[Thu Nov 12 05:07:28 2009]
ping localhost -n 1 -w 100 > "C:\DOCUME~1\KRIST_~1\LOCALS~1\Temp\0312480.tm p"

[Thu Nov 12 05:07:28 2009]
Pinging krist-ba688f6f9 [127.0.0.1] with 32 bytes of data:

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Ping statistics for 127.0.0.1:
Packets: Sent = 1, Received = 1, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms


[Thu Nov 12 05:07:37 2009]
subst > "C:\DOCUME~1\KRIST_~1\LOCALS~1\Temp\0312571.tm p"

[Thu Nov 12 05:07:37 2009]
Z:\: => C:\webs


[Thu Nov 12 05:07:39 2009]
subst Z: "C:\w" > "C:\DOCUME~1\KRIST_~1\LOCALS~1\Temp\0312592.tm p"

[Thu Nov 12 05:07:39 2009]
Drive already SUBSTed


[Thu Nov 12 05:07:40 2009]
ver > "C:\DOCUME~1\KRIST_~1\LOCALS~1\Temp\0312603.tm p"

[Thu Nov 12 05:07:40 2009]
Microsoft Windows XP [Version 5.1.2600]


[Thu Nov 12 05:07:40 2009]
set > "C:\DOCUME~1\KRIST_~1\LOCALS~1\Temp\0312604.tm p"

[Thu Nov 12 05:07:40 2009]
ALLUSERSPROFILE=C:\Documents and Settings\All Users
APPDATA=C:\Documents and Settings\krist_ALL\Application Data
CLIENTNAME=Console
CommonProgramFiles=C:\Program Files\Common Files
COMPUTERNAME=KRIST-BA688F6F9
ComSpec=C:\WINDOWS\system32\cmd.exe
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Documents and Settings\krist_ALL
LOGONSERVER=\\KRIST-BA688F6F9
NUMBER_OF_PROCESSORS=2
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\Sys tem32\Wbem;C:\WINDOWS\system32
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WS F;.WSH
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 6 Model 23 Stepping 6, GenuineIntel
PROCESSOR_LEVEL=6
PROCESSOR_REVISION=1706
ProgramFiles=C:\Program Files
PROMPT=$P$G
SESSIONNAME=Console
SystemDrive=C:
SystemRoot=C:\WINDOWS
TEMP=C:\DOCUME~1\KRIST_~1\LOCALS~1\Temp
TMP=C:\DOCUME~1\KRIST_~1\LOCALS~1\Temp
USERDOMAIN=KRIST-BA688F6F9
USERNAME=krist_ALL
USERPROFILE=C:\Documents and Settings\krist_ALL
windir=C:\WINDOWS


[Thu Nov 12 05:07:40 2009]
type c:\autoexec.bat > "C:\DOCUME~1\KRIST_~1\LOCALS~1\Temp\0312605.tm p"

[Thu Nov 12 05:07:40 2009]


[Thu Nov 12 05:07:40 2009]
type c:\config.sys > "C:\DOCUME~1\KRIST_~1\LOCALS~1\Temp\0312606.tm p"

[Thu Nov 12 05:07:40 2009]