0 1:08:00 AM Spambot Seek C:\WINDOWS\SYSTEM\USER.EXE SUCCESS Beginning Offset: 5715 / New offset: 5715 1 1:08:00 AM Spambot Read C:\WINDOWS\SYSTEM\USER.EXE SUCCESS Offset: 5715 Length: 8430 2 1:08:00 AM Spambot Seek C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Beginning Offset: 309760 / New offset: 309760 3 1:08:00 AM Spambot Read C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Offset: 309760 Length: 4096 4 1:08:00 AM Spambot Seek C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Beginning Offset: 313856 / New offset: 313856 5 1:08:00 AM Spambot Read C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Offset: 313856 Length: 3072 6 1:08:00 AM Spambot Seek C:\WINDOWS\SYSTEM\SHELL32.DLL SUCCESS Beginning Offset: 416768 / New offset: 416768 7 1:08:00 AM Spambot Read C:\WINDOWS\SYSTEM\SHELL32.DLL SUCCESS Offset: 416768 Length: 1536 8 1:08:00 AM Spambot Seek C:\WINDOWS\SYSBCKUP\VER.DLL SUCCESS Beginning Offset: 721 / New offset: 721 9 1:08:00 AM Spambot Read C:\WINDOWS\SYSBCKUP\VER.DLL SUCCESS Offset: 721 Length: 256 10 1:08:00 AM Spambot Seek C:\WINDOWS\SYSBCKUP\VER.DLL SUCCESS Beginning Offset: 721 / New offset: 721 11 1:08:00 AM Spambot Read C:\WINDOWS\SYSBCKUP\VER.DLL SUCCESS Offset: 721 Length: 256 12 1:08:00 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 41984 / New offset: 41984 13 1:08:00 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 41984 Length: 4096 14 1:08:00 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 73216 / New offset: 73216 15 1:08:00 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 73216 Length: 4096 16 1:08:00 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 77312 / New offset: 77312 17 1:08:00 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 77312 Length: 4096 18 1:08:00 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 81408 / New offset: 81408 19 1:08:00 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 81408 Length: 4096 20 1:08:00 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 46080 / New offset: 46080 21 1:08:00 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 46080 Length: 4096 22 1:08:00 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 33792 / New offset: 33792 23 1:08:00 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 33792 Length: 4096 24 1:08:00 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 54272 / New offset: 54272 25 1:08:00 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 54272 Length: 4096 26 1:08:00 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 37888 / New offset: 37888 27 1:08:00 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 37888 Length: 4096 28 1:08:00 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 50176 / New offset: 50176 29 1:08:00 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 50176 Length: 4096 30 1:08:00 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 85504 / New offset: 85504 31 1:08:00 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 85504 Length: 4096 32 1:08:00 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 29696 / New offset: 29696 33 1:08:00 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 29696 Length: 4096 34 1:08:00 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 5120 / New offset: 5120 35 1:08:00 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 5120 Length: 4096 36 1:08:00 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 13312 / New offset: 13312 37 1:08:00 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 13312 Length: 4096 38 1:08:00 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 25600 / New offset: 25600 39 1:08:00 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 25600 Length: 4096 40 1:08:00 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 17408 / New offset: 17408 41 1:08:00 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 17408 Length: 4096 42 1:08:00 AM Spambot Attributes C:\WINDOWS\SYSTEM\TSAD.DLL NOTFOUND GetAttributes 43 1:08:00 AM Spambot Attributes C:\WINDOWS\TSAD.DLL SUCCESS GetAttributes 44 1:08:00 AM Spambot Directory C:\WINDOWS\TSAD.DLL SUCCESS QUERY 45 1:08:00 AM Spambot Open C:\WINDOWS\TSAD.DLL SUCCESS OPENEXISTING READONLY DENYWRITE 46 1:08:00 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 0 Length: 64 47 1:08:00 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 128 / New offset: 128 48 1:08:00 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 128 Length: 248 49 1:08:00 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 128 / New offset: 128 50 1:08:00 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 128 Length: 488 51 1:08:00 AM Spambot Directory C:\WINDOWS\TSAD.DLL SUCCESS QUERY 52 1:08:00 AM Spambot GetDiskInfo C: SUCCESS Free Space 53 1:08:00 AM Spambot Write C:\WINDOWS\WIN386.SWP SUCCESS Offset: 43515904 Length: 0 54 1:08:00 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 199168 / New offset: 199168 55 1:08:00 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 199168 Length: 2048 56 1:08:00 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 195072 / New offset: 195072 57 1:08:00 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 195072 Length: 4096 58 1:08:00 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 123904 / New offset: 123904 59 1:08:00 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 123904 Length: 4096 60 1:08:00 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 119808 / New offset: 119808 61 1:08:00 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 119808 Length: 4096 62 1:08:00 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 161280 / New offset: 161280 63 1:08:00 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 161280 Length: 4096 64 1:08:00 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 181248 / New offset: 181248 65 1:08:00 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 181248 Length: 4096 66 1:08:00 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 185344 / New offset: 185344 67 1:08:00 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 185344 Length: 4096 68 1:08:00 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 189440 / New offset: 189440 69 1:08:00 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 189440 Length: 4096 70 1:08:00 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 128000 / New offset: 128000 71 1:08:00 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 128000 Length: 4096 72 1:08:02 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 111616 / New offset: 111616 73 1:08:02 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 111616 Length: 4096 74 1:08:02 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 144384 / New offset: 144384 75 1:08:02 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 144384 Length: 4096 76 1:08:02 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 136192 / New offset: 136192 77 1:08:02 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 136192 Length: 4096 78 1:08:02 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 107520 / New offset: 107520 79 1:08:02 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 107520 Length: 4096 80 1:08:02 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 168960 / New offset: 168960 81 1:08:02 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 168960 Length: 4096 82 1:08:02 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 132096 / New offset: 132096 83 1:08:02 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 132096 Length: 4096 84 1:08:02 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 1024 / New offset: 1024 85 1:08:02 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 1024 Length: 4096 86 1:08:02 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 193536 / New offset: 193536 87 1:08:02 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 193536 Length: 1536 88 1:08:02 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 5120 / New offset: 5120 89 1:08:02 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 5120 Length: 4096 90 1:08:02 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 17408 / New offset: 17408 91 1:08:02 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 17408 Length: 4096 92 1:08:02 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 29696 / New offset: 29696 93 1:08:02 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 29696 Length: 4096 94 1:08:02 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 33792 / New offset: 33792 95 1:08:02 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 33792 Length: 4096 96 1:08:02 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 54272 / New offset: 54272 97 1:08:02 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 54272 Length: 4096 98 1:08:02 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 46080 / New offset: 46080 99 1:08:02 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 46080 Length: 4096 100 1:08:02 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 50176 / New offset: 50176 101 1:08:02 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 50176 Length: 4096 102 1:08:02 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 21504 / New offset: 21504 103 1:08:02 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 21504 Length: 4096 104 1:08:02 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 99328 / New offset: 99328 105 1:08:02 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 99328 Length: 4096 106 1:08:02 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 165376 / New offset: 165376 107 1:08:02 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 165376 Length: 3584 108 1:08:02 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 66560 / New offset: 66560 109 1:08:02 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 66560 Length: 3072 110 1:08:02 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 21504 / New offset: 21504 111 1:08:02 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 21504 Length: 4096 112 1:08:02 AM Spambot Attributes C:\PROGRAM FILES SUCCESS GetAttributes 113 1:08:02 AM Spambot Attributes C:\PROGRAM FILES\TIMESINK SUCCESS GetAttributes 114 1:08:02 AM Spambot Attributes C:\PROGRAM FILES\TIMESINK\ADGATEWAY SUCCESS GetAttributes 115 1:08:02 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 62464 / New offset: 62464 116 1:08:02 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 62464 Length: 4096 117 1:08:02 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 69632 / New offset: 69632 118 1:08:02 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 69632 Length: 3584 119 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\RASAPI32.DLL SUCCESS Beginning Offset: 116224 / New offset: 116224 120 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\RASAPI32.DLL SUCCESS Offset: 116224 Length: 4096 121 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\RASAPI32.DLL SUCCESS Beginning Offset: 120320 / New offset: 120320 122 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\RASAPI32.DLL SUCCESS Offset: 120320 Length: 2048 123 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\MPR.DLL SUCCESS Beginning Offset: 27648 / New offset: 27648 124 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\MPR.DLL SUCCESS Offset: 27648 Length: 2048 125 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\MPR.DLL SUCCESS Beginning Offset: 27648 / New offset: 27648 126 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\MPR.DLL SUCCESS Offset: 27648 Length: 4096 127 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\NETAPI32.DLL SUCCESS Beginning Offset: 1536 / New offset: 1536 128 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\NETAPI32.DLL SUCCESS Offset: 1536 Length: 512 129 1:08:02 AM Spambot Read C:\WINDOWS\WIN386.SWP SUCCESS Offset: 7868416 Length: 4096 130 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\TAPI32.DLL SUCCESS Beginning Offset: 5120 / New offset: 5120 131 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\TAPI32.DLL SUCCESS Offset: 5120 Length: 1024 132 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\MSPWL32.DLL SUCCESS Beginning Offset: 18432 / New offset: 18432 133 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\MSPWL32.DLL SUCCESS Offset: 18432 Length: 1024 134 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\MSPWL32.DLL SUCCESS Beginning Offset: 18432 / New offset: 18432 135 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\MSPWL32.DLL SUCCESS Offset: 18432 Length: 4096 136 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\SVRAPI.DLL SUCCESS Beginning Offset: 16384 / New offset: 16384 137 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\SVRAPI.DLL SUCCESS Offset: 16384 Length: 1024 138 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\SVRAPI.DLL SUCCESS Beginning Offset: 16384 / New offset: 16384 139 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\SVRAPI.DLL SUCCESS Offset: 16384 Length: 4096 140 1:08:02 AM Spambot Attributes C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SECUR32.DLL NOTFOUND GetAttributes 141 1:08:02 AM Spambot Attributes C:\WINDOWS\SYSTEM\SECUR32.DLL SUCCESS GetAttributes 142 1:08:02 AM Spambot Directory C:\WINDOWS\SYSTEM\SECUR32.DLL SUCCESS QUERY 143 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\SECUR32.DLL SUCCESS Beginning Offset: 25088 / New offset: 25088 144 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\SECUR32.DLL SUCCESS Offset: 25088 Length: 1536 145 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\SECUR32.DLL SUCCESS Beginning Offset: 25088 / New offset: 25088 146 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\SECUR32.DLL SUCCESS Offset: 25088 Length: 4096 147 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Beginning Offset: 216064 / New offset: 216064 148 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Offset: 216064 Length: 4096 149 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Beginning Offset: 220160 / New offset: 220160 150 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Offset: 220160 Length: 4096 151 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Beginning Offset: 240640 / New offset: 240640 152 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Offset: 240640 Length: 4096 153 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Beginning Offset: 236544 / New offset: 236544 154 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Offset: 236544 Length: 4096 155 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Beginning Offset: 224256 / New offset: 224256 156 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Offset: 224256 Length: 4096 157 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Beginning Offset: 244736 / New offset: 244736 158 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Offset: 244736 Length: 512 159 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\RASAPI32.DLL SUCCESS Beginning Offset: 116224 / New offset: 116224 160 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\RASAPI32.DLL SUCCESS Offset: 116224 Length: 4096 161 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\USER.EXE SUCCESS Beginning Offset: 5715 / New offset: 5715 162 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\USER.EXE SUCCESS Offset: 5715 Length: 8430 163 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\MPR.DLL SUCCESS Beginning Offset: 32768 / New offset: 32768 164 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\MPR.DLL SUCCESS Offset: 32768 Length: 1024 165 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\TAPI32.DLL SUCCESS Beginning Offset: 4608 / New offset: 4608 166 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\TAPI32.DLL SUCCESS Offset: 4608 Length: 512 167 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\TAPI32.DLL SUCCESS Beginning Offset: 1024 / New offset: 1024 168 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\TAPI32.DLL SUCCESS Offset: 1024 Length: 2560 169 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\SVRAPI.DLL SUCCESS Beginning Offset: 20480 / New offset: 20480 170 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\SVRAPI.DLL SUCCESS Offset: 20480 Length: 512 171 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\MSNET32.DLL SUCCESS Beginning Offset: 50176 / New offset: 50176 172 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\MSNET32.DLL SUCCESS Offset: 50176 Length: 3584 173 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Beginning Offset: 183296 / New offset: 183296 174 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Offset: 183296 Length: 4096 175 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Beginning Offset: 9216 / New offset: 9216 176 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Offset: 9216 Length: 4096 177 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Beginning Offset: 191488 / New offset: 191488 178 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Offset: 191488 Length: 4096 179 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Beginning Offset: 13312 / New offset: 13312 180 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Offset: 13312 Length: 4096 181 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Beginning Offset: 187392 / New offset: 187392 182 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Offset: 187392 Length: 4096 183 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Beginning Offset: 5120 / New offset: 5120 184 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Offset: 5120 Length: 4096 185 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Beginning Offset: 207872 / New offset: 207872 186 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Offset: 207872 Length: 4096 187 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Beginning Offset: 211968 / New offset: 211968 188 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Offset: 211968 Length: 1024 189 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Beginning Offset: 195584 / New offset: 195584 190 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Offset: 195584 Length: 4096 191 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Beginning Offset: 29696 / New offset: 29696 192 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Offset: 29696 Length: 4096 193 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Beginning Offset: 181760 / New offset: 181760 194 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Offset: 181760 Length: 1536 195 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\SECUR32.DLL SUCCESS Beginning Offset: 20992 / New offset: 20992 196 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\SECUR32.DLL SUCCESS Offset: 20992 Length: 4096 197 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\RASAPI32.DLL SUCCESS Beginning Offset: 103424 / New offset: 103424 198 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\RASAPI32.DLL SUCCESS Offset: 103424 Length: 4096 199 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\RASAPI32.DLL SUCCESS Beginning Offset: 78848 / New offset: 78848 200 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\RASAPI32.DLL SUCCESS Offset: 78848 Length: 4096 201 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\RASAPI32.DLL SUCCESS Beginning Offset: 107520 / New offset: 107520 202 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\RASAPI32.DLL SUCCESS Offset: 107520 Length: 4096 203 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\RASAPI32.DLL SUCCESS Beginning Offset: 111616 / New offset: 111616 204 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\RASAPI32.DLL SUCCESS Offset: 111616 Length: 1536 205 1:08:02 AM Spambot Attributes C:\PROGRAM FILES\TIMESINK\ADGATEWAY\ICMP.DLL NOTFOUND GetAttributes 206 1:08:02 AM Spambot Attributes C:\WINDOWS\SYSTEM\ICMP.DLL SUCCESS GetAttributes 207 1:08:02 AM Spambot Directory C:\WINDOWS\SYSTEM\ICMP.DLL SUCCESS QUERY 208 1:08:02 AM Spambot Open C:\WINDOWS\SYSTEM\ICMP.DLL SUCCESS OPENEXISTING READONLY DENYWRITE 209 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\ICMP.DLL SUCCESS Offset: 0 Length: 64 210 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\ICMP.DLL SUCCESS Beginning Offset: 128 / New offset: 128 211 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\ICMP.DLL SUCCESS Offset: 128 Length: 248 212 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\ICMP.DLL SUCCESS Beginning Offset: 128 / New offset: 128 213 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\ICMP.DLL SUCCESS Offset: 128 Length: 408 214 1:08:02 AM Spambot Directory C:\WINDOWS\SYSTEM\ICMP.DLL SUCCESS QUERY 215 1:08:02 AM Spambot GetDiskInfo C: SUCCESS Free Space 216 1:08:02 AM Spambot Write C:\WINDOWS\WIN386.SWP SUCCESS Offset: 44040192 Length: 0 217 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\ICMP.DLL SUCCESS Beginning Offset: 7680 / New offset: 7680 218 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\ICMP.DLL SUCCESS Offset: 7680 Length: 1024 219 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\ICMP.DLL SUCCESS Beginning Offset: 4096 / New offset: 4096 220 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\ICMP.DLL SUCCESS Offset: 4096 Length: 3072 221 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\ICMP.DLL SUCCESS Beginning Offset: 4096 / New offset: 4096 222 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\ICMP.DLL SUCCESS Offset: 4096 Length: 4096 223 1:08:02 AM Spambot Seek C:\WINDOWS\SYSTEM\ICMP.DLL SUCCESS Beginning Offset: 7168 / New offset: 7168 224 1:08:02 AM Spambot Read C:\WINDOWS\SYSTEM\ICMP.DLL SUCCESS Offset: 7168 Length: 512 225 1:10:02 AM Spambot Close C:\WINDOWS\SYSTEM\ICMP.DLL SUCCESS CLOSE_FINAL 226 1:10:02 AM Spambot Seek C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Beginning Offset: 62464 / New offset: 62464 227 1:10:02 AM Spambot Read C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Offset: 62464 Length: 4096 228 1:10:02 AM Spambot Seek C:\WINDOWS\SYSTEM\TAPI32.DLL SUCCESS Beginning Offset: 9728 / New offset: 9728 229 1:10:02 AM Spambot Read C:\WINDOWS\SYSTEM\TAPI32.DLL SUCCESS Offset: 9728 Length: 512 230 1:10:02 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 58368 / New offset: 58368 231 1:10:02 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 58368 Length: 4096 232 1:10:02 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 148480 / New offset: 148480 233 1:10:02 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 148480 Length: 4096 234 1:10:02 AM Spambot Close C:\WINDOWS\TSAD.DLL SUCCESS CLOSE_FINAL 235 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\USER.EXE SUCCESS Beginning Offset: 5715 / New offset: 5715 236 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\USER.EXE SUCCESS Offset: 5715 Length: 8430 237 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Beginning Offset: 309760 / New offset: 309760 238 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Offset: 309760 Length: 4096 239 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Beginning Offset: 313856 / New offset: 313856 240 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Offset: 313856 Length: 3072 241 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\SHELL32.DLL SUCCESS Beginning Offset: 416768 / New offset: 416768 242 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\SHELL32.DLL SUCCESS Offset: 416768 Length: 1536 243 1:11:44 AM Spambot Seek C:\WINDOWS\SYSBCKUP\VER.DLL SUCCESS Beginning Offset: 721 / New offset: 721 244 1:11:44 AM Spambot Read C:\WINDOWS\SYSBCKUP\VER.DLL SUCCESS Offset: 721 Length: 256 245 1:11:44 AM Spambot Seek C:\WINDOWS\SYSBCKUP\VER.DLL SUCCESS Beginning Offset: 721 / New offset: 721 246 1:11:44 AM Spambot Read C:\WINDOWS\SYSBCKUP\VER.DLL SUCCESS Offset: 721 Length: 256 247 1:11:44 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 41984 / New offset: 41984 248 1:11:44 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 41984 Length: 4096 249 1:11:44 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 73216 / New offset: 73216 250 1:11:44 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 73216 Length: 4096 251 1:11:44 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 77312 / New offset: 77312 252 1:11:44 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 77312 Length: 4096 253 1:11:44 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 81408 / New offset: 81408 254 1:11:44 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 81408 Length: 4096 255 1:11:44 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 46080 / New offset: 46080 256 1:11:44 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 46080 Length: 4096 257 1:11:44 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 33792 / New offset: 33792 258 1:11:44 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 33792 Length: 4096 259 1:11:44 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 54272 / New offset: 54272 260 1:11:44 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 54272 Length: 4096 261 1:11:44 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 37888 / New offset: 37888 262 1:11:44 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 37888 Length: 4096 263 1:11:44 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 50176 / New offset: 50176 264 1:11:44 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 50176 Length: 4096 265 1:11:44 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 85504 / New offset: 85504 266 1:11:44 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 85504 Length: 4096 267 1:11:44 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 29696 / New offset: 29696 268 1:11:44 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 29696 Length: 4096 269 1:11:44 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 5120 / New offset: 5120 270 1:11:44 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 5120 Length: 4096 271 1:11:44 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 13312 / New offset: 13312 272 1:11:44 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 13312 Length: 4096 273 1:11:44 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 25600 / New offset: 25600 274 1:11:44 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 25600 Length: 4096 275 1:11:44 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 17408 / New offset: 17408 276 1:11:44 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 17408 Length: 4096 277 1:11:44 AM Spambot Attributes C:\WINDOWS\SYSTEM\TSAD.DLL NOTFOUND GetAttributes 278 1:11:44 AM Spambot Attributes C:\WINDOWS\TSAD.DLL SUCCESS GetAttributes 279 1:11:44 AM Spambot Directory C:\WINDOWS\TSAD.DLL SUCCESS QUERY 280 1:11:44 AM Spambot Open C:\WINDOWS\TSAD.DLL SUCCESS OPENEXISTING READONLY DENYWRITE 281 1:11:44 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 0 Length: 64 282 1:11:44 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 128 / New offset: 128 283 1:11:44 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 128 Length: 248 284 1:11:44 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 128 / New offset: 128 285 1:11:44 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 128 Length: 488 286 1:11:44 AM Spambot Directory C:\WINDOWS\TSAD.DLL SUCCESS QUERY 287 1:11:44 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 199168 / New offset: 199168 288 1:11:44 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 199168 Length: 2048 289 1:11:44 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 195072 / New offset: 195072 290 1:11:44 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 195072 Length: 4096 291 1:11:44 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 123904 / New offset: 123904 292 1:11:44 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 123904 Length: 4096 293 1:11:44 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 119808 / New offset: 119808 294 1:11:44 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 119808 Length: 4096 295 1:11:44 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 161280 / New offset: 161280 296 1:11:44 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 161280 Length: 4096 297 1:11:44 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 181248 / New offset: 181248 298 1:11:44 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 181248 Length: 4096 299 1:11:44 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 185344 / New offset: 185344 300 1:11:44 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 185344 Length: 4096 301 1:11:44 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 189440 / New offset: 189440 302 1:11:44 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 189440 Length: 4096 303 1:11:44 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 128000 / New offset: 128000 304 1:11:44 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 128000 Length: 4096 305 1:11:44 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 111616 / New offset: 111616 306 1:11:44 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 111616 Length: 4096 307 1:11:44 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 144384 / New offset: 144384 308 1:11:44 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 144384 Length: 4096 309 1:11:44 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 136192 / New offset: 136192 310 1:11:44 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 136192 Length: 4096 311 1:11:44 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 107520 / New offset: 107520 312 1:11:44 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 107520 Length: 4096 313 1:11:44 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 168960 / New offset: 168960 314 1:11:44 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 168960 Length: 4096 315 1:11:44 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 132096 / New offset: 132096 316 1:11:44 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 132096 Length: 4096 317 1:11:44 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 1024 / New offset: 1024 318 1:11:44 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 1024 Length: 4096 319 1:11:44 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 193536 / New offset: 193536 320 1:11:44 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 193536 Length: 1536 321 1:11:44 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 5120 / New offset: 5120 322 1:11:44 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 5120 Length: 4096 323 1:11:44 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 17408 / New offset: 17408 324 1:11:44 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 17408 Length: 4096 325 1:11:44 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 29696 / New offset: 29696 326 1:11:44 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 29696 Length: 4096 327 1:11:44 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 33792 / New offset: 33792 328 1:11:44 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 33792 Length: 4096 329 1:11:44 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 54272 / New offset: 54272 330 1:11:44 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 54272 Length: 4096 331 1:11:44 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 46080 / New offset: 46080 332 1:11:44 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 46080 Length: 4096 333 1:11:44 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 50176 / New offset: 50176 334 1:11:44 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 50176 Length: 4096 335 1:11:44 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 21504 / New offset: 21504 336 1:11:44 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 21504 Length: 4096 337 1:11:44 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 99328 / New offset: 99328 338 1:11:44 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 99328 Length: 4096 339 1:11:44 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 165376 / New offset: 165376 340 1:11:44 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 165376 Length: 3584 341 1:11:44 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 66560 / New offset: 66560 342 1:11:44 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 66560 Length: 3072 343 1:11:44 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 21504 / New offset: 21504 344 1:11:44 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 21504 Length: 4096 345 1:11:44 AM Spambot Attributes C:\PROGRAM FILES SUCCESS GetAttributes 346 1:11:44 AM Spambot Attributes C:\PROGRAM FILES\TIMESINK SUCCESS GetAttributes 347 1:11:44 AM Spambot Attributes C:\PROGRAM FILES\TIMESINK\ADGATEWAY SUCCESS GetAttributes 348 1:11:44 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 62464 / New offset: 62464 349 1:11:44 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 62464 Length: 4096 350 1:11:44 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 69632 / New offset: 69632 351 1:11:44 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 69632 Length: 3584 352 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\RASAPI32.DLL SUCCESS Beginning Offset: 116224 / New offset: 116224 353 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\RASAPI32.DLL SUCCESS Offset: 116224 Length: 4096 354 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\RASAPI32.DLL SUCCESS Beginning Offset: 120320 / New offset: 120320 355 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\RASAPI32.DLL SUCCESS Offset: 120320 Length: 2048 356 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\MPR.DLL SUCCESS Beginning Offset: 27648 / New offset: 27648 357 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\MPR.DLL SUCCESS Offset: 27648 Length: 2048 358 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\MPR.DLL SUCCESS Beginning Offset: 27648 / New offset: 27648 359 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\MPR.DLL SUCCESS Offset: 27648 Length: 4096 360 1:11:44 AM Spambot Read C:\WINDOWS\WIN386.SWP SUCCESS Offset: 7487488 Length: 4096 361 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\NETAPI32.DLL SUCCESS Beginning Offset: 1536 / New offset: 1536 362 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\NETAPI32.DLL SUCCESS Offset: 1536 Length: 512 363 1:11:44 AM Spambot Read C:\WINDOWS\WIN386.SWP SUCCESS Offset: 7868416 Length: 4096 364 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\TAPI32.DLL SUCCESS Beginning Offset: 5120 / New offset: 5120 365 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\TAPI32.DLL SUCCESS Offset: 5120 Length: 1024 366 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\MSPWL32.DLL SUCCESS Beginning Offset: 18432 / New offset: 18432 367 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\MSPWL32.DLL SUCCESS Offset: 18432 Length: 1024 368 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\MSPWL32.DLL SUCCESS Beginning Offset: 18432 / New offset: 18432 369 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\MSPWL32.DLL SUCCESS Offset: 18432 Length: 4096 370 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\SVRAPI.DLL SUCCESS Beginning Offset: 16384 / New offset: 16384 371 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\SVRAPI.DLL SUCCESS Offset: 16384 Length: 1024 372 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\SVRAPI.DLL SUCCESS Beginning Offset: 16384 / New offset: 16384 373 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\SVRAPI.DLL SUCCESS Offset: 16384 Length: 4096 374 1:11:44 AM Spambot Attributes C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SECUR32.DLL NOTFOUND GetAttributes 375 1:11:44 AM Spambot Attributes C:\WINDOWS\SYSTEM\SECUR32.DLL SUCCESS GetAttributes 376 1:11:44 AM Spambot Directory C:\WINDOWS\SYSTEM\SECUR32.DLL SUCCESS QUERY 377 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\SECUR32.DLL SUCCESS Beginning Offset: 25088 / New offset: 25088 378 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\SECUR32.DLL SUCCESS Offset: 25088 Length: 1536 379 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\SECUR32.DLL SUCCESS Beginning Offset: 25088 / New offset: 25088 380 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\SECUR32.DLL SUCCESS Offset: 25088 Length: 4096 381 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Beginning Offset: 216064 / New offset: 216064 382 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Offset: 216064 Length: 4096 383 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Beginning Offset: 220160 / New offset: 220160 384 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Offset: 220160 Length: 4096 385 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Beginning Offset: 240640 / New offset: 240640 386 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Offset: 240640 Length: 4096 387 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Beginning Offset: 236544 / New offset: 236544 388 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Offset: 236544 Length: 4096 389 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Beginning Offset: 224256 / New offset: 224256 390 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Offset: 224256 Length: 4096 391 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Beginning Offset: 244736 / New offset: 244736 392 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Offset: 244736 Length: 512 393 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\RASAPI32.DLL SUCCESS Beginning Offset: 116224 / New offset: 116224 394 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\RASAPI32.DLL SUCCESS Offset: 116224 Length: 4096 395 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\SVRAPI.DLL SUCCESS Beginning Offset: 8192 / New offset: 8192 396 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\SVRAPI.DLL SUCCESS Offset: 8192 Length: 4096 397 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\USER.EXE SUCCESS Beginning Offset: 5715 / New offset: 5715 398 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\USER.EXE SUCCESS Offset: 5715 Length: 8430 399 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\MPR.DLL SUCCESS Beginning Offset: 32768 / New offset: 32768 400 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\MPR.DLL SUCCESS Offset: 32768 Length: 1024 401 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\TAPI32.DLL SUCCESS Beginning Offset: 4608 / New offset: 4608 402 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\TAPI32.DLL SUCCESS Offset: 4608 Length: 512 403 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\TAPI32.DLL SUCCESS Beginning Offset: 1024 / New offset: 1024 404 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\TAPI32.DLL SUCCESS Offset: 1024 Length: 2560 405 1:11:44 AM Spambot Read C:\WINDOWS\WIN386.SWP SUCCESS Offset: 10600448 Length: 4096 406 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\SVRAPI.DLL SUCCESS Beginning Offset: 20480 / New offset: 20480 407 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\SVRAPI.DLL SUCCESS Offset: 20480 Length: 512 408 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\MSNET32.DLL SUCCESS Beginning Offset: 53760 / New offset: 53760 409 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\MSNET32.DLL SUCCESS Offset: 53760 Length: 1536 410 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\MSNET32.DLL SUCCESS Beginning Offset: 50176 / New offset: 50176 411 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\MSNET32.DLL SUCCESS Offset: 50176 Length: 3584 412 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\MSNET32.DLL SUCCESS Beginning Offset: 55296 / New offset: 55296 413 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\MSNET32.DLL SUCCESS Offset: 55296 Length: 512 414 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Beginning Offset: 183296 / New offset: 183296 415 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Offset: 183296 Length: 4096 416 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Beginning Offset: 9216 / New offset: 9216 417 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Offset: 9216 Length: 4096 418 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Beginning Offset: 191488 / New offset: 191488 419 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Offset: 191488 Length: 4096 420 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Beginning Offset: 13312 / New offset: 13312 421 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Offset: 13312 Length: 4096 422 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Beginning Offset: 187392 / New offset: 187392 423 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Offset: 187392 Length: 4096 424 1:11:44 AM Spambot GetDiskInfo C: SUCCESS Free Space 425 1:11:44 AM Spambot Write C:\WINDOWS\WIN386.SWP SUCCESS Offset: 52428800 Length: 0 426 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Beginning Offset: 5120 / New offset: 5120 427 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Offset: 5120 Length: 4096 428 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Beginning Offset: 207872 / New offset: 207872 429 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Offset: 207872 Length: 4096 430 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Beginning Offset: 211968 / New offset: 211968 431 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Offset: 211968 Length: 1024 432 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Beginning Offset: 195584 / New offset: 195584 433 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Offset: 195584 Length: 4096 434 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Beginning Offset: 29696 / New offset: 29696 435 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Offset: 29696 Length: 4096 436 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Beginning Offset: 181760 / New offset: 181760 437 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Offset: 181760 Length: 1536 438 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\SECUR32.DLL SUCCESS Beginning Offset: 20992 / New offset: 20992 439 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\SECUR32.DLL SUCCESS Offset: 20992 Length: 4096 440 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\RASAPI32.DLL SUCCESS Beginning Offset: 103424 / New offset: 103424 441 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\RASAPI32.DLL SUCCESS Offset: 103424 Length: 4096 442 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\RASAPI32.DLL SUCCESS Beginning Offset: 78848 / New offset: 78848 443 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\RASAPI32.DLL SUCCESS Offset: 78848 Length: 4096 444 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\RASAPI32.DLL SUCCESS Beginning Offset: 107520 / New offset: 107520 445 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\RASAPI32.DLL SUCCESS Offset: 107520 Length: 4096 446 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\RASAPI32.DLL SUCCESS Beginning Offset: 111616 / New offset: 111616 447 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\RASAPI32.DLL SUCCESS Offset: 111616 Length: 1536 448 1:11:44 AM Spambot Attributes C:\PROGRAM FILES\TIMESINK\ADGATEWAY\ICMP.DLL NOTFOUND GetAttributes 449 1:11:44 AM Spambot Attributes C:\WINDOWS\SYSTEM\ICMP.DLL SUCCESS GetAttributes 450 1:11:44 AM Spambot Directory C:\WINDOWS\SYSTEM\ICMP.DLL SUCCESS QUERY 451 1:11:44 AM Spambot Open C:\WINDOWS\SYSTEM\ICMP.DLL SUCCESS OPENEXISTING READONLY DENYWRITE 452 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\ICMP.DLL SUCCESS Offset: 0 Length: 64 453 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\ICMP.DLL SUCCESS Beginning Offset: 128 / New offset: 128 454 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\ICMP.DLL SUCCESS Offset: 128 Length: 248 455 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\ICMP.DLL SUCCESS Beginning Offset: 128 / New offset: 128 456 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\ICMP.DLL SUCCESS Offset: 128 Length: 408 457 1:11:44 AM Spambot Directory C:\WINDOWS\SYSTEM\ICMP.DLL SUCCESS QUERY 458 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\ICMP.DLL SUCCESS Beginning Offset: 7680 / New offset: 7680 459 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\ICMP.DLL SUCCESS Offset: 7680 Length: 1024 460 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\ICMP.DLL SUCCESS Beginning Offset: 4096 / New offset: 4096 461 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\ICMP.DLL SUCCESS Offset: 4096 Length: 3072 462 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\ICMP.DLL SUCCESS Beginning Offset: 4096 / New offset: 4096 463 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\ICMP.DLL SUCCESS Offset: 4096 Length: 4096 464 1:11:44 AM Spambot Seek C:\WINDOWS\SYSTEM\ICMP.DLL SUCCESS Beginning Offset: 7168 / New offset: 7168 465 1:11:44 AM Spambot Read C:\WINDOWS\SYSTEM\ICMP.DLL SUCCESS Offset: 7168 Length: 512 466 1:13:40 AM Spambot Seek C:\WINDOWS\SYSTEM\USER.EXE SUCCESS Beginning Offset: 5715 / New offset: 5715 467 1:13:40 AM Spambot Read C:\WINDOWS\SYSTEM\USER.EXE SUCCESS Offset: 5715 Length: 8430 468 1:13:40 AM Spambot Seek C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Beginning Offset: 309760 / New offset: 309760 469 1:13:40 AM Spambot Read C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Offset: 309760 Length: 4096 470 1:13:40 AM Spambot Seek C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Beginning Offset: 313856 / New offset: 313856 471 1:13:40 AM Spambot Read C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Offset: 313856 Length: 3072 472 1:13:40 AM Spambot Seek C:\WINDOWS\SYSTEM\SHELL32.DLL SUCCESS Beginning Offset: 416768 / New offset: 416768 473 1:13:40 AM Spambot Read C:\WINDOWS\SYSTEM\SHELL32.DLL SUCCESS Offset: 416768 Length: 1536 474 1:13:40 AM Spambot Seek C:\WINDOWS\SYSBCKUP\VER.DLL SUCCESS Beginning Offset: 721 / New offset: 721 475 1:13:40 AM Spambot Read C:\WINDOWS\SYSBCKUP\VER.DLL SUCCESS Offset: 721 Length: 256 476 1:13:40 AM Spambot Seek C:\WINDOWS\SYSBCKUP\VER.DLL SUCCESS Beginning Offset: 721 / New offset: 721 477 1:13:40 AM Spambot Read C:\WINDOWS\SYSBCKUP\VER.DLL SUCCESS Offset: 721 Length: 256 478 1:13:40 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 73216 / New offset: 73216 479 1:13:40 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 73216 Length: 4096 480 1:13:40 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 77312 / New offset: 77312 481 1:13:40 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 77312 Length: 4096 482 1:13:40 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 81408 / New offset: 81408 483 1:13:40 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 81408 Length: 4096 484 1:13:40 AM Spambot Seek C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Beginning Offset: 85504 / New offset: 85504 485 1:13:40 AM Spambot Read C:\PROGRAM FILES\TIMESINK\ADGATEWAY\SPAMBOT.EXE SUCCESS Offset: 85504 Length: 4096 486 1:13:40 AM Spambot Attributes C:\WINDOWS\SYSTEM\TSAD.DLL NOTFOUND GetAttributes 487 1:13:40 AM Spambot Attributes C:\WINDOWS\TSAD.DLL SUCCESS GetAttributes 488 1:13:40 AM Spambot Directory C:\WINDOWS\TSAD.DLL SUCCESS QUERY 489 1:13:40 AM Spambot GetDiskInfo C: SUCCESS Free Space 490 1:13:40 AM Spambot Write C:\WINDOWS\WIN386.SWP SUCCESS Offset: 52953088 Length: 0 491 1:13:40 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 195072 / New offset: 195072 492 1:13:40 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 195072 Length: 4096 493 1:13:40 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 195072 / New offset: 195072 494 1:13:40 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 195072 Length: 4096 495 1:13:40 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 181248 / New offset: 181248 496 1:13:40 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 181248 Length: 4096 497 1:13:40 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 185344 / New offset: 185344 498 1:13:40 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 185344 Length: 4096 499 1:13:40 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 189440 / New offset: 189440 500 1:13:40 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 189440 Length: 4096 501 1:13:40 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 168960 / New offset: 168960 502 1:13:40 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 168960 Length: 4096 503 1:13:40 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 193536 / New offset: 193536 504 1:13:40 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 193536 Length: 1536 505 1:13:40 AM Spambot Attributes C:\PROGRAM FILES SUCCESS GetAttributes 506 1:13:40 AM Spambot Attributes C:\PROGRAM FILES\TIMESINK SUCCESS GetAttributes 507 1:13:40 AM Spambot Attributes C:\PROGRAM FILES\TIMESINK\ADGATEWAY SUCCESS GetAttributes 508 1:13:40 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 58368 / New offset: 58368 509 1:13:40 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 58368 Length: 4096 510 1:13:40 AM Spambot Seek C:\WINDOWS\TSAD.DLL SUCCESS Beginning Offset: 148480 / New offset: 148480 511 1:13:40 AM Spambot Read C:\WINDOWS\TSAD.DLL SUCCESS Offset: 148480 Length: 4096 512 1:13:40 AM Spambot Seek C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Beginning Offset: 259584 / New offset: 259584 513 1:13:40 AM Spambot Read C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Offset: 259584 Length: 4096 514 1:13:40 AM Spambot Seek C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Beginning Offset: 267776 / New offset: 267776 515 1:13:40 AM Spambot Read C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Offset: 267776 Length: 4096 516 1:13:40 AM Spambot Seek C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Beginning Offset: 251392 / New offset: 251392 517 1:13:40 AM Spambot Read C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Offset: 251392 Length: 4096 518 1:13:40 AM Spambot Seek C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Beginning Offset: 255488 / New offset: 255488 519 1:13:40 AM Spambot Read C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Offset: 255488 Length: 4096 520 1:13:40 AM Spambot Seek C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Beginning Offset: 214528 / New offset: 214528 521 1:13:40 AM Spambot Read C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Offset: 214528 Length: 4096 522 1:13:40 AM Spambot Seek C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Beginning Offset: 222720 / New offset: 222720 523 1:13:40 AM Spambot Read C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Offset: 222720 Length: 4096 524 1:13:40 AM Spambot Seek C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Beginning Offset: 198144 / New offset: 198144 525 1:13:40 AM Spambot Read C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Offset: 198144 Length: 4096 526 1:13:40 AM Spambot Seek C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Beginning Offset: 202240 / New offset: 202240 527 1:13:40 AM Spambot Read C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Offset: 202240 Length: 4096 528 1:13:40 AM Spambot Seek C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Beginning Offset: 165376 / New offset: 165376 529 1:13:40 AM Spambot Read C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Offset: 165376 Length: 4096 530 1:13:40 AM Spambot Seek C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Beginning Offset: 243200 / New offset: 243200 531 1:13:40 AM Spambot Read C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Offset: 243200 Length: 4096 532 1:13:40 AM Spambot Seek C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Beginning Offset: 161280 / New offset: 161280 533 1:13:40 AM Spambot Read C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Offset: 161280 Length: 4096 534 1:13:40 AM Spambot Seek C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Beginning Offset: 153088 / New offset: 153088 535 1:13:40 AM Spambot Read C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Offset: 153088 Length: 4096 536 1:13:40 AM Spambot Seek C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Beginning Offset: 247296 / New offset: 247296 537 1:13:40 AM Spambot Read C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Offset: 247296 Length: 4096 538 1:13:40 AM Spambot Seek C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Beginning Offset: 148992 / New offset: 148992 539 1:13:40 AM Spambot Read C:\WINDOWS\SYSTEM\WININET.DLL SUCCESS Offset: 148992 Length: 4096 540 1:13:44 AM Spambot Close C:\WINDOWS\SYSTEM\ICMP.DLL SUCCESS CLOSE_FINAL 541 1:13:44 AM Spambot Seek C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Beginning Offset: 62464 / New offset: 62464 542 1:13:44 AM Spambot Read C:\WINDOWS\SYSTEM\MSVCRT20.DLL SUCCESS Offset: 62464 Length: 4096 543 1:13:44 AM Spambot Seek C:\WINDOWS\SYSTEM\TAPI32.DLL SUCCESS Beginning Offset: 9728 / New offset: 9728 544 1:13:44 AM Spambot Read C:\WINDOWS\SYSTEM\TAPI32.DLL SUCCESS Offset: 9728 Length: 512 545 1:13:44 AM Spambot Close C:\WINDOWS\TSAD.DLL SUCCESS CLOSE_FINAL