8075370B 
@Alternate Data Stream - 135 bytes -> C:\ProgramData\Temp:71A89A93 
@Alternate Data Stream - 135 bytes -> C:\ProgramData\Temp:37C279BE 
@Alternate Data Stream - 135 bytes -> C:\ProgramData\Temp:32AE8659 
@Alternate Data Stream - 135 bytes -> C:\ProgramData\Temp:2AD33723 
@Alternate Data Stream - 135 bytes -> C:\ProgramData\Temp:206470A5 
@Alternate Data Stream - 135 bytes -> C:\ProgramData\Temp:120B3AFD 
@Alternate Data Stream - 134 bytes -> C:\ProgramData\Temp:F1174C93 
@Alternate Data Stream - 134 bytes -> C:\ProgramData\Temp:EE2DD6CC 
@Alternate Data Stream - 134 bytes -> C:\ProgramData\Temp:D434342F 
@Alternate Data Stream - 134 bytes -> C:\ProgramData\Temp:CB3667AF 
@Alternate Data Stream - 134 bytes -> C:\ProgramData\Temp:B61767F5 
@Alternate Data Stream - 134 bytes -> C:\ProgramData\Temp:B3196E8D 
@Alternate Data Stream - 134 bytes -> C:\ProgramData\Temp:AD179392 
@Alternate Data Stream - 134 bytes -> C:\ProgramData\Temp:952245B1 
@Alternate Data Stream - 134 bytes -> C:\ProgramData\Temp:759B7D6F 
@Alternate Data Stream - 134 bytes -> C:\ProgramData\Temp:5D570144 
@Alternate Data Stream - 134 bytes -> C:\ProgramData\Temp:40DA0795 
@Alternate Data Stream - 134 bytes -> C:\ProgramData\Temp:2CB9631F 
@Alternate Data Stream - 133 bytes -> C:\ProgramData\Temp:E4FD113F 
@Alternate Data Stream - 133 bytes -> C:\ProgramData\Temp:CCD8056E 
@Alternate Data Stream - 133 bytes -> C:\ProgramData\Temp:C0D23A2F 
@Alternate Data Stream - 133 bytes -> C:\ProgramData\Temp:92CA7E75 
@Alternate Data Stream - 133 bytes -> C:\ProgramData\Temp:79875988 
@Alternate Data Stream - 133 bytes -> C:\ProgramData\Temp:3969ACF7 
@Alternate Data Stream - 133 bytes -> C:\ProgramData\Temp:33B04540 
@Alternate Data Stream - 133 bytes -> C:\ProgramData\Temp:2F7C40B6 
@Alternate Data Stream - 133 bytes -> C:\ProgramData\Temp:12D21A9A 
@Alternate Data Stream - 133 bytes -> C:\ProgramData\Temp:041C0562 
@Alternate Data Stream - 132 bytes -> C:\ProgramData\Temp:EE445D7C 
@Alternate Data Stream - 132 bytes -> C:\ProgramData\Temp:EDB03249 
@Alternate Data Stream - 132 bytes -> C:\ProgramData\Temp:C7F08EA3 
@Alternate Data Stream - 132 bytes -> C:\ProgramData\Temp:BF640EE5 
@Alternate Data Stream - 132 bytes -> C:\ProgramData\Temp:BDDA21B6 
@Alternate Data Stream - 132 bytes -> C:\ProgramData\Temp:8DBCF585 
@Alternate Data Stream - 132 bytes -> C:\ProgramData\Temp:84C34762 
@Alternate Data Stream - 132 bytes -> C:\ProgramData\Temp:5A068EE1 
@Alternate Data Stream - 132 bytes -> C:\ProgramData\Temp:512E1728 
@Alternate Data Stream - 132 bytes -> C:\ProgramData\Temp:244E4E3A 
@Alternate Data Stream - 132 bytes -> C:\ProgramData\Temp:0E5CFA74 
@Alternate Data Stream - 132 bytes -> C:\ProgramData\Temp:0E22C5DB 
@Alternate Data Stream - 131 bytes -> C:\ProgramData\Temp:F7BF538D 
@Alternate Data Stream - 131 bytes -> C:\ProgramData\Temp:EDE28CFC 
@Alternate Data Stream - 131 bytes -> C:\ProgramData\Temp:CC141B05 
@Alternate Data Stream - 131 bytes -> C:\ProgramData\Temp:C368C9EA 
@Alternate Data Stream - 131 bytes -> C:\ProgramData\Temp:BF6C4AAC 
@Alternate Data Stream - 131 bytes -> C:\ProgramData\Temp:AFC732F7 
@Alternate Data Stream - 131 bytes -> C:\ProgramData\Temp:95D421DF 
@Alternate Data Stream - 131 bytes -> C:\ProgramData\Temp:8A620099 
@Alternate Data Stream - 131 bytes -> C:\ProgramData\Temp:7BB584AA 
@Alternate Data Stream - 131 bytes -> C:\ProgramData\Temp:59A6876B 
@Alternate Data Stream - 131 bytes -> C:\ProgramData\Temp:4D348522 
@Alternate Data Stream - 131 bytes -> C:\ProgramData\Temp:3D186293 
@Alternate Data Stream - 131 bytes -> C:\ProgramData\Temp:32A82570 
@Alternate Data Stream - 131 bytes -> C:\ProgramData\Temp:195E8317 
@Alternate Data Stream - 131 bytes -> C:\ProgramData\Temp:0BACBDD9 
@Alternate Data Stream - 130 bytes -> C:\ProgramData\Temp:E7B49FBF 
@Alternate Data Stream - 130 bytes -> C:\ProgramData\Temp:DC21D414 
@Alternate Data Stream - 130 bytes -> C:\ProgramData\Temp:CE506F23 
@Alternate Data Stream - 130 bytes -> C:\ProgramData\Temp:9B9085E9 
@Alternate Data Stream - 130 bytes -> C:\ProgramData\Temp:927EC486 
@Alternate Data Stream - 130 bytes -> C:\ProgramData\Temp:8B4C1181 
@Alternate Data Stream - 130 bytes -> C:\ProgramData\Temp:762408BA 
@Alternate Data Stream - 130 bytes -> C:\ProgramData\Temp:71AEFFEB 
@Alternate Data Stream - 130 bytes -> C:\ProgramData\Temp:5ACE199E 
@Alternate Data Stream - 130 bytes -> C:\ProgramData\Temp:46283136 
@Alternate Data Stream - 130 bytes -> C:\ProgramData\Temp:1B389835 
@Alternate Data Stream - 130 bytes -> C:\ProgramData\Temp:1999DD0A 
@Alternate Data Stream - 130 bytes -> C:\ProgramData\Temp:0C1258F3 
@Alternate Data Stream - 129 bytes -> C:\ProgramData\Temp:FD4C7AD3 
@Alternate Data Stream - 129 bytes -> C:\ProgramData\Temp:F1175E1D 
@Alternate Data Stream - 129 bytes -> C:\ProgramData\Temp:C89D1773 
@Alternate Data Stream - 129 bytes -> C:\ProgramData\Temp:C5E2BAEE 
@Alternate Data Stream - 129 bytes -> C:\ProgramData\Temp:997DA6D7 
@Alternate Data Stream - 129 bytes -> C:\ProgramData\Temp:7BE5BAAB 
@Alternate Data Stream - 129 bytes -> C:\ProgramData\Temp:678C1866 
@Alternate Data Stream - 129 bytes -> C:\ProgramData\Temp:4EC7F009 
@Alternate Data Stream - 129 bytes -> C:\ProgramData\Temp:3DB6F365 
@Alternate Data Stream - 129 bytes -> C:\ProgramData\Temp:3BC173E4 
@Alternate Data Stream - 128 bytes -> C:\ProgramData\Temp:DE875C30 
@Alternate Data Stream - 128 bytes -> C:\ProgramData\Temp:C48A983C 
@Alternate Data Stream - 128 bytes -> C:\ProgramData\Temp:A6E01F67 
@Alternate Data Stream - 128 bytes -> C:\ProgramData\Temp:A5584049 
@Alternate Data Stream - 128 bytes -> C:\ProgramData\Temp:9968F0E2 
@Alternate Data Stream - 128 bytes -> C:\ProgramData\Temp:7EB93F0E 
@Alternate Data Stream - 128 bytes -> C:\ProgramData\Temp:76682252 
@Alternate Data Stream - 128 bytes -> C:\ProgramData\Temp:75CC0165 
@Alternate Data Stream - 128 bytes -> C:\ProgramData\Temp:4A5CFD3B 
@Alternate Data Stream - 128 bytes -> C:\ProgramData\Temp:4577F5B4 
@Alternate Data Stream - 128 bytes -> C:\ProgramData\Temp:0785072C 
@Alternate Data Stream - 128 bytes -> C:\ProgramData\Temp:04EAB86F 
@Alternate Data Stream - 128 bytes -> C:\ProgramData\Temp:04BC9A2C 
@Alternate Data Stream - 127 bytes -> C:\ProgramData\Temp:F8C2E3B9 
@Alternate Data Stream - 127 bytes -> C:\ProgramData\Temp:E876B1A8 
@Alternate Data Stream - 127 bytes -> C:\ProgramData\Temp:D4558A0B 
@Alternate Data Stream - 127 bytes -> C:\ProgramData\Temp:C0A9B815 
@Alternate Data Stream - 127 bytes -> C:\ProgramData\Temp:6BEADDC0 
@Alternate Data Stream - 127 bytes -> C:\ProgramData\Temp:639BB5E9 
@Alternate Data Stream - 127 bytes -> C:\ProgramData\Temp:596E2371 
@Alternate Data Stream - 127 bytes -> C:\ProgramData\Temp:59540531 
@Alternate Data Stream - 127 bytes -> C:\ProgramData\Temp:5539129F 
@Alternate Data Stream - 127 bytes -> C:\ProgramData\Temp:036AA5DD 
@Alternate Data Stream - 126 bytes -> C:\ProgramData\Temp:EBCF5924 
@Alternate Data Stream - 126 bytes -> C:\ProgramData\Temp:E5496666 
@Alternate Data Stream - 126 bytes -> C:\ProgramData\Temp:E2C51D18 
@Alternate Data Stream - 126 bytes -> C:\ProgramData\Temp:E1D06077 
@Alternate Data Stream - 126 bytes -> C:\ProgramData\Temp:DF7A2D3E 
@Alternate Data Stream - 126 bytes -> C:\ProgramData\Temp:D254266B 
@Alternate Data Stream - 126 bytes -> C:\ProgramData\Temp:B4F7687B 
@Alternate Data Stream - 126 bytes -> C:\ProgramData\Temp:B2CCDB69 
@Alternate Data Stream - 126 bytes -> C:\ProgramData\Temp:A9ABA3FF 
@Alternate Data Stream - 126 bytes -> C:\ProgramData\Temp:57DFBE4E 
@Alternate Data Stream - 126 bytes -> C:\ProgramData\Temp:4DDE401B 
@Alternate Data Stream - 126 bytes -> C:\ProgramData\Temp:3ABC38E6 
@Alternate Data Stream - 126 bytes -> C:\ProgramData\Temp:373E1720 
@Alternate Data Stream - 126 bytes -> C:\ProgramData\Temp:2E49FF93 
@Alternate Data Stream - 125 bytes -> C:\ProgramData\Temp:FD7DCDA6 
@Alternate Data Stream - 125 bytes -> C:\ProgramData\Temp:FD786DCA 
@Alternate Data Stream - 125 bytes -> C:\ProgramData\Temp:EB4FEEF5 
@Alternate Data Stream - 125 bytes -> C:\ProgramData\Temp:B21F2857 
@Alternate Data Stream - 125 bytes -> C:\ProgramData\Temp:A13B696A 
@Alternate Data Stream - 125 bytes -> C:\ProgramData\Temp:9524D821 
@Alternate Data Stream - 125 bytes -> C:\ProgramData\Temp:574F975B 
@Alternate Data Stream - 125 bytes -> C:\ProgramData\Temp:14A1BBE3 
@Alternate Data Stream - 124 bytes -> C:\ProgramData\Temp:F3EFA8A8 
@Alternate Data Stream - 124 bytes -> C:\ProgramData\Temp:EF0BD3A1 
@Alternate Data Stream - 124 bytes -> C:\ProgramData\Temp:E4EE99EF 
@Alternate Data Stream - 124 bytes -> C:\ProgramData\Temp:E265ED33 
@Alternate Data Stream - 124 bytes -> C:\ProgramData\Temp:D4DD372D 
@Alternate Data Stream - 124 bytes -> C:\ProgramData\Temp:BA05E0C4 
@Alternate Data Stream - 124 bytes -> C:\ProgramData\Temp:A745DB5D 
@Alternate Data Stream - 124 bytes -> C:\ProgramData\Temp:A02025CE 
@Alternate Data Stream - 124 bytes -> C:\ProgramData\Temp:9E3D44B7 
@Alternate Data Stream - 124 bytes -> C:\ProgramData\Temp:9603033A 
@Alternate Data Stream - 124 bytes -> C:\ProgramData\Temp:8866C899 
@Alternate Data Stream - 124 bytes -> C:\ProgramData\Temp:5A9F1AE5 
@Alternate Data Stream - 124 bytes -> C:\ProgramData\Temp:4C528C86 
@Alternate Data Stream - 124 bytes -> C:\ProgramData\Temp:3D1D487A 
@Alternate Data Stream - 124 bytes -> C:\ProgramData\Temp:30E0D641 
@Alternate Data Stream - 123 bytes -> C:\ProgramData\Temp:E11D90D0 
@Alternate Data Stream - 123 bytes -> C:\ProgramData\Temp:BEACE4C8 
@Alternate Data Stream - 123 bytes -> C:\ProgramData\Temp:A9223B61 
@Alternate Data Stream - 123 bytes -> C:\ProgramData\Temp:A76A1B1B 
@Alternate Data Stream - 123 bytes -> C:\ProgramData\Temp:5EFEB6A1 
@Alternate Data Stream - 123 bytes -> C:\ProgramData\Temp:53DF4438 
@Alternate Data Stream - 123 bytes -> C:\ProgramData\Temp:3D922890 
@Alternate Data Stream - 123 bytes -> C:\ProgramData\Temp:3815BC84 
@Alternate Data Stream - 123 bytes -> C:\ProgramData\Temp:268BA8AB 
@Alternate Data Stream - 122 bytes -> C:\ProgramData\Temp:F49868C8 
@Alternate Data Stream - 122 bytes -> C:\ProgramData\Temp:F2E92DCD 
@Alternate Data Stream - 122 bytes -> C:\ProgramData\Temp:B504E4C2 
@Alternate Data Stream - 122 bytes -> C:\ProgramData\Temp:7B52659E 
@Alternate Data Stream - 122 bytes -> C:\ProgramData\Temp:2F947175 
@Alternate Data Stream - 122 bytes -> C:\ProgramData\Temp:183A9046 
@Alternate Data Stream - 121 bytes -> C:\ProgramData\Temp:C8207070 
@Alternate Data Stream - 121 bytes -> C:\ProgramData\Temp:315B4A13 
@Alternate Data Stream - 121 bytes -> C:\ProgramData\Temp:1234ADAE 
@Alternate Data Stream - 120 bytes -> C:\ProgramData\Temp:C76CFF82 
@Alternate Data Stream - 120 bytes -> C:\ProgramData\Temp:C669F3E1 
@Alternate Data Stream - 120 bytes -> C:\ProgramData\Temp:9E05DEB0 
@Alternate Data Stream - 120 bytes -> C:\ProgramData\Temp:89CF6F9C 
@Alternate Data Stream - 120 bytes -> C:\ProgramData\Temp:834DD57E 
@Alternate Data Stream - 120 bytes -> C:\ProgramData\Temp:1DB77A89 
@Alternate Data Stream - 120 bytes -> C:\ProgramData\Temp:03A039A3 
@Alternate Data Stream - 119 bytes -> C:\ProgramData\Temp:F135A76C 
@Alternate Data Stream - 119 bytes -> C:\ProgramData\Temp:EDF12A30 
@Alternate Data Stream - 119 bytes -> C:\ProgramData\Temp:EC855C73 
@Alternate Data Stream - 119 bytes -> C:\ProgramData\Temp:E8C44CB4 
@Alternate Data Stream - 119 bytes -> C:\ProgramData\Temp:961B84C5 
@Alternate Data Stream - 119 bytes -> C:\ProgramData\Temp:7D938C9B 
@Alternate Data Stream - 119 bytes -> C:\ProgramData\Temp:709E81D4 
@Alternate Data Stream - 119 bytes -> C:\ProgramData\Temp:51E66512 
@Alternate Data Stream - 119 bytes -> C:\ProgramData\Temp:1FA4C06F 
@Alternate Data Stream - 119 bytes -> C:\ProgramData\Temp:18B241CC 
@Alternate Data Stream - 119 bytes -> C:\ProgramData\Temp:1604D047 
@Alternate Data Stream - 118 bytes -> C:\ProgramData\Temp:EB68CA55 
@Alternate Data Stream - 118 bytes -> C:\ProgramData\Temp:E153075C 
@Alternate Data Stream - 118 bytes -> C:\ProgramData\Temp:A391510C 
@Alternate Data Stream - 118 bytes -> C:\ProgramData\Temp:9E9A3410 
@Alternate Data Stream - 118 bytes -> C:\ProgramData\Temp:9D03192E 
@Alternate Data Stream - 118 bytes -> C:\ProgramData\Temp:72A1B66A 
@Alternate Data Stream - 118 bytes -> C:\ProgramData\Temp:63210866 
@Alternate Data Stream - 118 bytes -> C:\ProgramData\Temp:5E73E1C2 
@Alternate Data Stream - 118 bytes -> C:\ProgramData\Temp:57176330 
@Alternate Data Stream - 118 bytes -> C:\ProgramData\Temp:4C9782FB 
@Alternate Data Stream - 118 bytes -> C:\ProgramData\Temp:4011BFFD 
@Alternate Data Stream - 118 bytes -> C:\ProgramData\Temp:3E8A3E87 
@Alternate Data Stream - 118 bytes -> C:\ProgramData\Temp:1A8FDBA3 
@Alternate Data Stream - 118 bytes -> C:\ProgramData\Temp:0E10B960 
@Alternate Data Stream - 115 bytes -> C:\ProgramData\Temp:77B64C59 
@Alternate Data Stream - 115 bytes -> C:\ProgramData\Temp:4DCAC4BC 
@Alternate Data Stream - 114 bytes -> C:\ProgramData\Temp:EE69D7DF 
@Alternate Data Stream - 114 bytes -> C:\ProgramData\Temp:C9B27A06 
@Alternate Data Stream - 114 bytes -> C:\ProgramData\Temp:4F8B72C9 
@Alternate Data Stream - 114 bytes -> C:\ProgramData\Temp:0F38B460 
@Alternate Data Stream - 113 bytes -> C:\ProgramData\Temp:AED33A42 
@Alternate Data Stream - 113 bytes -> C:\ProgramData\Temp:8204AA35 
@Alternate Data Stream - 112 bytes -> C:\ProgramData\Temp:9BAC4211 
@Alternate Data Stream - 112 bytes -> C:\ProgramData\Temp:98DFF516 
@Alternate Data Stream - 111 bytes -> C:\ProgramData\Temp:D055FC10 
@Alternate Data Stream - 111 bytes -> C:\ProgramData\Temp:96AFAB10 
@Alternate Data Stream - 111 bytes -> C:\ProgramData\Temp:45F3AD49 
@Alternate Data Stream - 111 bytes -> C:\ProgramData\Temp:1A5822A3 
@Alternate Data Stream - 110 bytes -> C:\ProgramData\Temp:D92485C9 
@Alternate Data Stream - 109 bytes -> C:\ProgramData\Temp:55E3C0E0 
@Alternate Data Stream - 108 bytes -> C:\ProgramData\Temp:569CEE83 
@Alternate Data Stream - 106 bytes -> C:\ProgramData\Temp:3D36932D 
@Alternate Data Stream - 104 bytes -> C:\ProgramData\Temp:551BED5F 
@Alternate Data Stream - 100 bytes -> C:\ProgramData\Temp:AD2DB2F9 
@Alternate Data Stream - 100 bytes -> C:\ProgramData\Temp:7B2BB690 

:commands
[emptytemp]