<?xml version="1.0"?>
<!-- This analysis was created by CWSandbox (c) Carsten Willems 2006--> 
<analysis cwsversion="1.107" time="25.04.2007 20:46:12" file="4a589c67147073ae0c1c0102f0da8c13.exe" logpath="C:\analysis\log\4a589c67147073ae0c1c0102f0da8c13.exe\run_1\">
<calltree>
<process_call index="1" pid="1464" filename="c:\4a589c67147073ae0c1c0102f0da8c13.exe" starttime="00:00.156" startreason="AnalysisTarget"><calltree>
<process_call index="2" pid="392" filename="C:\WINDOWS\system32\urdvxc.exe /installservice" starttime="00:03.500" startreason="CreateProcess"/>
<process_call index="3" pid="1740" filename="C:\WINDOWS\system32\urdvxc.exe /start" starttime="00:04.515" startreason="CreateProcess"/>
<process_call index="5" pid="1764" filename="C:\WINDOWS\system32\urdvxc.exe /uninstallservice patch:c:\4a589c67147073ae0c1c0102f0da8c13.exe" starttime="00:06.187" startreason="CreateProcess"/>
</calltree>
</process_call>

<process_call index="4" pid="680" filename="services.exe" starttime="00:04.859" startreason="SCM"><calltree>
<process_call index="6" pid="1800" filename="C:\WINDOWS\system32\urdvxc.exe /service" starttime="00:07.422" startreason="CreateProcess"/>
</calltree>
</process_call>

</calltree>

<processes>
<process index="1" pid="1464" filename="c:\4a589c67147073ae0c1c0102f0da8c13.exe" filesize="57856" md5="4a589c67147073ae0c1c0102f0da8c13" username="nepenthes" parentindex="0" starttime="00:00.156" terminationtime="00:07.031" startreason="AnalysisTarget" terminationreason="NormalTermination" executionstatus="OK">
<virusscan_section>
<scanner name="ClamAV" application_version="0.88.2" signature_file_version="3162">
<classification>OK</classification>
<additional_info/>
</scanner>
<scanner name="BDC/Linux-Console" application_version="7.0.2492" signature_file_version="31951">
<classification>OK</classification>
<additional_info/>
</scanner>
<scanner name="AntiVir Workstation" application_version="2.1.10-37" signature_file_version="6.38.1.41">
<classification>WORM/Allaple.Gen]</classification>
<additional_info/>
</scanner>

</virusscan_section>
<dll_handling_section>
<load_dll dll="c:\4a589c67147073ae0c1c0102f0da8c13.exe" successful="1" address="&#x24;400000" size="131072"/>
<load_dll dll="C:\WINDOWS\system32\ntdll.dll" successful="1" address="&#x24;7C910000" size="749568"/>
<load_dll dll="C:\WINDOWS\system32\kernel32.dll" successful="1" address="&#x24;7C800000" size="1073152"/>
<load_dll dll="C:\WINDOWS\system32\user32.dll" successful="1" address="&#x24;7E360000" size="589824"/>
<load_dll dll="C:\WINDOWS\system32\GDI32.dll" successful="1" address="&#x24;77EF0000" size="290816"/>
<load_dll dll="C:\WINDOWS\system32\advapi32.dll" successful="1" address="&#x24;77DA0000" size="696320"/>
<load_dll dll="C:\WINDOWS\system32\RPCRT4.dll" successful="1" address="&#x24;77E50000" size="593920"/>
<load_dll dll="C:\WINDOWS\system32\oleaut32.dll" successful="1" address="&#x24;770F0000" size="573440"/>
<load_dll dll="C:\WINDOWS\system32\msvcrt.dll" successful="1" address="&#x24;77BE0000" size="360448"/>
<load_dll dll="C:\WINDOWS\system32\ole32.dll" successful="1" address="&#x24;774B0000" size="1298432"/>
<load_dll dll="C:\WINDOWS\system32\comctl32.dll" successful="1" address="&#x24;5D450000" size="630784"/>
<load_dll dll="C:\WINDOWS\system32\wsock32.dll" successful="1" address="&#x24;71A30000" size="40960"/>
<load_dll dll="C:\WINDOWS\system32\WS2_32.dll" successful="1" address="&#x24;71A10000" size="94208"/>
<load_dll dll="C:\WINDOWS\system32\WS2HELP.dll" successful="1" address="&#x24;71A00000" size="32768"/>
<load_dll dll="C:\WINDOWS\system32\IMM32.DLL" successful="1" address="&#x24;76330000" size="118784"/>
<load_dll dll="C:\WINDOWS\system32\pstorec.dll" successful="1" address="&#x24;5E490000" size="53248"/>
<load_dll dll="C:\WINDOWS\system32\ATL.DLL" successful="1" address="&#x24;76AD0000" size="69632"/>
<load_dll dll="C:\WINDOWS\system32\Wship6.dll" successful="1" address="&#x24;590B0000" size="28672"/>
<load_dll dll="C:\WINDOWS\system32\Secur32.dll" successful="1" address="&#x24;77FC0000" size="69632"/>
<load_dll dll="user32.dll" successful="1" address="&#x24;7E360000" size="589824"/>
<load_dll dll="kernel32.dll" successful="1" address="&#x24;7C800000" size="1073152"/>
<load_dll dll="MSVCRT.dll" successful="1" address="&#x24;77BE0000" size="360448"/>
<load_dll dll="imagehlp.dll" successful="1" address="&#x24;76C50000" size="163840"/>
<load_dll dll="ole32.dll" successful="1" address="&#x24;774B0000" size="1298432"/>
<load_dll dll="shell32.dll" successful="1" address="&#x24;7C9D0000" size="8515584"/>
<load_dll dll="advapi32.dll" successful="1" address="&#x24;77DA0000" size="696320"/>
<load_dll dll="ws2_32.dll" successful="1" address="&#x24;71A10000" size="94208"/>
<load_dll dll="shlwapi.dll" successful="1" address="&#x24;77F40000" size="483328"/>
<load_dll dll="icmp.dll" successful="1" address="&#x24;741F0000" size="16384"/>
</dll_handling_section>
<filesystem_section>
<create_open_file filetype="File" srcfile="\Device\Tcp" creationdistribution="OPEN_ALWAYS" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ,SHARE_WRITE" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<create_open_file filetype="File" srcfile="\Device\Ip" creationdistribution="OPEN_ALWAYS" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ,SHARE_WRITE" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<create_open_file filetype="File" srcfile="\Device\Ip" creationdistribution="OPEN_ALWAYS" desiredaccess="FILE_ANY_ACCESS,FILE_READ_ACCESS,FILE_READ_DATA,FILE_LIST_DIRECTORY,FILE_WRITE_ACCESS,FILE_WRITE_DATA,FILE_ADD_FILE" shareaccess="SHARE_READ,SHARE_WRITE" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="\\.\Ip" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ,SHARE_WRITE" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<copy_file filetype="File" srcfile="c:\4a589c67147073ae0c1c0102f0da8c13.exe" dstfile="C:\WINDOWS\system32\urdvxc.exe" creationdistribution="CREATE_ALWAYS" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="\SystemRoot\AppPatch\sysmain.sdb" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS,FILE_READ_ATTRIBUTES" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="\SystemRoot\AppPatch\systest.sdb" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS,FILE_READ_ATTRIBUTES" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="\Device\NamedPipe\ShimViewer" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS,FILE_WRITE_ACCESS,FILE_WRITE_DATA,FILE_ADD_FILE,FILE_ADD_SUBDIRECTORY,FILE_APPEND_DATA,FILE_CREATE_PIPE_INSTANCE,FILE_WRITE_EA,FILE_WRITE_ATTRIBUTES" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\WINDOWS\system32\urdvxc.exe" desiredaccess="FILE_ANY_ACCESS,FILE_READ_ACCESS,FILE_READ_DATA,FILE_LIST_DIRECTORY" shareaccess="SHARE_READ,SHARE_WRITE" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="urdvxc.exe" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
</filesystem_section>
<registry_section>
<create_key key="HKEY_CLASSES_ROOT" subkey_or_value="CLSID\&#x7B;47DA216A-26F2-9624-55E9-B629C62A8C11&#x7D;"/>
<set_value key="HKEY_CLASSES_ROOT\CLSID\&#x7B;47DA216A-26F2-9624-55E9-B629C62A8C11&#x7D;" data="hechbzrlxqnhnknb"/>
<create_key key="HKEY_CLASSES_ROOT" subkey_or_value="CLSID\&#x7B;47DA216A-26F2-9624-55E9-B629C62A8C11&#x7D;\LocalServer32"/>
<set_value key="HKEY_CLASSES_ROOT\CLSID\&#x7B;47DA216A-26F2-9624-55E9-B629C62A8C11&#x7D;\LocalServer32" data="c:\4a589c67147073ae0c1c0102f0da8c13.exe"/>
<open_key key="HKEY_LOCAL_MACHINE" subkey_or_value="System\WPA\TabletPC"/>
<open_key key="HKEY_LOCAL_MACHINE" subkey_or_value="SYSTEM\WPA\MediaCenter"/>
<query_value key="HKEY_LOCAL_MACHINE\SYSTEM\WPA\MediaCenter" subkey_or_value="Installed"/>
<open_key key="HKEY_LOCAL_MACHINE" subkey_or_value="Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers"/>
<open_key key="HKEY_CURRENT_USERS" subkey_or_value="S-1-5-21-1645522239-706699826-839522115-1003\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers"/>
<open_key key="HKEY_LOCAL_MACHINE" subkey_or_value="Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\urdvxc.exe"/>
</registry_section>
<process_section>
<create_process commandline="C:\WINDOWS\system32\urdvxc.exe /installservice" targetpid="392" showwindow="SW_HIDE" apifunction="CreateProcessA" successful="1"/>
<create_process commandline="C:\WINDOWS\system32\urdvxc.exe /start" targetpid="1740" showwindow="SW_HIDE" apifunction="CreateProcessA" successful="1"/>
<create_process commandline="C:\WINDOWS\system32\urdvxc.exe /uninstallservice patch:c:\4a589c67147073ae0c1c0102f0da8c13.exe" targetpid="1764" showwindow="SW_HIDE" apifunction="CreateProcessA" successful="1"/>
<kill_process targetpid="1464" showwindow="SW_HIDE" apifunction="NtTerminateProcess"/>
</process_section>
<system_info_section>
<get_system_directory/>
</system_info_section>
<winsock_section>
<connections_unknown>
<connection connectionestablished="0" socket="0">
</connection>
</connections_unknown>
</winsock_section>

</process>
<process index="2" pid="392" filename="C:\WINDOWS\system32\urdvxc.exe /installservice" filesize="57856" md5="4a589c67147073ae0c1c0102f0da8c13" username="nepenthes" parentindex="1" starttime="00:03.500" terminationtime="00:07.437" startreason="CreateProcess" terminationreason="NormalTermination" executionstatus="OK">
<virusscan_section>
<scanner name="ClamAV" application_version="0.88.2" signature_file_version="3162">
<classification>OK</classification>
<additional_info/>
</scanner>
<scanner name="BDC/Linux-Console" application_version="7.0.2492" signature_file_version="31951">
<classification>OK</classification>
<additional_info/>
</scanner>
<scanner name="AntiVir Workstation" application_version="2.1.10-37" signature_file_version="6.38.1.41">
<classification>WORM/Allaple.Gen]</classification>
<additional_info/>
</scanner>

</virusscan_section>
<dll_handling_section>
<load_dll dll="C:\WINDOWS\system32\urdvxc.exe" successful="1" address="&#x24;400000" size="131072"/>
<load_dll dll="C:\WINDOWS\system32\ntdll.dll" successful="1" address="&#x24;7C910000" size="749568"/>
<load_dll dll="C:\WINDOWS\system32\kernel32.dll" successful="1" address="&#x24;7C800000" size="1073152"/>
<load_dll dll="C:\WINDOWS\system32\user32.dll" successful="1" address="&#x24;7E360000" size="589824"/>
<load_dll dll="C:\WINDOWS\system32\GDI32.dll" successful="1" address="&#x24;77EF0000" size="290816"/>
<load_dll dll="C:\WINDOWS\system32\advapi32.dll" successful="1" address="&#x24;77DA0000" size="696320"/>
<load_dll dll="C:\WINDOWS\system32\RPCRT4.dll" successful="1" address="&#x24;77E50000" size="593920"/>
<load_dll dll="C:\WINDOWS\system32\oleaut32.dll" successful="1" address="&#x24;770F0000" size="573440"/>
<load_dll dll="C:\WINDOWS\system32\msvcrt.dll" successful="1" address="&#x24;77BE0000" size="360448"/>
<load_dll dll="C:\WINDOWS\system32\ole32.dll" successful="1" address="&#x24;774B0000" size="1298432"/>
<load_dll dll="C:\WINDOWS\system32\comctl32.dll" successful="1" address="&#x24;5D450000" size="630784"/>
<load_dll dll="C:\WINDOWS\system32\wsock32.dll" successful="1" address="&#x24;71A30000" size="40960"/>
<load_dll dll="C:\WINDOWS\system32\WS2_32.dll" successful="1" address="&#x24;71A10000" size="94208"/>
<load_dll dll="C:\WINDOWS\system32\WS2HELP.dll" successful="1" address="&#x24;71A00000" size="32768"/>
<load_dll dll="C:\WINDOWS\system32\IMM32.DLL" successful="1" address="&#x24;76330000" size="118784"/>
<load_dll dll="C:\WINDOWS\system32\pstorec.dll" successful="1" address="&#x24;5E490000" size="53248"/>
<load_dll dll="C:\WINDOWS\system32\ATL.DLL" successful="1" address="&#x24;76AD0000" size="69632"/>
<load_dll dll="C:\WINDOWS\system32\Wship6.dll" successful="1" address="&#x24;590B0000" size="28672"/>
<load_dll dll="C:\WINDOWS\system32\Secur32.dll" successful="1" address="&#x24;77FC0000" size="69632"/>
<load_dll dll="user32.dll" successful="1" address="&#x24;7E360000" size="589824"/>
<load_dll dll="kernel32.dll" successful="1" address="&#x24;7C800000" size="1073152"/>
<load_dll dll="MSVCRT.dll" successful="1" address="&#x24;77BE0000" size="360448"/>
<load_dll dll="imagehlp.dll" successful="1" address="&#x24;76C50000" size="163840"/>
<load_dll dll="ole32.dll" successful="1" address="&#x24;774B0000" size="1298432"/>
<load_dll dll="shell32.dll" successful="1" address="&#x24;7C9D0000" size="8515584"/>
<load_dll dll="advapi32.dll" successful="1" address="&#x24;77DA0000" size="696320"/>
<load_dll dll="ws2_32.dll" successful="1" address="&#x24;71A10000" size="94208"/>
<load_dll dll="shlwapi.dll" successful="1" address="&#x24;77F40000" size="483328"/>
<load_dll dll="icmp.dll" successful="1" address="&#x24;741F0000" size="16384"/>
</dll_handling_section>
<filesystem_section>
<create_open_file filetype="File" srcfile="\Device\Tcp" creationdistribution="OPEN_ALWAYS" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ,SHARE_WRITE" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<create_open_file filetype="File" srcfile="\Device\Ip" creationdistribution="OPEN_ALWAYS" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ,SHARE_WRITE" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<create_open_file filetype="File" srcfile="\Device\Ip" creationdistribution="OPEN_ALWAYS" desiredaccess="FILE_ANY_ACCESS,FILE_READ_ACCESS,FILE_READ_DATA,FILE_LIST_DIRECTORY,FILE_WRITE_ACCESS,FILE_WRITE_DATA,FILE_ADD_FILE" shareaccess="SHARE_READ,SHARE_WRITE" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="\\.\Ip" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ,SHARE_WRITE" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="namedpipe" srcfile="\\.\PIPE\lsarpc" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ,SHARE_WRITE" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
</filesystem_section>
<registry_section>
<create_key key="HKEY_CLASSES_ROOT" subkey_or_value="CLSID\&#x7B;35349B95-82D3-1178-19ED-0E5D2312F5C0&#x7D;"/>
<set_value key="HKEY_CLASSES_ROOT\CLSID\&#x7B;35349B95-82D3-1178-19ED-0E5D2312F5C0&#x7D;" data="wksxvekswxzwelvn"/>
<create_key key="HKEY_CLASSES_ROOT" subkey_or_value="CLSID\&#x7B;35349B95-82D3-1178-19ED-0E5D2312F5C0&#x7D;\LocalServer32"/>
<set_value key="HKEY_CLASSES_ROOT\CLSID\&#x7B;35349B95-82D3-1178-19ED-0E5D2312F5C0&#x7D;\LocalServer32" data="C:\WINDOWS\system32\urdvxc.exe"/>
</registry_section>
<process_section>
<kill_process targetpid="392" showwindow="SW_HIDE" apifunction="NtTerminateProcess"/>
</process_section>
<service_section>
<open_scmanager servicename="SCM"/>
<create_service servicename="MSWindows" displayname="Network Windows Service" filename="&#x22;C:\WINDOWS\system32\urdvxc.exe&#x22; /service" starttype="SERVICE_AUTO_START" servicetype="SERVICE_WIN32_OWN_PROCESS,SERVICE_INTERACTIVE_PROCESS" desiredaccess="SERVICE_ALL_ACCESS"/>
<open_service servicename="MSWindows" desiredaccess="SERVICE_ALL_ACCESS"/>
<change_service_config servicename="MSWindows" displayname="Network Windows service management" starttype="SERVICE_NO_CHANGE"/>
<change_service_config servicename="MSWindows" starttype="SERVICE_NO_CHANGE"/>
</service_section>
<winsock_section>
<connections_unknown>
<connection connectionestablished="0" socket="0">
</connection>
</connections_unknown>
</winsock_section>

</process>
<process index="3" pid="1740" filename="C:\WINDOWS\system32\urdvxc.exe /start" filesize="57856" md5="4a589c67147073ae0c1c0102f0da8c13" username="nepenthes" parentindex="1" starttime="00:04.515" terminationtime="00:09.984" startreason="CreateProcess" terminationreason="NormalTermination" executionstatus="OK">
<virusscan_section>
<scanner name="ClamAV" application_version="0.88.2" signature_file_version="3162">
<classification>OK</classification>
<additional_info/>
</scanner>
<scanner name="BDC/Linux-Console" application_version="7.0.2492" signature_file_version="31951">
<classification>OK</classification>
<additional_info/>
</scanner>
<scanner name="AntiVir Workstation" application_version="2.1.10-37" signature_file_version="6.38.1.41">
<classification>WORM/Allaple.Gen]</classification>
<additional_info/>
</scanner>

</virusscan_section>
<dll_handling_section>
<load_dll dll="C:\WINDOWS\system32\urdvxc.exe" successful="1" address="&#x24;400000" size="131072"/>
<load_dll dll="C:\WINDOWS\system32\ntdll.dll" successful="1" address="&#x24;7C910000" size="749568"/>
<load_dll dll="C:\WINDOWS\system32\kernel32.dll" successful="1" address="&#x24;7C800000" size="1073152"/>
<load_dll dll="C:\WINDOWS\system32\user32.dll" successful="1" address="&#x24;7E360000" size="589824"/>
<load_dll dll="C:\WINDOWS\system32\GDI32.dll" successful="1" address="&#x24;77EF0000" size="290816"/>
<load_dll dll="C:\WINDOWS\system32\advapi32.dll" successful="1" address="&#x24;77DA0000" size="696320"/>
<load_dll dll="C:\WINDOWS\system32\RPCRT4.dll" successful="1" address="&#x24;77E50000" size="593920"/>
<load_dll dll="C:\WINDOWS\system32\oleaut32.dll" successful="1" address="&#x24;770F0000" size="573440"/>
<load_dll dll="C:\WINDOWS\system32\msvcrt.dll" successful="1" address="&#x24;77BE0000" size="360448"/>
<load_dll dll="C:\WINDOWS\system32\ole32.dll" successful="1" address="&#x24;774B0000" size="1298432"/>
<load_dll dll="C:\WINDOWS\system32\comctl32.dll" successful="1" address="&#x24;5D450000" size="630784"/>
<load_dll dll="C:\WINDOWS\system32\wsock32.dll" successful="1" address="&#x24;71A30000" size="40960"/>
<load_dll dll="C:\WINDOWS\system32\WS2_32.dll" successful="1" address="&#x24;71A10000" size="94208"/>
<load_dll dll="C:\WINDOWS\system32\WS2HELP.dll" successful="1" address="&#x24;71A00000" size="32768"/>
<load_dll dll="C:\WINDOWS\system32\IMM32.DLL" successful="1" address="&#x24;76330000" size="118784"/>
<load_dll dll="C:\WINDOWS\system32\pstorec.dll" successful="1" address="&#x24;5E490000" size="53248"/>
<load_dll dll="C:\WINDOWS\system32\ATL.DLL" successful="1" address="&#x24;76AD0000" size="69632"/>
<load_dll dll="C:\WINDOWS\system32\Wship6.dll" successful="1" address="&#x24;590B0000" size="28672"/>
<load_dll dll="C:\WINDOWS\system32\Secur32.dll" successful="1" address="&#x24;77FC0000" size="69632"/>
<load_dll dll="user32.dll" successful="1" address="&#x24;7E360000" size="589824"/>
<load_dll dll="kernel32.dll" successful="1" address="&#x24;7C800000" size="1073152"/>
<load_dll dll="MSVCRT.dll" successful="1" address="&#x24;77BE0000" size="360448"/>
<load_dll dll="imagehlp.dll" successful="1" address="&#x24;76C50000" size="163840"/>
<load_dll dll="ole32.dll" successful="1" address="&#x24;774B0000" size="1298432"/>
<load_dll dll="shell32.dll" successful="1" address="&#x24;7C9D0000" size="8515584"/>
<load_dll dll="advapi32.dll" successful="1" address="&#x24;77DA0000" size="696320"/>
<load_dll dll="ws2_32.dll" successful="1" address="&#x24;71A10000" size="94208"/>
<load_dll dll="shlwapi.dll" successful="1" address="&#x24;77F40000" size="483328"/>
<load_dll dll="icmp.dll" successful="1" address="&#x24;741F0000" size="16384"/>
</dll_handling_section>
<filesystem_section>
<create_open_file filetype="File" srcfile="\Device\Tcp" creationdistribution="OPEN_ALWAYS" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ,SHARE_WRITE" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<create_open_file filetype="File" srcfile="\Device\Ip" creationdistribution="OPEN_ALWAYS" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ,SHARE_WRITE" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<create_open_file filetype="File" srcfile="\Device\Ip" creationdistribution="OPEN_ALWAYS" desiredaccess="FILE_ANY_ACCESS,FILE_READ_ACCESS,FILE_READ_DATA,FILE_LIST_DIRECTORY,FILE_WRITE_ACCESS,FILE_WRITE_DATA,FILE_ADD_FILE" shareaccess="SHARE_READ,SHARE_WRITE" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="\\.\Ip" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ,SHARE_WRITE" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
</filesystem_section>
<registry_section>
<open_key key="HKEY_CLASSES_ROOT" subkey_or_value="CLSID\&#x7B;35349B95-82D3-1178-19ED-0E5D2312F5C0&#x7D;"/>
<set_value key="HKEY_CLASSES_ROOT\CLSID\&#x7B;35349B95-82D3-1178-19ED-0E5D2312F5C0&#x7D;" data="tjebkltqlbbhtzlj"/>
<open_key key="HKEY_CLASSES_ROOT" subkey_or_value="CLSID\&#x7B;35349B95-82D3-1178-19ED-0E5D2312F5C0&#x7D;\LocalServer32"/>
<set_value key="HKEY_CLASSES_ROOT\CLSID\&#x7B;35349B95-82D3-1178-19ED-0E5D2312F5C0&#x7D;\LocalServer32" data="C:\WINDOWS\system32\urdvxc.exe"/>
</registry_section>
<process_section>
<kill_process targetpid="1740" showwindow="SW_HIDE" apifunction="NtTerminateProcess"/>
</process_section>
<service_section>
<open_scmanager servicename="SCM"/>
<open_service servicename="MSWindows" desiredaccess="SERVICE_ALL_ACCESS"/>
<start_service servicename="MSWindows"/>
</service_section>
<winsock_section>
<connections_unknown>
<connection connectionestablished="0" socket="0">
</connection>
</connections_unknown>
</winsock_section>

</process>
<process index="4" pid="680" filename="services.exe" filesize="108544" md5="edb6b81761bd60f32f740bbc40afb676" username="SYSTEM" parentindex="0" starttime="00:04.859" terminationtime="02:01.390" startreason="SCM" terminationreason="Timeout" executionstatus="OK">
<process_section>
<create_process commandline="&#x22;C:\WINDOWS\system32\urdvxc.exe&#x22; /service" targetpid="1800" creationflags="CREATE_SUSPENDED,CREATE_UNICODE_ENVIRONMENT,DETACHED_PROCESS" showwindow="SW_HIDE" apifunction="CreateProcessW" successful="1"/>
</process_section>
</process>
<process index="5" pid="1764" filename="C:\WINDOWS\system32\urdvxc.exe /uninstallservice patch:c:\4a589c67147073ae0c1c0102f0da8c13.exe" filesize="57856" md5="4a589c67147073ae0c1c0102f0da8c13" username="nepenthes" parentindex="1" starttime="00:06.187" terminationtime="00:09.968" startreason="CreateProcess" terminationreason="NormalTermination" executionstatus="OK">
<virusscan_section>
<scanner name="ClamAV" application_version="0.88.2" signature_file_version="3162">
<classification>OK</classification>
<additional_info/>
</scanner>
<scanner name="BDC/Linux-Console" application_version="7.0.2492" signature_file_version="31951">
<classification>OK</classification>
<additional_info/>
</scanner>
<scanner name="AntiVir Workstation" application_version="2.1.10-37" signature_file_version="6.38.1.41">
<classification>WORM/Allaple.Gen]</classification>
<additional_info/>
</scanner>

</virusscan_section>
<dll_handling_section>
<load_dll dll="C:\WINDOWS\system32\urdvxc.exe" successful="1" address="&#x24;400000" size="131072"/>
<load_dll dll="C:\WINDOWS\system32\ntdll.dll" successful="1" address="&#x24;7C910000" size="749568"/>
<load_dll dll="C:\WINDOWS\system32\kernel32.dll" successful="1" address="&#x24;7C800000" size="1073152"/>
<load_dll dll="C:\WINDOWS\system32\user32.dll" successful="1" address="&#x24;7E360000" size="589824"/>
<load_dll dll="C:\WINDOWS\system32\GDI32.dll" successful="1" address="&#x24;77EF0000" size="290816"/>
<load_dll dll="C:\WINDOWS\system32\advapi32.dll" successful="1" address="&#x24;77DA0000" size="696320"/>
<load_dll dll="C:\WINDOWS\system32\RPCRT4.dll" successful="1" address="&#x24;77E50000" size="593920"/>
<load_dll dll="C:\WINDOWS\system32\oleaut32.dll" successful="1" address="&#x24;770F0000" size="573440"/>
<load_dll dll="C:\WINDOWS\system32\msvcrt.dll" successful="1" address="&#x24;77BE0000" size="360448"/>
<load_dll dll="C:\WINDOWS\system32\ole32.dll" successful="1" address="&#x24;774B0000" size="1298432"/>
<load_dll dll="C:\WINDOWS\system32\comctl32.dll" successful="1" address="&#x24;5D450000" size="630784"/>
<load_dll dll="C:\WINDOWS\system32\wsock32.dll" successful="1" address="&#x24;71A30000" size="40960"/>
<load_dll dll="C:\WINDOWS\system32\WS2_32.dll" successful="1" address="&#x24;71A10000" size="94208"/>
<load_dll dll="C:\WINDOWS\system32\WS2HELP.dll" successful="1" address="&#x24;71A00000" size="32768"/>
<load_dll dll="C:\WINDOWS\system32\IMM32.DLL" successful="1" address="&#x24;76330000" size="118784"/>
<load_dll dll="C:\WINDOWS\system32\pstorec.dll" successful="1" address="&#x24;5E490000" size="53248"/>
<load_dll dll="C:\WINDOWS\system32\ATL.DLL" successful="1" address="&#x24;76AD0000" size="69632"/>
<load_dll dll="C:\WINDOWS\system32\Wship6.dll" successful="1" address="&#x24;590B0000" size="28672"/>
<load_dll dll="C:\WINDOWS\system32\Secur32.dll" successful="1" address="&#x24;77FC0000" size="69632"/>
<load_dll dll="user32.dll" successful="1" address="&#x24;7E360000" size="589824"/>
<load_dll dll="kernel32.dll" successful="1" address="&#x24;7C800000" size="1073152"/>
<load_dll dll="MSVCRT.dll" successful="1" address="&#x24;77BE0000" size="360448"/>
<load_dll dll="imagehlp.dll" successful="1" address="&#x24;76C50000" size="163840"/>
<load_dll dll="ole32.dll" successful="1" address="&#x24;774B0000" size="1298432"/>
<load_dll dll="shell32.dll" successful="1" address="&#x24;7C9D0000" size="8515584"/>
<load_dll dll="advapi32.dll" successful="1" address="&#x24;77DA0000" size="696320"/>
<load_dll dll="ws2_32.dll" successful="1" address="&#x24;71A10000" size="94208"/>
<load_dll dll="shlwapi.dll" successful="1" address="&#x24;77F40000" size="483328"/>
<load_dll dll="icmp.dll" successful="1" address="&#x24;741F0000" size="16384"/>
</dll_handling_section>
<filesystem_section>
<create_open_file filetype="File" srcfile="\Device\Tcp" creationdistribution="OPEN_ALWAYS" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ,SHARE_WRITE" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<create_open_file filetype="File" srcfile="\Device\Ip" creationdistribution="OPEN_ALWAYS" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ,SHARE_WRITE" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<create_open_file filetype="File" srcfile="\Device\Ip" creationdistribution="OPEN_ALWAYS" desiredaccess="FILE_ANY_ACCESS,FILE_READ_ACCESS,FILE_READ_DATA,FILE_LIST_DIRECTORY,FILE_WRITE_ACCESS,FILE_WRITE_DATA,FILE_ADD_FILE" shareaccess="SHARE_READ,SHARE_WRITE" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="\\.\Ip" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ,SHARE_WRITE" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<delete_file filetype="File" srcfile="c:\4a589c67147073ae0c1c0102f0da8c13.exe" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
</filesystem_section>
<registry_section>
<open_key key="HKEY_CLASSES_ROOT" subkey_or_value="CLSID\&#x7B;35349B95-82D3-1178-19ED-0E5D2312F5C0&#x7D;"/>
<set_value key="HKEY_CLASSES_ROOT\CLSID\&#x7B;35349B95-82D3-1178-19ED-0E5D2312F5C0&#x7D;" data="sbcjwecjjhjwnlhw"/>
<open_key key="HKEY_CLASSES_ROOT" subkey_or_value="CLSID\&#x7B;35349B95-82D3-1178-19ED-0E5D2312F5C0&#x7D;\LocalServer32"/>
<set_value key="HKEY_CLASSES_ROOT\CLSID\&#x7B;35349B95-82D3-1178-19ED-0E5D2312F5C0&#x7D;\LocalServer32" data="C:\WINDOWS\system32\urdvxc.exe"/>
</registry_section>
<process_section>
<kill_process targetpid="1764" showwindow="SW_HIDE" apifunction="NtTerminateProcess"/>
</process_section>
<winsock_section>
<connections_unknown>
<connection connectionestablished="0" socket="0">
</connection>
</connections_unknown>
</winsock_section>

</process>
<process index="6" pid="1800" filename="C:\WINDOWS\system32\urdvxc.exe /service" filesize="57856" md5="4a589c67147073ae0c1c0102f0da8c13" username="SYSTEM" parentindex="4" starttime="00:07.422" terminationtime="02:00.984" startreason="CreateProcess" terminationreason="Timeout" executionstatus="OK">
<virusscan_section>
<scanner name="ClamAV" application_version="0.88.2" signature_file_version="3162">
<classification>OK</classification>
<additional_info/>
</scanner>
<scanner name="BDC/Linux-Console" application_version="7.0.2492" signature_file_version="31951">
<classification>OK</classification>
<additional_info/>
</scanner>
<scanner name="AntiVir Workstation" application_version="2.1.10-37" signature_file_version="6.38.1.41">
<classification>WORM/Allaple.Gen]</classification>
<additional_info/>
</scanner>

</virusscan_section>
<dll_handling_section>
<load_dll dll="C:\WINDOWS\system32\urdvxc.exe" successful="1" address="&#x24;400000" size="131072"/>
<load_dll dll="C:\WINDOWS\system32\ntdll.dll" successful="1" address="&#x24;7C910000" size="749568"/>
<load_dll dll="C:\WINDOWS\system32\kernel32.dll" successful="1" address="&#x24;7C800000" size="1073152"/>
<load_dll dll="C:\WINDOWS\system32\user32.dll" successful="1" address="&#x24;7E360000" size="589824"/>
<load_dll dll="C:\WINDOWS\system32\GDI32.dll" successful="1" address="&#x24;77EF0000" size="290816"/>
<load_dll dll="C:\WINDOWS\system32\advapi32.dll" successful="1" address="&#x24;77DA0000" size="696320"/>
<load_dll dll="C:\WINDOWS\system32\RPCRT4.dll" successful="1" address="&#x24;77E50000" size="593920"/>
<load_dll dll="C:\WINDOWS\system32\oleaut32.dll" successful="1" address="&#x24;770F0000" size="573440"/>
<load_dll dll="C:\WINDOWS\system32\msvcrt.dll" successful="1" address="&#x24;77BE0000" size="360448"/>
<load_dll dll="C:\WINDOWS\system32\ole32.dll" successful="1" address="&#x24;774B0000" size="1298432"/>
<load_dll dll="C:\WINDOWS\system32\comctl32.dll" successful="1" address="&#x24;5D450000" size="630784"/>
<load_dll dll="C:\WINDOWS\system32\wsock32.dll" successful="1" address="&#x24;71A30000" size="40960"/>
<load_dll dll="C:\WINDOWS\system32\WS2_32.dll" successful="1" address="&#x24;71A10000" size="94208"/>
<load_dll dll="C:\WINDOWS\system32\WS2HELP.dll" successful="1" address="&#x24;71A00000" size="32768"/>
<load_dll dll="C:\WINDOWS\system32\IMM32.DLL" successful="1" address="&#x24;76330000" size="118784"/>
<load_dll dll="C:\WINDOWS\system32\pstorec.dll" successful="1" address="&#x24;5E490000" size="53248"/>
<load_dll dll="C:\WINDOWS\system32\ATL.DLL" successful="1" address="&#x24;76AD0000" size="69632"/>
<load_dll dll="C:\WINDOWS\system32\Wship6.dll" successful="1" address="&#x24;590B0000" size="28672"/>
<load_dll dll="C:\WINDOWS\system32\Secur32.dll" successful="1" address="&#x24;77FC0000" size="69632"/>
<load_dll dll="user32.dll" successful="1" address="&#x24;7E360000" size="589824"/>
<load_dll dll="kernel32.dll" successful="1" address="&#x24;7C800000" size="1073152"/>
<load_dll dll="MSVCRT.dll" successful="1" address="&#x24;77BE0000" size="360448"/>
<load_dll dll="imagehlp.dll" successful="1" address="&#x24;76C50000" size="163840"/>
<load_dll dll="ole32.dll" successful="1" address="&#x24;774B0000" size="1298432"/>
<load_dll dll="shell32.dll" successful="1" address="&#x24;7C9D0000" size="8515584"/>
<load_dll dll="advapi32.dll" successful="1" address="&#x24;77DA0000" size="696320"/>
<load_dll dll="ws2_32.dll" successful="1" address="&#x24;71A10000" size="94208"/>
<load_dll dll="shlwapi.dll" successful="1" address="&#x24;77F40000" size="483328"/>
<load_dll dll="icmp.dll" successful="1" address="&#x24;741F0000" size="16384"/>
<load_dll dll="crypt32.dll" successful="1" address="&#x24;1230001" size="0"/>
<load_dll dll="KERNEL32.dll" successful="1" address="&#x24;7C800000" size="1073152"/>
</dll_handling_section>
<filesystem_section>
<create_open_file filetype="File" srcfile="\Device\Tcp" creationdistribution="OPEN_ALWAYS" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ,SHARE_WRITE" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<create_open_file filetype="File" srcfile="\Device\Ip" creationdistribution="OPEN_ALWAYS" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ,SHARE_WRITE" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<create_open_file filetype="File" srcfile="\Device\Ip" creationdistribution="OPEN_ALWAYS" desiredaccess="FILE_ANY_ACCESS,FILE_READ_ACCESS,FILE_READ_DATA,FILE_LIST_DIRECTORY,FILE_WRITE_ACCESS,FILE_WRITE_DATA,FILE_ADD_FILE" shareaccess="SHARE_READ,SHARE_WRITE" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="\\.\Ip" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ,SHARE_WRITE" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\analysis\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\analysis\log\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\analysis\log\3bc1a8c02654bab5091a78f9aff3b41a.exe\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\analysis\log\3bc1a8c02654bab5091a78f9aff3b41a.exe\run_1\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\analysis\log\3bc1a8c02654bab5091a78f9aff3b41a.exe\run_1\proc_1\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\analysis\log\4a589c67147073ae0c1c0102f0da8c13.exe\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\analysis\log\4a589c67147073ae0c1c0102f0da8c13.exe\run_1\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\analysis\log\4a589c67147073ae0c1c0102f0da8c13.exe\run_1\proc_1\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\analysis\log\4a589c67147073ae0c1c0102f0da8c13.exe\run_1\proc_2\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\analysis\log\4a589c67147073ae0c1c0102f0da8c13.exe\run_1\proc_3\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\analysis\log\4a589c67147073ae0c1c0102f0da8c13.exe\run_1\proc_4\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\analysis\log\4a589c67147073ae0c1c0102f0da8c13.exe\run_1\proc_5\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\analysis\log\4a589c67147073ae0c1c0102f0da8c13.exe\run_1\proc_6\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft\Crypto\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft\Crypto\DSS\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft\Crypto\DSS\MachineKeys\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft\Crypto\RSA\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft\Crypto\RSA\MachineKeys\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft\Crypto\RSA\S-1-5-18\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft\HTML Help\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft\Media Index\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft\Media Player\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft\Network\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft\Network\Connections\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft\Network\Connections\Cm\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft\Network\Connections\Pbk\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft\Network\Downloader\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft\User Account Pictures\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft\User Account Pictures\Default Pictures\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Windows Genuine Advantage\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Windows Genuine Advantage\data\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Desktop\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Dokumente\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Dokumente\Eigene Bilder\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Dokumente\Eigene Bilder\Beispielbilder\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Dokumente\Eigene Musik\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Dokumente\Eigene Musik\Beispielmusik\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Dokumente\Eigene Musik\My Playlists\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Dokumente\Eigene Musik\Sample Playlists\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Dokumente\Eigene Musik\Sample Playlists\000AAFE6\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Dokumente\Eigene Musik\Sync Playlists\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Dokumente\Eigene Musik\Sync Playlists\0013A106\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Dokumente\Eigene Videos\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\DRM\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Favoriten\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Startmen&#xFC;\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Startmen&#xFC;\Programme\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Startmen&#xFC;\Programme\Autostart\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Startmen&#xFC;\Programme\Spiele\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Startmen&#xFC;\Programme\Verwaltung\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Startmen&#xFC;\Programme\Zubeh&#xF6;r\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Startmen&#xFC;\Programme\Zubeh&#xF6;r\Eingabehilfen\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Startmen&#xFC;\Programme\Zubeh&#xF6;r\Kommunikation\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Startmen&#xFC;\Programme\Zubeh&#xF6;r\Systemprogramme\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Startmen&#xFC;\Programme\Zubeh&#xF6;r\Unterhaltungsmedien\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\All Users\Vorlagen\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\Anwendungsdaten\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\Anwendungsdaten\Microsoft\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\Anwendungsdaten\Microsoft\Internet Explorer\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\Anwendungsdaten\Microsoft\Media Player\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\Anwendungsdaten\Microsoft\SystemCertificates\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\Anwendungsdaten\Microsoft\SystemCertificates\My\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\Anwendungsdaten\Microsoft\SystemCertificates\My\Certificates\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\Anwendungsdaten\Microsoft\SystemCertificates\My\CRLs\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\Anwendungsdaten\Microsoft\SystemCertificates\My\CTLs\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\Cookies\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\Desktop\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\Druckumgebung\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\Favoriten\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\Lokale Einstellungen\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\Lokale Einstellungen\Anwendungsdaten\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\Lokale Einstellungen\Anwendungsdaten\Microsoft\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\Lokale Einstellungen\Anwendungsdaten\Microsoft\Media Player\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\Lokale Einstellungen\Anwendungsdaten\Microsoft\Windows Media\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\Lokale Einstellungen\Anwendungsdaten\Microsoft\Windows Media\9.0\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\Lokale Einstellungen\Temp\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\Lokale Einstellungen\Temporary Internet Files\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\Lokale Einstellungen\Temporary Internet Files\Content.IE5\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\Lokale Einstellungen\Temporary Internet Files\Content.IE5\4HW6KRBV\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\Lokale Einstellungen\Temporary Internet Files\Content.IE5\82L6938X\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\Lokale Einstellungen\Temporary Internet Files\Content.IE5\BEKC51JM\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\Lokale Einstellungen\Temporary Internet Files\Content.IE5\EERNDD5C\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\Lokale Einstellungen\Verlauf\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\Lokale Einstellungen\Verlauf\History.IE5\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\Netzwerkumgebung\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\Recent\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\SendTo\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\Startmen&#xFC;\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\Startmen&#xFC;\Programme\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\Startmen&#xFC;\Programme\Autostart\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\Startmen&#xFC;\Programme\Zubeh&#xF6;r\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\Startmen&#xFC;\Programme\Zubeh&#xF6;r\Eingabehilfen\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\Startmen&#xFC;\Programme\Zubeh&#xF6;r\Unterhaltungsmedien\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\Default User\Vorlagen\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\LocalService\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\Microsoft\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\Microsoft\Credentials\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\Microsoft\Credentials\S-1-5-19\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\Microsoft\Internet Explorer\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\Microsoft\Media Player\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\Microsoft\SystemCertificates\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\Microsoft\SystemCertificates\My\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\Microsoft\SystemCertificates\My\Certificates\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\Microsoft\SystemCertificates\My\CRLs\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\Microsoft\SystemCertificates\My\CTLs\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\LocalService\Cookies\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\Microsoft\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\Microsoft\Credentials\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\Microsoft\Credentials\S-1-5-19\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\Microsoft\Windows\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Temp\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Temporary Internet Files\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Temporary Internet Files\Content.IE5\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Temporary Internet Files\Content.IE5\WLSRWJGL\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Temporary Internet Files\Content.IE5\WNO74H23\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Temporary Internet Files\Content.IE5\WPKRKBIX\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Temporary Internet Files\Content.IE5\YR69CDSR\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Verlauf\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Verlauf\History.IE5\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Anwendungsdaten\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Anwendungsdaten\Identities\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Anwendungsdaten\Identities\&#x7B;E38A6087-A5EB-4E5E-B1FC-2CDC6DE6552A&#x7D;\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Anwendungsdaten\Microsoft\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Anwendungsdaten\Microsoft\Credentials\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Anwendungsdaten\Microsoft\Credentials\S-1-5-21-1645522239-706699826-839522115-1003\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Anwendungsdaten\Microsoft\CryptnetUrlCache\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Anwendungsdaten\Microsoft\CryptnetUrlCache\Content\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Anwendungsdaten\Microsoft\CryptnetUrlCache\MetaData\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Anwendungsdaten\Microsoft\HTML Help\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Anwendungsdaten\Microsoft\Internet Explorer\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Anwendungsdaten\Microsoft\Media Player\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Anwendungsdaten\Microsoft\MMC\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Anwendungsdaten\Microsoft\Protect\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Anwendungsdaten\Microsoft\Protect\S-1-5-21-1645522239-706699826-839522115-1003\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Anwendungsdaten\Microsoft\SystemCertificates\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Anwendungsdaten\Microsoft\SystemCertificates\My\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Anwendungsdaten\Microsoft\SystemCertificates\My\Certificates\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Anwendungsdaten\Microsoft\SystemCertificates\My\CRLs\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Anwendungsdaten\Microsoft\SystemCertificates\My\CTLs\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Anwendungsdaten\Microsoft\Windows\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Anwendungsdaten\Microsoft\Windows\Themes\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Cookies\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Desktop\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Druckumgebung\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Eigene Dateien\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Eigene Dateien\Eigene Bilder\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Eigene Dateien\Eigene Musik\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Favoriten\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Favoriten\Links\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Favoriten\Microsoft-Websites\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Anwendungsdaten\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Anwendungsdaten\Microsoft\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Anwendungsdaten\Microsoft\CD Burning\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Anwendungsdaten\Microsoft\Credentials\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Anwendungsdaten\Microsoft\Credentials\S-1-5-21-1645522239-706699826-839522115-1003\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Anwendungsdaten\Microsoft\Feeds\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Anwendungsdaten\Microsoft\Feeds Cache\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Anwendungsdaten\Microsoft\Feeds Cache\2S8V3X20\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Anwendungsdaten\Microsoft\Feeds Cache\8CFHUWDO\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Anwendungsdaten\Microsoft\Feeds Cache\HGLKKBTK\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Anwendungsdaten\Microsoft\Feeds Cache\RX7PS6IT\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Anwendungsdaten\Microsoft\HelpCtr\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Anwendungsdaten\Microsoft\Internet Explorer\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Anwendungsdaten\Microsoft\Media Player\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Anwendungsdaten\Microsoft\Windows\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Anwendungsdaten\Microsoft\Windows Media\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Anwendungsdaten\Microsoft\Windows Media\10.0\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Anwendungsdaten\Microsoft\Windows Media\9.0\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Apps\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Apps\2.0\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Apps\2.0\X70WZZHH.6MN\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Apps\2.0\X70WZZHH.6MN\XDE4K7QW.8OO\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Apps\2.0\X70WZZHH.6MN\XDE4K7QW.8OO\manifests\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temp\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\AntiPhishing\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\4HW6KRBV\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\4HW6KRBV\blank[1].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\4HW6KRBV\blank[1].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<create_open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\4HW6KRBV\blank[1].htm" creationdistribution="OPEN_ALWAYS" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ,SHARE_WRITE" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\WINDOWS\system32\urdvxc.exe" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<create_open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\4HW6KRBV\cnwensee.exe" creationdistribution="OPEN_ALWAYS" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ,SHARE_WRITE" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\4HW6KRBV\default[1].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\4HW6KRBV\default[1].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\4HW6KRBV\firstpage[1].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\4HW6KRBV\firstpage[1].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\4HW6KRBV\footer[1].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\4HW6KRBV\footer[1].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\4HW6KRBV\footer[2].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\4HW6KRBV\footer[2].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\4HW6KRBV\InstallStatus[1].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\4HW6KRBV\InstallStatus[1].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\4HW6KRBV\InstallStatus[2].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\4HW6KRBV\InstallStatus[2].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\4HW6KRBV\js_ng_msn_light_0109[2].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\4HW6KRBV\js_ng_msn_light_0109[2].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\4HW6KRBV\mstoolbar[1].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\4HW6KRBV\mstoolbar[1].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\4HW6KRBV\mstoolbar[2].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\4HW6KRBV\mstoolbar[2].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\4HW6KRBV\news[1].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\4HW6KRBV\news[1].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\4HW6KRBV\splash[1].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\4HW6KRBV\splash[1].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\4HW6KRBV\toc[1].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\4HW6KRBV\toc[1].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\4HW6KRBV\toc[2].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\4HW6KRBV\toc[2].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\4HW6KRBV\windowsupdate.microsoft[1].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\4HW6KRBV\windowsupdate.microsoft[1].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<create_open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\4HW6KRBV\windowsupdate.microsoft[1].htm" creationdistribution="OPEN_ALWAYS" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ,SHARE_WRITE" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\82L6938X\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\82L6938X\2&#x25;3B&#x25;7Esscs&#x25;3D&#x25;3f;sz=300x250;ord=6404225[1].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\82L6938X\2&#x25;3B&#x25;7Esscs&#x25;3D&#x25;3f;sz=300x250;ord=6404225[1].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<create_open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\82L6938X\2&#x25;3B&#x25;7Esscs&#x25;3D&#x25;3f;sz=300x250;ord=6404225[1].htm" creationdistribution="OPEN_ALWAYS" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ,SHARE_WRITE" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<create_open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\82L6938X\kxltrxjb.exe" creationdistribution="OPEN_ALWAYS" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ,SHARE_WRITE" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\82L6938X\2&#x25;3B&#x25;7Esscs&#x25;3D&#x25;3f;sz=300x250;ord=7296006[1].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\82L6938X\2&#x25;3B&#x25;7Esscs&#x25;3D&#x25;3f;sz=300x250;ord=7296006[1].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<create_open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\82L6938X\2&#x25;3B&#x25;7Esscs&#x25;3D&#x25;3f;sz=300x250;ord=7296006[1].htm" creationdistribution="OPEN_ALWAYS" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ,SHARE_WRITE" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\82L6938X\blank[1].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\82L6938X\blank[1].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<create_open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\82L6938X\blank[1].htm" creationdistribution="OPEN_ALWAYS" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ,SHARE_WRITE" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\82L6938X\default[2].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\82L6938X\default[2].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\82L6938X\footer[1].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\82L6938X\footer[1].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\82L6938X\footer[2].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\82L6938X\footer[2].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\82L6938X\InstallStatus[1].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\82L6938X\InstallStatus[1].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\82L6938X\InstallStatus[2].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\82L6938X\InstallStatus[2].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\82L6938X\mstoolbar[1].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\82L6938X\mstoolbar[1].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\82L6938X\mstoolbar[2].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\82L6938X\mstoolbar[2].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\82L6938X\NavBar[1].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\82L6938X\NavBar[1].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<create_open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\82L6938X\NavBar[1].htm" creationdistribution="OPEN_ALWAYS" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ,SHARE_WRITE" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\82L6938X\runonce2[1].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\82L6938X\runonce2[1].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\82L6938X\toc[1].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\82L6938X\toc[1].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\82L6938X\toc[2].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\82L6938X\toc[2].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\BEKC51JM\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\BEKC51JM\Context[1].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\BEKC51JM\Context[1].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\BEKC51JM\default[2].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\BEKC51JM\default[2].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\BEKC51JM\default[4].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\BEKC51JM\default[4].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\BEKC51JM\js_ng_msn_light_0109[1].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\BEKC51JM\js_ng_msn_light_0109[1].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\EERNDD5C\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\EERNDD5C\2&#x25;3B&#x25;7Esscs&#x25;3D&#x25;3f;sz=300x250;ord=3045178[1].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\EERNDD5C\2&#x25;3B&#x25;7Esscs&#x25;3D&#x25;3f;sz=300x250;ord=3045178[1].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<create_open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\EERNDD5C\2&#x25;3B&#x25;7Esscs&#x25;3D&#x25;3f;sz=300x250;ord=3045178[1].htm" creationdistribution="OPEN_ALWAYS" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ,SHARE_WRITE" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<create_open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\EERNDD5C\rqtrwzsv.exe" creationdistribution="OPEN_ALWAYS" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ,SHARE_WRITE" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\EERNDD5C\2&#x25;3B&#x25;7Esscs&#x25;3D&#x25;3f;sz=300x250;ord=5488850[1].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\EERNDD5C\2&#x25;3B&#x25;7Esscs&#x25;3D&#x25;3f;sz=300x250;ord=5488850[1].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<create_open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\EERNDD5C\2&#x25;3B&#x25;7Esscs&#x25;3D&#x25;3f;sz=300x250;ord=5488850[1].htm" creationdistribution="OPEN_ALWAYS" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ,SHARE_WRITE" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\EERNDD5C\default[2].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\EERNDD5C\default[2].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\EERNDD5C\footer[1].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\EERNDD5C\footer[1].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\EERNDD5C\foo[1].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\EERNDD5C\foo[1].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<create_open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\EERNDD5C\foo[1].htm" creationdistribution="OPEN_ALWAYS" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ,SHARE_WRITE" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\EERNDD5C\HHWRAPPER[1].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\EERNDD5C\HHWRAPPER[1].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\EERNDD5C\mstoolbar[1].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\EERNDD5C\mstoolbar[1].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\EERNDD5C\resultslist[1].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\EERNDD5C\resultslist[1].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\EERNDD5C\resultslist[2].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\EERNDD5C\resultslist[2].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\EERNDD5C\toc[1].htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Temporary Internet Files\Content.IE5\EERNDD5C\toc[1].htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Verlauf\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Verlauf\History.IE5\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Verlauf\History.IE5\MSHist012007040220070409\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Lokale Einstellungen\Verlauf\History.IE5\MSHist012007041820070419\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Netzwerkumgebung\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Recent\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\SendTo\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Startmen&#xFC;\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Startmen&#xFC;\Programme\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Startmen&#xFC;\Programme\Autostart\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Startmen&#xFC;\Programme\Zubeh&#xF6;r\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Startmen&#xFC;\Programme\Zubeh&#xF6;r\Eingabehilfen\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Startmen&#xFC;\Programme\Zubeh&#xF6;r\Systemprogramme\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Startmen&#xFC;\Programme\Zubeh&#xF6;r\Unterhaltungsmedien\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\UserData\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\UserData\AXKGP7LO\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\UserData\FGXAUJ06\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\UserData\JI9L2B9Z\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\UserData\SNV00AW8\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\nepenthes\Vorlagen\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\NetworkService\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Microsoft\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Microsoft\Credentials\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Microsoft\Credentials\S-1-5-20\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Microsoft\Internet Explorer\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Microsoft\Media Player\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Microsoft\SystemCertificates\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Microsoft\SystemCertificates\My\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Microsoft\SystemCertificates\My\Certificates\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Microsoft\SystemCertificates\My\CRLs\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Microsoft\SystemCertificates\My\CTLs\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\NetworkService\Cookies\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Anwendungsdaten\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Anwendungsdaten\Microsoft\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Anwendungsdaten\Microsoft\Credentials\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Anwendungsdaten\Microsoft\Credentials\S-1-5-20\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Anwendungsdaten\Microsoft\Windows\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Temp\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Temporary Internet Files\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Temporary Internet Files\Content.IE5\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Temporary Internet Files\Content.IE5\4HW6KRBV\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Temporary Internet Files\Content.IE5\82L6938X\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Temporary Internet Files\Content.IE5\BEKC51JM\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Temporary Internet Files\Content.IE5\EERNDD5C\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Verlauf\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Verlauf\History.IE5\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Programme\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Programme\ComPlus Applications\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Programme\Gemeinsame Dateien\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Programme\Gemeinsame Dateien\Dienste\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Programme\Gemeinsame Dateien\Microsoft Shared\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Programme\Gemeinsame Dateien\Microsoft Shared\DAO\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Programme\Gemeinsame Dateien\Microsoft Shared\DW\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Programme\Gemeinsame Dateien\Microsoft Shared\DW\1025\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Programme\Gemeinsame Dateien\Microsoft Shared\DW\1028\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Programme\Gemeinsame Dateien\Microsoft Shared\DW\1031\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Programme\Gemeinsame Dateien\Microsoft Shared\DW\1033\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Programme\Gemeinsame Dateien\Microsoft Shared\DW\1036\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Programme\Gemeinsame Dateien\Microsoft Shared\DW\1040\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Programme\Gemeinsame Dateien\Microsoft Shared\DW\1041\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Programme\Gemeinsame Dateien\Microsoft Shared\DW\1042\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Programme\Gemeinsame Dateien\Microsoft Shared\DW\2052\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Programme\Gemeinsame Dateien\Microsoft Shared\DW\3082\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Programme\Gemeinsame Dateien\Microsoft Shared\MSInfo\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Programme\Gemeinsame Dateien\Microsoft Shared\Speech\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Programme\Gemeinsame Dateien\Microsoft Shared\Speech\1031\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<find_file filetype="File" srcfile="C:\Programme\Gemeinsame Dateien\Microsoft Shared\Stationery\&#x2A;.&#x2A;" desiredaccess="FILE_ANY_ACCESS" flags="SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Programme\Gemeinsame Dateien\Microsoft Shared\Stationery\Bl&#xE4;tter.htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Programme\Gemeinsame Dateien\Microsoft Shared\Stationery\Bl&#xE4;tter.htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<create_open_file filetype="File" srcfile="C:\Programme\Gemeinsame Dateien\Microsoft Shared\Stationery\Bl&#xE4;tter.htm" creationdistribution="OPEN_ALWAYS" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ,SHARE_WRITE" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<create_open_file filetype="File" srcfile="C:\Programme\Gemeinsame Dateien\Microsoft Shared\Stationery\tbtjkhsw.exe" creationdistribution="OPEN_ALWAYS" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ,SHARE_WRITE" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<set_file_attributes filetype="File" srcfile="C:\Programme\Gemeinsame Dateien\Microsoft Shared\Stationery\Efeu.htm" desiredaccess="FILE_ANY_ACCESS" flags="FILE_ATTRIBUTE_ARCHIVE,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<open_file filetype="File" srcfile="C:\Programme\Gemeinsame Dateien\Microsoft Shared\Stationery\Efeu.htm" creationdistribution="OPEN_EXISTING" desiredaccess="FILE_ANY_ACCESS" shareaccess="SHARE_READ" flags="FILE_ATTRIBUTE_NORMAL,SECURITY_ANONYMOUS" fileinformationclass="FileBasicInformation"/>
<create_open_file filetype="File" srcfile="C:\Progra