
 [ Changes to filesystem ]
   * Creates file C:\autorun.inf
   * Creates file C:\love.EXE
   * Creates file C:\SHDAR.EXE
   * Creates file C:\windows\SHDar.EXE
   * Creates file D:\autorun.inf
   * Creates file D:\love.EXE
   * Creates file D:\SHDAR.EXE
   * Creates file E:\autorun.inf
   * Creates file E:\love.EXE
   * Creates file E:\SHDAR.EXE
   * Creates file H:\autorun.inf
   * Creates file H:\love.EXE
   * Creates file H:\SHDAR.EXE
   * Deletes file C:\Documents and Settings\MohfaLab\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\parent.lock
   * Modifies file C:\Documents and Settings\MohfaLab\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\sessionstore.bak
   * Modifies file C:\Documents and Settings\MohfaLab\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\sessionstore.js
   * Creates file C:\Documents and Settings\MohfaLab\Cookies\MohfaLab@block.opendns[1].txt
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\071F2A37d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\0ABEDA78d01
   * Modifies file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\0ABEDA79d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\0ABEDA7Ad01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\0ABEDA7Bd01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\105AA881d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\17B1718Fd01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\18AB721Dd01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\1A74CD49d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\1CF98E9Dd01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\1F030DE8d01
   * Modifies file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\20E06C8Dd01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\232D6760d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\2754A078d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\2FC62490d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\32355F8Dd01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\352AA28Cd01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\3749B3C1d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\37CB174Cd01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\39A5FE55d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\3B80C7C8d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\3EF9731Cd01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\40E7A564d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\41B0470Dd01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\42C06691d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\4F12F2B9d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\4FDB48A3d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\548127DFd01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\549E75C4d01
   * Creates file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\5725A623d01
   * Creates file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\59B871C9d01
   * Creates file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\61759E1Ad01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\617DE5F5d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\649D6916d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\6658FA6Ed01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\701F7E65d01
   * Creates file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\71FA4CE0d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\71FFC57Fd01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\7489F001d01
   * Modifies file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\78952B2Ed01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\79BD187Bd01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\7C11CE03d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\7D982A20d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\7EB3FEC0d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\8073CB75d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\81E1B8F6d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\8290F793d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\845E336Dd01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\84C17DC0d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\867707E6d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\88BBE633d01
   * Modifies file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\8A78FEA4d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\8AD9C599d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\8B444E7Ad01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\8EE6C0FCd01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\90865E12d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\9672E04Dd01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\9BA9CA73d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\9EF8CDBBd01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\9F05BB0Ed01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\A16FB532d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\A318E576d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\A31F1E7Cd01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\A411D53Ad01
   * Creates file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\B445F38Fd01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\B6C10D6Fd01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\B6C20D6Fd01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\B6C30D6Fd01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\B6C50D6Fd01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\B6C60D6Fd01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\BD4535AFd01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\BDA32EF5d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\C3228596d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\C8D42B3Bd01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\CA381438d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\CA3B1438d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\CA3C1438d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\CA3D1438d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\CA3F1438d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\CABD63B1d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\D7A0BD58d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\DBD21BF1d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\DC1DB316d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\DDA0503Dd01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\DEBA9EDDd01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\F6E8FB47d01
   * Creates file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\F9CCF08Cd01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\FAFB8097d01
   * Deletes file C:\Documents and Settings\MohfaLab\Local Settings\Application Data\Mozilla\Firefox\Profiles\ilh2tne6.default\Cache\FD449E26d01
   * Creates file C:\Documents and Settings\MohfaLab\Local Settings\Temp\MMBPlayer\001.REG
   * Creates file C:\Documents and Settings\MohfaLab\Local Settings\Temp\MMBPlayer\010.BAT
   * Creates file C:\Documents and Settings\MohfaLab\Local Settings\Temp\MMBPlayer\MMBMisc.dll
   * Creates file C:\Documents and Settings\MohfaLab\Local Settings\Temporary Internet Files\Content.IE5\HRAKUVEF\banner[1].htm

 [ Changes to registry ]
   * Deletes Registry key HKEY_LOCAL_MACHINE\software\Classes\clsid\{DBC80044-A445-435B-BC74-9C25C1C588A9}
   * Deletes Registry key HKEY_LOCAL_MACHINE\software\Classes\clsid\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}
   * Deletes Registry key HKEY_LOCAL_MACHINE\software\Classes\CompressedFolder\shell\open\ddeexec
   * Modifies value "Name=love.EXE" in key HKEY_LOCAL_MACHINE\software\microsoft\Direct3D\MostRecentApplication
          old value "Name=msnmsgr.exe"
   * Modifies value "Name=love.EXE" in key HKEY_LOCAL_MACHINE\software\microsoft\DirectDraw\MostRecentApplication
          old value "Name=msnmsgr.exe"
   * Modifies value "ID=3F841A07" in key HKEY_LOCAL_MACHINE\software\microsoft\DirectDraw\MostRecentApplication
          old value "ID=4A6CE533"
   * Modifies value "EnableDCOM=N" in key HKEY_LOCAL_MACHINE\software\microsoft\ole
          old value "EnableDCOM=Y"
   * Modifies value "NukeOnDelete=00000001" in key HKEY_LOCAL_MACHINE\software\microsoft\Windows\CurrentVersion\Explorer\BitBucket
          old value empty
   * Creates value "Systcm-c=%windir%\shdar.EXE" in key HKEY_LOCAL_MACHINE\software\microsoft\Windows\CurrentVersion\Run
   * Creates value "System-SC=C:\Windows\shdar.EXE" in key HKEY_LOCAL_MACHINE\software\microsoft\Windows\CurrentVersion\Run
   * Creates value "Systcm-C=%windir%\shdar.EXE" in key HKEY_LOCAL_MACHINE\software\microsoft\Windows\CurrentVersion\Run\RunOnce
   * Creates value "System-SC=C:\Windows\shdar.EXE" in key HKEY_LOCAL_MACHINE\software\microsoft\Windows\CurrentVersion\Run\RunOnce
   * Modifies value "Shell=x" in key HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
          old value "Shell=Explorer.exe "
   * Creates value "Speaker Configuration=04001400" in key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Speaker Configuration
   * Modifies value "EventMessageFile=43003A005C00570049004E0044004F00570053005C00730079007300740065006D00330032005C006500730065006E0074002E0064006C006C000000" in key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Application\ESENT
          old value "EventMessageFile=43003A005C00570049004E0044004F00570053005C00730079007300740065006D00330032005C004500530045004E0054002E0064006C006C000000"
   * Modifies value "CategoryMessageFile=43003A005C00570049004E0044004F00570053005C00730079007300740065006D00330032005C006500730065006E0074002E0064006C006C000000" in key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Application\ESENT
          old value "CategoryMessageFile=43003A005C00570049004E0044004F00570053005C00730079007300740065006D00330032005C004500530045004E0054002E0064006C006C000000"
   * Creates value "SymbolicLinkValue=5C00520045004700490053005400520059005C0055005300450052005C00530061006E00640062006F0078005F006D006F00680061006D006D00650064005F00440065006600610075006C00740042006F0078005C0075007300650072005C00630075007200720065006E0074005F0063006C0061007300730065007300" in key HKEY_CURRENT_USER\software\classes
   * Creates value "BrowseNewProcess=yes" in key HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Explorer\BrowseNewProcess
   * Modifies value "SavedLegacySettings=3C000000B80C0000030000001A0000006762737276313032392E6265726B696E652E636F6D3A38303830070000003C6C6F63616C3E0000000000000000000000000000000000000000000000000000000000000000" in key HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
          old value "SavedLegacySettings=3C000000B70C0000030000001A0000006762737276313032392E6265726B696E652E636F6D3A38303830070000003C6C6F63616C3E0000000000000000000000000000000000000000000000000000000000000000"
   
