API tools faq
paste
Advertisement
MalwareMustDie

#MalwareMustDie - Pony case - Fareit Slupred Software List

MalwareMustDie
Jun 21st, 2013
1,518
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 25.40 KB | None | 0 0
raw download clone embed print report
  1. // #MalwareMustDie!
  2. // Software list slupred by Fareit during the run to grab its credentials..
  3. // (the PoC of decrypt bins list)
  4.  
  5. "14:59:34.0801773","C:\Documents and Settings\USERNAME\wcx_ftp.ini"
  6. "14:59:34.0809607","C:\Documents and Settings\USERNAME\Application Data\GHISLER\wcx_ftp.ini"
  7. "14:59:34.0815479","C:\Documents and Settings\All Users\Application Data\GHISLER\wcx_ftp.ini"
  8. "14:59:34.0823226","C:\Documents and Settings\USERNAME\Local Settings\Application Data\GHISLER\wcx_ftp.ini"
  9. "14:59:34.1031241","C:\Documents and Settings\USERNAME\Application Data\Ipswitch"
  10. "14:59:34.1032627","C:\Documents and Settings\All Users\Application Data\Ipswitch"
  11. "14:59:34.1034423","C:\Documents and Settings\USERNAME\Local Settings\Application Data\Ipswitch"
  12. "14:59:34.1250107","C:\Documents and Settings\USERNAME\Application Data\GlobalSCAPE\CuteFTP\sm.dat"
  13. "14:59:34.1250814","C:\Documents and Settings\USERNAME\Application Data\GlobalSCAPE\CuteFTP\"
  14. "14:59:34.1253484","C:\Documents and Settings\USERNAME\Application Data\GlobalSCAPE\CuteFTP Pro\sm.dat"
  15. "14:59:34.1254166","C:\Documents and Settings\USERNAME\Application Data\GlobalSCAPE\CuteFTP Pro\"
  16. "14:59:34.1254923","C:\Documents and Settings\USERNAME\Application Data\GlobalSCAPE\CuteFTP Lite\sm.dat"
  17. "14:59:34.1255593","C:\Documents and Settings\USERNAME\Application Data\GlobalSCAPE\CuteFTP Lite\"
  18. "14:59:34.1256331","C:\Documents and Settings\USERNAME\Application Data\CuteFTP\sm.dat"
  19. "14:59:34.1258030","C:\Documents and Settings\USERNAME\Application Data\CuteFTP"
  20. "14:59:34.1258893","C:\Documents and Settings\All Users\Application Data\GlobalSCAPE\CuteFTP\sm.dat"
  21. "14:59:34.1259566","C:\Documents and Settings\All Users\Application Data\GlobalSCAPE\CuteFTP\"
  22. "14:59:34.1260315","C:\Documents and Settings\All Users\Application Data\GlobalSCAPE\CuteFTP Pro\sm.dat"
  23. "14:59:34.1260977","C:\Documents and Settings\All Users\Application Data\GlobalSCAPE\CuteFTP Pro\"
  24. "14:59:34.1261731","C:\Documents and Settings\All Users\Application Data\GlobalSCAPE\CuteFTP Lite\sm.dat"
  25. "14:59:34.1262390","C:\Documents and Settings\All Users\Application Data\GlobalSCAPE\CuteFTP Lite\"
  26. "14:59:34.1263120","C:\Documents and Settings\All Users\Application Data\CuteFTP\sm.dat"
  27. "14:59:34.1264396","C:\Documents and Settings\All Users\Application Data\CuteFTP"
  28. "14:59:34.1265301","C:\Documents and Settings\USERNAME\Local Settings\Application Data\GlobalSCAPE\CuteFTP\sm.dat"
  29. "14:59:34.1266003","C:\Documents and Settings\USERNAME\Local Settings\Application Data\GlobalSCAPE\CuteFTP\"
  30. "14:59:34.1266793","C:\Documents and Settings\USERNAME\Local Settings\Application Data\GlobalSCAPE\CuteFTP Pro\sm.dat"
  31. "14:59:34.1267483","C:\Documents and Settings\USERNAME\Local Settings\Application Data\GlobalSCAPE\CuteFTP Pro\"
  32. "14:59:34.1268265","C:\Documents and Settings\USERNAME\Local Settings\Application Data\GlobalSCAPE\CuteFTP Lite\sm.dat"
  33. "14:59:34.1268953","C:\Documents and Settings\USERNAME\Local Settings\Application Data\GlobalSCAPE\CuteFTP Lite\"
  34. "14:59:34.1269715","C:\Documents and Settings\USERNAME\Local Settings\Application Data\CuteFTP\sm.dat"
  35. "14:59:34.1271394","C:\Documents and Settings\USERNAME\Local Settings\Application Data\CuteFTP"
  36. "14:59:34.1317685","C:\Documents and Settings\USERNAME\Application Data\FlashFXP\3\Sites.dat"
  37. "14:59:34.1318434","C:\Documents and Settings\USERNAME\Application Data\FlashFXP\4\Sites.dat"
  38. "14:59:34.1320130","C:\Documents and Settings\USERNAME\Application Data\FlashFXP\3\Quick.dat"
  39. "14:59:34.1320862","C:\Documents and Settings\USERNAME\Application Data\FlashFXP\4\Quick.dat"
  40. "14:59:34.1321602","C:\Documents and Settings\USERNAME\Application Data\FlashFXP\3\History.dat"
  41. "14:59:34.1322328","C:\Documents and Settings\USERNAME\Application Data\FlashFXP\4\History.dat"
  42. "14:59:34.1323133","C:\Documents and Settings\All Users\Application Data\FlashFXP\3\Sites.dat"
  43. "14:59:34.1324675","C:\Documents and Settings\All Users\Application Data\FlashFXP\4\Sites.dat"
  44. "14:59:34.1325407","C:\Documents and Settings\All Users\Application Data\FlashFXP\3\Quick.dat"
  45. "14:59:34.1326130","C:\Documents and Settings\All Users\Application Data\FlashFXP\4\Quick.dat"
  46. "14:59:34.1326857","C:\Documents and Settings\All Users\Application Data\FlashFXP\3\History.dat"
  47. "14:59:34.1327583","C:\Documents and Settings\All Users\Application Data\FlashFXP\4\History.dat"
  48. "14:59:34.1328611","C:\Documents and Settings\USERNAME\Local Settings\Application Data\FlashFXP\3\Sites.dat"
  49. "14:59:34.1329435","C:\Documents and Settings\USERNAME\Local Settings\Application Data\FlashFXP\4\Sites.dat"
  50. "14:59:34.1330198","C:\Documents and Settings\USERNAME\Local Settings\Application Data\FlashFXP\3\Quick.dat"
  51. "14:59:34.1330955","C:\Documents and Settings\USERNAME\Local Settings\Application Data\FlashFXP\4\Quick.dat"
  52. "14:59:34.1331715","C:\Documents and Settings\USERNAME\Local Settings\Application Data\FlashFXP\3\History.dat"
  53. "14:59:34.1332475","C:\Documents and Settings\USERNAME\Local Settings\Application Data\FlashFXP\4\History.dat"
  54. "14:59:34.1341797","C:\Documents and Settings\USERNAME\Application Data\FileZilla\sitemanager.xml"
  55. "14:59:34.1342546","C:\Documents and Settings\USERNAME\Application Data\FileZilla\recentservers.xml"
  56. "14:59:34.1343320","C:\Documents and Settings\USERNAME\Application Data\FileZilla\filezilla.xml"
  57. "14:59:34.1344133","C:\Documents and Settings\All Users\Application Data\FileZilla\sitemanager.xml"
  58. "14:59:34.1344865","C:\Documents and Settings\All Users\Application Data\FileZilla\recentservers.xml"
  59. "14:59:34.1345585","C:\Documents and Settings\All Users\Application Data\FileZilla\filezilla.xml"
  60. "14:59:34.1346429","C:\Documents and Settings\USERNAME\Local Settings\Application Data\FileZilla\sitemanager.xml"
  61. "14:59:34.1347197","C:\Documents and Settings\USERNAME\Local Settings\Application Data\FileZilla\recentservers.xml"
  62. "14:59:34.1347952","C:\Documents and Settings\USERNAME\Local Settings\Application Data\FileZilla\filezilla.xml"
  63. "14:59:34.1359327","C:\Documents and Settings\USERNAME\Local Settings\Application Data\BulletProof Software"
  64. "14:59:34.1360707","C:\Documents and Settings\USERNAME\Local Settings\Application Data\BulletProof Software"
  65. "14:59:34.1362121","C:\Documents and Settings\USERNAME\Application Data\BulletProof Software"
  66. "14:59:34.1363417","C:\Documents and Settings\USERNAME\Application Data\BulletProof Software"
  67. "14:59:34.1364426","C:\Documents and Settings\All Users\Application Data\BulletProof Software"
  68. "14:59:34.1365342","C:\Documents and Settings\All Users\Application Data\BulletProof Software"
  69. "14:59:34.1367203","C:\Documents and Settings\USERNAME\Application Data\SmartFTP"
  70. "14:59:34.1391513","C:\Documents and Settings\USERNAME\Application Data\SmartFTP"
  71. "14:59:34.1393178","C:\Documents and Settings\USERNAME\Application Data\SmartFTP"
  72. "14:59:34.1394555","C:\Documents and Settings\All Users\Application Data\SmartFTP"
  73. "14:59:34.1395835","C:\Documents and Settings\All Users\Application Data\SmartFTP"
  74. "14:59:34.1397109","C:\Documents and Settings\All Users\Application Data\SmartFTP"
  75. "14:59:34.1398883","C:\Documents and Settings\USERNAME\Local Settings\Application Data\SmartFTP"
  76. "14:59:34.1400564","C:\Documents and Settings\USERNAME\Local Settings\Application Data\SmartFTP"
  77. "14:59:34.1402249","C:\Documents and Settings\USERNAME\Local Settings\Application Data\SmartFTP"
  78. "14:59:34.1404987","C:\Documents and Settings\USERNAME\Application Data\TurboFTP"
  79. "14:59:34.1406361","C:\Documents and Settings\All Users\Application Data\TurboFTP"
  80. "14:59:34.1408135","C:\Documents and Settings\USERNAME\Local Settings\Application Data\TurboFTP"
  81. "14:59:34.1410624","C:\Documents and Settings\USERNAME\Application Data\TurboFTP"
  82. "14:59:34.1411990","C:\Documents and Settings\All Users\Application Data\TurboFTP"
  83. "14:59:34.1413762","C:\Documents and Settings\USERNAME\Local Settings\Application Data\TurboFTP"
  84. "14:59:34.1416684","C:\Documents and Settings\USERNAME\Application Data\FTP Explorer"
  85. "14:59:34.1417687","C:\Documents and Settings\All Users\Application Data\FTP Explorer"
  86. "14:59:34.1419092","C:\Documents and Settings\USERNAME\Local Settings\Application Data\FTP Explorer"
  87. "14:59:34.1421609","C:\Documents and Settings\USERNAME\Application Data\Frigate3"
  88. "14:59:34.1422975","C:\Documents and Settings\All Users\Application Data\Frigate3"
  89. "14:59:34.1424749","C:\Documents and Settings\USERNAME\Local Settings\Application Data\Frigate3"
  90. "14:59:34.1425646","C:\Documents and Settings\USERNAME\Application Data\VanDyke\Config\Sessions\"
  91. "14:59:34.1426403","C:\Documents and Settings\All Users\Application Data\VanDyke\Config\Sessions\"
  92. "14:59:34.1427180","C:\Documents and Settings\USERNAME\Local Settings\Application Data\VanDyke\Config\Sessions\"
  93. "14:59:34.1432194","C:\Documents and Settings\USERNAME\Application Data\FTPRush"
  94. "14:59:34.1433569","C:\Documents and Settings\All Users\Application Data\FTPRush"
  95. "14:59:34.1435351","C:\Documents and Settings\USERNAME\Local Settings\Application Data\FTPRush"
  96. "14:59:34.1437460","C:\Documents and Settings\USERNAME\Application Data\BitKinex"
  97.  
  98. #malwareMustDie!
  99. "14:59:34.1438879","C:\Documents and Settings\All Users\Application Data\BitKinex"
  100. "14:59:34.1440656","C:\Documents and Settings\USERNAME\Local Settings\Application Data\BitKinex"
  101. "14:59:34.1442103","C:\Documents and Settings\USERNAME\Application Data\ExpanDrive\drives.js"
  102. "14:59:34.1442877","C:\Documents and Settings\USERNAME\Local Settings\Application Data\ExpanDrive\drives.js"
  103. "14:59:34.1443615","C:\Documents and Settings\All Users\Application Data\ExpanDrive\drives.js"
  104. "14:59:34.1445992","C:\Documents and Settings\USERNAME\Application Data\GPSoftware\Directory Opus\"
  105. "14:59:34.1446679","C:\Documents and Settings\USERNAME\Application Data\GPSoftware\Directory Opus\"
  106. "14:59:34.1447350","C:\Documents and Settings\USERNAME\Application Data\GPSoftware\Directory Opus\"
  107. "14:59:34.1448098","C:\Documents and Settings\All Users\Application Data\GPSoftware\Directory Opus\"
  108. "14:59:34.1448766","C:\Documents and Settings\All Users\Application Data\GPSoftware\Directory Opus\"
  109. "14:59:34.1449431","C:\Documents and Settings\All Users\Application Data\GPSoftware\Directory Opus\"
  110. "14:59:34.1450210","C:\Documents and Settings\USERNAME\Local Settings\Application Data\GPSoftware\Directory Opus\"
  111. "14:59:34.1450909","C:\Documents and Settings\USERNAME\Local Settings\Application Data\GPSoftware\Directory Opus\"
  112. "14:59:34.1451602","C:\Documents and Settings\USERNAME\Local Settings\Application Data\GPSoftware\Directory Opus\"
  113. "14:59:34.1453127","C:\Documents and Settings\USERNAME\Application Data\SharedSettings.ccs"
  114. "14:59:34.1454532","C:\Documents and Settings\USERNAME\Application Data\SharedSettings.sqlite"
  115. "14:59:34.1455884","C:\Documents and Settings\USERNAME\Application Data\SharedSettings_1_0_5.ccs"
  116. "14:59:34.1457236","C:\Documents and Settings\USERNAME\Application Data\SharedSettings_1_0_5.sqlite"
  117. "14:59:34.1458276","C:\Documents and Settings\All Users\Application Data\SharedSettings.ccs"
  118. "14:59:34.1459237","C:\Documents and Settings\All Users\Application Data\SharedSettings.sqlite"
  119. "14:59:34.1460200","C:\Documents and Settings\All Users\Application Data\SharedSettings_1_0_5.ccs"
  120. "14:59:34.1461170","C:\Documents and Settings\All Users\Application Data\SharedSettings_1_0_5.sqlite"
  121. "14:59:34.1462623","C:\Documents and Settings\USERNAME\Local Settings\Application Data\SharedSettings.ccs"
  122. "14:59:34.1464003","C:\Documents and Settings\USERNAME\Local Settings\Application Data\SharedSettings.sqlite"
  123. "14:59:34.1465380","C:\Documents and Settings\USERNAME\Local Settings\Application Data\SharedSettings_1_0_5.ccs"
  124. "14:59:34.1466760","C:\Documents and Settings\USERNAME\Local Settings\Application Data\SharedSettings_1_0_5.sqlite"
  125. "14:59:34.1467646","C:\Documents and Settings\USERNAME\Application Data\CoffeeCup Software\SharedSettings.ccs"
  126. "14:59:34.1468405","C:\Documents and Settings\USERNAME\Application Data\CoffeeCup Software\SharedSettings.sqlite"
  127. "14:59:34.1469285","C:\Documents and Settings\USERNAME\Application Data\CoffeeCup Software\SharedSettings_1_0_5.ccs"
  128. "14:59:34.1470051","C:\Documents and Settings\USERNAME\Application Data\CoffeeCup Software\SharedSettings_1_0_5.sqlite"
  129. "14:59:34.1476661","C:\Documents and Settings\All Users\Application Data\CoffeeCup Software\SharedSettings.ccs"
  130. "14:59:34.1477435","C:\Documents and Settings\All Users\Application Data\CoffeeCup Software\SharedSettings.sqlite"
  131. "14:59:34.1478203","C:\Documents and Settings\All Users\Application Data\CoffeeCup Software\SharedSettings_1_0_5.ccs"
  132. "14:59:34.1478965","C:\Documents and Settings\All Users\Application Data\CoffeeCup Software\SharedSettings_1_0_5.sqlite"
  133. "14:59:34.1479831","C:\Documents and Settings\USERNAME\Local Settings\Application Data\CoffeeCup Software\SharedSettings.ccs"
  134. "14:59:34.1480630","C:\Documents and Settings\USERNAME\Local Settings\Application Data\CoffeeCup Software\SharedSettings.sqlite"
  135. "14:59:34.1481790","C:\Documents and Settings\USERNAME\Local Settings\Application Data\CoffeeCup Software\SharedSettings_1_0_5.ccs"
  136. "14:59:34.1482645","C:\Documents and Settings\USERNAME\Local Settings\Application Data\CoffeeCup Software\SharedSettings_1_0_5.sqlite"
  137. "14:59:34.1487020","C:\Documents and Settings\USERNAME\Application Data\LeapWare\LeapFTP\"
  138. "14:59:34.1487696","C:\Documents and Settings\USERNAME\Application Data\LeapWare\LeapFTP\"
  139. "14:59:34.1488444","C:\Documents and Settings\All Users\Application Data\LeapWare\LeapFTP\"
  140. "14:59:34.1489106","C:\Documents and Settings\All Users\Application Data\LeapWare\LeapFTP\"
  141. "14:59:34.1489877","C:\Documents and Settings\USERNAME\Local Settings\Application Data\LeapWare\LeapFTP\"
  142. "14:59:34.1490567","C:\Documents and Settings\USERNAME\Local Settings\Application Data\LeapWare\LeapFTP\"
  143. "14:59:34.1495658","C:\Documents and Settings\USERNAME\Application Data\NetDrive"
  144. "14:59:34.1497038","C:\Documents and Settings\All Users\Application Data\NetDrive"
  145. "14:59:34.1498823","C:\Documents and Settings\USERNAME\Local Settings\Application Data\NetDrive"
  146. "14:59:34.1511676","C:\Documents and Settings\USERNAME\Application Data"
  147. "14:59:34.1515372","C:\Documents and Settings\All Users\Application Data"
  148. "14:59:34.1542071","C:\Documents and Settings\USERNAME\Local Settings\Application Data"
  149. "14:59:34.1547036","C:\Documents and Settings\USERNAME\Application Data\AceBIT"
  150. "14:59:34.1548435","C:\Documents and Settings\All Users\Application Data\AceBIT"
  151. "14:59:34.1550215","C:\Documents and Settings\USERNAME\Local Settings\Application Data\AceBIT"
  152. "14:59:34.1552603","C:\Documents and Settings\USERNAME\Application Data\RhinoSoft.com"
  153. "14:59:34.1553897","C:\Documents and Settings\USERNAME\Application Data\RhinoSoft.com"
  154. "14:59:34.1554889","C:\Documents and Settings\All Users\Application Data\RhinoSoft.com"
  155. "14:59:34.1555782","C:\Documents and Settings\All Users\Application Data\RhinoSoft.com"
  156. "14:59:34.1557179","C:\Documents and Settings\USERNAME\Local Settings\Application Data\RhinoSoft.com"
  157. "14:59:34.1558484","C:\Documents and Settings\USERNAME\Local Settings\Application Data\RhinoSoft.com"
  158. "14:59:34.1560065","C:\Documents and Settings\USERNAME\Application Data\Mozilla\Firefox\"
  159. "14:59:34.1583157","C:\Documents and Settings\USERNAME\Application Data\FTPGetter"
  160. "14:59:34.1584188","C:\Documents and Settings\All Users\Application Data\FTPGetter"
  161. "14:59:34.1585602","C:\Documents and Settings\USERNAME\Local Settings\Application Data\FTPGetter"
  162. "14:59:34.1586501","C:\Documents and Settings\USERNAME\Application Data\Estsoft\ALFTP\"
  163. "14:59:34.1587250","C:\Documents and Settings\All Users\Application Data\Estsoft\ALFTP\"
  164. "14:59:34.1588018","C:\Documents and Settings\USERNAME\Local Settings\Application Data\Estsoft\ALFTP\"
  165. "14:59:34.1588770","C:\Documents and Settings\USERNAME\Application Data\Estsoft\ALFTP\"
  166. "14:59:34.1589502","C:\Documents and Settings\All Users\Application Data\Estsoft\ALFTP\"
  167. "14:59:34.1590262","C:\Documents and Settings\USERNAME\Local Settings\Application Data\Estsoft\ALFTP\"
  168. "14:59:35.2390777","C:\Documents and Settings\USERNAME\Application Data\Google\Chrome\"
  169. "14:59:35.2392129","C:\Documents and Settings\USERNAME\Application Data\Google\Chrome\"
  170. "14:59:35.2393473","C:\Documents and Settings\USERNAME\Local Settings\Application Data\Google\Chrome\"
  171. "14:59:35.2394794","C:\Documents and Settings\USERNAME\Local Settings\Application Data\Google\Chrome\"
  172. "14:59:35.2396074","C:\Documents and Settings\All Users\Application Data\Google\Chrome\"
  173. "14:59:35.2397303","C:\Documents and Settings\All Users\Application Data\Google\Chrome\"
  174. "14:59:35.2400543","C:\Documents and Settings\USERNAME\Application Data\Chromium"
  175. "14:59:35.2403449","C:\Documents and Settings\USERNAME\Application Data\Chromium"
  176. "14:59:35.2407522","C:\Documents and Settings\USERNAME\Local Settings\Application Data\Chromium"
  177. "14:59:35.2411464","C:\Documents and Settings\USERNAME\Local Settings\Application Data\Chromium"
  178. "14:59:35.2413752","C:\Documents and Settings\All Users\Application Data\Chromium"
  179. "14:59:35.2415981","C:\Documents and Settings\All Users\Application Data\Chromium"
  180. "14:59:35.2418440","C:\Documents and Settings\USERNAME\Application Data\ChromePlus"
  181. "14:59:35.2420711","C:\Documents and Settings\USERNAME\Application Data\ChromePlus"
  182. "14:59:35.2423016","C:\Documents and Settings\USERNAME\Local Settings\Application Data\ChromePlus"
  183. "14:59:35.2425334","C:\Documents and Settings\USERNAME\Local Settings\Application Data\ChromePlus"
  184. "14:59:35.2426991","C:\Documents and Settings\All Users\Application Data\ChromePlus"
  185. "14:59:35.2428617","C:\Documents and Settings\All Users\Application Data\ChromePlus"
  186. "14:59:35.2432408","C:\Documents and Settings\USERNAME\Application Data\Bromium"
  187. "14:59:35.2435249","C:\Documents and Settings\USERNAME\Application Data\Bromium"
  188. "14:59:35.2438152","C:\Documents and Settings\USERNAME\Local Settings\Application Data\Bromium"
  189. "14:59:35.2441054","C:\Documents and Settings\USERNAME\Local Settings\Application Data\Bromium"
  190. "14:59:35.2443300","C:\Documents and Settings\All Users\Application Data\Bromium"
  191. "14:59:35.2445530","C:\Documents and Settings\All Users\Application Data\Bromium"
  192. "14:59:35.2448541","C:\Documents and Settings\USERNAME\Application Data\Nichrome"
  193. "14:59:35.2451793","C:\Documents and Settings\USERNAME\Application Data\Nichrome"
  194. "14:59:35.2454698","C:\Documents and Settings\USERNAME\Local Settings\Application Data\Nichrome"
  195. "14:59:35.2457679","C:\Documents and Settings\USERNAME\Local Settings\Application Data\Nichrome"
  196. "14:59:35.2459939","C:\Documents and Settings\All Users\Application Data\Nichrome"
  197. "14:59:35.2462174","C:\Documents and Settings\All Users\Application Data\Nichrome"
  198. "14:59:35.2465200","C:\Documents and Settings\USERNAME\Application Data\Comodo"
  199. "14:59:35.2510443","C:\Documents and Settings\USERNAME\Application Data\Comodo"
  200. "14:59:35.2513401","C:\Documents and Settings\USERNAME\Local Settings\Application Data\Comodo"
  201. "14:59:35.2516332","C:\Documents and Settings\USERNAME\Local Settings\Application Data\Comodo"
  202. "14:59:35.2518595","C:\Documents and Settings\All Users\Application Data\Comodo"
  203. "14:59:35.2520816","C:\Documents and Settings\All Users\Application Data\Comodo"
  204. "14:59:35.2523864","C:\Documents and Settings\USERNAME\Application Data\RockMelt"
  205. "14:59:35.2526710","C:\Documents and Settings\USERNAME\Application Data\RockMelt"
  206. "14:59:35.2529624","C:\Documents and Settings\USERNAME\Local Settings\Application Data\RockMelt"
  207. "14:59:35.2532546","C:\Documents and Settings\USERNAME\Local Settings\Application Data\RockMelt"
  208. "14:59:35.2534801","C:\Documents and Settings\All Users\Application Data\RockMelt"
  209. "14:59:35.2537033","C:\Documents and Settings\All Users\Application Data\RockMelt"
  210. "14:59:35.2570601","C:\Documents and Settings\USERNAME\Application Data\Sites"
  211. "14:59:35.2572870","C:\Documents and Settings\USERNAME\Application Data\Visicom Media"
  212. "14:59:35.2575119","C:\Documents and Settings\All Users\Application Data\Sites"
  213. "14:59:35.2576764","C:\Documents and Settings\All Users\Application Data\Visicom Media"
  214. "14:59:35.2579675","C:\Documents and Settings\USERNAME\Local Settings\Application Data\Sites"
  215. "14:59:35.2582053","C:\Documents and Settings\USERNAME\Local Settings\Application Data\Visicom Media"
  216. "14:59:35.2584508","C:\Documents and Settings\USERNAME\Application Data\Global Downloader"
  217. "14:59:35.2586168","C:\Documents and Settings\All Users\Application Data\Global Downloader"
  218. "14:59:35.2588472","C:\Documents and Settings\USERNAME\Local Settings\Application Data\Global Downloader"
  219. "14:59:35.2610883","C:\Documents and Settings\USERNAME\Application Data\BlazeFtp"
  220. "14:59:35.2613188","C:\Documents and Settings\All Users\Application Data\BlazeFtp"
  221. "14:59:35.2616118","C:\Documents and Settings\USERNAME\Local Settings\Application Data\BlazeFtp"
  222. "14:59:35.2639912","C:\Documents and Settings\All Users\Application Data\3D-FTP"
  223. "14:59:35.2641585","C:\Documents and Settings\All Users\Application Data\SiteDesigner"
  224. "14:59:35.2645265","C:\Documents and Settings\USERNAME\Application Data\NetSarang"
  225. "14:59:35.2646957","C:\Documents and Settings\All Users\Application Data\NetSarang"
  226. "14:59:35.2649287","C:\Documents and Settings\USERNAME\Local Settings\Application Data\NetSarang"
  227. "14:59:35.2676486","C:\Documents and Settings\USERNAME\My Documents\My Pictures"
  228. "14:59:35.2689181","C:\Documents and Settings\USERNAME\My Documents\My Music"
  229. "14:59:35.2813537","C:\Documents and Settings\USERNAME\My Documents\odbg110"
  230. "14:59:35.2939760","C:\Documents and Settings\USERNAME\My Documents\moonsols"
  231. "14:59:35.2948691","C:\Documents and Settings\USERNAME\My Documents\ProcessMonitor"
  232. "14:59:35.2978991","C:\Documents and Settings\USERNAME\My Documents"
  233. "14:59:35.3542233","C:\Documents and Settings\USERNAME\Application Data\Microsoft\SystemCertificates\My\Certificates"
  234. "14:59:35.3558976","C:\Documents and Settings\USERNAME\Application Data\Microsoft\SystemCertificates\My\CRLs"
  235. "14:59:35.3576076","C:\Documents and Settings\USERNAME\Application Data\Microsoft\SystemCertificates\My\CTLs"
  236. "14:59:35.3583577","C:\Documents and Settings\USERNAME\Application Data\Cyberduck"
  237. "14:59:35.3585356","C:\Documents and Settings\All Users\Application Data\Cyberduck"
  238. "14:59:35.3587731","C:\Documents and Settings\USERNAME\Local Settings\Application Data\Cyberduck"
  239. "14:59:35.3590047","C:\Documents and Settings\USERNAME\Application Data\Cyberduck"
  240. "14:59:35.3594589","C:\Documents and Settings\All Users\Application Data\Cyberduck"
  241. "14:59:35.3597081","C:\Documents and Settings\USERNAME\Local Settings\Application Data\Cyberduck"
  242. "14:59:35.3600498","C:\Documents and Settings\USERNAME\Application Data\Notepad++"
  243. "14:59:35.3602191","C:\Documents and Settings\All Users\Application Data\Notepad++"
  244. "14:59:35.3604521","C:\Documents and Settings\USERNAME\Local Settings\Application Data\Notepad++"
  245. "14:59:35.3614335","C:\Documents and Settings\USERNAME\Application Data\FTPInfo"
  246. "14:59:35.3616625","C:\Documents and Settings\All Users\Application Data\FTPInfo"
  247. "14:59:35.3619550","C:\Documents and Settings\USERNAME\Local Settings\Application Data\FTPInfo"
  248. "14:59:35.3631619","C:\Documents and Settings\USERNAME\Application Data\MapleStudio\ChromePlus\"
  249. "14:59:35.3632929","C:\Documents and Settings\USERNAME\Application Data\MapleStudio\ChromePlus\"
  250. "14:59:35.3634278","C:\Documents and Settings\USERNAME\Local Settings\Application Data\MapleStudio\ChromePlus\"
  251. "14:59:35.3635611","C:\Documents and Settings\USERNAME\Local Settings\Application Data\MapleStudio\ChromePlus\"
  252. "14:59:35.3636891","C:\Documents and Settings\All Users\Application Data\MapleStudio\ChromePlus\"
  253. "14:59:35.3638145","C:\Documents and Settings\All Users\Application Data\MapleStudio\ChromePlus\"
  254. "14:59:35.3642483","C:\Documents and Settings\USERNAME\Application Data\Yandex"
  255. "14:59:35.3645350","C:\Documents and Settings\USERNAME\Application Data\Yandex"
  256. "14:59:35.3648261","C:\Documents and Settings\USERNAME\Local Settings\Application Data\Yandex"
  257. "14:59:35.3651177","C:\Documents and Settings\USERNAME\Local Settings\Application Data\Yandex"
  258. "14:59:35.3653429","C:\Documents and Settings\All Users\Application Data\Yandex"
  259. "14:59:35.3655647","C:\Documents and Settings\All Users\Application Data\Yandex"
  260. "14:59:35.4332577","C:\Documents and Settings\USERNAME\Application Data\INSoftware\NovaFTP\"
  261. "14:59:35.4333940","C:\Documents and Settings\All Users\Application Data\INSoftware\NovaFTP\"
  262. "14:59:35.4368933","C:\Documents and Settings\USERNAME\Local Settings\Application Data\INSoftware\NovaFTP\"
  263. "14:59:35.4377823","C:\Documents and Settings\USERNAME\Application Data\Pocomail"
  264. "14:59:35.4380153","C:\Documents and Settings\All Users\Application Data\Pocomail"
  265. "14:59:35.4383170","C:\Documents and Settings\USERNAME\Local Settings\Application Data\Pocomail"
  266. "14:59:35.4387000","C:\Documents and Settings\USERNAME\Application Data\BatMail"
  267. "14:59:35.4389268","C:\Documents and Settings\All Users\Application Data\BatMail"
  268. "14:59:35.4392185","C:\Documents and Settings\USERNAME\Local Settings\Application Data\BatMail"
  269. "14:59:35.4395040","C:\Documents and Settings\USERNAME\Application Data\BatMail"
  270. "14:59:35.4397286","C:\Documents and Settings\All Users\Application Data\BatMail"
  271. "14:59:35.4400189","C:\Documents and Settings\USERNAME\Local Settings\Application Data\BatMail"
  272. "14:59:35.4407103","C:\Documents and Settings\USERNAME\Application Data\The Bat!"
  273. "14:59:35.4409394","C:\Documents and Settings\All Users\Application Data\The Bat!"
  274. "14:59:35.4412330","C:\Documents and Settings\USERNAME\Local Settings\Application Data\The Bat!"
  275. "14:59:35.4415202","C:\Documents and Settings\USERNAME\Application Data\The Bat!"
  276. "14:59:35.4417445","C:\Documents and Settings\All Users\Application Data\The Bat!"
  277. "14:59:35.4420345","C:\Documents and Settings\USERNAME\Local Settings\Application Data\The Bat!"
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!