.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2012-01-30 23:30
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
.
d:\docume~1\bill\LOCALS~1\Temp\ICD2.tmp
d:\docume~1\bill\LOCALS~1\Temp\ICD2.tmp\gp.ocx 51568 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\ichcop 0 bytes
d:\docume~1\bill\LOCALS~1\Temp\IM
d:\docume~1\bill\LOCALS~1\Temp\IM\CMD10.tmp 40 bytes
d:\docume~1\bill\LOCALS~1\Temp\IM\CMD328.tmp 40 bytes
d:\docume~1\bill\LOCALS~1\Temp\IM\CMD329.tmp 40 bytes
d:\docume~1\bill\LOCALS~1\Temp\IM\CMD35.tmp 40 bytes
d:\docume~1\bill\LOCALS~1\Temp\IM\CMD36.tmp 40 bytes
d:\docume~1\bill\LOCALS~1\Temp\IM\CMD365.tmp 40 bytes
d:\docume~1\bill\LOCALS~1\Temp\IM\CMD366.tmp 40 bytes
d:\docume~1\bill\LOCALS~1\Temp\IM\CMD367.tmp 40 bytes
d:\docume~1\bill\LOCALS~1\Temp\IM\CMD4.tmp 40 bytes
d:\docume~1\bill\LOCALS~1\Temp\IM\CMD404.tmp 40 bytes
d:\docume~1\bill\LOCALS~1\Temp\IM\CMD423.tmp 40 bytes
d:\docume~1\bill\LOCALS~1\Temp\IM\CMD424.tmp 40 bytes
d:\docume~1\bill\LOCALS~1\Temp\IM\CMD4BA.tmp 40 bytes
d:\docume~1\bill\LOCALS~1\Temp\IM\CMD4BB.tmp 40 bytes
d:\docume~1\bill\LOCALS~1\Temp\IM\CMD5.tmp 40 bytes
d:\docume~1\bill\LOCALS~1\Temp\IM\CMD6.tmp 40 bytes
d:\docume~1\bill\LOCALS~1\Temp\IM\CMD7.tmp 40 bytes
d:\docume~1\bill\LOCALS~1\Temp\IM\CMDC.tmp 40 bytes
d:\docume~1\bill\LOCALS~1\Temp\IM\CMDED.tmp 40 bytes
d:\docume~1\bill\LOCALS~1\Temp\IM\CMDEE.tmp 40 bytes
d:\docume~1\bill\LOCALS~1\Temp\IM\CMDF.tmp 40 bytes
d:\docume~1\bill\LOCALS~1\Temp\IM\imu425.htm 1828 bytes
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\ImApp.log 26629 bytes
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImNtUtilU.dll 95688 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImViewRU.dll 275912 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImMangrRU.dll 533960 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImMangrU.dll 1136072 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImMapiU.dll 46536 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImNotfy.exe 259528 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImNotfyRU.dll 157128 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImNotfyU.dll 161224 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImPackr.exe 103880 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImPackrRU.dll 64456 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImParserU.dll 644552 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImpCnt.exe 112072 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImpCntRU.dll 34248 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImSearchU.dll 28616 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImServU.dll 394696 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImSetup.exe 120264 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImShExtU.dll 132552 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImSpoolU.dll 640456 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImSuppRU.dll 652744 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImSuppU.dll 1578440 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImToolsU.dll 275912 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImUtilsU.dll 1373640 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImViewU.dll 1455560 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\ImWrappU.dll 161224 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\IncMail.exe 366024 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\IncMailRU.dll 62920 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\IncrediGalleryDesktop.url 100 bytes
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\IncrediGalleryStart.url 100 bytes
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\incredigames.ico 27766 bytes
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\IncrediGamesStart.url 100 bytes
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\IncrediMail Gallery.ico 25214 bytes
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\IncrediMail.ico 25214 bytes
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\Iobit.ico 23558 bytes
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\Iobit.url 246 bytes
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\resources
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\resources\WebMenuImg.htm 591 bytes
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\program files\IncrediMail\Bin\wlessfp1.dll 71112 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\SetupData
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\SetupData\Skin
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\SetupData\Skin\angelic_light.ims 17490 bytes
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\SetupData\Skin\classic_light.ims 11610 bytes
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\SetupData\Skin\fantasy_light.ims 15062 bytes
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\SetupData\Skin\frosted_light.ims 12584 bytes
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\SetupData\Skin\im2.ims 1511058 bytes
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\SetupData\Skin\paper_light.ims 20832 bytes
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\DISK1\SetupData\Skin\premium.ims 229847 bytes
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\incredimailsetup_d.7z 5776883 bytes
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail\skin.7z 1822909 bytes
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail_Install.log 659230 bytes
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\incredimail_installer.log 1098 bytes
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\IncrediMail_Setup.log 2990740 bytes
d:\docume~1\bill\LOCALS~1\Temp\ImInstaller\MsiExec.log 1042 bytes
d:\docume~1\bill\LOCALS~1\Temp\IMT14.xml 1994 bytes
d:\docume~1\bill\LOCALS~1\Temp\IMT15.xml 426 bytes
d:\docume~1\bill\LOCALS~1\Temp\IMT16.xml 707340 bytes
d:\docume~1\bill\LOCALS~1\Temp\IM_142.tmp
d:\docume~1\bill\LOCALS~1\Temp\IM_C2C.tmp
d:\docume~1\bill\LOCALS~1\Temp\IncrediMailInstall_En.log 4572798 bytes
d:\docume~1\bill\LOCALS~1\Temp\is-MTITT.tmp
d:\docume~1\bill\LOCALS~1\Temp\is-MTITT.tmp\_isetup
d:\docume~1\bill\LOCALS~1\Temp\is-MTITT.tmp\_isetup\_RegDLL.tmp 4096 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\is-MTITT.tmp\_isetup\_shfoldr.dll 23312 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\is979.tmp 0 bytes
d:\docume~1\bill\LOCALS~1\Temp\ispAA6.tmp
d:\docume~1\bill\LOCALS~1\Temp\ispAA6.tmp\_Setup.dll 368640 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\Italian.bin 28419 bytes
d:\docume~1\bill\LOCALS~1\Temp\Japanese.bin 25202 bytes
d:\docume~1\bill\LOCALS~1\Temp\JAUReg.log 301 bytes
d:\docume~1\bill\LOCALS~1\Temp\java_install.log 27412 bytes
d:\docume~1\bill\LOCALS~1\Temp\java_install_reg.log 1940 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF2A1C.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF2B45.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF2C66.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF2C94.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF2DAF.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF2DE4.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF2E3C.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF30F7.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF3154.tmp 40960 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF340C.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF376F.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF377A.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF37E6.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF37F1.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF3827.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFD6AA.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFD6D1.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFD722.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFD72E.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFD784.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFD78F.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFD79A.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFD7A5.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFD7FB.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFD806.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFD834.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFD83F.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFD8A5.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFD8B0.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFD914.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFD951.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFD96C.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFD996.tmp 0 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFDB14.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFDB62.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFDBF1.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFDC07.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFDC3D.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFDC4E.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFDE27.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFDF52.tmp 57344 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFE102.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFE6E3.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFE6EE.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFE71C.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFE727.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\SimChin.bin 17030 bytes
d:\docume~1\bill\LOCALS~1\Temp\Slovak.bin 26159 bytes
d:\docume~1\bill\LOCALS~1\Temp\Slovenian.bin 24330 bytes
d:\docume~1\bill\LOCALS~1\Temp\Spanish.bin 28759 bytes
d:\docume~1\bill\LOCALS~1\Temp\SWEDISH.bin 24503 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for 1993-Nissan-Maxima.zip
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for 1993-Nissan-Maxima.zip\1993-Nissan-Maxima.pdf 22513177 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for 802.11b+g Atheros Wireless Lan Driver 7.1.0.90.zip
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for 802.11b+g Atheros Wireless Lan Driver 7.1.0.90.zip\802BGA
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for 802.11b+g Atheros Wireless Lan Driver 7.1.0.90.zip\802BGA\data2.cab 457070 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for 802.11b+g Atheros Wireless Lan Driver 7.1.0.90.zip\802BGA\ISSetup.dll 552214 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for 802.11b+g Atheros Wireless Lan Driver 7.1.0.90.zip\802BGA\setup.exe 455600 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1031.mst 239104 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomCs.ctm 20593 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0404.ini 3261 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0406.ini 4855 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0407.ini 5140 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0409.ini 4632 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x040a.ini 5275 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x040b.ini 4734 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x040c.ini 5406 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0410.ini 5130 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0411.ini 5014 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0412.ini 4303 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0413.ini 5118 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0414.ini 4810 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0415.ini 4887 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0416.ini 4966 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0419.ini 4896 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x041d.ini 4636 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\0x0804.ini 3326 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1028.mst 252416 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1030.mst 233984 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1033.mst 3584 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1034.mst 237056 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1035.mst 233984 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1036.mst 239104 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1040.mst 239104 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1041.mst 288768 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1042.mst 388096 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1043.mst 238592 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1044.mst 233472 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1045.mst 233984 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1046.mst 236032 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1049.mst 252416 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\1053.mst 233472 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\2052.mst 251904 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\Autorun.inf 52 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\BBalloon.dll 49152 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\BtSetup.dll 167936 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\btw.ico 3638 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\BTW.msi 2367684 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\btwusb.cat 80 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\btwusb.inf 91407 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\btwusb.sys 55288 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\btw_ci.dll 77824 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomBr.ctm 20879 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomCt.ctm 20610 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomDa.ctm 20670 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomDu.ctm 20677 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomEn.ctm 20547 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomFi.ctm 20679 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomFr.ctm 20863 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomGr.ctm 20664 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomIt.ctm 20688 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomJp.ctm 20721 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomKo.ctm 20588 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomNo.ctm 20637 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomPo.ctm 20935 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomRu.ctm 21384 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomSp.ctm 20767 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\CustomSw.ctm 20659 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\Data1.cab 17224904 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\frmupgr.sys 17516 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\Inst.exe 225280 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\instmsia.exe 1708856 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\instmsiw.exe 1822520 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\license.dat 176 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\MSVCP60.DLL 401462 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\setup.exe 45056 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\Setup.ini 1332 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\Spylite.exe 360448 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\SpyliteUserGuide.pdf 339996 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\svcpack
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\svcpack\SvcPack.ini 2566 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Directory 1 for dbt-122_drv_v3.01.915.zip\Driver & Software\UsrGuide.pdf 490249 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Internet Files
d:\docume~1\bill\LOCALS~1\Temp\Temporary Internet Files\Content.IE5
d:\docume~1\bill\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\3KH0RH46
d:\docume~1\bill\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\3KH0RH46\desktop.ini 67 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\BG091VWB
d:\docume~1\bill\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\BG091VWB\desktop.ini 67 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\desktop.ini 67 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\HD20B8U0
d:\docume~1\bill\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\HD20B8U0\desktop.ini 67 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\index.dat 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\RLJ4E61V
d:\docume~1\bill\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\RLJ4E61V\desktop.ini 67 bytes
d:\docume~1\bill\LOCALS~1\Temp\Thai.bin 22395 bytes
d:\docume~1\bill\LOCALS~1\Temp\tmp8F3.tmp 782336 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\tmp8F4.tmp 8091363 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\tmp8F7.tmp 782336 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\tmp8F8.tmp 8091363 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\tmp8F9.tmp 782336 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\tmp8FA.tmp 8091363 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\tmp8FC.tmp 8091363 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\tmp936.tmp 782336 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\tmp937.tmp 8091363 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\tmpA90.tmp 782336 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\tmpA91.tmp 8091363 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\de77_appcompat.txt 16812 bytes
d:\docume~1\bill\LOCALS~1\Temp\Deployment
d:\docume~1\bill\LOCALS~1\Temp\Dutch.bin 26202 bytes
d:\docume~1\bill\LOCALS~1\Temp\E.tmp 321184 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\E9.tmp 335520 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\English.bin 22808 bytes
d:\docume~1\bill\LOCALS~1\Temp\etilqs_w3YlHDWpLSi9sRc 196632 bytes
d:\docume~1\bill\LOCALS~1\Temp\F.tmp 328864 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\F943591.dmp 60620 bytes
d:\docume~1\bill\LOCALS~1\Temp\Finnish.bin 23326 bytes
d:\docume~1\bill\LOCALS~1\Temp\fla25E.tmp 5509838 bytes
d:\docume~1\bill\LOCALS~1\Temp\fla3D0.tmp 2401 bytes
d:\docume~1\bill\LOCALS~1\Temp\FP_PL_PFS_INSTALLER_32bit.exe 3763360 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\French.bin 28183 bytes
d:\docume~1\bill\LOCALS~1\Temp\ge172
d:\docume~1\bill\LOCALS~1\Temp\ge252
d:\docume~1\bill\LOCALS~1\Temp\ge2816
d:\docume~1\bill\LOCALS~1\Temp\ge3032
d:\docume~1\bill\LOCALS~1\Temp\geColladaModelCacheLock 0 bytes
d:\docume~1\bill\LOCALS~1\Temp\geIconCacheLock 0 bytes
d:\docume~1\bill\LOCALS~1\Temp\German.bin 26669 bytes
d:\docume~1\bill\LOCALS~1\Temp\GLB159.tmp 71680 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\~DF7E67.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF7F3D.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF7F48.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF81A0.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF81B0.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF83D7.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF8449.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF85F3.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF8609.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF86E0.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF897E.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF8D68.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF8DEB.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF8F7A.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF8FB0.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF9772.tmp 0 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF9818.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF9849.tmp 212992 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF9970.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF9A16.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF9A21.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF9A8D.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF9A98.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF9AC6.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF9AD1.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF9E60.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFA069.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFA0D.tmp 0 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFA10.tmp 180224 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFA78E.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFA93.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\{8F5938E7-9B03-42D2-A522-F3631C56C3F1}
d:\docume~1\bill\LOCALS~1\Temp\{8F5938E7-9B03-42D2-A522-F3631C56C3F1}\_Setup.dll 164784 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\{94EC1F13-57B1-4F34-B01E-3F0CEE484A7B}
d:\docume~1\bill\LOCALS~1\Temp\{94EC1F13-57B1-4F34-B01E-3F0CEE484A7B}\setup.isn 751321 bytes
d:\docume~1\bill\LOCALS~1\Temp\{9CEE7B05-D005-4311-985D-B2114492C026}
d:\docume~1\bill\LOCALS~1\Temp\{9CEE7B05-D005-4311-985D-B2114492C026}\{28006915-2739-4EBE-B5E8-49B25D32EB33}
d:\docume~1\bill\LOCALS~1\Temp\{BDF4B94E-B6D7-42AD-8BB8-4391CEBFEA0D}
d:\docume~1\bill\LOCALS~1\Temp\{BDF4B94E-B6D7-42AD-8BB8-4391CEBFEA0D}\{72FD5F2E-1F7A-4E9B-8838-29E842E178CD}
d:\docume~1\bill\LOCALS~1\Temp\{BDF4B94E-B6D7-42AD-8BB8-4391CEBFEA0D}\{72FD5F2E-1F7A-4E9B-8838-29E842E178CD}\difxapi.dll 331184 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\{E402CC98-55E9-49C0-B61F-8F4203ADF31A}
d:\docume~1\bill\LOCALS~1\Temp\{E402CC98-55E9-49C0-B61F-8F4203ADF31A}\setup.isn 52715 bytes
d:\docume~1\bill\LOCALS~1\Temp\{FD31AEF6-B60F-481A-A862-29137E6398F5}
d:\docume~1\bill\LOCALS~1\Temp\{FD31AEF6-B60F-481A-A862-29137E6398F5}\setup.isn 52715 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF1349.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF13A.tmp 24576 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF1473.tmp 0 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF15ED.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF1914.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF1DE2.tmp 0 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF2434.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF2436.tmp 0 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF243F.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF24AB.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF24B6.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF24E4.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF24F7.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF2656.tmp 0 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF26A6.tmp 0 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFAC71.tmp 0 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFB0C.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFB0CB.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFB0D6.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFB142.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFB14D.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFB17.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFB17B.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFB186.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFB1A7.tmp 0 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFB1FE.tmp 0 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFB568.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF51C7.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF51D6.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF52E6.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF54F5.tmp 0 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF55E2.tmp 0 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF5D53.tmp 0 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF6061.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF6073.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF607C.tmp 294912 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF63CD.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF64E6.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF651.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF6767.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF6D40.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF70CE.tmp 0 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF70F0.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF70FB.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF7167.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF7172.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF7196.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF71A0.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF71AB.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF7293.tmp 65536 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF793B.tmp 28672 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF7A9A.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF7DBB.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF7DC6.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\avginfo.id 78 bytes
d:\docume~1\bill\LOCALS~1\Temp\AVG_TB_DumpLog.txt 6441 bytes
d:\docume~1\bill\LOCALS~1\Temp\B.tmp 321184 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\B7B.dir
d:\docume~1\bill\LOCALS~1\Temp\B7B.dir\InstallFlashPlayer.exe 3797152 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\B7B.tmp 0 bytes
d:\docume~1\bill\LOCALS~1\Temp\BTN%Copy%1
d:\docume~1\bill\LOCALS~1\Temp\BTN%Copy%1\BTN%Copy%2
d:\docume~1\bill\LOCALS~1\Temp\~DFE9A5.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFEA12.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFEA1D.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFEB1D.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFEB28.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFED61.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFEDE.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFEE2C.tmp 0 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFEE5B.tmp 0 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFEE69.tmp 0 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFEE9.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFF0D.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFF376.tmp 0 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFF5B.tmp 0 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFF69D.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFF79.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFF818.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFF837.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\mso1E.tmp 28160 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\msohtml1
d:\docume~1\bill\LOCALS~1\Temp\msohtml1\01
d:\docume~1\bill\LOCALS~1\Temp\NclRegPermissions(1).log 8035 bytes
d:\docume~1\bill\LOCALS~1\Temp\NclRegPermissions(2).log 19990 bytes
d:\docume~1\bill\LOCALS~1\Temp\NOD4779.tmp 36605 bytes
d:\docume~1\bill\LOCALS~1\Temp\NOD49AA.tmp 5289984 bytes
d:\docume~1\bill\LOCALS~1\Temp\NOD49AB.tmp 5289984 bytes
d:\docume~1\bill\LOCALS~1\Temp\NOD49AD.tmp 3379764 bytes
d:\docume~1\bill\LOCALS~1\Temp\NOD49AE.tmp 3184026 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFBC98.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFBECE.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFBF0A.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFC17.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFC22.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFC454.tmp 0 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFC5E3.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFC5EE.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFC6B0.tmp 0 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFC6DD.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFC6E8.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFC754.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFC75F.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFC792.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFC7B2.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFC82B.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFC83B.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFC862.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFC954.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFC973.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFCE15.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFD35.tmp 40960 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFD58E.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFD5B2.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\Google Toolbar
d:\docume~1\bill\LOCALS~1\Temp\Google Toolbar\GoogleToolbarWelcome.log 282 bytes
d:\docume~1\bill\LOCALS~1\Temp\Google Toolbar\gt140.tmp 0 bytes
d:\docume~1\bill\LOCALS~1\Temp\Google Toolbar\gtb144.tmp 0 bytes
d:\docume~1\bill\LOCALS~1\Temp\Google Toolbar\gtb235.tmp 0 bytes
d:\docume~1\bill\LOCALS~1\Temp\Google Toolbar\gtb3.tmp 0 bytes
d:\docume~1\bill\LOCALS~1\Temp\GoogleToolbarInstaller1.log 3993 bytes
d:\docume~1\bill\LOCALS~1\Temp\GoogleToolbarInstaller2.log 10803 bytes
d:\docume~1\bill\LOCALS~1\Temp\Greek.bin 25631 bytes
d:\docume~1\bill\LOCALS~1\Temp\Hebrew.bin 19937 bytes
d:\docume~1\bill\LOCALS~1\Temp\History
d:\docume~1\bill\LOCALS~1\Temp\History\History.IE5
d:\docume~1\bill\LOCALS~1\Temp\History\History.IE5\desktop.ini 145 bytes
d:\docume~1\bill\LOCALS~1\Temp\History\History.IE5\index.dat 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\hsperfdata_bill
d:\docume~1\bill\LOCALS~1\Temp\Hungarian.bin 26549 bytes
d:\docume~1\bill\LOCALS~1\Temp\4410798833618140.tmp 106825 bytes
d:\docume~1\bill\LOCALS~1\Temp\44107988385977453.tmp 106825 bytes
d:\docume~1\bill\LOCALS~1\Temp\4410798849405687.tmp 106693 bytes
d:\docume~1\bill\LOCALS~1\Temp\4410798858648765.tmp 86069 bytes
d:\docume~1\bill\LOCALS~1\Temp\44107988783250.tmp 106825 bytes
d:\docume~1\bill\LOCALS~1\Temp\4410798879729312.tmp 86069 bytes
d:\docume~1\bill\LOCALS~1\Temp\4410798888349640.tmp 86069 bytes
d:\docume~1\bill\LOCALS~1\Temp\460194082174771640.tmp 27437 bytes
d:\docume~1\bill\LOCALS~1\Temp\46019408230956812.tmp 27434 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFF9D.tmp 0 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFFB2.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFFB7B.tmp 0 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFFBA9.tmp 229376 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFFBD.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFFCA.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFFDEE.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFFDFF.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFFE6C.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFFE6E.tmp 0 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFFE77.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFFEA5.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFFEBB.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\4410798830961468.tmp 86069 bytes
d:\docume~1\bill\LOCALS~1\Temp\btwinlog.txt 16513 bytes
d:\docume~1\bill\LOCALS~1\Temp\dd_vcredistUI39EE.txt 11422 bytes
d:\docume~1\bill\LOCALS~1\Temp\GLCB6.tmp 2194 bytes
d:\docume~1\bill\LOCALS~1\Temp\ICD1.tmp
d:\docume~1\bill\LOCALS~1\Temp\ICD1.tmp\getPlusPlus_Adobe.exe 280400 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\ICD1.tmp\getPlusPlus_Adobe_reg.exe 40344 bytes executable
D:\Dcatchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
d:\docume~1\bill\LOCALS~1\Temp\ICD1.tmp\gp.inf 297 bytes
d:\docume~1\bill\LOCALS~1\Temp\ICD1.tmp\gp.ocx 51568 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\java_install_sp.log 1221 bytes
d:\docume~1\bill\LOCALS~1\Temp\MPC9.tmp 314 bytes
d:\docume~1\bill\LOCALS~1\Temp\Norwegian.bin 22406 bytes
d:\docume~1\bill\LOCALS~1\Temp\SetAA2.tmp 121168 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\tmpA97.tmp 782336 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\{855FAB0A-EB06-47F6-925D-5B0E4A78256E}
d:\docume~1\bill\LOCALS~1\Temp\{855FAB0A-EB06-47F6-925D-5B0E4A78256E}\setup.exe 393216 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\~DF27B1.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF3832.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF508B.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DF7E5C.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFA9E.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFBC8B.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFD65C.tmp 16384 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFE99A.tmp 32768 bytes
d:\docume~1\bill\LOCALS~1\Temp\~DFF84.tmp 512 bytes
d:\docume~1\bill\LOCALS~1\Temp\415303181977562218.tmp 4534 bytes
d:\docume~1\bill\LOCALS~1\Temp\4153031819778107843.tmp 4725 bytes
d:\docume~1\bill\LOCALS~1\Temp\4153031819785500.tmp 4723 bytes
d:\docume~1\bill\LOCALS~1\Temp\4153031819793781.tmp 4726 bytes
d:\docume~1\bill\LOCALS~1\Temp\415303181979497671.tmp 4724 bytes
d:\docume~1\bill\LOCALS~1\Temp\4153031819795994093.tmp 4725 bytes
d:\docume~1\bill\LOCALS~1\Temp\415303181979769812.tmp 4533 bytes
d:\docume~1\bill\LOCALS~1\Temp\415303181980327484.tmp 4724 bytes
d:\docume~1\bill\LOCALS~1\Temp\4153031819810455734.tmp 4725 bytes
d:\docume~1\bill\LOCALS~1\Temp\415303181981128953.tmp 4724 bytes
d:\docume~1\bill\LOCALS~1\Temp\415303181981935546.tmp 4726 bytes
d:\docume~1\bill\LOCALS~1\Temp\415303181982601812.tmp 4726 bytes
d:\docume~1\bill\LOCALS~1\Temp\415303181982609625.tmp 4724 bytes
d:\docume~1\bill\LOCALS~1\Temp\415303181983555078.tmp 4724 bytes
d:\docume~1\bill\LOCALS~1\Temp\415303181983974390.tmp 4739 bytes
d:\docume~1\bill\LOCALS~1\Temp\415303181984256062.tmp 4726 bytes
d:\docume~1\bill\LOCALS~1\Temp\4153031819852203.tmp 4724 bytes
d:\docume~1\bill\LOCALS~1\Temp\415303181985365859.tmp 4740 bytes
d:\docume~1\bill\LOCALS~1\Temp\415303181985747421.tmp 4606 bytes
d:\docume~1\bill\LOCALS~1\Temp\415303181985968421.tmp 4739 bytes
d:\docume~1\bill\LOCALS~1\Temp\415303181986623015.tmp 4738 bytes
d:\docume~1\bill\LOCALS~1\Temp\415303181986646937.tmp 4739 bytes
d:\docume~1\bill\LOCALS~1\Temp\4153031819866759062.tmp 4725 bytes
d:\docume~1\bill\LOCALS~1\Temp\415303181986727015.tmp 4723 bytes
d:\docume~1\bill\LOCALS~1\Temp\415303181986796921.tmp 4725 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0402.ini 24550 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0403.ini 25386 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0404.ini 10688 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0405.ini 23310 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0406.ini 23896 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0407.ini 25860 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0408.ini 27384 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0409.ini 22492 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x040a.ini 25140 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x040b.ini 22724 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x040c.ini 26270 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x040d.ini 18688 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x040e.ini 23294 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0410.ini 25188 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0411.ini 14884 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0412.ini 14108 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0413.ini 25000 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0414.ini 23990 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0415.ini 24330 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0418.ini 24806 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0419.ini 23432 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x041a.ini 23614 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x041b.ini 23534 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x041d.ini 23354 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x041e.ini 22486 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x041f.ini 23034 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0421.ini 24738 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0422.ini 22492 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0424.ini 23950 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0426.ini 22492 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0427.ini 22492 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x042a.ini 22492 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0804.ini 10760 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0809.ini 22492 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x080a.ini 22492 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0816.ini 24772 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0c01.ini 22492 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x0c0a.ini 22492 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x100a.ini 22492 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x140a.ini 22492 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x180a.ini 22492 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x1c0a.ini 22492 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x200a.ini 22492 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x240a.ini 22492 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x280a.ini 22492 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x2c0a.ini 22492 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x300a.ini 22492 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x340a.ini 22492 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x380a.ini 22492 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\0x3c0a.ini 22492 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\10250.mst 88576 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\1026.mst 132608 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\1027.mst 83968 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\1028.mst 71680 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\1029.mst 83456 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\1030.mst 80384 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\1031.mst 87552 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\1033.mst 4096 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\1034.mst 88064 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\1035.mst 80384 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\1036.mst 90112 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\1037.mst 96256 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\1038.mst 88576 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\1040.mst 88064 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\1041.mst 103936 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\1042.mst 92160 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\1043.mst 82944 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\1044.mst 77312 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\1045.mst 84480 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\1046.mst 82944 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\1048.mst 86528 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\1049.mst 125440 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\1050.mst 80896 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\1051.mst 86016 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\1053.mst 78848 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\1054.mst 158720 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\1057.mst 77312 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\1058.mst 121344 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\1060.mst 79872 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\1062.mst 80896 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\1063.mst 80896 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\1066.mst 92672 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\11274.mst 88576 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\12298.mst 88576 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\13322.mst 88576 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\14346.mst 88576 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\15370.mst 88576 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\2052.mst 71680 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\2057.mst 25600 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\2058.mst 88576 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\2070.mst 86016 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\3073.mst 105472 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\3082.mst 88576 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\3098.mst 125952 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\4106.mst 88576 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\5130.mst 88576 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\6154.mst 88576 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\7178.mst 88576 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\8202.mst 88576 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\9226.mst 88576 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\Google Earth.msi 1531392 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\GoogleEarth.exe 1207296 bytes executable
d:\docume~1\bill\LOCALS~1\Temp\._msige60\LocalAppData
d:\docume~1\bill\LOCALS~1\Temp\._msige60\LocalAppData\Google
d:\docume~1\bill\LOCALS~1\Temp\._msige60\LocalAppData\Google\Custom Buttons
d:\docume~1\bill\LOCALS~1\Temp\._msige60\LocalAppData\Google\Custom Buttons\toolbar.google.com_MXE8GT6B9RBHXCGLZ06L.xml 1946 bytes
d:\docume~1\bill\LOCALS~1\Temp\._msige60\program files
d:\docume~1\bill\LOCALS~1\Temp\._msige60\program files\Google
d:\docume~1\bill\LOCALS~1\Temp\._msige60\program files\Google\Google Earth
d:\docume~1\bill\LOCALS~1\Temp\._msige60\program files\Google\Google Earth\client
d:\docume~1\bill\LOCALS~1\Temp\._msige60\program files\Google\Google Earth\client\drivers.ini 75289 bytes