Analyzing...
|
File Name:   Pedido_00305654800005550-0002358000.com
SHA1:   0cfea5ddbabfd0803a21ef241cfcf101a8a4fb19
MD5:   1c7a00581c046d0c55902d884f830a8d
First Seen Date:  2015-10-06 21:25:59.497000 ( )
Number of Clients Seen:   10
Last Analysis Date:  2016-04-09 20:17:39.597697 ( )
Human Expert Analysis Result:   No human expert analysis verdict given to this sample yet.
Analysis Summary
Analysis Type | Date | Verdict | |
---|---|---|---|
Signature Based Detection | 2016-04-09 20:17:39.597697 | Malware | |
Static Analysis Overall Verdict | 2016-04-09 20:17:39.597697 | No Threat Found | help |
Dynamic Analysis Overall Verdict | 2016-04-09 20:17:39.597697 | Highly Suspicious |
Static Analysis
Static Analysis Overall Verdict | Result |
---|---|
No Threat Found | help |
Detector | Result | |
---|---|---|
Optional Header LoaderFlags field is valued illegal | Clean | |
Non-ascii or empty section names detected | Clean | |
Illegal size of optional Header | Clean | |
Optional Header NumberOfRvaAndSizes field is valued illegal | Clean | |
Based on the sections entropy check! file is possibly packed | Clean | |
Timestamp value suspicious | Suspicious | |
Header Checksum is zero! | Suspicious | |
Enrty point is outside the 1st(.code) section! Binary is possibly packed | Clean | |
Packer detection on signature database | Unknown | help |
Anti-vm present | Clean | |
The Size Of Raw data is valued illegal! Binary might crash your disassembler/debugger | Clean | |
TLS callback functions array detected | Suspicious |
Anti-debug calls
UnhandledExceptionFilter
GetWindowThreadProcessId
FindWindowA
Packer detection on signature database
BobSoft Mini Delphi -> BoB / BobSoft
Dynamic Analysis
Dynamic Analysis Overall Verdict | Result |
---|---|
Highly Suspicious |
Suspicious Behaviors | |
---|---|
Opens a file in a system directory | |
Has no visible windows |
Behavioral Information
C:\Windows\system32\ole32.dll
C:\Windows\syswow64\MSCTF.dll
comctl32.dll
UxTheme.dll
OLEAUT32.DLL
ADVAPI32.dll
SHELL32.dll
wmp.dll
uxtheme.dll
shell32.dll
imageres.dll
imm32.dll
C:\sample
OLEACCRC.DLL
KERNEL32.DLL
COMCTL32.dll
COMDLG32.dll
GDI32.dll
gdiplus.dll
imagehlp.dll
IMM32.dll
lua5.1.dll
MSIMG32.dll
NETAPI32.dll
ole32.dll
OLEACC.dll
OLEAUT32.dll
oledlg.dll
SHLWAPI.dll
urlmon.dll
USER32.dll
VERSION.dll
WINMM.dll
WINSPOOL.DRV
C:\Windows\system32\dwmapi.dll
propsys.dll
ntmarta.dll
API-MS-Win-Core-LocalRegistry-L1-1-0.dll
API-MS-Win-Security-LSALookup-L1-1-0.dll
C:\Users\win7\AppData\Local\Temp\_ir_sf_temp_0\Unicode.lmd
kernel32
user32
C:\Users\win7\AppData\Local\Temp\_ir_sf_temp_0\UnicodeENU.dll
C:\Users\win7\AppData\Local\Temp\_ir_sf_temp_0\UnicodeLOC.dll
SspiCli.dll
WS2_32.DLL
API-MS-Win-Security-SDDL-L1-1-0.dll
WS2_32.dll
C:\Windows\System32\shdocvw.dll
PROPSYS.dll
Secur32.dll
API-MS-WIN-DOWNLEVEL-SHLWAPI-L1-1-0.DLL
api-ms-win-downlevel-advapi32-l2-1-0.dll
WININET.dll
wininet.dll
api-ms-win-downlevel-ole32-l1-1-0.dll
winhttp.dll
api-ms-win-downlevel-shlwapi-l2-1-0.dll
IPHLPAPI.DLL
CRYPTBASE.dll
dhcpcsvc.DLL
DNSAPI.dll
Comctl32.dll
C:\Windows\system32\ws2_32
COMCTL32.DLL
CRYPTSP.dll
kernel32.dll
RPCRT4.dll
SHFOLDER
C:\Windows\system32\odbcint.dll
MSVCRT.DLL
api-ms-win-core-synch-l1-2-0
api-ms-win-core-fibers-l1-1-1
advapi32
api-ms-win-core-localization-l1-2-1
api-ms-win-core-string-l1-1-0
api-ms-win-core-datetime-l1-1-1
api-ms-win-core-localization-obsolete-l1-2-0
api-ms-win-appmodel-runtime-l1-1-1
ext-ms-win-kernel32-package-current-l1-1-0
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
mscoree.dll
ntdll
advapi32.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
RichEd20.dll
mscorsec.dll
WINTRUST.DLL
C:\Windows\syswow64\CRYPT32.dll
ncrypt.dll
C:\Windows\SysWOW64\bcryptprimitives.dll
bcrypt.dll
USERENV.dll
cryptnet.dll
C:\Windows\system32\cryptnet.dll
SensApi.dll
WINHTTP.dll
ntdll.dll
NSI.dll
CFGMGR32.dll
API-MS-WIN-Service-Management-L1-1-0.dll
API-MS-WIN-Service-Management-L2-1-0.dll
API-MS-WIN-Service-winsvc-L1-1-0.dll
profapi.dll
Kernel32.dll
wtsapi32.dll
WINSTA.dll
C:\Users\win7\AppData\Local\Temp\nsjB14A.tmp\nsSessionSIDW.dll
C:\Users\win7\AppData\Local\Temp\nsjB14A.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsjB14A.tmp\nsProcess.dll
NTDLL.DLL
C:\Users\win7\AppData\Local\Temp\nsjB14A.tmp\LangDLL.dll
RichEd20
C:\Users\win7\AppData\Local\Temp\nsjB14A.tmp\nsEnvVariables.dll
C:\Users\win7\AppData\Local\Temp\nsjB14A.tmp\InstallOptions.dll
C:\Users\win7\AppData\Local\Temp\nsjB14A.tmp\linker.dll
C:\Windows\system32\urlmon.dll
C:\Windows\system32\riched20.dll
C:\Windows\system32\kernel32.dll
comdlg32.dll
gdi32.dll
msvcrt.dll
setupapi.dll
shlwapi.dll
C:\Windows\System32\msxml3r.dll
SXS.DLL
winmm.dll
msi.dll
C:\Windows\system32\browseui.dll
ADVAPI32.DLL
C:\Users\win7\AppData\Local\Temp\is-K3HOL.tmp\sample.ENU
C:\Users\win7\AppData\Local\Temp\is-K3HOL.tmp\sample.EN
C:\Users\win7\AppData\Local\Temp\is-C4O3O.tmp\_isetup\_shfoldr.dll
shfolder.dll
Rstrtmgr.dll
C:\Windows\system32\imageres.dll
C:\Windows\system32\shell32.dll
C:\Windows\system32\shlwapi.dll
MSFTEDIT.DLL
COMCTL32
KERNEL32
oleaut32.dll
user32.dll
version.dll
wsock32.dll
olepro32.dll
msimg32.dll
URLMON.DLL
C:\Windows\Microsoft.NET\Framework\v2.0.50727\ole32.dll
AdvApi32.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\908ba9e296e92b4e14bdc2437edac603\System.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\12dc10e5c0e8d176cf21a16a6fc5fc3b\Microsoft.VisualBasic.ni.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5a401fd2a7689ff13fb54182953f9c40\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\6949c4470a81970ec3de0a575d93babc\System.Windows.Forms.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\0967cf5c31691f38d013263304d2dacb\System.Runtime.Remoting.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\uxtheme.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Gdiplus.dll
C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18834_none_72d38c5186679d48\gdiplus.dll
C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\oleaut32.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\en-US\mscorrc.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\en\mscorrc.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
WindowsCodecs.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
C:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
riched32.dll
riched20.dll
MSHTML.dll
C:\Windows\system32\UXTHEME.dll
C:\Windows\system32\USERENV.dll
C:\Windows\system32\SETUPAPI.dll
C:\Windows\system32\SHFOLDER.dll
onig.dll
C:\libhunspell.dll
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\explorer.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\calc.exe
DWMAPI.DLL
C:\Users\win7\AppData\Local\Temp\downloader.exe
ntshrui.dll
srvcli.dll
cscapi.dll
slc.dll
avifil32.dll
MsVfW32.dll
quartz.dll
shlwapi
Shell32
DCIMAN32.DLL
credui.dll
CRYPT32.dll
dwmapi.dll
WINTRUST.dll
C:\Windows\system32\dsound.dll
dnssd.dll
KERNEL32.dll
POWRPROF.dll
dbghelp.dll
C:\Users\win7\AppData\Local\Temp\nst24A.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nst24A.tmp\nsExec.dll
C:\Users\win7\AppData\Local\Temp\nsr8722.tmp\nsExec.dll
C:\Users\win7\AppData\Local\Temp\nsc1657.tmp\System.dll
Msi.DLL
C:\Windows\SysWOW64\OLE32.DLL
C:\Users\win7\AppData\Local\Temp\{3943BD48-91F4-4AF7-93C1-CCA84463D9E9}\ISSetup.dll
Ntdll.dll
C:\Windows\SysWOW64\TSAPPCMP.DLL
C:\Windows\SysWOW64\SHLWAPI.DLL
C:\Windows\SysWOW64\KERNEL32.DLL
MsiMsg.dll
C:\Windows\SysWOW64\ADVAPI32.DLL
C:\Windows\system32\msi.dll
C:\Windows\SysWOW64\APPHELP.DLL
C:\Windows\SysWOW64\VERSION.DLL
C:\Windows\SysWOW64\sxs.DLL
C:\Users\win7\AppData\Local\Temp\is-R0V3M.tmp\_isetup\_shfoldr.dll
mshtml.dll
IEFRAME.dll
MLANG.dll
msls31.dll
d2d1.dll
DWrite.dll
dxgi.dll
C:\DXGIDebug.dll
C:\Windows\system32\DXGIDebug.dll
d3d11.dll
D3D10Warp.dll
C:\Windows\system32\D3D10Warp.dll
UIAutomationCore.dll
C:\Windows\system32\WINMM.dll
MMDevAPI.DLL
wdmaud.drv
MMDEVAPI.DLL
SETUPAPI.dll
AUDIOSES.DLL
msacm32.drv
midimap.dll
cfgmgr32.dll
C:\Windows\SysWOW64\ieframe.dll
security.dll
Advapi32.dll
iphlpapi.dll
C:\Windows\system32\wer.dll
werui.dll
DUI70.dll
DUser.dll
C:\Windows\system32\DUser.dll
C:\Windows\system32\RICHED20.DLL
C:\Windows\system32\xmllite.dll
secur32.dll
C:\Users\win7\AppData\Local\Temp\is-I1FC2.tmp\sample.ENU
C:\Users\win7\AppData\Local\Temp\is-I1FC2.tmp\sample.EN
C:\Users\win7\AppData\Local\Temp\is-OG679.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\is-OG679.tmp\idp.dll
C:\Users\win7\AppData\Local\Temp\is-OG679.tmp\innocallback.dll
C:\Users\win7\AppData\Local\Temp\is-OG679.tmp\innocallback.ENU
C:\Users\win7\AppData\Local\Temp\is-OG679.tmp\innocallback.EN
C:\Users\win7\AppData\Local\Temp\is-OG679.tmp\isslideshow.dll
C:\Users\win7\AppData\Local\Temp\is-OG679.tmp\isslideshow.ENU
C:\Users\win7\AppData\Local\Temp\is-OG679.tmp\isslideshow.EN
RICHED32.DLL
C:\Users\win7\AppData\Local\Temp\is-OG679.tmp\ISDone.dll
C:\Users\win7\AppData\Local\Temp\nsc41A0.tmp\System.dll
C:\cbEngine.dll
C:\Windows\system32\asycfilt.dll
Normaliz.dll
XmlLite.dll
POWRPROF.DLL
Cabinet.dll
DEVRTL.dll
C:\Windows\System32\msxml6r.dll
C:\Users\win7\AppData\Local\Temp\is-S13V6.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\is-H30DO.tmp\sample.ENU
C:\Users\win7\AppData\Local\Temp\is-H30DO.tmp\sample.EN
NTDLL.dll
C:\Windows\system32\DBGHELP.DLL
C:\\en\wlsres.dll
C:\\en\wlsres.thm
C:\\en\wlsres.mui
C:\\en\wlsres.dll.mui
C:\\en\wlsres.exe.mui
C:\\en\wlsres.exe
C:\\wlsres.dll
C:\\wlsres.thm
C:\\wlsres.mui
C:\\wlsres.dll.mui
C:\\wlsres.exe.mui
C:\\wlsres.exe
C:\Users\win7\AppData\Local\Temp\is-Q3425.tmp\sample.ENU
C:\Users\win7\AppData\Local\Temp\is-Q3425.tmp\sample.EN
C:\Users\win7\AppData\Local\Temp\nsf614B.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\is-A82UH.tmp\_isetup\_shfoldr.dll
RICHED20.DLL
C:\Users\win7\AppData\Local\Temp\nso5E59.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nso5E59.tmp\CityHash.dll
wiatrace.dll
HPScanUI.dll
C:\Program Files\Internet Explorer\IEXPLORE.EXE
Shell32.dll
\realplay.exe
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\inst_config\compat.dll
C:\Users\win7\AppData\Local\Temp\nszE04B.tmp\mIRC.dll
C:\Users\win7\AppData\Local\Temp\nszE04B.tmp\UAC.dll
ADVAPI32
ShlWAPI
SECUR32
C:\Users\win7\AppData\Local\Temp\nszE04B.tmp\AccessControl.dll
C:\Users\win7\AppData\Local\Temp\nszE04B.tmp\System.dll
C:\Windows\system32\RichEd20.dll
C:\Users\win7\AppData\Local\Temp\nszE04B.tmp\InstallOptions.dll
C:\Users\win7\AppData\Local\Temp\nsd19D4.tmp\System.dll
RASMONTR.DLL
NSHWFP.DLL
DHCPCMONITOR.DLL
Dhcpcsvc.dll
Dhcpqec.dll
WSHELPER.DLL
NSHHTTP.DLL
FWCFG.DLL
AUTHFWCFG.DLL
IFMON.DLL
NETIOHLP.DLL
WHHELPER.DLL
HNETMON.DLL
RPCNSH.DLL
DOT3CFG.DLL
NAPMONTR.DLL
NSHIPSEC.DLL
C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc\msvcm80.dll
C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc\MSVCR80.dll
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\ntdll.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\d49908aa93a23c84847b1f8b1b667860\System.Xml.ni.dll
C:\Windows\system32\Synsoacc.dll
C:\Windows\SYSTEM32\DRIVERS\SynUSB64.sys
SYNSOACC.DLL
RichEd20.DLL
C:\Windows\system32\RichEd20.DLL
C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\shell32.dll
C:\Windows\system32\ntdll.dll
C:\Users\win7\AppData\Local\Temp\is-C6BO7.tmp\_isetup\_shfoldr.dll
ieframe.dll
Winspool.drv
MPR.dll
Msimg32.dll
User32.dll
SetupAPI.dll
Netapi32.dll
C:\Windows\system32\version.dll
C:\Windows\system32\atl.dll
C:\Windows\system32\ntmarta.dll
C:\Windows\system32\winmm.dll
C:\Windows\system32\powrprof.dll
C:\Windows\system32\d3d9.dll
C:\Windows\system32\d3d8thk.dll
C:\Windows\system32\mscms.dll
C:\Windows\system32\userenv.dll
C:\Windows\system32\profapi.dll
C:\Windows\system32\ieframe.dll
C:\Windows\system32\oleacc.dll
C:\Windows\system32\oleaccrc.dll
C:\Windows\system32\dbghelp.dll
C:\Windows\system32\uxtheme.dll
C:\Windows\system32\Shell32.dll
C:\Users\win7\AppData\Local\Temp\{675C5CE2-6EE8-43AB-BABA-9F60D98A9FDD}\fpb.tmp
C:\Users\win7\AppData\Local\Temp\{C911BCC1-C4EF-475F-9CEE-F29F92103D86}\fpb.tmp
C:\Windows\system32\Advapi32.dll
C:\Windows\system32\Msimg32.dll
atl.dll
C:\Users\win7\AppData\Local\Temp\nst232.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nst232.tmp\ExecCmd.dll
C:\Users\win7\AppData\Local\Temp\nsm7228.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsm7228.tmp\UserInfo.dll
C:\Users\win7\AppData\Local\Temp\nsm7228.tmp\g\gtapi_signed
C:\Users\win7\AppData\Local\Temp\nsm7228.tmp\g\gcapi_dll
C:\Users\win7\AppData\Local\Temp\nsm7228.tmp\ButtonEvent.dll
C:\Users\win7\AppData\Local\Temp\nsm7228.tmp\nsDialogs.dll
C:\Users\win7\AppData\Local\Temp\nsm7228.tmp\g\pfWWW
C:\Users\win7\AppData\Local\Temp\is-BLOTU.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\is-BLOTU.tmp\_isetup\_isdecmp.dll
Msftedit.dll
D3D9.dll
C:\Windows\system32\EhStorShell.dll
C:\Windows\system32\ntshrui.dll
c:\windows\system32\imageres.dll
dSound.dll
C:\Windows\system32\dSound.dll
C:\Windows\system32\sfc.dll
C:\Users\win7\AppData\Local\Temp\VideoPad-2636-1\ffmpeg19.exe
C:\sampleENU.dll
C:\sampleLOC.dll
C:\Users\win7\AppData\Local\Temp\nshE312.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nshE312.tmp\CityHash.dll
Riched20.dll
C:\Windows\SysWOW64\msls31.dll
C:\Users\win7\AppData\Local\Temp\nsj27BC.tmp\InstallOptions.dll
netutils.dll
Kernel32.DLL
C:\English\Strings.dll
C:\Windows\system32\DSOUND.dll
iertutil.dll
C:\Users\win7\AppData\Local\Temp\nsoD439.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsoD439.tmp\InetLoad_vms.dll
C:\Users\win7\AppData\Local\Temp\nsoD439.tmp\InstallOptions.dll
ywiseextU
C:\CFVS_I~1.EXE
C:\DLL_LO~1.EXE
C:\Procmon.exe
C:\PROGRA~2\COMMON~1\MICROS~1\ink\mip.exe
C:\PROGRA~2\COMMON~1\MICROS~1\MSInfo\msinfo32.exe
C:\PROGRA~2\INTERN~1\ieinstal.exe
C:\PROGRA~2\INTERN~1\ielowutil.exe
C:\PROGRA~2\INTERN~1\iexplore.exe
C:\PROGRA~2\WINDOW~1\wab.exe
C:\PROGRA~2\WINDOW~1\wabmig.exe
C:\PROGRA~2\WINDOW~1\WinMail.exe
C:\PROGRA~2\WINDOW~2\ACCESS~1\wordpad.exe
C:\PROGRA~2\WINDOW~4\ImagingDevices.exe
C:\PROGRA~2\WI4223~1\sidebar.exe
C:\PROGRA~3\PACKAG~1\{050D4~1\VCREDI~1.EXE
C:\PROGRA~3\PACKAG~1\{F65DB~1\VCREDI~1.EXE
C:\Python27\Lib\DISTUT~1\command\WININS~1.EXE
C:\Python27\Lib\DISTUT~1\command\WININS~2.EXE
C:\Python27\Lib\DISTUT~1\command\WININS~3.EXE
C:\Python27\Lib\DISTUT~1\command\WININS~4.EXE
C:\Python27\Lib\DISTUT~1\command\WI02EA~1.EXE
C:\Python27\Lib\SITE-P~1\pip\_vendor\distlib\t32.exe
C:\Python27\Lib\SITE-P~1\pip\_vendor\distlib\t64.exe
C:\Python27\Lib\SITE-P~1\pip\_vendor\distlib\w32.exe
C:\Python27\Lib\SITE-P~1\pip\_vendor\distlib\w64.exe
C:\Python27\Lib\SITE-P~1\SETUPT~1\cli-32.exe
C:\Python27\Lib\SITE-P~1\SETUPT~1\cli-64.exe
C:\Python27\Lib\SITE-P~1\SETUPT~1\CLI-AR~1.EXE
C:\Python27\Lib\SITE-P~1\SETUPT~1\cli.exe
C:\Python27\Lib\SITE-P~1\SETUPT~1\gui-32.exe
C:\Python27\Lib\SITE-P~1\SETUPT~1\gui-64.exe
C:\Python27\Lib\SITE-P~1\SETUPT~1\GUI-AR~1.EXE
C:\Python27\Lib\SITE-P~1\SETUPT~1\gui.exe
C:\Python27\Scripts\EASY_I~2.EXE
C:\Python27\Scripts\EASY_I~1.EXE
C:\Python27\Scripts\pip.exe
C:\Python27\Scripts\PIP27~1.EXE
C:\Python27\Scripts\pip2.exe
C:\Users\win7\AppData\Local\Temp\is-VOOG6.tmp\_isetup\_shfoldr.dll
PSAPI.DLL
C:\Users\win7\AppData\Local\Temp\{391B7029-655F-4AEF-97FF-88A8B896C1E9}\_Setup.dll
C:\Users\win7\AppData\Local\Temp\{391B7029-655F-4AEF-97FF-88A8B896C1E9}\Disk1\ISSetup.dll
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\ISRT.dll
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\_isres.dll
C:\Windows\system32\AppHelp.dll
C:\Users\win7\AppData\Local\Temp\{391B7029-655F-4AEF-97FF-88A8B896C1E9}\Disk1\data1.hdr
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\MFS2Instutil.dll
C:\Windows\system32\AdvApi32.dll
C:\Windows\system32\Msi.dll
feclient.dll
C:\Users\win7\AppData\Local\Temp\nss2452.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nss2452.tmp\UserInfo.dll
C:\Users\win7\AppData\Local\Temp\nss2452.tmp\AdvSplash.dll
C:\Users\win7\AppData\Local\Temp\nss2452.tmp\KillProcDLL.dll
C:\Users\win7\AppData\Local\Temp\nss2452.tmp\NSIS_HTTPRequest.dll
C:\Users\win7\AppData\Local\Temp\nss2452.tmp\nsDialogs.dll
atlthunk.dll
C:\Users\win7\AppData\Local\Temp\is-VS13Q.tmp\sample.ENU
C:\Users\win7\AppData\Local\Temp\is-VS13Q.tmp\sample.EN
C:\Users\win7\AppData\Local\Temp\nsw7FCC.tmp\nsDialogs.dll
C:\Users\win7\AppData\Local\Temp\nsw7FCC.tmp\System.dll
USP10.dll
crypt32
MSISIP.DLL
C:\Windows\syswow64\crypt32.DLL
C:\Windows\SysWOW64\wshext.dll
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\pwrshsip.dll
C:\Users\win7\AppData\Local\Temp\nsw7FCC.tmp\SimpleFC.dll
C:\Users\win7\AppData\Local\Temp\nsw7FCC.tmp\SimpleFC.ENU
C:\Users\win7\AppData\Local\Temp\nsw7FCC.tmp\SimpleFC.EN
USER32.DLL
tib_mounter.dll
api-ms-win-core-sysinfo-l1-2-1
C:\Windows\SysWOW64\SHELL32.DLL
C:\Windows\SysWOW64\NETAPI32.DLL
crypt32.dll
C:\Windows\SysWOW64\cryptnet.dll
C:\Users\win7\AppData\Local\Temp\is-UGJKE.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\nsu2769.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsu2769.tmp\UAC.dll
AdvAPI32
C:\Users\win7\AppData\Local\Temp\nsu2769.tmp\InstallOptions.dll
propsys
Comctl32
mscms.dll
icm32.dll
bamainlib.dll
C:\Users\win7\AppData\Local\Temp\is-4HJAN.tmp\sample.ENU
C:\Users\win7\AppData\Local\Temp\is-4HJAN.tmp\sample.EN
C:\Users\win7\AppData\Local\Temp\is-HOS2H.tmp\_isetup\_shfoldr.dll
Crypt32.dll
C:\Users\win7\AppData\Local\Temp\{7C029707-4E9A-470A-AADA-703787A937A1}\Disk1\ISSetup.dll
C:\Users\win7\AppData\Local\Temp\{7C029707-4E9A-470A-AADA-703787A937A1}\_Setup.dll
C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{E487EE7D-EAAA-4E2A-9116-E3B477D8A74F}\ISRT.dll
C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{E487EE7D-EAAA-4E2A-9116-E3B477D8A74F}\_isres.dll
C:\Users\win7\AppData\Local\Temp\{7C029707-4E9A-470A-AADA-703787A937A1}\Disk1\data1.hdr
C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{E487EE7D-EAAA-4E2A-9116-E3B477D8A74F}\_ISRes.dll
C:\vnclang.dll
d3d9
C:\Users\win7\AppData\Local\Temp\27E7832D\unpack.dll
C:\Windows\system32\CRTDLL.DLL
C:\Users\win7\AppData\Local\Temp\27E7832D\sample\plugins\0\StdUI.dll
C:\Users\win7\AppData\Local\Temp\27E7832D\sample\plugins\0\StdUI.ENU
C:\Users\win7\AppData\Local\Temp\27E7832D\sample\plugins\0\StdUI.EN
C:\Windows\system32\STDOLE2.TLB
C:\Windows\system32\MSVBVM60.DLL
C:\Windows\system32\mscomctl.ocx
C:\Windows\system32\MSWINSCK.OCX
winspool.drv
%SystemRoot%\System32\hhctrl.ocx
hhctrl.ocx
C:\Windows\system32\advapi32.dll
C:\Users\win7\AppData\Local\Temp\nsiD66B.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsiD66B.tmp\nsExec.dll
IMM32.DLL
tapi32.dll
psapi.dll
NETAPI32.DLL
C:\Users\win7\AppData\Local\Temp\7zS10A5.tmp\pstubxx.exe
C:\Users\win7\AppData\Local\Temp\nscAD33.tmp\System.dll
C:\Windows\system32\VBoxMRXNP.dll
C:\Windows\System32\drprov.dll
C:\Windows\System32\ntlanman.dll
C:\Windows\System32\davclnt.dll
c:\python27\dlls\py.ico
C:\CFVS_Injector.exe
C:\DLL_Loader.exe
MSACM32.dll
C:\Users\win7\AppData\Local\Temp\is-EQOGG.tmp\sample.ENU
C:\Users\win7\AppData\Local\Temp\is-EQOGG.tmp\sample.EN
Ole32.dll
bd.dll
C:\Windows\SysWOW64\gameux.dll
MSVBVM60.DLL
Version.dll
C:\Users\win7\AppData\Local\Temp\SSESTART\Setup.exe
ole32
VERSION.DLL
C:\Users\win7\AppData\Local\Temp\nshD82B.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nshD82B.tmp\nsDialogs.dll
C:\Users\win7\AppData\Local\Temp\nshD82B.tmp\LockedList.dll
C:\Windows\System32\smss.exe
C:\Windows\System32\csrss.exe
C:\Windows\System32\wininit.exe
C:\Windows\System32\winlogon.exe
C:\Windows\System32\services.exe
C:\Windows\System32\lsass.exe
C:\Windows\System32\lsm.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\VBoxService.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\System32\sppsvc.exe
C:\Windows\System32\SearchIndexer.exe
C:\Windows\System32\dwm.exe
C:\Windows\System32\wbem\WmiPrvSE.exe
C:\Windows\System32\conhost.exe
C:\Python27\python.exe
C:\Windows\System32\taskhost.exe
C:\Windows\System32\dllhost.exe
C:\Windows\System32\cmd.exe
C:\Windows\Downloaded Program Files\JuniperSetupClient64.ocx
C:\Users\win7\AppData\Local\Temp\nsu8779.tmp\System.dll
C:\Windows\System32\Shell32.dll
MSVCR90.dll
C:\zlib.pyd
C:\Users\win7\AppData\Local\Temp\{391B75F5-6733-4AEF-BFD8-84A8B896C1E9}\ISSetup.dll
C:\Windows\SysWOW64\MSCOREE.DLL
C:\Windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll
C:\Windows\SysWOW64\NTDLL.DLL
APPHELP.DLL
C:\Users\win7\AppData\Local\Temp\{391B75F5-6733-4AEF-BFD8-84A8B896C1E9}\reg4S.msi
C:\Users\win7\AppData\Local\Temp\{97937BFE-5F33-426A-9C72-F21F4A2A208E}\ISRT.dll
C:\Users\win7\AppData\Local\Temp\{97937BFE-5F33-426A-9C72-F21F4A2A208E}\_isres_0x0804.dll
C:\Users\win7\AppData\Local\Temp\nsjB919.tmp\LangDLL.dll
C:\Users\win7\AppData\Local\Temp\nsjB919.tmp\System.dll
netapi32
C:\Users\win7\AppData\Local\Temp\nsjB919.tmp\UAC.dll
C:\Users\win7\AppData\Local\Temp\nsjB919.tmp\GraphicalInstaller.dll
C:\Users\win7\AppData\Local\Temp\nsjB919.tmp\Math.dll
C:\Users\win7\AppData\Local\Temp\nsjB919.tmp\nsDialogs.dll
C:\Users\win7\AppData\Local\Temp\nsjB919.tmp\nsResize.dll
C:\Windows\system32\wbem\xml\wmi2xml.dll
C:\Users\win7\AppData\Local\Temp\nse762F.tmp\ButtonEvent.dll
C:\Users\win7\AppData\Local\Temp\nse762F.tmp\nsDialogs.dll
C:\Users\win7\AppData\Local\Temp\nse762F.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nse762F.tmp\nsExec.dll
C:\Users\win7\AppData\Local\Temp\is-0PR8U.tmp\_isetup\_shfoldr.dll
msdmo.dll
msvfw32.dll
msrle32.dll
msvidc32.dll
msyuv.dll
iyuv_32.dll
tsbyuv.dll
iccvid.dll
msacm32.dll
imaadp32.acm
msg711.acm
msgsm32.acm
msadp32.acm
t "C:\Users\win7\AppData\Local\Temp\McCSPInstall.dll"
C:\Users\win7\AppData\Local\Temp\nspDAFC.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\McCSPInstall.dll
cmdhtml.dll
d3d10_1.dll
shcore.dll
uiautomationcore.dll
dwrite.dll
UXTHEME.DLL
C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\DXGIDebug.dll
xul.dll
C:\Windows\system32\VB6ES.DLL
C:\Users\win7\AppData\Local\Temp\{7C5A5A01-BA31-4712-8E81-703787A937A1}\_Setup.dll
C:\Temp\NVIDIA\3DVision\ISSetup.dll
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\ISRT.dll
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\_isres.dll
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\_isuser.dll
C:\Temp\NVIDIA\3DVision\data1.hdr
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\NVINSTNT.DLL
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\ISRT.dll
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\_isres.dll
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\_isuser.dll
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\NVINSTNT.DLL
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\_ISRes.dll
iphlpapi
C:\Windows\system32\KERNEL32.DLL
C:\\spark.exe
ws2_32.dll
C:\Users\win7\AppData\Local\Temp\000a3826.a
C:\Users\win7\AppData\Local\Temp\000a3f98.a
jscript9.dll
C:\Users\win7\AppData\Local\Temp\nsf1E94.tmp\DXGIDebug.dll
api-ms-win-core-winrt-l1-1-0.dll
C:\Users\win7\AppData\Local\Temp\nsf1E94.tmp\nsArray.dll
C:\Users\win7\AppData\Local\Temp\nsf1E94.tmp\NSISdl.dll
C:\Users\win7\AppData\Local\Temp\nsyB98D.tmp\InstallOptions.dll
ddraw.dll
dsound.dll
PProcDLL.dll
Wship6.dll
URL.DLL
C:\Windows\system32\Msimtf.dll
rpcrt4.dll
C:\Users\win7\AppData\Local\Temp\nsj1FF9.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\mia4D20.tmp\RP255DriverInstaller.ENU
C:\Users\win7\AppData\Local\Temp\mia4D20.tmp\RP255DriverInstaller.EN
Shlwapi.dll
C:\Users\win7\AppData\Local\Temp\mia4D20.tmp\mia.lib
C:\Windows\Winhlp32.exe
PScript.dll
C:\Users\win7\AppData\Local\Temp\nsw31B4.tmp\System.dll
C:\Windows\SysWOW64\wscript.exe
newdev.dll
C:/Users/win7/AppData/Local/Temp/TCL9CAC.tmp
shell32
C:\Users\win7\AppData\Local\Temp\Opera_installer_2016462832778.dll
C:\Users\win7\AppData\Local\Temp\is-TDCLD.tmp\sample.ENU
C:\Users\win7\AppData\Local\Temp\is-TDCLD.tmp\sample.EN
C:\Users\win7\AppData\Local\Temp\is-S3QTL.tmp\_isetup\_shfoldr.dll
MFC42.DLL
MSVCRT.dll
OLEPRO32.DLL
C:\Users\win7\AppData\Local\Temp\is-QIE5C.tmp\_isetup\_shfoldr.dll
C:\Windows\syswow64\KERNELBASE.dll
C:\Users\win7\AppData\Local\Temp\nstE4E2.tmp\nsProcess.dll
C:\Users\win7\AppData\Local\Temp\nstE4E2.tmp\ShellLink.dll
C:\Users\win7\AppData\Local\Temp\nslC593.tmp\LangDLL.dll
C:\Users\win7\AppData\Local\Temp\nslC593.tmp\Aero.dll
Dwmapi.dll
C:\Users\win7\AppData\Local\Temp\nslC593.tmp\nsDialogs.dll
C:\Users\win7\AppData\Local\Temp\nslC593.tmp\nsis7z.dll
C:\Users\win7\AppData\Local\Temp\nslC593.tmp\nsProcess.dll
InterfaceEpson.dll
C:\Users\win7\AppData\Local\Temp\nszB6C3.tmp\AdvSplash.dll
C:\Users\win7\AppData\Local\Temp\nszB6C3.tmp\Aero.dll
C:\Users\win7\AppData\Local\Temp\nszB6C3.tmp\nsDialogs.dll
C:\Users\win7\AppData\Local\Temp\nszB6C3.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nszB6C3.tmp\nsWeb.dll
C:\Users\win7\AppData\Local\Temp\nsc997B.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsc997B.tmp\CityHash.dll
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\gtb\GTAPI.DLL
shdocvw.dll
GFWLIVESetupStub.exe
C:\Windows\system32\MSI.DLL
C:\Windows\system32\mscoree.dll
C:\Windows\Microsoft.NET\Framework\\v4.0.30319\mscorlib.dll
C:\Windows\Microsoft.NET\Framework\\v2.0.50727\mscorlib.dll
wintrust.dll
C:\Windows\syswow64\crypt32.dll
C:\Users\win7\AppData\Local\Temp\is-8TPLN.tmp\_isetup\_shfoldr.dll
NETMSG
VBoxDisp.dll
mscat32.dll
C:\Windows\system32\Kernel32.dll
C:\Users\win7\AppData\Local\Temp\nsdC64.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsz417F.tmp\System.dll
C:\WBDHD44I.DLL
lsm.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\drivers\pacer.sys
fwpuclnt.dll
pnrpsvc.dll
C:\Windows\system32\pnrpsvc.dll
AzRoles.dll
fxsresm.dll
cscsvc.dll
C:\Windows\system32\cscsvc.dll
C:\Windows\system32\iphlpsvc.dll
C:\Windows\system32\umpo.dll
HTTPAPI.DLL
NetLogon.dll
drt.dll
C:\Windows\system32\drivers\ndis.sys
PeerDistSvc.dll
C:\Windows\system32\PeerDistSvc.dll
WsmRes.dll
tbssvc.dll
C:\Windows\system32\tbssvc.dll
SHELL32.DLL
C:\Users\win7\AppData\Local\Temp\nsbBADC.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\is-8THHP.tmp\_isetup\_shfoldr.dll
mswsock.dll
C:\Users\win7\AppData\Local\Temp\nsg2A72.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsg2A72.tmp\InstallOptions.dll
C:\Users\win7\AppData\Local\Temp\nsb62C6.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsb62C6.tmp\CityHash.dll
C:\Users\win7\AppData\Local\Temp\is-MUR9B.tmp\OCSetupHlp.dll
C:\Users\win7\AppData\Local\Temp\is-MUR9B.tmp\GCountry.dll
wship6.dll
C:\Users\win7\AppData\Local\Temp\nst480C.tmp\LangDLL.dll
C:\Users\win7\AppData\Local\Temp\nst480C.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nst480C.tmp\NSISdl.dll
C:\Program Files\CrossCert\CrossCertWeb v2.0\AxCrossCert.dll
C:\Users\win7\AppData\Local\Temp\nst480C.tmp\InstallOptions.dll
Iphlpapi.dll
C:\\chrome.dll
HydraEnu.dll
C:\Windows\system32\user32.dll
ExceptionDumpDll.dll
C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18834_none_72d38c5186679d48\GDIPLUS.DLL
C:\Users\win7\AppData\Local\Temp\is-ANUC4.tmp\sample.ENU
C:\Users\win7\AppData\Local\Temp\is-ANUC4.tmp\sample.EN
C:\Users\win7\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\Microsoft Silverlight\sllauncher.exe
OLEACC.DLL
C:\Windows\system32\Oleacc.dll
C:\Windows\SysWOW64\DDRAW.dll
C:\Windows\SysWOW64\jscript9.dll
C:\Windows\system32\mfc42.dll
C:\Windows\system32\msvcrt.dll
C:\Windows\system32\wininet.dll
C:\Windows\system32\ws2_32.dll
DBGHELP.DLL
C:\Windows\system32\wintrust.dll
C:\Users\win7\AppData\Local\Temp\GUM2D7E.tmp\goopdate.dll
C:\Users\win7\AppData\Local\Temp\GUM2D7E.tmp\goopdateres_en.dll
C:\Users\win7\AppData\Local\Temp\is-VFDLN.tmp\_isetup\_shfoldr.dll
MsftEdit.dll
netid.dll
srrstr.dll
C:\Windows\system32\remotepg.dll
sysdm.cpl
C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\decoder.dll
C:\Users\win7\AppData\Local\Temp\nslC847.tmp\registry.dll
C:\Users\win7\AppData\Local\Temp\nslC847.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\\ADInsightDll.dll
Wintrust.dll
C:\Users\win7\AppData\Local\Temp\nsh67BC.tmp\ButtonEvent.dll
C:\Users\win7\AppData\Local\Temp\nsh67BC.tmp\nsDialogs.dll
C:\Users\win7\AppData\Local\Temp\nsh67BC.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\is-G9JNT.tmp\sample.ENU
C:\Users\win7\AppData\Local\Temp\is-G9JNT.tmp\sample.EN
C:\Users\win7\AppData\Local\Temp\is-M8OMU.tmp\sample.ENU
C:\Users\win7\AppData\Local\Temp\is-M8OMU.tmp\sample.EN
C:\Users\win7\AppData\Local\Temp\is-0CL8A.tmp\_isetup\_shfoldr.dll
WSOCK32.dll
gdi32
oleacc.dll
cryptui.dll
C:\Users\win7\AppData\Local\Temp\DefaultPackOffer.dll
C:\rarlng.dll
C:\Users\win7\AppData\Local\Temp\000a92e8.a
C:\Users\win7\AppData\Local\Temp\000a9922.a
C:\Windows\system32\ExplorerFrame.dll
OLEAUT32
C:\Windows\system32\cryptsp.dll
C:\Windows\system32\setupapi.dll
C:\Windows\system32\clbcatq.dll
C:\Windows\system32\wsock32.dll
C:\Windows\system32\winnsi.dll
C:\Windows\system32\psapi.dll
C:\Windows\system32\iphlpapi.dll
C:\Windows\system32\slc.dll
C:\Windows\system32\gpapi.dll
C:\Windows\system32\hnetcfg.dll
C:\Windows\system32\dnsapi.dll
C:\Windows\system32\rasman.dll
C:\Windows\system32\rasapi32.dll
C:\Windows\system32\sensapi.dll
C:\Windows\system32\rasadhlp.dll
C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
C:\Windows\system32\msasn1.dll
C:\Windows\system32\crypt32.dll
C:\Windows\system32\propsys.dll
C:\Windows\system32\secur32.dll
C:\Windows\system32\pcacli.dll
C:\Windows\system32\devrtl.dll
C:\Windows\system32\apphelp.dll
C:\Windows\system32\dinput8.dll
C:\Windows\system32\sxs.dll
C:\Windows\system32\rpcrtremote.dll
C:\Windows\system32\schannel.dll
C:\Users\win7\AppData\Local\Temp\{45A532C6-C520-425D-AC0A-E5BC4EFBFB10}\fpb.tmp
C:\Users\win7\AppData\Local\Temp\{7525BD1B-F47E-49A8-B05E-0D0463F62F92}\fpb.tmp
dinput8.dll
Kernel32
C:\Users\win7\AppData\Local\Temp\nsz9DAD.tmp\LangDLL.dll
C:\Users\win7\AppData\Local\Temp\nsz9DAD.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsz9DAD.tmp\pixality.dll
C:\Users\win7\AppData\Local\Temp\nsz9DAD.tmp\UserInfo.dll
C:\Users\win7\AppData\Local\Temp\nsz9DAD.tmp\nsDialogs.dll
C:\Users\win7\AppData\Local\Temp\nshD405.tmp\LangDLL.dll
C:\Users\win7\AppData\Local\Temp\nshD405.tmp\Aero.dll
C:\Users\win7\AppData\Local\Temp\nshD405.tmp\BrandingURL.dll
C:\Users\win7\AppData\Local\Temp\nshD405.tmp\nsDialogs.dll
C:\Users\win7\AppData\Local\Temp\nshD405.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nshD405.tmp\CustomLicense.dll
C:\Users\win7\AppData\Local\Temp\nshD405.tmp\ToolTips.dll
c:\program files\internet explorer\iexplore.exe
FastMM_FullDebugMode.dll
C:\Users\win7\AppData\Local\Temp\000be643.a
C:\Users\win7\AppData\Local\Temp\000bee61.a
C:\PYTHON27.DLL
C:\Users\win7\AppData\Local\Temp\nsh9734.tmp\AdvSplash.dll
C:\Users\win7\AppData\Local\Temp\nsh9734.tmp\InstallOptions.dll
C:\Users\win7\AppData\Local\Temp\nsh9734.tmp\FontName.dll
C:\Users\win7\AppData\Local\Temp\nsh9734.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\is-VTV4A.tmp\sample.ENU
C:\Users\win7\AppData\Local\Temp\is-VTV4A.tmp\sample.EN
C:\facompress.dll
C:\facompress_mt.dll
C:\Users\win7\AppData\Local\Temp\{A145AABC-0B25-4940-A087-A59DCB79EE7E}\fpb.tmp
C:\Users\win7\AppData\Local\Temp\{D04AC0E4-8BC6-43FC-A3CF-DF9B461B3EC0}\fpb.tmp
sperr32.exe
Msi.dll
CABINET
comctl32
C:\Program Files\Alwil Software\Avast5\ashTaskEx.dll
C:\Program Files\Alwil Software\Avast5\ashBase.dll
C:\Program Files\Alwil Software\Avast5\defs\FFFFFFFF\aswCmnBS.dll
uxtheme
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Opera.dll
C:\Users\win7\AppData\Local\Temp\nst34CF.tmp\LangDLL.dll
C:\Users\win7\AppData\Local\Temp\nst34CF.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nst34CF.tmp\InstallOptions.dll
C:\Users\win7\AppData\Local\Temp\is-NO3AF.tmp\sample.ENU
C:\Users\win7\AppData\Local\Temp\is-NO3AF.tmp\sample.EN
C:\Users\win7\AppData\Local\Temp\is-RHGRT.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\is-RHGRT.tmp\Certificate.dll
C:\Users\win7\AppData\Local\Temp\is-54A3G.tmp\OCSetupHlp.dll
C:\Users\win7\AppData\Local\Temp\is-54A3G.tmp\GCountry.dll
C:\Users\win7\AppData\Local\Temp\is-VIF8R.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\is-VIF8R.tmp\innocallback.dll
C:\Users\win7\AppData\Local\Temp\is-VIF8R.tmp\innocallback.ENU
C:\Users\win7\AppData\Local\Temp\is-VIF8R.tmp\innocallback.EN
C:\Users\win7\AppData\Local\Temp\is-VIF8R.tmp\isslideshow.dll
C:\Users\win7\AppData\Local\Temp\is-VIF8R.tmp\isslideshow.ENU
C:\Users\win7\AppData\Local\Temp\is-VIF8R.tmp\isslideshow.EN
C:\Users\win7\AppData\Local\Temp\is-VIF8R.tmp\ISDone.dll
C:\Users\win7\AppData\Local\Temp\is-VIF8R.tmp\wintb.dll
C:\Users\win7\AppData\Local\Temp\is-VIF8R.tmp\CallbackCtrl.dll
C:\Users\win7\AppData\Local\Temp\is-VIF8R.tmp\iswin7.dll
Ntdll
C:\Users\win7\AppData\Local\Temp\is-VIF8R.tmp\botva2.dll
GDIPlus
C:\Users\win7\AppData\Local\Temp\nsq9FEA.tmp\AlexaToolbar.dll
C:\Users\win7\AppData\Local\Temp\nsq9FEA.tmp\InstallOptions.dll
AdvApi32
C:\Users\win7\AppData\Local\Temp\nsf10F8.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsf10F8.tmp\ExecCmd.dll
Msctf.dll
C:\Users\win7\AppData\Local\Temp\nsrDBD0.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsrDBD0.tmp\UAC.dll
C:\Users\win7\AppData\Local\Temp\nsrDBD0.tmp\nsDialogs.dll
C:\Users\win7\AppData\Local\Temp\nsrDBD0.tmp\InetBgDL.dll
C:\Users\win7\AppData\Local\Temp\nsrDBD0.tmp\CertCheck.dll
C:\Users\win7\AppData\Local\Temp\is-2S15M.tmp\sample.ENU
C:\Users\win7\AppData\Local\Temp\is-2S15M.tmp\sample.EN
C:\proj.dll
COMDLG32.DLL
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\bcrypt.dll
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\rasapi32.dll
rasapi32.dll
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\ws2_32.dll
RASMAN.DLL
rtutils.dll
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\winhttp.dll
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\iphlpapi.dll
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\shell32.dll
C:\Users\win7\AppData\Local\Temp\is-HHQ59.tmp\sample.ENU
C:\Users\win7\AppData\Local\Temp\is-HHQ59.tmp\sample.EN
C:\Users\win7\AppData\Local\Temp\is-0PLIU.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\is-0PLIU.tmp\ISDone.dll
C:\Users\win7\AppData\Local\Temp\is-0PLIU.tmp\isskin.dll
C:\Users\win7\AppData\Local\Temp\is-0PLIU.tmp\b2p.dll
C:\Users\win7\AppData\Local\Temp\is-0PLIU.tmp\botva2.dll
C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18834_none_72d38c5186679d48\GDIPlus.DLL
C:\Users\win7\AppData\Local\Temp\is-HHQ59.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\is-0PLIU.tmp\skin.tm
C:\Users\win7\AppData\Local\Temp\is-0PLIU.tmp\CallbackCtrl.dll
DbgHelp.dll
C:\strings.dll
SHFolder.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\99cdfef98595ed91f14936cf52a49c54\System.Management.ni.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\\wminet_utils.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\oleaut32.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\OLEAUT32.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\007fc007edc388d9806dff94ee04f129\System.Configuration.ni.dll
Wtsapi32.dll
C:\vnclang_server.dll
User32
C:\Users\win7\AppData\Local\Temp\nsq2139.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsq2139.tmp\UAC.dll
C:\Users\win7\AppData\Local\Temp\nsq2139.tmp\InstallOptions.dll
avicap32.dll
gui.dll
C:\Windows\system32\IconCodecService.dll
C:\GFXFileManager.dll
C:\Users\win7\AppData\Local\Temp\is-KUF6D.tmp\_isetup\_shfoldr.dll
MediaDico4UtDll.Dll
C:\Users\win7\AppData\Local\Temp\nsd1A01.tmp\LangDLL.dll
C:\Users\win7\AppData\Local\Temp\nsd1A01.tmp\nsDialogs.dll
C:\Users\win7\AppData\Local\Temp\nsd1A01.tmp\System.dll
Urlmon.dll
C:\Users\win7\AppData\Local\Temp\nsqC85C.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsqC85C.tmp\InstOpt.dll
C:\Windows\system32\CRTDLL.dll
svcs.dll
comsvcs.dll
commonlib.dll
fnsSkinx.dll
ImgUtil.dll
C:\Users\win7\AppData\Local\Temp\DXGIDebug.dll
C:\Windows\SysWOW64\urlmon.dll
NTDLL
SSPICLI
1025\HotFixInstallerUI.dll
1028\HotFixInstallerUI.dll
1029\HotFixInstallerUI.dll
1030\HotFixInstallerUI.dll
1031\HotFixInstallerUI.dll
1032\HotFixInstallerUI.dll
1033\HotFixInstallerUI.dll
1035\HotFixInstallerUI.dll
1036\HotFixInstallerUI.dll
1037\HotFixInstallerUI.dll
1038\HotFixInstallerUI.dll
1040\HotFixInstallerUI.dll
1041\HotFixInstallerUI.dll
1042\HotFixInstallerUI.dll
1043\HotFixInstallerUI.dll
1044\HotFixInstallerUI.dll
1045\HotFixInstallerUI.dll
1046\HotFixInstallerUI.dll
1049\HotFixInstallerUI.dll
1053\HotFixInstallerUI.dll
1055\HotFixInstallerUI.dll
2052\HotFixInstallerUI.dll
2070\HotFixInstallerUI.dll
3076\HotFixInstallerUI.dll
3082\HotFixInstallerUI.dll
<NULL>
C:\Users\win7\AppData\Local\Temp\is-TDM1M.tmp\_isetup\_shfoldr.dll
C:\mmkeybsupp.dll
sfc.dll
dnsapi.dll
C:\Windows\system32\usp10.dll
C:\Windows\system32\imm32.dll
C:\Windows\system32\winbrand.dll
C:\Windows\Branding\Basebrd\Basebrd.dll
C:\Windows\SysWOW64\dxdiagn.dll
C:\Windows\system32\ddraw.dll
D3DREF9.DLL
C:\Users\win7\AppData\Local\Temp\tf00294823.dll
IPHLPAPI.dll
URLMON.dll
OLE32.dll
Fwpuclnt.dll
C:\Users\win7\AppData\Local\Temp\nsqEF0D.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsqEF0D.tmp\nsDialogs.dll
C:\Users\win7\AppData\Local\Temp\nsqEF0D.tmp\registry.dll
C:\Users\win7\AppData\Local\Temp\nsqEF0D.tmp\Math.dll
C:\Users\win7\AppData\Local\Temp\nsqEF0D.tmp\blowfish.dll
C:\Users\win7\AppData\Local\Temp\nsqEF0D.tmp\UserInfo.dll
C:\Users\win7\AppData\Local\Temp\nsqEF0D.tmp\GetVersion.dll
C:\Windows\system32\mshtml.dll
C:\Users\win7\AppData\Local\Temp\nsqEF0D.tmp\manlib.dll
C:\Users\win7\AppData\Local\Temp\\oDZbpbzhYpdwsluFWctA.DLL
C:\Users\win7\AppData\Local\Temp\\iRnekTkSLeTEAZMXPaSt.DLL
C:\Users\win7\AppData\Local\Temp\\PykEoRvxxB.DLL
D3DIM700.DLL
bass.dll
WLDAP32.dll
T2EMBED.DLL
GDI32.DLL
C:\Users\win7\AppData\Local\Temp\dsNcAdmin_inst.dll
C:\Users\win7\AppData\Local\Temp\is-K6KH7.tmp\_isetup\_shfoldr.dll
libnspr4.dll
nss3.dll
nssutil3.dll
smime3.dll
C:\Users\win7\AppData\Local\Temp\nsyF632.tmp\kgptighzy.dll
C:\Users\win7\AppData\Local\Temp\nsyF632.tmp\cudnuhnhq.dll
C:\Users\win7\AppData\Local\Temp\nsyF632.tmp\tabal.dll
C:\Users\win7\AppData\Local\Temp\nsyF632.tmp\iuqligddt.dll
C:\Users\win7\AppData\Local\Temp\nsyF632.tmp\urxsia.dll
C:\Users\win7\AppData\Local\Temp\nsyF632.tmp\ckblhyra.dll
C:\Users\win7\AppData\Local\Temp\nsyF632.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsyF632.tmp\qqdnfm.dll
C:\Users\win7\AppData\Local\Temp\nsc72D3.tmp\InstallOptions.dll
C:\Users\win7\AppData\Local\Temp\is-K2999.tmp\_isetup\_shfoldr.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\abecd46ce0b212dad31a9e8f9adf073f\System.EnterpriseServices.ni.dll
easyhook32.dll
C:\Users\win7\AppData\Local\Temp\{441F2C4A-C520-425D-AC0A-E5BC4FFBF010}\fpb.tmp
C:\Users\win7\AppData\Local\Temp\{749FA387-F47E-49A8-B05E-0D0463F62F92}\fpb.tmp
C:\Windows\system32\CRYPTNET.dll
Versions\1.0\Adobe AIR.dll
C:\Users\win7\AppData\Local\Temp\AIRDAF7.tmp\Install PyxelEdit.exe
C:\shell32.dll
C:\Users\win7\AppData\Local\Temp\System.Data.SQLite.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\VERSION.dll
C:\Users\win7\AppData\Local\Temp\is-JMVBD.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\is-SGKRM.tmp\sample.ENU
C:\Users\win7\AppData\Local\Temp\is-SGKRM.tmp\sample.EN
C:\Users\win7\AppData\Local\Temp\is-987E2.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\is-987E2.tmp\InstallerExtensions.dll
pythondll
C:\Users\win7\AppData\Local\Temp\nsr4AAB.tmp\UAC.dll
C:\Users\win7\AppData\Local\Temp\nsr4AAB.tmp\LangDLL.dll
C:\Users\win7\AppData\Local\Temp\nsr4AAB.tmp\AdvSplash.dll
C:\Users\win7\AppData\Local\Temp\nsr4AAB.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsr4AAB.tmp\UserInfo.dll
C:\Users\win7\AppData\Local\Temp\nsr4AAB.tmp\InstallOptions.dll
C:\idmvs.dll
Connect.dll
RASAPI32
OPENGL32
C:\Users\win7\AppData\Local\Temp\is-3BSP7.tmp\sample.ENU
C:\Users\win7\AppData\Local\Temp\is-3BSP7.tmp\sample.EN
C:\Users\win7\AppData\Local\Temp\is-AGITE.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\is-AGITE.tmp\itdownload.dll
C:\Users\win7\AppData\Local\Temp\is-AGITE.tmp\itdownload.ENU
C:\Users\win7\AppData\Local\Temp\is-AGITE.tmp\itdownload.EN
C:\Users\win7\AppData\Local\Temp\is-AGITE.tmp\muid.dll
C:\Windows\system32\dbgHelp.dll
C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d\comctl32.dll
C:\Windows\system32\WINSTA.dll
C:\Windows\system32\WTSAPI32.dll
C:\Windows\system32\wkscli.dll
C:\Windows\system32\srvcli.dll
C:\Windows\system32\netutils.dll
C:\Windows\system32\NETAPI32.dll
C:\Windows\system32\MSIMG32.dll
C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_ec86b8d6858ec0bc\COMCTL32.dll
C:\Windows\system32\DNSAPI.dll
C:\Windows\system32\version.DLL
C:\CFVS_HookDll.dll
C:\Windows\syswow64\CRYPTBASE.dll
C:\Windows\syswow64\SspiCli.dll
C:\Users\win7\AppData\Local\Temp\nsq39BE.tmp\Banner.dll
C:\Users\win7\AppData\Local\Temp\nsq39BE.tmp\KPTool.dll
C:\Users\win7\AppData\Local\Temp\nsq39BE.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsq39BE.tmp\NSISdl.dll
C:\Users\win7\AppData\Local\Temp\nsq39BE.tmp\inetc.dll
C:\Users\win7\AppData\Local\Temp\nsl5781.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsl5781.tmp\StdUtils.dll
C:\Users\win7\AppData\Local\Temp\nsl5781.tmp\UAC.dll
USER32
C:\Users\win7\AppData\Local\Temp\nsl5781.tmp\nsislog.dll
C:\Users\win7\AppData\Local\Temp\nsl5781.tmp\nsislog.ENU
C:\Users\win7\AppData\Local\Temp\nsl5781.tmp\nsislog.EN
netapi32.dll
pstorec.dll
userenv.dll
C:\Users\win7\AppData\Local\Temp\is-FFPN5.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\is-B4F1N.tmp\_isetup\_shfoldr.dll
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\psapi.dll
C:\Users\win7\AppData\Local\Temp\is-GH4O8.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\is-GH4O8.tmp\CallbackCtrl.dll
C:\Users\win7\AppData\Local\Temp\is-GH4O8.tmp\isskin.dll
C:\Users\win7\AppData\Local\Temp\is-GH4O8.tmp\ISDone.dll
C:\Users\win7\AppData\Local\Temp\is-4M4D8.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\is-GH4O8.tmp\skin.cjstyles
C:\Users\win7\AppData\Local\Temp\is-GH4O8.tmp\b2p.dll
C:\Users\win7\AppData\Local\Temp\is-GH4O8.tmp\botva2.dll
psapi.DLL
C:\Windows\SysWOW64\psapi.dll
shlwapi.DLL
C:\Windows\System32\ntoskrnl.exe
C:\Windows\System32\imageres.dll
OpenGL32.DLL
inetmib1.dll
mpr.dll
Wininet.dll
C:\YSearchUtil.dll
C:\Users\win7\AppData\Local\Temp\RarSFX0\Binaries\ChromeInstaller.exe
C:\Windows\SysWOW64\USER32.DLL
AVICAP32.DLL
powrprof.dll
C:\Users\win7\AppData\Local\Temp\7W8YDR\utility.dll
C:\Windows\system32\Macromed\Common\SwSupport.dll
C:\Windows\system32\Macromed\Shockwave\SwSupport.dll
C:\Windows\system32\Macromed\Flash\~SS3DF7.tmp
C:\Users\win7\AppData\Local\Temp\{44EC31C6-C520-425D-AC0A-E5BC4FFBFF10}\fpb.tmp
C:\Users\win7\AppData\Local\Temp\{746CBE1B-F47E-49A8-B05E-0D0463F62F92}\fpb.tmp
mtxoci.dll
oci.dll
C:\Windows\system32\comsvcs.dll
DnsApi.dll
C:\Users\win7\AppData\Local\Temp\xns30E7.tmp
C:\Users\win7\AppData\Local\Temp\InstTemp0\userinstall.dll
C:\Users\win7\AppData\Local\Temp\nssD05.tmp\System.dll
2052\VLearner_Resource_Standard.dll
C:\Windows\system32\mspaint.exe
C:\Windows\System32\mspaint.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Windows\System32\notepad.exe
c:\windows\system32\mspaint.exe
c:\windows\system32\notepad.exe
C:\Users\win7\AppData\Local\Temp\nsq357.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsq357.tmp\nsExec.dll
C:\Users\win7\AppData\Local\Temp\is-D86PD.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\is-D86PD.tmp\ISTask.dll
C:\Users\win7\AppData\Local\Temp\is-D86PD.tmp\ISTask.ENU
C:\Users\win7\AppData\Local\Temp\is-D86PD.tmp\ISTask.EN
C:\Users\win7\AppData\Local\Temp\is-T8C5G.tmp\sample.ENU
C:\Users\win7\AppData\Local\Temp\is-T8C5G.tmp\sample.EN
C:\Windows\system32\jscript.dll
C:\Users\win7\AppData\Local\Temp\is-KEDMG.tmp\_isetup\_shfoldr.dll
C:\Windows\system32\nvapi.dll
@|_
@|`
@|h|_
C:\Users\win7\AppData\Local\Temp\is-E3PEK.tmp\sample.ENU
C:\Users\win7\AppData\Local\Temp\is-E3PEK.tmp\sample.EN
C:\Users\win7\AppData\Local\Temp\is-GBRKE.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\is-JPO5F.tmp\sample.ENU
C:\Users\win7\AppData\Local\Temp\is-JPO5F.tmp\sample.EN
C:\Users\win7\AppData\Local\Temp\is-SDREL.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\nsw2501.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsw2501.tmp\inetc.dll
C:\Users\win7\AppData\Local\Temp\nsw2501.tmp\nsDialogs.dll
MPR.DLL
C:\Users\win7\AppData\Local\Temp\nscABB7.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nscABB7.tmp\inetpost.dll
C:\Users\win7\AppData\Local\Temp\nscABB7.tmp\LangDLL.dll
C:\Users\win7\AppData\Local\Temp\nscABB7.tmp\nsDialogs.dll
C:\Users\win7\AppData\Local\Temp\nscABB7.tmp\UserInfo.dll
C:\Users\win7\AppData\Local\Temp\nscABB7.tmp\nsProcess.dll
oleaut32
C:\Users\win7\AppData\Local\Temp\FsmSetup\Install.ENU
C:\Users\win7\AppData\Local\Temp\FsmSetup\Install.EN
C:\AsusHook.dll
C:\Users\win7\AppData\Local\Temp\Tsu5ED29E38.dll
sxs.dll
rstrtmgr.dll
C:\Users\win7\AppData\Local\Temp\{07C171EC-5167-4901-ABEA-1945DC22531A}\_Setup.dll
C:\Users\win7\AppData\Local\Temp\{07C171EC-5167-4901-ABEA-1945DC22531A}\Custom.dll
msftedit.dll
C:\Users\win7\AppData\Local\Temp\nsg15CF.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsg15CF.tmp\CityHash.dll
C:\Users\win7\AppData\Local\Temp\dfsB0CA.tmp
C:\Users\win7\AppData\Local\Temp\shell32.dll
C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\comctl32.dll
C:\Users\win7\AppData\Local\Coowon\Update\1.3.33.0\coopdate.dll
C:\Users\win7\AppData\Local\Coowon\Update\1.3.33.0\psuser.dll
advpack.dll
C:\Windows\system32\DirectX\WebSetup\dsetup.dll
C:\Windows\system32\dsetup.dll
C:\Users\win7\AppData\Local\Temp\is-HGVFG.tmp\_isetup\_shfoldr.dll
netprofm.dll
C:\Windows\system32\symsrv.dll
C:\Users\win7\AppData\Local\Temp\is-UM4R5.tmp\_isetup\_shfoldr.dll
MFC42u.DLL
MSVCIRT.dll
C:\Users\win7\AppData\Local\Temp\is-4OAQS.tmp\sample.ENU
C:\Users\win7\AppData\Local\Temp\is-4OAQS.tmp\sample.EN
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\botva2.dll
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\innocallback.dll
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\innocallback.ENU
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\innocallback.EN
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\winmsgctrl.dll
MSVCP60.dll
RS3=Hptv
8QQ=Hptv
C:\Windows\syswow64\WININET.dll
C:\Windows\uxtheme.dll
gdiplus
C:\Users\win7\AppData\Local\Temp\nsy4BC0.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\is-TTNJI.tmp\sample.ENU
C:\Users\win7\AppData\Local\Temp\is-TTNJI.tmp\sample.EN
C:\Users\win7\AppData\Local\Temp\nsn42FE.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nso8108.tmp\System.dll
C:\Windows\SysWOW64\timeout.exe
C:\Users\win7\AppData\Local\Temp\nsp69D.tmp\InstallOptions.dll
C:\Users\win7\AppData\Local\Temp\nsp69D.tmp\ShellExecAsUser.dll
C:\Windows\SysWOW64\SAGE.DLL
C:\Windows\system32\netmsg.dll
User32.DLL
HSInst.dll
C:\Users\win7\AppData\Local\Temp\is-UH93A.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\is-UH93A.tmp\TempkillProcess.dll
C:\Users\win7\AppData\Local\Temp\is-UH93A.tmp\TempkillProcess.ENU
C:\Users\win7\AppData\Local\Temp\is-UH93A.tmp\TempkillProcess.EN
C:\Users\win7\AppData\Local\Temp\is-UH93A.tmp\KPByName.dll
C:\Users\win7\AppData\Local\Temp\is-C3OF7.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\nsxB2CB.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsxB2CB.tmp\bass.dll
C:\Windows\System32\dsound.dll
mozglue.dll
C:\Users\win7\AppData\Local\Temp\nsf458B.tmp\System.dll
C:\Windows\system32\pidgen.dll
C:\PROGRA~2\WI54FB~1\pidgen.dll
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\nsJSON.dll
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\inetc.dll
UXTHEME
VBoxHook.dll
C:\Users\win7\AppData\Local\Temp\is-55OMA.tmp\_isetup\_shfoldr.dll
avrt.dll
DSOUND.DLL
d3d9.dll
DINPUT.DLL
HID.DLL
SETUPAPI.DLL
C:\Users\win7\AppData\Local\Temp\nsvAE2D.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsvAE2D.tmp\LangDLL.dll
C:\Users\win7\AppData\Local\Temp\nsvAE2D.tmp\InstallOptions.dll
C:\Users\win7\AppData\Local\Temp\nsq8893.tmp\nsDialogs.dll
C:\Users\win7\AppData\Local\Temp\nsq8893.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\is-RP7AN.tmp\sample.ENU
C:\Users\win7\AppData\Local\Temp\is-RP7AN.tmp\sample.EN
C:\Users\win7\AppData\Local\Temp\is-012GE.tmp\_isetup\_shfoldr.dll
C:\Windows\system32\d3d11.dll
C:\Windows\system32\dxgi.dll
C:\Windows\system32\msvfw32.dll
C:\Windows\system32\Gdi32.dll
C:\Windows\system32\Avicap32.dll
C:\Windows\system32\quartz.dll
C:\Windows\system32\Magnification.dll
ws2_32
urlmon
C:\Users\win7\AppData\Local\Temp\GLCB296.tmp
C:\Users\win7\AppData\Local\Temp\GLKB2D5.tmp
SFC.DLL
SRCLIENT.DLL
\Install\gcapi_dll.dll
SetupApi.dll
C:\Windows\system32\McxDriv.dll
C:\Windows\System32\setupapi.dll
C:\Windows\system32\mmsys.cpl
C:\Windows\system32\mdminst.dll
C:\Windows\system32\SensorsCpl.dll
C:\Windows\System32\SysClass.DLL
C:\Windows\system32\NetCfgx.dll
C:\Windows\system32\sti_ci.dll
C:\Windows\System32\\imageres.dll
C:\Windows\system32\batt.dll
C:\Windows\system32\sccls.dll
C:\Windows\system32\AuxiliaryDisplayClassInstaller.dll
C:\Windows\system32\bthci.dll
SPINF.dll
C:\Users\win7\AppData\Local\Temp\mia3C42.tmp\UltraFileSearchLite_450_Setup.ENU
C:\Users\win7\AppData\Local\Temp\mia3C42.tmp\UltraFileSearchLite_450_Setup.EN
C:\Users\win7\AppData\Local\Temp\mia3C42.tmp\mia.lib
C:\Windows\system32\d3d10level9.dll
appHelp.dll
hnetcfg.dll
jscript.dll
mlang.dll
msctf.dll
msimtf.dll
mslbui.dll
rasadhlp.dll
shdoclc.dll
wshtcpip.dll
wsock32
C:\python27.dll
C:/Users/win7/AppData/Local/Temp/_MEI27002/python27.dll
C:\Users\win7\AppData\Local\Temp\_MEI27002\_socket.pyd
C:\Users\win7\AppData\Local\Temp\_MEI27002\_ssl.pyd
C:\Users\win7\AppData\Local\Temp\_MEI27002\_ctypes.pyd
C:\Users\win7\AppData\Local\Temp\_MEI27002\_hashlib.pyd
C:\winampa.lng
C:\Users\win7\AppData\Local\Temp\\Creative_ALchemy_AL6_Cleanup.0001.dir.0000\~df394b.tmp
C:\Users\win7\AppData\Local\Temp\Creative_ALchemy_AL6_Cleanup.0001.dir.0000\~df394b.tmp
C:\Users\win7\AppData\Local\Temp\Creative_ALchemy_AL6_Cleanup.0001.dir.0000\~de2314.tmp
C:\Users\win7\AppData\Local\Temp\miaB082.tmp\Guitar Rig Mobile IO Setup PC.ENU
C:\Users\win7\AppData\Local\Temp\miaB082.tmp\Guitar Rig Mobile IO Setup PC.EN
C:\Users\win7\AppData\Local\Temp\miaB082.tmp\mia.lib
msvcrt
C:\Users\win7\AppData\Local\Temp\nsc7DBB.tmp\inetc.dll
C:\Users\win7\AppData\Local\Temp\is-GIMVR.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\is-05C2G.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\dfs7A01.tmp
C:\ntdll.dll
C:\Users\win7\AppData\Local\Temp\nsyBD6F.tmp\nsDialogs.dll
C:\Users\win7\AppData\Local\Temp\nsyBD6F.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsyBD6F.tmp\KillProcWMI.dll
wmiutils.dll
ShlWapi.dll
[System Process]
System
smss.exe
csrss.exe
wininit.exe
winlogon.exe
services.exe
lsass.exe
svchost.exe
VBoxService.exe
audiodg.exe
spoolsv.exe
sppsvc.exe
SearchIndexer.exe
PsApi.dll
taskhost.exe
dwm.exe
explorer.exe
VBoxTray.exe
cmd.exe
conhost.exe
python.exe
dllhost.exe
WmiPrvSE.exe
C:\Users\win7\AppData\Local\Temp\nsiC141.tmp\nsDialogs.dll
C:\Users\win7\AppData\Local\Temp\nsiC141.tmp\System.dll
Disable
DataFilePath
Plane1
Plane2
Plane3
Plane4
Plane5
Plane6
Plane7
Plane8
Plane9
Plane10
Plane11
Plane12
Plane13
Plane14
Plane15
Plane16
NoRun
NoDrives
RestrictRun
NoNetConnectDisconnect
NoRecentDocsHistory
NoClose
RegisteredOwner
RegisteredOrganization
AppData
Desktop
Personal
Programs
Start Menu
Startup
My Music
My Pictures
My Video
Install
Version
FrameTabWindow
FrameMerging
SessionMerging
AdminTabProcs
TabProcGrowth
CreateUriCacheSize
EnablePunycode
DisableSecuritySettingsCheck
SystemSetupInProgress
SpecialFoldersCacheSize
SyncMode5
FEATURE_CLIENTAUTHCERTFILTER
FromCacheTimeout
SecureProtocols
DisableKeepAlive
IdnEnabled
PreConnectLimit
PreResolveLimit
SqmHttpStreamRandomUploadPoolSize
CacheMode
EnableHttp1_1
ProxyHttp1.1
EnableNegotiate
DisableBasicOverClearChannel
ClientAuthBuiltInUI
DisableReadRange
SocketSendBufferLength
SocketReceiveBufferLength
KeepAliveTimeout
MaxHttpRedirects
MaxConnectionsPerServer
MaxConnectionsPer1_0Server
MaxConnectionsPerProxy
ServerInfoTimeout
ConnectTimeOut
ConnectRetries
SendTimeOut
ReceiveTimeOut
DisableNTLMPreAuth
ScavengeCacheLowerBound
CertCacheNoValidate
ScavengeCacheFileLifeTime
ScavengeCacheFileLimit
HttpDefaultExpiryTimeSecs
FtpDefaultExpiryTimeSecs
LeashLegacyCookies
SendExtraCRLF
WpadSearchAllDomains
DontUseDNSLoadBalancing
ShareCredsWithWinHttp
DnsCacheEnabled
DnsCacheEntries
DnsCacheTimeout
WarnOnPost
WarnAlwaysOnPost
WarnOnZoneCrossing
WarnOnBadCertRecving
WarnOnPostRedirect
AlwaysDrainOnRedirect
WarnOnHTTPSToHTTPRedirect
TcpAutotuning
BadProxyExpiresTime
AutoProxyDetectType
WpadOverride
DisableBranchCache
UseFirstAvailable
CombineFalseStartData
DisableFalseStartBlocklist
EnforceP3PValidity
DuoProtocols
EnableSpdyDebugAsserts
ProxyEnable
ProxyServer
ProxyOverride
AutoConfigURL
AutoDetect
SavedLegacySettings
DefaultConnectionSettings
WpadDecision
WpadDecisionTime
WpadExpirationDays
WpadDecisionReason
WpadDhcp
WpadDns
WpadDetectedUrl
InstallRoot
CLRLoadLogDir
OnlyUseLatestCLR
NoGuiFromShim
ProcessID
EnablePrivateObjectHeap
ContextLimit
ObjectLimit
IdentifierLimit
GCStressStart
GCStressStartAtJit
DisableConfigCache
CacheLocation
DownloadCacheQuotaInKB
EnableLog
LoggingLevel
ForceLog
LogFailures
VersioningLog
LogResourceBinds
UseLegacyIdentityFormat
DisableMSIPeek
NoClientChecks
DevOverrideEnable
LatestIndex
NIUsageMask
ILUsageMask
DisplayName
ConfigMask
ConfigString
MVID
EvalationData
Status
ILDependencies
NIDependencies
MissingDependencies
Modules
SIG
LastModTime
mscorlib
MS Shell Dlg 2
ProgramFilesDir
Inno Setup: App Path
SP
.HLP
Win31FileSystem
CommonFilesDir
WaitToKillServiceTimeout
InstallLocation
Latest
index1
LegacyPolicyTimeStamp
Microsoft.VisualBasic
System
System.Xml
System.Configuration
System.Web
System.Management
System.Runtime.Remoting
System.Deployment
System.Drawing
System.Windows.Forms
System.Runtime.Serialization.Formatters.Soap
Accessibility
System.Security
DbgJITDebugLaunchSetting
DbgManagedDebugger
System.DirectoryServices
<NULL>
NavigationDelay
sample
TotalLimit
DomainLimit
RootDomainLimit
MaxSubDomains
UrlEncoding
No3DBorder
IsTextPlainHonored
ZoomDisabled
MinimumSystemTimerResolution
RenderingLoopMaxTime
RtfConverterFlags
Use_DlgBox_Colors
Anchor Underline
CSS_Compat
Expand Alt Text
Display Inline Images
Display Inline Videos
Play_Background_Sounds
Play_Animations
Print_Background
SmoothScroll
XMLHTTP
Show image placeholders
Disable Script Debugger
DisableScriptDebuggerIE
Disable Diagnostics Mode
Move System Caret
Enable AutoImageResize
UseHR
Q300829
Cleanup HTCs
XDomainRequest
DOMStorage
JScriptProfileCacheEventDelay
Default_CodePage
Default_IEFontSizePrivate
Anchor Color
Anchor Color Visited
Anchor Color Hover
Always Use My Colors
Always Use My Font Size
Always Use My Font Face
Disable Visited Hyperlinks
Use Anchor Hover Color
MiscFlags
Allow Programmatic Cut_Copy_Paste
DisableCachingOfSSLPages
950
IEFontSize
IEFontSizePrivate
IEPropFontName
IEFixedFontName
IESerifFontName
IESansSerifFontName
IEUIFontName
VML
IE
WindowsEdition
CLSID
NoProtectedModeBanner
ProtectedModeOffForAllZones
Compatible
Platform
EnableUTF8
SecurityIdIUriCacheSize
Extension
Seed
GlitchInstrumentation
eos_proxy_addr
eos_proxy_port
eos_proxy_username
eos_proxy_enabled
eos_proxy_password_enc
UseDoubleClickTimer
Tahoma
ClientSign
2216
CVListXMLVersionLow
CVListXMLVersionHigh
IECompatVersionLow
IECompatVersionHigh
DaysToKeep
Use Web Based FTP
ClientCacheSize
Size
Name
ForceBFCacheCandidacyPass
CoInternetCombineIUriCacheSize
DataStreamEnabledState
EnabledScopes
DontSendAdditionalData
Disabled
DefaultConsent
DefaultOverrideBehavior
CLR20r3
LoggingDisabled
DontShowUI
DisableArchive
ConfigureArchive
DisableQueue
MaxQueueCount
MaxArchiveCount
ForceQueue
QueuePesterInterval
SendEFSFiles
BypassDataThrottling
ForceUserModeCabCollection
CorporateWerServer
CorporateWerUseSSL
CorporateWerPortNumber
CorporateWerUseAuthentication
UserContextLockCount
UserContextListCount
MID
SusClientId
RulesXmlDir
AllowConsecutiveSlashesInUrlPathComponent
UID
SendCustomerData
AppUserIdleTimerInterval
AppUserIdleResetInterval
VersionToReport
CDNBaseUrl
ClientVersionToReport
ClientFolder
recoverydata
ULSCategoriesSeverities
ULSAllCategories
SystemComponent
WindowsInstaller
UninstallString
DisplayVersion
ClientCulture
MSFTInternal
IsTest
MachineId
UMID
UUID
CurrentBuildNumber
CurrentVersion
PendingFileRenameOperations
SynUnInstall
EnableLUA
LocalAppData
Upgrade
CurrentMajorVersionNumber
IJWEntrypointCompatMode
System.Data.SqlXml
Enable Browser Extensions
test
Piriform Ltd
Content Type
AutoRecover
SVar
AVI_DirectShow_WaveFileFormatPath
AVI_DV_Type
AVI_DV_Samplerate
AVI_DV_Channels
EditOutput_Resize
EditOutput_ChangeFramerate
EditOutput_ForceFixedFramerate
EditOutput_ResizeType
EditOutput_Width
EditOutput_Height
EditOutput_ResizeKeepRatio
EditOutput_Framerate
MP4_PSPMuxer
MP4_iPodMuxer
MP4_VideoCodec
MP4_CustomBitrate
MP4_AverageBitrate
MP4_MaximumBitrate
MP4_AudioBitrate
MP4_CRF_H264
FLV_VideoCodec
FLV_CustomBitrate
FLV_AverageBitrate
FLV_MaximumBitrate
FLV_AudioBitrate
FLV_CRF
SWF_CustomBitrate
SWF_AverageBitrate
SWF_MaximumBitrate
SWF_AudioBitrate
GIF_LoopTimes
AVI_Type
AVI_FFMPEG_Type
AVI_FFMPEG_CustomBitrate
AVI_FFMPEG_AverageBitrate
AVI_FFMPEG_MaximumBitrate
AVI_FFMPEG_AudioBitrate
AVI_FFMPEG_Samplerate
AVI_FFMPEG_Channels
AVI_FFMPEG_CRF
AVI_DirectShow_EncoderMoniker
RD
ProcessorNameString
Col1
Col2
Col3
Col4
Col5
Col6
Col7
Col8
Col9
ColumnDate
ColumnNotes
MenuHide
UserUUID
InstallSuccess
NetCfgInstanceId
ShortcutBehavior
URL
~MHz
Language
SystemBiosVersion
ID
ProductId
IDD
Gateway
PackageCode
InstanceType
DropLocation
ProductGuid
MachineGuid
BootDir
MouseHoverTime
Common Administrative Tools
MainTaskName
Installing
LocalRootFolder
SystemBiosDate
MS Sans Serif
TempPropDevicePath
TempDevInstanceId
ProductName
ProgID
Application
Arial
Start Page
Default_Page_URL
Logging
Logging Directory
Log File Max Size
HideCaptionMenu
ControlState
DefaultVideoFrame
KeepAspectRatio
CompMonDeskARDiff
Volume
Balance
Mute
LoopNum
Loop
Rewind
Zoom
DSVidRen
RMVidRen
QTVidRen
APSurfaceUsage
VMRSyncFix
DX9Resizer
VMR9MixerMode
VMRMixerYUV
AudioRendererType
AutoloadAudio
AutoloadSubtitles
BlockVSFilter
EnableWorkerThreadForOpening
ReportFailedPins
AllowMultipleInstances
TitleBarTextStyle
TitleBarTextTitle
OnTop
TrayIcon
AutoZoom
FullScreenCtrls
FullScreenCtrlsTimeOut
FullscreenRes
ExitFullscreenAtTheEnd
RememberWindowPos
RememberWindowSize
SnapToDesktopEdges
AspectRatioX
AspectRatioY
KeepHistory
LastWindowRect
LastWindowType
DVDPath
UseDVDPath
MenuLang
AudioLang
SubtitlesLang
AutoSpeakerConf
SPDefaultStyle
SPOverridePlacement
SPHorPos
SPVerPos
SPCSize
SPCMaxRes
SubDelayInterval
SPCPow2Tex
EnableSubtitles
EnableAudioSwitcher
EnableAudioTimeShift
AudioTimeShift
DownSampleTo441
CustomChannelMapping
SpeakerToChannelMapping
AudioNormalize
AudioNormalizeRecover
AudioBoost
Enabled
SourceType
IntRealMedia
RealMediaFPS
Preset0
CommandMod0
WinLircAddr
UseWinLirc
UICEAddr
UseUICE
DisableXPToolbars
UseWMASFReader
JumpDistS
JumpDistM
JumpDistL
FreeWindowResizing
NotifyMSN2
NotifyGTSdll
RtspHandler
RtspFileExtFirst
Windows Media file
Windows Media Audio file
Video file
Audio file
MPEG Media file
MPEG Audio file
DVD file
DVD Audio file
MP3 Format Sound
MIDI file
Indeo Video file
AIFF Format Sound
AU Format Sound
Ogg Media file
Ogg Vorbis Audio file
CD Audio Track
FLIC file
DVD2AVI Project file
MPEG4 file
MPEG4 Audio file
Matroska Media file
Matroska Audio file
Smacker/Bink Media file
ratdvd file
RoQ Media file
Real Media file
Real Audio file
Real Script file
Dirac Video file
DirectShow Media file
Musepack file
Flash Video file
Shockwave Flash file
Quicktime file
Image file
Playlist file
Other
SrcFilters
TraFilters
LogoFile
LogoID2
LogoExt
HideCDROMsSubMenu
Priority
LaunchFullScreen
EnableWebServer
WebServerPort
WebServerPrintDebugIfo
WebServerUseCompression
WebServerLocalhostOnly
WebRoot
WebDefIndex
WebServerCGI
SnapShotPath
SnapShotExt
ThumbRows
ThumbCols
ThumbWidth
ISDb
0
Shaders List
Combine
DockState
Visible
sizeHorzCX
sizeHorzCY
sizeVertCX
sizeVertCY
sizeFloatCX
sizeFloatCY
RememberPlaylistItems
vidc.mrle
vidc.msvc
vidc.uyvy
vidc.yuy2
vidc.yvyu
vidc.iyuv
vidc.i420
vidc.yvu9
vidc.cvid
ClassManagerFlags
FriendlyName
NoPCMConverter
Priority1
VidBuffers
AudBuffers
VidOutput
AudOutput
VidPreview
AudPreview
FileFormat
FileName
SepAudio
SRSBasedType
Publisher
InstallDate
QuietUninstallString
cpSetup.exe
Persistent
SelOptionName
StartBasicConfig
LanguageIniName
EmptyPlayList
LogoImageName
LogoDrawMode
LogoBkColorAutoDetect
LogoBkColor
LogoRandomSelect
OnlineCaptionSearchMode
OnlineCaptionAutoSave
UseStickyWindow
StartWindowState
FormScaleValue
FormDefFontColorUse
FormDefFontColorVal
LastAlbumName
PLWidthLen
PLHeightLen
PLLeftPos
PLTopPos
LastFileName
RestoreAutoConfig
CaptureFolder
DirectCaptureFormat
VideoExtFilterMsg
AudioExtFilterMsg
ImageExtFilterMsg
PlayListExtFilterMsg
SubtitleExtFilterMsg
ImgExtFilterMsg
OtherExtFilterMsg
VideoExtFilterUse
AudioExtFilterUse
ImageExtFilterUse
PlayListExtFilterUse
SubtitleExtFilterUse
ImgExtFilterUse
OtherExtFilterUse
AudioLeft
AudioTop
AudioWidth
AudioHeight
LastEqulizerName
SVPersistTime
SVRandomSelect
SVSelectEffect
SVLevel
SVBackSize
SVChangeVisRes
SVWidthVis
SVHeightVis
SVFontName
SVFontSize
SVAlbumInfo
CheckPlayListDuplicate
ImageExtXScale
UserDefPosLeft0
UserDefPosTop0
UserDefPosWidth0
UserDefPosHeight0
UserDefPosLeft1
UserDefPosTop1
UserDefPosWidth1
UserDefPosHeight1
UserDefPosLeft2
UserDefPosTop2
UserDefPosWidth2
UserDefPosHeight2
UserDefPosLeft3
UserDefPosTop3
UserDefPosWidth3
UserDefPosHeight3
UserDefPosLeft4
UserDefPosTop4
UserDefPosWidth4
UserDefPosHeight4
BorderWidth
VideoPlayNextMode
VideoCompOperation
AudioPlayNextMode
AudioCompOperation
CustomWidth
CustomHeight
CustomARDifWidth
CustomARDifHeight
TimeDisplayFont
TimeDisplayVMargin
TimeDisplayHMargin
TimeDisplay
TimeDisplayCond
TimeDisplayAutoSizeVal
DisplayPercent
DisplayNowTime
DisplayTimeFormat
PreventScrSave
MinToTray
RestoreTrayVideo
ControlMenuType
UseOnlyBaseSkin
UseOnlyVideoSkin
NoDisplaySkinTooltip
TopMost
TopMostAudio
HideMouse
PlayScreenSize
StartDesktopMode
StartCenterSize
SetScreenWidth
SetScreenHeight
AdvancedMenu
AdvancedDragDrop
SaveFilePosition
SaveFilePositionWithAudio
VideoFrameSize
FullScreenMode
FullScreenMonitor
UseOffTimer
ShutdownTimerVal
UseMultimediaKeyBoard
UseMultimediaKeyVolume
VMR9ResizerMode
IgnoreVideoFilter
MotionBlur
BrightnessAmp
LowPassFilter
RotateImage
HighPassFilter
SharpenFilter
MedianBlockFilter
MedianCrossFilter
MeanFilterY
MeanFilterUV
ChangeTBFilter
ChangeLRFilter
GrayScaleFilter
AutoLevelFilter
InverseFilter
ScreenReverse
LaplaceFilter
EdgeFindFilter
EdgeEnhanceFilter
HistogramFilter
ColorEmbossFilter
DeInterlace
TomsMoSearchF
TomsMoVertF
PostProcessMode
PPPreset
AutoControl
LumHoriLock
ChromHoriLock
LumVertLock
ChromVertLock
LumDering
ChromDering
TempDeNoise
MaxTmpNoise1
MaxTmpNoise2
MaxTmpNoise3
DeBlockStrenth_1
LumLevelFix
ChromLevelFix
FullYRange
PostProcMPlayer
PostProcAccDeBlk
PostProcNic
NicFirst
SPPDeblocker
SPPQuality
SPPQuantization
SPPForceQuant
SPPSoftMode
FastSppDeblocker
FastSPPQuality
FastSPPQuantization
SastSPPForceQuant
FastSPPStrenth
PP7Deblocker
PP7Quantization
PP7ForceQuant
PP7SoftMode
XVIDPostProcess
XVIDPPDeblockY
XVIDPPDeblockUV
XVIDPPDeringY
XVIDPPDeringUV
NicXThr
NicYThr
PictureProperty
ImageOffset
LumOffsetX
LumOffsetY
ChromOffsetX
ChromOffsetY
LumGain
LumOffset
GammaCorrection
GammaCorrectionR
GammaCorrectionG
GammaCorrectionB
HUE
Saturation
SharpenMode
UseWarSharpen
WarSharpenMode
XSharpenStrength
XSharpenThreshold
USharpenStrength
USharpenThreshold
MSharpenStrength
MSharpenThreshold
ASharpenStrength
ASharpenThreshold
ASharpenBlockFilter
MsharpenHQ
AsharpenHQ
MsharpenMask
WarpsharpDepth
WarpsharpThreshold
AWarpsharpDepth
AWarpsharpThresh
AWarpsharpBlur
AwarpsharpCM
AwarpsharpBM
BlurStrength
Soften
Denoise
DenoiseVal
Denoise3DUse
Denoise3DLum
Denoise3DCrom
Denoise3DTime
Denoise3DHQ
AddNoise
NoiseValue
NoisePattern
ColorNoise
OnlyLuma
FullLuma
LevelControl
LevelMode
AutoInLevel
LevelInMin
LevelInMax
LevelOutMin
LevelOutMax
LevelGamma
GeFYV12Fix
HQYV12RGB
REC709
VideoMarginPos
AudioVisScreen
AudioVisText
UseEqulizer
EqulizerMode
AudioAmp
AudioUsingSepaAmp
AudioAmpSepa0
AudioAmpSepa1
AudioAmpSepa2
AudioAmpSepa3
AudioAmpSepa4
AudioAmpSepa5
AudioAC3DTSAmp
AudioUseAC3DTSAmp
AudioVolumeSteps
AudioPitchReset
AudioPitch
AudioUseDSPTempo
AudioUseOldTempo
FAudioUsePitch
AudioRmLeft
AudioRmRight
AudioSwapRL
AudioMergeRL
AudioRemoveVoice
AudioAmpVoice
AudioUseBandPass
AudioUseDeNoise
AudioDeNoiseVal
AudioUseAutoGain_2
AudioAutoGainType
AudioAutoGain
AudioAGSmooth
AudioAGUseHQMix
AudioAGUseBoost
AudioUseTrueBass
AudioTrueBass
AudioUseTrebleEnhance
AudioTrebleEnhance
Audio3DEffect
Audio3DVolume
AudioLowPassCutoff
AudioHighPassCutoff
AduioPhaseInvert
AudioUseDynCompress
AudioDynAttack2
AudioDynDecay2
AudioDynThreshold2
AudioDynRatio2
AudioDynGain2
VolumeLevel
AudioBalance
OldVolumeLevel
IgnoreAudioFilter
UseVideoPlugIn
UseDScalerFilter
UseAudioPlugIn
UseOnly16BPS
UseOnlt2CH
FastestMode
AdvancedPause
UseIdleOSC
OverlayMessage
OverlayInfoMessage
VisibleMessage
MessageFontName
MessageFontSize
MessageAutoSize
MessageAutoSizeVal
MessageLeftPos
MessageTopPos
ShowStartMsg
PlaybackInfoFont
PlaybackInfoAlpha
PlaybackInfoAutoSzVal
PlayPriorityClass
UseSysVolume
Play1stSec
Play2ndSec
Play3rdSec
Play4thSec
CaptionSyncFirst
CaptionSyncSecond
UseAVIKeyFrame
UseDirKeyFrame
UseIncSeeking
UseMouseDirMove
SeekTooltipDisplay
OpenWithFileMode
FindPrevNextFile
ForceUseTrayIcon
AutoLoadingCaption
AutoPlayDeleteFile
SkipStartPos
SkipPlayLength
SkipStarModet
SkipEndPos
UseSkipEnd
UseSkipOnlyVideo
UseOnSeamless
TitleMsgColor
ControlMsgColor
StateMsgColor
TimeDisplayColor
AdvTitleFormat
DisplayPlayListIndex
DisplayPlayListTime
DisplayPlayListFile
AutoGetPlayListTitle
CannotGetTitleInfo
AutoPlayNextFile
UseAutoPlayAudio
TitleShowPlaylistIndex
PlayListAddLast
AudioDolbyDecVal
AudioHeadphoneDim
AudioLFEUse
AudioLFEfreq
AudioLFEgain
AudioLFEcutLR
AudioXtalUse
AudioXtalbext_level
AudioXtalfilter_level
AudioXtalharmonics_level
AudioXtalecho_level
AudioXtalfeedback_level
AudioXtalstereo_level
AFResampleRate
AFResampleMode
AFResampleIf
AFResampleIfVal
AFOutputBits
AFOutputMode
AudioFreeverbUse
AudioFreeverbRoomSize
AudioFreeverbDamping
AudioFreeverbWetLevel
AudioFreeverbDryLevel
AudioFreeverbWidth
AudioFreeverbMode
FastRepeatTime
FastRepeatCnt
CapRepeatCnt
NorRepeatCnt
AutoRepeatStart
BookMarkAutoDel
AutoPanAndScanUse
AutoPanAndScanWidth
AutoPanAndScanHeight
AutoPanAndScanUnder
AutoPanAndScanSize
AutoPanAndScanPos
AutoPanAndScanPosCap
CurrentKeyName
UserDefineMouseKey1
UserDefineMouseKey2
UserDefineMouseKey3
UserDefineMouseKey4
UserDefineMouseKey5
UserDefineMouseKey6
UserDefineMouseKey7
UserDefineMouseKey8
UserDefineMouseKey9
UserDefineMouseKey10
UserDefineMouseKey11
UserDefineMouseKey12
UserDefineMouseKey13
UserDefineMouseKey14
UserDefineMouseKey15
InverseWheel1
InverseWheel2
InverseWheel3
InverseWheel4
InverseWheel5
InverseWheel6
InverseWheel7
EqFreq80
EqFreq170
EqFreq310
EqFreq600
EqFreq1000
EqFreq3000
EqFreq6000
EqFreq12000
EqFreq14000
EqFreq16000
ColorThemeName
ColorThemeMode
ColorThemeHue
ColorThemeSat
ColorThemeRR
ColorThemeGG
ColorThemeBB
SkinFolder
LastSkinMode
LastSkinName-1
OverlayBrightness
OverlayContrast
OverlayHUE
OverlaySaturation
OverlayGamma
_Skin_TimeLabel1Org
FollowBkgnd
WindowSizeRatio
RestoreSize
RestorePos
RestoreAudioPos
LeftPos
TopPos
MWAlphaValue
PLAlphaValue
CurrentPixelShader
CombinePixelShader
ShowMsnNowPlaying
lavIDCT
lavBugAutoSelect
lavBugXvidDivxChroma
lavBugOldMSMpeg4
lavBugStandardChroma
lavBugXvidInterlace
lavBugDivX52Chroma
lavBugUMP4
lavBugDBlockSize
lavBugPadding
lavBugEdge
lavErrorResil
lavErrorConceal
lm2Deinterlace
laFastH264Dec
laFsstMPEG2
GraphUseThread2
RestoreNormal
AutoCalPersist
PersistScreen
UseFrameForPersist
LargeScreenRatio
MonDeskARDiff
VisUseMode
NotUseVisOnTray
MinMainHeight
VisOnFullScreen
VisSelMode
VisTimeMode
VisTimeVal
VisOnImagePlay
RegisterWMF
ASFFileReaderMode
ASFURLReaderMode
UseSmartConnect
UseAdvFilterGraph
RemoveCaptionFilter
AutoExternalAudio
FilterDebugMode
UseGlobalHotkey
TTSUsingSubtitle
TTSUsingMessage
TTSUsingTitle
TTSVoiceIndex
TTSVoiceRate
TTSVoiceVolume
ColorKeyUseMarginColor
WinampInPlugInPath
WinampGPPlugInPath
DScalerFilterPath
WinampVisPlugInPath
ThreadPrioty
VisFPS
PlayListFontName
PlayListFontSize
ViewPlayList
ViewControlBox
InitOperation_1
ExeDate
CaptionVisible
CaptionAlign
CaptionPos
CaptionBold
CaptionItalian
CaptionUnderline
CaptionShadow
CaptionBkgnd
CaptionOutline
CaptionLineNum
CaptionChWidth
CaptionChHeight
CaptionFontNameMain
CaptionFontNameSub
CaptionPrimColor
CaptionShadowColor
CaptionOutlineColor
CaptionScaleX
CaptionScaleY
CaptionBakColor
CaptionPrimTrans
CaptionBakTrans
CaptionOutlineTrans
CaptionShadowTrans
CaptionOutlineDepth
CaptionShadowDepth
CaptionCharset
CaptionBoldOutline
CaptionVert
CaptionHTML
CaptionPercent
CaptionLRPercent
CaptionTBPixel
CaptionLRPixel
CaptionTagIgnore
CaptionBreakWord
CaptionAdvOutline
CaptionAutoAddBR
CaptionScreenPos
CaptionParaAlign
CaptionAutoParaAlign
CaptionOneTwoLine
CaptionLimitFrame
CaptionRotate
CaptionIdxSubPos
Caption3DMode
S3DFilterType
S3DFilterSwap
CaptionAlign_1
CaptionPos_1
CaptionBold_1
CaptionItalian_1
CaptionUnderline_1
CaptionShadow_1
CaptionBkgnd_1
CaptionOutline_1
CaptionLineNum_1
CaptionChWidth_1
CaptionChHeight_1
CaptionFontNameMain_1
CaptionFontNameSub_1
CaptionPrimColor_1
CaptionShadowColor_1
CaptionOutlineColor_1
CaptionScaleX_1
CaptionScaleY_1
CaptionBakColor_1
CaptionPrimTrans_1
CaptionBakTrans_1
CaptionOutlineTrans_1
CaptionShadowTrans_1
CaptionOutlineDepth_1
CaptionShadowDepth_1
CaptionCharset_1
CaptionBoldOutline_1
CaptionVert_1
CaptionHTML_1
CaptionPercent_1
CaptionLRPercent_1
CaptionTBPixel_1
CaptionLRPixel_1
CaptionTagIgnore_1
CaptionBreakWord_1
CaptionAdvOutline_1
CaptionAutoAddBR_1
CaptionScreenPos_1
CaptionParaAlign_1
CaptionAutoParaAlign_1
CaptionOneTwoLine_1
CaptionLimitFrame_1
CaptionRotate_1
CaptionIdxSubPos_1
CaptionAlign_2
CaptionPos_2
CaptionBold_2
CaptionItalian_2
CaptionUnderline_2
CaptionShadow_2
CaptionBkgnd_2
CaptionOutline_2
CaptionLineNum_2
CaptionChWidth_2
CaptionChHeight_2
CaptionFontNameMain_2
CaptionFontNameSub_2
CaptionPrimColor_2
CaptionShadowColor_2
CaptionOutlineColor_2
CaptionScaleX_2
CaptionScaleY_2
CaptionBakColor_2
CaptionPrimTrans_2
CaptionBakTrans_2
CaptionOutlineTrans_2
CaptionShadowTrans_2
CaptionOutlineDepth_2
CaptionShadowDepth_2
CaptionCharset_2
CaptionBoldOutline_2
CaptionVert_2
CaptionHTML_2
CaptionPercent_2
CaptionLRPercent_2
CaptionTBPixel_2
CaptionLRPixel_2
CaptionTagIgnore_2
CaptionBreakWord_2
CaptionAdvOutline_2
CaptionAutoAddBR_2
CaptionScreenPos_2
CaptionParaAlign_2
CaptionAutoParaAlign_2
CaptionOneTwoLine_2
CaptionLimitFrame_2
CaptionRotate_2
CaptionIdxSubPos_2
CaptionAlign_3
CaptionPos_3
CaptionBold_3
CaptionItalian_3
CaptionUnderline_3
CaptionShadow_3
CaptionBkgnd_3
CaptionOutline_3
CaptionLineNum_3
CaptionChWidth_3
CaptionChHeight_3
CaptionFontNameMain_3
CaptionFontNameSub_3
CaptionPrimColor_3
CaptionShadowColor_3
CaptionOutlineColor_3
CaptionScaleX_3
CaptionScaleY_3
CaptionBakColor_3
CaptionPrimTrans_3
CaptionBakTrans_3
CaptionOutlineTrans_3
CaptionShadowTrans_3
CaptionOutlineDepth_3
CaptionShadowDepth_3
CaptionCharset_3
CaptionBoldOutline_3
CaptionVert_3
CaptionHTML_3
CaptionPercent_3
CaptionLRPercent_3
CaptionTBPixel_3
CaptionLRPixel_3
CaptionTagIgnore_3
CaptionBreakWord_3
CaptionAdvOutline_3
CaptionAutoAddBR_3
CaptionScreenPos_3
CaptionParaAlign_3
CaptionAutoParaAlign_3
CaptionOneTwoLine_3
CaptionLimitFrame_3
CaptionRotate_3
CaptionIdxSubPos_3
CaptionTrans
CaptionFade
CaptionBlur
CaptionMoreBlur
CaptionUseAltColor
CaptionPutAllLang
CaptionMultiMode
CaptionUseFixLine
CaptionCntFixLine
CaptionDefLang2
CaptionUseAutoStop
CaptionCCToSub
CaptionAutoStopTime
CaptionBlendVal
CaptionBuffering
CaptionDrawMode
CaptionVMRDSurface
CaptionVMRBiLiner2
CaptionRenderMode
CaptionUseExternalExt
CaptionExternalForceStyle
CaptionExternalRTRender
CaptionExternalExtStr
CaptionExternalOnVid
CaptionSecDefault
CaptionThrDefault
CaptionSecAutoSelect
KMPBackup.bak
__oldnextmode0
__oldnextmode1
UseWinLIRC
UseuICE
AutoUpdate
CheckVerWeek
AutoDelLastFile
AutoDelLastCaption
name
OverlayControlUse
BottomSpace
NoMarginCaption
DoubleSampling
VideoTransType
VideoRenderDevice
ImageExtYScale
VideoExtendMode
AudioOutDevice_1
KeepLastFile
KeepLastCaption
guid
eulaaccepted
ColorName
InstallICC
Identifier
VendorIdentifier
SystemManufacturer
SystemProductName
SMBiosData
IgnoreUserSettings
LogSecuritySuccesses
TrustPolicy
UseWINSAFER
Timeout
DisplayLogo
COM+Enabled
Default Impersonation Level
DriverVersion
ReleaseVersion
locale
Last beta Install Path
Last Next Install Path
ProgId
APPCRASH
DisableMMX
File1
File2
File3
File4
PreviewPages
LoadDebugRuntime
ForceDriverFlagsOff
InstalledDisplayDrivers
SoftwareOnly
Counter
Main prefs
Timeline format
Direct3D FX file
Allow direct YCbCr decoding
Confirm render abort
Confirm exit
Render: Warn if no audio
AVI: Alignment threshold enable
AVI: VBR warning enabled
AVI: Non-zero start warning enabled
AVI: Alignment threshold
AVI: Prefer internal decoders
AVI: Prefer internal audio decoders
AVI: Use video stream fccHandler in codec search
Render: Output buffer size
Render: Wave buffer size
Render: Video buffer count
Render: Audio buffer seconds
Render: Default throttle percent
Render: Inhibit system sleep
Render: Use background priority
File: Async mode
AVI: Superindex entry limit
AVI: Subindex entry limit
Display: Allow DirectX overlays
Display: Enable debug info
Display: Enable high precision
Display: Enable background fallback
Display: Enable unified 3D driver
Display: Secondary monitor mode
Images: Frame rate numerator
Images: Frame rate denominator
Threading: Video compression threads
Threading: Video filter threads
Playback: Default audio device
Filters: Enable 3D hardware acceleration
Filters: Process-ahead frame count
CPU: Enabled extensions
Batch: Show status window
AutoRecover: Enabled
Use profile-local path
MRU size
Edit: Video error mode
Edit: Audio error mode
SeenWelcome
Width
Maximized
DegF
HDDExpert
MainDir
UserDataDir
Last Stable Install Path
Last install path
MachineGUID
DigitalProductId
DigitalProductId4
PnpInstanceID
DXTFilterBehavior
OWNDC
{b0bc68f9-b760-468d-9fa6-de07dffb370b}
Buzzing Dhol
CodePointToFontMap
VCD file
FLAC Audio file
WavPack Audio file
ALAC Audio file
OptimFrog Audio file
Monkey's Audio file
True Audio file
AMR Audio file
Blu-ray playlist file
DockPosX
DockPosY
Count
PRODUCTID
ProductType
SyncDomainWithMembership
Settings
Recent
InFilters
ExFilters
HiFilters
CurrentType
CSDVersion
NoPopup
NoBeep
ListGet
ListGetMSec
RetryMSec2
RetryMax
RecvMaxNT
NoErase
Debug
OpenCheck
AbsenceSave
AbsenceMax
AllowSendList
FileTransOpt
ResolveOpt
EncryptNum
ViewMax
TransMax
TcpbufMax
AbsenceStr
AbsenceStr0
AbsenceHead0
AbsenceStr1
AbsenceHead1
AbsenceStr2
AbsenceHead2
AbsenceStr3
AbsenceHead3
AbsenceStr4
AbsenceHead4
AbsenceStr5
AbsenceHead5
AbsenceStr6
AbsenceHead6
AbsenceStr7
AbsenceHead7
FindMax2
FindAll
1
2
3
4
5
6
7
8
9
10
11
PasswordStr
PasswdLogCheck
DelayTime
QuoteCheck
SecretCheck
IPAddrCheck
OneClickPopup
AbnormalButton
DialUpCheck
NickNameCheck
AbsenceNonPopup
NickNameStr
GroupNameStr
Lang
Sort
KeepHostTime
MsgMinimize
DefaultUrl
ShellExec
ExtendEntry
ControlIME
GlidLine
ColumnItems
QuoteStr
HotKeyCheck
HotKeyModify
HotKeySend
HotKeyRecv
HotKeyMisc
LogCheck
LogFile
SoundFile
Icon
RevIcon
lastOpen
lastSave
SendNickName
SendUserName
SendAbsence
SendPriority
SendGroupName
SendHostName
SendIPAddr
SendXdiff
SendYdiff
SendMidYdiff
SendSavePos
SendXpos
SendYpos
RecvXdiff
RecvYdiff
RecvSavePos
RecvXpos
RecvYpos
Height
Escapement
Orientation
Weight
Italic
UnderLine
StrikeOut
CharSet
OutPrecision
ClipPrecision
Quality
PitchAndFamily
FaceName
PriorityMax
PriorityReject
PrivBlob
PrivEncryptSeed
PrivEncryptType
Common AppData
svcVersion
Secondary Start Pages
DefaultScope
Skype
VerInfo
rarkey
rarreg.key
Default
ArcName
FileNames
ExclNames
StoreNames
UseRAR
SFXModule
SFX
SFXIcon
SFXLogo
SFXElevate
CmtFile
CmtTextData
VolumeSize
VolPause
OldVolNames
RecVolNumber
Update
Fresh
SyncFiles
Overwrite
Move
ArcRecBin
ArcWipe
Solid
AV
Test
Recovery
EraseDest
AddArcOnly
ClearArc
Lock
Method
DictSizeLZ
Password
EncryptHeaders
OpenShared
ProcessOwners
SaveStreams
Background
WaitForOther
Shutdown
GenerateArcName
VersionControl
GenerateMask
FileTimeMode
FileDays
FileHours
FileMinutes
ArcTimeOriginal
ArcTimeLatest
mtime
ctime
atime
PathsAbs
PathsNone
PathsAbsDrive
ImmExec
SeparateArc
EmailArcTo
PackDetails
RestoreFolder
LastFolder
AltColor
AltEncryptionColor
ExportedSettings
DlgHistory
CustomExt
WizardMode
InstallTime
disabled
VersionNumber
Date
version
InstallationType
Library
IsMultiInstance
First Counter
CategoryOptions
FileMappingSize
Counter Names
LegacyWPADSupport
URL Protocol
PokerStarsBr.exe
UremO9eifjRAyPANy0OqUA==
Microsoft.JScript
System.Configuration.Install
dCZASLe/Djn+Y20IQfXf0w==
M/x0y1YNfAfVNCTcsS87nA==
8Grt28aZP1mbCqU1ufcPVA==
System Monitor
SwapMouseButtons
NetworkDeviceCount
Build
ProfileImagePath
Local AppData
Cookies
History
Favorites
DisablePSGP
DisableD3DXPSGP
http_logs
language
CacheOk
Putyagke
befbcfdhdg.exe
PrivacyAdvanced
PendingFileRenameOperations2
Uuid
AVG_UI
AVP
mcui_exe
mcpltui_exe
Bdagent
Trend Micro Titanium
Trend Micro Client Framework
avast
MSC
BullGuard
Sophos AutoUpdate Monitor
SpIDerAgent
APVXDWIN
WRSVC
emsisoft anti-malware
ISTray
G Data AntiVirus Tray Application
G Data AntiVirus Tray
ZoneAlarm
Bkav
V3 Application
Baidu Antivirus
ComputerName
BuildLab
LogPixels
Command
S
InstanceIndex
DisplaySelection
AppInit_DLLs
data.0
data.1
usr.0
usr.1
uuid
state
lrts
mode
svn
svx
svi
svt
493c7345
3efeb33e
a47da861
iiid
svpath
dlpath
RegName
RegCode
Is3D
DisableX3D
FewVertices
DisableVidMemVBs
DriverStyle
DisableST
ExePath
USERDOMAIN
USERNAME
APPDATA
LOCALAPPDATA
USERPROFILE
{A520A1A4-1780-4FF6-BD18-167343C5AF16}
CrPublisherId
Xml
System.EnterpriseServices
Microsoft.VisualC
System.Transactions
AppliedDPI
MaxConnectionsNumber
isUseWinDialUp
mAttempts
mRedialTime
bUseAltKey
bUseControlKey
AutoSearch
muid
ImeSyncTime
ImeSyncSucTime
ImeAutoSyncTime
360sd
360Safetray
QQPCTray
kxesc
KSafeTray
BaiduSdTray
BaiduAnTray
lr oSVbN
HWID
SubVersionNumber
Tag
PNP_TDI
Bookmark
Remove
TRACE_MISC
TRACE_CM
TRACE_TRACE
TRACE_SVC
TRACE_GATEWAY
TRACE_UI
TRACE_CONTACT
TRACE_UTIL
TRACE_CLUSTER
TRACE_RESOURCE
TRACE_TIP
TRACE_XA
TRACE_LOG
TRACE_MTXOCI
TRACE_ETWTRACE
TRACE_PROXY
TRACE_KTMRM
TRACE_VSSBACKUP
TRACE_PERFMON
TRACE_TM
TRACE_LU
TraceFilePath
MemoryBufferSize
DebugOutEnabled
OracleXaLib
OracleSqlLib
OracleOciLib
MTxOciCPTimeout
OracleTraceFilePath
Default User ID
CurrentMicrophone
LowerFilters
regloader
LoggerText
PerSessionTempDir
utm_source
utm_campaign
RCPURL
RENEWALURL
DLLFILENAME
TaskIcon
DisableMeter
Interval
TemperatureUnit
ToolTips
MeterMode
BaseMode
GPUMaxVoltage
MasterDefCoreOV
BaseBoardProduct
TasksFolder
NotifyOnTaskMiss
ViewHiddenTasks
CurrentMinorVersionNumber
TSAppCompat
Common Programs
Common Start Menu
PrintHood
Local Settings
Common Favorites
Common Templates
Common Desktop
Common Documents
Cache
Fonts
Administrative Tools
NetHood
SendTo
Templates
Common Startup
Sequence
RegFiles0000
RegSvcs0000
RegProcs0000
JSCount
ESCount
RRCount
Class
AdvpackLogFile
RC
s_SmartScan
s_SmartMode
s_SmartDate
Revision
computerID
StatsTesting
EditionID
BuildLabEx
UseLoadImage
DoXPThemes
ScreenReader
DockableWindows
HideGamesButton
HideTrayButton
TorrentMaxUp
TorrentMaxDown
TransparentDL
Transparency
SegmentList
SpeedGraph
FaceFile
Smaller
ConnectTimeout
ProxyUseNTLM
DebugDotHDRFile
DoDataTimeout
DataTimeout
DataTimeoutSEC
Rollback
AnonymousFirst
AsyncNameLookup
BasicTimeFmt
UseProxy
GetRightCacheDNS
ProxyNeedToLogin
ProxySOCKS
ProxySkipServers
Proxy
StupidCache
s3.amazonaws.com
amazonaws.com
UserAgent
HttpAcceptLanguage
HttpAcceptCharset
HttpAcceptEncoding
HttpExtraHeader
HttpExtraHeader2
HttpExtraHeader3
HttpPragma
HTTPNoCacheAlways
HTTPNoCache
SetToServerDate
FMLFindFastest
AlwaysAuto
FMLRecalcFastest
FMLRecalcFastestMin
BackupGetRight000
ProgramW6432Dir
InterfaceLanguage
HideNavigation
VMRAlternateVSync
VMRVSyncOffset
VMRVSyncAccurate2
VMRFullscreenGUISupport
EVRHighColorRes
EVRForceInputHighColorRes
EVREnableFrameTimeCorrection
VMRVSync
VMRDisableDesktopComposition
VMRFullFloatingPointProcessing
VMRHalfFloatingPointProcessing
VMRColorManagementEnable
VMRColorManagementInput
VMRColorManagementAmbientLight
VMRColorManagementIntent
EVROutputRange
VMRFlushGPUBeforeVSync
VMRFlushGPUAfterPresent
VMRFlushGPUWait
SynchronizeClock
SynchronizeDisplay
SynchronizeNearest
LineDelta
ColumnDelta
CycleDelta
TargetSyncOffset
ControlLimit
ResetDevice
SPCAllowAnimationWhenBuffering
EVRBuffers
D3D9RenderDevice
SubtitlesLanguageOrder
AudiosLanguageOrder
PreventMinimize
UseWin7TaskBar
ExitAfterPlayBack
SearchInDirAfterPlayBack
DontUseSearchInFolder
UseTimeTooltip
TimeTooltipPosition
OSD_Size
OSD_Font
AssociatedWithIcon
LastOpenDir
RestoreResAfterExit
PanScanZoom
ShufflePlaylistItems
HidePlaylistFullScreen
RememberPosition
RelativeDrive
ClosedCaptions
PrioritizeExternalSubtitles
DisableInternalSubtitles
SubtitlePaths
UseDefaultsubtitlesStyle
SpeakerChannels
UseGlobalMedia
LimitWindowProportions
avi
mpeg
mpegts
dvdvideo
mkv
webm
mp4
mov
3gp
3g2
flv
ogm
rm
rt
wmv
videocd
ratdvd
bink
flic
dsm
ivf
dvd2avi
swf
other
ac3dts
aiff
alac
amr
ape
au
audiocd
flac
m4a
midi
mka
mp3
mpa
mpc
ofr
ogg
ra
tta
wav
wma
wavpack
pls
bdpls
SRC_CDDA
SRC_VTS
SRC_D2V
SRC_DTSAC3
SRC_SHOUTCAST
SRC_MPA
SRC_DSM
SRC_SUBS
TRA_MPEG2
TRA_PS2AUD
TRA_PCM
TRA_DXVA_H264
TRA_DXVA_VC1
LastUsedPage
D3DFullScreen
MonitorAutoRefreshRate
ColorBrightness
ColorContrast
ColorHue
ColorSaturation
ShaderListScreenSpace
ToggleShader
ToggleShaderScreenSpace
Show OSD
EnableEDLEditor
FastSeek
DefaultCapture
VidDispName
AudDispName
Country
BDANetworkProvider
BDATuner
BDAReceiver
BDAScanFreqStart
BDAScanFreqEnd
BDABandWidth
BDAUseOffset
BDAOffset
BDAIgnoreEncryptedChannels
LastChannel
Remember DVD Pos
DVD Position 0
DVD Position 1
DVD Position 2
DVD Position 3
DVD Position 4
DVD Position 5
DVD Position 6
DVD Position 7
DVD Position 8
DVD Position 9
DVD Position 10
DVD Position 11
DVD Position 12
DVD Position 13
DVD Position 14
DVD Position 15
DVD Position 16
DVD Position 17
DVD Position 18
DVD Position 19
Remember File Pos
File Name 0
File Position 0
File Name 1
File Position 1
File Name 2
File Position 2
File Name 3
File Position 3
File Name 4
File Position 4
File Name 5
File Position 5
File Name 6
File Position 6
File Name 7
File Position 7
File Name 8
File Position 8
File Name 9
File Position 9
File Name 10
File Position 10
File Name 11
File Position 11
File Name 12
File Position 12
File Name 13
File Position 13
File Name 14
File Position 14
File Name 15
File Position 15
File Name 16
File Position 16
File Name 17
File Position 17
File Name 18
File Position 18
File Name 19
File Position 19
LastFullScreen
CombineScreenSpace
RemainingTime
File5
File6
File7
File8
File9
File10
File11
File12
File13
File14
File15
File16
File17
File18
File19
File20
MachineID
InstallationID
ScreenSaverIsSecure
UseOldParsing
shared
Installation Directory
MP2.SaveDir
Accepted
Declined
lfEscapement
lfOrientation
lfWeight
lfItalic
lfUnderline
lfStrikeOut
lfCharSet
lfOutPrecision
lfClipPrecision
lfQuality
lfPitchAndFamily
lfFaceName
iPointSize
fWrap
StatusBar
fSaveWindowPositions
szHeader
szTrailer
iMarginTop
iMarginBottom
iMarginLeft
iMarginRight
iWindowPosY
iWindowPosX
iWindowPosDX
iWindowPosDY
fMLE_is_broken
Emulation
GUID
6&E993E07&0&0000
Joystick Id
MMXDisabled
Executed
UsrColumnSettings
AllowMultipleTSSessions
Minidump_Type
sLanguage
SharedDir
FirstRun
LastIndex
Locale
SystemRoot
OSMode
SystemType
SourcePath
IExplore.exe
IntranetCompatibilityMode
LocalMachineCompatibilityMode
UseSWRender
SkypeSetup
sYearMonth
Microsoft Sans Serif
MS Shell Dlg
KMSPico10.0.9__8174_il38655.exe
C:\sample
C:\Users\win7\AppData\Local\Temp\$inst\2.tmp
C:\Users\win7\AppData\Local\Temp\$inst\4.tmp
C:\Users\win7\AppData\Local\Temp\$inst\5.tmp
C:\Users\win7\AppData\Local\Temp\$inst\7.tmp
C:\Users\win7\AppData\Local\Temp\$inst\8.tmp
C:\Windows\Fonts\staticcache.dat
menu\element.tmpl
C:\Users\win7\AppData\Local\Temp\_ir_sf_temp_0\irsetup.dat
C:\Users\win7\AppData\Local\Temp\_ir_sf_temp_0\IRIMG1.JPG
C:\Users\win7\AppData\Local\Temp\_ir_sf_temp_0\IRIMG2.JPG
C:\Users\win7\AppData\Local\Temp\_ir_sf_temp_0\GetMachineSID.exe
C:\Users\win7\AppData\Local\Temp\_ir_sf_temp_0\eula.txt
C:\Users\win7\AppData\Local\Temp\_ir_sf_temp_0\Unicode.lmd
C:\
C:\Users\win7\AppData\Local\Microsoft\Windows\Caches\cversions.1.db
C:\Users\win7\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000008.db
C:\Users\desktop.ini
C:\Users
C:\Users\win7
C:\Users\win7\AppData
C:\Users\Public
C:\Windows
C:\Windows\Fonts\desktop.ini
C:\Users\win7\AppData\Roaming
C:\Users\win7\AppData\Roaming\Microsoft\desktop.ini
C:\Users\win7\AppData\Roaming\Microsoft
C:\Users\win7\AppData\Roaming\Microsoft\Windows
C:\ProgramData
C:\ProgramData\Microsoft\desktop.ini
C:\ProgramData\Microsoft
C:\ProgramData\Microsoft\Windows
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu
C:\ProgramData\Microsoft\Windows\Start Menu
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
C:\ProgramData\Microsoft\Windows\Start Menu\Programs
C:\Users\win7\Videos\desktop.ini
C:\Users\Public\Videos\desktop.ini
C:\Users\win7\AppData\Local\Temp\Stardock Fences 2 Setup Log.txt
\\.\Nsi
C:\Users\win7\Searches\desktop.ini
C:\Users\win7\Contacts\desktop.ini
C:\Users\win7\Favorites\desktop.ini
C:\Users\win7\Downloads\desktop.ini
C:\Users\win7\Links\desktop.ini
C:\Users\win7\Saved Games\desktop.ini
\??\C:\Windows\System32\shdocvw.dll
C:\Users\win7\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
C:\Users\win7\AppData\Local\Temp\_ir_sf_temp_0\GetMachineSID.tmp
C:\Windows\system32\reg.exe
C:\Users\win7\AppData\Local\Temp\registry_export.txt
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat
C:\Windows\system32\rsaenh.dll
C:\Users\win7\AppData\Local\Temp\sdWebResults.xml
C:\Users\win7\Downloads\Stardock\Stardock Fences 2_setup.exe
C:\sample.config
C:\locale.conf
C:\lang\\GatewayControl_.properties
C:\ProgramData\48ed1695-d484-472b-bd42-582714ef1368\temp
C:\Users\win7\AppData\Local
C:\Users\win7\AppData\Local\Temp
C:\Users\win7\AppData\Local\Temp\SpotifyCrashService\crash_service.log
C:\Users\win7\AppData\Local\Temp\SpotifyCrashService\crash_checkpoint.txt
C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\enterprisesec.config.cch
C:\Users\win7\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\win7\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index1c2.dat
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\60E31627FDA0A46932B0E5948949F2A5
\\.\C:
C:\Users\win7\AppData\Local\Temp\nsjB14A.tmp\nsSessionSIDW.dll
C:\Users\win7\AppData\Local\Temp\nsjB14A.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsjB14A.tmp\nsProcess.dll
C:\Users\win7\AppData\Local\Temp\nsjB14A.tmp\LangDLL.dll
C:\Users\win7\AppData\Local\Temp\nsjB14A.tmp\ioSpecial.ini
C:\Users\win7\AppData\Local\Temp\nsjB14A.tmp\modern-wizard.bmp
C:\Users\win7\AppData\Local\Temp\nsjB14A.tmp\nsEnvVariables.dll
C:\Users\win7\AppData\Local\Temp\nsjB14A.tmp\InstallOptions.dll
C:\Users\win7\AppData\Local\Temp\nsjB14A.tmp\linker.dll
C:\Users\win7\AppData\Local\Temp\VSD7E47.tmp\install.log
C:\Users\win7\AppData\Local\Temp\\~DF1CF84295773BEF44.TMP
C:\setup.ini
0x0000.ini
C:\Users\win7\AppData\Local\Temp\is-C4O3O.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-C4O3O.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\_MSI5166._IS
C:\Windows\system32\l_intl.nls
C:\Windows\assembly\pubpol1.dat
C:\Users\win7\AppData\Local\GDIPFONTCACHEV1.DAT
C:\WINDOWS\FONTS\MSGOTHIC.TTC
C:\WINDOWS\FONTS\TAHOMA.TTF
C:\WINDOWS\FONTS\MSJH.TTF
C:\WINDOWS\FONTS\MSYH.TTF
C:\WINDOWS\FONTS\MALGUN.TTF
C:\WINDOWS\FONTS\MICROSS.TTF
C:\WINDOWS\FONTS\SEGOEUI.TTF
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\EntersoftLifePlus.pdb
C:\Windows\symbols\EntersoftLifePlus.pdb
C:\Windows\EntersoftLifePlus.pdb
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.pdb
C:\Windows\symbols\dll\mscorlib.pdb
C:\Windows\dll\mscorlib.pdb
C:\Windows\mscorlib.pdb
C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.pdb
C:\Windows\symbols\dll\System.Windows.Forms.pdb
C:\Windows\dll\System.Windows.Forms.pdb
C:\Windows\System.Windows.Forms.pdb
C:\Users\win7\AppData\Roaming\Mery\sample.ini
C:\Users\win7\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\downloader.log
C:\Users\win7\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\seed.txt
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\info[1].rss
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\YandexPackSetup[1].exe
C:\Users\win7\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\YandexPackSetup.exe
C:\Users\win7\AppData\Local\Temp\downloader.exe
\\.\PIPE\srvsvc
C:\Users\win7\Desktop\LoviOtvet.lnk
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LoviOtvet\LoviOtvet.lnk
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LoviOtvet\Uninstall.lnk
C:\Users\win7\AppData\Local\Temp\Autodesk-WebInstall3StubGUI-execution.log
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C46E7B0F942663A1EDC8D9D6D7869173_DF4CA81DC775CDA9B3214BDB5B55900E
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\40C68D5626484A90937F0752C8B950AB
C:\Users\win7\AppData\Local\Temp\nst24A.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nst24A.tmp\nsExec.dll
C:\ProgramData\8f23bb0e-d21d-43d3-bd7b-a0fba15a3b5e\temp
C:\Windows\DIFxAPI.dll
C:\Users\win7\AppData\Local\Temp\wbxtra_04052016_014634.wbt
software.mares.cer
C:\tmp\CertMgr.exe
C:\tmp\software.mares.cer
C:\Users\win7\AppData\Local\Temp\nsr8722.tmp\nsExec.dll
C:\Users\win7\AppData\Local\Temp\nsc1657.tmp\System.dll
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\696F3DE637E6DE85B458996D49D759AD
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\696F3DE637E6DE85B458996D49D759AD
C:\Users\win7\AppData\Local\Temp\{3943BD48-91F4-4AF7-93C1-CCA84463D9E9}\Setup.INI
C:\Users\win7\AppData\Local\Temp\{3943BD48-91F4-4AF7-93C1-CCA84463D9E9}\_ISMSIDEL.INI
C:\Users\win7\AppData\Local\Temp\{3943BD48-91F4-4AF7-93C1-CCA84463D9E9}\0x0000.ini
C:\Users\win7\AppData\Local\Temp\{3943BD48-91F4-4AF7-93C1-CCA84463D9E9}\0x0409.ini
C:\Users\win7\AppData\Local\Temp\~1F0B.tmp
C:\Users\win7\AppData\Local\Temp\~1FB8.tmp
C:\Users\win7\AppData\Local\Temp\{3943BD48-91F4-4AF7-93C1-CCA84463D9E9}\Ginger.msi
C:\Users\win7\AppData\Local\Temp\{3943BD48-91F4-4AF7-93C1-CCA84463D9E9}\ISSetup.dll
C:\Users\win7\AppData\Local\Temp\is-V3QKL.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\is-R0V3M.tmp\_isetup\_RegDLL.tmp
C:\Users\win7\AppData\Local\Temp\is-R0V3M.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-R0V3M.tmp\_isetup\_shfoldr.dll
C:\Users\Public\Documents\Wondershare\NFWCHK.exe
C:\Users\Public\Documents\Wondershare\DownTask_2216.xml
cdn.xml
C:\WINDOWS\FONTS\TIMES.TTF
C:\Windows\media\Windows Navigation Start.wav
wdmaud.drv
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\license[1].htm
C:\WINDOWS\FONTS\ARIAL.TTF
C:\WINDOWS\FONTS\ARIALBD.TTF
C:\Users\win7\AppData\Local\Microsoft
C:\Users\win7\AppData\Local\Microsoft\Windows
C:\Users\win7\AppData\Local\Microsoft\Windows\History\desktop.ini
C:\Windows\Downloaded Installations\DAEMON Tools 3.47\daemon.msi
\??\C:\Windows\SysWOW64\ieframe.dll
C:\Windows\System32
C:\Windows\System32\msiexec.exe
C\aped
C:\Windows\system32\en-US\erofflps.txt
C:\Users\win7\AppData\Local\Temp\WER1078.tmp.WERInternalMetadata.xml
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DB87D2AB058205E5452E4516D5631B
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3151BAC9462B3E2DEE2326609B77DE7E
C:\Users\win7\AppData\Local\Temp\is-OG679.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-OG679.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\is-OG679.tmp\idp.dll
C:\Users\win7\AppData\Local\Temp\is-OG679.tmp\innocallback.dll
C:\Users\win7\AppData\Local\Temp\is-OG679.tmp\isslideshow.dll
C:\Users\win7\AppData\Local\Temp\is-OG679.tmp\ISDone.dll
C:\Users\win7\AppData\Local\Temp\nsr4160.tmp
C:\Users\win7\AppData\Local\Temp\nsc41A0.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\WER2D1A.tmp.WERInternalMetadata.xml
c:\windows\notepad.exe
C:\Users\win7\AppData\Local\Temp\WIN7-PC-20160405-0420.log
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\BN4ZCNYC.txt
C:\Users\win7\AppData\Local\Microsoft\Office\16.0\sample_Rules.xml
C:\Users\win7\AppData\Local\Temp\OfficeC2R763FA550-72E9-4FE4-B7C4-EB6F11C63288\v32.cab
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7396C420A8E1BC1DA97F1AF0D10BAD21
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7396C420A8E1BC1DA97F1AF0D10BAD21
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F90F18257CBB4D84216AC1E1F3BB2C76
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F90F18257CBB4D84216AC1E1F3BB2C76
C:\Users\win7\AppData\Local\Temp\OFFICE~1\v32.cab
C:\Users\win7\AppData\Local\Temp\OfficeC2R763FA550-72E9-4FE4-B7C4-EB6F11C63288OfficeC2R8ABB77C9-2523-4ED3-8680-57AE24825402\v32.hash
C:\Users\win7\AppData\Local\Temp\OfficeC2R763FA550-72E9-4FE4-B7C4-EB6F11C63288OfficeC2R8ABB77C9-2523-4ED3-8680-57AE24825402\VersionDescriptor.xml
C:\Users\win7\AppData\Local\Temp\OfficeC2R763FA550-72E9-4FE4-B7C4-EB6F11C63288\VersionDescriptor.xml
C:\Users\win7\AppData\Local\Temp\is-03VG6.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\is-S13V6.tmp\_isetup\_RegDLL.tmp
C:\Users\win7\AppData\Local\Temp\is-S13V6.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-S13V6.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\Setup Log 2016-04-05 #001.txt
C:\ProgramData\6f66c052-8827-4487-9031-09becb0cf541\temp
C:\Users\win7\AppData\Local\Temp\WIN7-PC-20160405-0535.log
C:\Users\win7\AppData\Local\Temp\OfficeC2R6E929EC6-D5F8-4939-ABAE-1E0BA5AD1B72\v32.cab
C:\Users\win7\AppData\Local\Temp\OfficeC2R6E929EC6-D5F8-4939-ABAE-1E0BA5AD1B72OfficeC2RD72FCB23-F7BC-49FF-A889-10E5DFF51A42\v32.hash
C:\Users\win7\AppData\Local\Temp\OfficeC2R6E929EC6-D5F8-4939-ABAE-1E0BA5AD1B72OfficeC2RD72FCB23-F7BC-49FF-A889-10E5DFF51A42\VersionDescriptor.xml
C:\Users\win7\AppData\Local\Temp\OfficeC2R6E929EC6-D5F8-4939-ABAE-1E0BA5AD1B72\VersionDescriptor.xml
\\.\SICE
\\.\SIWVID
\\.\NTICE
C:\ProgramData\NortonInstaller\Logs\2016-04-05-06h08m27s\NortonInstall-2016-04-05-06h08m27s.log
C:\ProgramData\Microsoft\WLSetup\Logs\2016-04-05_06-44_aa0-3j2xhiws.log
\\.\PIPE\winreg
C:\ProgramData\219d5106-5a99-41fd-b942-db6b503b0178\temp
C:\Users\win7\AppData\Local\Temp\nsu610B.tmp
C:\Users\win7\AppData\Local\Temp\nsf614B.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\is-UD2JH.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\is-A82UH.tmp\_isetup\_RegDLL.tmp
C:\Users\win7\AppData\Local\Temp\is-A82UH.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-A82UH.tmp\_isetup\_shfoldr.dll
C:\aucfg.ini
\AuResult.ini
C:\AU_Data\AU_Log\TmuDump.txt
C:\Users\win7\AppData\Local\Temp\nso5E59.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nso5E59.tmp\CityHash.dll
C:\ProgramData\c00fd789-4044-4a32-8a4f-7d731dbdc0d1\temp
C:\Windows\Dell\UpdatePackage\log\Synaptics.log
C:\Windows\Synaptics.log
C:\Users\win7\AppData\Local\Temp\TeamViewer
C:\Users\win7\AppData\Local\Temp\TeamViewer\Version5\TeamViewer_.exe
C:\Windows\Debug\WIA\wiatrace.log
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\log[1].txt
C:\ProgramData\Real\RealPlayer\S-1-5-18
C:\ProgramData\Real\RealPlayer\S-1-5-21-3979321414-2393373014-2172761192-1000
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\log[1].txt
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\extended[1].htm
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\log[1].txt
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\stubinst_config_it[1].xml
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\askrt_it[1].cab
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\ask\askrt_it.cab
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\ask\ask.spc
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\ask\ASKInstaller.exe
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\ask\Helper.exe
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\ask\version.ini
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\stubinst_pkg_it[1].cab
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\stubinst_pkg_it.cab
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\blank.spc
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\version.ini
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\inst_config\compat.dll
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\inst_config\gcapi_dll.dll
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\inst_config\gtapi_v6.dll
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\inst_config\gtapi_v6_1.dll
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\inst_config\inst_detect.xml
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\inst_config\stubhelper.dll
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\inst_config\SymCCIS.dll
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\button_dn.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\button_ov.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\button_up.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\icon_alert.bmp
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\icon_careful.bmp
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\icon_info.bmp
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\icon_info2.bmp
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\apo\apo.css
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\apo\index.html
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\apo\javascript.js
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\apo\strings.js
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\apo\waiting-spinner.gif
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\ask\ask.css
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\ask\index.html
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\ask\javascript.js
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\ask\strings.js
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\ask\waiting-spinner.gif
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\common\functions.js
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\common\jquery.min.js
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\eula\indexNewUser.html
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\eula\indexOldUser.html
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\eula\index_uh.html
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\eula\logger.html
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\eula\page.css
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\eula\strings.js
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\eula\welcome.css
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\images\btn_accept_enabled.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\images\btn_agreeAndContinue_133x20.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\images\btn_back_enabled.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\images\btn_blue.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\images\btn_clear.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\images\btn_continue_enabled.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\images\btn_next_enabled.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\images\btn_options_enabled.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\images\bullet.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\images\dots_empty.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\images\dot_full.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\images\headerBackground.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\images\progress_loaded.gif
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\images\progress_slide_1.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\images\progress_slide_2.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\images\progress_slide_3.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\images\progress_slide_4.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\images\progress_slide_5.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\images\progress_slide_6.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\images\progress_slide_7.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\images\progress_unloaded.gif
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\images\progress_unloaded.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\images\realLogo.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\images\realLogo2.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\images\realLogo_welcome.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\images\white.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\inst_complete\index.html
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\inst_complete\index2.html
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\inst_complete\jquery.min.js
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\inst_complete\page.css
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\inst_complete\player_behav.html
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\inst_complete\player_rot1.html
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\inst_complete\player_rot2.html
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\no_firstrun\index.html
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\no_firstrun\page.css
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\nse\index.html
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\nse\norton.css
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\nse\nortonLogo.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\nse\strings.js
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\nss\index.html
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\nss\norton.css
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\nss\nortonLogo.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\nss\strings.js
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\post_install\index.html
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\post_install\post_install.css
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\post_install\strings.js
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\progress\index.html
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\progress\index1.html
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\progress\index2.html
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\progress\index_uh.html
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\progress\logger.html
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\progress\percent_bar.js
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\progress\progress.css
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\progress\strings.js
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\uh_prompt\background.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\uh_prompt\btn_later_enabled.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\uh_prompt\btn_update_enabled.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\uh_prompt\index.html
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\uh_prompt\index16user.html
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\uh_prompt\index17user.html
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\uh_prompt\index18user.html
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\uh_prompt\logger.html
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\uh_prompt\rp-logo.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\uh_prompt\r_bullet.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\uh_prompt\strings.js
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\pages\uh_prompt\uh_prompt.css
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\browser\bottom.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\browser\bottom_left.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\browser\bottom_right.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\browser\center.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\browser\close.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\browser\left.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\browser\right.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\browser\top.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\browser\top_left.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\browser\top_right.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\bottom.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\bottom_left.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\bottom_right.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\center.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\close.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\left.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\right.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\swoosh.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\swoosh2.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\top.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\top_left.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\top_right.png
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\browser\center
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\browser\center.BMP
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\browser\center.PNG
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\browser\left
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\browser\left.BMP
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\browser\left.PNG
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\browser\right
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\browser\right.BMP
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\browser\right.PNG
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\browser\top
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\browser\top.BMP
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\browser\top.PNG
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\browser\bottom
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\browser\bottom.BMP
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\browser\bottom.PNG
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\browser\top_left
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\browser\top_left.BMP
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\browser\top_left.PNG
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\browser\top_right
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\browser\top_right.BMP
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\browser\top_right.PNG
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\browser\bottom_left
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\browser\bottom_left.BMP
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\browser\bottom_left.PNG
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\browser\bottom_right
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\browser\bottom_right.BMP
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\browser\bottom_right.PNG
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\center
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\center.BMP
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\center.PNG
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\swoosh
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\swoosh.BMP
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\swoosh.PNG
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\swoosh2
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\swoosh2.BMP
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\swoosh2.PNG
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\left
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\left.BMP
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\left.PNG
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\right
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\right.BMP
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\right.PNG
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\top
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\top.BMP
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\top.PNG
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\bottom
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\bottom.BMP
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\bottom.PNG
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\top_left
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\top_left.BMP
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\top_left.PNG
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\top_right
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\top_right.BMP
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\top_right.PNG
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\bottom_left
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\bottom_left.BMP
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\bottom_left.PNG
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\bottom_right
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\bottom_right.BMP
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\skin\dialog\bottom_right.PNG
C:\Users\win7\AppData\Local\Temp\nsuE02B.tmp
C:\Users\win7\AppData\Local\Temp\nszE04B.tmp\mIRC.dll
C:\Users\win7\AppData\Local\Temp\nszE04B.tmp\UAC.dll
C:\Users\win7\AppData\Local\Temp\nszE04B.tmp\AccessControl.dll
C:\Users\win7\AppData\Local\Temp\nszE04B.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nszE04B.tmp\options.ini
C:\Users\win7\AppData\Local\Temp\nszE04B.tmp\confirm.ini
C:\Users\win7\AppData\Local\Temp\Windows.lnk
C:\Users\win7\AppData\Local\Temp\nszE04B.tmp\ioSpecial.ini
C:\Users\win7\AppData\Local\Temp\nszE04B.tmp\modern-wizard.bmp
C:\Users\win7\AppData\Local\Temp\nszE04B.tmp\modern-header.bmp
C:\Users\win7\AppData\Local\Temp\nszE04B.tmp\InstallOptions.dll
C:\Users\win7\AppData\Local\Temp\nsd19D4.tmp\System.dll
C:\Users\win7\AppData\Roaming\Mikrotik\Winbox\settings.cfg.viw
C:\Users\win7\AppData\Roaming\Mikrotik\Winbox\sessionpath
C:\Users\win7\AppData\Roaming\Mikrotik\Winbox\path
C:\Users\win7\AppData\Roaming\Mikrotik\Winbox\Addresses.cdb
C:\Users\win7\AppData\Roaming\Mikrotik\Winbox\winbox.cfg
C:\Users\win7\AppData\Local\Temp\wbo10AA.tmp
C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc\msvcm80.dll
C:\WINDOWS\FONTS\ARIALI.TTF
C:\WINDOWS\FONTS\ARIALBI.TTF
C:\WINDOWS\FONTS\TAHOMABD.TTF
C:\MLS\MultiLanguageTexts_eng.mls
C:\MLS\MultiLanguageTexts_ENG.mls
C:\ProgramData\eLicenser\Logs\eLCC_Actions.log
C:\eLCC.ini
C:\Help\
C:\Users\win7\AppData\Local\eLicenser\eLCC\eLCCSettings.xml
C:\Users\win7\AppData\Local\Temp\is-G9797.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\is-C6BO7.tmp\_isetup\_RegDLL.tmp
C:\Users\win7\AppData\Local\Temp\is-C6BO7.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-C6BO7.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\IXP000.TMP\BBSetupConfig.xml
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\711[1]
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\711[1]
C:\Setup.INI
C:\0x0000.ini
\\.\avgtp
C:\Users\win7\AppData\Local\Temp\toolbar_log.txt
C:\Users\win7\AppData\Local\Temp\sample.log
C:\Users\win7\AppData\Local\Temp\{675C5CE2-6EE8-43AB-BABA-9F60D98A9FDD}\fpb.tmp
C:\Users\win7\AppData\Local\Temp\{C911BCC1-C4EF-475F-9CEE-F29F92103D86}\fpb.tmp
C:\Windows\SysWOW64\Macromed\Flash\mms.cfg
C:\Windows\SysWOW64\mms.cfg
C:\Users\win7\AppData\Local\Temp\nst232.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nst232.tmp\ExecCmd.dll
C:\Users\win7\AppData\Local\Temp\nsc71E9.tmp
C:\Users\win7\AppData\Local\Temp\nsm7228.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsm7228.tmp\UserInfo.dll
C:\Users\win7\AppData\Local\Temp\nsm7228.tmp\g\gtapi_signed.dll
C:\Users\win7\AppData\Local\Temp\nsm7228.tmp\g\gcapi_dll.dll
C:\Users\win7\AppData\Local\Temp\nsm7228.tmp\g\gcombo\ComboOffer.html
C:\Users\win7\AppData\Local\Temp\nsm7228.tmp\g\gcombo\combo-offer.png
C:\Users\win7\AppData\Local\Temp\nsm7228.tmp\g\pfWWW.dll
C:\Users\win7\AppData\Local\Temp\nsm7228.tmp\modern-header.bmp
C:\Users\win7\AppData\Local\Temp\nsm7228.tmp\modern-wizard.bmp
C:\Users\win7\AppData\Local\Temp\nsm7228.tmp\ButtonEvent.dll
C:\Users\win7\AppData\Local\Temp\nsm7228.tmp\nsDialogs.dll
C:\Users\win7\AppData\Local\Temp\nsm7228.tmp\g\gcombo\ChromeLogo.bmp
C:\Users\win7\AppData\Local\Temp\nsm7228.tmp\g\gcombo\ComboText.bmp
C:\Users\win7\AppData\Local\Temp\nsm7228.tmp\g\pfWWW.DLL
C:\Users\win7\AppData\Local\Temp\nsm7228.tmp
C:\Users\win7\AppData\Local\Temp\nsm7228.tmp\g
C:\Users\win7\AppData\Local\Temp\nsm7228.tmp\g\gcombo
C:\Users\win7\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT
C:\Users\win7\AppData\Local\Temp\browser_crashes\operation_log.txt
C:\Users\win7\AppData\Local\Temp\is-KRK85.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\is-BLOTU.tmp\_isetup\_RegDLL.tmp
C:\Users\win7\AppData\Local\Temp\is-BLOTU.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-BLOTU.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\is-BLOTU.tmp\_isetup\_isdecmp.dll
C:\Users\win7\AppData\Local\Temp\9F0E.tmp
C:\Users\win7\AppData\Local\Temp\\~DF7DCEB7EB2F9B61AC.TMP
C:\Users\win7\AppData\Local\Temp\VideoPadCounts.txt
C:\Users\win7\AppData\Local\Temp\VideoPadCache\a4c__wt
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\BlurayDataDiscPresets\YouTube%20480p.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\BlurayDataDiscPresets\YouTube%20720p.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\BlurayDataDiscPresets\YouTube%201080p.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\BlurayDataDiscPresets\YouTube%201440p%20%282K%29.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\BlurayDataDiscPresets\YouTube%202160p%20%284K%29.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\BlurayDataDiscPresets\Internet%20Video.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\BlurayDataDiscPresets\Animated%20GIF.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\BlurayDataDiscPresets\TV%20NTSC.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\BlurayDataDiscPresets\TV%20PAL.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\BlurayDataDiscPresets\Widescreen%20TV.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\BlurayDataDiscPresets\HD%20720p.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\BlurayDataDiscPresets\HD%201080p.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\BlurayDataDiscPresets\HD%201440p%20%282K%29.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\BlurayDataDiscPresets\HD%202160p%20%284K%29.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\BlurayDataDiscPresets\PS3%20HD%20720.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\BlurayDataDiscPresets\PS3%20HD%201080.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DVDDataDiscPresets\YouTube%20480p.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DVDDataDiscPresets\YouTube%20720p.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DVDDataDiscPresets\YouTube%201080p.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DVDDataDiscPresets\YouTube%201440p%20%282K%29.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DVDDataDiscPresets\YouTube%202160p%20%284K%29.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DVDDataDiscPresets\Internet%20Video.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DVDDataDiscPresets\Animated%20GIF.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DVDDataDiscPresets\TV%20NTSC.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DVDDataDiscPresets\TV%20PAL.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DVDDataDiscPresets\Widescreen%20TV.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DVDDataDiscPresets\HD%20720p.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DVDDataDiscPresets\HD%201080p.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DVDDataDiscPresets\HD%201440p%20%282K%29.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DVDDataDiscPresets\HD%202160p%20%284K%29.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DVDDataDiscPresets\PS3%20HD%20720.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DVDDataDiscPresets\PS3%20HD%201080.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\YouTube%20480p.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\YouTube%20720p.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\YouTube%201080p.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\YouTube%201440p%20%282K%29.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\YouTube%202160p%20%284K%29.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\Internet%20Video.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\Animated%20GIF.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\TV%20NTSC.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\TV%20PAL.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\Widescreen%20TV.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\HD%20720p.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\HD%201080p.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\HD%201440p%20%282K%29.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\HD%202160p%20%284K%29.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\PS3%20HD%20720.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\PS3%20HD%201080.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DropboxPresets\YouTube%20480p.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DropboxPresets\YouTube%20720p.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DropboxPresets\YouTube%201080p.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DropboxPresets\YouTube%201440p%20%282K%29.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DropboxPresets\YouTube%202160p%20%284K%29.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DropboxPresets\Internet%20Video.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DropboxPresets\Animated%20GIF.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DropboxPresets\TV%20NTSC.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DropboxPresets\TV%20PAL.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DropboxPresets\Widescreen%20TV.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DropboxPresets\HD%20720p.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DropboxPresets\HD%201080p.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DropboxPresets\HD%201440p%20%282K%29.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DropboxPresets\HD%202160p%20%284K%29.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DropboxPresets\PS3%20HD%20720.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DropboxPresets\PS3%20HD%201080.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\YouTube%20480p.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\YouTube%20720p.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\YouTube%201080p.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\YouTube%201440p%20%282K%29.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\YouTube%202160p%20%284K%29.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\Internet%20Video.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\Animated%20GIF.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\TV%20NTSC.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\TV%20PAL.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\Widescreen%20TV.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\HD%20720p.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\HD%201080p.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\HD%201440p%20%282K%29.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\HD%202160p%20%284K%29.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\PS3%20HD%20720.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\PS3%20HD%201080.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\StereoscopicPresets\YouTube%20480p.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\StereoscopicPresets\YouTube%20720p.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\StereoscopicPresets\YouTube%201080p.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\StereoscopicPresets\YouTube%201440p%20%282K%29.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\StereoscopicPresets\YouTube%202160p%20%284K%29.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\StereoscopicPresets\Internet%20Video.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\StereoscopicPresets\Animated%20GIF.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\StereoscopicPresets\TV%20NTSC.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\StereoscopicPresets\TV%20PAL.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\StereoscopicPresets\Widescreen%20TV.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\StereoscopicPresets\HD%20720p.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\StereoscopicPresets\HD%201080p.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\StereoscopicPresets\HD%201440p%20%282K%29.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\StereoscopicPresets\HD%202160p%20%284K%29.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\StereoscopicPresets\PS3%20HD%20720.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\StereoscopicPresets\PS3%20HD%201080.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\PortablePresets\Android480P.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\PortablePresets\Android720P.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\PortablePresets\AppleiPhone2G.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\PortablePresets\AppleiPhone3G.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\PortablePresets\AppleiPhone3GS.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\PortablePresets\AppleiPhone4.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\PortablePresets\AppleiPhone4S.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\PortablePresets\AppleiPhone5_5C.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\PortablePresets\AppleiPhone5S_6_6P.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\PortablePresets\AppleiPhone6S_6SP.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\PortablePresets\AppleiPodClassic.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\PortablePresets\AppleiPodTouch1.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\PortablePresets\AppleiPodTouch2.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\PortablePresets\AppleiPodTouch3.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\PortablePresets\AppleiPodTouch4.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\PortablePresets\AppleiPodTouch5.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\PortablePresets\AppleiPad1.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\PortablePresets\AppleiPad2.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\PortablePresets\AppleiPad3.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\PortablePresets\AppleiPad4.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\PortablePresets\AppleiPadAir.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\PortablePresets\AppleiPadAir2.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\PortablePresets\AppleiPadMini.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\PortablePresets\AppleiPadMini2_3.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\PortablePresets\AppleiPadMini4.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\PortablePresets\SonyPSP.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\PortablePresets\SonyPSVita.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\PortablePresets\SonyPS3.dat
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\PortablePresets\Xbox360.dat
C:\Users\win7\AppData\Local\Temp\_videopad_rl_win7
C:\ProgramData\NCH Software\VideoPad\effects_transitions\a4c__wt
\\.\PIPE\samr
C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\filters.dat
\??\C:\Windows\system32\EhStorShell.dll
\??\C:\Windows\system32\ntshrui.dll
C:\Users\win7\AppData\Local\Temp\VideoPad-2636-1\ffmpeg19.exe
W40k.ini
Regions.ini
Local.ini
C:\ProgramData\Battle.net\Setup\battle.net\Logs\battle.net-setup-20160405T120934.515125.log
C:\Users\win7\AppData\Local\Temp\nshE312.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nshE312.tmp\CityHash.dll
C:\install.cfg
C:\Intel\Logs\IntelGFX.log
C:\Users\win7\AppData\Local\Temp\nsj27BC.tmp\ioSpecial.ini
C:\Users\win7\AppData\Local\Temp\nsj27BC.tmp\modern-wizard.bmp
C:\Users\win7\AppData\Local\Temp\nsj27BC.tmp\InstallOptions.dll
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Youtube Downloader\Free Youtube Downloader.lnk
C:\Users\win7\Desktop\Free Youtube Downloader.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Youtube Downloader\Uninstall.lnk
C:\Windows\Temp\EZInst.log
C:\properties.ini
C:\ProgramData\AMMYY\hr
\\.\PhysicalDrive0
\\.\{CFE68B1E-656A-488B-8077-738CA67BA3A5}
C:\ProgramData\AMMYY\hr3
C:\ProgramData\AMMYY\settings3.bin
http://java.com/download
C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\win7\AppData\Local\Temp\WER3293.tmp.WERInternalMetadata.xml
C:\Users\win7\AppData\Local\Temp\nsoD439.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsoD439.tmp\InetLoad_vms.dll
C:\Users\win7\AppData\Local\Temp\nsoD439.tmp\ymsgr11_us.ini
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\WNPKXY63.txt
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\ymsgr11_us[1].htm
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C46E7B0F942663A1EDC8D9D6D7869173_D0A952E2F70E20A3F479EEA2F5C339F4
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\ymsgr11_us[1].ini
C:\Users\win7\AppData\Local\Temp\nsoD439.tmp\nshE89D.tmp.htm
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\stats[1].gif
C:\Users\win7\AppData\Local\Temp\nsoD439.tmp\nsnE9F6.tmp.htm
C:\Users\win7\AppData\Local\Temp\nsoD439.tmp\s1.bmp
C:\Users\win7\AppData\Local\Temp\nsoD439.tmp\s2.bmp
C:\Users\win7\AppData\Local\Temp\nsoD439.tmp\s3.bmp
C:\Users\win7\AppData\Local\Temp\nsoD439.tmp\s4.bmp
C:\Users\win7\AppData\Local\Temp\nsoD439.tmp\s5.bmp
C:\Users\win7\AppData\Local\Temp\nsoD439.tmp\ywiseextU.dll
C:\Users\win7\AppData\Local\Temp\nsoD439.tmp\eula.rtf
C:\Users\win7\AppData\Local\Temp\nsoD439.tmp\finish.ini
C:\Users\win7\AppData\Local\Temp\nsoD439.tmp\legal.ini
C:\Users\win7\AppData\Local\Temp\nsoD439.tmp\review.ini
C:\Users\win7\AppData\Local\Temp\nsoD439.tmp\software.ini
C:\Users\win7\AppData\Local\Temp\nsoD439.tmp\welcome.ini
C:\Users\win7\AppData\Local\Temp\nsoD439.tmp\modern-header.bmp
C:\Users\win7\AppData\Local\Temp\nsoD439.tmp\InstallOptions.dll
./logs/error.log
C:\Users\win7\AppData\Local\Temp\3582-490\sample
C:\Windows\svchost.com
C:\Users\win7\AppData\Local\Temp\tmp5023.tmp
C:\CFVS_I~1.EXE
C:\DLL_LO~1.EXE
C:\Procmon.exe
C:\PROGRA~2\COMMON~1\MICROS~1\ink\mip.exe
C:\PROGRA~2\COMMON~1\MICROS~1\MSInfo\msinfo32.exe
C:\PROGRA~2\INTERN~1\ieinstal.exe
C:\PROGRA~2\INTERN~1\ielowutil.exe
C:\PROGRA~2\INTERN~1\iexplore.exe
C:\PROGRA~2\WINDOW~1\wab.exe
C:\PROGRA~2\WINDOW~1\wabmig.exe
C:\PROGRA~2\WINDOW~1\WinMail.exe
C:\PROGRA~2\WINDOW~2\ACCESS~1\wordpad.exe
C:\PROGRA~2\WINDOW~4\ImagingDevices.exe
C:\PROGRA~2\WI4223~1\sidebar.exe
C:\PROGRA~3\PACKAG~1\{050D4~1\VCREDI~1.EXE
C:\PROGRA~3\PACKAG~1\{F65DB~1\VCREDI~1.EXE
C:\Python27\Lib\DISTUT~1\command\WININS~1.EXE
C:\Python27\Lib\DISTUT~1\command\WININS~2.EXE
C:\Python27\Lib\DISTUT~1\command\WININS~3.EXE
C:\Python27\Lib\DISTUT~1\command\WININS~4.EXE
C:\Python27\Lib\DISTUT~1\command\WI02EA~1.EXE
C:\Python27\Lib\SITE-P~1\pip\_vendor\distlib\t32.exe
C:\Python27\Lib\SITE-P~1\pip\_vendor\distlib\t64.exe
C:\Python27\Lib\SITE-P~1\pip\_vendor\distlib\w32.exe
C:\Python27\Lib\SITE-P~1\pip\_vendor\distlib\w64.exe
C:\Python27\Lib\SITE-P~1\SETUPT~1\cli-32.exe
C:\Python27\Lib\SITE-P~1\SETUPT~1\cli-64.exe
C:\Python27\Lib\SITE-P~1\SETUPT~1\CLI-AR~1.EXE
C:\Python27\Lib\SITE-P~1\SETUPT~1\cli.exe
C:\Python27\Lib\SITE-P~1\SETUPT~1\gui-32.exe
C:\Python27\Lib\SITE-P~1\SETUPT~1\gui-64.exe
C:\Python27\Lib\SITE-P~1\SETUPT~1\GUI-AR~1.EXE
C:\Python27\Lib\SITE-P~1\SETUPT~1\gui.exe
C:\Python27\Scripts\EASY_I~2.EXE
C:\Python27\Scripts\EASY_I~1.EXE
C:\Python27\Scripts\pip.exe
C:\Python27\Scripts\PIP27~1.EXE
C:\Python27\Scripts\pip2.exe
C:\Users\ALLUSE~1\PACKAG~1\{050D4~1\VCREDI~1.EXE
C:\Users\ALLUSE~1\PACKAG~1\{F65DB~1\VCREDI~1.EXE
C:\Users\win7\AppData\Local\Temp\\LSBurnWatcher.log
C:\Users\win7\AppData\Local\Temp\is-C5JB6.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\is-VOOG6.tmp\_isetup\_RegDLL.tmp
C:\Users\win7\AppData\Local\Temp\is-VOOG6.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-VOOG6.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\{391B7029-655F-4AEF-97FF-88A8B896C1E9}\Disk1\data1.cab
C:\Users\win7\AppData\Local\Temp\{391B7029-655F-4AEF-97FF-88A8B896C1E9}\Disk1\data1.hdr
C:\Users\win7\AppData\Local\Temp\{391B7029-655F-4AEF-97FF-88A8B896C1E9}\Disk1\ISSetup.dll
C:\Users\win7\AppData\Local\Temp\{391B7029-655F-4AEF-97FF-88A8B896C1E9}\Disk1\layout.bin
C:\Users\win7\AppData\Local\Temp\{391B7029-655F-4AEF-97FF-88A8B896C1E9}\Disk1\setup.exe
C:\Users\win7\AppData\Local\Temp\{391B7029-655F-4AEF-97FF-88A8B896C1E9}\Disk1\setup.ini
C:\Users\win7\AppData\Local\Temp\{391B7029-655F-4AEF-97FF-88A8B896C1E9}\Disk1\setup.inx
C:\Users\win7\AppData\Local\Temp\{391B7029-655F-4AEF-97FF-88A8B896C1E9}\Disk1\_Setup.dll
C:\Users\win7\AppData\Local\Temp\{391B7029-655F-4AEF-97FF-88A8B896C1E9}\
C:\Users\win7\AppData\Local\Temp\{391B7029-655F-4AEF-97FF-88A8B896C1E9}\_Setup.dll
C:\Users\win7\AppData\Local\Temp\{391B7029-655F-4AEF-97FF-88A8B896C1E9}\setup.ini
C:\Users\win7\AppData\Local\Temp\{391B7029-655F-4AEF-97FF-88A8B896C1E9}\Disk1\setupdir\0009\setup.gif
C:\Users\win7\AppData\Local\Temp\{391B7029-655F-4AEF-97FF-88A8B896C1E9}\Disk1\setup.gif
C:\Users\win7\AppData\Local\Temp\b64.rra
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\setuc00.rra
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\licec10.rra
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\50COc10.rra
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\MfsCc20.rra
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\IS12c20.rra
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\Quicc2f.rra
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\Termc2f.rra
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\MFS2c3f.rra
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\Panac3f.rra
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\Waitc4e.rra
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\MFSMc4e.rra
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\devmc4e.rra
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\Checc4e.rra
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\Licec4e.rra
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\MFS2c4e.rra
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\MFSMc5e.rra
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\corec5e.rra
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\dotnc6e.rra
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\Fontc6e.rra
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\DIFxc6e.rra
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\ISBEc6e.rra
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\Stric7d.rra
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\isrtc7d.rra
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\defac7d.rra
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\_IsRc7d.rra
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\setup.inx
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\ISRT.dll
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\_isres.dll
C:\Windows\SysWOW64\stdole2.tlb
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\StringTable-0009-English.ips
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\corecomp.ini
\??\C:\Users\win7\AppData\Local\Temp\{391B7029-655F-4AEF-97FF-88A8B896C1E9}\Disk1\data1.hdr
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\default.pal
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\MFS2Instutil.dll
C:\Users\win7\AppData\Local\Temp\{01db25f3-1b76-4d97-88c8-1c90634d88fb}\.ba1\wixstdba.dll
C:\Users\win7\AppData\Local\Temp\{01db25f3-1b76-4d97-88c8-1c90634d88fb}\.ba1\thm.xml
C:\Users\win7\AppData\Local\Temp\{01db25f3-1b76-4d97-88c8-1c90634d88fb}\.ba1\thm.wxl
C:\Users\win7\AppData\Local\Temp\{01db25f3-1b76-4d97-88c8-1c90634d88fb}\.ba1\logo.png
C:\Users\win7\AppData\Local\Temp\{01db25f3-1b76-4d97-88c8-1c90634d88fb}\.ba1\license.rtf
C:\Users\win7\AppData\Local\Temp\{01db25f3-1b76-4d97-88c8-1c90634d88fb}\.ba1\BootstrapperApplicationData.xml
C:\Users\win7\AppData\Local\Temp\dd_vcredist_x86_20160405165625.log
\\.\pipe\BurnPipe.{390383CD-9143-4AF7-93C1-CCA8B896C1E9}
C:\Users\win7\AppData\Local\Temp\Setup_20160405165625_Failed.txt
C:\Users\win7\AppData\Local\Temp\nsc2441.tmp
C:\Users\win7\AppData\Local\Temp\nss2452.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nss2452.tmp\UserInfo.dll
C:\Users\win7\AppData\Local\Temp\nss2452.tmp\splash.bmp
C:\Users\win7\AppData\Local\Temp\nss2452.tmp\AdvSplash.dll
C:\Users\win7\AppData\Local\Temp\nss2452.tmp\splash.wav.WAV
C:\Users\win7\AppData\Local\Temp\nss2452.tmp\KillProcDLL.dll
C:\Users\win7\AppData\Local\Temp\nss2452.tmp\modern-header.bmp
C:\Users\win7\AppData\Local\Temp\nss2452.tmp\modern-wizard.bmp
C:\Users\win7\AppData\Local\Temp\nss2452.tmp\NSIS_HTTPRequest.dll
C:\Users\win7\AppData\Local\Temp\nss2452.tmp\nsDialogs.dll
C:\ProgramData\ParetoLogic\PC Health Advisor\dc_db.db
C:\tree.js
C:\Users\win7\AppData\LocalLow\\{D2020D47-707D-4E26-B4D9-739C4F4C2E9A}\\{FBC0652C-7B29-4FB6-8ADA-91F54B267AD4}\\1.5\tree.js
update.txt
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\config[1].js
C:\Windows\SysWOW64\ieframe.dll
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\msg[1].htm
C:\Users\win7\AppData\Local\Temp\nsr7F5E.tmp
C:\Users\win7\AppData\Local\Temp\nsw7FCC.tmp\modern-header.bmp
C:\Users\win7\AppData\Local\Temp\nsw7FCC.tmp\modern-wizard.bmp
C:\Users\win7\AppData\Local\Temp\nsw7FCC.tmp\nsDialogs.dll
C:\Users\win7\AppData\Local\Temp\nsw7FCC.tmp\System.dll
C:\Users\win7\Desktop\Drakensang Online.lnk
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Drakensang Online\Drakensang Online.lnk
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Drakensang Online\Uninstall.lnk
C:\Users\win7\AppData\Local\Temp\nsw7FCC.tmp\SimpleFC.dll
C:\Users\win7\AppData\Local\Temp\\~DF1A291707B194D3EB.TMP
\\?\C:\sample.dat
\\?\C:\sample
\\.\PHYSICALDRIVE0
https://www.mql5.com/?utm_campaign=WebInstaller&utm_medium=special&utm_source=installer
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
C:\Users\win7\AppData\Local\Downloaded Installations\{7AE237B3-2D19-428B-B215-8B9E9CBDCAF1}\VirtualRouterPlusSetup.msi
\\.\PIPE\wkssvc
C:\Intel\Logs\IntelControlCenter.log
C:\Users\win7\AppData\Local\Temp\is-UGJKE.tmp\_isetup\_RegDLL.tmp
C:\Users\win7\AppData\Local\Temp\is-UGJKE.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-UGJKE.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\sampleA24.log
C:\Users\win7\AppData\Local\Temp\nsu2769.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsu2769.tmp\UAC.dll
C:\Users\win7\AppData\Local\Temp\nsu2769.tmp\options.ini
C:\Users\win7\AppData\Local\Temp\nsu2769.tmp\shortcuts.ini
C:\Users\win7\AppData\Local\Temp\nsu2769.tmp\components.ini
C:\Users\win7\AppData\Local\Temp\nsu2769.tmp\summary.ini
C:\Users\win7\AppData\Local\Temp\nsu2769.tmp\ioSpecial.ini
C:\Users\win7\AppData\Local\Temp\nsu2769.tmp\InstallOptions.dll
C:\Users\win7\AppData\Local\Temp\nsu2769.tmp\modern-wizard.bmp
C:\Users\win7\AppData\Local\Temp\nsu2769.tmp\modern-header.bmp
C:\Users\win7\AppData\Local\Temp\000984B4_Rar\sample
MPASDLTA.VDM
MPAVDLTA.VDM
C:\Users\win7\AppData\Local\Temp\is-HOS2H.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-HOS2H.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\is-HOS2H.tmp\SpyHunter-Installer.exe
C:\Users\win7\AppData\Local\Temp\is-HOS2H.tmp\spyhunter_win7.bmp
C:\Users\win7\AppData\Local\Temp\{7C029707-4E9A-470A-AADA-703787A937A1}\Disk1\data1.cab
C:\Users\win7\AppData\Local\Temp\{7C029707-4E9A-470A-AADA-703787A937A1}\Disk1\data1.hdr
C:\Users\win7\AppData\Local\Temp\{7C029707-4E9A-470A-AADA-703787A937A1}\Disk1\ISSetup.dll
C:\Users\win7\AppData\Local\Temp\{7C029707-4E9A-470A-AADA-703787A937A1}\Disk1\layout.bin
C:\Users\win7\AppData\Local\Temp\{7C029707-4E9A-470A-AADA-703787A937A1}\Disk1\setup.exe
C:\Users\win7\AppData\Local\Temp\{7C029707-4E9A-470A-AADA-703787A937A1}\Disk1\setup.ini
C:\Users\win7\AppData\Local\Temp\{7C029707-4E9A-470A-AADA-703787A937A1}\Disk1\setup.inx
C:\Users\win7\AppData\Local\Temp\{7C029707-4E9A-470A-AADA-703787A937A1}\Disk1\_Setup.dll
C:\Users\win7\AppData\Local\Temp\{7C029707-4E9A-470A-AADA-703787A937A1}\P
C:\Users\win7\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3979321414-2393373014-2172761192-1000\e8a79749e4c2d3fdfee1a489f20d567f_c4b6765a-c53d-4b48-b576-0e1db4e9f3bc
C:\Users\win7\AppData\Local\Temp\{7C029707-4E9A-470A-AADA-703787A937A1}\setup.ini
C:\Users\win7\AppData\Local\Temp\{7C029707-4E9A-470A-AADA-703787A937A1}\Disk1\setupdir\0009\setup.gif
C:\Users\win7\AppData\Local\Temp\{7C029707-4E9A-470A-AADA-703787A937A1}\Disk1\setup.gif
C:\ProgramData\InstallShield\ISEngine12.0\IsBE.dll
C:\Users\win7\AppData\Local\Temp\e0cb.rra
C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{E487EE7D-EAAA-4E2A-9116-E3B477D8A74F}\setue129.rra
C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{E487EE7D-EAAA-4E2A-9116-E3B477D8A74F}\licee148.rra
C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\coree158.rra
C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\dotne158.rra
C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{E487EE7D-EAAA-4E2A-9116-E3B477D8A74F}\Fonte158.rra
C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{E487EE7D-EAAA-4E2A-9116-E3B477D8A74F}\DIFxe167.rra
C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\ISBEe167.rra
C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{E487EE7D-EAAA-4E2A-9116-E3B477D8A74F}\Strie177.rra
C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{E487EE7D-EAAA-4E2A-9116-E3B477D8A74F}\isrte177.rra
C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{E487EE7D-EAAA-4E2A-9116-E3B477D8A74F}\defae187.rra
C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{E487EE7D-EAAA-4E2A-9116-E3B477D8A74F}\_IsRe196.rra
C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{E487EE7D-EAAA-4E2A-9116-E3B477D8A74F}\setup.inx
C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{E487EE7D-EAAA-4E2A-9116-E3B477D8A74F}\ISRT.dll
C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{E487EE7D-EAAA-4E2A-9116-E3B477D8A74F}\_isres.dll
C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{E487EE7D-EAAA-4E2A-9116-E3B477D8A74F}\StringTable-0009-English.ips
C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\corecomp.ini
\??\C:\Users\win7\AppData\Local\Temp\{7C029707-4E9A-470A-AADA-703787A937A1}\Disk1\data1.hdr
C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{E487EE7D-EAAA-4E2A-9116-E3B477D8A74F}\default.pal
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Toshiba\Utilities\USB Sleep and Charge.lnk
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D237426009EE0F53ADECD7FCEBA7288C_97325C0F99E0D4A128C98C1EE254C1B7
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D237426009EE0F53ADECD7FCEBA7288C_97325C0F99E0D4A128C98C1EE254C1B7
C:\Users\win7\AppData\Local\Temp\27e8eaa2-fb55-11e5-9e88-08002763e612\NDP46-KB3045557-x86-x64-AllOS-ENU.exe_27e8eaa4-fb55-11e5-9e88-08002763e612
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\40E450F7CE13419A2CCC2A5445035A0A_5EBE6DB976D2A24B70511DE6385541FC
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1DAF2884EC4DFA96BA4A58D4DBC9C406
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B912B2C6928A18B8CD7D50CF08BEA95B_0CEE021D06130BCB6BAD57F258A6B70F
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B912B2C6928A18B8CD7D50CF08BEA95B_24D4132D1C097655F36D5CE4171519E6
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAEDF689AA6DC9642B833051B2B77D1A
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\0D704203BDA0CEEDCD2BBB4ACE02F586
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B912B2C6928A18B8CD7D50CF08BEA95B_0CEE021D06130BCB6BAD57F258A6B70F
C:\options.vnc
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Recent\desktop.ini
C:\Users\win7\AppData\Roaming\Microsoft\Windows\SendTo\desktop.ini
CONIN$
CONOUT$
C:\Users\win7\AppData\Local\Temp\27E7832D\sample\presetup\tit.bmp
C:\Users\win7\AppData\Local\Temp\27E7832D\sample\plugins\0\StdUI.dll
C:\Users\win7\AppData\Local\Temp\27E7832D\sample\plugins\0\StdUI.ini
C:\Users\win7\AppData\Local\Temp\27E7832D\sample\plugins\0\lng\Enu.lng
C:\Users\win7\AppData\Local\Temp\27E7832D\sample\plugins\0\lng\Rus.lng
C:\Users\win7\AppData\Local\Temp\27E7832D\sample\db.pdb
C:\Users\win7\AppData\Local\Temp\27E7832D\sample\main.pdb
C:\Users\win7\AppData\Local\Temp\27E7832D\sample\lng\Enu.lng
C:\Users\win7\AppData\Local\Temp\27E7832D\sample\lng\Rus.lng
C:\Users\win7\AppData\Local\Temp\27E7832D\sample\Uninstall.exe
C:\Users\win7\AppData\Local\Temp\27E7832D\sample\regsvr32.exe
C:\USERS\WIN7\APPDATA\LOCAL\TEMP\27E7832D\SAMPLE\PLUGINS\0\STDUI.INI
C:\USERS\WIN7\APPDATA\LOCAL\TEMP\27E7832D\SAMPLE\PLUGINS\0\LNG\ENU.LNG
C:\Windows\system32\mscomctl.ocx
C:\Windows\system32\MSWINSCK.OCX
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shared Resource Scanner 6.4 Free\Shared Resource Scanner 6.4 Free.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shared Resource Scanner 6.4 Free\Uninstall SRS.lnk
Tally.ini
C:\Tally.ini
C:\tallysav.dat
C:\migration.err
C:\Users\win7\AppData\Local\Temp\nsiD66B.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsiD66B.tmp\nsExec.dll
\\.\c:
\\.\d:
C:\Touchup.dat
C:/Windows/rads_user_kernel.log
C:\Users\win7\AppData\Local\gmsd_ca_005010219\gmsd_ca_005010219\1.20\cnf.cyl
C:\Users\win7\AppData\Local\Temp\gch442A.tmp
C:\Users\win7\AppData\Local\Temp\WIN7-PC-20160405-2336.log
C:\Users\win7\AppData\Local\Temp\OfficeC2R57286048-FC33-4E40-9248-C22AED6896DC\v32.cab
C:\Users\win7\AppData\Local\Temp\OfficeC2R57286048-FC33-4E40-9248-C22AED6896DCOfficeC2RBABAB15A-3153-4B11-83C5-125B7465F8EB\v32.hash
C:\Users\win7\AppData\Local\Temp\OfficeC2R57286048-FC33-4E40-9248-C22AED6896DCOfficeC2RBABAB15A-3153-4B11-83C5-125B7465F8EB\VersionDescriptor.xml
C:\Users\win7\AppData\Local\Temp\OfficeC2R57286048-FC33-4E40-9248-C22AED6896DC\VersionDescriptor.xml
C:\Users\win7\AppData\Local\Temp\7zS10A5.tmp
C:\Users\win7\AppData\Local\Temp\7zS10A5.tmp\pstubxx.exe
C:\_Setup.dll
C:\Users\win7\AppData\Local\Temp\nscAD33.tmp\System.dll
C:\mc.ini
C:\mc.lib
C:\mc.hot
C:\wc32to16.exe
C:\share_nt.exe
C:\wincmd.key
\\.\VBoxGuest
\\.\VBoxMiniRdrDN
C:\totalcmd.inc
C:\Program Files\desktop.ini
c:\python27\dlls\py.ico
C:\SAMPLE
C:\ProgramData\Battle.net\Setup\battle.net\Logs\battle.net-setup-20160405T215500.364664.log
\\.\lemsgt
\\.\hwpsgt
C:\Users\win7\AppData\Local\Temp\.tibacotmp\6102341\html.zip
C:\Users\win7\AppData\Local\Temp\.tibacotmp\6102341\html\fileerror.html
C:\Users\win7\AppData\Local\Temp\.tibacotmp\6102341\html\index.html
C:\Users\win7\AppData\Local\Temp\.tibacotmp\6102341\html\offline.html
C:\Users\win7\AppData\Local\Temp\.tibacotmp\6102341\html\site.ico
C:\Users\win7\AppData\Local\Temp\.tibacotmp\6102341\html\images\btn.jpg
C:\Users\win7\AppData\Local\Temp\.tibacotmp\6102341\html\images\btnH.jpg
C:\Users\win7\AppData\Local\Temp\.tibacotmp\6102341\html\images\header_left.gif
C:\Users\win7\AppData\Local\Temp\.tibacotmp\6102341\html\images\header_repeat.gif
C:\Users\win7\AppData\Local\Temp\.tibacotmp\6102341\html\images\loading.gif
C:\Users\win7\AppData\Local\Temp\.tibacotmp\6102341\html\styles\main.css
C:\Users\win7\AppData\Local\Temp\.tibacotmp\6102341\html\scripts\main.js
C:\Users\win7\AppData\Local\Temp\.tibacotmp\6102341\html\scripts\settings.js
C:\Users\win7\AppData\Local\Temp\.tibacotmp\6102341\html\scripts\shared.js
C:\Users\win7\AppData\Local\Temp\.tibacotmp\6102341\html\scripts\texts.js
C:\Users\win7\AppData\Local\Temp\.tibacotmp
C:\Users\win7\AppData\Local\Temp\.tibacotmp\6102341
C:\Users\win7\AppData\Local\Temp\.tibacotmp\6102341\html
C:\WINDOWS\FONTS\VERDANA.TTF
C:\WINDOWS\FONTS\VERDANAB.TTF
C:\Users\win7\AppData\Local\Temp\.tibacotmp\6102341\html\images\logobackground.jpg
C:\Users\win7\AppData\Local\Temp\nsg99D3.tmp\config.ini
\\.\PhysicalDrive1
\\.\PhysicalDrive2
\\.\PhysicalDrive3
\\.\PhysicalDrive4
\\.\PhysicalDrive5
\\.\PhysicalDrive6
\\.\PhysicalDrive7
\\.\PhysicalDrive8
\\.\PhysicalDrive9
\\.\PhysicalDrive10
\\.\PhysicalDrive11
\\.\PhysicalDrive12
\\.\PhysicalDrive13
\\.\PhysicalDrive14
\\.\PhysicalDrive15
C:\Users\win7\AppData\Roaming\Microsoft\\Internet Explorer\\Quick Launch
C:\Users\win7\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned
C:\Users\win7\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts
C:\Users\win7\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar
C:\Users\win7\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
C:\Users\win7\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
C:\Users\win7\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk
C:\Users\win7\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Explorer.lnk
C:\Users\win7\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Python 2.7
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Speech Recognition.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Calculator.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Math Input Panel.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Mobility Center.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\NetworkProjection.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Paint.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Remote Desktop Connection.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Snipping Tool.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sound Recorder.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sticky Notes.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sync Center.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Character Map.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Disk Cleanup.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Resource Monitor.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\System Information.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\System Restore.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Task Scheduler.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Windows Easy Transfer Reports.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Windows Easy Transfer.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\dfrgui.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\ShapeCollector.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\TabTip.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\Windows Journal.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Welcome Center.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Wordpad.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\displayswitch.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Component Services.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Computer Management.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Event Viewer.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Memory Diagnostics Tool.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Performance Monitor.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Print Management.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Security Configuration Management.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Configuration.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Task Scheduler.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows Firewall with Advanced Security.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows PowerShell Modules.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\iSCSI Initiator.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\GameExplorer.lnk
\??\C:\Windows\SysWOW64\gameux.dll
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Backup and Restore Center.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Create Recovery Disc.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Remote Assistance.lnk
C:\Windows\Installer\desktop.ini
C:\Windows\Installer
C:\Windows\Installer\{E2B51919-207A-43EB-AE78-733F9C6797C3}
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Python 2.7\Module Docs.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Python 2.7\Python Manuals.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Python 2.7\Uninstall Python.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox Guest Additions
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Ease of Access.lnk
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Magnify.lnk
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Command Prompt.lnk
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Run.lnk
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Control Panel.lnk
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Private Character Editor.lnk
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\computer.lnk
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Help.lnk
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox Guest Additions\Uninstall.lnk
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox Guest Additions\Website.lnk
C:\Users\win7\Desktop
C:\Users\Public\Desktop
C:\Users\win7\AppData\Local\Temp\nsg99D3.tmp\temp\ntservertemp.ini
C:\Users\win7\AppData\Local\Temp\\~DF58D1855093A0BE13.TMP
C:\Users\win7\AppData\Local\Temp\SSESTART\Setup.exe
C:\Users\win7\AppData\Local\Temp\closeui.log
C:\Users\win7\AppData\Local\Temp\nshD82A.tmp
C:\Users\win7\AppData\Local\Temp\nshD82B.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nshD82B.tmp\modern-wizard.bmp
C:\Users\win7\AppData\Local\Temp\nshD82B.tmp\nsDialogs.dll
C:\Users\win7\AppData\Local\Temp\nshD82B.tmp\LockedList.dll
C:\Windows\Downloaded Program Files\install.log
C:\Windows\Downloaded Program Files\JuniperSetupClient64.inf
C:\Users\win7\AppData\Local\Temp\nsu8779.tmp\System.dll
C:\Windows\Downloaded Program Files\JuniperSetupClient64.ocx
C:\Windows\Downloaded Program Files\JuniperExt64.exe
C:\Windows\Downloaded Program Files\JuniperSetupClientCtrlUninstaller64.exe
C:\Python27\lib\site-packages\py2exe\boot_common.py
C:\Windows\system32\sample\boot_common.py
<install zipextimporter>
C:\Windows\system32\sample\<install zipextimporter>
install_update.py
C:\Windows\system32\sample\install_update.py
C:\Users\win7\AppData\Local\Temp\_isC7CD.tmp
C:\Users\win7\AppData\Local\Temp\{391B75F5-6733-4AEF-BFD8-84A8B896C1E9}\Setup.INI
C:\Users\win7\AppData\Local\Temp\{391B75F5-6733-4AEF-BFD8-84A8B896C1E9}\_ISMSIDEL.INI
C:\Users\win7\AppData\Local\Temp\{391B75F5-6733-4AEF-BFD8-84A8B896C1E9}\0x0000.ini
C:\Users\win7\AppData\Local\Temp\_isC80D.tmp
C:\Users\win7\AppData\Local\Temp\{391B75F5-6733-4AEF-BFD8-84A8B896C1E9}\0x0804.ini
C:\Users\win7\AppData\Local\Temp\_isCE29.tmp
C:\Users\win7\AppData\Local\Temp\~CE28.tmp
C:\Users\win7\AppData\Local\Temp\_isD4A2.tmp
C:\Users\win7\AppData\Local\Temp\{391B75F5-6733-4AEF-BFD8-84A8B896C1E9}\reg4S.msi
C:\Users\win7\AppData\Local\Temp\_isD668.tmp
C:\Users\win7\AppData\Local\Temp\{391B75F5-6733-4AEF-BFD8-84A8B896C1E9}\ISSetup.dll
\??\C:\Users\win7\AppData\Local\Temp\{391B75F5-6733-4AEF-BFD8-84A8B896C1E9}\reg4S.msi
C:\Users\win7\AppData\Local\Temp\_isDBF7.tmp
C:\Users\win7\AppData\Local\Temp\{97937BFE-5F33-426A-9C72-F21F4A2A208E}\setup.inx
C:\Users\win7\AppData\Local\Temp\_isDCB4.tmp
C:\Users\win7\AppData\Local\Temp\{97937BFE-5F33-426A-9C72-F21F4A2A208E}\ISRT.dll
C:\Users\win7\AppData\Local\Temp\_isDD22.tmp
C:\Users\win7\AppData\Local\Temp\{97937BFE-5F33-426A-9C72-F21F4A2A208E}\setup.exe
C:\Users\win7\AppData\Local\Temp\_isDD81.tmp
C:\Users\win7\AppData\Local\Temp\{97937BFE-5F33-426A-9C72-F21F4A2A208E}\ISBEW64.exe
C:\Users\win7\AppData\Local\Temp\_isDDFF.tmp
C:\Users\win7\AppData\Local\Temp\{97937BFE-5F33-426A-9C72-F21F4A2A208E}\_isres_0x0804.dll
C:\Users\win7\AppData\Local\Temp\_isDECB.tmp
C:\Users\win7\AppData\Local\Temp\{97937BFE-5F33-426A-9C72-F21F4A2A208E}\String2052.txt
C:\Users\win7\AppData\Local\Temp\e056.rra
C:\Users\win7\AppData\Local\Temp\nsuB909.tmp
C:\Users\win7\AppData\Local\Temp\nsjB919.tmp\LangDLL.dll
C:\Users\win7\AppData\Local\Temp\nsjB919.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsjB919.tmp\UAC.dll
C:\Users\win7\AppData\Local\Temp\DRHelper_installStart.exe
C:\Users\win7\AppData\Local\Temp\nsjB919.tmp\background_small.ole
C:\Users\win7\AppData\Local\Temp\nsjB919.tmp\button.bmp
C:\Users\win7\AppData\Local\Temp\nsjB919.tmp\GraphicalInstaller.dll
C:\Users\win7\AppData\Local\Temp\nsjB919.tmp\Math.dll
C:\Users\win7\AppData\Local\Temp\nsjB919.tmp\background.ole
C:\Users\win7\AppData\Local\Temp\\~DFA8DE9D820D99DF7F.TMP
C:\Users\win7\AppData\Local\Temp\nsjB919.tmp\nsDialogs.dll
C:\Users\win7\AppData\Local\Temp\nsjB919.tmp\nsResize.dll
C:\Users\win7\AppData\Local\Temp\nsjB919.tmp\readme.rtf
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8828F39C7C0CE9A14B25C7EB321181BA_DC03E45EC7611F50ADAEBABE405A8C4C
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A3D5BF1283C2E63D8C8A8C72F0051F5A
C:\Windows\system32\wbem\XSL-Mappings.xml
C:\Windows\system32\wbem\textvaluelist.xsl
C:\Users\win7\AppData\Local\Temp\nse762F.tmp\modern-header.bmp
C:\Users\win7\AppData\Local\Temp\nse762F.tmp\modern-wizard.bmp
C:\Users\win7\AppData\Local\Temp\nse762F.tmp\ButtonEvent.dll
C:\Users\win7\AppData\Local\Temp\nse762F.tmp\nsDialogs.dll
C:\Users\win7\AppData\Local\Temp\nse762F.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nse762F.tmp\nsExec.dll
C:\Users\win7\AppData\Local\Temp\is-0PR8U.tmp\_isetup\_RegDLL.tmp
C:\Users\win7\AppData\Local\Temp\is-0PR8U.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-0PR8U.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Roaming\Media Player Classic\default.mpcpl
msrle32.dll
msvidc32.dll
msyuv.dll
iyuv_32.dll
tsbyuv.dll
iccvid.dll
C:\Users\win7\AppData\Local\Temp\dw.log
C:\Users\win7\AppData\Local\Temp\McCSPInstall.dll
C:\Users\win7\AppData\Local\Temp\nspDAFC.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\translations2\ccavstart.arabic.xml
C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\translations2\ccavstart.bulgarian.xml
C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\translations2\ccavstart.chinese.xml
C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\translations2\ccavstart.chinesetraditional.xml
C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\translations2\ccavstart.english.xml
C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\translations2\ccavstart.french.xml
C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\translations2\ccavstart.hungarian.xml
C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\translations2\ccavstart.polish.xml
C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\translations2\ccavstart.portuguese.xml
C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\translations2\ccavstart.romanian.xml
C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\translations2\ccavstart.russian.xml
C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\translations2\ccavstart.swedish.xml
C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\translations2\ccavstart.turkish.xml
C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\translations2\ccavstart.ukrainian.xml
C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\MsiDetector.xml
C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\ccavstart.exe
C:\WINDOWS\FONTS\SEGOEUIB.TTF
C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\ccav_installer.msi
C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\Translations2\ccavstart.arabic.xml
C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\Translations2\ccavstart.bulgarian.xml
C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\Translations2\ccavstart.chinese.xml
C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\Translations2\ccavstart.chinesetraditional.xml
C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\Translations2\ccavstart.english.xml
C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\Translations2\ccavstart.french.xml
C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\Translations2\ccavstart.hungarian.xml
C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\Translations2\ccavstart.polish.xml
C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\Translations2\ccavstart.portuguese.xml
C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\Translations2\ccavstart.romanian.xml
C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\Translations2\ccavstart.russian.xml
C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\Translations2\ccavstart.swedish.xml
C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\Translations2\ccavstart.turkish.xml
C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\Translations2\ccavstart.ukrainian.xml
C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\cmdhtml.dll
C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup
1.217.570.0_TO_1.217.734.0_MPASDLTA.VDM._P
1.217.570.0_TO_1.217.734.0_MPAVDLTA.VDM._P
C:\Users\win7\AppData\Local\Temp\comodo_temp_setup\csb_installer_x64.msi
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\74FBF93595CFC8459196065CE54AD928
C:\Users\win7\AppData\Local\Temp\\~DF41A6C831C24282D4.TMP
C:\Users\win7\AppData\Local\Temp\\~DF12A46B7EF4304A17.TMP
C:\sample.EXE
C:\Windows\SysWOW64\scrrun.dll
C:\Temp\NVIDIA\3DVision\setup.exe
C:\Temp\NVIDIA\3DVision\_Setup.dll
C:\Users\win7\AppData\Local\Temp\{7C5A5A01-BA31-4712-8E81-703787A937A1}\_Setup.dll
C:\Temp\NVIDIA\3DVision\setup.ini
C:\Users\win7\AppData\Local\Temp\{7C5A5A01-BA31-4712-8E81-703787A937A1}\setup.ini
C:\Temp\NVIDIA\3DVision\ISSetup.dll
C:\Temp\NVIDIA\3DVision\setup.isn
C:\Users\win7\AppData\Local\Temp\{7C5A5A01-BA31-4712-8E81-703787A937A1}\setup.isn
C:\Users\win7\AppData\Local\Temp\skincf60.rra
C:\Temp\NVIDIA\3DVision\setupdir\0009\setup.gif
C:\Temp\NVIDIA\3DVision\setup.gif
C:\Temp\NVIDIA\3DVision\data1.hdr
C:\Temp\NVIDIA\3DVision\layout.bin
C:\Temp\NVIDIA\3DVision\data1.cab
C:\Temp\NVIDIA\3DVision\_setup.dll
C:\Temp\NVIDIA\3DVision\setup.inx
C:\Users\win7\AppData\Local\Temp\d1a2.rra
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\setud23e.rra
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\IsBkd26d.rra
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\NvInd26d.rra
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\_ISUd26d.rra
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\cored28c.rra
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\dotnd28c.rra
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\Fontd28c.rra
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\ISBEd28c.rra
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\Strid29c.rra
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\isrtd29c.rra
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\defad29c.rra
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\_IsRd29c.rra
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\setup.inx
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\ISRT.dll
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\_isres.dll
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\_isuser.dll
C:\Users\win7\AppData\Local\Temp\isprd396.rra
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\skind396.rra
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\StringTable-0009-English.ips
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\corecomp.ini
\??\C:\Temp\NVIDIA\3DVision\data1.hdr
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\default.pal
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\NVINSTNT.DLL
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\ISBKGD.BMP
C:\Users\win7\AppData\Local\Temp\skin3c24.rra
C:\Users\win7\AppData\Local\Temp\3dca.rra
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\setu3ee3.rra
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\IsBk3f12.rra
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\NvIn3f12.rra
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\_ISU3f21.rra
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\core3f41.rra
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\dotn3f41.rra
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\Font3f50.rra
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\ISBE3f6f.rra
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\Stri3f7f.rra
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\isrt3f7f.rra
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\defa3f8f.rra
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\_IsR3f8f.rra
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\setup.inx
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\ISRT.dll
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\_isres.dll
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\_isuser.dll
C:\Users\win7\AppData\Local\Temp\ispr4089.rra
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\skin4089.rra
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\StringTable-0009-English.ips
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\corecomp.ini
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\default.pal
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\NVINSTNT.DLL
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\ISBKGD.BMP
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C1F94CD5CA263ECFB1A4BAB1B832C909
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\140B4CDED8ED877CDC65B54BA965BD39
C:\ProgramData\NortonInstaller\Logs\2016-04-06-11h14m58s\NortonInstall-2016-04-06-11h14m58s.log
C:\ProgramData\Comodo\CCAV\ccavusage.sdb
C:\ProgramData\Comodo\CCAV\ccavusage.sdb-journal
C:\ProgramData\Comodo\CCAV\ccavusage.sdb-wal
C:\ProgramData\Comodo\CCAV\ccavusage.sdb-shm
C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\translations2\ccavstart.czech.xml
C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\Translations2\ccavstart.czech.xml
Dump\BugReportConfig.ini
C:\ProgramData\Baidu\\AutoUpdate
C:\ProgramData\Baidu\\AutoUpdate\updatelog\autoupdate_20160406114043_2264.log
C:\ProgramData\Baidu\AutoUpdate
C:\Windows\System32\drivers\etc\services
C:\Users\win7\AppData\Local\Temp\000a3826.a
C:\Users\win7\AppData\Local\Temp\000a3f98.a
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\index[1]
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\wrapper[1]
C:\Users\win7\AppData\Local\Temp\nsf1E94.tmp\cpSetup.exe
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\normal_bg[1]
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\appImg[1]
C:\WINDOWS\FONTS\SEGUISYM.TTF
C:\Users\win7\AppData\Local\Temp\672234\dlreport
C:\Users\win7\AppData\Local\Temp\nsf1E94.tmp\950502265
C:\Users\win7\AppData\Local\Temp\nsf1E94.tmp\nsArray.dll
C:\Users\win7\AppData\Local\Temp\nsf1E94.tmp\NSISdl.dll
C:\Users\win7\AppData\Local\Temp\WER53E7.tmp.WERInternalMetadata.xml
C:\Users\win7\AppData\Local\Temp\nsyB98D.tmp\TracksEraser.ini
C:\Users\win7\AppData\Local\Temp\nsyB98D.tmp\ioSpecial.ini
C:\Users\win7\AppData\Local\Temp\nsyB98D.tmp\modern-wizard.bmp
C:\Users\win7\AppData\Local\Temp\nsyB98D.tmp\modern-header.bmp
C:\Users\win7\AppData\Local\Temp\nsyB98D.tmp\InstallOptions.dll
C:\Privilege.dat
C:\Users\win7\AppData\Local\Temp\_1AA0.tmp
C:\Users\win7\AppData\Local\Temp\_1AD0.tmp
C:\Users\win7\AppData\Local\Temp\_1AD1.tmp
C:\Users\win7\AppData\Local\Temp\_1AD2.tmp
C:\Users\win7\AppData\Local\Temp\_1AD3.tmp
C:\Users\win7\AppData\Local\Temp\_1AE4.tmp
C:\Windows\system32\ieframe.dll
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\dnserrordiagoff[1]
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\NewErrorPageTemplate[1]
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\errorPageStrings[1]
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\httpErrorPagesScripts[1]
C:\WINDOWS\FONTS\SEGOEUIL.TTF
C:\WINDOWS\FONTS\WINGDING.TTF
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\KMPVer_English[1].txt
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\kmpup[1].htm
\\.\pipe\GoogleCrashServices\S-1-5-21-3979321414-2393373014-2172761192-1000
C:\Users\win7\AppData\Local\Temp\WIN7-PC-20160406-1301.log
C:\Users\win7\AppData\Local\Temp\OfficeC2R57286048-F60F-4E19-BE4E-9B2AED68B7DC\v32.cab
C:\Users\win7\AppData\Local\Temp\OfficeC2R57286048-F60F-4E19-BE4E-9B2AED68B7DCOfficeC2R5ADC58C9-974C-4470-9D03-C56A2FD7574B\v32.hash
C:\Users\win7\AppData\Local\Temp\OfficeC2R57286048-F60F-4E19-BE4E-9B2AED68B7DCOfficeC2R5ADC58C9-974C-4470-9D03-C56A2FD7574B\VersionDescriptor.xml
C:\Users\win7\AppData\Local\Temp\OfficeC2R57286048-F60F-4E19-BE4E-9B2AED68B7DC\VersionDescriptor.xml
C:\Users\win7\AppData\Local\Temp\nst1FE8.tmp
C:\Users\win7\AppData\Local\Temp\nsj1FF9.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\ogmtmp\versions.json
C:\ProgramData\NortonInstaller\Logs\2016-04-06-13h28m32s\NortonInstall-2016-04-06-13h28m32s.log
C:\Users\win7\AppData\Local\Temp\mia4D20.tmp\mia.lib
C:\Users\win7\AppData\Local\Temp\lang.loc
C:\Users\win7\AppData\Local\Temp\mia4D20.tmp\RP255DriverInstaller.exe
C:\Users\win7\AppData\Local\Temp\mia.tmp
C:\Users\win7\AppData\Local\Temp\mia4D20.tmp\RP255DriverInstaller.res
C:\Users\win7\AppData\Local\Temp\mia1\componentstree.dfm
C:\Users\win7\AppData\Local\Temp\mia1\destination.dfm
C:\Users\win7\AppData\Local\Temp\mia1\finish.dfm
C:\Users\win7\AppData\Local\Temp\mia1\finish.dfm.miaf
C:\Users\win7\AppData\Local\Temp\mia1\icon.ico
C:\Users\win7\AppData\Local\Temp\mia1\Install device page.dfm
C:\Users\win7\AppData\Local\Temp\mia1\license.rtf
C:\Users\win7\AppData\Local\Temp\mia1\licensecheck.dfm
C:\Users\win7\AppData\Local\Temp\mia1\licensecheck.dfm.miaf
C:\Users\win7\AppData\Local\Temp\mia1\maintenance.dfm
C:\Users\win7\AppData\Local\Temp\mia1\maintenance.dfm.miaf
C:\Users\win7\AppData\Local\Temp\mia1\prereq.dfm
C:\Users\win7\AppData\Local\Temp\mia1\progress.dfm
C:\Users\win7\AppData\Local\Temp\mia1\progressprereq.dfm
C:\Users\win7\AppData\Local\Temp\mia1\readme.dfm
C:\Users\win7\AppData\Local\Temp\mia1\registration.dfm
C:\Users\win7\AppData\Local\Temp\mia1\registration.dfm.miaf
C:\Users\win7\AppData\Local\Temp\mia1\registrationwithserial.dfm
C:\Users\win7\AppData\Local\Temp\mia1\registrationwithserial.dfm.miaf
C:\Users\win7\AppData\Local\Temp\mia1\rp255aud.cat
C:\Users\win7\AppData\Local\Temp\mia1\RP255Aud.inf
C:\Users\win7\AppData\Local\Temp\mia1\rp255mid.cat
C:\Users\win7\AppData\Local\Temp\mia1\RP255Mid.inf
C:\Users\win7\AppData\Local\Temp\mia1\setuptype.dfm
C:\Users\win7\AppData\Local\Temp\mia1\setuptype.dfm.miaf
C:\Users\win7\AppData\Local\Temp\mia1\startinstallation.dfm
C:\Users\win7\AppData\Local\Temp\mia1\startinstallation.dfm.miaf
C:\Users\win7\AppData\Local\Temp\mia1\startmenu.dfm
C:\Users\win7\AppData\Local\Temp\mia1\startmenu.dfm.miaf
C:\Users\win7\AppData\Local\Temp\mia1\welcome.dfm
C:\Users\win7\AppData\Local\Temp\mia1\wizard.dfm
C:\Users\win7\AppData\Local\Temp\mia1\ceusbaud.sys
C:\Users\win7\AppData\Local\Temp\mia1\DeviceMonitor.dll
C:\Users\win7\AppData\Local\Temp\mia1\mEXEFunc.dll
C:\Users\win7\AppData\Local\Temp\mia1\mMSIExec.dll
C:\Users\win7\AppData\Local\Temp\mia1\SilentDriverInstall.dll
C:\Users\win7\AppData\Local\Temp\mia1\componentstree.dfm.miaf
C:\Users\win7\AppData\Local\Temp\mia1\destination.dfm.miaf
C:\Users\win7\AppData\Local\Temp\mia1\Install device page.dfm.miaf
C:\Users\win7\AppData\Local\Temp\mia1\prereq.dfm.miaf
C:\Users\win7\AppData\Local\Temp\mia1\progress.dfm.miaf
C:\Users\win7\AppData\Local\Temp\mia1\progressprereq.dfm.miaf
C:\Users\win7\AppData\Local\Temp\mia1\readme.dfm.miaf
C:\Users\win7\AppData\Local\Temp\mia1\welcome.dfm.miaf
C:\Users\win7\AppData\Local\Temp\mia1\wizard.dfm.miaf
C:\ProgramData\Soluto\Logs\InstallLog.log
C:\Users\win7\AppData\Local\Temp\nsc3185.tmp
C:\Users\win7\AppData\Local\Temp\nsw31B4.tmp\System.dll
1.217.613.0_TO_1.217.775.0_MPASDLTA.VDM._P
1.217.613.0_TO_1.217.775.0_MPAVDLTA.VDM._P
C:\Windows\SysWOW64\wscript.exe
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\bin\localDiag.js
C:\Windows\SysWOW64\wshom.ocx
C:\Windows\system32\wbem\wbemdisp.TLB
C:\Windows\SysWOW64\shell32.dll
C:\Users\win7\AppData\Roaming\DRPSu\diagnostics\newsoft.json
C:\Windows\System32\wscript.exe
C:\Users\win7\AppData\Local\Temp\76EF.tmp
C:\Users\win7\AppData\Local\Temp\779C.tmp
C:\Users\win7\AppData\Local\Temp\77AD.tmp
C:\Users\win7\AppData\Local\Temp\77AE.tmp
C:\Users\win7\AppData\Local\Temp\77BE.tmp
C:\Users\win7\AppData\Local\Temp\77BF.tmp
C:\ProgramData\d8986107-dff3-4565-a17b-637d7c3968d3\temp
C:\Users\win7\AppData\Local\Temp\3ba21831-fbfb-11e5-9e88-08002763e612\target.exe_3ba21832-fbfb-11e5-9e88-08002763e612
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C46E7B0F942663A1EDC8D9D6D7869173_3D832D38D7E8341EFA84BC8364F5617D
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873
C:\ProgramData\HP\Installer\Temp\sample000.log
ogldiag_WIN7-PC_2016-4-6_1649.txt
C:\Users\win7\AppData\Local\Temp\ccavusage.sdb
C:\Users\win7\AppData\Local\Temp\ccavusage.sdb-journal
C:\Users\win7\AppData\Local\Temp\ccavusage.sdb-wal
C:\Users\win7\AppData\Local\Temp\ccavusage.sdb-shm
MsiDetector.xml
C:/lib/tcl8.4/encoding/cp1252.enc
C:/lib/tcl8.4/encoding/iso8859-1.enc
C:/sample
C:/Users/win7/.Xdefaults
C:/lib/tclIndex
/installkitvfs/lib/tclIndex
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\desktop.ini
C:/Users/win7/AppData/Local/Temp/TCL9CAC.tmp
C:/Users/win7/AppData/Local/Temp/ijtmp_1B4D0ECB-5BE8-40A1-B8E1-BA10862F2153/bin/xdg-desktop-icon
C:/Users/win7/AppData/Local/Temp/ijtmp_1B4D0ECB-5BE8-40A1-B8E1-BA10862F2153/bin/xdg-desktop-menu
C:/Users/win7/AppData/Local/Temp/ijtmp_1B4D0ECB-5BE8-40A1-B8E1-BA10862F2153/bin/xdg-open
C:\Users\win7\AppData\Local\Temp\Opera_installer_2016462832778.dll
\\.\pipe\OperaCrashReporter2368
C:\installer_prefs.json
C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160406172832.log
\\.\D:
C:\Users\win7\AppData\Local\Temp\Opera Installer\installer.lck
http://www.opera.com/download/get/?partner=www&opsys=Windows&product=Opera%20beta
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EDC238BFF48A31D55A97E1E93892934B_A7467B47637944C1E4B4025C763E391F
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\0270780F846F08BEFE0DD8112D932FEF
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E4F76C0C82655FD6506668127FA0ACD1_F6AB1C86FB0C74897AC7F2CB403CFB96
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E4F76C0C82655FD6506668127FA0ACD1_CDD1BCAFC964EE6D17D60D9802FE2583
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D0EAFE99DD0474CD3DF1720DC4B3759
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C911EABD82D65947049C32F9037AA0E0
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E4F76C0C82655FD6506668127FA0ACD1_F6AB1C86FB0C74897AC7F2CB403CFB96
C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160406172831.exe
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\Opera_beta_37.0.2178.4_Setup[1].exe
C:\Users\win7\AppData\Local\Temp\is-S3QTL.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-S3QTL.tmp\_isetup\_shfoldr.dll
c:\bb39a181ff14752c2ac7a56b\$shtdwn$.req
C:\Users\win7\AppData\Local\Temp\is-QIE5C.tmp\_isetup\_RegDLL.tmp
C:\Users\win7\AppData\Local\Temp\is-QIE5C.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-QIE5C.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\WER1BB.tmp.WERInternalMetadata.xml
\\.\aswSP_Handler
\\.\ASWSP_Open
\\.\ASWSP
C:\ProgramData\AVAST Software\Persistent Data\Avast\Logs\Setup.log
\\.\aswSP
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_E9915110418DBDEA47BB3BFCDB24CFF1
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8DFDF057024880D7A081AFBF6D26B92F
C:\Users\win7\AppData\Local\Temp\WER2CAE.tmp.WERInternalMetadata.xml
C:\String.xml
C:\Program Files
C:\Users\win7\AppData\Local\Temp\nslC593.tmp\HiRu.exe
C:\Users\win7\AppData\Local\Temp\nstE4E2.tmp\nsProcess.dll
C:\Users\win7\AppData\Local\Temp\nstE4E2.tmp\ShellLink.dll
C:\Users\win7\AppData\Local\Temp\nslC593.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nslC593.tmp\dtsoftbus01.inf
C:\Users\win7\AppData\Local\Temp\nslC593.tmp\uninst.exe
C:\Users\win7\AppData\Local\Temp\nslC593.tmp\LangDLL.dll
C:\Users\win7\AppData\Local\Temp\nslC593.tmp\modern-header.bmp
C:\Users\win7\AppData\Local\Temp\nslC593.tmp\Aero.dll
C:\Users\win7\AppData\Local\Temp\nslC593.tmp\ru.bmp
C:\Users\win7\AppData\Local\Temp\nslC593.tmp\en.bmp
C:\Users\win7\AppData\Local\Temp\nslC593.tmp\ua.bmp
C:\Users\win7\AppData\Local\Temp\nslC593.tmp\nsDialogs.dll
C:\Program Files\DAEMON Tools Ultra\DTGadget32.dll
C:\Program Files\DAEMON Tools Ultra\DTGadget64.dll
C:\Program Files\DAEMON Tools Ultra\Extractor.exe
C:\Program Files\DAEMON Tools Ultra\InstallGadget.exe
C:\Program Files\DAEMON Tools Ultra\Profiles.ini
C:\Program Files\DAEMON Tools Ultra\SPTD2inst-x64.exe
C:\Program Files\DAEMON Tools Ultra\SPTD2inst-x86.exe
C:\Program Files\DAEMON Tools Ultra\SPTDinst-x64.exe
C:\Program Files\DAEMON Tools Ultra\SPTDinst-x86.exe
C:\Program Files\DAEMON Tools Ultra\Lang\BGR.dll
C:\Program Files\DAEMON Tools Ultra\Lang\BIH.dll
C:\Program Files\DAEMON Tools Ultra\Lang\CHS.dll
C:\Program Files\DAEMON Tools Ultra\Lang\CHT.dll
C:\Program Files\DAEMON Tools Ultra\Lang\CSY.dll
C:\Program Files\DAEMON Tools Ultra\Lang\DEU.dll
C:\Program Files\DAEMON Tools Ultra\Lang\ENU.dll
C:\Program Files\DAEMON Tools Ultra\Lang\ESN.dll
C:\Program Files\DAEMON Tools Ultra\Lang\FIN.dll
C:\Program Files\DAEMON Tools Ultra\Lang\FRA.dll
C:\Program Files\DAEMON Tools Ultra\Lang\HEB.dll
C:\Program Files\DAEMON Tools Ultra\Lang\HUN.dll
C:\Program Files\DAEMON Tools Ultra\Lang\HYE.dll
C:\Program Files\DAEMON Tools Ultra\Lang\IND.dll
C:\Program Files\DAEMON Tools Ultra\Lang\ITA.dll
C:\Program Files\DAEMON Tools Ultra\Lang\JPN.dll
C:\Program Files\DAEMON Tools Ultra\Lang\KAT.dll
C:\Program Files\DAEMON Tools Ultra\Lang\LVI.dll
C:\Program Files\DAEMON Tools Ultra\Lang\PLK.dll
C:\Program Files\DAEMON Tools Ultra\Lang\PTB.dll
C:\Program Files\DAEMON Tools Ultra\Lang\RUS.dll
C:\Program Files\DAEMON Tools Ultra\Lang\SRL.dll
C:\Program Files\DAEMON Tools Ultra\Lang\SVE.dll
C:\Program Files\DAEMON Tools Ultra\Lang\TRK.dll
C:\Program Files\DAEMON Tools Ultra\Lang\UKR.dll
C:\Program Files\DAEMON Tools Ultra\DTAgent.exe
C:\Program Files\DAEMON Tools Ultra\DTCommonRes.dll
C:\Program Files\DAEMON Tools Ultra\DTHelper.exe
C:\Program Files\DAEMON Tools Ultra\DTLauncher.exe
C:\Program Files\DAEMON Tools Ultra\DTUltra.exe
C:\Program Files\DAEMON Tools Ultra\DTUltraHelper.exe
C:\Program Files\DAEMON Tools Ultra\DiscSoftBusService.exe
C:\Program Files\DAEMON Tools Ultra\Engine.dll
C:\Program Files\DAEMON Tools Ultra\VDriveLib.dll
C:\Program Files\DAEMON Tools Ultra\imgengine.dll
C:\Program Files\DAEMON Tools Ultra\sptdintf.dll
C:\Program Files\DAEMON Tools Ultra\Plugins\Grabbers\GenDPM.dll
C:\Program Files\DAEMON Tools Ultra\Plugins\Grabbers\GenDisc.dll
C:\Program Files\DAEMON Tools Ultra\Plugins\Grabbers\GenSub.dll
C:\Program Files\DAEMON Tools Ultra\Plugins\Grabbers\SafeDisc.dll
C:\Program Files\DAEMON Tools Ultra\Plugins\Grabbers\Tages.dll
C:\Users\win7\AppData\Local\Temp\nslC593.tmp\nsis7z.dll
C:\ProgramData\DAEMON Tools Ultra\license.dat
C:\Program Files\DAEMON Tools Ultra\Uninstall.exe
C:\Program Files\DAEMON Tools Ultra
C:\Users\win7\Desktop\DAEMON Tools Ultra.lnk
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Ultra\DAEMON Tools Ultra.lnk
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Ultra\DAEMON Tools Ultra Agent.lnk
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Ultra\Uninstall DAEMON Tools Ultra.lnk
C:\Users\win7\AppData\Local\Temp\nslC593.tmp\nsProcess.dll
C:\Users\win7\AppData\Local\Temp\WIN7-PC-20160406-2058.log
C:\Users\win7\AppData\Local\Temp\OfficeC2R57286048-F473-4E19-9250-9B2AED68DFDC\v32.cab
C:\Users\win7\AppData\Local\Temp\OfficeC2R57286048-F473-4E19-9250-9B2AED68DFDCOfficeC2R5ADC58C9-89A0-4470-811D-C56A2FD73F4B\v32.hash
C:\Users\win7\AppData\Local\Temp\OfficeC2R57286048-F473-4E19-9250-9B2AED68DFDCOfficeC2R5ADC58C9-89A0-4470-811D-C56A2FD73F4B\VersionDescriptor.xml
C:\Users\win7\AppData\Local\Temp\OfficeC2R57286048-F473-4E19-9250-9B2AED68DFDC\VersionDescriptor.xml
C:\ProgramData\343be488-3453-44cf-82ec-f9b6522a0729\temp
C:\WINDOWS\FONTS\TIMESBD.TTF
C:\WINDOWS\FONTS\MARLETT.TTF
C:\\en_US\LC_MESSAGES\sample.mo
C:\\en_US\sample.mo
C:\\en\LC_MESSAGES\sample.mo
C:\\en\sample.mo
C:\\locales\en_US\LC_MESSAGES\sample.mo
C:\\locales\en_US\sample.mo
C:\\locales\en\LC_MESSAGES\sample.mo
C:\\locales\en\sample.mo
.\locales\en_US\LC_MESSAGES\sample.mo
.\locales\en_US\sample.mo
.\locales\en\LC_MESSAGES\sample.mo
.\locales\en\sample.mo
C:\\default.cmd
C:\Users\win7\AppData\Local\Temp\nsaAC81.tmp
C:\Users\win7\AppData\Local\Temp\spltmp.bmp
C:\Users\win7\AppData\Local\Temp\nszB6C3.tmp\AdvSplash.dll
C:\Users\win7\AppData\Local\Temp\spltmp.wav.WAV
C:\Users\win7\AppData\Local\Temp\nszB6C3.tmp\modern-header.bmp
C:\Users\win7\AppData\Local\Temp\nszB6C3.tmp\modern-wizard.bmp
C:\Users\win7\AppData\Local\Temp\nszB6C3.tmp\Aero.dll
C:\Users\win7\AppData\Local\Temp\nszB6C3.tmp\nsDialogs.dll
C:\Users\win7\AppData\Local\Temp\nszB6C3.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nszB6C3.tmp\nsWeb.dll
C:\Users\win7\AppData\Local\Temp\nsc997B.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsc997B.tmp\CityHash.dll
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\.rzFF64.tmp
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\doneinstall.html
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\doneinstalldx.html
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\doneuninstall.html
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\funpass\doneinstall.html
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\funpass\doneinstalldx.html
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\funpass\doneuninstall.html
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\funpass\images\footer.gif
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\funpass\install.html
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\funpass\scripts\mm.js
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\funpass\setup.html
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\funpass\styles\reg_style.css
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\funpass\uninstall.html
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\funpass\unsupportedos.html
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\funpass\waitinstall.html
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\funpass\waituninstall.html
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\gtb\GoogleToolbar-en.exe
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\gtb\GTAPI.DLL
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\gtb\gtb.jpg
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\images\annuleren_square.gif
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\images\annuleren_square_over.gif
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\images\bladeren_square.gif
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\images\bladeren_square_over.gif
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\images\button_annuleer.jpg
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\images\button_annuleer_over.jpg
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\images\button_ok.gif
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\images\button_ok_over.gif
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\images\button_start.gif
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\images\button_start_over.gif
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\images\code_bladeren.jpg
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\images\gametitle.jpg
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\images\loading.gif
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\images\ok_square.gif
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\images\ok_square_over.gif
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\images\pijl.jpg
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\images\pijl_over.jpg
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\install.html
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\npzylomgamesplayer.dll
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\nsIZylomPlugin.xpt
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\setup.html
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\styles\reg_style.css
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\uninstall.html
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\unsupportedos.html
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\waitinstall.html
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\waituninstall.html
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\zylomgamesplayer.dll
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880funpass
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880funpass\images
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880funpass\styles
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\images\footer.gif
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\ptagent[1].msi
C:\Users\win7\AppData\Local\Temp\is-8TPLN.tmp\_isetup\_RegDLL.tmp
C:\Users\win7\AppData\Local\Temp\is-8TPLN.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-8TPLN.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\is-8TPLN.tmp\BASS.dll
c:\windows\system32\vboxdisp.dll
C:\Log\HttpDownloader.log
C:\\ArcInstall_NW_20151009a.exe.idx
C:\\ArcInstall_NW_20151009a.exe
\\.\pipe\libwdi-installer
C:\Users\win7\AppData\Local\Temp\nsdC64.tmp\System.dll
C:\Users\win7\AppData\Roaming\Logishrd
\\.\BCMDMCCP
C:\Users\win7\AppData\Local\Temp\is-G6LJU.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\nst40C2.tmp
C:\Users\win7\AppData\Local\Temp\nsz417F.tmp\System.dll
C:\WBDHD44I.DLL
C:\Users\win7\AppData\Local\Temp\nsbBADC.tmp\System.dll
C:\Windows\my.ini
C:\Windows\my.cnf
C:\my.ini
C:\my.cnf
C:\sample\my.ini
C:\sample\my.cnf
C:\Users\win7\AppData\Roaming\MySQL\.mylogin.cnf
C:\VirtualDub.jobs
C:\Users\win7\AppData\Local\Temp\is-8THHP.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-8THHP.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Roaming\KC Softwares\HDDExpert\HDDExpert.log
C:\Users\win7\AppData\Roaming\KC Softwares\HDDExpert\hdde.ini
C:\Users\win7\AppData\Local\DailyPcClean Support\updpcc_en_035010290.cyl
C:\Users\win7\AppData\Local\Temp\nsr2A62.tmp
C:\Users\win7\AppData\Local\Temp\nsg2A72.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsg2A72.tmp\ioSpecial.ini
C:\Users\win7\AppData\Local\Temp\nsg2A72.tmp\modern-wizard.bmp
C:\Program Files\ESEA\ESEA Client\uninstall.exe
C:\Program Files\ESEA\ESEA Client\eseaclient.exe
C:\Program Files\ESEA\ESEA Client\speex.dll
C:\Program Files\ESEA\ESEA Client\msvcr120.dll
C:\Program Files\ESEA\ESEA Client\libeay32.dll
C:\Program Files\ESEA\ESEA Client\ssleay32.dll
C:\Program Files\ESEA\ESEA Client\celt0.0.7.0.dll
C:\Program Files\ESEA\ESEA Client\celt0.0.11.0.dll
C:\Program Files\ESEA\ESEA Client\eseaclient.cs.dll
C:\Program Files\ESEA\ESEA Client\eseaclient.csgo.dll
C:\Program Files\ESEA\ESEA Client\eseaclient.tf2.dll
C:\Program Files\ESEA\ESEA Client\eula.txt
C:\Program Files\ESEA\ESEA Client\licenses.txt
C:\Program Files\ESEA\ESEA Client\en_GB.lng
C:\Program Files\ESEA\ESEA Client\en_US.lng
C:\Program Files\ESEA\ESEA Client\es_ES.lng
C:\Program Files\ESEA\ESEA Client\pt_BR.lng
C:\Program Files\ESEA\ESEA Client\de_DE.lng
C:\Program Files\ESEA\ESEA Client\fr_FR.lng
C:\Program Files\ESEA\ESEA Client\ru_RU.lng
C:\Program Files\ESEA
C:\Program Files\ESEA\ESEA Client
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESEA\ESEA Client\Uninstall.lnk
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESEA\ESEA Client\Start ESEA Client.lnk
C:\Users\win7\Desktop\ESEA Client.lnk
C:\Users\win7\AppData\Local\Temp\nsg2A72.tmp\InstallOptions.dll
C:\Users\win7\AppData\Local\Temp\nsb62C6.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsb62C6.tmp\CityHash.dll
C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\temp
C:\Users\win7\AppData\Local\Temp\is-MUR9B.tmp\rar.ini
\\?\C:\Users\win7\AppData\Local\Temp\is-MUR9B.tmp\rar.ini
stub_tmp.rar
stub4_install.exe
C:\Users\win7\AppData\Local\Temp\is-MUR9B.tmp\GCountry.dll
C:\Users\win7\AppData\Local\Temp\is-MUR9B.tmp\config.rar
C:\Users\win7\AppData\Local\Temp\is-MUR9B.tmp\UnRAR.exe
C:\Users\win7\AppData\Local\Temp\is-MUR9B.tmp\stub4_install.exe
C:\Users\win7\AppData\Local\Temp\is-MUR9B.tmp\stub5_install.exe
C:\Users\win7\AppData\Local\Temp\is-MUR9B.tmp\stub6_install.exe
C:\Users\win7\AppData\Local\Temp\is-MUR9B.tmp\OCSetupHlp.dll
C:\Users\win7\AppData\Local\Temp\is-MUR9B.tmp\16.txt
C:\Users\win7\AppData\Local\Temp\is-MUR9B.tmp\393.txt
C:\putty.hlp
C:\putty.cnt
C:\Users\win7\AppData\Local\Temp\nst480C.tmp\LangDLL.dll
C:\Users\win7\AppData\Local\Temp\nst480C.tmp\ioSpecial.ini
C:\Users\win7\AppData\Local\Temp\nst480C.tmp\modern-wizard.bmp
C:\Users\win7\AppData\Local\Temp\nst480C.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nst480C.tmp\NSISdl.dll
C:\Users\win7\AppData\Local\Temp\nst480C.tmp\InstallOptions.dll
e:\bin/ssl/openssl.cnf
C:\C:\sample
C:\Users\win7\AppData\Local\Temp\ptnADBA.tmp
C:\debug.log
\\.\pipe\OperaCrashReporter648
C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160407082540.log
http://www.opera.com/download/get/?partner=www&opsys=Windows
C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160407082539.exe
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\Opera_36.0.2130.59_Setup[1].exe
1.217.734.0_TO_1.217.820.0_MPASDLTA.VDM._P
1.217.734.0_TO_1.217.820.0_MPAVDLTA.VDM._P
\\.\ICSICardReaderFilter
C://CMakeFiles/CMakeSourceDir.txt
C:\Users\win7\AppData\Local\Temp\Setup Log 2016-04-07 #001.txt
C:\sample:typelib
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\index[1].htm
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\amipb[1].js
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\main[1].css
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\footer_img[1].png
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\cancel[1].gif
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\cancel1[1].gif
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\skip[1].gif
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\next[1].gif
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\accept[1].gif
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\decline[1].gif
C:\Windows\SysWOW64\Dxtmsft.dll
C:\Windows\SysWOW64\Dxtrans.dll
C:\Users\win7\AppData\Local\Temp\sample
C:\Users\win7\Desktop\Continue installation .lnk
C:\Users\win7\AppData\Local\Temp\sample:Zone.Identifier
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\finish[1].gif
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\dm_left_image[1].png
C:\Users\win7\AppData\Local\Pulse Secure
C:\Users\win7\AppData\Local\Pulse Secure\Logging
C:\Users\win7\AppData\Local\Pulse Secure\Logging\debuglog.log
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EA618097E393409AFA316F0F87E2C202_94B797853669CABADC32E288BDE9451B
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EA618097E393409AFA316F0F87E2C202_52005A29A385400D93FCB3EE5D52CF6D
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\ECF3006D44DA211141391220EE5049F4
C:\PulseSetupClientOCX.exe
C:\Users\win7\AppData\Roaming\Pulse Secure\Setup Client\PulseSetupClient.ini
C:\PulseSetupAutoupgrade.param
C:\ProgramData\NortonInstaller\Logs\2016-04-07-12h29m01s\NortonInstall-2016-04-07-12h29m01s.log
C:\Users\win7\AppData\Local\Temp\WER2D29.tmp.WERInternalMetadata.xml
C:\Users\win7\AppData\Local\Temp\GUM2D7E.tmp\goopdate.dll
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C86BD7751D53F10F65AAAD66BBDF33C7
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EE44ECA143B76F2B9F2A5AA75B5D1EC6_847118BE2683F0C241D1D702F3A3F5F9
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EE44ECA143B76F2B9F2A5AA75B5D1EC6_48BC6893316669491F73A0AFA6B78DC9
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\616AD1AB067CFD351D6C0EF6F3E12F40
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\782D7E2BFB036A849A99FFA65C652D39
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CA4458E7366E94A3C3A9C1FE548B6D21_03701DFFBB0DB68C6FEF44A923FC306A
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CA4458E7366E94A3C3A9C1FE548B6D21_11890B83A662A94DAA54032730C974C0
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7BD5521448F9309F5CEB0C75890FFABC
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\76A6104AD5D7661815E18299392B9F65
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BAEBE581FCB73249406FC21094EA252E_BC0CE803EF41A748738619ED7838EEFC
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BAEBE581FCB73249406FC21094EA252E_FD361CE5A85478C5EE18C8A08F5CE82E
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C3E814D1CB223AFCD58214D14C3B7EAB
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D84E548583BE1EE7DB5A935821009D26_5B98B6CD6E69202676965CF5B0E2A7A7
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D84E548583BE1EE7DB5A935821009D26_1070D8A1DE1737B040B2F83EA6FA69E1
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8BD11C4A2318EC8E5A82462092971DEA
C:\ProgramData\Dropbox\Update\Log\DropboxUpdate.log-2016-04-07-10-15-37-815-2316
C:\Users\win7\AppData\Local\Temp\is-VFDLN.tmp\_isetup\_RegDLL.tmp
C:\Users\win7\AppData\Local\Temp\is-VFDLN.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-VFDLN.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\is-VFDLN.tmp\tools.exe
C:\Users\win7\AppData\Local\Temp\is-VFDLN.tmp\wizardImageFileen.bmp
C:\Users\win7\AppData\Local\Temp\is-VFDLN.tmp\driversInstallationen.bmp
\\.\PIPE\lsarpc
\??\C:\Windows\system32\remotepg.dll
C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\decoder.dll
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\PDFill.chm
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\PDFill_PDF_Tools.chm
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\WriterSave.chm
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\PDFill.ico
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\PDFill_license.rtf
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\PDFWriter\Driver\PDFILLPSCRIPT.HLP
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\PDFWriter\Driver\64\PDFILLPSCRIPT.HLP
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\SpellChecker\Wspelldlg.hlp
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\PDFWriter\Driver\PDFILLPSCRIPT.NTF
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\PDFWriter\Driver\64\PDFILLPSCRIPT.NTF
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\DownloadComponents.exe
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\DownloadPDF.exe
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\GetImage_WIA.exe
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\PDFill.exe
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\PDFillZip.exe
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\PDFill_PDF_Tools.exe
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\PlotSoft_PDF.exe
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\WriterSave.exe
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\PDFWriter\WriterSetup.exe
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\cimage.dll
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\CommandBars1300vc70U.dll
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\SystemFolder\DynamicTwainCtrl.dll
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\SystemFolder\mfc70u.dll
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\SystemFolder\msvcr70.dll
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\pdf2image.dll
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\PDFWriter\PDFillPDFButton_Excel.dll
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\PDFWriter\PDFillPDFButton_PowerPoint.dll
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\PDFWriter\PDFillPDFButton_Word.dll
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\PDFWriter\Driver\PDFILLPS5UI.DLL
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\PDFWriter\Driver\64\PDFILLPS5UI.DLL
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\PDFWriter\Driver\PDFILLPSCRIPT5.DLL
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\PDFWriter\Driver\64\PDFILLPSCRIPT5.DLL
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\PDFWriter\PDFillWriterMon32.dll
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\PDFWriter\PDFillWriterMon64.dll
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\PDFill_Helper.dll
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\SpellChecker\wspell.ocx
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\SpellChecker\ssceam2.clx
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\SpellChecker\sscebr2.clx
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\SpellChecker\ssceca2.clx
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\SpellChecker\Wspelldlg.GID
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\PDFWriter\Driver\PDFillWriter.PPD
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\PDFWriter\PDFWrite.rsp
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\SpellChecker\accent.tlx
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\SpellChecker\correct.tlx
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\SpellChecker\ssceam.tlx
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\SpellChecker\sscebr.tlx
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\SpellChecker\ssceca.tlx
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\SpellChecker\tech.tlx
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\SpellChecker\userdic.tlx
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\PDFill.msi
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\PDFill.x64.msi
\\?\C:\Users\win7\AppData\Roaming\PlotSoft LLC\PDFill PDF Editor with FREE Writer and FREE Tools\install\2EF6902\PDFill.mst
C:\Users\win7\AppData\Local\SunnyDay21\SunnyDay21\1.20\cnf.cyl
C:\Users\win7\AppData\Local\Temp\gch5B41.tmp
C:\Users\win7\AppData\Local\Temp\nswC837.tmp
C:\Users\win7\AppData\Local\Temp\nslC847.tmp\registry.dll
C:\Users\win7\AppData\Local\Temp\nslC847.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\WIN7-PC-20160407-1422.log
C:\Users\win7\AppData\Local\Temp\OfficeC2R0F488821-B541-4F16-9980-97A403F739EF\v32.cab
C:\Users\win7\AppData\Local\Temp\OfficeC2R0F488821-B541-4F16-9980-97A403F739EFOfficeC2R3EE10963-A883-4E4C-B15A-1F060717226C\v32.hash
C:\Users\win7\AppData\Local\Temp\OfficeC2R0F488821-B541-4F16-9980-97A403F739EFOfficeC2R3EE10963-A883-4E4C-B15A-1F060717226C\VersionDescriptor.xml
C:\Users\win7\AppData\Local\Temp\OfficeC2R0F488821-B541-4F16-9980-97A403F739EF\VersionDescriptor.xml
.
patchRE.inf
patch_allow_RE.txt
patchRE3.txt
C:\Users\win7\AppData\Local\Temp\Ins7BB2.tmp
\\.\pipe\ADInsightPipe
C:\Users\win7\AppData\Local\Temp\\ADInsightDll.dll
C:\Users\win7\AppData\Local\Temp\logterminal.txt
C:\Users\win7\AppData\Local\Temp\F5_TMP_01356140_00002744\InstallerControl.cab
C:\Users\win7\AppData\Local\Temp\IXP000.TMP\InstallerControl.cab
C:\Users\win7\AppData\Local\Temp\\~DFD5F73F3AB70050DA.TMP
C:\ProgramData\Microsoft\Crypto\RSA\\MachineKeys\2e0ac51b89172b1b02785b0858d04067_c4b6765a-c53d-4b48-b576-0e1db4e9f3bc
C:\ProgramData\Microsoft\Crypto\RSA\\MachineKeys\9e4de1dff17d63fd0534916aa0732b55_c4b6765a-c53d-4b48-b576-0e1db4e9f3bc
C:\Users\win7\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3979321414-2393373014-2172761192-1000\9e4de1dff17d63fd0534916aa0732b55_c4b6765a-c53d-4b48-b576-0e1db4e9f3bc
1.217.756.0_TO_1.217.854.0_MPASDLTA.VDM._P
1.217.756.0_TO_1.217.854.0_MPAVDLTA.VDM._P
C:\sample\install.cfg
C:\Users\win7\AppData\Roaming\Spotify\SpWebInst0.exe
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
C:\Users\win7\AppData\Local\Temp\Cab79CC.tmp
C:\Users\win7\AppData\Local\Temp\Tar79CD.tmp
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_1374AC543829516A5CA56081CD00C32A
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\69C6F6EC64E114822DF688DC12CDD86C
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6DB145CFEEC544B1582FED1ADA3370DD
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\SpotifyFullSetup[1].exe
C:\Users\win7\AppData\Local\Temp\nsh67BC.tmp\modern-wizard.bmp
C:\Users\win7\AppData\Local\Temp\nsh67BC.tmp\ButtonEvent.dll
C:\Users\win7\AppData\Local\Temp\nsh67BC.tmp\nsDialogs.dll
C:\Users\win7\AppData\Local\Temp\nsh67BC.tmp\System.dll
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B2238AACCEDC3F1FFE8E7EB5F575EC9
C:\ProgramData\WinClon\Logs\2016-04-07.txt
C:\Windows\System32\icacls.exe
C:\ProgramData\WinClon\WinClon.ini
C:\ProgramData\WinClon\InstRet.ini
C:\ProgramData\WinClon\WinClonInit.ini
C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\temp
C:\lesson.txt
C:\Intel\Logs\IntelUSB3.log
C:\Users\win7\AppData\Local\Temp\is-0CL8A.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-0CL8A.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\ext23D.tmp
C:\Windows\system32\LogFiles\PunkBuster\pbsvc.log
C:\Users\win7\AppData\Local\Temp\DefaultPackOffer.dll
C:\winrar.lng
C:\Users\win7\AppData\Roaming\WinRAR\version.dat
\\.\PIPE\DAV RPC SERVICE
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Network Shortcuts\desktop.ini
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Network Shortcuts
rarext.dll
C:\WinRAR.exe
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk
C:\WinRAR.chm
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Pomoc WinRARa.lnk
C:\Rar.txt
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Podrecznik RARa dla konsoli.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Pomoc WinRARa.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Podrecznik RARa dla konsoli.lnk
C:\Users\win7\AppData\Local\Temp\\mt5setup_Arabic.mtlang.tmp
C:\Users\win7\AppData\Local\Temp\\mt5setup_French.mtlang.tmp
C:\Users\win7\AppData\Local\Temp\\mt5setup_German.mtlang.tmp
C:\Users\win7\AppData\Local\Temp\\mt5setup_Italian.mtlang.tmp
C:\Users\win7\AppData\Local\Temp\\mt5setup_Japanese.mtlang.tmp
C:\Users\win7\AppData\Local\Temp\\mt5setup_Russian.mtlang.tmp
C:\Users\win7\AppData\Local\Temp\\mt5setup_Spanish.mtlang.tmp
C:\Users\win7\AppData\Local\Temp\\mt5setup_Turkish.mtlang.tmp
C:\Users\win7\AppData\Local\Temp\000a92e8.a
C:\Users\win7\AppData\Local\Temp\000a9922.a
C:\Users\win7\AppData\Local\Temp\694937\Win7LoaderExtreme-3.503-link.zip
C:\Users\win7\AppData\Local\Temp\694937\dlreport
\??\C:\Windows\system32\explorerframe.dll
1.217.656.0_TO_1.217.862.0_MPASDLTA.VDM._P
1.217.656.0_TO_1.217.862.0_MPAVDLTA.VDM._P
C:\Company of Heroes.msi
C:\Users\win7\AppData\Local\Temp\{45A532C6-C520-425D-AC0A-E5BC4EFBFB10}\fpb.tmp
C:\Users\win7\AppData\Local\Temp\{7525BD1B-F47E-49A8-B05E-0D0463F62F92}\fpb.tmp
C:\ProgramData\9a4b8b26-f4e0-4529-a5b4-93ec828f7e42\temp
c:\csb.log
C:\Users\win7\AppData\Local\Temp\CR_7EA0A.tmp\CHROME_PATCH.PACKED.7Z
C:\Users\win7\AppData\Local\Temp\CR_7EA0A.tmp\SETUP_PATCH.PACKED.7Z
C:\Users\win7\AppData\Local\Temp\nsj9D9C.tmp
C:\Users\win7\AppData\Local\Temp\nsz9DAD.tmp\LangDLL.dll
C:\Users\win7\AppData\Local\Temp\nsz9DAD.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsz9DAD.tmp\pixality.dll
C:\Users\win7\AppData\Local\Temp\nsz9DAD.tmp\UserInfo.dll
C:\Users\win7\AppData\Local\Temp\nsz9DAD.tmp\modern-header.bmp
C:\Users\win7\AppData\Local\Temp\nsz9DAD.tmp\modern-wizard.bmp
C:\Users\win7\AppData\Local\Temp\nsz9DAD.tmp\nsDialogs.dll
\\.\pipe\OperaCrashReporter2840
C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160407210206.log
C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160407210205.exe
C:\Users\win7\AppData\Local\Temp\nssD3F5.tmp
C:\Users\win7\AppData\Local\Temp\nshD405.tmp\LangDLL.dll
C:\Users\win7\AppData\Local\Temp\nshD405.tmp\nsis-r.bmp
C:\Users\win7\AppData\Local\Temp\nshD405.tmp\orange-r.bmp
C:\Users\win7\AppData\Local\Temp\nshD405.tmp\modern-header.bmp
C:\Users\win7\AppData\Local\Temp\nshD405.tmp\modern-wizard.bmp
C:\Users\win7\AppData\Local\Temp\nshD405.tmp\Aero.dll
C:\Users\win7\AppData\Local\Temp\nshD405.tmp\BrandingURL.dll
C:\Users\win7\AppData\Local\Temp\nshD405.tmp\nsDialogs.dll
C:\Users\win7\AppData\Local\Temp\nshD405.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nshD405.tmp\info.rtf
C:\Users\win7\AppData\Local\Temp\nshD405.tmp\CustomLicense.dll
C:\Users\win7\AppData\Local\Temp\nshD405.tmp\ToolTips.dll
C:\Users\win7\AppData\Local\Temp\000be643.a
C:\Users\win7\AppData\Local\Temp\000bee61.a
C:\Users\win7\AppData\Local\Temp\782468\dlreport
http://www.eveofjustice.com/files/WL2.2.2-link.zip
C:\Users\win7\AppData\Local\Temp\VKM\Sound\Popup.mp3
C:\Users\win7\AppData\Local\Temp\VKM\Help\VKMusic.chm
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Default\Close.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\WinAmp\Close.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\MacSkin\Close.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iTunes\Close.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Vkontakte\Close.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iPod\Close.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Green\Close.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\AIMP3\Close.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Default\CloseHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\WinAmp\CloseHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\MacSkin\Closehot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iTunes\CloseHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Vkontakte\CloseHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Green\CloseHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iPod\Closehot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\AIMP3\CloseHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Site\dailymotion.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Vkontakte\Glass.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Default\Glass.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\MacSkin\Glass.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Green\Glass.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\WinAmp\Glass.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iTunes\Glass.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\AIMP3\Glass.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iPod\Glass.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Site\mailru.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iTunes\Next.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Vkontakte\Next.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\WinAmp\Next.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iPod\Next.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Default\Next.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\MacSkin\Next.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\AIMP3\Next.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Green\Next.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Vkontakte\NextHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\WinAmp\NextHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iTunes\NextHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iPod\NextHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Default\NextHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\MacSkin\NextHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\AIMP3\NextHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Green\NextHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Vkontakte\Pause.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iTunes\Pause.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Default\Pause.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iPod\Pause.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\WinAmp\Pause.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\MacSkin\Pause.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\AIMP3\Pause.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Green\Pause.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Vkontakte\PauseHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\WinAmp\PauseHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iPod\PauseHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iTunes\PauseHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Default\PauseHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\MacSkin\PauseHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\AIMP3\PauseHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Green\PauseHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Vkontakte\Play.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iPod\Play.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\WinAmp\Play.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iTunes\Play.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Default\Play.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\MacSkin\Play.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\AIMP3\Play.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Green\Play.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Vkontakte\PlayHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\WinAmp\PlayHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iPod\PlayHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iTunes\PlayHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Default\PlayHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\MacSkin\PlayHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\AIMP3\PlayHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Green\PlayHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iTunes\Prev.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Vkontakte\Prev.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\WinAmp\Prev.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iPod\Prev.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Default\Prev.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\MacSkin\Prev.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\AIMP3\Prev.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Green\Prev.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Vkontakte\PrevHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\WinAmp\PrevHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iTunes\PrevHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iPod\PrevHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Default\PrevHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\MacSkin\PrevHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\AIMP3\PrevHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Green\PrevHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Site\redtube.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Site\rutube.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Default\Search_Blue.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Green\Search_Blue.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iTunes\Shuffle.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\MacSkin\Shuffle.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Default\Shuffle.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\WinAmp\Shuffle.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Vkontakte\Shuffle.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iPod\Shuffle.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\AIMP3\Shuffle.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Green\Shuffle.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iTunes\ShuffleHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Default\ShuffleHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\WinAmp\ShuffleHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Vkontakte\ShuffleHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iPod\ShuffleHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\AIMP3\ShuffleHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Green\ShuffleHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\MacSkin\ShuffleHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iTunes\ShuffleOff.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\MacSkin\ShuffleOff.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Default\ShuffleOff.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\WinAmp\ShuffleOff.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Vkontakte\ShuffleOff.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iPod\ShuffleOff.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\AIMP3\ShuffleOff.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Green\ShuffleOff.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iTunes\ShuffleOffHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Default\ShuffleOffHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\WinAmp\ShuffleOffHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Vkontakte\ShuffleOffHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iPod\ShuffleOffHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\AIMP3\ShuffleOffHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Green\ShuffleOffHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\MacSkin\ShuffleOffHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iTunes\SoundOff.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Default\SoundOff.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Vkontakte\SoundOff.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iPod\SoundOff.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\AIMP3\SoundOff.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\MacSkin\SoundOff.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Green\SoundOff.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iTunes\SoundOffHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Default\SoundOffHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Vkontakte\SoundOffHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iPod\SoundOffHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\AIMP3\SoundOffHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\MacSkin\SoundOffHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Green\SoundOffHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iTunes\SoundOn.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\MacSkin\SoundOn.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Default\SoundOn.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Vkontakte\SoundOn.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iPod\SoundOn.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\AIMP3\SoundOn.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Green\SoundOn.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iTunes\SoundOnHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Default\SoundOnHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\MacSkin\SoundOnHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Vkontakte\SoundOnHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iPod\SoundOnHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\AIMP3\SoundOnHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Green\SoundOnHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Default\SoundVolume.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\WinAmp\SoundVolume.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iPod\SoundVolume.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Vkontakte\SoundVolume.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iTunes\SoundVolume.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\MacSkin\SoundVolume.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Green\SoundVolume.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\AIMP3\SoundVolume.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\MacSkin\SoundVolumeHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Default\SoundVolumeHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\WinAmp\SoundVolumeHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iPod\SoundVolumeHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Vkontakte\SoundVolumeHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iTunes\SoundVolumeHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Green\SoundVolumeHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\AIMP3\SoundVolumeHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Site\vimeo.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\MacSkin\Vis.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Default\Vis.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iTunes\vis.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\WinAmp\Vis.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iPod\Vis.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Vkontakte\Vis.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Green\Vis.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\AIMP3\Vis.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Default\VisHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\MacSkin\VisHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iTunes\vishot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\WinAmp\VisHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iPod\VisHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Vkontakte\VisHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Green\VisHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\AIMP3\VisHot.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Site\vk.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Site\yandex.png
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Site\youtube.png
C:\Users\win7\AppData\Local\Temp\VKM\uninst.ico
C:\Users\win7\AppData\Local\Temp\VKM\VKMusic.inf
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Default\PlayerSkin.vkm
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\WinAmp\PlayerSkin.vkm
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\AIMP3\PlayerSkin.vkm
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Green\PlayerSkin.vkm
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\Vkontakte\PlayerSkin.vkm
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iTunes\PlayerSkin.vkm
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\MacSkin\PlayerSkin.vkm
C:\Users\win7\AppData\Local\Temp\VKM\Skins\Player\iPod\PlayerSkin.vkm
C:\Users\win7\AppData\Local\Temp\VKM\Tools\downloader.exe
C:\Users\win7\AppData\Local\Temp\VKM\VKMusic4.exe
C:\Users\win7\AppData\Local\Temp\VKM\bass.dll
C:\Users\win7\AppData\Local\Temp\VKM\libeay32.dll
C:\Users\win7\AppData\Local\Temp\VKM\ssleay32.dll
C:\Windows\System32\xcopy.exe
C:\Windows\System32\cmd.exe
C:\Windows\System32\rundll32.exe
__tmp_rar_sfx_access_check_776250
Dates.cfg
FirstNames.cfg
PlaceNames.cfg
Keyboard.dat
LanguageNames.dat
Afrikaans.lang
Albanian.lang
Arabic.lang
Armenian.lang
Bosnian.lang
Bulgarian.lang
Catalan.lang
Croatian.lang
Czech.lang
Danish.lang
Dutch.lang
English.lang
EnglishUK.lang
Estonian.lang
Finnish.lang
French.lang
German.lang
Greek.lang
Hebrew.lang
Hungarian.lang
Indonesian.lang
Italian.lang
Latvian.lang
Lithuanian.lang
Macedonian.lang
Norwegian.lang
Persian.lang
Polish.lang
Portuguese.lang
Portuguese_Brazil.lang
Romanian.lang
Russian.lang
Serbian.lang
Slovak.lang
Slovenian.lang
Spanish.lang
Swedish.lang
Tamil.lang
Turkish.lang
Ukrainian.lang
Vietnamese.lang
Yiddish.lang
Chinese.ulang
ChineseTrad.ulang
Hindi.ulang
Japanese.ulang
Korean.ulang
Malay.ulang
Thai.ulang
C:\Users\win7\AppData\Local\Temp\nro.log\log\nps.log.txt
C:\Users\win7\AppData\Local\Temp\WIN7-PC-20160407-2233.log
C:\Users\win7\AppData\Local\Temp\OfficeC2R0F488821-B099-4F11-959B-90A4773CA5EE\v32.cab
C:\Users\win7\AppData\Local\Temp\OfficeC2R0F488821-B099-4F11-959B-90A4773CA5EEOfficeC2R3EE10963-AF8F-4E4B-8D5D-180673DCBE6D\v32.hash
C:\Users\win7\AppData\Local\Temp\OfficeC2R0F488821-B099-4F11-959B-90A4773CA5EEOfficeC2R3EE10963-AF8F-4E4B-8D5D-180673DCBE6D\VersionDescriptor.xml
C:\Users\win7\AppData\Local\Temp\OfficeC2R0F488821-B099-4F11-959B-90A4773CA5EE\VersionDescriptor.xml
C:\84a77ccea871e1cd00e4d4380f\secondaryinstaller.exe.config
C:\84a77ccea871e1cd00e4d4380f\secondaryinstaller.exe
C:\lib\pywin2.pyd
C:\Users\win7\AppData\Local\Temp\nsh9734.tmp\spltmp.bmp
C:\Users\win7\AppData\Local\Temp\nsh9734.tmp\AdvSplash.dll
C:\Users\win7\AppData\Local\Temp\nsh9734.tmp\spltmp.wav.WAV
C:\Users\win7\AppData\Local\Temp\nsh9734.tmp\ioSpecial.ini
C:\Users\win7\AppData\Local\Temp\nsh9734.tmp\modern-wizard.bmp
C:\Users\win7\AppData\Local\Temp\nsh9734.tmp\InstallOptions.dll
C:\Windows\Fonts\BCPERC__.TTF
C:\Users\win7\AppData\Local\Temp\nsh9734.tmp\FontName.dll
C:\Users\win7\AppData\Local\Temp\nsh9734.tmp\System.dll
C:\Windows\Fonts\BCTEXTEX.TTF
C:\Windows\Fonts\BCTEXT__.TTF
C:\Windows\Fonts\BC______.TTF
C:\Windows\Fonts\ENGRFE__.TTF
C:\Windows\Fonts\ENGRFS__.TTF
C:\Windows\Fonts\ENGRTH__.TTF
C:\Windows\Fonts\ENGRTN__.TTF
C:\Windows\Fonts\ENGRTT__.TTF
C:\Windows\Fonts\ENGRT___.TTF
C:\Windows\Fonts\Finale Copyist Text Ext.ttf
C:\Windows\Fonts\Finale Copyist Text.ttf
C:\Windows\Fonts\Finale Lyrics Bold.ttf
C:\Windows\Fonts\Finale Lyrics Italic.ttf
C:\Windows\Fonts\Finale Lyrics.ttf
C:\Windows\Fonts\FINALPHA.TTF
C:\Windows\Fonts\FINMALL_.TTF
C:\Windows\Fonts\FINNUM__.TTF
C:\Windows\Fonts\FINPERC_.TTF
C:\Windows\Fonts\JazzCord.TTF
C:\Windows\Fonts\JazzPerc.TTF
C:\Windows\Fonts\JazzText.TTF
C:\Windows\Fonts\Jazzte__.TTF
C:\Windows\Fonts\Jazz____.TTF
C:\Windows\Fonts\MAESP___.TTF
C:\Windows\Fonts\MaestroTimes Bold Italic.ttf
C:\Windows\Fonts\MaestroTimes Bold.ttf
C:\Windows\Fonts\MaestroTimes Italic.ttf
C:\Windows\Fonts\MaestroTimes.ttf
C:\Windows\Fonts\MAESTRO_.TTF
C:\Windows\Fonts\MAESW___.TTF
C:\Windows\Fonts\PE.TTF
C:\Windows\Fonts\SE.TTF
C:\Windows\Fonts\TAMBURO_.TTF
C:\arc.ini
C:\sample\UndeadVsPlants_Data
C:\sample\UndeadVsPlants_Data\Managed
C:\sample\UndeadVsPlants_Data\Mono
C:\sample\UndeadVsPlants_Data\Plugins
C:\sample\UndeadVsPlants_Data\Resources
C:\sample\UndeadVsPlants_Data\StreamingAssets
C:\sample\UndeadVsPlants_Data\Mono\etc
C:\sample\UndeadVsPlants_Data\Mono\etc\mono
C:\sample\UndeadVsPlants_Data\Mono\etc\mono\1.0
C:\sample\UndeadVsPlants_Data\Mono\etc\mono\2.0
C:\sample\UndeadVsPlants_Data\Mono\etc\mono\mconfig
C:\sample\UndeadVsPlants_Data\Mono\etc\mono\2.0\Browsers
C:\sample\UndeadVsPlants_Data\Mono\etc\mono\mconfig\config.xml
C:\Users\win7\AppData\Local\Temp\{A145AABC-0B25-4940-A087-A59DCB79EE7E}\fpb.tmp
C:\Users\win7\AppData\Local\Temp\{D04AC0E4-8BC6-43FC-A3CF-DF9B461B3EC0}\fpb.tmp
C:\ProgramData\Battle.net\Setup\wow\Logs\battle.net-setup-20160407T205812.954070.log
C:\Users\win7\AppData\Local\Temp\AddinSetupTool.txt
C:\ProgramData\Microsoft\BingBar\7.1.361.0\SeaPort\Reports.xml
C:\\.install4j\pref_jre.cfg
C:\\.install4j\inst_jre.cfg
C:\Users\win7\AppData\Local\Temp\WIN7-PC-20160408-0143.log
C:\Users\win7\AppData\Local\Temp\OfficeC2R13E620C3-80BA-4B6B-AEB2-17CCF1B72F94\v32.cab
C:\Users\win7\AppData\Local\Temp\CabC941.tmp
C:\Users\win7\AppData\Local\Temp\TarC942.tmp
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\4E3B89F45B2DEE97195EF8860AA1F05A
C:\ProgramData\1a0254e4-d458-47fa-82a0-6940ee729f6c\temp
C:\Users\win7\AppData\Local\Temp\{F89FFB39-D6B6-4EDB-B1FB-8131B4165305}\TurboBoost.msi
C:\Users\win7\AppData\Local\Temp\{F89FFB39-D6B6-4EDB-B1FB-8131B4165305}\1033.MST
C:\Users\win7\AppData\Local\Temp\MSI48b27.LOG
C:\Users\win7\AppData\Local\Temp\{F89FFB39-D6B6-4EDB-B1FB-8131B4165305}\Setup.INI
C:\Users\win7\AppData\Local\Temp\~6E49.tmp
C:\Users\win7\AppData\Local\Temp\{F89FFB39-D6B6-4EDB-B1FB-8131B4165305}\0x0409.ini
C:\Users\win7\AppData\Local\Temp\{F89FFB39-D6B6-4EDB-B1FB-8131B4165305}\_ISMSIDEL.INI
C:\Users\win7\AppData\Local\Temp\\~DF082BB5D99A091850.TMP
C:\ProgramData\NortonInstaller\Logs\2016-04-08-05h59m34s\NortonInstall-2016-04-08-05h59m34s.log
C:\Users\win7\AppData\Local\Temp\WERADBF.tmp.WERInternalMetadata.xml
C:\Users\win7\AppData\Local\Temp\\~DF66436D5063FECED5.TMP
C:\Users\win7\AppData\Local\Temp\_asw_aisI.tm~a03040\setup.lok
C:\Users\win7\AppData\Local\Temp\_asw_aisI.tm~a03040\servers.def
C:\Users\win7\AppData\Local\Temp\_asw_aisI.tm~a03040\servers.def.lkg
C:\Program Files\Alwil Software\Avast5\Setup\setup.log
C:\ProgramData\Alwil Software\Avast5\Log\Setup.log
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\files_list
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\en\en.zip
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\skin\standard_skin.zip
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\skin\windows_skin.zip
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\customize.gif
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\bar.png
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\bkgd-rev.png
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\bkgd.png
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\bullet.png
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\center.png
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\corner.png
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\darkBox.png
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\defaultFavicon.png
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\error.png
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\file.png
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\flag.png
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\folder.png
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\hanger.png
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\header-expanded.png
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\header.png
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\opera-icon-red.png
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\opera-icon-white.png
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\opera.png
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\Opera_256x256.png
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\page-bot.png
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\red_center.png
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\red_left.png
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\red_right.png
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\root.png
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\search.png
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\section.png
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\smartGroup.png
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\tooltiptail.png
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\top.png
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\warning.png
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\extra\missingplugin.svg
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\extra\missingpluginhover.svg
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\encoding.bin
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\defaults\mailproviders.xml
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\zh-cn\turbosettings.xml
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\zh-tw\turbosettings.xml
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\webfeeds.html
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\about.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\user\accessibility.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\user\altdebugger.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\cache.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\certinfo.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\user\classid.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\config.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\contentblock.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\user\contrastbw.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\user\contrastwb.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\debug.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\dir.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\user\disablebreaks.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\user\disablefloats.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\user\disableforms.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\user\disablepositioning.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\user\disabletables.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\drives.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\error.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\history.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\im.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\image.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\info.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\mail.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\mathml.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\media.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\message.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\mime.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\opera.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\user\outline.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\plugins.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\private.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\search.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\user\structureblock.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\user\structureinline.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\user\structuretables.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\user\tablelayout.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\user\toc.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\unstyledxml.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\warning.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\webstorage.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\wml.css
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\zh-cn\browser.js
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\zh-tw\browser.js
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\gstreamer\LGPL.txt
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\ja\license.txt
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\defaults\license.txt
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\en\license.txt
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\lngcode.txt
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\gstreamer\README.txt
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\ui\dialog.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\ui\embedded_keyboard.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\ui\embedded_menu.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\ui\embedded_mouse.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\ui\fastforward.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\defaults\feedreaders.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\defaults\plugin-ignore.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\bg\search.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\ro\search.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\sr\search.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\hu\search.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\de\search.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\en-GB\search.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\en\search.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\defaults\search.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\es-ES\search.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\fr\search.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\it\search.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\sk\search.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\cs\search.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\pl\search.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\zh-cn\search.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\be\search.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\nb\search.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\ja\search.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\uk\search.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\ru\search.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\custom\locale\en\search.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\ui\standard_keyboard.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\ui\standard_keyboard_compat.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\ui\standard_menu.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\ui\standard_mouse.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\es-ES\standard_speeddial.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\it\standard_speeddial.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\bg\standard_speeddial.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\ro\standard_speeddial.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\sr\standard_speeddial.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\hu\standard_speeddial.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\cs\standard_speeddial.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\sk\standard_speeddial.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\pl\standard_speeddial.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\nb\standard_speeddial.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\ja\standard_speeddial.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\en-GB\standard_speeddial.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\en\standard_speeddial.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\ru\standard_speeddial.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\fr\standard_speeddial.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\de\standard_speeddial.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\uk\standard_speeddial.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\be\standard_speeddial.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\zh-cn\standard_speeddial.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\defaults\standard_speeddial.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\custom\locale\en\standard_speeddial.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\ui\standard_toolbar.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\defaults\standard_trusted_repositories.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\ui\standard_voice.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\defaults\webmailproviders.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\defaults\xmlentities.ini
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\bg\bookmarks.adr
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\cs\bookmarks.adr
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\ro\bookmarks.adr
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\sk\bookmarks.adr
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\sr\bookmarks.adr
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\hu\bookmarks.adr
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\uk\bookmarks.adr
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\pl\bookmarks.adr
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\be\bookmarks.adr
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\it\bookmarks.adr
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\en-GB\bookmarks.adr
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\es-ES\bookmarks.adr
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\nb\bookmarks.adr
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\en\bookmarks.adr
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\ja\bookmarks.adr
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\fr\bookmarks.adr
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\defaults\bookmarks.adr
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\de\bookmarks.adr
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\ru\bookmarks.adr
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\zh-cn\bookmarks.adr
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\custom\locale\en\bookmarks.adr
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\defaults\public_domains.dat
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\html40_entities.dtd
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\mathml.dtd
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\be\be.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\bg\bg.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\cs\cs.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\da\da.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\de\de.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\el\el.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\en-GB\en-GB.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\en\en.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\es-ES\es-ES.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\es-LA\es-LA.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\et\et.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\fi\fi.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\fr-CA\fr-CA.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\fr\fr.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\fy\fy.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\hi\hi.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\hr\hr.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\hu\hu.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\id\id.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\it\it.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\ja\ja.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\ka\ka.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\ko\ko.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\lt\lt.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\mk\mk.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\nb\nb.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\nl\nl.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\nn\nn.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\pl\pl.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\pt-BR\pt-BR.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\pt\pt.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\ro\ro.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\ru\ru.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\sk\sk.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\sr\sr.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\sv\sv.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\ta\ta.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\te\te.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\tr\tr.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\uk\uk.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\vi\vi.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\zh-cn\zh-cn.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\zh-tw\zh-tw.lng
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\m2_welcome_message.mbs
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\unite\fileSharing.ua
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\unite\fridge.ua
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\unite\home.ua
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\unite\mediaPlayer.ua
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\unite\messenger.ua
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\unite\photoSharing.ua
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\unite\webserver.ua
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\c3nform.vxml
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\program\netscape.exe
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\opera.exe
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\gstreamer\plugins\gstaudioconvert.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\gstreamer\plugins\gstaudioresample.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\gstreamer\plugins\gstautodetect.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\gstreamer\plugins\gstcoreelements.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\gstreamer\plugins\gstdecodebin2.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\gstreamer\plugins\gstdirectsound.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\gstreamer\plugins\gstffmpegcolorspace.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\gstreamer\plugins\gstoggdec.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\gstreamer\gstreamer.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\gstreamer\plugins\gsttypefindfunctions.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\gstreamer\plugins\gstwaveform.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\gstreamer\plugins\gstwavparse.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\gstreamer\plugins\gstwebmdec.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\opera.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Opera.exe
C:\Users\win7\AppData\Local\Temp\BS-InternetClient\BssetupLog\Bssetup.log
C:\Users\win7\AppData\Local\Temp\nst34CE.tmp
C:\Users\win7\AppData\Local\Temp\nst34CF.tmp\LangDLL.dll
C:\Users\win7\AppData\Local\Temp\nst34CF.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nst34CF.tmp\ioSpecial.ini
C:\Users\win7\AppData\Local\Temp\nst34CF.tmp\modern-wizard.bmp
C:\Users\win7\AppData\Local\Temp\nst34CF.tmp\InstallOptions.dll
C:\Users\win7\AppData\Local\Temp\is-RHGRT.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-RHGRT.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\is-RHGRT.tmp\Certificate.dll
C:\Users\win7\AppData\Local\Temp\is-54A3G.tmp\rar.ini
\\?\C:\Users\win7\AppData\Local\Temp\is-54A3G.tmp\rar.ini
C:\Users\win7\AppData\Local\Temp\is-54A3G.tmp\GCountry.dll
C:\Users\win7\AppData\Local\Temp\is-54A3G.tmp\config.rar
C:\Users\win7\AppData\Local\Temp\is-54A3G.tmp\UnRAR.exe
C:\Users\win7\AppData\Local\Temp\is-54A3G.tmp\stub4_install.exe
C:\Users\win7\AppData\Local\Temp\is-54A3G.tmp\stub5_install.exe
C:\Users\win7\AppData\Local\Temp\is-54A3G.tmp\stub6_install.exe
C:\Users\win7\AppData\Local\Temp\is-54A3G.tmp\OCSetupHlp.dll
C:\Users\win7\AppData\Local\Temp\is-54A3G.tmp\16.txt
C:\Users\win7\AppData\Local\Temp\is-54A3G.tmp\12.txt
C:\Users\win7\AppData\Local\Temp\is-54A3G.tmp\393.txt
C:\Users\win7\AppData\Local\Temp\nsg287.tmp
C:\Users\win7\AppData\Local\Temp\is-VIF8R.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-VIF8R.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\is-VIF8R.tmp\innocallback.dll
C:\Users\win7\AppData\Local\Temp\is-VIF8R.tmp\isslideshow.dll
C:\Users\win7\AppData\Local\Temp\is-VIF8R.tmp\ISDone.dll
C:\Users\win7\AppData\Local\Temp\is-VIF8R.tmp\botva2.dll
C:\Users\win7\AppData\Local\Temp\is-VIF8R.tmp\img2.bmp
C:\Users\win7\AppData\Local\Temp\is-VIF8R.tmp\1.bmp
C:\Users\win7\AppData\Local\Temp\is-VIF8R.tmp\2.bmp
C:\Users\win7\AppData\Local\Temp\is-VIF8R.tmp\3.bmp
C:\Users\win7\AppData\Local\Temp\is-VIF8R.tmp\4.bmp
C:\Users\win7\AppData\Local\Temp\is-VIF8R.tmp\5.bmp
C:\Users\win7\AppData\Local\Temp\is-VIF8R.tmp\6.bmp
C:\Users\win7\AppData\Local\Temp\is-VIF8R.tmp\7.bmp
C:\Users\win7\AppData\Local\Temp\is-VIF8R.tmp\wintb.dll
C:\Users\win7\AppData\Local\Temp\is-VIF8R.tmp\callbackctrl.dll
C:\Users\win7\AppData\Local\Temp\is-VIF8R.tmp\iswin7.dll
C:\Users\win7\AppData\Local\Temp\is-VIF8R.tmp\1.ico
C:\Users\win7\AppData\Local\Temp\is-VIF8R.tmp\2.ico
C:\Users\win7\AppData\Local\Temp\is-VIF8R.tmp\3.ico
C:\Users\win7\AppData\Local\Temp\is-VIF8R.tmp\CheckBox.png
C:\Users\win7\AppData\Local\Temp\PATCHINSTALLER\PatchInstaller.exe
C:\Users\win7\AppData\Local\Temp\PATCHINSTALLER\PatchInstaller.ini
C:\Users\win7\AppData\Local\Temp\PATCHINSTALLER\AlertSM.exe
C:\Users\win7\AppData\Local\Temp\PATCHINSTALLER\AlertSM.trs
C:\Users\win7\AppData\Local\Temp\PATCHINSTALLER\AlertSM.xml
C:\Users\win7\AppData\Local\Temp\2a24d509-fd6d-11e5-9e88-08002763e612\translation.zip_2a24d50a-fd6d-11e5-9e88-08002763e612
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_EE9DB89C3D6A328B5FEAFF0ED3C77874
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_E8BA778045934C3C7879AC75FF5434B4
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\82CB34DD3343FE727DF8890D352E0D8F
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6BADA8974A10C4BD62CC921D13E43B18_EE9DB89C3D6A328B5FEAFF0ED3C77874
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1E698CCB2C296D265AC1A253974E09FD_2ECAC56206023EEBF88741A5B79DBBED
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1E698CCB2C296D265AC1A253974E09FD_7078F9480E1BEA50678A6898C8D92A62
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D57B3BFF6E0B79FBD8CB6482C7775D35
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C07822D66105396A1B8E01486E66C5F3
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1E698CCB2C296D265AC1A253974E09FD_2ECAC56206023EEBF88741A5B79DBBED
C:\Users\win7\AppData\Local\Temp\2a24d509-fd6d-11e5-9e88-08002763e612\translation.zip
C:\Users\win7\AppData\Local\Temp\2a24d509-fd6d-11e5-9e88-08002763e612\target.exe_2a24d50b-fd6d-11e5-9e88-08002763e612
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C8E7EC0C85688F4738F3BE49B104BA67
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C8E7EC0C85688F4738F3BE49B104BA67
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3B179347615B32FE859CEABBE50C3EE6_13F4C683C5E3FDFDD44D6C7EA9890817
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3B179347615B32FE859CEABBE50C3EE6_B9A1D3CB094CEBA50439C537EA082947
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8A9510437CB4EEB09F4B3AC2BC980E19
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3B179347615B32FE859CEABBE50C3EE6_13F4C683C5E3FDFDD44D6C7EA9890817
C:\Users\win7\AppData\Local\Temp\26286690-fd6d-11e5-9e88-08002763e612\Ninite.exe
C:\Users\win7\AppData\Local\Temp\LxProxy.log
C:\Users\win7\AppData\Local\Temp\nsb9FDA.tmp
C:\Users\win7\AppData\Local\Temp\nsq9FEA.tmp\AlexaToolbar.dll
C:\Users\win7\AppData\Local\Temp\nsq9FEA.tmp\ioSpecial.ini
C:\Users\win7\AppData\Local\Temp\nsq9FEA.tmp\modern-wizard.bmp
C:\Users\win7\AppData\Local\Temp\nsq9FEA.tmp\modern-header.bmp
C:\Users\win7\AppData\Local\Temp\nsq9FEA.tmp\InstallOptions.dll
C:\Users\win7\AppData\Local\Temp\nsq9FEA.tmp\notify.ini
C:\Users\win7\AppData\Local\Temp\nsf10F8.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsf10F8.tmp\ExecCmd.dll
C:\WINDOWS\FONTS\SEGOEUII.TTF
C:\WINDOWS\FONTS\SEGOEUIZ.TTF
C:\Users\win7\AppData\Local\Temp\7zSD9CB.tmp\setup-stub.exe
C:\Users\win7\AppData\Local\Temp\nsrDBD0.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsrDBD0.tmp\UAC.dll
C:\Users\win7\AppData\Local\Temp\nsrDBD0.tmp\bgintro.bmp
C:\Users\win7\AppData\Local\Temp\nsrDBD0.tmp\appname.bmp
C:\Users\win7\AppData\Local\Temp\nsrDBD0.tmp\clock.bmp
C:\Users\win7\AppData\Local\Temp\nsrDBD0.tmp\particles.bmp
C:\Users\win7\AppData\Local\Temp\nsrDBD0.tmp\pencil.bmp
C:\Users\win7\AppData\Local\Temp\nsrDBD0.tmp\nsDialogs.dll
C:\Users\win7\AppData\Local\Temp\nsrDBD0.tmp\InetBgDL.dll
C:\Users\win7\AppData\Local\Temp\nsrDBD0.tmp\download.exe
w "C:\Users\win7\AppData\Local\Temp\nsrDBD0.tmp\download.exe"
C:\Users\win7\AppData\Local\Temp\nsrDBD0.tmp\CertCheck.dll
C:\Users\win7\AppData\Local\Temp\CabF611.tmp
C:\Users\win7\AppData\Local\Temp\TarF612.tmp
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\42B9A473B4DAF01285A36B4D3C7B1662_AB5EAAA21DF673505B87D680AC76B6E1
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\66AE3BFDF94A732B262342AD2154B86E_AF71C1BB2E04981CC28D0E1D27405C45
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\0E506CEBBC8B162CFB2D72DB4891DCAE
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F4EA555947766F67C3BB52DEDFD509C5
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162
C:\Users\win7\AppData\Local\Temp\c2FtcGxl\308\WIC.res
C:\Users\win7\AppData\Local\Temp\c2FtcGxl\308\WIFilenames.res
C:\Users\win7\AppData\Local\Temp\c2FtcGxl\308\WIFiles.res
C:\Users\win7\AppData\Local\Temp\c2FtcGxl\308\WIGUI.wui
C:\Users\win7\AppData\Local\Temp\c2FtcGxl\308\WIImage0.wip
C:\Users\win7\AppData\Local\Temp\c2FtcGxl\308\78787878.jpg
C:\Users\win7\AppData\Local\Temp\c2FtcGxl\308\Untitled-1.png
C:\Users\win7\AppData\Local\Temp\c2FtcGxl\308\crows.gif
C:\Users\win7\AppData\Local\Temp\WItest~1.tmp
C:\Users\win7\AppData\Local\Temp\WItest~2.tmp
C:\Users\win7\AppData\Local\Temp\WItest~3.tmp
C:\Users\win7\AppData\Local\Temp\WItest~4.tmp
C:\Users\win7\AppData\Local\Temp\WI01.tmp
C:\Users\win7\AppData\Local\Temp\WI02.tmp
url.txt
4story.txt
C:\Users\win7\AppData\Local\Temp\MblTT.exe.config
C:\Users\win7\AppData\Local\Temp\MblTT.exe
C:\Users\win7\AppData\Local\Temp\oeRmd.exe
C:\Users\win7\AppData\Local\Temp\is-0PLIU.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-0PLIU.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\is-0PLIU.tmp\ISDone.dll
C:\Users\win7\AppData\Local\Temp\is-0PLIU.tmp\isskin.dll
C:\Users\win7\AppData\Local\Temp\is-0PLIU.tmp\botva2.dll
C:\Users\win7\AppData\Local\Temp\is-0PLIU.tmp\b2p.dll
C:\Users\win7\AppData\Local\Temp\is-0PLIU.tmp\CallbackCtrl.dll
C:\Users\win7\AppData\Local\Temp\is-0PLIU.tmp\unarc.dll
C:\Users\win7\AppData\Local\Temp\is-0PLIU.tmp\WizImg1.bmp
C:\Users\win7\AppData\Local\Temp\is-0PLIU.tmp\WizImg2.bmp
C:\Users\win7\AppData\Local\Temp\is-0PLIU.tmp\WizImg3.bmp
C:\Users\win7\AppData\Local\Temp\is-0PLIU.tmp\skin.tm
C:\Users\win7\AppData\Local\Temp\is-0PLIU.tmp\CLS-precomp.dll
C:\Users\win7\AppData\Local\Temp\is-0PLIU.tmp\packjpg_dll.dll
C:\Users\win7\AppData\Local\Temp\is-0PLIU.tmp\packjpg_dll1.dll
C:\Users\win7\AppData\Local\Temp\is-0PLIU.tmp\precomp.exe
C:\Users\win7\AppData\Local\Temp\is-0PLIU.tmp\zlib1.dll
C:\Users\win7\AppData\Local\Temp\is-0PLIU.tmp\CLS-srep.dll
C:\Users\win7\AppData\Local\Temp\is-0PLIU.tmp\records.inf
C:\Users\win7\AppData\Local\Temp\is-0PLIU.tmp\English.ini
C:\Users\win7\AppData\Local\Temp\{5ad7e3e6-6278-49f0-b46c-418a7e464fb3}\.ba1\wixstdba.dll
C:\Users\win7\AppData\Local\Temp\{5ad7e3e6-6278-49f0-b46c-418a7e464fb3}\.ba1\thm.wxl
C:\Users\win7\AppData\Local\Temp\{5ad7e3e6-6278-49f0-b46c-418a7e464fb3}\.ba1\thm.xml
C:\Users\win7\AppData\Local\Temp\{5ad7e3e6-6278-49f0-b46c-418a7e464fb3}\.ba1\1033\thm.wxl
C:\Users\win7\AppData\Local\Temp\{5ad7e3e6-6278-49f0-b46c-418a7e464fb3}\.ba1\Images\horizon_logo.png
C:\Users\win7\AppData\Local\Temp\{5ad7e3e6-6278-49f0-b46c-418a7e464fb3}\.ba1\Images\install_button.png
C:\Users\win7\AppData\Local\Temp\{5ad7e3e6-6278-49f0-b46c-418a7e464fb3}\.ba1\Images\launch_button.png
C:\Users\win7\AppData\Local\Temp\{5ad7e3e6-6278-49f0-b46c-418a7e464fb3}\.ba1\Images\progress_bar.png
C:\Users\win7\AppData\Local\Temp\{5ad7e3e6-6278-49f0-b46c-418a7e464fb3}\.ba1\logo.png
\\.\pipe\BurnPipe.{7C42A9E5-4E2D-470A-8ABF-343787A937A1}
C:\Users\win7\AppData\Local\Temp\Setup_20160408161101_Failed.txt
C:\CFVS_Injector.exe:Zone.Identifier
C:\DLL_Loader.exe:Zone.Identifier
C:\Procmon.exe:Zone.Identifier
C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe:Zone.Identifier
C:\Program Files\Common Files\Microsoft Shared\ink\FlickLearningWizard.exe:Zone.Identifier
C:\Program Files\Common Files\Microsoft Shared\ink\InkWatson.exe:Zone.Identifier
C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe:Zone.Identifier
C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe:Zone.Identifier
C:\Program Files\Common Files\Microsoft Shared\ink\ShapeCollector.exe:Zone.Identifier
C:\Program Files\Common Files\Microsoft Shared\ink\TabTip.exe:Zone.Identifier
C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe:Zone.Identifier
C:\Program Files\Internet Explorer\iediagcmd.exe:Zone.Identifier
C:\Program Files\Internet Explorer\ieinstal.exe:Zone.Identifier
C:\Program Files\Internet Explorer\ielowutil.exe:Zone.Identifier
C:\Program Files\Internet Explorer\iexplore.exe:Zone.Identifier
C:\Program Files\Oracle\VirtualBox Guest Additions\uninst.exe:Zone.Identifier
C:\Program Files\Oracle\VirtualBox Guest Additions\VBoxControl.exe:Zone.Identifier
C:\Program Files\Oracle\VirtualBox Guest Additions\VBoxDrvInst.exe:Zone.Identifier
C:\Program Files\Oracle\VirtualBox Guest Additions\VBoxTray.exe:Zone.Identifier
C:\Program Files\Oracle\VirtualBox Guest Additions\VBoxWHQLFake.exe:Zone.Identifier
C:\Program Files\Windows Defender\MpCmdRun.exe:Zone.Identifier
C:\Program Files\Windows Defender\MSASCui.exe:Zone.Identifier
C:\Program Files\Windows Journal\Journal.exe:Zone.Identifier
C:\Program Files\Windows Journal\PDIALOG.exe:Zone.Identifier
C:\Program Files\Windows Mail\wab.exe:Zone.Identifier
C:\Program Files\Windows Mail\wabmig.exe:Zone.Identifier
C:\Program Files\Windows Mail\WinMail.exe:Zone.Identifier
C:\Program Files\Windows NT\Accessories\wordpad.exe:Zone.Identifier
C:\Program Files\Windows Photo Viewer\ImagingDevices.exe:Zone.Identifier
C:\Program Files\Windows Sidebar\sidebar.exe:Zone.Identifier
C:\ProgramData\Package Cache\{050d4fc8-5d48-4b8f-8972-47c82c46020f}\vcredist_x64.exe:Zone.Identifier
C:\ProgramData\Package Cache\{f65db027-aff3-4070-886a-0d87064aabb1}\vcredist_x86.exe:Zone.Identifier
C:\Python27\Lib\distutils\command\wininst-6.0.exe:Zone.Identifier
C:\Python27\Lib\distutils\command\wininst-7.1.exe:Zone.Identifier
C:\Python27\Lib\distutils\command\wininst-8.0.exe:Zone.Identifier
C:\Python27\Lib\distutils\command\wininst-9.0-amd64.exe:Zone.Identifier
C:\Python27\Lib\distutils\command\wininst-9.0.exe:Zone.Identifier
C:\Python27\Lib\site-packages\pip\_vendor\distlib\t32.exe:Zone.Identifier
C:\Python27\Lib\site-packages\pip\_vendor\distlib\t64.exe:Zone.Identifier
C:\Python27\Lib\site-packages\pip\_vendor\distlib\w32.exe:Zone.Identifier
C:\Python27\Lib\site-packages\pip\_vendor\distlib\w64.exe:Zone.Identifier
C:\Python27\Lib\site-packages\setuptools\cli-32.exe:Zone.Identifier
C:\Python27\Lib\site-packages\setuptools\cli-64.exe:Zone.Identifier
C:\Python27\Lib\site-packages\setuptools\cli-arm-32.exe:Zone.Identifier
C:\Python27\Lib\site-packages\setuptools\cli.exe:Zone.Identifier
C:\Python27\Lib\site-packages\setuptools\gui-32.exe:Zone.Identifier
C:\Python27\Lib\site-packages\setuptools\gui-64.exe:Zone.Identifier
C:\Python27\Lib\site-packages\setuptools\gui-arm-32.exe:Zone.Identifier
C:\Python27\Lib\site-packages\setuptools\gui.exe:Zone.Identifier
C:\Python27\python.exe:Zone.Identifier
C:\Python27\pythonw.exe:Zone.Identifier
C:\Python27\Scripts\easy_install-2.7.exe:Zone.Identifier
C:\Python27\Scripts\easy_install.exe:Zone.Identifier
C:\Python27\Scripts\pip.exe:Zone.Identifier
C:\Python27\Scripts\pip2.7.exe:Zone.Identifier
C:\Python27\Scripts\pip2.exe:Zone.Identifier
C:\Users\All Users\Package Cache\{050d4fc8-5d48-4b8f-8972-47c82c46020f}\vcredist_x64.exe:Zone.Identifier
C:\Users\All Users\Package Cache\{f65db027-aff3-4070-886a-0d87064aabb1}\vcredist_x86.exe:Zone.Identifier
C:\Windows\assembly\GAC_32\MSBuild\3.5.0.0__b03f5f7f11d50a3a\MSBuild.exe:Zone.Identifier
C:\Windows\assembly\GAC_64\MSBuild\3.5.0.0__b03f5f7f11d50a3a\MSBuild.exe:Zone.Identifier
C:\Windows\assembly\GAC_MSIL\ComSvcConfig\3.0.0.0__b03f5f7f11d50a3a\ComSvcConfig.exe:Zone.Identifier
C:\Windows\assembly\GAC_MSIL\dfsvc\2.0.0.0__b03f5f7f11d50a3a\dfsvc.exe:Zone.Identifier
C:\Windows\assembly\GAC_MSIL\Narrator\6.1.0.0__31bf3856ad364e35\Narrator.exe:Zone.Identifier
C:\Windows\assembly\GAC_MSIL\PresentationFontCache\3.0.0.0__31bf3856ad364e35\PresentationFontCache.exe:Zone.Identifier
C:\Windows\assembly\GAC_MSIL\SMSvcHost\3.0.0.0__b03f5f7f11d50a3a\SMSvcHost.exe:Zone.Identifier
C:\Windows\assembly\GAC_MSIL\WsatConfig\3.0.0.0__b03f5f7f11d50a3a\WsatConfig.exe:Zone.Identifier
C:\Windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\ebfd3668fbeaf03b957f923c6c492536\ComSvcConfig.ni.exe:Zone.Identifier
C:\Windows\assembly\NativeImages_v2.0.50727_32\dfsvc\3083446ee4545b55c9b2db06c82c6bd0\dfsvc.ni.exe:Zone.Identifier
C:\Windows\assembly\NativeImages_v2.0.50727_32\MSBuild\cced629cddcf299ec6b0d07200950e2f\MSBuild.ni.exe:Zone.Identifier
C:\Windows\assembly\NativeImages_v2.0.50727_32\Narrator\959e8656d926412e1468da6e9232ee42\Narrator.ni.exe:Zone.Identifier
C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\4ac9fdaf938cc2207defbf1a60257147\PresentationFontCache.ni.exe:Zone.Identifier
C:\Windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\cf4438b38e356a7f3ea3de38b59c37e4\SMSvcHost.ni.exe:Zone.Identifier
C:\Windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\3c2cc8250996b5fc7eda8f062eebc5eb\WsatConfig.ni.exe:Zone.Identifier
C:\Windows\assembly\NativeImages_v2.0.50727_64\ComSvcConfig\ce9be38988431b7e9f2ec21d3a8137b5\ComSvcConfig.ni.exe:Zone.Identifier
C:\Windows\assembly\NativeImages_v2.0.50727_64\dfsvc\4eb04d393ca80898d740b4827b24e90d\dfsvc.ni.exe:Zone.Identifier
C:\Windows\assembly\NativeImages_v2.0.50727_64\MSBuild\fc3d7872c2e56d6ba920676436e17ec0\MSBuild.ni.exe:Zone.Identifier
C:\Windows\assembly\NativeImages_v2.0.50727_64\Narrator\4bb34b5ce39e6517390ece46c99f4682\Narrator.ni.exe:Zone.Identifier
C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationFontCac#\d3678cb6b069bb7aa83232b10afea4a1\PresentationFontCache.ni.exe:Zone.Identifier
C:\Windows\assembly\NativeImages_v2.0.50727_64\SMSvcHost\7380ee94439a583f084b6fd9acdd1bc0\SMSvcHost.ni.exe:Zone.Identifier
C:\Windows\assembly\NativeImages_v2.0.50727_64\WsatConfig\795767ca559a4e83bb3769f77e2017d4\WsatConfig.ni.exe:Zone.Identifier
C:\Windows\bfsvc.exe:Zone.Identifier
C:\Windows\Boot\PCAT\memtest.exe:Zone.Identifier
C:\Windows\explorer.exe:Zone.Identifier
C:\Windows\fveupdate.exe:Zone.Identifier
C:\Windows\HelpPane.exe:Zone.Identifier
C:\Windows\hh.exe:Zone.Identifier
C:\Windows\Installer\{E2B51919-207A-43EB-AE78-733F9C6797C3}\python_icon.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\NETFXSBS10.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v2.0.50727\csc.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v2.0.50727\dw20.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ComSvcConfig.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelReg.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMConfigInstaller.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\WsatConfig.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v3.0\WPF\XamlViewer\XamlViewer_v0300.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v3.5\AddInProcess.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v3.5\AddInProcess32.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v3.5\AddInUtil.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v3.5\csc.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v3.5\DataSvcUtil.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v3.5\EdmGen.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v3.5\MSBuild.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v3.5\vbc.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework\v3.5\WFServicesReg.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\AppLaunch.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\aspnet_compiler.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\aspnet_regbrowsers.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\aspnet_regiis.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\aspnet_regsql.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\aspnet_state.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\aspnet_wp.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\CasPol.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\csc.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\cvtres.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\dfsvc.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\dw20.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\IEExec.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ilasm.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallUtil.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\jsc.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\Ldr64.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\MSBuild.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ngen.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\RegAsm.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\RegSvcs.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\vbc.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\ComSvcConfig.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\ServiceModelReg.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMConfigInstaller.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\WsatConfig.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\XamlViewer\XamlViewer_v0300.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v3.5\AddInProcess.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v3.5\AddInProcess32.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v3.5\AddInUtil.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v3.5\csc.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v3.5\DataSvcUtil.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v3.5\EdmGen.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v3.5\MSBuild.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v3.5\vbc.exe:Zone.Identifier
C:\Windows\Microsoft.NET\Framework64\v3.5\WFServicesReg.exe:Zone.Identifier
C:\Windows\notepad.exe:Zone.Identifier
C:\Windows\regedit.exe:Zone.Identifier
C:\Windows\servicing\GC64\tzupd.exe:Zone.Identifier
C:\Windows\servicing\TrustedInstaller.exe:Zone.Identifier
C:\Windows\SoftwareDistribution\Download\d15ded8bfcbfdb16b91c1ef257f53514\amd64_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.1.7601.17750_none_519c57f2346c64dd\aspnet_wp.exe:Zone.Identifier
C:\Windows\SoftwareDistribution\Download\d15ded8bfcbfdb16b91c1ef257f53514\amd64_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.1.7601.21884_none_3ad156f04e11776c\aspnet_wp.exe:Zone.Identifier
C:\Windows\SoftwareDistribution\Download\d15ded8bfcbfdb16b91c1ef257f53514\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.1.7601.17750_none_99498ec948e88de3\aspnet_wp.exe:Zone.Identifier
C:\Windows\SoftwareDistribution\Download\d15ded8bfcbfdb16b91c1ef257f53514\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.1.7601.21884_none_827e8dc7628da072\aspnet_wp.exe:Zone.Identifier
C:\Windows\SoftwareDistribution\SelfUpdate\Handler\WuSetupV.exe:Zone.Identifier
C:\Windows\Speech\Common\sapisvr.exe:Zone.Identifier
C:\Windows\splwow64.exe:Zone.Identifier
C:\Windows\System32\AdapterTroubleshooter.exe:Zone.Identifier
C:\Windows\System32\ARP.EXE:Zone.Identifier
C:\Windows\System32\at.exe:Zone.Identifier
C:\Windows\System32\AtBroker.exe:Zone.Identifier
C:\Windows\System32\attrib.exe:Zone.Identifier
C:\Windows\System32\auditpol.exe:Zone.Identifier
C:\Windows\System32\autochk.exe:Zone.Identifier
C:\Windows\System32\autoconv.exe:Zone.Identifier
C:\Windows\System32\autofmt.exe:Zone.Identifier
C:\Windows\System32\bitsadmin.exe:Zone.Identifier
C:\Windows\System32\bootcfg.exe:Zone.Identifier
C:\Windows\System32\bthudtask.exe:Zone.Identifier
C:\Windows\System32\cacls.exe:Zone.Identifier
C:\Windows\System32\calc.exe:Zone.Identifier
C:\Windows\System32\CertEnrollCtrl.exe:Zone.Identifier
C:\Windows\System32\certreq.exe:Zone.Identifier
C:\Windows\System32\certutil.exe:Zone.Identifier
C:\Windows\System32\charmap.exe:Zone.Identifier
C:\Windows\System32\chkdsk.exe:Zone.Identifier
C:\Windows\System32\chkntfs.exe:Zone.Identifier
C:\Windows\System32\choice.exe:Zone.Identifier
C:\Windows\System32\cipher.exe:Zone.Identifier
C:\Windows\System32\cleanmgr.exe:Zone.Identifier
C:\Windows\System32\cliconfg.exe:Zone.Identifier
C:\Windows\System32\clip.exe:Zone.Identifier
C:\Windows\System32\cmd.exe:Zone.Identifier
C:\Windows\System32\cmdkey.exe:Zone.Identifier
C:\Windows\System32\cmdl32.exe:Zone.Identifier
C:\Windows\System32\cmmon32.exe:Zone.Identifier
C:\Windows\System32\cmstp.exe:Zone.Identifier
C:\Windows\System32\colorcpl.exe:Zone.Identifier
C:\Windows\System32\com\comrepl.exe:Zone.Identifier
C:\Windows\System32\com\MigRegDB.exe:Zone.Identifier
C:\Windows\System32\comp.exe:Zone.Identifier
C:\Windows\System32\compact.exe:Zone.Identifier
C:\Windows\System32\ComputerDefaults.exe:Zone.Identifier
C:\Windows\System32\control.exe:Zone.Identifier
C:\Windows\System32\convert.exe:Zone.Identifier
C:\Windows\System32\credwiz.exe:Zone.Identifier
C:\Windows\System32\cscript.exe:Zone.Identifier
C:\Windows\System32\ctfmon.exe:Zone.Identifier
C:\Windows\System32\cttune.exe:Zone.Identifier
C:\Windows\System32\cttunesvr.exe:Zone.Identifier
C:\Windows\System32\dccw.exe:Zone.Identifier
C:\Windows\System32\dcomcnfg.exe:Zone.Identifier
C:\Windows\System32\ddodiag.exe:Zone.Identifier
C:\Windows\System32\DevicePairingWizard.exe:Zone.Identifier
C:\Windows\System32\DeviceProperties.exe:Zone.Identifier
C:\Windows\System32\dfrgui.exe:Zone.Identifier
C:\Windows\System32\dialer.exe:Zone.Identifier
C:\Windows\System32\diantz.exe:Zone.Identifier
C:\Windows\System32\diskpart.exe:Zone.Identifier
C:\Windows\System32\diskperf.exe:Zone.Identifier
C:\Windows\System32\diskraid.exe:Zone.Identifier
C:\Windows\System32\Dism\DismHost.exe:Zone.Identifier
C:\Windows\System32\Dism.exe:Zone.Identifier
C:\Windows\System32\DisplaySwitch.exe:Zone.Identifier
C:\Windows\System32\dllhost.exe:Zone.Identifier
C:\Windows\System32\dllhst3g.exe:Zone.Identifier
C:\Windows\System32\dnscacheugc.exe:Zone.Identifier
C:\Windows\System32\doskey.exe:Zone.Identifier
C:\Windows\System32\dpapimig.exe:Zone.Identifier
C:\Windows\System32\DpiScaling.exe:Zone.Identifier
C:\Windows\System32\dplaysvr.exe:Zone.Identifier
C:\Windows\System32\dpnsvr.exe:Zone.Identifier
C:\Windows\System32\driverquery.exe:Zone.Identifier
C:\Windows\System32\DriverStore\FileRepository\brmfcmf.inf_amd64_neutral_67b5984f8e8ff717\BrmfRsmg.exe:Zone.Identifier
C:\Windows\System32\DriverStore\FileRepository\brmfcwia.inf_amd64_neutral_817b8835aed3d6b7\BrmfRsmg.exe:Zone.Identifier
C:\Windows\System32\DriverStore\FileRepository\bth.inf_amd64_neutral_e54666f6a3e5af91\fsquirt.exe:Zone.Identifier
C:\Windows\System32\DriverStore\FileRepository\divacx64.inf_amd64_neutral_fa0f82f024789743\ditrace.exe:Zone.Identifier
C:\Windows\System32\DriverStore\FileRepository\divacx64.inf_amd64_neutral_fa0f82f024789743\xlog.exe:Zone.Identifier
C:\Windows\System32\DriverStore\FileRepository\vboxguest.inf_amd64_neutral_4280cb4491b02ea9\VBoxControl.exe:Zone.Identifier
C:\Windows\System32\DriverStore\FileRepository\vboxguest.inf_amd64_neutral_4280cb4491b02ea9\VBoxTray.exe:Zone.Identifier
C:\Windows\System32\DriverStore\FileRepository\vboxguest.inf_amd64_neutral_8cb556e13a1ba124\VBoxControl.exe:Zone.Identifier
C:\Windows\System32\DriverStore\FileRepository\vboxguest.inf_amd64_neutral_8cb556e13a1ba124\VBoxTray.exe:Zone.Identifier
C:\Windows\System32\DriverStore\FileRepository\wvmic.inf_amd64_neutral_b94eb92e8150fa35\vmicsvc.exe:Zone.Identifier
C:\Windows\System32\drvinst.exe:Zone.Identifier
C:\Windows\System32\dvdplay.exe:Zone.Identifier
C:\Windows\System32\dvdupgrd.exe:Zone.Identifier
C:\Windows\System32\DWWIN.EXE:Zone.Identifier
C:\Windows\System32\dxdiag.exe:Zone.Identifier
C:\Windows\System32\efsui.exe:Zone.Identifier
C:\Windows\System32\EhStorAuthn.exe:Zone.Identifier
C:\Windows\System32\esentutl.exe:Zone.Identifier
C:\Windows\System32\eudcedit.exe:Zone.Identifier
C:\Windows\System32\eventcreate.exe:Zone.Identifier
C:\Windows\System32\eventvwr.exe:Zone.Identifier
C:\Windows\System32\expand.exe:Zone.Identifier
C:\Windows\System32\explorer.exe:Zone.Identifier
C:\Windows\System32\extrac32.exe:Zone.Identifier
C:\Windows\System32\fc.exe:Zone.Identifier
C:\Windows\System32\find.exe:Zone.Identifier
C:\Windows\System32\findstr.exe:Zone.Identifier
C:\Windows\System32\finger.exe:Zone.Identifier
C:\Windows\System32\fixmapi.exe:Zone.Identifier
C:\Windows\System32\fltMC.exe:Zone.Identifier
C:\Windows\System32\fontview.exe:Zone.Identifier
C:\Windows\System32\forfiles.exe:Zone.Identifier
C:\Windows\System32\fsutil.exe:Zone.Identifier
C:\Windows\System32\ftp.exe:Zone.Identifier
C:\Windows\System32\getmac.exe:Zone.Identifier
C:\Windows\System32\gpresult.exe:Zone.Identifier
C:\Windows\System32\gpscript.exe:Zone.Identifier
C:\Windows\System32\gpupdate.exe:Zone.Identifier
C:\Windows\System32\grpconv.exe:Zone.Identifier
C:\Windows\System32\hdwwiz.exe:Zone.Identifier
C:\Windows\System32\help.exe:Zone.Identifier
C:\Windows\System32\hh.exe:Zone.Identifier
C:\Windows\System32\HOSTNAME.EXE:Zone.Identifier
C:\Windows\System32\icacls.exe:Zone.Identifier
C:\Windows\System32\icardagt.exe:Zone.Identifier
C:\Windows\System32\icsunattend.exe:Zone.Identifier
C:\Windows\System32\ieUnatt.exe:Zone.Identifier
C:\Windows\System32\iexpress.exe:Zone.Identifier
C:\Windows\System32\IME\IMEJP10\IMJPDADM.EXE:Zone.Identifier
C:\Windows\System32\IME\IMEJP10\IMJPDCT.EXE:Zone.Identifier
C:\Windows\System32\IME\IMEJP10\IMJPDSVR.EXE:Zone.Identifier
C:\Windows\System32\IME\IMEJP10\IMJPMGR.EXE:Zone.Identifier
C:\Windows\System32\IME\IMEJP10\imjppdmg.exe:Zone.Identifier
C:\Windows\System32\IME\IMEJP10\IMJPUEX.EXE:Zone.Identifier
C:\Windows\System32\IME\IMEJP10\imjpuexc.exe:Zone.Identifier
C:\Windows\System32\IME\IMESC5\IMSCPROP.exe:Zone.Identifier
C:\Windows\System32\IME\IMETC10\IMTCPROP.exe:Zone.Identifier
C:\Windows\System32\IME\shared\IMCCPHR.exe:Zone.Identifier
C:\Windows\System32\IME\shared\IMEPADSV.EXE:Zone.Identifier
C:\Windows\System32\InfDefaultInstall.exe:Zone.Identifier
C:\Windows\System32\InstallShield\setup.exe:Zone.Identifier
C:\Windows\System32\InstallShield\_isdel.exe:Zone.Identifier
C:\Windows\System32\instnm.exe:Zone.Identifier
C:\Windows\System32\ipconfig.exe:Zone.Identifier
C:\Windows\System32\iscsicli.exe:Zone.Identifier
C:\Windows\System32\iscsicpl.exe:Zone.Identifier
C:\Windows\System32\isoburn.exe:Zone.Identifier
C:\Windows\System32\ktmutil.exe:Zone.Identifier
C:\Windows\System32\label.exe:Zone.Identifier
C:\Windows\System32\LocationNotifications.exe:Zone.Identifier
C:\Windows\System32\lodctr.exe:Zone.Identifier
C:\Windows\System32\logman.exe:Zone.Identifier
C:\Windows\System32\Magnify.exe:Zone.Identifier
C:\Windows\System32\makecab.exe:Zone.Identifier
C:\Windows\System32\mcbuilder.exe:Zone.Identifier
C:\Windows\System32\MigAutoPlay.exe:Zone.Identifier
C:\Windows\System32\migwiz\mighost.exe:Zone.Identifier
C:\Windows\System32\migwiz\MigSetup.exe:Zone.Identifier
C:\Windows\System32\migwiz\migwiz.exe:Zone.Identifier
C:\Windows\System32\migwiz\PostMig.exe:Zone.Identifier
C:\Windows\System32\mmc.exe:Zone.Identifier
C:\Windows\System32\mobsync.exe:Zone.Identifier
C:\Windows\System32\mountvol.exe:Zone.Identifier
C:\Windows\System32\MRINFO.EXE:Zone.Identifier
C:\Windows\System32\msdt.exe:Zone.Identifier
C:\Windows\System32\msfeedssync.exe:Zone.Identifier
C:\Windows\System32\mshta.exe:Zone.Identifier
C:\Windows\System32\msiexec.exe:Zone.Identifier
C:\Windows\System32\msinfo32.exe:Zone.Identifier
C:\Windows\System32\mspaint.exe:Zone.Identifier
C:\Windows\System32\msra.exe:Zone.Identifier
C:\Windows\System32\mstsc.exe:Zone.Identifier
C:\Windows\System32\mtstocom.exe:Zone.Identifier
C:\Windows\System32\MuiUnattend.exe:Zone.Identifier
C:\Windows\System32\NAPSTAT.EXE:Zone.Identifier
C:\Windows\System32\ndadmin.exe:Zone.Identifier
C:\Windows\System32\net.exe:Zone.Identifier
C:\Windows\System32\net1.exe:Zone.Identifier
C:\Windows\System32\netbtugc.exe:Zone.Identifier
C:\Windows\System32\netiougc.exe:Zone.Identifier
C:\Windows\System32\Netplwiz.exe:Zone.Identifier
C:\Windows\System32\netsh.exe:Zone.Identifier
C:\Windows\System32\NETSTAT.EXE:Zone.Identifier
C:\Windows\System32\newdev.exe:Zone.Identifier
C:\Windows\System32\notepad.exe:Zone.Identifier
C:\Windows\System32\nslookup.exe:Zone.Identifier
C:\Windows\System32\ntkrnlpa.exe:Zone.Identifier
C:\Windows\System32\ntoskrnl.exe:Zone.Identifier
C:\Windows\System32\ntprint.exe:Zone.Identifier
C:\Windows\System32\ocsetup.exe:Zone.Identifier
C:\Windows\System32\odbcad32.exe:Zone.Identifier
C:\Windows\System32\odbcconf.exe:Zone.Identifier
C:\Windows\System32\openfiles.exe:Zone.Identifier
C:\Windows\System32\OptionalFeatures.exe:Zone.Identifier
C:\Windows\System32\osk.exe:Zone.Identifier
C:\Windows\System32\PATHPING.EXE:Zone.Identifier
C:\Windows\System32\pcaui.exe:Zone.Identifier
C:\Windows\System32\perfhost.exe:Zone.Identifier
C:\Windows\System32\perfmon.exe:Zone.Identifier
C:\Windows\System32\PING.EXE:Zone.Identifier
C:\Windows\System32\PkgMgr.exe:Zone.Identifier
C:\Windows\System32\poqexec.exe:Zone.Identifier
C:\Windows\System32\powercfg.exe:Zone.Identifier
C:\Windows\System32\PresentationHost.exe:Zone.Identifier
C:\Windows\System32\prevhost.exe:Zone.Identifier
C:\Windows\System32\print.exe:Zone.Identifier
C:\Windows\System32\printui.exe:Zone.Identifier
C:\Windows\System32\proquota.exe:Zone.Identifier
C:\Windows\System32\psr.exe:Zone.Identifier
C:\Windows\System32\PushPrinterConnections.exe:Zone.Identifier
C:\Windows\System32\rasautou.exe:Zone.Identifier
C:\Windows\System32\rasdial.exe:Zone.Identifier
C:\Windows\System32\raserver.exe:Zone.Identifier
C:\Windows\System32\rasphone.exe:Zone.Identifier
C:\Windows\System32\rdrleakdiag.exe:Zone.Identifier
C:\Windows\System32\ReAgentc.exe:Zone.Identifier
C:\Windows\System32\recover.exe:Zone.Identifier
C:\Windows\System32\reg.exe:Zone.Identifier
C:\Windows\System32\regedit.exe:Zone.Identifier
C:\Windows\System32\regedt32.exe:Zone.Identifier
C:\Windows\System32\regini.exe:Zone.Identifier
C:\Windows\System32\RegisterIEPKEYs.exe:Zone.Identifier
C:\Windows\System32\regsvr32.exe:Zone.Identifier
C:\Windows\System32\rekeywiz.exe:Zone.Identifier
C:\Windows\System32\relog.exe:Zone.Identifier
C:\Windows\System32\replace.exe:Zone.Identifier
C:\Windows\System32\resmon.exe:Zone.Identifier
C:\Windows\System32\RMActivate.exe:Zone.Identifier
C:\Windows\System32\RMActivate_isv.exe:Zone.Identifier
C:\Windows\System32\RMActivate_ssp.exe:Zone.Identifier
C:\Windows\System32\RMActivate_ssp_isv.exe:Zone.Identifier
C:\Windows\System32\RmClient.exe:Zone.Identifier
C:\Windows\System32\Robocopy.exe:Zone.Identifier
C:\Windows\System32\ROUTE.EXE:Zone.Identifier
C:\Windows\System32\RpcPing.exe:Zone.Identifier
C:\Windows\System32\runas.exe:Zone.Identifier
C:\Windows\System32\rundll32.exe:Zone.Identifier
C:\Windows\System32\RunLegacyCPLElevated.exe:Zone.Identifier
C:\Windows\System32\runonce.exe:Zone.Identifier
C:\Windows\System32\sbunattend.exe:Zone.Identifier
C:\Windows\System32\sc.exe:Zone.Identifier
C:\Windows\System32\schtasks.exe:Zone.Identifier
C:\Windows\System32\sdbinst.exe:Zone.Identifier
C:\Windows\System32\sdchange.exe:Zone.Identifier
C:\Windows\System32\sdiagnhost.exe:Zone.Identifier
C:\Windows\System32\SearchFilterHost.exe:Zone.Identifier
C:\Windows\System32\SearchIndexer.exe:Zone.Identifier
C:\Windows\System32\SearchProtocolHost.exe:Zone.Identifier
C:\Windows\System32\SecEdit.exe:Zone.Identifier
C:\Windows\System32\secinit.exe:Zone.Identifier
C:\Windows\System32\sethc.exe:Zone.Identifier
C:\Windows\System32\SetIEInstalledDate.exe:Zone.Identifier
C:\Windows\System32\setup16.exe:Zone.Identifier
C:\Windows\System32\setupSNK.exe:Zone.Identifier
C:\Windows\System32\setupugc.exe:Zone.Identifier
C:\Windows\System32\setx.exe:Zone.Identifier
C:\Windows\System32\sfc.exe:Zone.Identifier
C:\Windows\System32\shrpubw.exe:Zone.Identifier
C:\Windows\System32\shutdown.exe:Zone.Identifier
C:\Windows\System32\SndVol.exe:Zone.Identifier
C:\Windows\System32\sort.exe:Zone.Identifier
C:\Windows\System32\srdelayed.exe:Zone.Identifier
C:\Windows\System32\subst.exe:Zone.Identifier
C:\Windows\System32\svchost.exe:Zone.Identifier
C:\Windows\System32\sxstrace.exe:Zone.Identifier
C:\Windows\System32\SyncHost.exe:Zone.Identifier
C:\Windows\System32\syskey.exe:Zone.Identifier
C:\Windows\System32\systeminfo.exe:Zone.Identifier
C:\Windows\System32\SystemPropertiesAdvanced.exe:Zone.Identifier
C:\Windows\System32\SystemPropertiesComputerName.exe:Zone.Identifier
C:\Windows\System32\SystemPropertiesDataExecutionPrevention.exe:Zone.Identifier
C:\Windows\System32\SystemPropertiesHardware.exe:Zone.Identifier
C:\Windows\System32\SystemPropertiesPerformance.exe:Zone.Identifier
C:\Windows\System32\SystemPropertiesProtection.exe:Zone.Identifier
C:\Windows\System32\SystemPropertiesRemote.exe:Zone.Identifier
C:\Windows\System32\systray.exe:Zone.Identifier
C:\Windows\System32\takeown.exe:Zone.Identifier
C:\Windows\System32\TapiUnattend.exe:Zone.Identifier
C:\Windows\System32\taskeng.exe:Zone.Identifier
C:\Windows\System32\taskkill.exe:Zone.Identifier
C:\Windows\System32\tasklist.exe:Zone.Identifier
C:\Windows\System32\taskmgr.exe:Zone.Identifier
C:\Windows\System32\tcmsetup.exe:Zone.Identifier
C:\Windows\System32\TCPSVCS.EXE:Zone.Identifier
C:\Windows\System32\timeout.exe:Zone.Identifier
C:\Windows\System32\TpmInit.exe:Zone.Identifier
C:\Windows\System32\tracerpt.exe:Zone.Identifier
C:\Windows\System32\TRACERT.EXE:Zone.Identifier
C:\Windows\System32\TSTheme.exe:Zone.Identifier
C:\Windows\System32\TsWpfWrp.exe:Zone.Identifier
C:\Windows\System32\typeperf.exe:Zone.Identifier
C:\Windows\System32\tzutil.exe:Zone.Identifier
C:\Windows\System32\unlodctr.exe:Zone.Identifier
C:\Windows\System32\upnpcont.exe:Zone.Identifier
C:\Windows\System32\user.exe:Zone.Identifier
C:\Windows\System32\UserAccountControlSettings.exe:Zone.Identifier
C:\Windows\System32\userinit.exe:Zone.Identifier
C:\Windows\System32\Utilman.exe:Zone.Identifier
C:\Windows\System32\verclsid.exe:Zone.Identifier
C:\Windows\System32\verifier.exe:Zone.Identifier
C:\Windows\System32\vssadmin.exe:Zone.Identifier
C:\Windows\System32\w32tm.exe:Zone.Identifier
C:\Windows\System32\waitfor.exe:Zone.Identifier
C:\Windows\System32\wbem\mofcomp.exe:Zone.Identifier
C:\Windows\System32\wbem\WinMgmt.exe:Zone.Identifier
C:\Windows\System32\wbem\WMIADAP.exe:Zone.Identifier
C:\Windows\System32\wbem\WMIC.exe:Zone.Identifier
C:\Windows\System32\wbem\WmiPrvSE.exe:Zone.Identifier
C:\Windows\System32\wecutil.exe:Zone.Identifier
C:\Windows\System32\WerFault.exe:Zone.Identifier
C:\Windows\System32\WerFaultSecure.exe:Zone.Identifier
C:\Windows\System32\wermgr.exe:Zone.Identifier
C:\Windows\System32\wevtutil.exe:Zone.Identifier
C:\Windows\System32\wextract.exe:Zone.Identifier
C:\Windows\System32\where.exe:Zone.Identifier
C:\Windows\System32\whoami.exe:Zone.Identifier
C:\Windows\System32\wiaacmgr.exe:Zone.Identifier
C:\Windows\System32\wimserv.exe:Zone.Identifier
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe:Zone.Identifier
C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe:Zone.Identifier
C:\Windows\System32\wininit.exe:Zone.Identifier
C:\Windows\System32\winrs.exe:Zone.Identifier
C:\Windows\System32\winrshost.exe:Zone.Identifier
C:\Windows\System32\winver.exe:Zone.Identifier
C:\Windows\System32\wlanext.exe:Zone.Identifier
C:\Windows\System32\wowreg32.exe:Zone.Identifier
C:\Windows\System32\write.exe:Zone.Identifier
C:\Windows\System32\wscript.exe:Zone.Identifier
C:\Windows\System32\WSManHTTPConfig.exe:Zone.Identifier
C:\Windows\System32\wsmprovhost.exe:Zone.Identifier
C:\Windows\System32\wuapp.exe:Zone.Identifier
C:\Windows\System32\wusa.exe:Zone.Identifier
C:\Windows\System32\xcopy.exe:Zone.Identifier
C:\Windows\System32\xpsrchvw.exe:Zone.Identifier
C:\Windows\System32\xwizard.exe:Zone.Identifier
C:\Windows\SysWOW64\AdapterTroubleshooter.exe:Zone.Identifier
C:\Windows\SysWOW64\ARP.EXE:Zone.Identifier
C:\Windows\SysWOW64\at.exe:Zone.Identifier
C:\Windows\SysWOW64\AtBroker.exe:Zone.Identifier
C:\Windows\SysWOW64\attrib.exe:Zone.Identifier
C:\Windows\SysWOW64\auditpol.exe:Zone.Identifier
C:\Windows\SysWOW64\autochk.exe:Zone.Identifier
C:\Windows\SysWOW64\autoconv.exe:Zone.Identifier
C:\Windows\SysWOW64\autofmt.exe:Zone.Identifier
C:\Windows\SysWOW64\bitsadmin.exe:Zone.Identifier
C:\Windows\SysWOW64\bootcfg.exe:Zone.Identifier
C:\Windows\SysWOW64\bthudtask.exe:Zone.Identifier
C:\Windows\SysWOW64\cacls.exe:Zone.Identifier
C:\Windows\SysWOW64\calc.exe:Zone.Identifier
C:\Windows\SysWOW64\CertEnrollCtrl.exe:Zone.Identifier
C:\Windows\SysWOW64\certreq.exe:Zone.Identifier
C:\Windows\SysWOW64\certutil.exe:Zone.Identifier
C:\Windows\SysWOW64\charmap.exe:Zone.Identifier
C:\Windows\SysWOW64\chkdsk.exe:Zone.Identifier
C:\Windows\SysWOW64\chkntfs.exe:Zone.Identifier
C:\Windows\SysWOW64\choice.exe:Zone.Identifier
C:\Windows\SysWOW64\cipher.exe:Zone.Identifier
C:\Windows\SysWOW64\cleanmgr.exe:Zone.Identifier
C:\Windows\SysWOW64\cliconfg.exe:Zone.Identifier
C:\Windows\SysWOW64\clip.exe:Zone.Identifier
C:\Windows\SysWOW64\cmd.exe:Zone.Identifier
C:\Windows\SysWOW64\cmdkey.exe:Zone.Identifier
C:\Windows\SysWOW64\cmdl32.exe:Zone.Identifier
C:\Windows\SysWOW64\cmmon32.exe:Zone.Identifier
C:\Windows\SysWOW64\cmstp.exe:Zone.Identifier
C:\Windows\SysWOW64\colorcpl.exe:Zone.Identifier
C:\Windows\SysWOW64\com\comrepl.exe:Zone.Identifier
C:\Windows\SysWOW64\com\MigRegDB.exe:Zone.Identifier
C:\Windows\SysWOW64\comp.exe:Zone.Identifier
C:\Windows\SysWOW64\compact.exe:Zone.Identifier
C:\Windows\SysWOW64\ComputerDefaults.exe:Zone.Identifier
C:\Windows\SysWOW64\control.exe:Zone.Identifier
C:\Windows\SysWOW64\convert.exe:Zone.Identifier
C:\Windows\SysWOW64\credwiz.exe:Zone.Identifier
C:\Windows\SysWOW64\cscript.exe:Zone.Identifier
C:\Windows\SysWOW64\ctfmon.exe:Zone.Identifier
C:\Windows\SysWOW64\cttune.exe:Zone.Identifier
C:\Windows\SysWOW64\cttunesvr.exe:Zone.Identifier
C:\Windows\SysWOW64\dccw.exe:Zone.Identifier
C:\Windows\SysWOW64\dcomcnfg.exe:Zone.Identifier
C:\Windows\SysWOW64\ddodiag.exe:Zone.Identifier
C:\Windows\SysWOW64\DevicePairingWizard.exe:Zone.Identifier
C:\Windows\SysWOW64\DeviceProperties.exe:Zone.Identifier
C:\Windows\SysWOW64\dfrgui.exe:Zone.Identifier
C:\Windows\SysWOW64\dialer.exe:Zone.Identifier
C:\Windows\SysWOW64\diantz.exe:Zone.Identifier
C:\Windows\SysWOW64\diskpart.exe:Zone.Identifier
C:\Windows\SysWOW64\diskperf.exe:Zone.Identifier
C:\Windows\SysWOW64\diskraid.exe:Zone.Identifier
C:\Windows\SysWOW64\Dism\DismHost.exe:Zone.Identifier
C:\Windows\SysWOW64\Dism.exe:Zone.Identifier
C:\Windows\SysWOW64\DisplaySwitch.exe:Zone.Identifier
C:\Windows\SysWOW64\dllhost.exe:Zone.Identifier
C:\Windows\SysWOW64\dllhst3g.exe:Zone.Identifier
C:\Windows\SysWOW64\dnscacheugc.exe:Zone.Identifier
C:\Windows\SysWOW64\doskey.exe:Zone.Identifier
C:\Windows\SysWOW64\dpapimig.exe:Zone.Identifier
C:\Windows\SysWOW64\DpiScaling.exe:Zone.Identifier
C:\Windows\SysWOW64\dplaysvr.exe:Zone.Identifier
C:\Windows\SysWOW64\dpnsvr.exe:Zone.Identifier
C:\Windows\SysWOW64\driverquery.exe:Zone.Identifier
C:\Windows\SysWOW64\drvinst.exe:Zone.Identifier
C:\Windows\SysWOW64\dvdplay.exe:Zone.Identifier
C:\Windows\SysWOW64\dvdupgrd.exe:Zone.Identifier
C:\Windows\SysWOW64\DWWIN.EXE:Zone.Identifier
C:\Windows\SysWOW64\dxdiag.exe:Zone.Identifier
C:\Windows\SysWOW64\efsui.exe:Zone.Identifier
C:\Windows\SysWOW64\EhStorAuthn.exe:Zone.Identifier
C:\Windows\SysWOW64\esentutl.exe:Zone.Identifier
C:\Windows\SysWOW64\eudcedit.exe:Zone.Identifier
C:\Windows\SysWOW64\eventcreate.exe:Zone.Identifier
C:\Windows\SysWOW64\eventvwr.exe:Zone.Identifier
C:\Windows\SysWOW64\expand.exe:Zone.Identifier
C:\Windows\SysWOW64\explorer.exe:Zone.Identifier
C:\Windows\SysWOW64\extrac32.exe:Zone.Identifier
C:\Windows\SysWOW64\fc.exe:Zone.Identifier
C:\Windows\SysWOW64\find.exe:Zone.Identifier
C:\Windows\SysWOW64\findstr.exe:Zone.Identifier
C:\Windows\SysWOW64\finger.exe:Zone.Identifier
C:\Windows\SysWOW64\fixmapi.exe:Zone.Identifier
C:\Windows\SysWOW64\fltMC.exe:Zone.Identifier
C:\Windows\SysWOW64\fontview.exe:Zone.Identifier
C:\Windows\SysWOW64\forfiles.exe:Zone.Identifier
C:\Windows\SysWOW64\fsutil.exe:Zone.Identifier
C:\Windows\SysWOW64\ftp.exe:Zone.Identifier
C:\Windows\SysWOW64\getmac.exe:Zone.Identifier
C:\Windows\SysWOW64\gpresult.exe:Zone.Identifier
C:\Windows\SysWOW64\gpscript.exe:Zone.Identifier
C:\Windows\SysWOW64\gpupdate.exe:Zone.Identifier
C:\Windows\SysWOW64\grpconv.exe:Zone.Identifier
C:\Windows\SysWOW64\hdwwiz.exe:Zone.Identifier
C:\Windows\SysWOW64\help.exe:Zone.Identifier
C:\Windows\SysWOW64\hh.exe:Zone.Identifier
C:\Windows\SysWOW64\HOSTNAME.EXE:Zone.Identifier
C:\Windows\SysWOW64\icacls.exe:Zone.Identifier
C:\Windows\SysWOW64\icardagt.exe:Zone.Identifier
C:\Windows\SysWOW64\icsunattend.exe:Zone.Identifier
C:\Windows\SysWOW64\ieUnatt.exe:Zone.Identifier
C:\Windows\SysWOW64\iexpress.exe:Zone.Identifier
C:\Windows\SysWOW64\IME\IMEJP10\IMJPDADM.EXE:Zone.Identifier
C:\Windows\SysWOW64\IME\IMEJP10\IMJPDCT.EXE:Zone.Identifier
C:\Windows\SysWOW64\IME\IMEJP10\IMJPDSVR.EXE:Zone.Identifier
C:\Windows\SysWOW64\IME\IMEJP10\IMJPMGR.EXE:Zone.Identifier
C:\Windows\SysWOW64\IME\IMEJP10\imjppdmg.exe:Zone.Identifier
C:\Windows\SysWOW64\IME\IMEJP10\IMJPUEX.EXE:Zone.Identifier
C:\Windows\SysWOW64\IME\IMEJP10\imjpuexc.exe:Zone.Identifier
C:\Windows\SysWOW64\IME\IMESC5\IMSCPROP.exe:Zone.Identifier
C:\Windows\SysWOW64\IME\IMETC10\IMTCPROP.exe:Zone.Identifier
C:\Windows\SysWOW64\IME\shared\IMCCPHR.exe:Zone.Identifier
C:\Windows\SysWOW64\IME\shared\IMEPADSV.EXE:Zone.Identifier
C:\Windows\SysWOW64\InfDefaultInstall.exe:Zone.Identifier
C:\Windows\SysWOW64\InstallShield\setup.exe:Zone.Identifier
C:\Windows\SysWOW64\InstallShield\_isdel.exe:Zone.Identifier
C:\Windows\SysWOW64\instnm.exe:Zone.Identifier
C:\Windows\SysWOW64\ipconfig.exe:Zone.Identifier
C:\Windows\SysWOW64\iscsicli.exe:Zone.Identifier
C:\Windows\SysWOW64\iscsicpl.exe:Zone.Identifier
C:\Windows\SysWOW64\isoburn.exe:Zone.Identifier
C:\Windows\SysWOW64\ktmutil.exe:Zone.Identifier
C:\Windows\SysWOW64\label.exe:Zone.Identifier
C:\Windows\SysWOW64\LocationNotifications.exe:Zone.Identifier
C:\Windows\SysWOW64\lodctr.exe:Zone.Identifier
C:\Windows\SysWOW64\logman.exe:Zone.Identifier
C:\Windows\SysWOW64\Magnify.exe:Zone.Identifier
C:\Windows\SysWOW64\makecab.exe:Zone.Identifier
C:\Windows\SysWOW64\mcbuilder.exe:Zone.Identifier
C:\Windows\SysWOW64\MigAutoPlay.exe:Zone.Identifier
C:\Windows\SysWOW64\migwiz\mighost.exe:Zone.Identifier
C:\Windows\SysWOW64\migwiz\MigSetup.exe:Zone.Identifier
C:\Windows\SysWOW64\migwiz\migwiz.exe:Zone.Identifier
C:\Windows\SysWOW64\migwiz\PostMig.exe:Zone.Identifier
C:\Windows\SysWOW64\mmc.exe:Zone.Identifier
C:\Windows\SysWOW64\mobsync.exe:Zone.Identifier
C:\Windows\SysWOW64\mountvol.exe:Zone.Identifier
C:\Windows\SysWOW64\MRINFO.EXE:Zone.Identifier
C:\Windows\SysWOW64\msdt.exe:Zone.Identifier
C:\Windows\SysWOW64\msfeedssync.exe:Zone.Identifier
C:\Windows\SysWOW64\mshta.exe:Zone.Identifier
C:\Windows\SysWOW64\msiexec.exe:Zone.Identifier
C:\Windows\SysWOW64\msinfo32.exe:Zone.Identifier
C:\Windows\SysWOW64\mspaint.exe:Zone.Identifier
C:\Windows\SysWOW64\msra.exe:Zone.Identifier
C:\Windows\SysWOW64\mstsc.exe:Zone.Identifier
C:\Windows\SysWOW64\mtstocom.exe:Zone.Identifier
C:\Windows\SysWOW64\MuiUnattend.exe:Zone.Identifier
C:\Windows\SysWOW64\NAPSTAT.EXE:Zone.Identifier
C:\Windows\SysWOW64\ndadmin.exe:Zone.Identifier
C:\Windows\SysWOW64\net.exe:Zone.Identifier
C:\Windows\SysWOW64\net1.exe:Zone.Identifier
C:\Windows\SysWOW64\netbtugc.exe:Zone.Identifier
C:\Windows\SysWOW64\netiougc.exe:Zone.Identifier
C:\Windows\SysWOW64\Netplwiz.exe:Zone.Identifier
C:\Windows\SysWOW64\netsh.exe:Zone.Identifier
C:\Windows\SysWOW64\NETSTAT.EXE:Zone.Identifier
C:\Windows\SysWOW64\newdev.exe:Zone.Identifier
C:\Windows\SysWOW64\notepad.exe:Zone.Identifier
C:\Windows\SysWOW64\nslookup.exe:Zone.Identifier
C:\Windows\SysWOW64\ntkrnlpa.exe:Zone.Identifier
C:\Windows\SysWOW64\ntoskrnl.exe:Zone.Identifier
C:\Windows\SysWOW64\ntprint.exe:Zone.Identifier
C:\Windows\SysWOW64\ocsetup.exe:Zone.Identifier
C:\Windows\SysWOW64\odbcad32.exe:Zone.Identifier
C:\Windows\SysWOW64\odbcconf.exe:Zone.Identifier
C:\Windows\SysWOW64\openfiles.exe:Zone.Identifier
C:\Windows\SysWOW64\OptionalFeatures.exe:Zone.Identifier
C:\Windows\SysWOW64\osk.exe:Zone.Identifier
C:\Windows\SysWOW64\PATHPING.EXE:Zone.Identifier
C:\Windows\SysWOW64\pcaui.exe:Zone.Identifier
C:\Windows\SysWOW64\perfhost.exe:Zone.Identifier
C:\Windows\SysWOW64\perfmon.exe:Zone.Identifier
C:\Windows\SysWOW64\PING.EXE:Zone.Identifier
C:\Windows\SysWOW64\PkgMgr.exe:Zone.Identifier
C:\Windows\SysWOW64\poqexec.exe:Zone.Identifier
C:\Windows\SysWOW64\powercfg.exe:Zone.Identifier
C:\Windows\SysWOW64\PresentationHost.exe:Zone.Identifier
C:\Windows\SysWOW64\prevhost.exe:Zone.Identifier
C:\Windows\SysWOW64\print.exe:Zone.Identifier
C:\Windows\SysWOW64\printui.exe:Zone.Identifier
C:\Windows\SysWOW64\proquota.exe:Zone.Identifier
C:\Windows\SysWOW64\psr.exe:Zone.Identifier
C:\Windows\SysWOW64\PushPrinterConnections.exe:Zone.Identifier
C:\Windows\SysWOW64\rasautou.exe:Zone.Identifier
C:\Windows\SysWOW64\rasdial.exe:Zone.Identifier
C:\Windows\SysWOW64\raserver.exe:Zone.Identifier
C:\Windows\SysWOW64\rasphone.exe:Zone.Identifier
C:\Windows\SysWOW64\rdrleakdiag.exe:Zone.Identifier
C:\Windows\SysWOW64\ReAgentc.exe:Zone.Identifier
C:\Windows\SysWOW64\recover.exe:Zone.Identifier
C:\Windows\SysWOW64\reg.exe:Zone.Identifier
C:\Windows\SysWOW64\regedit.exe:Zone.Identifier
C:\Windows\SysWOW64\regedt32.exe:Zone.Identifier
C:\Windows\SysWOW64\regini.exe:Zone.Identifier
C:\Windows\SysWOW64\RegisterIEPKEYs.exe:Zone.Identifier
C:\Windows\SysWOW64\regsvr32.exe:Zone.Identifier
C:\Windows\SysWOW64\rekeywiz.exe:Zone.Identifier
C:\Windows\SysWOW64\relog.exe:Zone.Identifier
C:\Windows\SysWOW64\replace.exe:Zone.Identifier
C:\Windows\SysWOW64\resmon.exe:Zone.Identifier
C:\Windows\SysWOW64\RMActivate.exe:Zone.Identifier
C:\Windows\SysWOW64\RMActivate_isv.exe:Zone.Identifier
C:\Windows\SysWOW64\RMActivate_ssp.exe:Zone.Identifier
C:\Windows\SysWOW64\RMActivate_ssp_isv.exe:Zone.Identifier
C:\Windows\SysWOW64\RmClient.exe:Zone.Identifier
C:\Windows\SysWOW64\Robocopy.exe:Zone.Identifier
C:\Windows\SysWOW64\ROUTE.EXE:Zone.Identifier
C:\Windows\SysWOW64\RpcPing.exe:Zone.Identifier
C:\Windows\SysWOW64\runas.exe:Zone.Identifier
C:\Windows\SysWOW64\rundll32.exe:Zone.Identifier
C:\Windows\SysWOW64\RunLegacyCPLElevated.exe:Zone.Identifier
C:\Windows\SysWOW64\runonce.exe:Zone.Identifier
C:\Windows\SysWOW64\sbunattend.exe:Zone.Identifier
C:\Windows\SysWOW64\sc.exe:Zone.Identifier
C:\Windows\SysWOW64\schtasks.exe:Zone.Identifier
C:\Windows\SysWOW64\sdbinst.exe:Zone.Identifier
C:\Windows\SysWOW64\sdchange.exe:Zone.Identifier
C:\Windows\SysWOW64\sdiagnhost.exe:Zone.Identifier
C:\Windows\SysWOW64\SearchFilterHost.exe:Zone.Identifier
C:\Windows\SysWOW64\SearchIndexer.exe:Zone.Identifier
C:\Windows\SysWOW64\SearchProtocolHost.exe:Zone.Identifier
C:\Windows\SysWOW64\SecEdit.exe:Zone.Identifier
C:\Windows\SysWOW64\secinit.exe:Zone.Identifier
C:\Windows\SysWOW64\sethc.exe:Zone.Identifier
C:\Windows\SysWOW64\SetIEInstalledDate.exe:Zone.Identifier
C:\Windows\SysWOW64\setup16.exe:Zone.Identifier
C:\Windows\SysWOW64\setupSNK.exe:Zone.Identifier
C:\Windows\SysWOW64\setupugc.exe:Zone.Identifier
C:\Windows\SysWOW64\setx.exe:Zone.Identifier
C:\Windows\SysWOW64\sfc.exe:Zone.Identifier
C:\Windows\SysWOW64\shrpubw.exe:Zone.Identifier
C:\Windows\SysWOW64\shutdown.exe:Zone.Identifier
C:\Windows\SysWOW64\SndVol.exe:Zone.Identifier
C:\Windows\SysWOW64\sort.exe:Zone.Identifier
C:\Windows\SysWOW64\srdelayed.exe:Zone.Identifier
C:\Windows\SysWOW64\subst.exe:Zone.Identifier
C:\Windows\SysWOW64\svchost.exe:Zone.Identifier
C:\Windows\SysWOW64\sxstrace.exe:Zone.Identifier
C:\Windows\SysWOW64\SyncHost.exe:Zone.Identifier
C:\Windows\SysWOW64\syskey.exe:Zone.Identifier
C:\Windows\SysWOW64\systeminfo.exe:Zone.Identifier
C:\Windows\SysWOW64\SystemPropertiesAdvanced.exe:Zone.Identifier
C:\Windows\SysWOW64\SystemPropertiesComputerName.exe:Zone.Identifier
C:\Windows\SysWOW64\SystemPropertiesDataExecutionPrevention.exe:Zone.Identifier
C:\Windows\SysWOW64\SystemPropertiesHardware.exe:Zone.Identifier
C:\Windows\SysWOW64\SystemPropertiesPerformance.exe:Zone.Identifier
C:\Windows\SysWOW64\SystemPropertiesProtection.exe:Zone.Identifier
C:\Windows\SysWOW64\SystemPropertiesRemote.exe:Zone.Identifier
C:\Windows\SysWOW64\systray.exe:Zone.Identifier
C:\Windows\SysWOW64\takeown.exe:Zone.Identifier
C:\Windows\SysWOW64\TapiUnattend.exe:Zone.Identifier
C:\Windows\SysWOW64\taskeng.exe:Zone.Identifier
C:\Windows\SysWOW64\taskkill.exe:Zone.Identifier
C:\Windows\SysWOW64\tasklist.exe:Zone.Identifier
C:\Windows\SysWOW64\taskmgr.exe:Zone.Identifier
C:\Windows\SysWOW64\tcmsetup.exe:Zone.Identifier
C:\Windows\SysWOW64\TCPSVCS.EXE:Zone.Identifier
C:\Windows\SysWOW64\timeout.exe:Zone.Identifier
C:\Windows\SysWOW64\TpmInit.exe:Zone.Identifier
C:\Windows\SysWOW64\tracerpt.exe:Zone.Identifier
C:\Windows\SysWOW64\TRACERT.EXE:Zone.Identifier
C:\Windows\SysWOW64\TSTheme.exe:Zone.Identifier
C:\Windows\SysWOW64\TsWpfWrp.exe:Zone.Identifier
C:\Windows\SysWOW64\typeperf.exe:Zone.Identifier
C:\Windows\SysWOW64\tzutil.exe:Zone.Identifier
C:\Windows\SysWOW64\unlodctr.exe:Zone.Identifier
C:\Windows\SysWOW64\upnpcont.exe:Zone.Identifier
C:\Windows\SysWOW64\user.exe:Zone.Identifier
C:\Windows\SysWOW64\UserAccountControlSettings.exe:Zone.Identifier
C:\Windows\SysWOW64\userinit.exe:Zone.Identifier
C:\Windows\SysWOW64\Utilman.exe:Zone.Identifier
C:\Windows\SysWOW64\verclsid.exe:Zone.Identifier
C:\Windows\SysWOW64\verifier.exe:Zone.Identifier
C:\Windows\SysWOW64\vssadmin.exe:Zone.Identifier
C:\Windows\SysWOW64\w32tm.exe:Zone.Identifier
C:\Windows\SysWOW64\waitfor.exe:Zone.Identifier
C:\Windows\SysWOW64\wbem\mofcomp.exe:Zone.Identifier
C:\Windows\SysWOW64\wbem\WinMgmt.exe:Zone.Identifier
C:\Windows\SysWOW64\wbem\WMIADAP.exe:Zone.Identifier
C:\Windows\SysWOW64\wbem\WMIC.exe:Zone.Identifier
C:\Windows\SysWOW64\wbem\WmiPrvSE.exe:Zone.Identifier
C:\Windows\SysWOW64\wecutil.exe:Zone.Identifier
C:\Windows\SysWOW64\WerFault.exe:Zone.Identifier
C:\Windows\SysWOW64\WerFaultSecure.exe:Zone.Identifier
C:\Windows\SysWOW64\wermgr.exe:Zone.Identifier
C:\Windows\SysWOW64\wevtutil.exe:Zone.Identifier
C:\Windows\SysWOW64\wextract.exe:Zone.Identifier
C:\Windows\SysWOW64\where.exe:Zone.Identifier
C:\Windows\SysWOW64\whoami.exe:Zone.Identifier
C:\Windows\SysWOW64\wiaacmgr.exe:Zone.Identifier
C:\Windows\SysWOW64\wimserv.exe:Zone.Identifier
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe:Zone.Identifier
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe:Zone.Identifier
C:\Windows\SysWOW64\wininit.exe:Zone.Identifier
C:\Windows\SysWOW64\winrs.exe:Zone.Identifier
C:\Windows\SysWOW64\winrshost.exe:Zone.Identifier
C:\Windows\SysWOW64\winver.exe:Zone.Identifier
C:\Windows\SysWOW64\wlanext.exe:Zone.Identifier
C:\Windows\SysWOW64\wowreg32.exe:Zone.Identifier
C:\Windows\SysWOW64\write.exe:Zone.Identifier
C:\Windows\SysWOW64\wscript.exe:Zone.Identifier
C:\Windows\SysWOW64\WSManHTTPConfig.exe:Zone.Identifier
C:\Windows\SysWOW64\wsmprovhost.exe:Zone.Identifier
C:\Windows\SysWOW64\wuapp.exe:Zone.Identifier
C:\Windows\SysWOW64\wusa.exe:Zone.Identifier
C:\Windows\SysWOW64\xcopy.exe:Zone.Identifier
C:\Windows\SysWOW64\xpsrchvw.exe:Zone.Identifier
C:\Windows\SysWOW64\xwizard.exe:Zone.Identifier
C:\Windows\twunk_16.exe:Zone.Identifier
C:\Windows\twunk_32.exe:Zone.Identifier
C:\Windows\winhlp32.exe:Zone.Identifier
C:\Windows\winsxs\amd64_addinprocess32_b77a5c561934e089_6.1.7601.17514_none_df35b5ac03866e22\AddInProcess32.exe:Zone.Identifier
C:\Windows\winsxs\amd64_aspnet_compiler_b03f5f7f11d50a3a_6.1.7600.16385_none_a5a135380060b978\aspnet_compiler.exe:Zone.Identifier
C:\Windows\winsxs\amd64_aspnet_compiler_b03f5f7f11d50a3a_6.1.7601.18410_none_a5769fe600b79680\aspnet_compiler.exe:Zone.Identifier
C:\Windows\winsxs\amd64_aspnet_compiler_b03f5f7f11d50a3a_6.1.7601.22617_none_8ea8598a1a5faa3e\aspnet_compiler.exe:Zone.Identifier
C:\Windows\winsxs\amd64_aspnet_regbrowsers_b03f5f7f11d50a3a_6.1.7600.16385_none_96421d40c0e2903e\aspnet_regbrowsers.exe:Zone.Identifier
C:\Windows\winsxs\amd64_aspnet_regbrowsers_b03f5f7f11d50a3a_6.1.7601.18410_none_961787eec1396d46\aspnet_regbrowsers.exe:Zone.Identifier
C:\Windows\winsxs\amd64_aspnet_regbrowsers_b03f5f7f11d50a3a_6.1.7601.22617_none_7f494192dae18104\aspnet_regbrowsers.exe:Zone.Identifier
C:\Windows\winsxs\amd64_aspnet_regsql_b03f5f7f11d50a3a_6.1.7600.16385_none_dcb42ec76404494f\aspnet_regsql.exe:Zone.Identifier
C:\Windows\winsxs\amd64_aspnet_regsql_b03f5f7f11d50a3a_6.1.7601.18410_none_dc899975645b2657\aspnet_regsql.exe:Zone.Identifier
C:\Windows\winsxs\amd64_aspnet_regsql_b03f5f7f11d50a3a_6.1.7601.22617_none_c5bb53197e033a15\aspnet_regsql.exe:Zone.Identifier
C:\Windows\winsxs\amd64_brmfcmf.inf_31bf3856ad364e35_6.1.7600.16385_none_6f8740b92fea8e01\BrmfRsmg.exe:Zone.Identifier
C:\Windows\winsxs\amd64_brmfcwia.inf_31bf3856ad364e35_6.1.7600.16385_none_11493a3982b640b7\BrmfRsmg.exe:Zone.Identifier
C:\Windows\winsxs\amd64_bth.inf_31bf3856ad364e35_6.1.7601.17514_none_d06ac9aad230c1d6\fsquirt.exe:Zone.Identifier
C:\Windows\winsxs\amd64_caspol_b03f5f7f11d50a3a_6.1.7601.17514_none_f885d1129806720d\CasPol.exe:Zone.Identifier
C:\Windows\winsxs\amd64_caspol_b03f5f7f11d50a3a_6.1.7601.18523_none_f886ea0a98056eea\CasPol.exe:Zone.Identifier
C:\Windows\winsxs\amd64_caspol_b03f5f7f11d50a3a_6.1.7601.22733_none_e1ba4370b1abe898\CasPol.exe:Zone.Identifier
C:\Windows\winsxs\amd64_divacx64.inf_31bf3856ad364e35_6.1.7600.16385_none_cf37cc4c5bc25dc7\ditrace.exe:Zone.Identifier
C:\Windows\winsxs\amd64_divacx64.inf_31bf3856ad364e35_6.1.7600.16385_none_cf37cc4c5bc25dc7\xlog.exe:Zone.Identifier
C:\Windows\winsxs\amd64_eventviewersettings_31bf3856ad364e35_6.1.7600.16385_none_50ecc9ae1d642aa9\eventvwr.exe:Zone.Identifier
C:\Windows\winsxs\amd64_infocard_b77a5c561934e089_6.1.7601.17514_none_583a8c60c0b305a1\infocard.exe:Zone.Identifier
C:\Windows\winsxs\amd64_infocard_b77a5c561934e089_6.1.7601.18523_none_583ba558c0b2027e\infocard.exe:Zone.Identifier
C:\Windows\winsxs\amd64_infocard_b77a5c561934e089_6.1.7601.22733_none_416efebeda587c2c\infocard.exe:Zone.Identifier
C:\Windows\winsxs\amd64_installutil_b03f5f7f11d50a3a_6.1.7601.17514_none_0826be6cc9481df4\InstallUtil.exe:Zone.Identifier
C:\Windows\winsxs\amd64_installutil_b03f5f7f11d50a3a_6.1.7601.18523_none_0827d764c9471ad1\InstallUtil.exe:Zone.Identifier
C:\Windows\winsxs\amd64_installutil_b03f5f7f11d50a3a_6.1.7601.22733_none_f15b30cae2ed947f\InstallUtil.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.1.7600.16385_none_ddf6cb6d7a745cbf\pcaui.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-a..atibility-assistant_31bf3856ad364e35_6.1.7600.16385_none_8fbb77bb3cd808d1\pcalua.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-a..atibility-assistant_31bf3856ad364e35_6.1.7600.16385_none_8fbb77bb3cd808d1\pcawrk.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-a..atibility-assistant_31bf3856ad364e35_6.1.7601.18741_none_91c907e539e1a828\pcalua.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-a..atibility-assistant_31bf3856ad364e35_6.1.7601.18741_none_91c907e539e1a828\pcawrk.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-a..atibility-assistant_31bf3856ad364e35_6.1.7601.22948_none_9259a89c52f8f67a\pcalua.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-a..atibility-assistant_31bf3856ad364e35_6.1.7601.22948_none_9259a89c52f8f67a\pcawrk.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-a..ce-useractionrecord_31bf3856ad364e35_6.1.7600.16385_none_8ee34c400d95f0ab\psr.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-a..ence-infrastructure_31bf3856ad364e35_6.1.7601.17514_none_3337092d63596104\sdbinst.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-a..ime-upgrade-results_31bf3856ad364e35_6.1.7601.17514_none_21de7e134213566a\WindowsAnytimeUpgradeResults.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-a..ion-telemetry-agent_31bf3856ad364e35_6.1.7601.17514_none_3092574c7d41010b\aitagent.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-acluifilefoldercomtool_31bf3856ad364e35_6.1.7600.16385_none_b444164f1eecd3f2\cacls.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-adaptertroubleshooter_31bf3856ad364e35_6.1.7600.16385_none_2df6395b9cf7e9a5\AdapterTroubleshooter.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-alg_31bf3856ad364e35_6.1.7600.16385_none_04de43c774cf8fe3\alg.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-anytime-upgradeui_31bf3856ad364e35_6.1.7600.16385_none_4aadf3be188c056d\WindowsAnytimeUpgradeui.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-anytime-upgrade_31bf3856ad364e35_6.1.7600.16385_none_fb591b6cf023ade3\WindowsAnytimeUpgrade.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.17514_none_b57215bac8c6d647\appidcertstorecheck.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.17514_none_b57215bac8c6d647\appidpolicyconverter.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.18741_none_b54e921cc8e1f204\appidcertstorecheck.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.18741_none_b54e921cc8e1f204\appidpolicyconverter.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22436_none_b5e7f8ade1f2fff4\appidcertstorecheck.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22436_none_b5e7f8ade1f2fff4\appidpolicyconverter.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22653_none_b5cf5bc3e205e61f\appidcertstorecheck.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22653_none_b5cf5bc3e205e61f\appidpolicyconverter.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22921_none_b5edd0a5e1ef5713\appidcertstorecheck.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22921_none_b5edd0a5e1ef5713\appidpolicyconverter.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22923_none_b5efd139e1ed89c1\appidcertstorecheck.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22923_none_b5efd139e1ed89c1\appidpolicyconverter.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22948_none_b5df32d3e1f94056\appidcertstorecheck.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22948_none_b5df32d3e1f94056\appidpolicyconverter.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.23002_none_b60448e9e1de6bca\appidcertstorecheck.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.23002_none_b60448e9e1de6bca\appidpolicyconverter.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-atbroker_31bf3856ad364e35_6.1.7600.16385_none_2b95a17838063e9b\AtBroker.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-at_31bf3856ad364e35_6.1.7600.16385_none_a8f696109d958c5c\at.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-audio-audiocore_31bf3856ad364e35_6.1.7601.17514_none_d4c5c995fb3f4a1b\audiodg.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-audio-audiocore_31bf3856ad364e35_6.1.7601.18619_none_d4cab625fb3adf96\audiodg.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-audio-audiocore_31bf3856ad364e35_6.1.7601.18741_none_d4a245f7fb5a65d8\audiodg.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-audio-audiocore_31bf3856ad364e35_6.1.7601.22826_none_d546840d14634c73\audiodg.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-audio-audiocore_31bf3856ad364e35_6.1.7601.22948_none_d532e6af1471b42a\audiodg.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-audio-volumecontrol_31bf3856ad364e35_6.1.7601.17514_none_244e76d61e1989e5\SndVol.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-authentication-logonui_31bf3856ad364e35_6.1.7601.17514_none_c3b917fd89d834f3\LogonUI.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-autochkconfigurator_31bf3856ad364e35_6.1.7600.16385_none_74b76d3fa1757c6f\chkntfs.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_4019f2b8d860ad30\autochk.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-autofmt_31bf3856ad364e35_6.1.7601.17514_none_441a424cd5cda219\autofmt.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-axinstallservice_31bf3856ad364e35_6.1.7601.17514_none_352b5454878cd498\AxInstUI.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.17514_none_c75e9c99a36a285a\winload.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.17514_none_c75e9c99a36a285a\winresume.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.17556_none_c7355d7da388cacc\winload.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.17556_none_c7355d7da388cacc\winresume.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.18741_none_c73b18fba3854417\winload.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.18741_none_c73b18fba3854417\winresume.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.21655_none_c7bdf9febca7513f\winload.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.21655_none_c7bdf9febca7513f\winresume.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.22921_none_c7da5784bc92a926\winload.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.22921_none_c7da5784bc92a926\winresume.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.22923_none_c7dc5818bc90dbd4\winload.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.22923_none_c7dc5818bc90dbd4\winresume.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.22948_none_c7cbb9b2bc9c9269\winload.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.22948_none_c7cbb9b2bc9c9269\winresume.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.23002_none_c7f0cfc8bc81bddd\winload.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.23002_none_c7f0cfc8bc81bddd\winresume.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-b..iondata-cmdlinetool_31bf3856ad364e35_6.1.7601.17514_none_e6510234bbcb2a8c\bcdedit.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_b94cbfa183466a89\winload.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_b94cbfa183466a89\winresume.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb\winload.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb\winresume.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.18741_none_b9293c0383618646\winload.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.18741_none_b9293c0383618646\winresume.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.21655_none_b9ac1d069c83936e\winload.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.21655_none_b9ac1d069c83936e\winresume.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22921_none_b9c87a8c9c6eeb55\winload.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22921_none_b9c87a8c9c6eeb55\winresume.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22923_none_b9ca7b209c6d1e03\winload.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22923_none_b9ca7b209c6d1e03\winresume.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22948_none_b9b9dcba9c78d498\winload.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22948_none_b9b9dcba9c78d498\winresume.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23002_none_b9def2d09c5e000c\winload.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23002_none_b9def2d09c5e000c\winresume.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-servicing_31bf3856ad364e35_6.1.7601.17514_none_843a86a1bc33fcd1\bfsvc.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-basic-misc-tools_31bf3856ad364e35_6.1.7600.16385_none_7351a917d91c961e\expand.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-bcdboot-cmdlinetool_31bf3856ad364e35_6.1.7601.17514_none_bf7bea0454c3f0cf\bcdboot.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-bits-bitsadmin_31bf3856ad364e35_6.1.7601.17514_none_ab379671230b963f\bitsadmin.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-blb-cli-main_31bf3856ad364e35_6.1.7600.16385_none_a749cec7a8b6bf08\wbadmin.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-blb-engine-main_31bf3856ad364e35_6.1.7601.17514_none_4207fb67165f731a\wbengine.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-bootconfig_31bf3856ad364e35_6.1.7600.16385_none_680b6eb133f91b1b\bootcfg.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-bth-user_31bf3856ad364e35_6.1.7601.17514_none_c33f455aebcd9dbb\bthudtask.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-c..mplus-admin-comrepl_31bf3856ad364e35_6.1.7600.16385_none_45fe6fe8a9201e55\comrepl.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-c..plus-setup-migregdb_31bf3856ad364e35_6.1.7600.16385_none_8945930a7d61b9f0\MigRegDB.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-c..utermanagerlauncher_31bf3856ad364e35_6.1.7600.16385_none_ea0a643b0e032c19\CompMgmtLauncher.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-calc_31bf3856ad364e35_6.1.7600.16385_none_05b2f2e2346cfea4\calc.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-certificaterequesttool_31bf3856ad364e35_6.1.7600.16385_none_c405852b31194b0b\certreq.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-certutil_31bf3856ad364e35_6.1.7600.16385_none_1179f9944d0d9973\certutil.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-certutil_31bf3856ad364e35_6.1.7601.18151_none_137cae6e4a1f65d1\certutil.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-certutil_31bf3856ad364e35_6.1.7601.22322_none_1427bd2d6323c846\certutil.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-charmap_31bf3856ad364e35_6.1.7600.16385_none_4e4eaf05be0c2d8f\charmap.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-chkdsk_31bf3856ad364e35_6.1.7600.16385_none_1ddb4b87a6618437\chkdsk.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-choice_31bf3856ad364e35_6.1.7601.17514_none_218cf07ba262766c\choice.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-cipher_31bf3856ad364e35_6.1.7600.16385_none_090b7101bec9a9e2\cipher.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-cleanmgr_31bf3856ad364e35_6.1.7600.16385_none_c9392808773cd7da\cleanmgr.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-clip_31bf3856ad364e35_6.1.7600.16385_none_03d0d3c435b27637\clip.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-com-complus-setup_31bf3856ad364e35_6.1.7600.16385_none_459ccaf008ff34f6\mtstocom.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-com-complus-ui_31bf3856ad364e35_6.1.7600.16385_none_0c9cb55c61e99805\dcomcnfg.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-com-dtc-runtime_31bf3856ad364e35_6.1.7600.16385_none_7547f48c79b40229\msdtc.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-com-surrogate_31bf3856ad364e35_6.1.7600.16385_none_a018e05d0d33081d\dllhost.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-com-surrogate_31bf3856ad364e35_6.1.7600.16385_none_a018e05d0d33081d\dllhst3g.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-commandlinehelp_31bf3856ad364e35_6.1.7600.16385_none_3020274b22e8a90f\help.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-commandprompt_31bf3856ad364e35_6.1.7601.17514_none_e932cc2c30fc13b0\cmd.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-compact_31bf3856ad364e35_6.1.7600.16385_none_55ea2c71cf438ffc\compact.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-computerdefaults_31bf3856ad364e35_6.1.7600.16385_none_626b9352dcfa715c\ComputerDefaults.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.17514_none_d281ccc018b94ff4\conhost.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.17625_none_d277ff0418c08263\conhost.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.17932_none_d26a33ec18cb49c4\conhost.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.17965_none_d24cc50618e0e99c\conhost.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.18015_none_d282acc418b89129\conhost.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.18229_none_d27be1cc18bd0cc4\conhost.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.18798_none_d22f3b8c18f6a8c7\conhost.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.18847_none_d2644cc418cf00e2\conhost.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.21738_none_d2f9ccc131e38a23\conhost.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.22091_none_d2b1c721321aadf8\conhost.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.22125_none_d30179a331de4ce4\conhost.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.22436_none_d2f7afb331e579a1\conhost.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.22653_none_d2df12c931f85fcc\conhost.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.23002_none_d313ffef31d0e577\conhost.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.23049_none_d2efc24531eb069c\conhost.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-control_31bf3856ad364e35_6.1.7600.16385_none_f560eae4c42edb14\control.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-convert_31bf3856ad364e35_6.1.7601.17514_none_fafb502abef1be40\autoconv.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-convert_31bf3856ad364e35_6.1.7601.17514_none_fafb502abef1be40\convert.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.1.7601.17514_none_d527b0a5438b8346\drvinst.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.1.7601.17621_none_d519e1c143965059\drvinst.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.1.7601.21733_none_d59aaf345cba3ec2\drvinst.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-corruptedfilerecovery_31bf3856ad364e35_6.1.7600.16385_none_e3aea9874278550c\cofire.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-credwiz_31bf3856ad364e35_6.1.7600.16385_none_fbcfa2528586252f\credwiz.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-csrss_31bf3856ad364e35_6.1.7600.16385_none_b4d8d57efdc6b4f3\csrss.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-cttunesvr_31bf3856ad364e35_6.1.7600.16385_none_4befc8eb38093bb1\cttunesvr.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-cttune_31bf3856ad364e35_6.1.7600.16385_none_0f797e18d8361ef2\cttune.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-d..-japanese-migration_31bf3856ad364e35_6.1.7600.16385_none_6a5b38699f97e38d\imjppdmg.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-d..-japanese-utilities_31bf3856ad364e35_6.1.7601.17514_none_4b57445488ba33fd\IMJPDADM.EXE:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-d..-japanese-utilities_31bf3856ad364e35_6.1.7601.17514_none_4b57445488ba33fd\IMJPDCT.EXE:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-d..-japanese-utilities_31bf3856ad364e35_6.1.7601.17514_none_4b57445488ba33fd\IMJPUEX.EXE:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-d..andlinepropertytool_31bf3856ad364e35_6.1.7601.17514_none_696354579779eadf\imjpuexc.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-d..andlinepropertytool_31bf3856ad364e35_6.1.7601.18556_none_6939fe739798a6f2\imjpuexc.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-d..andlinepropertytool_31bf3856ad364e35_6.1.7601.22764_none_69b6cca4b0c02d26\imjpuexc.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-d..ervicing-management_31bf3856ad364e35_6.1.7600.16385_none_ba9e94bf275d71ed\Dism.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-d..frameworks-usermode_31bf3856ad364e35_6.1.7601.17514_none_fb3795fb0be32033\WUDFHost.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_6.1.7601.17514_none_98b24799b5d08c05\IMEPADSV.EXE:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-d..ing-management-core_31bf3856ad364e35_6.1.7601.17514_none_895a2b74415ea575\DismHost.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-d..ostic-user-resolver_31bf3856ad364e35_6.1.7600.16385_none_2129f6bd1f6002ae\DFDWiz.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-d..pwindowmanager-core_31bf3856ad364e35_6.1.7601.17514_none_ebc99983d3d18578\dwm.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-d..s-ime-japanese-core_31bf3856ad364e35_6.1.7600.16385_none_cb604f1aa758e6b6\IMJPDSVR.EXE:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-d..s-ime-japanese-core_31bf3856ad364e35_6.1.7600.16385_none_cb604f1aa758e6b6\IMJPMGR.EXE:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-d..s-ime-japanese-core_31bf3856ad364e35_6.1.7601.18556_none_cd680cfea4662663\IMJPDSVR.EXE:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-d..s-ime-japanese-core_31bf3856ad364e35_6.1.7601.18556_none_cd680cfea4662663\IMJPMGR.EXE:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-d..s-ime-japanese-core_31bf3856ad364e35_6.1.7601.22764_none_cde4db2fbd8dac97\IMJPDSVR.EXE:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-d..s-ime-japanese-core_31bf3856ad364e35_6.1.7601.22764_none_cde4db2fbd8dac97\IMJPMGR.EXE:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-d..x-directxdiagnostic_31bf3856ad364e35_6.1.7601.17514_none_81e99da174638311\dxdiag.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-ddodiag_31bf3856ad364e35_6.1.7600.16385_none_924b83b9b69fb351\ddodiag.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-defrag-adminui_31bf3856ad364e35_6.1.7601.17514_none_f73c142da6e47daa\dfrgui.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-defrag-cmdline_31bf3856ad364e35_6.1.7600.16385_none_2370c162e00680c3\Defrag.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-deployment_31bf3856ad364e35_6.1.7600.16385_none_57e3e87206ff08ca\setupugc.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-devicepairingapp_31bf3856ad364e35_6.1.7600.16385_none_cb9353551bbd8ed8\DevicePairingWizard.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-deviceproperties_31bf3856ad364e35_6.1.7600.16385_none_463f54aa539a0b62\DeviceProperties.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-diantz_31bf3856ad364e35_6.1.7600.16385_none_02bb0612dc529329\diantz.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-directshow-dvdplay_31bf3856ad364e35_6.1.7600.16385_none_5da314d233bb2676\dvdplay.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-directshow-dvdupgrd_31bf3856ad364e35_6.1.7600.16385_none_d9bb586ff6564bbc\dvdupgrd.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-directx-directplay8_31bf3856ad364e35_6.1.7601.17514_none_d6fc8d83d55eb77c\dpnsvr.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-directx-directplay8_31bf3856ad364e35_6.1.7601.17989_none_d6b5e719d592ee62\dpnsvr.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-directx-directplay8_31bf3856ad364e35_6.1.7601.22150_none_d756c930eea0898c\dpnsvr.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-diskpart_31bf3856ad364e35_6.1.7601.17514_none_c6fe6ac9ac8c7105\diskpart.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-diskraid_31bf3856ad364e35_6.1.7601.17514_none_c3afa97fae99bbe4\diskraid.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-dispdiag_31bf3856ad364e35_6.1.7600.16385_none_a0d95afc49c833b6\dispdiag.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-displayswitch_31bf3856ad364e35_6.1.7600.16385_none_48b6a2a03e2c7b21\DisplaySwitch.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-dns-client_31bf3856ad364e35_6.1.7601.17514_none_4008824c98f8edac\dnscacheugc.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-dns-client_31bf3856ad364e35_6.1.7601.17570_none_3fc3a19c992d2ff6\dnscacheugc.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-dns-client_31bf3856ad364e35_6.1.7601.21673_none_40503f45b2481bc5\dnscacheugc.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-dpapi-keys_31bf3856ad364e35_6.1.7600.16385_none_d9c7c4a2e721da7e\dpapimig.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-dpiscaling_31bf3856ad364e35_6.1.7600.16385_none_d63cc4dd74a11d0b\DpiScaling.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-driverquery_31bf3856ad364e35_6.1.7600.16385_none_f217bd1caebaa683\driverquery.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-driververifier_31bf3856ad364e35_6.1.7600.16385_none_1660ccbeb66c6cf1\verifier.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-dxp-deviceexperience_31bf3856ad364e35_6.1.7601.17514_none_a54b31331066c8e2\Dxpserver.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-e..ageengine-utilities_31bf3856ad364e35_6.1.7600.16385_none_3580dea4def227d4\esentutl.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-e..ortingcompatibility_31bf3856ad364e35_6.1.7600.16385_none_5a9496fc0f35b80b\DWWIN.EXE:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-e..otocol-host-service_31bf3856ad364e35_6.1.7600.16385_none_e63ed98817cf16b1\Eap3Host.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-efs-rekeywiz_31bf3856ad364e35_6.1.7600.16385_none_63df9c242588e5fc\rekeywiz.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-efs-ui_31bf3856ad364e35_6.1.7600.16385_none_5269b9a9a14782a8\efsui.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-errorreportingcore_31bf3856ad364e35_6.1.7600.16385_none_7c6ba3bd1f954290\wermgr.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-errorreportingcore_31bf3856ad364e35_6.1.7601.18381_none_7e4dec9f1cbf5d0f\wermgr.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-errorreportingcore_31bf3856ad364e35_6.1.7601.22584_none_7eda8c2e35da4605\wermgr.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-errorreportingfaults_31bf3856ad364e35_6.1.7601.17514_none_ce2d22115368db7a\WerFault.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-errorreportingfaults_31bf3856ad364e35_6.1.7601.17514_none_ce2d22115368db7a\WerFaultSecure.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-es-authentication_31bf3856ad364e35_6.1.7600.16385_none_9db1ae483049e160\EhStorAuthn.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-eudc-settings_31bf3856ad364e35_6.1.7601.17514_none_b84dc938eed78546\eudcsettings.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-eudcedit_31bf3856ad364e35_6.1.7601.17514_none_b7be8a14d61db17a\eudcedit.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-eventcollector_31bf3856ad364e35_6.1.7600.16385_none_5702948e8e63fc30\wecutil.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-eventcreate_31bf3856ad364e35_6.1.7600.16385_none_3157c24b5944e2a3\eventcreate.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-eventlog-commandline_31bf3856ad364e35_6.1.7600.16385_none_1cc9274696810e2f\wevtutil.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-extrac32_31bf3856ad364e35_6.1.7600.16385_none_371e8c461d966a55\extrac32.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-f..client-applications_31bf3856ad364e35_6.1.7601.17514_none_d71fb1d63f05ef22\FXSCOVER.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-f..client-applications_31bf3856ad364e35_6.1.7601.17514_none_d71fb1d63f05ef22\WFS.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-f..client-applications_31bf3856ad364e35_6.1.7601.17559_none_d6f973983f21dd99\FXSCOVER.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-f..client-applications_31bf3856ad364e35_6.1.7601.17559_none_d6f973983f21dd99\WFS.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-f..client-applications_31bf3856ad364e35_6.1.7601.21659_none_d7831063583f7d63\FXSCOVER.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-f..client-applications_31bf3856ad364e35_6.1.7601.21659_none_d7831063583f7d63\WFS.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-f..temcompareutilities_31bf3856ad364e35_6.1.7600.16385_none_5cbb962a4f0d58c1\comp.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-f..temcompareutilities_31bf3856ad364e35_6.1.7600.16385_none_5cbb962a4f0d58c1\fc.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-fax-service_31bf3856ad364e35_6.1.7601.17514_none_0b499f2c96e8f6b2\FXSSVC.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-fax-service_31bf3856ad364e35_6.1.7601.17514_none_0b499f2c96e8f6b2\FXSUNATD.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-fdddo_31bf3856ad364e35_6.1.7600.16385_none_b0de2afe4ca7a1e2\DeviceDisplayObjectProvider.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-filtermanager-utils_31bf3856ad364e35_6.1.7600.16385_none_7582a4a93f08b488\fltMC.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-findstr_31bf3856ad364e35_6.1.7601.17514_none_855590d1705431c5\findstr.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-fontview_31bf3856ad364e35_6.1.7600.16385_none_a058fee6d0280cab\fontview.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-forfiles_31bf3856ad364e35_6.1.7600.16385_none_b1186146f739d0f1\forfiles.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-fsutil_31bf3856ad364e35_6.1.7600.16385_none_28590620099da2d8\fsutil.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-ftp_31bf3856ad364e35_6.1.7601.17514_none_0b11635f6f2987f7\ftp.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-g..policy-cmdlinetools_31bf3856ad364e35_6.1.7600.16385_none_975df0a6f5a54628\gpresult.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-g..policy-cmdlinetools_31bf3856ad364e35_6.1.7600.16385_none_975df0a6f5a54628\gpupdate.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-g..validatefntcache-03_31bf3856ad364e35_6.1.7600.17057_none_a4e55ed934239d78\invalidateFntcache.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-g..validatefntcache-03_31bf3856ad364e35_6.1.7600.21258_none_a56ffdd44d4053c0\invalidateFntcache.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-g..validatefntcache-03_31bf3856ad364e35_6.1.7601.17888_none_a6ac762931614073\invalidateFntcache.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-g..validatefntcache-03_31bf3856ad364e35_6.1.7601.22045_none_a75e29e84a6157b6\invalidateFntcache.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-gc-usbforcereboot_31bf3856ad364e35_6.1.7601.18328_none_92f16c0a70dcfacc\UsbForceReboot.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-gc-usbforcereboot_31bf3856ad364e35_6.1.7601.22526_none_93790a2789fc650f\UsbForceReboot.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-getmac_31bf3856ad364e35_6.1.7600.16385_none_67f38861bbac1910\getmac.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-gettingstarted_31bf3856ad364e35_6.1.7600.16385_none_dc7256ed0ded6c12\GettingStarted.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-gpowershell-exe_31bf3856ad364e35_6.1.7600.16385_none_94861149bb66249c\powershell_ise.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-grouppolicy-script_31bf3856ad364e35_6.1.7600.16385_none_c10c2a29895d4994\gpscript.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-grpconv_31bf3856ad364e35_6.1.7600.16385_none_fe7d1685575edfa6\grpconv.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-help-client_31bf3856ad364e35_6.1.7600.16385_none_c80d81c947c7b794\HelpPane.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-htmlhelp_31bf3856ad364e35_6.1.7600.16385_none_244ae8599e6d81bb\hh.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-i..-setieinstalleddate_31bf3856ad364e35_11.2.9600.16428_none_eace14b8d6178cca\SetIEInstalledDate.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-i..-setieinstalleddate_31bf3856ad364e35_8.0.7600.16385_none_7f263a8951bc5a48\SetIEInstalledDate.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-i..devicescontrolpanel_31bf3856ad364e35_6.1.7600.16385_none_8094bd7b62d2b435\ImagingDevices.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-i..eoptionalcomponents_31bf3856ad364e35_11.2.9600.16428_none_e410f56f6c4ee930\ConfigureIEOptionalComponents.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-i..eoptionalcomponents_31bf3856ad364e35_8.0.7601.17514_none_7a9a2f07e4e23a48\ConfigureIEOptionalComponents.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_11.2.9600.17728_none_7aed0189c2ec4a74\iexplore.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7601.17514_none_1196a9003b674a92\iexplore.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7601.18870_none_1151b73a3b9b9df2\iexplore.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7601.23073_none_11de2d0554b6bd03\iexplore.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-i..integration-support_31bf3856ad364e35_6.1.7600.16385_none_8429bbdebd38db4a\isintsup.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-i..i_initiator_service_31bf3856ad364e35_6.1.7601.17514_none_3899b0ad2bb77a86\iscsicli.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-i..lified-chinese-core_31bf3856ad364e35_6.1.7601.17514_none_763763505e93084b\IMSCPROP.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.1.7601.17514_none_736d5be520319b24\tzupd.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-i..tional-chinese-core_31bf3856ad364e35_6.1.7601.17514_none_b7aa02fc1797974c\IMTCPROP.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-i..xing-service-server_31bf3856ad364e35_6.1.7601.17514_none_0db5e5844ed6ffe9\CIDAEMON.EXE:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-i..xing-service-server_31bf3856ad364e35_6.1.7601.17514_none_0db5e5844ed6ffe9\CISVC.EXE:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-icacls_31bf3856ad364e35_6.1.7600.16385_none_8ea990b7bfab3802\icacls.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-icm-dccw_31bf3856ad364e35_6.1.7600.16385_none_76e39d87a834545e\dccw.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-icm-ui_31bf3856ad364e35_6.1.7600.16385_none_964da911ba806d45\colorcpl.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-ie-feedsbs_31bf3856ad364e35_11.2.9600.16428_none_dea50217efd0356b\msfeedssync.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.7601.17514_none_752e3bb068638683\msfeedssync.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.7601.18870_none_74e949ea6897d9e3\msfeedssync.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.7601.23073_none_7575bfb581b2f8f4\msfeedssync.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-ie-gc-registeriepkeys_31bf3856ad364e35_11.2.9600.16428_none_0a3fe92b38dd8c45\RegisterIEPKEYs.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-ie-gc-registeriepkeys_31bf3856ad364e35_8.0.7601.17514_none_a0c922c3b170dd5d\RegisterIEPKEYs.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_11.2.9600.16428_none_3bb1024f1e6bc086\mshta.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_8.0.7600.16385_none_d009281f9a108e04\mshta.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_8.0.7601.18870_none_d1f54a21973364fe\mshta.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_8.0.7601.23073_none_d281bfecb04e840f\mshta.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-ie-iecleanup_31bf3856ad364e35_11.2.9600.16428_none_a03d6846a99c1c87\iecleanup.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-ie-iediag_31bf3856ad364e35_11.2.9600.16428_none_f937400aa65f97cc\iediagcmd.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-ie-ieetwcollector_31bf3856ad364e35_11.2.9600.17728_none_a54d3c0817ed4a78\ieetwcollector.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-ie-ielowutil_31bf3856ad364e35_11.2.9600.17728_none_e8acb15686613ccb\ielowutil.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-ie-ielowutil_31bf3856ad364e35_8.0.7600.16385_none_7d25450501edb94f\ielowutil.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-ie-ielowutil_31bf3856ad364e35_8.0.7601.18870_none_7f116706ff109049\ielowutil.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-ie-ielowutil_31bf3856ad364e35_8.0.7601.23073_none_7f9ddcd2182baf5a\ielowutil.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-ie-iexpress_31bf3856ad364e35_11.2.9600.16428_none_46d2efef53c02386\iexpress.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-ie-iexpress_31bf3856ad364e35_11.2.9600.16428_none_46d2efef53c02386\wextract.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-ie-iexpress_31bf3856ad364e35_8.0.7600.16385_none_db2b15bfcf64f104\iexpress.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-ie-iexpress_31bf3856ad364e35_8.0.7600.16385_none_db2b15bfcf64f104\wextract.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_11.2.9600.17728_none_1198a5392f250369\ieUnatt.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.7600.16385_none_a61138e7aab17fed\ieUnatt.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.7601.18870_none_a7fd5ae9a7d456e7\ieUnatt.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.7601.23073_none_a889d0b4c0ef75f8\ieUnatt.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-ie-pdm-configuration_31bf3856ad364e35_11.2.9600.16428_none_32a601ad2b7a554f\PDMSetup.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-ie-pdm_31bf3856ad364e35_8.0.7600.16385_none_6425238b793ee910\PDMSetup.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-ie-setup-support_31bf3856ad364e35_11.2.9600.17728_none_a8075a54739fcc0e\ie4uinit.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.7601.17514_none_3eb101caec1acc2c\ie4uinit.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-ieinstal_31bf3856ad364e35_11.2.9600.17728_none_cad27e4ea6c8e021\ieinstal.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-ieinstal_31bf3856ad364e35_8.0.7601.17514_none_617c25c51f43e03f\ieinstal.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-ieinstal_31bf3856ad364e35_8.0.7601.18870_none_613733ff1f78339f\ieinstal.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-ieinstal_31bf3856ad364e35_8.0.7601.23073_none_61c3a9ca389352b0\ieinstal.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-iis-adminservice_31bf3856ad364e35_6.1.7600.16385_none_b65cdbcf116dd7c5\WMSvc.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-iis-legacysnapin_31bf3856ad364e35_6.1.7601.17514_none_df46d976c8a5880b\InetMgr6.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-iis-managementconsole_31bf3856ad364e35_6.1.7600.16385_none_e3c88f07d4c88269\InetMgr.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-iis-metabase_31bf3856ad364e35_6.1.7601.17514_none_9757fd443892abe7\inetinfo.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.1.7601.17514_none_6f0f7833cb71e18d\appcmd.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.1.7601.17514_none_6f0f7833cb71e18d\aspnetca.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.1.7601.17514_none_6f0f7833cb71e18d\iisreset.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.1.7601.17514_none_6f0f7833cb71e18d\iisrstas.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.1.7601.17514_none_6f0f7833cb71e18d\iissetup.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-ime-eashared-ccshared_31bf3856ad364e35_6.1.7601.17514_none_34400a5790d1d336\IMCCPHR.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-infdefaultinstall_31bf3856ad364e35_6.1.7600.16385_none_c8897566b5c070a0\InfDefaultInstall.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-installer-executable_31bf3856ad364e35_6.1.7601.17514_none_a7a77a3b9cb96ce6\msiexec.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-international-core_31bf3856ad364e35_6.1.7600.16385_none_459f562ff37206dd\MuiUnattend.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-ipconfig_31bf3856ad364e35_6.1.7600.16385_none_a82ee2a7319fa8f8\ipconfig.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-irftp_31bf3856ad364e35_6.1.7600.16385_none_b2af329397f29f60\irftp.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-iscsi_initiator_ui_31bf3856ad364e35_6.1.7600.16385_none_33e01c5875c2e5cb\iscsicpl.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-isoburn_31bf3856ad364e35_6.1.7601.17514_none_4458ac8eafdacbdd\isoburn.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-ktmutil_31bf3856ad364e35_6.1.7600.16385_none_e47ee9c51ad9df17\ktmutil.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-label_31bf3856ad364e35_6.1.7600.16385_none_b323fd6ee3f98653\label.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-legacyhwui_31bf3856ad364e35_6.1.7600.16385_none_3e69140a61f1eff5\hdwwiz.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-lpksetup_31bf3856ad364e35_6.1.7601.17514_none_7f7f66788318015d\lpksetup.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-lpksetup_31bf3856ad364e35_6.1.7601.17514_none_7f7f66788318015d\lpremove.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17514_none_04709031736ac277\lsass.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17725_none_0466c45b7371f20d\lsass.exe:Zone.Identifier
C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18443_none_044f07757384196d\lsass.exe:Zone.Identifier
C:\Users\win7\AppData\Local\PokerStars.UK\PokerStars.log.0
__tmp_rar_sfx_access_check_662156
Patch.exe
003.exe
4;O 25A0\ComputerDesktopWallpapersCollection271_107.jpg
4;O 25A0\ComputerDesktopWallpapersCollection271_108.jpg
4;O 25A0
autorun.exe
C:\Users\win7\AppData\Local\Temp\RarSFX0\autorun.exe
C:\Users\win7\AppData\Local\Temp\FR\default.mo
C:\Users\win7\AppData\Local\Temp\DE\default.mo
C:\Users\win7\AppData\Local\Temp\ES\default.mo
C:\Users\win7\AppData\Local\Temp\PT\default.mo
C:\Users\win7\AppData\Local\Temp\IT\default.mo
C:\Users\win7\AppData\Local\Temp\NL\default.mo
C:\Users\win7\AppData\Local\Temp\DA\default.mo
C:\Users\win7\AppData\Local\Temp\UK\default.mo
C:\Users\win7\AppData\Local\Temp\RU\default.mo
C:\Users\win7\AppData\Local\Temp\CS\default.mo
C:\Users\win7\AppData\Local\Temp\EL\default.mo
C:\Users\win7\AppData\Local\Temp\RO\default.mo
C:\Users\win7\AppData\Local\Temp\SK\default.mo
C:\Users\win7\AppData\Local\Temp\HU\default.mo
C:\Users\win7\AppData\Local\Temp\PL\default.mo
C:\Users\win7\AppData\Local\Temp\TR\default.mo
C:\Users\win7\AppData\Local\Temp\BG\default.mo
C:\Users\win7\AppData\Local\Temp\ZHCN\default.mo
C:\Users\win7\AppData\Local\Temp\ZHTW\default.mo
C:\Users\win7\AppData\Local\Temp\AR\default.mo
C:\Users\win7\AppData\Local\Temp\JA\default.mo
C:\Users\win7\AppData\Local\Temp\HE\default.mo
C:\Users\win7\AppData\Local\Temp\CA\default.mo
C:\Users\win7\AppData\Local\Temp\SL\default.mo
C:\Users\win7\AppData\Local\Temp\LT\default.mo
C:\Users\win7\AppData\Local\Temp\SR\default.mo
C:\Users\win7\AppData\Local\Temp\HR\default.mo
C:\Users\win7\AppData\Local\Temp\LV\default.mo
C:\Users\win7\AppData\Local\Temp\SV\default.mo
C:\ProgramData\535531\sysmon.exe.config
C:\ProgramData\535531\sysmon.exe
C:\ProgramData\535631\535534\1
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Config\machine.config
C:\Users\win7\AppData\Local\Temp\aut2C0D.tmp
C:\Users\win7\AppData\Local\Temp\td132ccwa2.gec
C:\Users\win7\AppData\Local\Temp\nsq2139.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsq2139.tmp\UAC.dll
C:\Users\win7\AppData\Local\Temp\nsq2139.tmp\options.ini
C:\Users\win7\AppData\Local\Temp\nsq2139.tmp\shortcuts.ini
C:\Users\win7\AppData\Local\Temp\nsq2139.tmp\components.ini
C:\Users\win7\AppData\Local\Temp\nsq2139.tmp\summary.ini
C:\Users\win7\AppData\Local\Temp\nsq2139.tmp\ioSpecial.ini
C:\Users\win7\AppData\Local\Temp\nsq2139.tmp\modern-wizard.bmp
C:\Users\win7\AppData\Local\Temp\nsq2139.tmp\modern-header.bmp
C:\Users\win7\AppData\Local\Temp\nsq2139.tmp\InstallOptions.dll
C:\CFVS_Injector.exe
__tmp_rar_sfx_access_check_640265
File_Id.diz
Descript.ion
License.txt
Rar.txt
ReadMe.txt
TechNote.txt
UnrarSrc.txt
WhatsNew.txt
Order.htm
RarFiles.lst
Uninstall.lst
Rar.exe
RarExtLoader.exe
Uninstall.exe
UnRAR.exe
WinRAR.exe
Formats\7zxa.dll
RarExt.dll
RarExt64.dll
Formats\UNACEV2.DLL
WinRAR.chm
Formats\7z.fmt
Formats\ace.fmt
Formats\arj.fmt
Formats\bz2.fmt
Formats\cab.fmt
Formats\gz.fmt
Formats\iso.fmt
Formats\lzh.fmt
Formats\tar.fmt
Formats\uue.fmt
Formats\z.fmt
rar.lng
rarext.lng
uninstall.lng
winrar.lng
Default.SFX
WinCon.SFX
Zip.SFX
Formats
124
C:\PROGRA~3\Mozilla\enmgqym.exe
C:\uninstall.lng
http://go.microsoft.com/fwlink/?linkid=182804
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\trl.txt
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\tvl.txt
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Fonts\segoeui.ttf
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Fonts\segoeuil.ttf
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Fonts\seguisb.ttf
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\APTAT.Application.exe.config
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\APTAT.Application.exe
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\APTAT.Bootstrapper.exe
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\cmdapt64.exe
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\cmdapt86.exe
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\APTAT.Core.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\APTAT.Valkyrie.Client.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\FluentValidation.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Microsoft.ReportViewer.Common.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Microsoft.ReportViewer.DataVisualization.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Microsoft.ReportViewer.ProcessingObjectModel.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Microsoft.ReportViewer.WinForms.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Newtonsoft.Json.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\System.Windows.Interactivity.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Telerik.Windows.Controls.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Telerik.Windows.Controls.FixedDocumentViewers.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Telerik.Windows.Controls.GridView.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Telerik.Windows.Controls.Input.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Telerik.Windows.Controls.Navigation.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Telerik.Windows.Data.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Telerik.Windows.Documents.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Telerik.Windows.Documents.Fixed.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Telerik.Windows.Themes.Windows8.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Telerik.Windows.Zip.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000
\\.\pipe\OperaCrashReporter2736
C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160408184456.log
C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160408184455.exe
C:\Users\win7\AppData\Local\IconCache.db
C:\Windows\System32\schtasks.exe
C:\Users\win7\AppData\Local\Temp\WIN7-PC-20160408-1917.log
C:\Users\win7\AppData\Local\Temp\OfficeC2R57286048-F083-4E58-824C-DA2AED68F3DD\v32.cab
C:\Users\win7\AppData\Local\Temp\OfficeC2R57286048-F083-4E58-824C-DA2AED68F3DDOfficeC2R5ADC58C9-95D0-4431-9101-846A2FD7134A\v32.hash
C:\Users\win7\AppData\Local\Temp\OfficeC2R57286048-F083-4E58-824C-DA2AED68F3DDOfficeC2R5ADC58C9-95D0-4431-9101-846A2FD7134A\VersionDescriptor.xml
C:\Users\win7\AppData\Local\Temp\OfficeC2R57286048-F083-4E58-824C-DA2AED68F3DD\VersionDescriptor.xml
C:\Users\win7\AppData\Local\Temp\/VSUpdater.log
/dev/urandom
C:\Users\win7\AppData\Roaming\Visual Protect Service/userid
C:\Windows\Media\desktop.ini
C:\Windows\Media
C:\Windows\Media\Schemes
C:\Windows\Media\Schemes\Tinker
C:\Windows\Media\Schemes\Tinker\desktop.ini
C:\Users\win7\AppData\Local\Temp\is-KUF6D.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-KUF6D.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\Setup Log File.log
C:\Users\win7\AppData\Local\Temp\nsd1A00.tmp
C:\Users\win7\AppData\Local\Temp\nsd1A01.tmp\LangDLL.dll
C:\Users\win7\AppData\Local\Temp\nsf2A5E.tmp
C:\Users\win7\AppData\Local\Temp\nsd1A01.tmp\modern-header.bmp
C:\Users\win7\AppData\Local\Temp\nsd1A01.tmp\modern-wizard.bmp
C:\Users\win7\AppData\Local\Temp\nsd1A01.tmp\nsDialogs.dll
C:\Users\win7\AppData\Local\Temp\nsd1A01.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\par-win7\cache-exiftool-9.95/perl58.dll
C:\Users\win7\AppData\Local\Temp\par-win7\cache-exiftool-9.95/sample
C:\Windows\system32\Resources\us\GameUpdate.us
c:\lqwsogy.png
C:\Users\win7\AppData\Local\Temp\nsaC84B.tmp
C:\Users\win7\AppData\Local\Temp\nsqC85C.tmp\System.dll
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnyBurn\Uninstall AnyBurn.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnyBurn\AnyBurn.lnk
C:\Users\win7\AppData\Local\Temp\nsqC85C.tmp\InstOpt.dll
C:\Users\win7\AppData\Roaming\Ininbu\oxqyt.exe
C:\Users\win7\AppData\Local\Temp\is-UDIEF.tmp\sample.tmp
C:\ProgramData\074666a9-9c4a-46c0-9d2f-0ac2cbbb1ef3\temp
c:\everex\powernow\setup.exe
C:\Users\win7\AppData\Local\Temp\81460141465.txt
C:\Users\win7\AppData\Local\Temp\befbcfdhdg.exe
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\DynamicOfferScreen[1].htm
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\O98Z4CN1.txt
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\bodyImg[1].png
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\dc[1].js
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\button_over[1].png
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\button[1].png
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\amipb[1].js
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\footer_img[1].png
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\cancel1[1].gif
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\cancel[1].gif
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\decline[1].gif
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\next[1].gif
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\skip[1].gif
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\finish[1].gif
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\dm_left_image[1].png
language.map
C:\Users\win7\AppData\Local\Temp\HFI5F0D.tmp.html
c:\31c37649a87341446d94\ParameterInfo.xml
C:\Users\win7\AppData\Local\Temp\Microsoft .NET Framework 3.0-KB982168_20160408_191713342.html
c:\31c37649a87341446d94\NDP30SP2-KB976769.msp
1033\eula.rtf
c:\31c37649a87341446d94\header.bmp
c:\31c37649a87341446d94\watermark.bmp
C:\Users\win7\AppData\Local\Temp\is-0KLIF.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\is-TDM1M.tmp\_isetup\_RegDLL.tmp
C:\Users\win7\AppData\Local\Temp\is-TDM1M.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-TDM1M.tmp\_isetup\_shfoldr.dll
C:\Windows\Fonts\is-9K4PC.tmp
C:\ProgramData\Battle.net\Setup\battle.net\Logs\battle.net-setup-20160408T200919.012992.log
C:\Windows\SysWOW64\ntdll.dll
C:\Windows\syswow64\kernel32.dll
C:\BSplayer.xml
C:\Users\win7\AppData\Roaming\BSplayer\BSplayer.xml
C:\Users\win7\AppData\Roaming\BSplayer\bslib\BSPMLIB.DAT
C:\Users\win7\AppData\Roaming\BSplayer\bslib\BSPMLIB2.DAT
C:\BSplayer.win7.xml
C:\Users\win7\AppData\Roaming\BSplayer\bsplay.bkf
C:\Users\win7\AppData\Roaming\BSplayer\bsplay.sav
C:\Users\win7\AppData\Roaming\BSplayer\bsp.dat
C:\Users\win7\AppData\Roaming\BSplayer\bspchan.dat
C:\Users\win7\AppData\Roaming\BSplayer\bsplist.bsl
C:\Users\win7\AppData\Roaming\BSplayer\bspml.xml
C:\Users\win7\AppData\Roaming\BSplayer\bslib\pcnt.dat
C:\Users\win7\AppData\Roaming\BSplayer\skins\Base.bsz
C:\skins\Base.bsz
C:\Users\win7\AppData\Local\Temp\_BSPST$_\skin\rgn.dat
C:\Users\win7\AppData\Local\Temp\_BSPST$_\skin\skin.ini
C:\Users\win7\AppData\Local\Temp\_BSPST$_\skin\skinfs.ini
C:\Users\win7\AppData\Local\Temp\_BSPST$_\skin\rgnfs.dat
\\.\HGFS
C:\ProgramData\bett2f002\desktop.ini
C:\ProgramData\bett2f002\hwxtesuug.exe
C:\Users\win7\AppData\Roaming\InfraRecorder\Settings.xml
C:\Users\Public\Documents\TheLostIncaProphecy\users.dat
C:\Users\Public\Documents\TheLostIncaProphecy\settings.dat
C:\Users\win7\AppData\Local\Temp\is-29A50.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\tf00294823.dll
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\cpp[1].htm
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A
C:\Users\win7\AppData\Local\Temp\CabD23B.tmp
C:\Users\win7\AppData\Local\Temp\TarD23C.tmp
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E49827401028F7A0F97B5576C77A26CB_7CE95D8DCA26FE957E7BD7D76F353B08
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E49827401028F7A0F97B5576C77A26CB_C95AFE779A09B6B8C03D47AD8998ACC3
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\644B8874112055B5E195ECB0E8F243A4
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E49827401028F7A0F97B5576C77A26CB_7CE95D8DCA26FE957E7BD7D76F353B08
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C9B156CE38292BC9C1699974988308B6
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8E3FADD0CF32326CC9FC141399667C8A
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C9B156CE38292BC9C1699974988308B6
C:\Users\win7\AppData\Local\Temp\nsqEF0D.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsqEF0D.tmp\nsDialogs.dll
C:\Users\win7\AppData\Local\Temp\nsqEF0D.tmp\header.bmp
C:\Users\win7\AppData\Local\Temp\nsqEF0D.tmp\registry.dll
C:\Users\win7\AppData\Local\Temp\nsqEF0D.tmp\Math.dll
C:\Users\win7\AppData\Local\Temp\nsqEF0D.tmp\blowfish.dll
C:\Users\win7\AppData\Local\Temp\nsqEF0D.tmp\UserInfo.dll
C:\Users\win7\AppData\Local\Temp\nsqEF0D.tmp\GetVersion.dll
C:\Users\win7\AppData\Local\Temp\nsqEF0D.tmp\manlib.dll
C:\Users\win7\AppData\Local\Temp\nsqEF0D.tmp\FirstResult.txt
C:\Users\win7\AppData\Local\Temp\\Test.dat
C:\Users\win7\AppData\Local\Temp\\oDZbpbzhYpdwsluFWctA.DLL
C:\Users\win7\AppData\Local\Temp\\iRnekTkSLeTEAZMXPaSt.DLL
C:\Users\win7\AppData\Local\Temp\\PykEoRvxxB.DLL
1.217.686.0_TO_1.217.970.0_MPASDLTA.VDM._P
1.217.686.0_TO_1.217.970.0_MPAVDLTA.VDM._P
properties\partner.xml
adlist.txt
C:\Windows\popcinfo.dat
C:\Users\win7\AppData\Local\Temp\E220AutoRunLog.tmp
1.217.869.0_TO_1.217.976.0_MPASDLTA.VDM._P
1.217.869.0_TO_1.217.976.0_MPAVDLTA.VDM._P
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\YXCY2N06.txt
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\MKDT2KZT.txt
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\WJJQ5GZ8.txt
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\PF7IM9LY.txt
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\2d9b4-bc7a5[1].css
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\90f12-cc7d4[1].css
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\b5ae7-49f02[1].css
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\eaa2a-83fbe[1].js
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\4cd46-67e6d[1].js
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\px[1].js
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\1467b-931a2[1].js
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\softonic-logo-inline[1].png
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\px[1].js
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\amzn_ads[1].js
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\427b6-cd0ca[1].js
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\7b1b9-bca7a[1].js
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\rta[1].js
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\gpt[1].js
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\bid[1].js
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\pubads_impl_83[1].js
C:\Windows\system32\MSHTML.tlb
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\OpenSans-CondLight-webfont[1].eot
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\font-icon[1].eot
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\f[1].txt
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\OpenSans-CondBold-webfont[1].eot
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\container[1].htm
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\gtm[1].js
C:\WINDOWS\FONTS\SIMSUN.TTC
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\win7@scorecardresearch[2].txt
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\beacon[1].js
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\icons_sprite_0[1].png
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\404[1].png
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\5FXT74E6.txt
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\gw[1].js
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\8LY9J64B.txt
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\analytics[1].js
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\1BORVTJL.txt
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\7c1e4-7c85b[1].js
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\7MYYMGWB.txt
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\17ad7-e5cc5[1].js
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\7c7aa-ad7c7[1].js
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\ads.min[1].js
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\measure.min[1].js
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\276b7-a1941[1].js
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\blank[1].gif
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\blank[2].gif
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\textlink-ads[1].jpg
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\textlink-ads[2].jpg
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\adsense[1].js
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\CE0X178X.txt
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\T1XXJ0DW.txt
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\H9JU78YQ.txt
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\8TI91513.txt
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\C3NCBDU3.txt
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\rta[1].js
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\bid[1].js
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\23B523C9E7746F715D33C6527C18EB9D
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\C4AV58IJ.txt
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\1L5HA53O.txt
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\a[1].js
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\23B523C9E7746F715D33C6527C18EB9D
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\828298824EA5549947C17DDABF6871F5_D1BCEE7E304F0D5FB8AA811D9B2D0835
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\828298824EA5549947C17DDABF6871F5_7711FB3A44D1E4EB005F46022D09BCC0
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D7B4E43171BB9E412497B0377F4343E7
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\828298824EA5549947C17DDABF6871F5_D1BCEE7E304F0D5FB8AA811D9B2D0835
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_67D49208B0B9D5FA366B626E49A19225
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_0FA68D94CF09E5851A671DE218FD2434
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8A574ED5927B3CEC9626151D220C7448
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_67D49208B0B9D5FA366B626E49A19225
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\9Q2174S1.txt
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\rta[2].js
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\bid[2].js
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\OLES7RHO.txt
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\f[2].txt
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\N5KDSSLB.txt
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\3CHA7FO0.txt
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\f[3].txt
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\sbhK2lTE[1].js
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\netseerads[1].js
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_2B540DC99FA7B244EAEDCEF8CC34F30F
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_6B1A861F5AE882000873C8C7B36C0745
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\f[4].txt
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\ABPGSEPH.txt
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_2B540DC99FA7B244EAEDCEF8CC34F30F
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\du-970x90-1713-1-1223[1].jpg
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\rta[3].js
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\bid[3].js
Nul
C:\Users\win7\AppData\Local\Temp\nsz5096.tmp
C:\Users\win7\AppData\Local\Temp\dsNcAdmin_inst.dll
C:\Users\win7\AppData\Local\Juniper Networks
C:\Users\win7\AppData\Local\Juniper Networks\Logging
C:\Users\win7\AppData\Local\Juniper Networks\Logging\debuglog.log
C:\Users\win7\AppData\Local\Temp\is-7K0E1.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\is-K6KH7.tmp\_isetup\_RegDLL.tmp
C:\Users\win7\AppData\Local\Temp\is-K6KH7.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-K6KH7.tmp\_isetup\_shfoldr.dll
c:\users\win7\appdata\local\tempfolder\qutrydmakn\ucapidohsor.dat
C:\Windows\system32\wdmaud.drv
C:\Windows\system32\drivers\etc\hosts
C:\Windows\system32\ado\doh\cyfor.dat
C:\Windows\System32\dllcache\dnsapi.dll
C:\Windows\System32\dnsapi.dll
C:\Windows\SysWOW64\dllcache\dnsapi.dll
C:\Windows\SysWOW64\dnsapi.dll
C:\Users\win7\AppData\Roaming\Juniper Networks\Juniper Terminal Services Client\dsTermServ.exe
C:\Users\win7\AppData\Roaming\Juniper Networks\Juniper Terminal Services Client\dsTermServDt.dll
C:\Users\win7\AppData\Roaming\Juniper Networks\Juniper Terminal Services Client\dsTermServProxy.dll
C:\Users\win7\AppData\Roaming\Juniper Networks\Juniper Terminal Services Client\dsTermServResource_en.dll
C:\Users\win7\AppData\Roaming\Juniper Networks\Juniper Terminal Services Client\dsTermServResource_DE.dll
C:\Users\win7\AppData\Roaming\Juniper Networks\Juniper Terminal Services Client\dsTermServResource_FR.dll
C:\Users\win7\AppData\Roaming\Juniper Networks\Juniper Terminal Services Client\dsTermServResource_KO.dll
C:\Users\win7\AppData\Roaming\Juniper Networks\Juniper Terminal Services Client\dsTermServResource_JA.dll
C:\Users\win7\AppData\Roaming\Juniper Networks\Juniper Terminal Services Client\dsTermServResource_ES.dll
C:\Users\win7\AppData\Roaming\Juniper Networks\Juniper Terminal Services Client\dsTermServResource_ZH.dll
C:\Users\win7\AppData\Roaming\Juniper Networks\Juniper Terminal Services Client\dsTermServResource_ZH_CN.dll
C:\Users\win7\AppData\Roaming\Juniper Networks\Juniper Terminal Services Client\dsWinClient.dll
C:\Users\win7\AppData\Roaming\Juniper Networks\Juniper Terminal Services Client\dsWinClientResource_EN.dll
C:\Users\win7\AppData\Roaming\Juniper Networks\Juniper Terminal Services Client\dsWinClientResource_DE.dll
C:\Users\win7\AppData\Roaming\Juniper Networks\Juniper Terminal Services Client\dsWinClientResource_FR.dll
C:\Users\win7\AppData\Roaming\Juniper Networks\Juniper Terminal Services Client\dsWinClientResource_JA.dll
C:\Users\win7\AppData\Roaming\Juniper Networks\Juniper Terminal Services Client\dsWinClientResource_KO.dll
C:\Users\win7\AppData\Roaming\Juniper Networks\Juniper Terminal Services Client\dsWinClientResource_ES.dll
C:\Users\win7\AppData\Roaming\Juniper Networks\Juniper Terminal Services Client\dsWinClientResource_ZH.dll
C:\Users\win7\AppData\Roaming\Juniper Networks\Juniper Terminal Services Client\dsWinClientResource_ZH_CN.dll
C:\Users\win7\AppData\Roaming\Juniper Networks\Juniper Terminal Services Client\versionInfo.ini
C:\Users\win7\AppData\Roaming\Juniper Networks\Juniper Terminal Services Client\uninstall.exe
C:\Users\win7\AppData\Roaming\Juniper Networks
C:\Users\win7\AppData\Roaming\Juniper Networks\Juniper Terminal Services Client
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pulse Secure\Pulse Secure Terminal Services Client\Uninstall.lnk
C:\ProgramData\PDFC\Test.log
C:\Users\win7\AppData\Local\Temp\Test.log
C:\Users\win7\AppData\Local\Temp\nsoF5F3.tmp
C:\Users\win7\AppData\Local\Temp\nsyF632.tmp\kgptighzy.dll
C:\Users\win7\AppData\Local\Temp\nsyF632.tmp\cudnuhnhq.dll
C:\Users\win7\AppData\Local\Temp\nsyF632.tmp\tabal.dll
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\utility[1].gif
C:\Users\win7\AppData\Local\Temp\nsyF632.tmp\iuqligddt.dll
C:\Users\win7\AppData\Local\Temp\nsyF632.tmp\urxsia.dll
C:\Users\win7\AppData\Local\Temp\nsyF632.tmp\ckblhyra.dll
C:\Users\win7\AppData\Local\Temp\nsyF632.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsyF632.tmp\qqdnfm.dll
C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Preferences
C:\Users\win7\AppData\Local\Google\Chrome\User Data\Local State
C:\Users\win7\AppData\Local\Temp\Setup_AdvancedWinServiceManager_101.exe
C:\Users\win7\AppData\Local\Temp\nsc72D3.tmp\header.bmp
C:\Users\win7\AppData\Local\Temp\nsc72D3.tmp\btmimg.bmp
C:\Users\win7\AppData\Local\Temp\nsc72D3.tmp\leftimg.bmp
C:\Users\win7\AppData\Local\Temp\nsc72D3.tmp\Header.bmp
C:\Users\win7\AppData\Local\Temp\nsc72D3.tmp\Leftimg.bmp
C:\Users\win7\AppData\Local\Temp\nsc72D3.tmp\Btmimg.bmp
C:\Users\win7\AppData\Local\Temp\nsc72D3.tmp\isWelcome.ini
C:\Users\win7\AppData\Local\Temp\nsc72D3.tmp\Confirm.ini
C:\Users\win7\AppData\Local\Temp\nsc72D3.tmp\Finish.ini
C:\Users\win7\AppData\Local\Temp\nsc72D3.tmp\InstallOptions.dll
C:\Users\win7\AppData\Local\Temp\Setup Log 2016-04-09 #001.txt
C:\Users\win7\AppData\Local\Temp\is-K2999.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-K2999.tmp\_isetup\_shfoldr.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\security.config.cch.new
C:\Users\win7\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.new
C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\enterprisesec.config.cch.new
C:\Users\win7\AppData\Local\Temp\nsjD065.tmp\dead.exe
C:\Users\win7\AppData\Local\Temp\nsjD065.tmp\setup.exe
C:\Users\win7\AppData\Local\Temp\nsjD065.tmp\DivX_codec_updater.exe
C:\appdata\sbrowser.ini
C:\data\adblocker filter lists.txt
C:\data\autoproxy.ini
C:\appdata\adblocker\WhitelistDomains.txt
C:\Users\win7\AppData\Local\Temp\~nsu.tmp\Au_.exe
C:\Users\win7\AppData\Local\Temp\{441F2C4A-C520-425D-AC0A-E5BC4FFBF010}\fpb.tmp
C:\Users\win7\AppData\Local\Temp\{749FA387-F47E-49A8-B05E-0D0463F62F92}\fpb.tmp
C:\Users\win7\AppData\Local\Adobe\AIR\logs\Install.log
C:\Users\win7\AppData\Local\Temp\AIRDAF7.tmp\.launch
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\FB788E090BC1F3AA2FBC9E8FB2859601
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\FB788E090BC1F3AA2FBC9E8FB2859601
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\40E450F7CE13419A2CCC2A5445035A0A_97482851B9CF8FBB790FA8AEAB0C772D
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\40E450F7CE13419A2CCC2A5445035A0A_2CFCD3B0E185E4A8F87A94EFDCF71017
C:\Users\win7\AppData\Local\Temp\AIRDAF7.tmp\Install PyxelEdit.exe
C:\Users\win7\AppData\Local\Temp\AIRDAF7.tmp\PyxelEdit/IconDocument128.png
C:\Users\win7\AppData\Local\Temp\AIRDAF7.tmp\PyxelEdit/IconDocument16.png
C:\Users\win7\AppData\Local\Temp\AIRDAF7.tmp\PyxelEdit/IconDocument32.png
C:\Users\win7\AppData\Local\Temp\AIRDAF7.tmp\PyxelEdit/IconDocument48.png
C:\Users\win7\AppData\Local\Temp\AIRDAF7.tmp\PyxelEdit/IconDocument512.png
C:\Users\win7\AppData\Local\Temp\AIRDAF7.tmp\PyxelEdit/IconHeart128.png
C:\Users\win7\AppData\Local\Temp\AIRDAF7.tmp\PyxelEdit/IconHeart16.png
C:\Users\win7\AppData\Local\Temp\AIRDAF7.tmp\PyxelEdit/IconHeart256.png
C:\Users\win7\AppData\Local\Temp\AIRDAF7.tmp\PyxelEdit/IconHeart32.png
C:\Users\win7\AppData\Local\Temp\AIRDAF7.tmp\PyxelEdit/IconHeart48.png
C:\Users\win7\AppData\Local\Temp\AIRDAF7.tmp\PyxelEdit/IconHeart512.png
C:\Users\win7\AppData\Local\Temp\AIRDAF7.tmp\PyxelEdit/IconHeart64.png
C:\Users\win7\AppData\Local\Temp\AIRDAF7.tmp\PyxelEdit/META-INF/AIR/application.xml
C:\Users\win7\AppData\Local\Temp\AIRDAF7.tmp\PyxelEdit/META-INF/AIR/hash
C:\Users\win7\AppData\Local\Temp\AIRDAF7.tmp\PyxelEdit/META-INF/signatures.xml
C:\Users\win7\AppData\Local\Temp\AIRDAF7.tmp\PyxelEdit/mimetype
C:\Users\win7\AppData\Local\Temp\AIRDAF7.tmp\PyxelEdit/PyxelEdit.exe
C:\Users\win7\AppData\Local\Temp\AIRDAF7.tmp\PyxelEdit/PyxelEdit.swf
C:\Users\win7\AppData\Local\Temp\AIRDAF7.tmp\PyxelEdit/setup.msi
C:\Users\win7\AppData\Local\Temp\System.Data.SQLite.dll
C:\Users\win7\AppData\Local\Temp\is-JMVBD.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-JMVBD.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\is-987E2.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-987E2.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\is-987E2.tmp\InstallerExtensions.dll
C:\Users\win7\AppData\Local\Temp\is-987E2.tmp\certified.bmp
C:\Users\win7\AppData\Local\Temp\is-987E2.tmp\printer.bmp
C:\Users\win7\AppData\Local\Temp\is-987E2.tmp\license.en.rtf
C:\Users\win7\AppData\Local\Temp\is-987E2.tmp\ds_banner_logo.bmp
C:\Users\win7\AppData\Local\Temp\is-987E2.tmp\microsoft_partner.bmp
C:\library.dat
C:\Users\win7\AppData\Local\Temp\nsh4A6C.tmp
C:\Users\win7\AppData\Local\Temp\nsr4AAB.tmp\UAC.dll
C:\Users\win7\AppData\Local\Temp\nsr4AAB.tmp\LangDLL.dll
C:\Users\win7\AppData\Local\Temp\nsr4AAB.tmp\AdvSplash.dll
C:\Users\win7\AppData\Local\Temp\nsr4AAB.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsr4AAB.tmp\ioSpecial.ini
C:\Users\win7\AppData\Local\Temp\nsr4AAB.tmp\modern-wizard.bmp
C:\Users\win7\AppData\Local\Temp\nsr4AAB.tmp\modern-header.bmp
C:\Users\win7\AppData\Local\Temp\nsr4AAB.tmp\UserInfo.dll
C:\Users\win7\AppData\Local\Temp\nsr4AAB.tmp\InstallOptions.dll
C:\Windows\system32\rundll32.exe
C:\Users\win7\AppData\Local\Temp\amipixel.cfg
C:\Users\win7\AppData\Local\Temp\is-AGITE.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-AGITE.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\is-AGITE.tmp\itdownload.dll
C:\Users\win7\AppData\Local\Temp\is-AGITE.tmp\muid.dll
C:\Users\win7\AppData\Local\Temp\is-AGITE.tmp\issi_splash.bmp
C:\Users\win7\AppData\Roaming\Tencent\QQWubi\QQWBTrayBar.dmp
C:\Users\win7\AppData\Roaming\Tencent\QQWubi\qqwbacc.dat
C:\Users\win7\AppData\Local\Temp\00089FA4_Rar\sample
C:\Users\win7\AppData\Roaming\Tencent\QQWubi\local.stat
C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d\comctl32.dll
C:\Windows\system32\WINSTA.dll
C:\Windows\system32\ntmarta.dll
C:\Windows\system32\WTSAPI32.dll
C:\Windows\system32\wkscli.dll
C:\Windows\system32\srvcli.dll
C:\Windows\system32\netutils.dll
C:\Windows\system32\NETAPI32.dll
C:\Windows\system32\MSIMG32.dll
C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_ec86b8d6858ec0bc\COMCTL32.dll
C:\Windows\system32\DNSAPI.dll
C:\Windows\system32\version.DLL
C:\CFVS_HookDll.dll
C:\Windows\syswow64\CRYPTBASE.dll
C:\Windows\syswow64\SspiCli.dll
C:\Users\win7\AppData\Local\Temp\nsq39BD.tmp
C:\Users\win7\AppData\Local\Temp\nsq39BE.tmp\Banner.dll
C:\Users\win7\AppData\Local\Temp\nsq39BE.tmp\KPTool.dll
C:\Users\win7\AppData\Local\Temp\nsq39BE.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsq39BE.tmp\NSISdl.dll
C:\Users\win7\AppData\Local\Temp\nsq39BE.tmp\nsb3B84.tmp
C:\Users\win7\AppData\Local\Temp\nsq39BE.tmp\inetc.dll
C:\Users\win7\AppData\Local\Temp\nsq39BE.tmp\data.xml
C:\Users\win7\AppData\Local\Temp\nsv5770.tmp
C:\Users\win7\AppData\Local\Temp\nsl5781.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsl5781.tmp\StdUtils.dll
C:\Users\win7\AppData\Local\Temp\nsl5781.tmp\UAC.dll
C:\Users\win7\AppData\Local\Temp\nsl5781.tmp\nsislog.dll
C:\Users\win7\AppData\Roaming\Selection Tools.installation.log
C:\Users\win7\AppData\Local\Temp\\AdobeARM.log
C:\Users\win7\AppData\Local\Temp\HWID
C:\Windows\wcx_ftp.ini
C:\Users\win7\wcx_ftp.ini
C:\Users\win7\AppData\Roaming\GHISLER\wcx_ftp.ini
C:\ProgramData\GHISLER\wcx_ftp.ini
C:\Users\win7\AppData\Local\GHISLER\wcx_ftp.ini
C:\Users\win7\AppData\Roaming\GlobalSCAPE\CuteFTP\sm.dat
C:\Users\win7\AppData\Roaming\GlobalSCAPE\CuteFTP Pro\sm.dat
C:\Users\win7\AppData\Roaming\GlobalSCAPE\CuteFTP Lite\sm.dat
C:\Users\win7\AppData\Roaming\CuteFTP\sm.dat
C:\ProgramData\GlobalSCAPE\CuteFTP\sm.dat
C:\ProgramData\GlobalSCAPE\CuteFTP Pro\sm.dat
C:\ProgramData\GlobalSCAPE\CuteFTP Lite\sm.dat
C:\ProgramData\CuteFTP\sm.dat
C:\Users\win7\AppData\Local\GlobalSCAPE\CuteFTP\sm.dat
C:\Users\win7\AppData\Local\GlobalSCAPE\CuteFTP Pro\sm.dat
C:\Users\win7\AppData\Local\GlobalSCAPE\CuteFTP Lite\sm.dat
C:\Users\win7\AppData\Local\CuteFTP\sm.dat
C:\Users\win7\AppData\Roaming\FlashFXP\3\Sites.dat
C:\Users\win7\AppData\Roaming\FlashFXP\4\Sites.dat
C:\Users\win7\AppData\Roaming\FlashFXP\3\Quick.dat
C:\Users\win7\AppData\Roaming\FlashFXP\4\Quick.dat
C:\Users\win7\AppData\Roaming\FlashFXP\3\History.dat
C:\Users\win7\AppData\Roaming\FlashFXP\4\History.dat
C:\ProgramData\FlashFXP\3\Sites.dat
C:\ProgramData\FlashFXP\4\Sites.dat
C:\ProgramData\FlashFXP\3\Quick.dat
C:\ProgramData\FlashFXP\4\Quick.dat
C:\ProgramData\FlashFXP\3\History.dat
C:\ProgramData\FlashFXP\4\History.dat
C:\Users\win7\AppData\Local\FlashFXP\3\Sites.dat
C:\Users\win7\AppData\Local\FlashFXP\4\Sites.dat
C:\Users\win7\AppData\Local\FlashFXP\3\Quick.dat
C:\Users\win7\AppData\Local\FlashFXP\4\Quick.dat
C:\Users\win7\AppData\Local\FlashFXP\3\History.dat
C:\Users\win7\AppData\Local\FlashFXP\4\History.dat
C:\Users\win7\AppData\Roaming\FileZilla\sitemanager.xml
C:\Users\win7\AppData\Roaming\FileZilla\recentservers.xml
C:\Users\win7\AppData\Roaming\FileZilla\filezilla.xml
C:\ProgramData\FileZilla\sitemanager.xml
C:\ProgramData\FileZilla\recentservers.xml
C:\ProgramData\FileZilla\filezilla.xml
C:\Users\win7\AppData\Local\FileZilla\sitemanager.xml
C:\Users\win7\AppData\Local\FileZilla\recentservers.xml
C:\Users\win7\AppData\Local\FileZilla\filezilla.xml
C:\Users\win7\AppData\Roaming\ExpanDrive\drives.js
C:\Users\win7\AppData\Local\ExpanDrive\drives.js
C:\ProgramData\ExpanDrive\drives.js
C:\Users\win7\AppData\Roaming\SharedSettings.ccs
C:\Users\win7\AppData\Roaming\SharedSettings.sqlite
C:\Users\win7\AppData\Roaming\SharedSettings_1_0_5.ccs
C:\Users\win7\AppData\Roaming\SharedSettings_1_0_5.sqlite
C:\ProgramData\SharedSettings.ccs
C:\ProgramData\SharedSettings.sqlite
C:\ProgramData\SharedSettings_1_0_5.ccs
C:\ProgramData\SharedSettings_1_0_5.sqlite
C:\Users\win7\AppData\Local\SharedSettings.ccs
C:\Users\win7\AppData\Local\SharedSettings.sqlite
C:\Users\win7\AppData\Local\SharedSettings_1_0_5.ccs
C:\Users\win7\AppData\Local\SharedSettings_1_0_5.sqlite
C:\Users\win7\AppData\Roaming\CoffeeCup Software\SharedSettings.ccs
C:\Users\win7\AppData\Roaming\CoffeeCup Software\SharedSettings.sqlite
C:\Users\win7\AppData\Roaming\CoffeeCup Software\SharedSettings_1_0_5.ccs
C:\Users\win7\AppData\Roaming\CoffeeCup Software\SharedSettings_1_0_5.sqlite
C:\ProgramData\CoffeeCup Software\SharedSettings.ccs
C:\ProgramData\CoffeeCup Software\SharedSettings.sqlite
C:\ProgramData\CoffeeCup Software\SharedSettings_1_0_5.ccs
C:\ProgramData\CoffeeCup Software\SharedSettings_1_0_5.sqlite
C:\Users\win7\AppData\Local\CoffeeCup Software\SharedSettings.ccs
C:\Users\win7\AppData\Local\CoffeeCup Software\SharedSettings.sqlite
C:\Users\win7\AppData\Local\CoffeeCup Software\SharedSettings_1_0_5.ccs
C:\Users\win7\AppData\Local\CoffeeCup Software\SharedSettings_1_0_5.sqlite
C:\Windows\32BitFtp.ini
C:\Users\win7\AppData\Local\Temp\is-FFPN5.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-FFPN5.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\is-3GIFO.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\is-B4F1N.tmp\_isetup\_RegDLL.tmp
C:\Users\win7\AppData\Local\Temp\is-B4F1N.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-B4F1N.tmp\_isetup\_shfoldr.dll
1.213.6073.0_TO_1.213.6202.0_MPASDLTA.VDM._P
1.213.6073.0_TO_1.213.6202.0_MPAVDLTA.VDM._P
C\ape
C:\sampl_
C:\Users\win7\AppData\Local\CSIDL_
C:\WINDOWS\FONTS\MINGLIU.TTC
C:\Users\win7\AppData\Local\Temp\is-GH4O8.tmp\_isetup\_RegDLL.tmp
C:\Users\win7\AppData\Local\Temp\is-GH4O8.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-GH4O8.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\is-GH4O8.tmp\CallbackCtrl.dll
C:\Users\win7\AppData\Local\Temp\is-GH4O8.tmp\isskin.dll
C:\Users\win7\AppData\Local\Temp\is-GH4O8.tmp\ISDone.dll
C:\Users\win7\AppData\Local\Temp\is-GH4O8.tmp\botva2.dll
C:\Users\win7\AppData\Local\Temp\is-GH4O8.tmp\b2p.dll
C:\Users\win7\AppData\Local\Temp\is-GH4O8.tmp\skin.cjstyles
C:\siw.lic
C:\Windows\SysWOW64\psapi.dll
C:\Windows\System32\ntoskrnl.exe
C:\Users\win7\AppData\Local\Temp\\~DF19F5B4245080C7C9.TMP
C:\Users\win7\AppData\Roaming\gtopala\siw\siw_init.xml
C:\Windows\TEMP\SiwIo.sys
C:\Users\win7\AppData\Local\\XyLhQ.crt
__tmp_rar_sfx_access_check_640640
Binaries\update.xml
Binaries\Binaries\scripts\background.js
Binaries\Binaries\scripts\contentScript.js
Binaries\Binaries\scripts\utils.js
Binaries\ChromeInstaller.exe
Binaries\PremadeExtKey.data
Binaries\Binaries\_metadata\computed_hashes.json
Binaries\Binaries\manifest.json
Binaries\Binaries\_metadata\verified_contents.json
Binaries\empty.localstorage
Binaries\Binaries\images\icon_19.png
Binaries\Binaries\images\logo128.png
Binaries\Binaries\images\logo16.png
Binaries\Binaries\images\logo48.png
Binaries\Binaries\_metadata
Binaries\Binaries\images
Binaries\Binaries\scripts
C:\Users\win7\AppData\Local\Temp\RarSFX0\Binaries\ChromeInstaller.exe
C:\Users\win7\AppData\Local\Temp\RarSFX0
C:\Users\win7\AppData\Local\Temp\RarSFX0\Binaries
C:\Users\win7\AppData\Local\Temp\RarSFX0\Binaries\Binaries
C:\Users\win7\AppData\Local\Temp\RarSFX0\Binaries\Binaries\images
C:\Users\win7\AppData\Local\Temp\RarSFX0\Binaries\Binaries\scripts
C:\Users\win7\AppData\Local\Temp\RarSFX0\Binaries\Binaries\_metadata
\\.\CtrlSM
C:\Users\win7\AppData\Local\Temp\\~DFA8A9B20F6F137A59.TMP
C:\Users\win7\AppData\Local\Temp\~temp.dat
C:\Users\win7\AppData\Local\Temp\_sablon proje.exe
C:\Users\win7\AppData\Local\Temp\7W8YDR\UTILITY.DLL
C:\Users\win7\AppData\Local\Temp\7W8YDR\Sanal_Kumpas.swf$
C:\Users\win7\AppData\Local\Temp\7W8YDR\Flash_cons.ico$
C:\Users\win7\AppData\Local\Temp\7W8YDR\block.sdf
C:\Users\win7\AppData\Local\Temp\7W8YDR\Sanal_Kumpas.swf
C:\Users\win7\AppData\Local\Temp\7W8YDR\Flash_cons.ico
C:\Windows\system32\mms.cfg
C:\Windows\SysWow64\Macromed\Flash\~SS3DF7.tmp
C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol
C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx
C:\Windows\system32\Macromed\Flash\~SS3DF7.tmp
C:\Windows\system32\Macromed\Flash\~SS3DF7.tmp\2
C:\Users\win7\AppData\Local\Temp\{44EC31C6-C520-425D-AC0A-E5BC4FFBFF10}\fpb.tmp
C:\Users\win7\AppData\Local\Temp\{746CBE1B-F47E-49A8-B05E-0D0463F62F92}\fpb.tmp
C:\Users\win7\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3979321414-2393373014-2172761192-1000\58b8aea4ae7184a912187a66498d9b0c_c4b6765a-c53d-4b48-b576-0e1db4e9f3bc
C:\Users\win7\AppData\Roaming\uTorrent\utorrent.lng
C:\sample.lang.txt
C:\Windows\SysWOW64\FirewallAPI.dll
C:\Users\win7\AppData\Roaming\uTorrent\ipfilter.dat
C:\Users\win7\AppData\Local\Temp\xns30E7.tmp
C:\Users\win7\AppData\Local\Temp\InstTemp0\xbind.script
C:\Users\win7\AppData\Local\Temp\InstTemp0\userinstall.dll
C:\Users\win7\AppData\Local\Temp\nssD05.tmp\System.dll
C:\vltest.log
C:\Users\win7\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3979321414-2393373014-2172761192-1000\c29cc92d98dfc32936dcb29d925daaa0_c4b6765a-c53d-4b48-b576-0e1db4e9f3bc
C:\prodinfo_thedreamatoriumofdrmagnus_1.0.1.5486/bg_400.gif
C:\prodinfo_thedreamatoriumofdrmagnus_1.0.1.5486/wtatom.xml
C:\prodinfo_thedreamatoriumofdrmagnus_1.0.1.5486/wtatom.html
C:\prodinfo_thedreamatoriumofdrmagnus_1.0.1.5486/atomui.css
C:\prodinfo_thedreamatoriumofdrmagnus_1.0.1.5486/install-prodinfo.exe
C:\Users\win7\AppData\Local\Temp\WER7B16.tmp.WERInternalMetadata.xml
C:\Users\win7\AppData\Local\Temp\\~DF94F5E160108CE738.TMP
C:\Program Files\Internet Explorer
C:\Users\win7\AppData\Local\F-Secure
C:\Users\win7\AppData\Local\F-Secure\fs598546.tmp
C:\Users\win7\AppData\Local\Temp\Cab3ACB.tmp
C:\Users\win7\AppData\Local\Temp\Tar3ACC.tmp
C:\Users\win7\AppData\Roaming\Microsoft\Internet Explorer
C:\Users\win7\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch
C:\Users\win7\AppData\Local\Downloaded Installations\{AC49D0FD-0602-49DB-A697-368CA676C252}\AProductivityCenter.msi
C:\Users\win7\AppData\Local\Temp\{39439C73-7F64-4AEF-93C1-CCA89078D9E9}\_ISMSIDEL.INI
C:\Users\win7\AppData\Local\Temp\{39439C73-7F64-4AEF-93C1-CCA89078D9E9}\AProductivityCenter.msi
C:\Users\win7\AppData\Local\Temp\{39439C73-7F64-4AEF-93C1-CCA89078D9E9}\0x0409.ini
C:\Users\win7\AppData\Local\Temp\_is9A3D.tmp
C:\Users\win7\AppData\Local\Temp\~9A2D.tmp
C:\Users\win7\AppData\Local\Temp\nsq357.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsq357.tmp\nsExec.dll
C:\Users\win7\AppData\Local\Temp\nsq357.tmp\ns3A6.tmp
C:\Users\win7\AppData\Local\Temp\explorer.exe.config
C:\Users\win7\AppData\Local\Temp\explorer.exe
C:\Users\win7\AppData\Local\Temp\is-D86PD.tmp\_isetup\_RegDLL.tmp
C:\Users\win7\AppData\Local\Temp\is-D86PD.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-D86PD.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\is-D86PD.tmp\ISTask.dll
1.217.915.0_TO_1.217.984.0_MPASDLTA.VDM._P
1.217.915.0_TO_1.217.984.0_MPAVDLTA.VDM._P
C:\Windows\system32\spool\drivers\color\sRGB Color Space Profile.icm
C:\Users\win7\AppData\Local\Temp\is-KEDMG.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-KEDMG.tmp\_isetup\_shfoldr.dll
C:\Windows\system32\UI\digi_num\0.png
UI\digi_num\0.png
C:\Windows\system32\UI\digi_num\1.png
UI\digi_num\1.png
C:\Windows\system32\UI\digi_num\2.png
UI\digi_num\2.png
C:\Windows\system32\UI\digi_num\3.png
UI\digi_num\3.png
C:\Windows\system32\UI\digi_num\4.png
UI\digi_num\4.png
C:\Windows\system32\UI\digi_num\5.png
UI\digi_num\5.png
C:\Windows\system32\UI\digi_num\6.png
UI\digi_num\6.png
C:\Windows\system32\UI\digi_num\7.png
UI\digi_num\7.png
C:\Windows\system32\UI\digi_num\8.png
UI\digi_num\8.png
C:\Windows\system32\UI\digi_num\9.png
UI\digi_num\9.png
C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00000.png
UI\mem_meter\palit_UI_517x517_01_00000.png
C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00001.png
UI\mem_meter\palit_UI_517x517_01_00001.png
C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00002.png
UI\mem_meter\palit_UI_517x517_01_00002.png
C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00003.png
UI\mem_meter\palit_UI_517x517_01_00003.png
C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00004.png
UI\mem_meter\palit_UI_517x517_01_00004.png
C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00005.png
UI\mem_meter\palit_UI_517x517_01_00005.png
C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00006.png
UI\mem_meter\palit_UI_517x517_01_00006.png
C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00007.png
UI\mem_meter\palit_UI_517x517_01_00007.png
C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00008.png
UI\mem_meter\palit_UI_517x517_01_00008.png
C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00009.png
UI\mem_meter\palit_UI_517x517_01_00009.png
C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00010.png
UI\mem_meter\palit_UI_517x517_01_00010.png
C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00011.png
UI\mem_meter\palit_UI_517x517_01_00011.png
C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00012.png
UI\mem_meter\palit_UI_517x517_01_00012.png
C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00013.png
UI\mem_meter\palit_UI_517x517_01_00013.png
C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00014.png
UI\mem_meter\palit_UI_517x517_01_00014.png
C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00015.png
UI\mem_meter\palit_UI_517x517_01_00015.png
C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00016.png
UI\mem_meter\palit_UI_517x517_01_00016.png
C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00017.png
UI\mem_meter\palit_UI_517x517_01_00017.png
C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00018.png
UI\mem_meter\palit_UI_517x517_01_00018.png
C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00019.png
UI\mem_meter\palit_UI_517x517_01_00019.png
C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00000.png
UI\core_meter\palit_UI_517x517_02_00000.png
C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00001.png
UI\core_meter\palit_UI_517x517_02_00001.png
C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00002.png
UI\core_meter\palit_UI_517x517_02_00002.png
C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00003.png
UI\core_meter\palit_UI_517x517_02_00003.png
C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00004.png
UI\core_meter\palit_UI_517x517_02_00004.png
C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00005.png
UI\core_meter\palit_UI_517x517_02_00005.png
C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00006.png
UI\core_meter\palit_UI_517x517_02_00006.png
C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00007.png
UI\core_meter\palit_UI_517x517_02_00007.png
C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00008.png
UI\core_meter\palit_UI_517x517_02_00008.png
C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00009.png
UI\core_meter\palit_UI_517x517_02_00009.png
C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00010.png
UI\core_meter\palit_UI_517x517_02_00010.png
C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00011.png
UI\core_meter\palit_UI_517x517_02_00011.png
C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00012.png
UI\core_meter\palit_UI_517x517_02_00012.png
C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00013.png
UI\core_meter\palit_UI_517x517_02_00013.png
C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00014.png
UI\core_meter\palit_UI_517x517_02_00014.png
C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00015.png
UI\core_meter\palit_UI_517x517_02_00015.png
C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00016.png
UI\core_meter\palit_UI_517x517_02_00016.png
C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00017.png
UI\core_meter\palit_UI_517x517_02_00017.png
C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00018.png
UI\core_meter\palit_UI_517x517_02_00018.png
C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00019.png
UI\core_meter\palit_UI_517x517_02_00019.png
C:\UI\main.png
C:\Users\win7\AppData\Local\Temp\\~DF1C47A56D5FFB2173.TMP
C:\Users\win7\AppData\Local\Temp\is-GBRKE.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-GBRKE.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\is-GBRKE.tmp\AsrLib.dll
C:\Users\win7\AppData\Local\Temp\is-SDREL.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-SDREL.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\nsw2501.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsw2501.tmp\inetc.dll
C:\Users\win7\AppData\Local\Temp\618814647InstallerStarted
C:\Users\win7\AppData\Local\Temp\nsw2501.tmp\nsDialogs.dll
C:\DockConfig.xml
c:\sample.dat
c:\sample
C:\ProgramData\{484f1976-e99b-ae5b-484f-f1976e9965db}\sample
C:\ProgramData\{484f1976-e99b-ae5b-484f-f1976e9965db}\sample.dat
C:\Windows\Tasks\VideoTime.job
c:\programdata\{484f1976-e99b-ae5b-484f-f1976e9965db}\sample.dat
c:\programdata\{484f1976-e99b-ae5b-484f-f1976e9965db}\87f709ff7d48f5e2
c:\programdata\{484f1976-e99b-ae5b-484f-f1976e9965db}\4a0aafaa5a9c1236
C:\Users\win7\AppData\Local\Temp\nscABB7.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nscABB7.tmp\inetpost.dll
C:\Users\win7\AppData\Local\Temp\nscABB7.tmp\LangDLL.dll
C:\Users\win7\AppData\Local\Temp\nscABB7.tmp\modern-header.bmp
C:\Users\win7\AppData\Local\Temp\nscABB7.tmp\modern-wizard.bmp
C:\Users\win7\AppData\Local\Temp\nscABB7.tmp\nsDialogs.dll
C:\Users\win7\AppData\Local\Temp\nscABB7.tmp\UserInfo.dll
C:\Users\win7\AppData\Local\Temp\nscABB7.tmp\nsProcess.dll
C:\Users\win7/.sqliterc
C:\Users\win7\AppData\Local\Temp\Tsu5ED29E38.dll
C:\Users\win7\AppData\Local\Temp\6AD1DB49.dat
C:\Users\win7\AppData\Local\Temp\{07C171EC-5167-4901-ABEA-1945DC22531A}\_Setup.dll
C:\Users\win7\AppData\Local\Temp\{07C171EC-5167-4901-ABEA-1945DC22531A}\Setup.ico
C:\Users\win7\AppData\Local\Temp\{07C171EC-5167-4901-ABEA-1945DC22531A}\Readme.txt
C:\Users\win7\AppData\Local\Temp\{07C171EC-5167-4901-ABEA-1945DC22531A}\Custom.dll
C:\Users\win7\AppData\Local\Temp\{07C171EC-5167-4901-ABEA-1945DC22531A}\Setup.exe
C:\Users\win7\AppData\Local\Temp\down.2664.1.ini
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\RFRYN44A.htm
C:\Users\win7\AppData\Local\Temp\down.2664.1.ini.part
C:\Users\win7\AppData\Local\Temp\{07C171EC-5167-4901-ABEA-1945DC22531A}\x86\regsvr32.exe
C:\Users\win7\AppData\Local\Temp\{07C171EC-5167-4901-ABEA-1945DC22531A}\x64\regsvr32.exe
C:\ProgramData\InstallMate\{07C171EC-5167-4901-ABEA-1945DC22531A}\Setup.dat
C:\Users\win7\AppData\Local\Temp\nsg15CF.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsg15CF.tmp\CityHash.dll
C:\Users\win7\AppData\Local\Temp\dfsB0CA.tmp
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
C:\Users\win7\AppData\Local\Temp\7c42a9e5-4e2d-470a-8abf-343787a937a1\bin.dmc
C:\Users\win7\AppData\Local\Temp\7c42a9e5-4e2d-470a-8abf-343787a937a1\bin\bin.html
C:\Windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
C:\Windows\DirectX.log
C:\Windows\DXError.log
C:\Users\win7\AppData\Local\Temp\is-HGVFG.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-HGVFG.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\\~DF5647B41DA5145298.TMP
C:\Windows\system32\MSVBVM60.DLL
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\system32\0
\\?\C:\Users\win7\AppData\Roaming\uTorrent\webui.zip
\\?\C:\Users\win7\AppData\Roaming\uTorrent\utorrent.lng
\\?\C:\sample.lang.txt
C:\Users\win7\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3979321414-2393373014-2172761192-1000\1f91d2d17ea675d4c2c3192e241743f9_c4b6765a-c53d-4b48-b576-0e1db4e9f3bc
\\?\C:\Users\win7\AppData\Roaming\uTorrent\settings.dat.new
C:\Users\win7\AppData\Local\Temp\HYD4881.tmp.1460190240\index.hta.log
.\sample.dbg
C:\sample.dbg
.\sample.pdb
.\exe\sample.pdb
.\symbols\exe\sample.pdb
sample.pdb
.\wntdll.pdb
.\dll\wntdll.pdb
.\symbols\dll\wntdll.pdb
wntdll.pdb
.\wkernel32.pdb
.\dll\wkernel32.pdb
.\symbols\dll\wkernel32.pdb
wkernel32.pdb
.\wkernelbase.pdb
.\dll\wkernelbase.pdb
.\symbols\dll\wkernelbase.pdb
wkernelbase.pdb
.\CFVS_HookDll.pdb
.\dll\CFVS_HookDll.pdb
.\symbols\dll\CFVS_HookDll.pdb
C:\DETECTION_REPO\Valkyrie_Dynamic\CAMAS\CamasNative\CFVS_HookDll\Release\CFVS_HookDll.pdb
.\ws2_32.pdb
.\dll\ws2_32.pdb
.\symbols\dll\ws2_32.pdb
ws2_32.pdb
.\msvcrt.pdb
.\dll\msvcrt.pdb
.\symbols\dll\msvcrt.pdb
msvcrt.pdb
.\wrpcrt4.pdb
.\dll\wrpcrt4.pdb
.\symbols\dll\wrpcrt4.pdb
wrpcrt4.pdb
.\wsspicli.pdb
.\dll\wsspicli.pdb
.\symbols\dll\wsspicli.pdb
wsspicli.pdb
.\cryptbase.pdb
.\dll\cryptbase.pdb
.\symbols\dll\cryptbase.pdb
cryptbase.pdb
.\sechost.pdb
.\dll\sechost.pdb
.\symbols\dll\sechost.pdb
sechost.pdb
.\nsi.pdb
.\dll\nsi.pdb
.\symbols\dll\nsi.pdb
nsi.pdb
.\urlmon.pdb
.\dll\urlmon.pdb
.\symbols\dll\urlmon.pdb
urlmon.pdb
.\api-ms-win-downlevel-ole32-l1-1-0.pdb
.\dll\api-ms-win-downlevel-ole32-l1-1-0.pdb
.\symbols\dll\api-ms-win-downlevel-ole32-l1-1-0.pdb
api-ms-win-downlevel-ole32-l1-1-0.pdb
.\ole32.pdb
.\DLL\ole32.pdb
.\symbols\DLL\ole32.pdb
ole32.pdb
.\wgdi32.pdb
.\dll\wgdi32.pdb
.\symbols\dll\wgdi32.pdb
wgdi32.pdb
.\wuser32.pdb
.\dll\wuser32.pdb
.\symbols\dll\wuser32.pdb
wuser32.pdb
.\advapi32.pdb
.\dll\advapi32.pdb
.\symbols\dll\advapi32.pdb
advapi32.pdb
.\wlpk.pdb
.\dll\wlpk.pdb
.\symbols\dll\wlpk.pdb
wlpk.pdb
.\usp10.pdb
.\dll\usp10.pdb
.\symbols\dll\usp10.pdb
usp10.pdb
.\api-ms-win-downlevel-shlwapi-l1-1-0.pdb
.\dll\api-ms-win-downlevel-shlwapi-l1-1-0.pdb
.\symbols\dll\api-ms-win-downlevel-shlwapi-l1-1-0.pdb
api-ms-win-downlevel-shlwapi-l1-1-0.pdb
.\shlwapi.pdb
.\DLL\shlwapi.pdb
.\symbols\DLL\shlwapi.pdb
shlwapi.pdb
.\api-ms-win-downlevel-advapi32-l1-1-0.pdb
.\dll\api-ms-win-downlevel-advapi32-l1-1-0.pdb
.\symbols\dll\api-ms-win-downlevel-advapi32-l1-1-0.pdb
api-ms-win-downlevel-advapi32-l1-1-0.pdb
.\api-ms-win-downlevel-user32-l1-1-0.pdb
.\dll\api-ms-win-downlevel-user32-l1-1-0.pdb
.\symbols\dll\api-ms-win-downlevel-user32-l1-1-0.pdb
api-ms-win-downlevel-user32-l1-1-0.pdb
.\api-ms-win-downlevel-version-l1-1-0.pdb
.\dll\api-ms-win-downlevel-version-l1-1-0.pdb
.\symbols\dll\api-ms-win-downlevel-version-l1-1-0.pdb
api-ms-win-downlevel-version-l1-1-0.pdb
.\version.pdb
.\DLL\version.pdb
.\symbols\DLL\version.pdb
version.pdb
.\api-ms-win-downlevel-normaliz-l1-1-0.pdb
.\dll\api-ms-win-downlevel-normaliz-l1-1-0.pdb
.\symbols\dll\api-ms-win-downlevel-normaliz-l1-1-0.pdb
api-ms-win-downlevel-normaliz-l1-1-0.pdb
.\normaliz.pdb
.\DLL\normaliz.pdb
.\symbols\DLL\normaliz.pdb
normaliz.pdb
.\iertutil.pdb
.\dll\iertutil.pdb
.\symbols\dll\iertutil.pdb
iertutil.pdb
.\wininet.pdb
.\dll\wininet.pdb
.\symbols\dll\wininet.pdb
wininet.pdb
.\userenv.pdb
.\dll\userenv.pdb
.\symbols\dll\userenv.pdb
userenv.pdb
.\profapi.pdb
.\dll\profapi.pdb
.\symbols\dll\profapi.pdb
profapi.pdb
.\dnsapi.pdb
.\dll\dnsapi.pdb
.\symbols\dll\dnsapi.pdb
dnsapi.pdb
.\comctl32.pdb
.\dll\comctl32.pdb
.\symbols\dll\comctl32.pdb
comctl32.pdb
.\comdlg32.pdb
.\dll\comdlg32.pdb
.\symbols\dll\comdlg32.pdb
comdlg32.pdb
.\shell32.pdb
.\dll\shell32.pdb
.\symbols\dll\shell32.pdb
shell32.pdb
.\MicrosoftWindowsGdiPlus-1.1.7601.18834-gdiplus.pdb
.\dll\MicrosoftWindowsGdiPlus-1.1.7601.18834-gdiplus.pdb
.\symbols\dll\MicrosoftWindowsGdiPlus-1.1.7601.18834-gdiplus.pdb
MicrosoftWindowsGdiPlus-1.1.7601.18834-gdiplus.pdb
.\iphlpapi.pdb
.\DLL\iphlpapi.pdb
.\symbols\DLL\iphlpapi.pdb
iphlpapi.pdb
.\winnsi.pdb
.\DLL\winnsi.pdb
.\symbols\DLL\winnsi.pdb
winnsi.pdb
.\msimg32.pdb
.\dll\msimg32.pdb
.\symbols\dll\msimg32.pdb
msimg32.pdb
.\oleaut32.pdb
.\dll\oleaut32.pdb
.\symbols\dll\oleaut32.pdb
oleaut32.pdb
.\psapi.pdb
.\DLL\psapi.pdb
.\symbols\DLL\psapi.pdb
psapi.pdb
.\setupapi.pdb
.\dll\setupapi.pdb
.\symbols\dll\setupapi.pdb
setupapi.pdb
.\cfgmgr32.pdb
.\dll\cfgmgr32.pdb
.\symbols\dll\cfgmgr32.pdb
cfgmgr32.pdb
.\devobj.pdb
.\dll\devobj.pdb
.\symbols\dll\devobj.pdb
devobj.pdb
.\wtsapi32.pdb
.\dll\wtsapi32.pdb
.\symbols\dll\wtsapi32.pdb
wtsapi32.pdb
.\wimm32.pdb
.\DLL\wimm32.pdb
.\symbols\DLL\wimm32.pdb
wimm32.pdb
.\msctf.pdb
.\dll\msctf.pdb
.\symbols\dll\msctf.pdb
msctf.pdb
.\netprofm.pdb
.\dll\netprofm.pdb
.\symbols\dll\netprofm.pdb
netprofm.pdb
.\nlaapi.pdb
.\dll\nlaapi.pdb
.\symbols\dll\nlaapi.pdb
nlaapi.pdb
.\mswsock.pdb
.\dll\mswsock.pdb
.\symbols\dll\mswsock.pdb
mswsock.pdb
.\wship6.pdb
.\dll\wship6.pdb
.\symbols\dll\wship6.pdb
wship6.pdb
.\wshtcpip.pdb
.\dll\wshtcpip.pdb
.\symbols\dll\wshtcpip.pdb
wshtcpip.pdb
.\rasadhlp.pdb
.\dll\rasadhlp.pdb
.\symbols\dll\rasadhlp.pdb
rasadhlp.pdb
.\fwpuclnt.pdb
.\dll\fwpuclnt.pdb
.\symbols\dll\fwpuclnt.pdb
fwpuclnt.pdb
.\secur32.pdb
.\dll\secur32.pdb
.\symbols\dll\secur32.pdb
secur32.pdb
.\crypt32.pdb
.\dll\crypt32.pdb
.\symbols\dll\crypt32.pdb
crypt32.pdb
.\msasn1.pdb
.\dll\msasn1.pdb
.\symbols\dll\msasn1.pdb
msasn1.pdb
.\cryptsp.pdb
.\dll\cryptsp.pdb
.\symbols\dll\cryptsp.pdb
cryptsp.pdb
.\rsaenh.pdb
.\dll\rsaenh.pdb
.\symbols\dll\rsaenh.pdb
rsaenh.pdb
.\ncrypt.pdb
.\dll\ncrypt.pdb
.\symbols\dll\ncrypt.pdb
ncrypt.pdb
.\bcrypt.pdb
.\dll\bcrypt.pdb
.\symbols\dll\bcrypt.pdb
bcrypt.pdb
.\bcryptprimitives.pdb
.\dll\bcryptprimitives.pdb
.\symbols\dll\bcryptprimitives.pdb
bcryptprimitives.pdb
.\dbghelp.pdb
.\DLL\dbghelp.pdb
.\symbols\DLL\dbghelp.pdb
dbghelp.pdb
\\?\C:\Users\win7\AppData\Roaming\uTorrent\current.btskin
\\?\C:\Users\win7\AppData\Roaming\uTorrent\updates.dat
C:\Users\win7\AppData\Roaming\uTorrent\updates\sua_pmr
\\?\C:\Users\win7\AppData\Roaming\uTorrent\settings.dat
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\B10X1YOU.txt
\\?\C:\Users\win7\AppData\Roaming\uTorrent\toolbar_offer.benc
\\?\C:\Users\win7\AppData\Local\Temp\utt4C99.tmp.new
\\?\C:\Users\win7\AppData\Roaming\uTorrent\toolbar.benc.new
\\?\C:\Users\win7\AppData\Local\Temp\utt4DE2.tmp
C:\Users\win7\AppData\Local\Temp\utt4DE2.tmp
C:\Users\win7\AppData\Local\Temp\e4jFA71.tmp_dir\exe4jlib.jar
C:\Users\win7\AppData\Local\Temp\e4jFA71.tmp_dir\i4jdel.exe
C:\Users\win7\AppData\Local\Temp\is-KEK8H.tmp\is-59C93.tmp
C:\Users\win7\AppData\Local\Temp\is-UM4R5.tmp\_isetup\_RegDLL.tmp
C:\Users\win7\AppData\Local\Temp\is-UM4R5.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-UM4R5.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\botva2.dll
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\innocallback.dll
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\Top_1.bmp
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\Top_3_1.bmp
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\Top_3_2.bmp
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\Top_3_3.bmp
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\Top_4.bmp
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\Bottom.bmp
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\SelDir.bmp
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\btn_min.png
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\btn_close.png
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\btndlg_close.png
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\CheckButton.png
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\btn_normal_0.bmp
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\btn_normal_1.bmp
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\btn_normal_2.bmp
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\btn_normal_3.bmp
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\btn_seldir_0.bmp
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\btn_seldir_1.bmp
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\btn_seldir_2.bmp
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\btn_seldir_3.bmp
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\BtnOptions.png
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\btnSetup_0.bmp
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\btnSetup_1.bmp
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\btnSetup_2.bmp
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\btnSetup_3.bmp
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\btnSetup2_0.bmp
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\btnSetup2_1.bmp
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\btnSetup2_2.bmp
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\btnSetup2_3.bmp
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\Pbbg.bmp
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\Pbjd.bmp
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\finish_0.bmp
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\finish_1.bmp
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\finish_2.bmp
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\finish_3.bmp
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\restart_0.bmp
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\restart_1.bmp
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\restart_2.bmp
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\restart_3.bmp
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\MessageDlgBkg.png
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\MessageDlgAlert.png
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\Btn_min.png
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\winmsgctrl.dll
C:\Users\Public\Documents\iskysoft\NFWCHK.exe
C:\Users\Public\Documents\iskysoft\DownTask_715.xml
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\license[1].html
C:\Users\win7\AppData\Local\Temp\Cab56DE.tmp
C:\Users\win7\AppData\Local\Temp\Tar56DF.tmp
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\0F1583FFF42FFF476A09801ACB69213F_34BD0768648DFAD21CC7BAFF1A13ADD5
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5024A99DB487E61F859A7848B9CAE2C4
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3388ECC3F7BC4A9271C10ED8621E5A65_C370421A2F0BF186B0EB0F7BFD75C120
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3388ECC3F7BC4A9271C10ED8621E5A65_800AA4CDFCFB3A3BA92A18947BBA30FF
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\DD05AD37A2ABDB04869056C0170F4FC2
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3388ECC3F7BC4A9271C10ED8621E5A65_C370421A2F0BF186B0EB0F7BFD75C120
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\license[1].htm
C:\Users\win7\AppData\Local\Temp\nsw1717.tmp
C:\ProgramData\8708eaaa-1c2b-4faa-8923-a6c9f88eeb0e\temp
C:\Windows\system32\ntdll.dll
C:\Windows\system32\ws2_32.dll
C:\Windows\system32\wininet.dll
C:\Windows\system32\dnsapi.dll
C:\Users\win7\AppData\Roaming\GetRightToGo\.data
C:\Users\win7\AppData\Roaming\GetRightToGo\.data0
C:\Users\win7\AppData\Local\Temp\nsg47B7.tmp
C:\Users\win7\AppData\Local\Temp\nsy4BC0.tmp\System.dll
\\.\SIWDEBUG
__tmp_rar_sfx_access_check_650718
C:\Users\win7\AppData\Local\Temp\ .doc
C:\Users\win7\AppData\Local\Temp\nsn42FE.tmp\System.dll
Users.txt
HotFolders.txt
C:\Users\win7\AppData\Local\Temp\nsj804C.tmp
C:\Users\win7\AppData\Local\Temp\nso8108.tmp\System.dll
NUL
C:\Users\win7\AppData\Local\Temp\is-18UOF.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\nsf65E.tmp
C:\Users\win7\AppData\Local\Temp\nsp69D.tmp\ioSpecial.ini
C:\Users\win7\AppData\Local\Temp\nsp69D.tmp\modern-wizard.bmp
C:\Users\win7\AppData\Local\Temp\nsp69D.tmp\InstallOptions.dll
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Image Viewer\FastStone Image Viewer Help.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Image Viewer\FastStone Image Viewer.lnk
C:\Users\Public\Desktop\FastStone Image Viewer.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Image Viewer\Visit www.FastStone.org.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Image Viewer\Uninstall FastStone Image Viewer.lnk
C:\Users\win7\AppData\Local\Temp\nsp69D.tmp\ShellExecAsUser.dll
C:\Iron\chrome.exe
C:\Users\win7\AppData\Local\Temp\swu2A02.tmp
C:\Users\win7\AppData\Local\Temp\scp30E8.tmp
C:\Users\win7\AppData\Local\Temp\swu2A02.tmp.msi
C:\Users\win7\AppData\Local\Temp\scp30E8.tmp.exe
C:\Users\Public\Documents\Downloaded Installers\{746AB259-6474-4111-8966-1C62F9A6E063}\setup.msi
\\.\PIPE\atsvc
C:\Windows\system32\setting.ini
C:\supdate.log
C:\Users\win7\AppData\Local\Temp\is-UH93A.tmp\_isetup\_RegDLL.tmp
C:\Users\win7\AppData\Local\Temp\is-UH93A.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-UH93A.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\is-UH93A.tmp\TempkillProcess.dll
C:\Users\win7\AppData\Local\Temp\is-UH93A.tmp\KPByName.dll
C:\Users\win7\AppData\Local\Temp\is-C3OF7.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-C3OF7.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\is-C3OF7.tmp\isgsg.dll
C:\Users\win7\AppData\Local\Temp\nsiB2BB.tmp
C:\Users\win7\AppData\Local\Temp\nsxB2CB.tmp\bass.dll
C:\Users\win7\AppData\Local\Temp\nsxB2CB.tmp\dat_bgm.ogg
C:\Users\win7\AppData\Local\Temp\nsxB2CB.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsp44DE.tmp
C:\Users\win7\AppData\Local\Temp\nsf458B.tmp\System.dll
C:\Windows\wmsetup.log
C:\Users\win7\AppData\Local\Temp\control.xml
C:\Users\win7\AppData\Local\Temp\nst4BF8.tmp
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\nsJSON.dll
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\inetc.dll
C:\Users\win7\AppData\Local\Temp\stats.txt
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_C05FCC1DD241E5923C9CD05C8D6B60D3
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_A4248ACEFDC81C7352D1016C57731EF9
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_C05FCC1DD241E5923C9CD05C8D6B60D3
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\modern-header.bmp
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\applications.bin
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\installpack_items.ini
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon1.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon2.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon3.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon4.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon5.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon6.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon7.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon8.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon9.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon10.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon11.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon12.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon13.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon14.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon15.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon16.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon17.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon18.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon19.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon20.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon21.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon22.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon23.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon24.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon25.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon26.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon27.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon28.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon29.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon30.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon31.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon32.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon33.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon34.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon35.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon36.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon37.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon38.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon39.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon40.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon41.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon42.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon43.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon44.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon45.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon46.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon47.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon48.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon49.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon50.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon51.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon52.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon53.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon54.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon55.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon56.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon57.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon58.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon59.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon60.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon61.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon62.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon63.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon64.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon65.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon66.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon67.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon68.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon69.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon70.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon71.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon72.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon73.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon74.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon75.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon76.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon77.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon78.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon79.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon80.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon81.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon82.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon83.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon84.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon85.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon86.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon87.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon88.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon89.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon90.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon91.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon92.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon93.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon94.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon95.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon96.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon97.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon98.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon99.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon100.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon101.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon102.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon103.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon104.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon105.ico
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp\\icon106.ico
c:\b\yjvbremodic8zu7ypkjnigwi.exedieu.txt
C:\Windows\uwjllqegddjln\tst
C:\Windows\uwjllqegddjln\lck
C:\Windows\uwjllqegddjln\upd
c:\b\yjvbremodic8zu7ypkjnigwi.exedifa.txt
C:\Windows\uwjllqegddjln\etc
C:\Windows\sysnative\\drivers\etc\hosts
C:\Windows\uwjllqegddjln\run
1.217.941.0_TO_1.217.1005.0_MPASDLTA.VDM._P
1.217.941.0_TO_1.217.1005.0_MPAVDLTA.VDM._P
sc.txt
C:\Users\win7\AppData\Local\Temp\is-55OMA.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-55OMA.tmp\_isetup\_shfoldr.dll
C:\Windows\system32\Log.txt
C:.DXA
C:\WINDOWS.DXA
C:\WINDOWS\SYSTEM32.DXA
C:\WINDOWS\SYSTEM32\RES.DXA
Res\Word.bmp
\\?\hid#vid_80ee&pid_0021#6&e993e07&0&0000#{4d1e55b2-f16f-11cf-88cb-001111000030}
C:\Windows\system32\drivers\GM.DLS
Res\Pl_P01.bmp
Res\Ps_Ef.bmp
Res\Ps_Brk.bmp
Res\Ps_Exp.bmp
Res\Ps_Hom.bmp
Res\Ps_RLs.bmp
Res\Ps_Mul.bmp
Res\Ps_Def.bmp
Res\Pl_rl.bmp
Res\Pl_fl.bmp
Res\Pl_Bst.bmp
Res\Pl_Mul.bmp
Res\Pl_Rls.bmp
Res\Pl_Def.bmp
Res\Pl_P02.bmp
Res\EpB_01l.bmp
Res\EpB_01c.bmp
Res\EpB_01.bmp
Res\EpB_00.bmp
Res\EpSp04.bmp
Res\EpSp03.bmp
Res\EpSp02.bmp
Res\EpSp01.bmp
Res\EpSb08.bmp
Res\EpSb07.bmp
Res\EpSb06.bmp
Res\EpSb05.bmp
Res\EpSb04.bmp
Res\EpSb03.bmp
Res\EpSb02.bmp
Res\EpSb01.bmp
Res\EpF_09.bmp
Res\EpF_08.bmp
Res\EpF_07.bmp
Res\EpF_06.bmp
Res\EpF_05.bmp
Res\EpF_04.bmp
Res\EpF_03.bmp
Res\EpF_02.bmp
Res\EpF_01.bmp
Res\EpMpa2.bmp
Res\EpMpa1.bmp
Res\EpM_03.bmp
Res\EpM_02.bmp
Res\EpM_01.bmp
Res\EpS_02.bmp
Res\EpS_01.bmp
Res\EpXb83.bmp
Res\EpXb82.bmp
Res\EpXb81.bmp
Res\EpXb55.bmp
Res\EpXb54.bmp
Res\EpXb53.bmp
Res\EpXb52.bmp
Res\EpXb51.bmp
Res\EpX_08.bmp
Res\EpX_07.bmp
Res\EpX_06.bmp
Res\EpX_05.bmp
Res\EpX_04.bmp
Res\EpX_03.bmp
Res\EpX_02.bmp
Res\EpX_01.bmp
Res\EpBl01.bmp
Res\EpBp36.bmp
Res\EpBp35.bmp
Res\EpBp34.bmp
Res\EpBp33.bmp
Res\EpBp32.bmp
Res\EpBp31a.bmp
Res\EpBp31.bmp
Res\EpBp30a.bmp
Res\EpBp30.bmp
Res\EpBp21.bmp
Res\EpBp20a.bmp
Res\EpBp20.bmp
Res\EpBp03.bmp
Res\EpB_03d.bmp
Res\EpB_03c.bmp
Res\EpB_03b.bmp
Res\EpB_03a.bmp
Res\EpB_03.bmp
Res\EpB_02e.bmp
Res\EpB_02d.bmp
Res\EpB_02c.bmp
Res\EpB_02b.bmp
Res\EpB_02.bmp
Res\EpB_01t.bmp
Res\EpB_01s.bmp
Res\Ex_Cl1.bmp
Res\Ex_Wf4.bmp
Res\Ex_Wf3.bmp
Res\Ex_Wf2.bmp
Res\Ex_Wf1.bmp
Res\Ex_Rid.bmp
Res\Ex_Rib.bmp
Res\Ex_At1.bmp
Res\Ex_Ebh.bmp
Res\Pl_Exp.bmp
Res\Ex_Efb.bmp
Res\Ex_ItE.bmp
Res\Ex_Rls.bmp
Res\Ex_Efr.bmp
Res\Ex_Ef6.bmp
Res\Ex_Ef5.bmp
Res\Ex_Ef4.bmp
Res\Ex_Ef3.bmp
Res\Ex_Ef2.bmp
Res\Ex_Ef1.bmp
Res\Exp_bc1.bmp
Res\Exp_bfl.bmp
Res\Exp_bt1.bmp
Res\Exp_bst.bmp
Res\Exp_bp2.bmp
Res\Exp_bp1.bmp
Res\Exp_bf8.bmp
Res\Exp_bf7.bmp
Res\Exp_bf6.bmp
Res\Exp_bf5.bmp
Res\Exp_bf4.bmp
Res\Exp_bf3.bmp
Res\Exp_bf2.bmp
Res\Exp_bf1.bmp
Res\Exp_b5.bmp
Res\Exp_b4.bmp
Res\Exp_b3.bmp
Res\Exp_b2.bmp
Res\Exp_b1.bmp
Res\Ex_GrE.bmp
Res\Ex_HtL.bmp
Res\Ex_HtS.bmp
Res\Ex_BE2.bmp
Res\Ex_BE1.bmp
Res\Ex_BDl.bmp
Res\En_Sp_Ef.bmp
Res\En_LocL.bmp
Res\En_Lock.bmp
Res\EpJ_04.bmp
Res\EpJ_03.bmp
Res\EpJ_02.bmp
Res\EpJ_01.bmp
Res\EpJ_00.bmp
Res\Bk_000.bmp
Res\Ch_1up.bmp
Res\It_1up.bmp
Res\It_Bn.bmp
Res\It_Pw.bmp
Res\Es_wb1.bmp
Res\Es_hn2.bmp
Res\Es_hn1.bmp
Res\Es_nap.bmp
Res\Es_nl1b.bmp
Res\Es_nl1.bmp
Res\Es_ncl.bmp
Res\Es_nb4.bmp
Res\Es_nb3.bmp
Res\Es_nb2.bmp
Res\Es_nb1.bmp
Res\Bk_210.bmp
Res\Bk_209.bmp
Res\Bk_208.bmp
Res\Bk_207.bmp
Res\Bk_206.bmp
Res\Bk_205.bmp
Res\Bk_204m.bmp
Res\Bk_204.bmp
Res\Bk_203.bmp
Res\Bk_202.bmp
Res\Bk_201m.bmp
Res\Bk_201.bmp
Res\Bk_105.bmp
Res\Bk_104.bmp
Res\Bk_103.bmp
Res\Bk_102.bmp
Res\Bk_101.bmp
Res\Bk_012.bmp
Res\Bk_011.bmp
Res\Bk_008l.bmp
Res\Bk_008.bmp
Res\Bk_007f.bmp
Res\Bk_007e.bmp
Res\Bk_007.bmp
Res\Bk_006.bmp
Res\Bk_005.bmp
Res\Bk_002.bmp
Res\Bk_001.bmp
C:\WINDOWS\SYSTEM32\RES\WAV.DXA
C:\Windows\system32\Res\Wav\b12.wav
C:\Windows\system32\Res\Wav\b11.wav
C:\Windows\system32\Res\Wav\b10.wav
C:\Windows\system32\Res\Wav\b9.wav
C:\Windows\system32\Res\Wav\b8.wav
C:\Windows\system32\Res\Wav\b7.wav
C:\Windows\system32\Res\Wav\b6.wav
C:\Windows\system32\Res\Wav\b5.wav
C:\Windows\system32\Res\Wav\b4.wav
C:\Windows\system32\Res\Wav\b3.wav
C:\Windows\system32\Res\Wav\b2.wav
C:\Windows\system32\Res\Wav\b1.wav
C:\Windows\system32\Res\Wav\b0.wav
C:\Windows\system32\Res\_z03_4848.bmp
Res\WordWarning.bmp
Res\WordBzfb.bmp
Res\WordBzfs.bmp
Res\WordBzfn.bmp
Res\WordBzfm.bmp
Res\WordBzfl.bmp
Res\Word_f_Psywar.bmp
Res\BkFEe3_xw.bmp
Res\BkFEe3_x.bmp
Res\BkFEe2_xw.bmp
Res\BkFEe2_x.bmp
Res\BkFEe1_xw.bmp
Res\BkFEe1_x.bmp
Res\BkFE01_xw.bmp
Res\BkFE01_x.bmp
Res\BkFE00_xw.bmp
Res\BkFE00_x.bmp
Res\Bk_Sp2.bmp
Res\Bk_Sp1.bmp
Res\Bk_410.bmp
Res\Bk_409.bmp
Res\Bk_408.bmp
Res\Bk_407.bmp
Res\Bk_406.bmp
Res\Bk_405.bmp
Res\Bk_404m.bmp
Res\Bk_404.bmp
Res\Bk_403.bmp
Res\Bk_402.bmp
Res\Bk_401.bmp
Res\Bk_311.bmp
Res\Bk_310.bmp
Res\Bk_309.bmp
Res\Bk_308m.bmp
Res\Bk_308.bmp
Res\Bk_307.bmp
Res\Bk_306.bmp
Res\Bk_305.bmp
Res\Bk_304.bmp
Res\Bk_303.bmp
Res\Bk_302.bmp
Res\Bk_301.bmp
Res\Bk_217.bmp
Res\Bk_216.bmp
Res\Bk_215.bmp
Res\Bk_214.bmp
Res\Bk_213.bmp
Res\Bk_212.bmp
Res\Bk_211.bmp
C:\Windows\system32\Res\Wav\b29.wav
C:\Windows\system32\Res\Wav\b28.wav
C:\Windows\system32\Res\Wav\b27.wav
C:\Windows\system32\Res\Wav\b26.wav
C:\Windows\system32\Res\Wav\b25.wav
C:\Windows\system32\Res\Wav\b24.wav
C:\Windows\system32\Res\Wav\b23.wav
C:\Windows\system32\Res\Wav\b22.wav
C:\Windows\system32\Res\Wav\b21.wav
C:\Windows\system32\Res\Wav\b20.wav
C:\Windows\system32\Res\Wav\b19.wav
C:\Windows\system32\Res\Wav\b18.wav
C:\Windows\system32\Res\Wav\b17.wav
C:\Windows\system32\Res\Wav\b16.wav
C:\Windows\system32\Res\Wav\b15.wav
C:\Windows\system32\Res\Wav\b14.wav
C:\Windows\system32\Res\Wav\b13.wav
C:\Windows\system32\Res\Wav\b55.wav
C:\Windows\system32\Res\Wav\b54.wav
C:\Windows\system32\Res\Wav\b53.wav
C:\Windows\system32\Res\Wav\b52.wav
C:\Windows\system32\Res\Wav\b51.wav
C:\Windows\system32\Res\Wav\b50.wav
C:\Windows\system32\Res\Wav\b49.wav
C:\Windows\system32\Res\Wav\b48.wav
C:\Windows\system32\Res\Wav\b47.wav
C:\Windows\system32\Res\Wav\b46.wav
C:\Windows\system32\Res\Wav\b45.wav
C:\Windows\system32\Res\Wav\b44.wav
C:\Windows\system32\Res\Wav\b43.wav
C:\Windows\system32\Res\Wav\b42.wav
C:\Windows\system32\Res\Wav\b41.wav
C:\Windows\system32\Res\Wav\b40.wav
C:\Windows\system32\Res\Wav\b39.wav
C:\Windows\system32\Res\Wav\b38.wav
C:\Windows\system32\Res\Wav\b37.wav
C:\Windows\system32\Res\Wav\b36.wav
C:\Windows\system32\Res\Wav\b35.wav
C:\Windows\system32\Res\Wav\b34.wav
C:\Windows\system32\Res\Wav\b33.wav
C:\Windows\system32\Res\Wav\b32.wav
C:\Windows\system32\Res\Wav\b31.wav
C:\Windows\system32\Res\Wav\b30.wav
C:\Windows\system32\Res\A01.mp3
C:\Windows\system32\Res\AB1.mp3
#4#
C:\Users\win7\AppData\Local\Temp\nsfAE1C.tmp
C:\Users\win7\AppData\Local\Temp\nsvAE2D.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsvAE2D.tmp\LangDLL.dll
C:\Users\win7\AppData\Local\Temp\nsvAE2D.tmp\ioFileY.ini
C:\Users\win7\AppData\Local\Temp\nsvAE2D.tmp\ioSpecial.ini
C:\Users\win7\AppData\Local\Temp\nsvAE2D.tmp\modern-wizard.bmp
C:\Users\win7\AppData\Local\Temp\nsvAE2D.tmp\modern-header.bmp
C:\Users\win7\AppData\Local\Temp\nsvAE2D.tmp\InstallOptions.dll
C:\Users\win7\AppData\Local\Temp\_asw_aisI.tm~a02776\setup.lok
C:\Users\win7\AppData\Local\Temp\_asw_aisI.tm~a02776\servers.def
C:\Users\win7\AppData\Local\Temp\_asw_aisI.tm~a02776\servers.def.lkg
C:/Users/win7/AppData/Roaming/Helios/TextPad/6/ConfigState.xml
C:\Users\win7\AppData\Roaming\Helios
C:\Users\win7\AppData\Roaming\Helios\TextPad
C:\Users\win7\AppData\Roaming\Helios\TextPad\5.0
C:/Users/win7/AppData/Roaming/Helios/TextPad/TextPadKey.xml
C:/ProgramData/Helios/TextPad/TextPadKey.xml
C:\TextPad.exe
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TextPad.lnk
C:\Users\win7\AppData\Roaming\Microsoft\Windows\SendTo\TextPad.lnk
C:\System\TXPADENG.TIP
C:\Users\win7\AppData\Local\Temp\nsq8893.tmp\modern-wizard.bmp
C:\Users\win7\AppData\Local\Temp\nsq8893.tmp\nsDialogs.dll
C:\Users\win7\AppData\Local\Temp\nsq8893.tmp\System.dll
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freelancer Mod Manager\Uninstall.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freelancer Mod Manager\Freelancer Mod Manager.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freelancer Mod Manager\FAQ and Troublshooting info.lnk
C:\Users\Public\Desktop\Freelancer Mod Manager.lnk
C:\Users\win7\AppData\Local\Temp\is-012GE.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-012GE.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Roaming\TeamViewer\TeamViewer10_Logfile.log
C:\Users\win7\AppData\Roaming\TeamViewer\TeamViewer10_Logfile2.log
|
C:\Users\win7\AppData\Local\Temp\GLKB2D5.tmp
C:\Users\win7\AppData\Local\Temp\samB172.exe
C:\Windows\INF\setupapi.app.log
C:\Windows\System32\DriverStore\infpub.dat
C:\Windows\System32\DriverStore\infstrng.dat
C:\Windows\System32\DriverStore\INFCACHE.1
C:\Windows\System32\DriverStore\infstor.dat
C:\Windows\System32\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\machine.PNF
C:\Windows\inf\apps.inf
C:\Windows\inf\defltbase.inf
C:\Windows\inf\defltwk.inf
C:\Windows\inf\dshowext.inf
C:\Windows\inf\dwup.inf
C:\Windows\inf\errata.inf
C:\Windows\inf\fontsetup.inf
C:\Windows\inf\lltdio.inf
C:\Windows\inf\ndiscap.inf
C:\Windows\inf\ndisuio.inf
C:\Windows\inf\netavpna.inf
C:\Windows\inf\netavpnt.inf
C:\Windows\inf\netbrdgm.inf
C:\Windows\inf\netbrdgs.inf
C:\Windows\inf\netip6.inf
C:\Windows\inf\netmscli.inf
C:\Windows\inf\netnb.inf
C:\Windows\inf\netnwifi.inf
C:\Windows\inf\netpacer.inf
C:\Windows\inf\netpgm.inf
C:\Windows\inf\netrasa.inf
C:\Windows\inf\netrass.inf
C:\Windows\inf\netrast.inf
C:\Windows\inf\netserv.inf
C:\Windows\inf\netsstpa.inf
C:\Windows\inf\netsstpt.inf
C:\Windows\inf\nettcpip.inf
C:\Windows\inf\netvwififlt.inf
C:\Windows\inf\netvwifimp.inf
C:\Windows\inf\printupg.inf
C:\Windows\inf\puwk.inf
C:\Windows\inf\rspndr.inf
C:\Windows\inf\sceregvl.inf
C:\Windows\inf\secrecs.inf
C:\Windows\inf\wfplwf.inf
C:\Windows\System32\DriverStore\FileRepository\volume.inf_amd64_neutral_df8bea40ac96ca21\volume.PNF
C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\mshdc.PNF
C:\Windows\System32\DriverStore\FileRepository\disk.inf_amd64_neutral_10ce25bbc5a9cc43\disk.PNF
C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B8CC409ACDBF2A2FE04C56F2875B1FD6
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C24EC5BDAF13613245B4CECC3DE91DC6
C:\Windows\System32\DriverStore\FileRepository\volsnap.inf_amd64_neutral_7499a4fac85b39fc\volsnap.PNF
C:\Windows\System32\DriverStore\FileRepository\battery.inf_amd64_neutral_cb8fa151a7b7cb80\battery.PNF
C:\Windows\System32\DriverStore\FileRepository\display.inf_amd64_neutral_ea1c8215e52777a6\display.PNF
C:\Windows\System32\DriverStore\FileRepository\vboxvideo.inf_amd64_neutral_7b3d971e3a7f0e10\vboxvideo.PNF
C:\Windows\System32\DriverStore\FileRepository\vboxvideo.inf_amd64_neutral_7b3d971e3a7f0e10\vboxvideo.inf
C:\Windows\System32\DriverStore\FileRepository\vboxvideo.inf_amd64_neutral_7b3d971e3a7f0e10\VBoxVideo.cat
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_A48269025E9FBCB7150179B737FF877D
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_A48269025E9FBCB7150179B737FF877D
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_BA7B7DBD673857DD5D9FEE02C6B486F8
C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\62B5AF9BE9ADC1085C3C56EC07A82BF6
C:\Windows\System32\DriverStore\FileRepository\vboxvideo.inf_amd64_neutral_6110a52f29e147b0\vboxvideo.PNF
C:\Windows\System32\DriverStore\FileRepository\vboxvideo.inf_amd64_neutral_6110a52f29e147b0\vboxvideo.inf
C:\Windows\System32\DriverStore\FileRepository\vboxvideo.inf_amd64_neutral_6110a52f29e147b0\VBoxVideo.cat
C:\Windows\System32\DriverStore\FileRepository\keyboard.inf_amd64_neutral_0684fdc43059f486\keyboard.PNF
C:\Windows\System32\DriverStore\FileRepository\msports.inf_amd64_neutral_fdcfb86ce78678d1\msports.PNF
C:\Windows\System32\DriverStore\FileRepository\cpu.inf_amd64_neutral_ae5de2e1bf2793c3\cpu.PNF
C:\Users\win7\AppData\Local\Temp\mia3C42.tmp\mia.lib
C:\Users\win7\AppData\Local\Temp\mia3C42.tmp\UltraFileSearchLite_450_Setup.exe
C:\Users\win7\AppData\Local\Temp\mia3C42.tmp\UltraFileSearchLite_450_Setup.res
C:\Users\win7\AppData\Local\Temp\mia1\readme.rtf
\\.\SuperBPMDev0
\\.\REGSY
\\.\REGVX
\\.\FILEV
\\.\FILEM
\\.\TRW
\\.\ICEEX
C:\Users\win7\AppData\Roaming\WildTangent\Analytics\WTAnalytics.dat
C:/Users/win7/AppData/Local/Temp/_MEI27002
C:
C:\Users\win7\AppData\Local\Temp\_MEI27002
C:\Windows\system32
C:\Users\win7\AppData\Local\Temp\_MEI27002\_socket.pyd
C:\Users\win7\AppData\Local\Temp\_MEI27002\_ssl.pyd
C:\Users\win7\AppData\Local\Temp\_MEI27002\_ctypes.pyd
C:\Users\win7\AppData\Local\Temp\_MEI27002\_hashlib.pyd
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\VBOXXHARDDISK_VB71db7450-88c1f3ed[1].htm
C:\Users\win7\AppData\Local\Temp\E592A50D-87A9-437F-9F9B-31AA642D3A9Bmp\\tE592A50D-87A9-437.tmp
C:\Users\win7\AppData\Local\Temp\BGJVvbJ.exe
C:\Users\win7\AppData\Local\Temp\Creative_ALchemy_AL6_Cleanup.0001.dir.0000\~efe2.tmp
C:\Users\win7\AppData\Local\Temp\Creative_ALchemy_AL6_Cleanup.0001
C:\Users\win7\AppData\Local\Temp\Creative_ALchemy_AL6_Cleanup.0001.dir.0000\PfdRun.pfd
C:\Users\win7\AppData\Local\Temp\Creative_ALchemy_AL6_Cleanup.0001.dir.0000\~df394b.tmp
C:\Users\win7\AppData\Local\Temp\\Creative_ALchemy_AL6_Cleanup.0001.dir.0000\PfdRun.pfd
C:\Users\win7\AppData\Local\Temp\Creative_ALchemy_AL6_Cleanup.0001.dir.0000\~de2314.tmp
C:\Users\win7\AppData\Local\Temp\miaB082.tmp\mia.lib
C:\Windows\system32\mlang.dll
C:\Windows\BVubiAqv.exe
C:\AMD\Radeon-Crimson-16.3.2-ccc-cs64-64bit\ccc-cs64.msi
C:\AMD\Radeon-Crimson-16.3.2-ccc-th64-64bit\ccc-th64.msi
C:\AMD\Radeon-Crimson-16.3.2-ccc-zh-cht64-64bit\ccc-zh-CHT64.msi
C:\Users\win7\AppData\Local\Temp\nsc7DBB.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsc7DBB.tmp\inetc.dll
C:\Users\win7\AppData\Local\Temp\01-8a0e2e46-07dc-49de-826e-43a81d211841\finalBundle
C:\setup.log
C:\Users\win7\AppData\Local\tuto_monetize_220160408\tuto_monetize_220160408\1.10\cnf.cyl
C:\Users\win7\AppData\Local\Temp\gchE834.tmp
C:\Users\win7\AppData\Local\Temp\is-GIMVR.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-GIMVR.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\is-05C2G.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-05C2G.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\dfs7A01.tmp
C:\Users\win7\AppData\Local\Temp\b4dc208c-7bd9-4329-97c4-d2dc5041a19f\bin.dmc
C:\Users\win7\AppData\Local\Temp\b4dc208c-7bd9-4329-97c4-d2dc5041a19f\bin\bin.html
C:\Users\win7\AppData\Local\Temp\cetrainers\CET27C6.tmp\CET_TRAINER.CETRAINER
nul
C:\Users\win7\AppData\Local\Temp\\~DF21D832D2752A94D4.TMP
C:\Users\win7\AppData\Local\Temp\nsyBD6F.tmp\modern-header.bmp
C:\Users\win7\AppData\Local\Temp\nsyBD6F.tmp\modern-wizard.bmp
C:\Users\win7\AppData\Local\Temp\nsyBD6F.tmp\nsDialogs.dll
C:\Users\win7\AppData\Local\Temp\nsyBD6F.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsyBD6F.tmp\KillProcWMI.dll
C:\Program Files\Reason\Security\rsUI.exe
C:\Program Files\Reason\Security\rsUI.exe.config
C:\Program Files\Reason\Security\rsUICtls.dll
C:\Program Files\Reason\Security\rsEngine.dll
C:\Program Files\Reason\Security\Microsoft.Win32.TaskScheduler.dll
C:\Program Files\Reason\Security\rsEngineHelper.exe
C:\Program Files\Reason\Security\rsEngineHelper.exe.config
C:\Program Files\Reason\Security\rsEngineSvc.exe
C:\Program Files\Reason\Security\rsEngineSvc.exe.config
C:\Program Files\Reason\Security\Signatures.dat
C:\Program Files\Reason\Security\Uninstall.exe
C:\Program Files\Reason\Security\x64\System.Data.SQLite.dll
C:\Program Files\Reason\Security\x86\System.Data.SQLite.dll
C:\Program Files\Reason
C:\Program Files\Reason\Security
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reason Core Security\Reason Core Security.lnk
C:\Users\Public\Desktop\Reason Core Security.lnk
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\55607[1].gif
C:\Windows\System32\msxml3.dll\1
C:\Windows\System32\msxml3.dll
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\sprite[1].png
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\left_pane[1].jpg
C:\Users\win7\AppData\Local\Temp\nsiC141.tmp\nsDialogs.dll
C:\Users\win7\AppData\Local\Temp\nsiC141.tmp\pozadi.bmp
C:\Users\win7\AppData\Local\Temp\nsiC141.tmp\System.dll
SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontLink\SystemLink
SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0
SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback
Tahoma
Software\Microsoft\MediaPlayer\Setup
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\wmplayer.exe
SOFTWARE\Microsoft\MediaPlayer\Preferences
SOFTWARE\Policies\Microsoft\WindowsMediaPlayer
Software\Borland\Locales
Software\Borland\Delphi\Locales
Software\Stardock
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
Software\Microsoft\Windows\CurrentVersion\Policies\Network
Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32
MS Sans Serif
Software\Microsoft\Windows NT\CurrentVersion
Software\Microsoft\Shared Tools\DAO360.dll
Software\Microsoft\Shared Tools\DAO350.dll
Software\Microsoft\Shared Tools\DAO350
Software\Microsoft\Shared Tools\DAO
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Full
SOFTWARE\Microsoft\NET Framework Setup\NDP\v2.0.50727
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Fences Pro
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Fences Pro
SOFTWARE\Stardock\Misc\Fences
SOFTWARE\Stardock\ObjectDesktop\FencesPro
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{10CD364B-FFCC-48BE-B469-B9622A033075}
SOFTWARE\Stardock\Misc\Fences2
Software\Microsoft\Windows\CurrentVersion\Explorer\KindMap
Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl
Software\Microsoft\Internet Explorer\Main\FeatureControl
FEATURE_IGNORE_POLICIES_ZONEMAP_IF_ESC_ENABLED_KB918915
FEATURE_ZONES_CHECK_ZONEMAP_POLICY_KB941001
Software\Policies
Software
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Software\Microsoft\Internet Explorer\Main
Software\Policies\Microsoft\Internet Explorer\Main
FEATURE_INITIALIZE_URLACTION_SHELLEXECUTE_TO_ALLOW_KB936610
Software\Microsoft\Windows\CurrentVersion\Internet Settings
FEATURE_ALLOW_REVERSE_SOLIDUS_IN_USERINFO_KB932562
Software\Policies\Microsoft\Internet Explorer
Microsoft\Internet Explorer\Security
System\Setup
Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\
FEATURE_LOCALMACHINE_LOCKDOWN
FEATURE_ZONES_DEFAULT_DRIVE_INTRANET_KB941000
FEATURE_PROTOCOL_LOCKDOWN
FEATURE_HTTP_USERNAME_PASSWORD_DISABLE
Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache
RETRY_HEADERONLYPOST_ONCONNECTIONRESET
FEATURE_MIME_HANDLING
FEATURE_BYPASS_CACHE_FOR_CREDPOLICY_KB936611
FEATURE_IGNORE_MAPPINGS_FOR_CREDPOLICY
FEATURE_INCLUDE_PORT_IN_SPN_KB908209
FEATURE_BUFFERBREAKING_818408
FEATURE_SKIP_POST_RETRY_ON_INTERNETWRITEFILE_KB895954
FEATURE_FIX_CHUNKED_PROXY_SCRIPT_DOWNLOAD_KB843289
FEATURE_USE_CNAME_FOR_SPN_KB911149
FEATURE_PERMIT_CACHE_FOR_AUTHENTICATED_FTP_KB910274
FEATURE_DISABLE_UNICODE_HANDLE_CLOSING_CALLBACK
FEATURE_DISALLOW_NULL_IN_RESPONSE_HEADERS
FEATURE_DIGEST_NO_EXTRAS_IN_URI
FEATURE_ENABLE_PASSPORT_SESSION_STORE_KB948608
FEATURE_EXCLUDE_INVALID_CLIENT_CERT_KB929477
FEATURE_USE_UTF8_FOR_BASIC_AUTH_KB967545
FEATURE_RETURN_FAILED_CONNECT_CONTENT_KB942615
FEATURE_PRESERVE_SPACES_IN_FILENAMES_KB952730
FEATURE_ENABLE_PROXY_CACHE_REFRESH_KB2983228
SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache
SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache
FEATURE_DISABLE_NOTIFY_UNVERIFIED_SPN_KB2385266
FEATURE_COMPAT_USE_CONNECTION_BASED_NEGOTIATE_AUTH_KB2151543
FEATURE_SCH_SEND_AUX_RECORD_KB_2618444
Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad
{69DC4768-446B-4F82-A6B0-63966A243064}
Software\Policies\Microsoft\PeerDist\Service
Software\Microsoft\Windows NT\CurrentVersion\PeerDist\Service
Content
Cookies
History
AppID
{e745ce26-593d-400b-a02e-f9bda91946f0}
Software\Microsoft\.NETFramework\Policy\
v2.0
Software\Microsoft\.NETFramework
Upgrades
Standards
AppPatch
Software\Microsoft\.NETFramework\Policy\Standards
v4.0.30319
Software\Microsoft\.NETFramework\Policy\Upgrades
Software\Microsoft\WBEM\CIMOM
SOFTWARE\Classes\CLSID\{F83D1872-D9FF-47F8-B5A0-49CC51E24EE8}
SOFTWARE\MiddleRush
SOFTWARE\Microsoft\BidInterface\Loader
SOFTWARE\ODBC\ODBC.INI\ODBC
{bf2d6346-7e40-4561-ac08-418d432d200f}
v1.0.3705
Software\Microsoft\Fusion
Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sample
Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
Software\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets
Internet
LocalIntranet
Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-3979321414-2393373014-2172761192-1000
Software\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions
{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}
PropertyBag
Software\Microsoft\Windows\CurrentVersion\Explorer
SessionInfo\1
KnownFolders
Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
Software\Policies\Microsoft\Windows\Explorer
{5E6C858F-0E22-4760-9AFE-EA3317B67173}
Software\Microsoft\.NETFramework\v2.0.50727\Security\Policy
Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32
index1c2
NI\181938c6\7950e2c5
NI\181938c6\7950e2c5\16
IL\7950e2c5\4b5f28af\5f
SYSTEM\CurrentControlSet\Services\crypt32
SOFTWARE\Microsoft\Windows NT\CurrentVersion\msasn1
Software\Microsoft\Cryptography\Providers\Trust\Certificate\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}
Software\Microsoft\Cryptography\Providers\Trust\FinalPolicy\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}
Software\Microsoft\Cryptography\Providers\Trust\Initialization\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}
Software\Microsoft\Cryptography\Providers\Trust\Message\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}
Software\Microsoft\Cryptography\Providers\Trust\Signature\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}
Software\Microsoft\Cryptography\Providers\Trust\CertCheck\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}
Software\Microsoft\Cryptography\Providers\Trust\DiagnosticPolicy\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}
Software\Microsoft\Cryptography\Providers\Trust\Cleanup\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}
SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Enhanced RSA and AES Cryptographic Provider
Software\Policies\Microsoft\Cryptography
Software\Microsoft\Cryptography
Software\Microsoft\Cryptography\Offload
Software\Microsoft\Cryptography\DESHashSessionKeyBackward
S-1-5-21-3979321414-2393373014-2172761192-1000
Software\Microsoft\Internet Explorer\Security
Software\Policies\Microsoft\SystemCertificates\TrustedPublisher\Safer
Software\Microsoft\SystemCertificates\TrustedPublisher\Safer
Software\Microsoft\Cryptography\Wintrust\Config
Software\Microsoft\Cryptography\OID
EncodingType 0
CryptSIPDllPutSignedDataMsg
{000C10F1-0000-0000-C000-000000000046}
{06C9E010-38CE-11D4-A2A3-00104BD35090}
{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}
{1A610570-38CE-11D4-A2A3-00104BD35090}
{603BCC1F-4B59-4E08-B724-D2C6297EF351}
{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}
{C689AAB8-8E78-11D0-8C47-00C04FC295EE}
{C689AAB9-8E78-11D0-8C47-00C04FC295EE}
{C689AABA-8E78-11D0-8C47-00C04FC295EE}
{DE351A42-8E59-11D0-8C47-00C04FC295EE}
{DE351A43-8E59-11D0-8C47-00C04FC295EE}
EncodingType 1
CryptSIPDllGetSignedDataMsg
CryptDllFindOIDInfo
1.3.6.1.4.1.311.44.3.4!7
Software\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.44.3.4!7
1.3.6.1.4.1.311.47.1.1!7
Software\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.47.1.1!7
1.3.6.1.4.1.311.64.1.1!7
Software\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.64.1.1!7
CertDllOpenStoreProv
#16
Ldap
CryptDllDecodeObjectEx
1.2.840.113549.1.9.16.1.1
1.2.840.113549.1.9.16.2.1
1.2.840.113549.1.9.16.2.11
1.2.840.113549.1.9.16.2.12
1.2.840.113549.1.9.16.2.2
1.2.840.113549.1.9.16.2.3
1.2.840.113549.1.9.16.2.4
CryptDllDecodeObject
#2000
#2001
#2002
#2003
#2004
#2005
#2006
#2007
#2008
#2009
#2130
#2221
#2222
#2223
1.3.6.1.4.1.311.12.2.1
1.3.6.1.4.1.311.12.2.2
1.3.6.1.4.1.311.12.2.3
1.3.6.1.4.1.311.16.1.1
1.3.6.1.4.1.311.16.4
1.3.6.1.4.1.311.2.1.10
1.3.6.1.4.1.311.2.1.11
1.3.6.1.4.1.311.2.1.12
1.3.6.1.4.1.311.2.1.15
1.3.6.1.4.1.311.2.1.20
1.3.6.1.4.1.311.2.1.25
1.3.6.1.4.1.311.2.1.26
1.3.6.1.4.1.311.2.1.27
1.3.6.1.4.1.311.2.1.28
1.3.6.1.4.1.311.2.1.30
1.3.6.1.4.1.311.2.1.4
CryptSIPDllVerifyIndirectData
CryptDllEncodeObjectEx
CryptDllEncodeObject
CryptDllImportPublicKeyInfoEx
CryptDllConvertPublicKeyInfo
Software\Policies\Microsoft\SystemCertificates\Root\ProtectedRoots
Software\Policies\Microsoft\SystemCertificates\AuthRoot
Software\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config
Software\Microsoft\SystemCertificates\AuthRoot\AutoUpdate
Software\Policies\Microsoft\SystemCertificates\ChainEngine\Config
Default
Software\Microsoft\SystemCertificates\My\PhysicalStores
Software\Microsoft\SystemCertificates\My
<NULL>
Certificates
CRLs
CTLs
Keys
Software\Microsoft\SystemCertificates\CA\PhysicalStores
109F1CAED645BB78B3EA2B94C0697C740733031C
D559A586669B08F46A30A133F8A9ED3D038E2EA8
FEE449EE0E3965A5246F000E87FDE2A065FD89D4
A377D1B1C0538833035211F4083D00FECC414DAB
Software\Microsoft\EnterpriseCertificates\CA\PhysicalStores
Software\Microsoft\SystemCertificates\Disallowed\PhysicalStores
1916A2AF346D399F50313C393200F14140456616
2A83E9020591A55FC6DDAD3FB102794C52B24E70
2B84BFBB34EE2EF949FE1CBE30AA026416EB2216
305F8BD17AA2CBC483A4C41B19A39A0C75DA39D6
367D4B3B4FCBBC0B767B2EC0CDB2A36EAB71A4EB
3A850044D8A195CD401A680C012CB0A3B5F8DC08
40AA38731BD189F9CDB5B9DC35E2136F38777AF4
43D9BCB568E039D073A74A71D8511F7476089CC3
471C949A8143DB5AD5CDF1C972864A2504FA23C9
51C3247D60F356C7CA3BAF4C3F429DAC93EE7B74
5DE83EE82AC5090AEA9D6AC4E7A6E213F946E179
61793FCBFA4F9008309BBA5FF12D2CB29CD4151A
637162CC59A3A1E25956FA5FA8F60D2E1C52EAC6
63FEAE960BAA91E343CE2BD8B71798C76BDB77D0
6431723036FD26DEA502792FA595922493030F97
7D7F4414CCEF168ADF6BF40753B5BECD78375931
80962AE4D6C5B442894E95A13E4A699E07D694CF
86E817C81A5CA672FE000F36F878C19518D6F844
8E5BD50D6AE686D65252F843A9D4B96D197730AB
9845A431D51959CAF225322B4A4FE9F223CE6D15
B533345D06F64516403C00DA03187D3BFEF59156
B86E791620F759F17B8D25E38CA8BE32E7D5EAC2
C060ED44CBD881BD0EF86C0BA287DDCF8167478C
CEA586B2CE593EC7D939898337C57814708AB2BE
D018B62DC518907247DF50925BB09ACF4A5CB3AD
F8A54E03AADC5692B850496A4C4630FFEAA29D83
FA6660A94AB45F6A88C0D7874D89A863D74DEE97
Software\Microsoft\EnterpriseCertificates\Disallowed\PhysicalStores
Software\Microsoft\SystemCertificates\Root\PhysicalStores
Software\Microsoft\SystemCertificates\Root\ProtectedRoots
18F7C1FCC3090203FD5BAA2F861A754976C8DD25
245C97DF7514E7CF2DF8BE72AE957B9E04741E85
3B1EFD3A66EA28B16697394703A72CA340A05BD5
7F88CD7223F3C813818C994614A89C99FA3B5247
8F43288AD272F3103B6FB1428485EA3014C0BCFE
A43489159A520F0D93D032CCAF37E7FE20A8B419
BE36A4562FB2EE05DBB3D32323ADF445084ED656
CDD4EEAE6000AC7F40C3802C171E30148030C072
4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5
4F65566336DB6598581D584A596C87934D5F2AB4
5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25
742C3192E607E424EB4549542BE1BBC53E6174E2
91C6D6EE3E8AC86384E548C299295C756C817B81
97817950D81C9670CC34D809CF794431367EF474
D23209AD23D314232174E40D7F9D62139786633A
D4DE20D05E66FC53FE1A50882C78DB2852CAE474
Software\Microsoft\EnterpriseCertificates\Root\PhysicalStores
Software\Microsoft\SystemCertificates\TrustedPeople\PhysicalStores
Software\Microsoft\EnterpriseCertificates\TrustedPeople\PhysicalStores
Software\Microsoft\SystemCertificates\trust\PhysicalStores
Software\Microsoft\EnterpriseCertificates\trust\PhysicalStores
Software\Microsoft\Windows NT\CurrentVersion\Diagnostics
Software\Microsoft\Windows NT\CurrentVersion\Winlogon
Software\Policies\Microsoft\Windows\System
Software\Microsoft\Rpc
Software\Policies\Microsoft\Windows NT\Rpc
System\CurrentControlSet\Control\SQMServiceList
Software\Policies\Microsoft\SystemCertificates
Software\Policies\Microsoft\SystemCertificates\Root
Software\Policies\Microsoft\SystemCertificates\trust
Software\Policies\Microsoft\SystemCertificates\CA
Software\Policies\Microsoft\SystemCertificates\Disallowed
Software\Policies\Microsoft\SystemCertificates\TrustedPeople
System\CurrentControlSet\Services\LDAP
Software\Microsoft\Cryptography\TVO
SchemeDllRetrieveEncodedObjectW
SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp\Tracing
SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp
System\CurrentControlSet\Services\WinSock2\Parameters
AppId_Catalog
0FF82528
Protocol_Catalog9
00000005
Catalog_Entries
000000000001
000000000002
000000000003
000000000004
000000000005
000000000006
000000000007
000000000008
000000000009
000000000010
NameSpace_Catalog5
00000028
System\CurrentControlSet\Services\Winsock2\Parameters
System\CurrentControlSet\Control\LsaExtensionConfig\SspiCli
System\CurrentControlSet\Control\SecurityProviders
System\CurrentControlSet\Control\Lsa\SspiCache
credssp.dll
System\CurrentControlSet\Control\SecurityProviders\SaslProfiles
Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections
SYSTEM\CurrentControlSet\Services\Winsock\Parameters
System\CurrentControlSet\Services\Tcpip6\Parameters\Winsock
System\CurrentControlSet\Services\Tcpip\Parameters\Winsock
SYSTEM\CurrentControlSet\Services\Winsock\Setup Migration\Providers
Tcpip
Tcpip6
System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces
{cfe68b1e-656a-488b-8077-738ca67ba3a5}
SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{CFE68B1E-656A-488B-8077-738CA67BA3A5}
{3d3783a2-703a-11de-8c7a-806e6f6e6963}
SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{3D3783A2-703A-11DE-8C7A-806E6F6E6963}
SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters\Interfaces\{3D3783A2-703A-11DE-8C7A-806E6F6E6963}
{1409cd30-b4f5-4078-86aa-9b8c995c7d0c}
SYSTEM\CurrentControlSet\Services\Tcpip\Linkage
SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
Software\Microsoft\windows\CurrentVersion\Internet Settings\Wpad
Software\Microsoft\Ole
SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters\Interfaces\{CFE68B1E-656A-488B-8077-738CA67BA3A5}
System\CurrentControlSet\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}
52-54-00-12-35-02
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
System\CurrentControlSet\Services\DnsCache\Parameters
Software\Policies\Microsoft\Windows NT\DnsClient
Software\Policies\Microsoft\System\DNSClient
CertDllVerifyRevocation
DEFAULT
TimeValidDllGetObject
UrlDllGetObjectUrl
ContextDllCreateObjectContext
SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes
SYSTEM\CurrentControlSet\Services\KMSServerService\Parameters
Software\CodeGear\Locales
System\CurrentControlSet\Control\Keyboard Layouts\041F0409
System\CurrentControlSet\Control\Keyboard Layouts\04090409
Software\Microsoft\Windows\CurrentVersion\App Paths\RegistryReviver.exe
S-1-5-21-3979321414-2393373014-2172761192-1000\SOFTWARE\ReviverSoft\RRST\LANG
SOFTWARE\ReviverSoft\RRST
Software\Microsoft\Windows\CurrentVersion
Software\Microsoft\Windows\CurrentVersion\Uninstall
Software\Microsoft\Windows\CurrentVersion\Uninstall\AddressBook
Software\Microsoft\Windows\CurrentVersion\Uninstall\Connection Manager
Software\Microsoft\Windows\CurrentVersion\Uninstall\DirectDrawEx
Software\Microsoft\Windows\CurrentVersion\Uninstall\Fontcore
Software\Microsoft\Windows\CurrentVersion\Uninstall\IE40
Software\Microsoft\Windows\CurrentVersion\Uninstall\IE4Data
Software\Microsoft\Windows\CurrentVersion\Uninstall\IE5BAKEX
Software\Microsoft\Windows\CurrentVersion\Uninstall\IEData
Software\Microsoft\Windows\CurrentVersion\Uninstall\MobileOptionPack
Software\Microsoft\Windows\CurrentVersion\Uninstall\SchedulingAgent
Software\Microsoft\Windows\CurrentVersion\Uninstall\WIC
Software\Microsoft\Windows\CurrentVersion\Uninstall\{050d4fc8-5d48-4b8f-8972-47c82c46020f}
Software\Microsoft\Windows\CurrentVersion\Uninstall\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}
Software\Microsoft\Windows\CurrentVersion\Uninstall\{f65db027-aff3-4070-886a-0d87064aabb1}
Software\Microsoft\Windows\CurrentVersion\Uninstall\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}
Software\Microsoft\Windows\CurrentVersion\Uninstall\Oracle VM VirtualBox Guest Additions
Software\Microsoft\Windows\CurrentVersion\Uninstall\{929FBD26-9020-399B-9A7A-751D61F0B942}
Software\Microsoft\Windows\CurrentVersion\Uninstall\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}
Software\Microsoft\Windows\CurrentVersion\Uninstall\{E2B51919-207A-43EB-AE78-733F9C6797C3}
MS Shell Dlg 2
Software\Microsoft\Windows\CurrentVersion\Uninstall\Registry Reviver
MS Shell Dlg
SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
SOFTWARE\Microsoft\OLEAUT
Software\Microsoft\Windows\CurrentVersion\Setup
system\CurrentControlSet\control\NetworkProvider\HwOrder
SOFTWARE\Microsoft\CTF\Compatibility\sample
Software\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436}
SOFTWARE\Microsoft\CTF\TIP\
{0000897b-83df-4b96-be07-0fb58b01c4a4}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
{03B5835F-F03C-411B-9CE2-AA23E1171E36}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
{07EB03D6-B001-41DF-9192-BF9B841EE71F}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
{3697C5FA-60DD-4B56-92D4-74A569205C16}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
{531FDEBF-9B4C-4A43-A2AA-960E8FCDC732}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
{81D4E9C9-1D3B-41BC-9E6C-4B40BF79E35E}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
{8613E14C-D0C0-4161-AC0F-1DD2563286BC}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
{A028AE76-01B1-46C2-99C4-ACD9858AE02F}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
{AE6BE008-07FB-400D-8BEB-337A64F7051F}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
{E429B25A-E5D3-4D1F-9BE3-0C608477E3A1}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
{F25E9F57-2FC8-4EB3-A41A-CCE5F08541E6}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
{F89E9E58-BD2F-4008-9AC2-0F816C09F4EE}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}
Keyboard Layout\Toggle
Software\Microsoft\CTF\DirectSwitchHotkeys
SOFTWARE\Microsoft\CTF\
Software\Microsoft\CTF\LayoutIcon\0409\0000041f
SOFTWARE\Microsoft\CTF\KnownClasses
Arial
Software\Microsoft\Windows
HTML Help
Help
SYSTEM\CurrentControlSet\Control\FileSystem
ISlogit
Software\Policies\Microsoft\Windows\Installer
Software\Microsoft\Internet Explorer
SOFTWARE\Microsoft\Windows NT\CurrentVersion
System\CurrentControlSet\Control
Software\Microsoft\RestartManager
Verdana
Software\Microsoft\Windows\CurrentVersion\Uninstall\Intel Chipset Driver_is1
Software\InstallShield\ISWI\7.0\SetupExeLog
Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
PROTOCOLS\Name-Space Handler\
PROTOCOLS\Name-Space Handler\file\
PROTOCOLS\Name-Space Handler\*\
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PuTTY_is1
v2.0.50727
NI\7eb42eb8\45cd7a70
Software\Microsoft\StrongName
Software\Microsoft\Fusion\PublisherPolicy\Default
policy.8.0.Microsoft.VisualBasic__b03f5f7f11d50a3a
NI\1c22df2f\4f99a7c9
NI\1c22df2f\4f99a7c9\66
IL\c991064\5086dba8\51
IL\6dc7d4c0\c47ad54\56
IL\3ced59c5\48d69eb2\54
IL\f6e8397\628bc3e2\47
IL\2b1a4e4\3822b536\f
IL\24bf93f6\708deaf7\46
IL\4f99a7c9\191b956f\66
NI\30bc7c4f\3f50fe4f\18
IL\424bd4d8\324708cb\5c
IL\19ab8d57\c91dbb2\5e
IL\3f50fe4f\265c633d\60
policy.2.0.System__b77a5c561934e089
policy.2.0.System.Xml__b77a5c561934e089
policy.2.0.System.Configuration__b03f5f7f11d50a3a
policy.2.0.System.Web__b03f5f7f11d50a3a
policy.2.0.System.Management__b03f5f7f11d50a3a
policy.2.0.System.Runtime.Remoting__b77a5c561934e089
policy.2.0.System.Deployment__b03f5f7f11d50a3a
policy.2.0.System.Drawing__b03f5f7f11d50a3a
policy.2.0.System.Windows.Forms__b77a5c561934e089
SOFTWARE\Microsoft\.NETFramework\Policy\APTCA
NI\61e7e666\c991064
NI\61e7e666\c991064\a
IL\475dce40\1c022996\5b
IL\2dd6ac50\553abeb3\58
IL\41c04c7e\4bf62c79\50
NI\3cca06a0\6dc7d4c0\b
policy.2.0.System.Runtime.Serialization.Formatters.Soap__b03f5f7f11d50a3a
policy.2.0.Accessibility__b03f5f7f11d50a3a
policy.2.0.System.Security__b03f5f7f11d50a3a
NI\432ba598\f6e8397
NI\432ba598\f6e8397\20
IL\3a6a696d\59152bf2\4a
policy.2.0.System.DirectoryServices__b03f5f7f11d50a3a
NI\2b3a4dcf\1398005d
SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Assemblies\C:|sample
Software\Microsoft\Installer\Assemblies\C:|sample
SOFTWARE\Classes\Installer\Assemblies\C:|sample
SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Assemblies\Global
Software\Microsoft\Installer\Assemblies\Global
SOFTWARE\Classes\Installer\Assemblies\Global
NI\2b3a4dcf\6fe161d0
Microsoft Sans Serif
policy.9.2.DevExpress.XtraCharts.v9.2__b88d1754d700e49a
NI\4d5d80e3\7c572fbd
CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\InprocServer32
CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\Server
System
SOFTWARE\Microsoft\Internet Explorer\MAIN
FEATURE_IEDDE_REGISTER_PROTOCOL
PROTOCOLS\Name-Space Handler\about\
FEATURE_GPU_RENDERING
FEATURE_CSS_DATA_RESPECTS_XSS_ZONE_SETTING_KB912120
FEATURE_ARIA_SUPPORT
FEATURE_LEGACY_DISPPARAMS
FEATURE_PRIVATE_FONT_SETTING
FEATURE_CSS_SHOW_HIDE_EVENTS
FEATURE_DISPLAY_NODE_ADVISE_KB833311
FEATURE_ALLOW_EXPANDURI_BYPASS
FEATURE_BODY_SIZE_IN_EDITABLE_IFRAME_KB943245
FEATURE_DATABINDING_SUPPORT
FEATURE_ENFORCE_BSTR
FEATURE_ENABLE_DYNAMIC_OBJECT_CACHING
FEATURE_OBJECT_CACHING
FEATURE_LEGACY_TOSTRING_IN_COMPATVIEW
FEATURE_RESTRICT_CRASH_RECOVERY_SAVE_KB978454
FEATURE_DOWNLOAD_INITIATOR_HTTP_HEADER
FEATURE_MOBILE_CUSTOMIZATIONS
FEATURE_HIGH_RESOLUTION_AWARE
FEATURE_FORCE_DISABLE_UNTRUSTEDPROTOCOL
FEATURE_USE_WEBOC_OMNAVIGATOR_IMPLEMENTATION
FEATURE_USE_SECURITY_THUNKS
FEATURE_DISABLE_DEFERRED_IMAGE_DOWNLOAD
FEATURE_LAZY_IMAGE_DECODING
FEATURE_LAZIER_IMAGE_DECODING
FEATURE_ALLOW_INTRANET_CSS_MIME_MISMATCH
FEATURE_ENABLE_CLIPCHILDREN_OPTIMIZATION
FEATURE_ENABLE_LARGER_HIT_TEST
FEATURE_USE_LEGACY_JSCRIPT
FEATURE_MOBILE_VIEWPORT_WIDTH_RESTRICTIONS
FEATURE_PASTE_IMAGE_DATAURI
FEATURE_NEW_TREE_VERIFICATION
FEATURE_MOBILE_DISPOSABLE_RESOURCE_CACHE_THRESHOLD_BYTES
FEATURE_DOCUMENT_COMPATIBLE_MODE
FEATURE_ENABLE_WEB_CONTROL_VISUALS
FEATURE_XDOMAINREQUEST
FEATURE_WEBSOCKET
FEATURE_USE_UNISCRIBE
FEATURE_PAINT_INSIDE_WMPAINT
FEATURE_SOFTWARE_FILTER_RENDERING
FEATURE_SPELLCHECKING
FEATURE_FORCE_NATURAL_TEXT_METRICS
FEATURE_ENABLE_PERFWIDGET_EXTRA_INFO
FEATURE_DISABLE_FORMAT_REUSE
FEATURE_ALLOW_WINDOW_PUTNAME_CROSS_DOMAIN
FEATURE_REDUCE_RENDER_AHEAD_CACHE
FEATURE_CLEANUP_AT_FLS
Software\Microsoft\Windows\CurrentVersion\App Paths\OUTLOOK.EXE
Software\Microsoft\Internet Explorer\Application Compatibility
Software\Policies\Microsoft\Internet Explorer\DOMStorage
Software\Microsoft\Internet Explorer\DOMStorage
Software\Microsoft\Internet Explorer\MediaTypeClass
Software\Microsoft\Windows\CurrentVersion\Internet Settings\Accepted Documents
FEATURE_BROWSER_COMPATDATA
FEATURE_BROWSER_EMULATION
FEATURE_SHOW_FAILED_CONNECT_CONTENT_KB942615
Microsoft\Windows\CurrentVersion\Internet Settings
FEATURE_DISABLE_INTERNAL_SECURITY_MANAGER
FEATURE_MEMPROTECT_MODE
FEATURE_OLEALIAS_GWND
FEATURE_TOPMOST_GWND
FEATURE_RESTRICT_ABOUT_PROTOCOL_IE7
SOFTWARE\Classes\PROTOCOLS\Filter\text/html
FEATURE_MIME_SNIFFING
FEATURE_FEEDS
FEATURE_ENABLE_COMPAT_LOGGING
MIME\Database\Content Type\text/html
FEATURE_MANAGE_SCRIPT_CIRCULAR_REFS
Security\Floppy Access
Security\Adv AddrBar Spoof Detection
Software\Policies\Microsoft\Internet Explorer\Zoom
Zoom
FEATURE_WEBOC_DOCUMENT_ZOOM
FEATURE_NINPUT_LEGACYMODE
FEATURE_ALIGNED_TIMERS
FEATURE_VSYNC_WATCHDOG
FEATURE_ALLOW_HIGHFREQ_TIMERS
FEATURE_SAFE_BINDTOOBJECT
International
Software\Policies\Microsoft\Internet Explorer\International\Scripts
Scripts
International\Scripts
Software\Policies\Microsoft\Internet Explorer\Settings
Settings
Styles
Text Scaling
Viewport
Larger Hit Test
Script
AdvancedOptions\DISAMBIGUATION
Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop
Software\Microsoft\Windows\CurrentVersion\Policies
Software\Microsoft\Internet Explorer\PageSetup
MenuExt
SYSTEM\CurrentControlSet\Control\Nls\CodePage
FEATURE_96DPI_PIXEL
FEATURE_RESTRICT_FILEDOWNLOAD
Software\Microsoft\Windows\CurrentVersion\Explorer\TravelLog
Version Vector
FEATURE_ZONE_ELEVATION
FEATURE_DISABLE_NAVIGATION_SOUNDS
Software\Policies\Microsoft\Internet Explorer\IEDevTools\Options
IEDevTools\Options
MIME\Database\Content Type\text/xml
FEATURE_XSSFILTER
FEATURE_PROCESS_XML_AS_HTML
Microsoft\Internet Explorer\Low Rights
FEATURE_READ_ZONE_STRINGS_FROM_REGISTRY
{352481E8-33BE-4251-BA85-6007CAEDCF9D}
NI\76b40e\20287007
NI\42155c26\18edbfc5
NI\42155c26\4bfd1467
Software\Embarcadero\Locales
Segoe UI
MS Gothic
Software\Yandex\Downloader
PROTOCOLS\Name-Space Handler\http\
SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent
Microsoft\Windows\CurrentVersion\Internet Settings\User Agent
Pre Platform
Post Platform
FEATURE_MAXCONNECTIONSPERSERVER
FEATURE_MAXCONNECTIONSPER1_0SERVER
FEATURE_URLMON_IQDA_SIZE
SOFTWARE\Microsoft\Windows\CurrentVersion\UrlMon Settings
SOFTWARE\Microsoft\Windows\CurrentVersion\Parental Controls\users\S-1-5-21-3979321414-2393373014-2172761192-1000
MIME\Database\Content Type\application/rss+xml
FEATURE_SHOW_CERT_WARNINGS_ON_POST_FROM_ISTREAM_KB2894776
SOFTWARE\Classes\PROTOCOLS\Filter\application/rss+xml
MIME\Database\Content Type\application/x-msdos-program
SOFTWARE\Classes\PROTOCOLS\Filter\application/x-msdos-program
ITVA
Software\Microsoft\Windows NT\CurrentVersion\VFW
SOFTWARE\Microsoft\DirectX
SOFTWARE\Debug\quartz.dll
Software\Microsoft\Multimedia\ActiveMovie Filters\MPEG Decoder
Software\Mozilla\MaintenanceService
SOFTWARE\SearchWindowResults
SOFTWARE\WebEx\wbxtrace
SOFTWARE\Microsoft\Windows\CurrentVersion
Software\ESET\OnlineScanner
Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes
SOFTWARE\InstallShield\21.0\Professional
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\95A9FBE13E4F7AE4AB796707C341236F
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\95A9FBE13E4F7AE4AB796707C341236F
Software\Classes\Installer\Products\95A9FBE13E4F7AE4AB796707C341236F
Software\Microsoft\Windows\CurrentVersion\Installer\UserData
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\95A9FBE13E4F7AE4AB796707C341236F\InstallProperties
Software\InstallShield\ISWI\3.0\SetupExeLog
CLSID\{000C101D-0000-0000-C000-000000000046}\DllVersion
Software\Microsoft\Windows\CurrentVersion\Uninstall\Mp3Gain PRO_is1
Software\Wondershare
Main
FEATURE_MSHTML_AUTOLOAD_IEFRAME
BrowserEmulation
Microsoft\Windows\CurrentVersion\Internet Settings\Url History
FEATURE_IEDDE_REGISTER_URLECHO
Software\Microsoft\Ftp
Microsoft YaHei
SYSTEM\CurrentControlSet\Services\FontCache\Parameters
Software\Microsoft\Direct3D
Software\Microsoft\Direct3D\Drivers
Software\Microsoft\Direct3D\DX6TextureEnumInclusionList
Software\Microsoft\DXGI
Software\Microsoft\Avalon.Graphics
EUDC\1252
Software\Policies\Microsoft\Internet Explorer\PrefetchPrerender
PrefetchPrerender
FEATURE_ALLOW_REFRESH_WHEN_NAVIGATION_DISABLED
FEATURE_ADDITIONAL_IE8_MEMORY_CLEANUP
FEATURE_SCRIPTURL_MITIGATION
FEATURE_ISOLATE_NAMED_WINDOWS
FEATURE_SHIM_MSHELP_COMBINE
FEATURE_USE_IETLDLIST_FOR_DOMAIN_DETERMINATION
Control Panel
BrowserStorage\AppCache
FEATURE_BLOCK_PAINT_FOR_PAGE_ENTER
International\Scripts\4
Suggested Sites
WindowsSearch
Microsoft\Internet Explorer\Feeds
Software\Microsoft\Windows\Windows Error Reporting\Debug
Software\Microsoft\Windows\Windows Error Reporting
Software\Policies\Microsoft\Windows\Windows Error Reporting
Consent
ExcludedApplications
DebugApplications
SOFTWARE\Microsoft\Reliability Analysis\RAC
Software\Microsoft\Windows\Windows Error Reporting\Throttling\CLR20r3
SYSTEM\CurrentControlSet\Control\SystemInformation
SYSTEM\CurrentControlSet\Control\Windows
Software\Microsoft\Windows\CurrentVersion\CEIPRole\RolesInWER
Software\Microsoft\Windows\CurrentVersion\Uninstall\Final Fantasy Type-0 HD_is1
Software\Microsoft\Office\16.0\common\filespaths
Software\Microsoft\Office
Software\Policies\Microsoft\Office
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\00006109F60000000000000000F01FEC
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\00006109F60000000000000000F01FEC
Software\Classes\Installer\Products\00006109F60000000000000000F01FEC
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F60000000000000000F01FEC\InstallProperties
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-3979321414-2393373014-2172761192-1000\Components\A725889A5DF965C4E84A0253A39A5952
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A725889A5DF965C4E84A0253A39A5952
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products
Software\Classes\Installer\Products
Software\Microsoft\Office\16.0\Common\Logging
Software\Microsoft\Office\Common\ClientTelemetry
Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesLastModified
Software\Microsoft\Office\Common
Software\Microsoft\Office\16.0\Common\ClientTelemetry\Debug
ClientTelemetry
Software\Microsoft\Office\16.0\Common\ClientTelemetry
Software\Microsoft\ClickToRun\OverRide
SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate
RulesMetadata\sample
Software\Microsoft\Office\16.0\Common
Debug
Software\Microsoft\Office\ClickToRun\Configuration
Software\Microsoft\Office\16.0\Registration\{3AD61E22-E4FE-497F-BDB1-3E51BD872173}
Software\Wow6432Node\Microsoft\Office\16.0\Registration\{3AD61E22-E4FE-497F-BDB1-3E51BD872173}
Software\Microsoft\Office\ClickToRun\propertyBag
RulesLastModified
RulesMetadata
sample\ULSMonitor
FEATURE_FILEPROTOCOL_NOFINDFIRST_KB947853
SOFTWARE\Classes\PROTOCOLS\Filter\text/xml
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E2B51919-207A-43EB-AE78-733F9C6797C3}
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{929FBD26-9020-399B-9A7A-751D61F0B942}
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WIC
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SchedulingAgent
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Oracle VM VirtualBox Guest Additions
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MobileOptionPack
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IEData
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE5BAKEX
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE4Data
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE40
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Fontcore
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DirectDrawEx
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Connection Manager
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AddressBook
SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall
SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}
SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{f65db027-aff3-4070-886a-0d87064aabb1}
SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}
SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{050d4fc8-5d48-4b8f-8972-47c82c46020f}
SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WIC
SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SchedulingAgent
SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\MobileOptionPack
SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IEData
SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IE5BAKEX
SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IE4Data
SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IE40
SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Fontcore
SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DirectDrawEx
SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Connection Manager
SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AddressBook
Software\Microsoft\Office\15.0\ClickToRun\Configuration
Software\Microsoft\Office\Outlook\Addins\Microsoft.BusinessSolutions.eCRM.OutlookAddIn.Connect.5
Software\Microsoft\Office\15.0\Outlook
Software\Microsoft\Windows\CurrentVersion\Uninstall\{237F5F19-0AF7-4D5E-B216-D96A829DF3B7}_is1
SOFTWARE\GetTheResultsHub
Software\TrendMicro\Vizor
Software\TrendMicro\Vizor\
SOFTWARE\Microsoft\Office\16.0\Common\OEM
SOFTWARE\Wow6432Node\Microsoft\Office\16.0\Common\OEM
Software\Microsoft\Office\16.0\Registration\{7A0560C5-21ED-4518-AD41-B7F870B9FD1A}
Software\Wow6432Node\Microsoft\Office\16.0\Registration\{7A0560C5-21ED-4518-AD41-B7F870B9FD1A}
Software\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\PDH
Software\Microsoft\Windows Live\Common
Software\Policies\Microsoft\SQMClient
Software\Microsoft\SQMClient
Software\Microsoft\Windows Live\Installer\RebootPending
Software\Microsoft\IdentityCRL
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\20F89D6A28827D545BD7221EF0345B3F
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\20F89D6A28827D545BD7221EF0345B3F
Software\Classes\Installer\UpgradeCodes\20F89D6A28827D545BD7221EF0345B3F
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\E8AE798B43675E04899D9A7BB48F69A0
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\E8AE798B43675E04899D9A7BB48F69A0
Software\Classes\Installer\UpgradeCodes\E8AE798B43675E04899D9A7BB48F69A0
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\D8409642A51AE82428CEA8F7B6CDDD94
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\D8409642A51AE82428CEA8F7B6CDDD94
Software\Classes\Installer\UpgradeCodes\D8409642A51AE82428CEA8F7B6CDDD94
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\10115A7FDA65ED119AA200D19080D19D
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\10115A7FDA65ED119AA200D19080D19D
Software\Classes\Installer\UpgradeCodes\10115A7FDA65ED119AA200D19080D19D
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\b3e52e7720c900948a01a7068177de04
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\b3e52e7720c900948a01a7068177de04
Software\Classes\Installer\UpgradeCodes\b3e52e7720c900948a01a7068177de04
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\A5383225FF8C38E44B660A6AAB92C54C
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\A5383225FF8C38E44B660A6AAB92C54C
Software\Classes\Installer\UpgradeCodes\A5383225FF8C38E44B660A6AAB92C54C
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\9C2E0170AB89ED11698100F0EF79B51A
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\9C2E0170AB89ED11698100F0EF79B51A
Software\Classes\Installer\UpgradeCodes\9C2E0170AB89ED11698100F0EF79B51A
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\5CE2759222A686341A3E0B8322034E07
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\5CE2759222A686341A3E0B8322034E07
Software\Classes\Installer\UpgradeCodes\5CE2759222A686341A3E0B8322034E07
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\1EBAFEE3583D4194A8572D8F611DF16D
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\1EBAFEE3583D4194A8572D8F611DF16D
Software\Classes\Installer\UpgradeCodes\1EBAFEE3583D4194A8572D8F611DF16D
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\E1E077CEC1C011e4BBE6C7FBF6A733B2
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\E1E077CEC1C011e4BBE6C7FBF6A733B2
Software\Classes\Installer\UpgradeCodes\E1E077CEC1C011e4BBE6C7FBF6A733B2
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\A7E1A447758B69741BC34ECC2DB9D013
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\A7E1A447758B69741BC34ECC2DB9D013
Software\Classes\Installer\UpgradeCodes\A7E1A447758B69741BC34ECC2DB9D013
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\85B575593E8456a42A9943A87E789C75
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\85B575593E8456a42A9943A87E789C75
Software\Classes\Installer\UpgradeCodes\85B575593E8456a42A9943A87E789C75
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\006E31CFEEE7347418D7BC2F70959862
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\006E31CFEEE7347418D7BC2F70959862
Software\Classes\Installer\UpgradeCodes\006E31CFEEE7347418D7BC2F70959862
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\98E9069714AA9804FBDC38F48D75BEBD
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\98E9069714AA9804FBDC38F48D75BEBD
Software\Classes\Installer\UpgradeCodes\98E9069714AA9804FBDC38F48D75BEBD
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\CA21E07B9358a2448B58D73D90FEF1FF
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\CA21E07B9358a2448B58D73D90FEF1FF
Software\Classes\Installer\UpgradeCodes\CA21E07B9358a2448B58D73D90FEF1FF
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\49E7B7D83322B9A42AA285364D387E3D
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\49E7B7D83322B9A42AA285364D387E3D
Software\Classes\Installer\UpgradeCodes\49E7B7D83322B9A42AA285364D387E3D
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\19E65BE16A20d4c45A1FACBF0D59A4FD
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\19E65BE16A20d4c45A1FACBF0D59A4FD
Software\Classes\Installer\UpgradeCodes\19E65BE16A20d4c45A1FACBF0D59A4FD
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\82541A718E109774E9DE86077E7C0668
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\82541A718E109774E9DE86077E7C0668
Software\Classes\Installer\UpgradeCodes\82541A718E109774E9DE86077E7C0668
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\7D9B55728CB9ee44E97D35759F397EE1
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\7D9B55728CB9ee44E97D35759F397EE1
Software\Classes\Installer\UpgradeCodes\7D9B55728CB9ee44E97D35759F397EE1
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\F701A0DE03480de48B03C9435B9E02DC
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\F701A0DE03480de48B03C9435B9E02DC
Software\Classes\Installer\UpgradeCodes\F701A0DE03480de48B03C9435B9E02DC
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\1620D6F3E198c5943858290CF10BE7A5
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\1620D6F3E198c5943858290CF10BE7A5
Software\Classes\Installer\UpgradeCodes\1620D6F3E198c5943858290CF10BE7A5
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\BC27F7433C380684F92BC018C29CEAE5
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\BC27F7433C380684F92BC018C29CEAE5
Software\Classes\Installer\UpgradeCodes\BC27F7433C380684F92BC018C29CEAE5
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\496E5169BC6789c44B63642981C4EB51
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\496E5169BC6789c44B63642981C4EB51
Software\Classes\Installer\UpgradeCodes\496E5169BC6789c44B63642981C4EB51
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\04869A683E95c4b47A69FBE5653825FD
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\04869A683E95c4b47A69FBE5653825FD
Software\Classes\Installer\UpgradeCodes\04869A683E95c4b47A69FBE5653825FD
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\18A681B5D2C05ff41AD86DD49D5D91F3
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\18A681B5D2C05ff41AD86DD49D5D91F3
Software\Classes\Installer\UpgradeCodes\18A681B5D2C05ff41AD86DD49D5D91F3
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\7467C0BC14C616d4B8CC76BE3DC24AAC
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\7467C0BC14C616d4B8CC76BE3DC24AAC
Software\Classes\Installer\UpgradeCodes\7467C0BC14C616d4B8CC76BE3DC24AAC
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\66E029B7DFD913a408138A4FE79868FF
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\66E029B7DFD913a408138A4FE79868FF
Software\Classes\Installer\UpgradeCodes\66E029B7DFD913a408138A4FE79868FF
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\9FE9CD32518261a4B9AAD6E298204124
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\9FE9CD32518261a4B9AAD6E298204124
Software\Classes\Installer\UpgradeCodes\9FE9CD32518261a4B9AAD6E298204124
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\D1A38F5E015F83943A79AE5AFC2A4234
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\D1A38F5E015F83943A79AE5AFC2A4234
Software\Classes\Installer\UpgradeCodes\D1A38F5E015F83943A79AE5AFC2A4234
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\BBC919EBC12Fa8b48AD1FC387B80A55F
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\BBC919EBC12Fa8b48AD1FC387B80A55F
Software\Classes\Installer\UpgradeCodes\BBC919EBC12Fa8b48AD1FC387B80A55F
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\C651EAA3D35896642910ED534DDEC38D
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\C651EAA3D35896642910ED534DDEC38D
Software\Classes\Installer\UpgradeCodes\C651EAA3D35896642910ED534DDEC38D
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\0CEE6639A87Ea444582714A91D946678
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\0CEE6639A87Ea444582714A91D946678
Software\Classes\Installer\UpgradeCodes\0CEE6639A87Ea444582714A91D946678
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\4369318AA6E7a4049A9DAEA9A776A925
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\4369318AA6E7a4049A9DAEA9A776A925
Software\Classes\Installer\UpgradeCodes\4369318AA6E7a4049A9DAEA9A776A925
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\90200F8150BCa78439419C2FAD202C4E
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\90200F8150BCa78439419C2FAD202C4E
Software\Classes\Installer\UpgradeCodes\90200F8150BCa78439419C2FAD202C4E
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\3571B33744B7abd4187D53BCD6A1B950
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\3571B33744B7abd4187D53BCD6A1B950
Software\Classes\Installer\UpgradeCodes\3571B33744B7abd4187D53BCD6A1B950
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\C4C86711551486a479850FDC247780CF
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\C4C86711551486a479850FDC247780CF
Software\Classes\Installer\UpgradeCodes\C4C86711551486a479850FDC247780CF
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\5F7C42D2B1A3dc04FB10350AC37D5A28
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\5F7C42D2B1A3dc04FB10350AC37D5A28
Software\Classes\Installer\UpgradeCodes\5F7C42D2B1A3dc04FB10350AC37D5A28
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\655FAFF6A5288b14F8F2E4E03064F535
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\655FAFF6A5288b14F8F2E4E03064F535
Software\Classes\Installer\UpgradeCodes\655FAFF6A5288b14F8F2E4E03064F535
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\D6A66EE908D164e459E9F78732BA8217
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\D6A66EE908D164e459E9F78732BA8217
Software\Classes\Installer\UpgradeCodes\D6A66EE908D164e459E9F78732BA8217
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\E62DD7030DD24eb409032DBD79558934
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\E62DD7030DD24eb409032DBD79558934
Software\Classes\Installer\UpgradeCodes\E62DD7030DD24eb409032DBD79558934
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\A7C22F393E0Ddcd4A9F8DCEC95C7772F
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\A7C22F393E0Ddcd4A9F8DCEC95C7772F
Software\Classes\Installer\UpgradeCodes\A7C22F393E0Ddcd4A9F8DCEC95C7772F
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\F58B5DE06C3F26248802567521C1F6DF
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\F58B5DE06C3F26248802567521C1F6DF
Software\Classes\Installer\UpgradeCodes\F58B5DE06C3F26248802567521C1F6DF
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\64F893DA24822a1408CAA74F0C345914
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\64F893DA24822a1408CAA74F0C345914
Software\Classes\Installer\UpgradeCodes\64F893DA24822a1408CAA74F0C345914
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\3A8816DA548Ed574EADB126E7ADEAA92
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\3A8816DA548Ed574EADB126E7ADEAA92
Software\Classes\Installer\UpgradeCodes\3A8816DA548Ed574EADB126E7ADEAA92
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\0B3A1A8C664E52549A1B3D815185AAF1
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\0B3A1A8C664E52549A1B3D815185AAF1
Software\Classes\Installer\UpgradeCodes\0B3A1A8C664E52549A1B3D815185AAF1
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\10F62387B8A241145A690989E4F01EB8
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\10F62387B8A241145A690989E4F01EB8
Software\Classes\Installer\UpgradeCodes\10F62387B8A241145A690989E4F01EB8
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\A549D47E774Ad7944A9C9623F098FAEF
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\A549D47E774Ad7944A9C9623F098FAEF
Software\Classes\Installer\UpgradeCodes\A549D47E774Ad7944A9C9623F098FAEF
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\70E062F7AB50a844383037F84EBC4F6E
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\70E062F7AB50a844383037F84EBC4F6E
Software\Classes\Installer\UpgradeCodes\70E062F7AB50a844383037F84EBC4F6E
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\93F85E3B54D29df4C92A9F1F10CE4AA5
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\93F85E3B54D29df4C92A9F1F10CE4AA5
Software\Classes\Installer\UpgradeCodes\93F85E3B54D29df4C92A9F1F10CE4AA5
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\53B2332A25BC3834691C3BDF094E1EFC
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\53B2332A25BC3834691C3BDF094E1EFC
Software\Classes\Installer\UpgradeCodes\53B2332A25BC3834691C3BDF094E1EFC
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\AB7739B567CAb8d4DA336E37FD04C931
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\AB7739B567CAb8d4DA336E37FD04C931
Software\Classes\Installer\UpgradeCodes\AB7739B567CAb8d4DA336E37FD04C931
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\CA5459472D1A0574C9ED8CE8E67ED510
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\CA5459472D1A0574C9ED8CE8E67ED510
Software\Classes\Installer\UpgradeCodes\CA5459472D1A0574C9ED8CE8E67ED510
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\620F605D6E026b345933A168534270A4
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\620F605D6E026b345933A168534270A4
Software\Classes\Installer\UpgradeCodes\620F605D6E026b345933A168534270A4
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\D4396BB7ED75ba44B83A23D4068C84E1
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\D4396BB7ED75ba44B83A23D4068C84E1
Software\Classes\Installer\UpgradeCodes\D4396BB7ED75ba44B83A23D4068C84E1
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\7D9E085462F88e44FA9551866BFC0F28
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\7D9E085462F88e44FA9551866BFC0F28
Software\Classes\Installer\UpgradeCodes\7D9E085462F88e44FA9551866BFC0F28
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\7C736EB5CC8780443A957ED3CCE7F471
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\7C736EB5CC8780443A957ED3CCE7F471
Software\Classes\Installer\UpgradeCodes\7C736EB5CC8780443A957ED3CCE7F471
Software\Microsoft\Windows\CurrentVersion\Uninstall\Freemake Video Downloader_is1
SOFTWARE\SearchWebKnow
Software\Microsoft\Windows\CurrentVersion\Uninstall\{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1
{311dbba9-7614-4995-8a13-0f8327d869d0}
SOFTWARE\GenerousDeal
System\CurrentControlSet\Control\Session Manager
Software\Microsoft\Windows\CurrentVersion\RunOnce
SOFTWARE\WildTangent\InstalledSKUs\
Software\HP\NG\Logging
Software\RealNetworks\Config\PauseStartup
Software\RealNetworks\Config\LocalHTMLOverride
Software\RealNetworks\Config\BreakDownload
Software\RealNetworks\Config\LogAction
Software\RealNetworks\Config\Language
Software\RealNetworks\Config\DistCode
Software\RealNetworks\Config\PauseSkin
Software\RealNetworks\Config\DetectionXML
Software\RealNetworks\Config\ForceInstall
Software\RealNetworks\Config\URL
Software\RealNetworks\Config\BackupURL
Software\RealNetworks\Config\LogEvent
Software\RealNetworks\Config\Country
Software\RealNetworks\Config\LOC
Software\RealNetworks\Config\ConfigXMLVersion
Software\RealNetworks\Config\CloudRootURL
Software\RealNetworks\Config\PauseCompatDLL
Software\RealNetworks\Config\TimeOut
Software\RealNetworks\Config\RealPlayerExe
Software\RealNetworks\Config\DownloadURI
Software\RealNetworks\Config\PackageDownloadURI
Software\RealNetworks\Config\InstallerPkg
Software\RealNetworks\RealPlayer\6.0\Preferences\MainApp
Software\RealNetworks\RealPlayer\12.0\Preferences\MainApp
Software\RealNetworks\RealPlayer\16.0\Preferences\MainApp
Software\RealNetworks\RealPlayer\17.0\Preferences\MainApp
Software\RealNetworks\RealPlayer\18.0\Preferences\MainApp
Software\RealNetworks\RealPlayer\18.1\Preferences\MainApp
Software\RealNetworks\RealPlayer\18.2\Preferences\MainApp
Software\RealNetworks\RealPlayer\18.3\Preferences\MainApp
Software\RealNetworks\RealPlayer\18.4\Preferences\MainApp
Software\RealNetworks\RealPlayer\18.5\Preferences\MainApp
Software\RealNetworks\RealPlayer\18.6\Preferences\MainApp
Software\RealNetworks\RealPlayer\18.7\Preferences\MainApp
Software\RealNetworks\RealPlayer\18.8\Preferences\MainApp
Software\RealNetworks\RealPlayer\18.9\Preferences\MainApp
Software\RealNetworks\RealPlayer\19.0\Preferences\MainApp
Software\RealNetworks\RealPlayer\19.1\Preferences\MainApp
Software\RealNetworks\RealPlayer\19.2\Preferences\MainApp
Software\RealNetworks\RealPlayer\19.3\Preferences\MainApp
Software\RealNetworks\RealPlayer\19.4\Preferences\MainApp
Software\RealNetworks\RealPlayer\19.5\Preferences\MainApp
Software\RealNetworks\RealPlayer\19.6\Preferences\MainApp
Software\RealNetworks\RealPlayer\19.7\Preferences\MainApp
Software\RealNetworks\RealPlayer\19.8\Preferences\MainApp
Software\RealNetworks\RealPlayer\19.9\Preferences\MainApp
Software\RealNetworks\RealPlayer\20.0\Preferences\MainApp
Software\RealNetworks\RealPlayer\20.1\Preferences\MainApp
Software\RealNetworks\RealPlayer\20.2\Preferences\MainApp
Software\RealNetworks\RealPlayer\20.3\Preferences\MainApp
Software\RealNetworks\RealPlayer\20.4\Preferences\MainApp
Software\RealNetworks\RealPlayer\20.5\Preferences\MainApp
Software\RealNetworks\RealPlayer\20.6\Preferences\MainApp
Software\RealNetworks\RealPlayer\20.7\Preferences\MainApp
Software\RealNetworks\RealPlayer\20.8\Preferences\MainApp
Software\RealNetworks\RealPlayer\20.9\Preferences\MainApp
Software\RealNetworks\RealPlayer\21.0\Preferences\MainApp
Software\RealNetworks\RealPlayer\21.1\Preferences\MainApp
Software\RealNetworks\RealPlayer\21.2\Preferences\MainApp
Software\RealNetworks\RealPlayer\21.3\Preferences\MainApp
Software\RealNetworks\RealPlayer\21.4\Preferences\MainApp
Software\RealNetworks\RealPlayer\21.5\Preferences\MainApp
Software\RealNetworks\RealPlayer\21.6\Preferences\MainApp
Software\RealNetworks\RealPlayer\21.7\Preferences\MainApp
Software\RealNetworks\RealPlayer\21.8\Preferences\MainApp
Software\RealNetworks\RealPlayer\21.9\Preferences\MainApp
Software\RealNetworks\RealPlayer\22.0\Preferences\MainApp
Software\RealNetworks\RealPlayer\22.1\Preferences\MainApp
Software\RealNetworks\RealPlayer\22.2\Preferences\MainApp
Software\RealNetworks\RealPlayer\22.3\Preferences\MainApp
Software\RealNetworks\RealPlayer\22.4\Preferences\MainApp
Software\RealNetworks\RealPlayer\22.5\Preferences\MainApp
Software\RealNetworks\RealPlayer\22.6\Preferences\MainApp
Software\RealNetworks\RealPlayer\22.7\Preferences\MainApp
Software\RealNetworks\RealPlayer\22.8\Preferences\MainApp
Software\RealNetworks\RealPlayer\22.9\Preferences\MainApp
Software\RealNetworks\RealPlayer\23.0\Preferences\MainApp
Software\RealNetworks\RealPlayer\23.1\Preferences\MainApp
Software\RealNetworks\RealPlayer\23.2\Preferences\MainApp
Software\RealNetworks\RealPlayer\23.3\Preferences\MainApp
Software\RealNetworks\RealPlayer\23.4\Preferences\MainApp
Software\RealNetworks\RealPlayer\23.5\Preferences\MainApp
Software\RealNetworks\RealPlayer\23.6\Preferences\MainApp
Software\RealNetworks\RealPlayer\23.7\Preferences\MainApp
Software\RealNetworks\RealPlayer\23.8\Preferences\MainApp
Software\RealNetworks\RealPlayer\23.9\Preferences\MainApp
Software\RealNetworks\RealPlayer\24.0\Preferences\MainApp
Software\RealNetworks\RealPlayer\24.1\Preferences\MainApp
Software\RealNetworks\RealPlayer\24.2\Preferences\MainApp
Software\RealNetworks\RealPlayer\24.3\Preferences\MainApp
Software\RealNetworks\RealPlayer\24.4\Preferences\MainApp
Software\RealNetworks\RealPlayer\24.5\Preferences\MainApp
Software\RealNetworks\RealPlayer\24.6\Preferences\MainApp
Software\RealNetworks\RealPlayer\24.7\Preferences\MainApp
Software\RealNetworks\RealPlayer\24.8\Preferences\MainApp
Software\RealNetworks\RealPlayer\24.9\Preferences\MainApp
Software\RealNetworks\RealPlayer\25.0\Preferences\MainApp
Software\RealNetworks\RealPlayer\25.1\Preferences\MainApp
Software\RealNetworks\RealPlayer\25.2\Preferences\MainApp
Software\RealNetworks\RealPlayer\25.3\Preferences\MainApp
Software\RealNetworks\RealPlayer\25.4\Preferences\MainApp
Software\RealNetworks\RealPlayer\25.5\Preferences\MainApp
Software\RealNetworks\RealPlayer\25.6\Preferences\MainApp
Software\RealNetworks\RealPlayer\25.7\Preferences\MainApp
Software\RealNetworks\RealPlayer\25.8\Preferences\MainApp
Software\RealNetworks\RealPlayer\25.9\Preferences\MainApp
Software\RealNetworks\Config\Local\Country
Software\RealNetworks\Config\Debug
Software\RealNetworks\Config\DebugLog
software\RealNetworks\Update\StubCom
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\iexplore.exe
Software\RealNetworks\Config\OutputLog
Software\RealNetworks\Config\DetectionLog
SOFTWARE\RealNetworks\RealPlayer\15.0\Preferences\UID
SOFTWARE\RealNetworks\RealPlayer\16.0\Preferences\UID
Software\RealNetworks\RealPlayer\6.0\Preferences\DistCode
Software\RealNetworks\RealPlayer\12.0\Preferences\DistCode
Software\RealNetworks\RealPlayer\16.0\Preferences\DistCode
Software\RealNetworks\RealPlayer\17.0\Preferences\DistCode
Software\RealNetworks\RealPlayer\18.0\Preferences\DistCode
Software\RealNetworks\RealPlayer\18.1\Preferences\DistCode
Software\RealNetworks\RealPlayer\18.2\Preferences\DistCode
Software\RealNetworks\RealPlayer\18.3\Preferences\DistCode
Software\RealNetworks\RealPlayer\18.4\Preferences\DistCode
Software\RealNetworks\RealPlayer\18.5\Preferences\DistCode
Software\RealNetworks\RealPlayer\18.6\Preferences\DistCode
Software\RealNetworks\RealPlayer\18.7\Preferences\DistCode
Software\RealNetworks\RealPlayer\18.8\Preferences\DistCode
Software\RealNetworks\RealPlayer\18.9\Preferences\DistCode
Software\RealNetworks\RealPlayer\19.0\Preferences\DistCode
Software\RealNetworks\RealPlayer\19.1\Preferences\DistCode
Software\RealNetworks\RealPlayer\19.2\Preferences\DistCode
Software\RealNetworks\RealPlayer\19.3\Preferences\DistCode
Software\RealNetworks\RealPlayer\19.4\Preferences\DistCode
Software\RealNetworks\RealPlayer\19.5\Preferences\DistCode
Software\RealNetworks\RealPlayer\19.6\Preferences\DistCode
Software\RealNetworks\RealPlayer\19.7\Preferences\DistCode
Software\RealNetworks\RealPlayer\19.8\Preferences\DistCode
Software\RealNetworks\RealPlayer\19.9\Preferences\DistCode
Software\RealNetworks\RealPlayer\20.0\Preferences\DistCode
Software\RealNetworks\RealPlayer\20.1\Preferences\DistCode
Software\RealNetworks\RealPlayer\20.2\Preferences\DistCode
Software\RealNetworks\RealPlayer\20.3\Preferences\DistCode
Software\RealNetworks\RealPlayer\20.4\Preferences\DistCode
Software\RealNetworks\RealPlayer\20.5\Preferences\DistCode
Software\RealNetworks\RealPlayer\20.6\Preferences\DistCode
Software\RealNetworks\RealPlayer\20.7\Preferences\DistCode
Software\RealNetworks\RealPlayer\20.8\Preferences\DistCode
Software\RealNetworks\RealPlayer\20.9\Preferences\DistCode
Software\RealNetworks\RealPlayer\21.0\Preferences\DistCode
Software\RealNetworks\RealPlayer\21.1\Preferences\DistCode
Software\RealNetworks\RealPlayer\21.2\Preferences\DistCode
Software\RealNetworks\RealPlayer\21.3\Preferences\DistCode
Software\RealNetworks\RealPlayer\21.4\Preferences\DistCode
Software\RealNetworks\RealPlayer\21.5\Preferences\DistCode
Software\RealNetworks\RealPlayer\21.6\Preferences\DistCode
Software\RealNetworks\RealPlayer\21.7\Preferences\DistCode
Software\RealNetworks\RealPlayer\21.8\Preferences\DistCode
Software\RealNetworks\RealPlayer\21.9\Preferences\DistCode
Software\RealNetworks\RealPlayer\22.0\Preferences\DistCode
Software\RealNetworks\RealPlayer\22.1\Preferences\DistCode
Software\RealNetworks\RealPlayer\22.2\Preferences\DistCode
Software\RealNetworks\RealPlayer\22.3\Preferences\DistCode
Software\RealNetworks\RealPlayer\22.4\Preferences\DistCode
Software\RealNetworks\RealPlayer\22.5\Preferences\DistCode
Software\RealNetworks\RealPlayer\22.6\Preferences\DistCode
Software\RealNetworks\RealPlayer\22.7\Preferences\DistCode
Software\RealNetworks\RealPlayer\22.8\Preferences\DistCode
Software\RealNetworks\RealPlayer\22.9\Preferences\DistCode
Software\RealNetworks\RealPlayer\23.0\Preferences\DistCode
Software\RealNetworks\RealPlayer\23.1\Preferences\DistCode
Software\RealNetworks\RealPlayer\23.2\Preferences\DistCode
Software\RealNetworks\RealPlayer\23.3\Preferences\DistCode
Software\RealNetworks\RealPlayer\23.4\Preferences\DistCode
Software\RealNetworks\RealPlayer\23.5\Preferences\DistCode
Software\RealNetworks\RealPlayer\23.6\Preferences\DistCode
Software\RealNetworks\RealPlayer\23.7\Preferences\DistCode
Software\RealNetworks\RealPlayer\23.8\Preferences\DistCode
Software\RealNetworks\RealPlayer\23.9\Preferences\DistCode
Software\RealNetworks\RealPlayer\24.0\Preferences\DistCode
Software\RealNetworks\RealPlayer\24.1\Preferences\DistCode
Software\RealNetworks\RealPlayer\24.2\Preferences\DistCode
Software\RealNetworks\RealPlayer\24.3\Preferences\DistCode
Software\RealNetworks\RealPlayer\24.4\Preferences\DistCode
Software\RealNetworks\RealPlayer\24.5\Preferences\DistCode
Software\RealNetworks\RealPlayer\24.6\Preferences\DistCode
Software\RealNetworks\RealPlayer\24.7\Preferences\DistCode
Software\RealNetworks\RealPlayer\24.8\Preferences\DistCode
Software\RealNetworks\RealPlayer\24.9\Preferences\DistCode
Software\RealNetworks\RealPlayer\25.0\Preferences\DistCode
Software\RealNetworks\RealPlayer\25.1\Preferences\DistCode
Software\RealNetworks\RealPlayer\25.2\Preferences\DistCode
Software\RealNetworks\RealPlayer\25.3\Preferences\DistCode
Software\RealNetworks\RealPlayer\25.4\Preferences\DistCode
Software\RealNetworks\RealPlayer\25.5\Preferences\DistCode
Software\RealNetworks\RealPlayer\25.6\Preferences\DistCode
Software\RealNetworks\RealPlayer\25.7\Preferences\DistCode
Software\RealNetworks\RealPlayer\25.8\Preferences\DistCode
Software\RealNetworks\RealPlayer\25.9\Preferences\DistCode
Software\RealNetworks\RealPlayer\6.0\Preferences\OrigCode
Software\RealNetworks\RealPlayer\12.0\Preferences\OrigCode
Software\RealNetworks\RealPlayer\16.0\Preferences\OrigCode
Software\RealNetworks\RealPlayer\17.0\Preferences\OrigCode
Software\RealNetworks\RealPlayer\18.0\Preferences\OrigCode
Software\RealNetworks\RealPlayer\18.1\Preferences\OrigCode
Software\RealNetworks\RealPlayer\18.2\Preferences\OrigCode
Software\RealNetworks\RealPlayer\18.3\Preferences\OrigCode
Software\RealNetworks\RealPlayer\18.4\Preferences\OrigCode
Software\RealNetworks\RealPlayer\18.5\Preferences\OrigCode
Software\RealNetworks\RealPlayer\18.6\Preferences\OrigCode
Software\RealNetworks\RealPlayer\18.7\Preferences\OrigCode
Software\RealNetworks\RealPlayer\18.8\Preferences\OrigCode
Software\RealNetworks\RealPlayer\18.9\Preferences\OrigCode
Software\RealNetworks\RealPlayer\19.0\Preferences\OrigCode
Software\RealNetworks\RealPlayer\19.1\Preferences\OrigCode
Software\RealNetworks\RealPlayer\19.2\Preferences\OrigCode
Software\RealNetworks\RealPlayer\19.3\Preferences\OrigCode
Software\RealNetworks\RealPlayer\19.4\Preferences\OrigCode
Software\RealNetworks\RealPlayer\19.5\Preferences\OrigCode
Software\RealNetworks\RealPlayer\19.6\Preferences\OrigCode
Software\RealNetworks\RealPlayer\19.7\Preferences\OrigCode
Software\RealNetworks\RealPlayer\19.8\Preferences\OrigCode
Software\RealNetworks\RealPlayer\19.9\Preferences\OrigCode
Software\RealNetworks\RealPlayer\20.0\Preferences\OrigCode
Software\RealNetworks\RealPlayer\20.1\Preferences\OrigCode
Software\RealNetworks\RealPlayer\20.2\Preferences\OrigCode
Software\RealNetworks\RealPlayer\20.3\Preferences\OrigCode
Software\RealNetworks\RealPlayer\20.4\Preferences\OrigCode
Software\RealNetworks\RealPlayer\20.5\Preferences\OrigCode
Software\RealNetworks\RealPlayer\20.6\Preferences\OrigCode
Software\RealNetworks\RealPlayer\20.7\Preferences\OrigCode
Software\RealNetworks\RealPlayer\20.8\Preferences\OrigCode
Software\RealNetworks\RealPlayer\20.9\Preferences\OrigCode
Software\RealNetworks\RealPlayer\21.0\Preferences\OrigCode
Software\RealNetworks\RealPlayer\21.1\Preferences\OrigCode
Software\RealNetworks\RealPlayer\21.2\Preferences\OrigCode
Software\RealNetworks\RealPlayer\21.3\Preferences\OrigCode
Software\RealNetworks\RealPlayer\21.4\Preferences\OrigCode
Software\RealNetworks\RealPlayer\21.5\Preferences\OrigCode
Software\RealNetworks\RealPlayer\21.6\Preferences\OrigCode
Software\RealNetworks\RealPlayer\21.7\Preferences\OrigCode
Software\RealNetworks\RealPlayer\21.8\Preferences\OrigCode
Software\RealNetworks\RealPlayer\21.9\Preferences\OrigCode
Software\RealNetworks\RealPlayer\22.0\Preferences\OrigCode
Software\RealNetworks\RealPlayer\22.1\Preferences\OrigCode
Software\RealNetworks\RealPlayer\22.2\Preferences\OrigCode
Software\RealNetworks\RealPlayer\22.3\Preferences\OrigCode
Software\RealNetworks\RealPlayer\22.4\Preferences\OrigCode
Software\RealNetworks\RealPlayer\22.5\Preferences\OrigCode
Software\RealNetworks\RealPlayer\22.6\Preferences\OrigCode
Software\RealNetworks\RealPlayer\22.7\Preferences\OrigCode
Software\RealNetworks\RealPlayer\22.8\Preferences\OrigCode
Software\RealNetworks\RealPlayer\22.9\Preferences\OrigCode
Software\RealNetworks\RealPlayer\23.0\Preferences\OrigCode
Software\RealNetworks\RealPlayer\23.1\Preferences\OrigCode
Software\RealNetworks\RealPlayer\23.2\Preferences\OrigCode
Software\RealNetworks\RealPlayer\23.3\Preferences\OrigCode
Software\RealNetworks\RealPlayer\23.4\Preferences\OrigCode
Software\RealNetworks\RealPlayer\23.5\Preferences\OrigCode
Software\RealNetworks\RealPlayer\23.6\Preferences\OrigCode
Software\RealNetworks\RealPlayer\23.7\Preferences\OrigCode
Software\RealNetworks\RealPlayer\23.8\Preferences\OrigCode
Software\RealNetworks\RealPlayer\23.9\Preferences\OrigCode
Software\RealNetworks\RealPlayer\24.0\Preferences\OrigCode
Software\RealNetworks\RealPlayer\24.1\Preferences\OrigCode
Software\RealNetworks\RealPlayer\24.2\Preferences\OrigCode
Software\RealNetworks\RealPlayer\24.3\Preferences\OrigCode
Software\RealNetworks\RealPlayer\24.4\Preferences\OrigCode
Software\RealNetworks\RealPlayer\24.5\Preferences\OrigCode
Software\RealNetworks\RealPlayer\24.6\Preferences\OrigCode
Software\RealNetworks\RealPlayer\24.7\Preferences\OrigCode
Software\RealNetworks\RealPlayer\24.8\Preferences\OrigCode
Software\RealNetworks\RealPlayer\24.9\Preferences\OrigCode
Software\RealNetworks\RealPlayer\25.0\Preferences\OrigCode
Software\RealNetworks\RealPlayer\25.1\Preferences\OrigCode
Software\RealNetworks\RealPlayer\25.2\Preferences\OrigCode
Software\RealNetworks\RealPlayer\25.3\Preferences\OrigCode
Software\RealNetworks\RealPlayer\25.4\Preferences\OrigCode
Software\RealNetworks\RealPlayer\25.5\Preferences\OrigCode
Software\RealNetworks\RealPlayer\25.6\Preferences\OrigCode
Software\RealNetworks\RealPlayer\25.7\Preferences\OrigCode
Software\RealNetworks\RealPlayer\25.8\Preferences\OrigCode
Software\RealNetworks\RealPlayer\25.9\Preferences\OrigCode
CLSID\{f414c260-6ac0-11cf-b6d1-00aa00bbbb58}
SOFTWARE\Microsoft\NET Framework Setup\NDP\v3.0
SOFTWARE\Microsoft\NET Framework Setup\NDP\v3.5
SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Client
SOFTWARE\Microsoft\NET Framework Setup\NDP\v4.5
Software\RealNetworks\Config\Debug6
Software\RealNetworks\Config\CompatDLLPath
Software\Microsoft\Windows\CurrentVersion\Uninstall\mIRC
Software\Microsoft\Windows\CurrentVersion\Policies\System
Software\mIRC
SOFTWARE\Microsoft\NetSh
SOFTWARE\Policies\Microsoft\Windows\IPSEC\Policy\Local
NI\10c1fe88\3d96aec3
policy.8.0.msvcm80__b03f5f7f11d50a3a
NI\29326873\6cf32b3
NI\3080c81e\5ba12a88
NI\3080c81e\3c416a3
NI\6faf58\19ab8d57
NI\6faf58\19ab8d57\15
IL\75638fee\27002c8f\5a
policy.2.0.System.Data.SqlXml__b77a5c561934e089
SOFTWARE\Classes\CLSID\{E3B4B744-A654-11D3-A1A3-005004EA089A}\LocalServer32
Software\Microsoft\Windows\CurrentVersion\Uninstall\NFS ProStreet_is1
{905E63B6-C1BF-494E-B29C-65B732D3D21A}
{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}
Software\Microsoft\COM3
CLSID\{F5078F32-C551-11D3-89B9-0000F81FE221}
InprocServer32
Software\Microsoft\OLE
TreatAs
Software\Microsoft\Msxml30
SOFTWARE\Microsoft\BingBar
Software\Microsoft\MSN\Toolbar\Shared\SystemInformation
Software\Microsoft\MSN\Toolbar
Software\Microsoft\Windows Live\Toolbar
SOFTWARE\Microsoft\BingBarTest
SOFTWARE\Microsoft\Internet Explorer\Toolbar
.DEFAULT
Software\Microsoft\Windows NT\CurrentVersion\ProfileList
12A65D87-231D4B2B
12A65D87
Software\Microsoft\windows\CurrentVersion\Internet Settings
CLSID\{DCB00C01-570F-4A9B-8D69-199FDBA5723B}
CLSID\{A47979D2-C419-11D9-A5B4-001185AD2B89}
AppID\BBSetup.exe
Software\Microsoft\OLE\AppCompat
SOFTWARE\Microsoft\OLE
SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider
Interface\{00000134-0000-0000-C000-000000000046}
ProxyStubClsid32
SYSTEM\CurrentControlSet\Services\BFE
{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}
{2B0F765D-C0E9-4171-908E-08A611B84FF6}
{D9DC8A3B-B784-432E-A781-5A1130A75963}
Interface\{D0074FFD-570F-4A9B-8D69-199FDBA5723B}
CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27}
Interface\{26656EAA-54EB-4E6F-8F85-4F0EF901A406}
Interface\{8A40A45D-055C-4B62-ABD7-6D613E2CEAEC}
Interface\{55272A00-42CB-11CE-8135-00AA004BB851}
CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}
Interface\{BCD1DE7E-2DB1-418B-B047-4A74E101F8C1}
Interface\{2A1C9EB2-DF62-4154-B800-63278FCB8037}
SYSTEM\CurrentControlSet\Services\NetBT\Linkage
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\
ZoneMap\Ranges\
Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\
Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0
Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1
Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2
Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3
Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\
Software\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\
Software\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0
Software\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1
Software\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2
Software\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3
Software\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4
Domains\
Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\
ProtocolDefaults\
Software\Microsoft\Windows\CurrentVersion\App Paths\BBSetup.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Applications\BBSetup.exe
CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder
Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder
Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum
Drive\shellex\FolderExtensions
Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}
Software\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\DelegateFolders
Software\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace
DelegateFolders
{9113A02D-00A3-46B9-BC5F-9C04DADDD5D7}
{b155bdf8-02f0-451e-9a26-ae317cfd7779}
MyComputer\NameSpace
MyComputer\NameSpace\DelegateFolders
CLSID\{9113A02D-00A3-46B9-BC5F-9C04DADDD5D7}\ShellFolder
Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{9113A02D-00A3-46B9-BC5F-9C04DADDD5D7}\ShellFolder
CLSID\{B155BDF8-02F0-451E-9A26-AE317CFD7779}\ShellFolder
Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{B155BDF8-02F0-451E-9A26-AE317CFD7779}\ShellFolder
CLSID\{B155BDF8-02F0-451E-9A26-AE317CFD7779}\InProcServer32
Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Blocked
CLSID\{B155BDF8-02F0-451E-9A26-AE317CFD7779}
CLSID\{B155BDF8-02F0-451E-9A26-AE317CFD7779}\Instance
CLSID\{0E5AAE11-A475-4C5B-AB00-C66DE400274E}\InProcServer32
CLSID\{0E5AAE11-A475-4C5B-AB00-C66DE400274E}
InitPropertyBag
SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{B155BDF8-02F0-451E-9A26-AE317CFD7779}
Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\DelegateFolders
Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace
{031E4825-7B94-4dc3-B131-E946B44C8DD5}
{04731B67-D933-450a-90E6-4ACD2E9408FE}
{11016101-E366-4D22-BC06-4ADA335C892B}
{26EE0668-A00A-44D7-9371-BEB064C98683}
{4336a54d-038b-4685-ab02-99bb52d3fb8b}
{450D8FBA-AD25-11D0-98A8-0800361B1103}
{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}
{59031a47-3f72-44a7-89c5-5595fe6b30ee}
{645FF040-5081-101B-9F08-00AA002F954E}
{89D83576-6BD1-4c86-9454-BEB04E94C819}
{9343812e-1c37-4a49-a12e-4b2d810d956b}
{B4FB3F98-C1EA-428d-A78A-D1F5659CBA93}
{BD7A2E7B-21CB-41b2-A086-B309680C6B7E}
{daf95313-e44d-46af-be1b-cbacea2c3065}
{e345f35f-9397-435c-8f95-4e922c26259e}
{ED228FDF-9EA8-4870-83b1-96b02CFE0D52}
{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}
Desktop\NameSpace
Desktop\NameSpace\DelegateFolders
CLSID\{208D2C60-3AEA-1069-A2D7-08002B30309D}\ShellFolder
Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{208D2C60-3AEA-1069-A2D7-08002B30309D}\ShellFolder
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\ShellFolder
Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\ShellFolder
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\InProcServer32
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}
SOFTWARE\Microsoft\COM3
Interface\{000214E6-0000-0000-C000-000000000046}
CLSID\{C90250F3-4D7D-4991-9B69-A5C5BC1C2AE6}
SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{871C5380-42A0-1069-A2EA-08002B30309D}
Interface\{000214EA-0000-0000-C000-000000000046}
Interface\{0000010C-0000-0000-C000-000000000046}
Interface\{321A6A6A-D61F-4BF3-97AE-14BE2986BB36}
Interface\{0000000E-0000-0000-C000-000000000046}
CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\ShellFolder
Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\ShellFolder
CLSID\{26EE0668-A00A-44D7-9371-BEB064C98683}\ShellFolder
Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{26EE0668-A00A-44D7-9371-BEB064C98683}\ShellFolder
CLSID\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\ShellFolder
Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\ShellFolder
CLSID\{031E4825-7B94-4DC3-B131-E946B44C8DD5}\ShellFolder
Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{031E4825-7B94-4DC3-B131-E946B44C8DD5}\ShellFolder
CLSID\{04731B67-D933-450A-90E6-4ACD2E9408FE}\ShellFolder
Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{04731B67-D933-450A-90E6-4ACD2E9408FE}\ShellFolder
CLSID\{11016101-E366-4D22-BC06-4ADA335C892B}\ShellFolder
Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{11016101-E366-4D22-BC06-4ADA335C892B}\ShellFolder
CLSID\{4336A54D-038B-4685-AB02-99BB52D3FB8B}\ShellFolder
Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{4336A54D-038B-4685-AB02-99BB52D3FB8B}\ShellFolder
CLSID\{450D8FBA-AD25-11D0-98A8-0800361B1103}\ShellFolder
Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{450D8FBA-AD25-11D0-98A8-0800361B1103}\ShellFolder
CLSID\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}\ShellFolder
Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}\ShellFolder
CLSID\{89D83576-6BD1-4C86-9454-BEB04E94C819}\ShellFolder
Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{89D83576-6BD1-4C86-9454-BEB04E94C819}\ShellFolder
CLSID\{9343812E-1C37-4A49-A12E-4B2D810D956B}\ShellFolder
Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{9343812E-1C37-4A49-A12E-4B2D810D956B}\ShellFolder
CLSID\{B4FB3F98-C1EA-428D-A78A-D1F5659CBA93}\ShellFolder
Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{B4FB3F98-C1EA-428D-A78A-D1F5659CBA93}\ShellFolder
CLSID\{BD7A2E7B-21CB-41B2-A086-B309680C6B7E}\ShellFolder
Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{BD7A2E7B-21CB-41B2-A086-B309680C6B7E}\ShellFolder
CLSID\{DAF95313-E44D-46AF-BE1B-CBACEA2C3065}\ShellFolder
Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{DAF95313-E44D-46AF-BE1B-CBACEA2C3065}\ShellFolder
CLSID\{E345F35F-9397-435C-8F95-4E922C26259E}\ShellFolder
Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{E345F35F-9397-435C-8F95-4E922C26259E}\ShellFolder
CLSID\{ED228FDF-9EA8-4870-83B1-96B02CFE0D52}\ShellFolder
Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{ED228FDF-9EA8-4870-83B1-96B02CFE0D52}\ShellFolder
CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\ShellFolder
Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\ShellFolder
SOFTWARE\InstallShield\17.0\Professional
Software\Macromedia\FlashPlayer
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
Software\Macromedia\FlashPlayer\SafeVersions
SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Applications\sample
Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume
{babe9b11-0f98-11e5-b301-806e6f6e6963}\
Advanced
Software\Microsoft\Windows\Shell\RegisteredApplications\UrlAssociations\Directory\OpenWithProgids
Software\Microsoft\Windows\Shell\Associations\UrlAssociations\Directory
Directory
CurVer
ShellEx\IconHandler
Folder
AllFilesystemObjects
DocObject
BrowseInPlace
Clsid
{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}
CLSID\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}
{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}
{babe9b14-0f98-11e5-b301-806e6f6e6963}\
{babe9b10-0f98-11e5-b301-806e6f6e6963}\
SOFTWARE\Piriform\CCleaner
SOFTWARE\CCleaner
Software\Piriform\CCleaner
CLSID\{2318C2B1-4965-11d4-9B18-009027A5CD4F}\InprocServer32
Software\Microsoft\Windows\Shell\Associations\URLAssociations\http\UserChoice
http\shell\open\command
Software\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}
Application Compatibility
DOMStorage
FEATURE_IGNORE_LEADING_FILE_SEPARATOR_IN_URI_KB933105
FEATURE_SUBDOWNLOAD_LOCKDOWN
.png
FEATURE_BLOCK_LMZ_IMG
Software\Policies\Microsoft\Internet Explorer\Recovery
Recovery
Main\WindowsSearch
Software\Microsoft\Windows NT\CurrentVersion\
Software\Microsoft\Windows\CurrentVersion\Uninstall\{E86CE22D-B029-469E-A2C3-3F730AB44E77}_is1
Software\NCH Software\VideoPad\Software
Software\NCH Software\VideoPad\Settings
Software\NCH Software\VideoPad\MainWindow_Tabs
Software\NCH Software\VideoPad\VideoOutput
Software\NCH Software\Components\x264enc7
Software\NCH Software\VideoPad\Registration
Software\Microsoft\Registration\NCH
Software\NCH Software\VideoPad\UsageStatsExtra
hardware\description\system\CentralProcessor\0
Software\NCH Software\VideoPad\EffectPresets\48
Software\NCH Software\VideoPad\EffectPresets\1
Software\NCH Software\VideoPad\EffectPresets\1\Default Preset
Software\NCH Software\VideoPad\EffectPresets\2
Software\NCH Software\VideoPad\EffectPresets\2\Default Preset
Software\NCH Software\VideoPad\EffectPresets\3
Software\NCH Software\VideoPad\EffectPresets\3\Default Preset
Software\NCH Software\VideoPad\EffectPresets\4
Software\NCH Software\VideoPad\EffectPresets\4\Default Preset
Software\NCH Software\VideoPad\EffectPresets\5
Software\NCH Software\VideoPad\EffectPresets\5\Default Preset
Software\NCH Software\VideoPad\EffectPresets\6
Software\NCH Software\VideoPad\EffectPresets\6\Default Preset
Software\NCH Software\VideoPad\EffectPresets\7
Software\NCH Software\VideoPad\EffectPresets\7\Default Preset
Software\NCH Software\VideoPad\EffectPresets\8
Software\NCH Software\VideoPad\EffectPresets\8\Default Preset
Software\NCH Software\VideoPad\EffectPresets\9
Software\NCH Software\VideoPad\EffectPresets\9\Default Preset
Software\NCH Software\VideoPad\EffectPresets\10
Software\NCH Software\VideoPad\EffectPresets\10\Default Preset
Software\NCH Software\VideoPad\EffectPresets\11
Software\NCH Software\VideoPad\EffectPresets\11\Default Preset
Software\NCH Software\VideoPad\EffectPresets\12
Software\NCH Software\VideoPad\EffectPresets\12\Default Preset
Software\NCH Software\VideoPad\EffectPresets\14
Software\NCH Software\VideoPad\EffectPresets\14\Default Preset
Software\NCH Software\VideoPad\EffectPresets\15
Software\NCH Software\VideoPad\EffectPresets\15\Default Preset
Software\NCH Software\VideoPad\EffectPresets\16
Software\NCH Software\VideoPad\EffectPresets\16\Default Preset
Software\NCH Software\VideoPad\EffectPresets\24
Software\NCH Software\VideoPad\EffectPresets\24\Default Preset
Software\NCH Software\VideoPad\EffectPresets\25
Software\NCH Software\VideoPad\EffectPresets\25\Default Preset
Software\NCH Software\VideoPad\EffectPresets\26
Software\NCH Software\VideoPad\EffectPresets\26\Default Preset
Software\NCH Software\VideoPad\EffectPresets\28
Software\NCH Software\VideoPad\EffectPresets\28\Default Preset
Software\NCH Software\VideoPad\EffectPresets\29
Software\NCH Software\VideoPad\EffectPresets\29\Default Preset
Software\NCH Software\VideoPad\EffectPresets\31
Software\NCH Software\VideoPad\EffectPresets\31\Default Preset
Software\NCH Software\VideoPad\EffectPresets\32
Software\NCH Software\VideoPad\EffectPresets\32\Default Preset
Software\NCH Software\VideoPad\EffectPresets\35
Software\NCH Software\VideoPad\EffectPresets\35\Default Preset
Software\NCH Software\VideoPad\EffectPresets\36
Software\NCH Software\VideoPad\EffectPresets\36\Default Preset
Software\NCH Software\VideoPad\EffectPresets\37
Software\NCH Software\VideoPad\EffectPresets\37\Default Preset
Software\NCH Software\VideoPad\EffectPresets\38
Software\NCH Software\VideoPad\EffectPresets\38\Default Preset
Software\NCH Software\VideoPad\EffectPresets\39
Software\NCH Software\VideoPad\EffectPresets\39\Default Preset
Software\NCH Software\VideoPad\EffectPresets\40
Software\NCH Software\VideoPad\EffectPresets\40\Default Preset
Software\NCH Software\VideoPad\EffectPresets\41
Software\NCH Software\VideoPad\EffectPresets\41\Default Preset
Software\NCH Software\VideoPad\EffectPresets\42
Software\NCH Software\VideoPad\EffectPresets\42\Default Preset
Software\NCH Software\VideoPad\EffectPresets\43
Software\NCH Software\VideoPad\EffectPresets\43\Default Preset
Software\NCH Software\VideoPad\EffectPresets\44
Software\NCH Software\VideoPad\EffectPresets\44\Default Preset
Software\NCH Software\VideoPad\EffectPresets\45
Software\NCH Software\VideoPad\EffectPresets\45\Default Preset
Software\NCH Software\VideoPad\EffectPresets\47
Software\NCH Software\VideoPad\EffectPresets\47\Default Preset
Software\NCH Software\VideoPad\EffectPresets\48\Default Preset
Software\NCH Software\VideoPad\EffectPresets\49
Software\NCH Software\VideoPad\EffectPresets\49\Default Preset
Software\NCH Software\VideoPad\EffectPresets\50
Software\NCH Software\VideoPad\EffectPresets\50\Default Preset
Software\NCH Software\VideoPad\EffectPresets\51
Software\NCH Software\VideoPad\EffectPresets\51\Default Preset
Software\NCH Software\VideoPad\EffectPresets\52
Software\NCH Software\VideoPad\EffectPresets\52\Default Preset
Software\NCH Software\VideoPad\EffectPresets\54
Software\NCH Software\VideoPad\EffectPresets\54\Default Preset
Software\NCH Software\VideoPad\EffectPresets\55
Software\NCH Software\VideoPad\EffectPresets\55\Default Preset
Software\NCH Software\VideoPad\EffectPresets\56
Software\NCH Software\VideoPad\EffectPresets\56\Default Preset
Software\NCH Software\VideoPad\EffectPresets\57
Software\NCH Software\VideoPad\EffectPresets\57\Default Preset
Software\NCH Software\VideoPad\EffectPresets\1000
Software\NCH Software\VideoPad\EffectPresets\1000\Default Preset
Software\NCH Software\VideoPad\EffectPresets\1001
Software\NCH Software\VideoPad\EffectPresets\1001\Default Preset
Software\NCH Software\VideoPad\EffectPresets\1002
Software\NCH Software\VideoPad\EffectPresets\1002\Default Preset
Software\NCH Software\VideoPad\EffectPresets\1003
Software\NCH Software\VideoPad\EffectPresets\1003\Default Preset
Software\NCH Software\VideoPad\EffectPresets\1004
Software\NCH Software\VideoPad\EffectPresets\1004\Default Preset
Software\NCH Software\VideoPad\EffectPresets\1005
Software\NCH Software\VideoPad\EffectPresets\1005\Default Preset
Software\NCH Software\VideoPad\EffectPresets\1006
Software\NCH Software\VideoPad\EffectPresets\1006\Default Preset
Software\NCH Software\VideoPad\EffectPresets\1007
Software\NCH Software\VideoPad\EffectPresets\1007\Default Preset
Software\NCH Software\VideoPad\EffectPresets\1008
Software\NCH Software\VideoPad\EffectPresets\1008\Default Preset
Software\NCH Software\VideoPad\EffectPresets\1009
Software\NCH Software\VideoPad\EffectPresets\1009\Default Preset
Software\NCH Software\VideoPad\EffectPresets\6\Dark
Software\NCH Software\VideoPad\EffectPresets\6\Bright
Software\NCH Software\VideoPad\EffectPresets\9\Small Brush
Software\NCH Software\VideoPad\EffectPresets\9\Medium Brush
Software\NCH Software\VideoPad\EffectPresets\9\Large Brush
Software\NCH Software\VideoPad\EffectPresets\15\Minor Pixelation
Software\NCH Software\VideoPad\EffectPresets\15\Moderate Pixelation
Software\NCH Software\VideoPad\EffectPresets\15\Major Pixelation
Software\NCH Software\VideoPad\EffectPresets\16\Smooth
Software\NCH Software\VideoPad\EffectPresets\16\Smoother
Software\NCH Software\VideoPad\EffectPresets\16\Smoothest
Software\NCH Software\VideoPad\EffectPresets\16\Sharp
Software\NCH Software\VideoPad\EffectPresets\16\Sharper
Software\NCH Software\VideoPad\EffectPresets\16\Sharpest
Software\NCH Software\VideoPad\EffectPresets\24\Completely Unsaturated
Software\NCH Software\VideoPad\EffectPresets\24\Less Saturated
Software\NCH Software\VideoPad\EffectPresets\24\Saturated
Software\NCH Software\VideoPad\EffectPresets\24\More Saturated
Software\NCH Software\VideoPad\EffectPresets\24\Completely Saturated
Software\NCH Software\VideoPad\EffectPresets\25\Normal
Software\NCH Software\VideoPad\EffectPresets\25\Half Way
Software\NCH Software\VideoPad\EffectPresets\25\Cycle
Software\NCH Software\VideoPad\EffectPresets\26\Cool
Software\NCH Software\VideoPad\EffectPresets\26\Cooler
Software\NCH Software\VideoPad\EffectPresets\26\Coolest
Software\NCH Software\VideoPad\EffectPresets\26\Normal
Software\NCH Software\VideoPad\EffectPresets\26\Warm
Software\NCH Software\VideoPad\EffectPresets\26\Warmer
Software\NCH Software\VideoPad\EffectPresets\26\Warmest
Software\NCH Software\VideoPad\EffectPresets\28\Fade In
Software\NCH Software\VideoPad\EffectPresets\28\Fade Out
Software\NCH Software\VideoPad\EffectPresets\28\Fade In and Out
Software\NCH Software\VideoPad\EffectPresets\28\Fade Out and In
Software\NCH Software\VideoPad\EffectPresets\30
Software\NCH Software\VideoPad\EffectPresets\30\Spin Clockwise
Software\NCH Software\VideoPad\EffectPresets\30\Spin Counter-clockwise
Software\NCH Software\VideoPad\EffectPresets\33
Software\NCH Software\VideoPad\EffectPresets\33\Spin Left
Software\NCH Software\VideoPad\EffectPresets\33\Spin Right
Software\NCH Software\VideoPad\EffectPresets\33\Spin Up
Software\NCH Software\VideoPad\EffectPresets\33\Spin Down
Software\NCH Software\VideoPad\EffectPresets\33\Spin Clockwise
Software\NCH Software\VideoPad\EffectPresets\33\Spin Counter-clockwise
Software\NCH Software\VideoPad\EffectPresets\33\Rotate 90 Degrees
Software\NCH Software\VideoPad\EffectPresets\33\Rotate 180 Degrees
Software\NCH Software\VideoPad\EffectPresets\33\Rotate 270 Degrees
Software\NCH Software\VideoPad\EffectPresets\34
Software\NCH Software\VideoPad\EffectPresets\34\16:9 to 4:3 Horizontal
Software\NCH Software\VideoPad\EffectPresets\34\4:3 to 16:9 Horizontal
Software\NCH Software\VideoPad\EffectPresets\34\Quarter Screen
Software\NCH Software\VideoPad\EffectPresets\35\Slide Up
Software\NCH Software\VideoPad\EffectPresets\35\Slide Down
Software\NCH Software\VideoPad\EffectPresets\35\Slide Left
Software\NCH Software\VideoPad\EffectPresets\35\Slide Right
Software\NCH Software\VideoPad\EffectPresets\35\Slide Up Left
Software\NCH Software\VideoPad\EffectPresets\35\Slide Up Right
Software\NCH Software\VideoPad\EffectPresets\35\Slide Down Left
Software\NCH Software\VideoPad\EffectPresets\35\Slide Down Right
Software\NCH Software\VideoPad\EffectPresets\1001\Fade In
Software\NCH Software\VideoPad\EffectPresets\1001\Fade In and Out
Software\NCH Software\VideoPad\EffectPresets\1001\Fade Out
Software\NCH Software\VideoPad\EffectPresets\1001\Fade Out and In
Software\NCH Software\VideoPad\EffectPresets\1001\Maximum
Software\NCH Software\VideoPad\EffectPresets\1001\Minimum
Software\NCH Software\VideoPad\EffectPresets\1009\75% Left
Software\NCH Software\VideoPad\EffectPresets\1009\75% Right
Software\NCH Software\VideoPad\EffectPresets\1009\Center
Software\NCH Software\VideoPad\EffectPresets\1009\Center to Left
Software\NCH Software\VideoPad\EffectPresets\1009\Center to Right
Software\NCH Software\VideoPad\EffectPresets\1009\100% Left
Software\NCH Software\VideoPad\EffectPresets\1009\Left to Right
Software\NCH Software\VideoPad\EffectPresets\1009\100% Right
Software\NCH Software\VideoPad\EffectPresets\1009\Right to Left
Software\NCH Software\VideoPad\MainWindow
Software\NCH Software\VideoPad\Distributor
Software\NCH Software\PhotoStage\Settings
Software\NCH Software\Prism\Settings
Software\NCH Software\WavePad\Settings
Software\NCH Swift Sound\WavePad\Settings
Software\NCH Software\ExpressBurn\Settings
Software\NCH Swift Sound\ExpressBurn\Settings
Software\NCH Software\VideoPad\TabbedToolBar
Software\NCH Software\VideoPad\FootageListCols
Software\NCH Software\VideoPad\ProjectWindow
System\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\SAMPLE56EA4B570049E8E0\
Software\NCH Software\VideoPad\ProjectWindowDockDialog
Software\NCH Software\VideoPad\ClipPreviewDockDialog
Software\NCH Software\VideoPad\SequencePreviewDockDialog
Software\NCH Software\Components\ffmpeg19
Software\NCH Software\VideoPad\Snapshots
Software\Blizzard Entertainment\Launcher
Software\Blizzard Entertainment\Battle.net
Software\Blizzard Entertainment\Blizzard Error
Blizzard
Meiryo
Malgun Gothic
Microsoft JhengHei
SOFTWARE\InstallShield\20.0\Professional
Software\Mozilla\Firefox\TaskBarIDs
SOFTWARE\Microsoft\.NETFramework\policy\v1.0
SOFTWARE\Microsoft\NET Framework Setup\NDP\v1.1.4322
SOFTWARE\Microsoft\NET Framework Setup\NDP\v3.0\Setup
Software\Microsoft\Windows\CurrentVersion\Uninstall\Free Youtube Downloader
Microsoft\Windows\CurrentVersion\Explorer\AutoComplete
Software\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete
CLSID\{00BB2765-6A77-11D0-A535-00C04FD7D062}
CLSID\{03C036F1-A186-11D0-824A-00AA005B4383}
CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062}
CLSID\{03C036F1-A186-11D0-824A-00AA005B4383}\InProcServer32
CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062}\InProcServer32
CLSID\{807C1E6C-1D00-453F-B920-B61BB7CDD997}
Control Panel\Desktop
{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}
{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}
CLSID\{00021401-0000-0000-C000-000000000046}
System\CurrentControlSet\Services\LanmanWorkstation\Parameters
{B97D20BB-F46A-4C97-BA10-5E3608430854}
{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}
Software\Microsoft\Windows\CurrentVersion\App Paths\sample.exe
{FDD39AD0-238F-46AF-ADB4-6C85480369C7}
{33E28130-4E1E-4676-835A-98395C3BC3BB}
{4BD8D571-6D19-48D3-BE97-422220080E43}
{18989B1D-99B5-455B-841C-AB7C74E4DDFC}
{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}
{ED4824AF-DCE4-45A8-81E2-FC7965083634}
{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}
{3214FAB5-9757-4298-BB61-92A9DEAA44FF}
{2400183A-6185-49FB-A2D8-4A392A602BA3}
{1777F761-68AD-4D8A-87BD-30B759FA33DD}
{DE92C1C7-837F-4F69-A3BB-86E631204A23}
{374DE290-123F-4565-9164-39C4925E467B}
{3D644C9B-1FB8-4F30-9B45-F670235F79C0}
{0762D272-C50A-4BB0-A382-697DCD729B80}
{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}
{DFDF76A2-C82A-4D63-906A-5644AC457385}
{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}
{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}
{F38BF404-1D43-42F2-9305-67DE0B28FC23}
{DE974D24-D9C6-4D3E-BF91-F4455120B917}
{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}
{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}
{56784854-C6CB-462B-8169-88E350ACB882}
{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}
.exe
.exe\OpenWithProgids
Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.exe\OpenWithProgids
Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts
UserChoice
exefile
SystemFileAssociations\.exe
CLSID\{76765B11-3F95-4AF2-AC9D-EA55D8994F1A}
CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}
SOFTWARE\Ammyy\Admin
System\CurrentControlSet\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0007
SOFTWARE\JavaSoft\Java Runtime Environment
SOFTWARE\JavaSoft\Java Development Kit
SOFTWARE\IBM\Java2 Runtime Environment
SOFTWARE\IBM\Java Development Kit
Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing
Software\Microsoft\Internet Explorer\TabbedBrowsing
CLSID\{E5D12C4E-7B4F-11D3-B5C9-0050045C3C96}\LocalServer32
Software\Yahoo\SuiteInstall
Software\Microsoft\Internet Explorer\SearchScopes
Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Software\Mozilla\Mozilla Firefox
SOFTWARE\Yahoo\SearchProtection\Paths
CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}\InprocServer32
HARDWARE\DESCRIPTION\System\CentralProcessor\0
exefile\shell\open\command
Software\Microsoft\Windows\CurrentVersion\Uninstall\Deepica_is1
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}
Software\Microsoft\InetStp
Software\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield Uninstall Information\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}
Software\Microsoft\Windows\CurrentVersion\Uninstall\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}
Software\InstallShieldPendingOperation
SOFTWARE\Panasonic\MFStation
SOFTWARE\I.R.I.S.\Readiris\5.5
Software\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{BE0CA31E-0FD0-44FA-BE90-B793049572BA}
Software\Panasonic\Multi-Function Station software\1.00\
Software\Panasonic\Multi-Function Station software\1.00
Software\Panasonic\Multi-Function Station software
Software\Panasonic
Software\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield Uninstall Information\
SOFTWARE\Policies\Microsoft\Windows\Installer
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3CBF3EBB-235D-4c29-A68B-2BB1F428586E}
Software\Policies\Microsoft\Internet Explorer\Control Panel
Software\Policies\Microsoft\Internet Explorer\BrowserStorage\AppCache
Software\Microsoft\Windows\CurrentVersion\Uninstall\VideoGet_is1
Software\Microsoft\Windows\CurrentVersion\Drakensang Online
Software\Acronis\GlobalComponents
Software\Acronis\CommonComponents
SOFTWARE\MetaQuotes Software
Hardware\Description\System
Software\Microsoft\Internet Explorer\Settings
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\15D4EEA0756304F46A98354392ACEEC0
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\15D4EEA0756304F46A98354392ACEEC0
Software\Classes\Installer\Products\15D4EEA0756304F46A98354392ACEEC0
SOFTWARE\Microsoft\CTF\Compatibility\MSIEXEC.EXE
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\21EE4A31AE32173319EEFE3BD6FDFFE3
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\21EE4A31AE32173319EEFE3BD6FDFFE3
Software\Classes\Installer\Products\21EE4A31AE32173319EEFE3BD6FDFFE3
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\22BEFC8F7E2A1793E9ADB411DEFE1C58
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\22BEFC8F7E2A1793E9ADB411DEFE1C58
Software\Classes\Installer\Products\22BEFC8F7E2A1793E9ADB411DEFE1C58
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\62DBF9290209B993A9A757D1160F9B24
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\62DBF9290209B993A9A757D1160F9B24
Software\Classes\Installer\Products\62DBF9290209B993A9A757D1160F9B24
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\6E8D947A316B3EB3F8F540C548BE2AB9
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\6E8D947A316B3EB3F8F540C548BE2AB9
Software\Classes\Installer\Products\6E8D947A316B3EB3F8F540C548BE2AB9
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\91915B2EA702BE34EA8737F3C976793C
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\91915B2EA702BE34EA8737F3C976793C
Software\Classes\Installer\Products\91915B2EA702BE34EA8737F3C976793C
Software\Microsoft\Cryptography\Providers\Trust\Certificate\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}
Software\Microsoft\Cryptography\Providers\Trust\FinalPolicy\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}
Software\Microsoft\Cryptography\Providers\Trust\Initialization\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}
Software\Microsoft\Cryptography\Providers\Trust\Message\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}
Software\Microsoft\Cryptography\Providers\Trust\Signature\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}
Software\Microsoft\Cryptography\Providers\Trust\CertCheck\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}
Software\Microsoft\Cryptography\Providers\Trust\DiagnosticPolicy\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}
Software\Microsoft\Cryptography\Providers\Trust\Cleanup\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}
CryptSIPDllIsMyFileType
CryptSIPDllIsMyFileType2
1F62F885-0B55D18D
1F62F885
Software\Microsoft\Windows\CurrentVersion\Uninstall\Process_Hacker2_is1
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-3979321414-2393373014-2172761192-1000\Components\6C3C47CD8BAC94C4EB81B5D1DCD091E7
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6C3C47CD8BAC94C4EB81B5D1DCD091E7
SOFTWARE\Microsoft\MpSigStub
Software\Microsoft\Windows\CurrentVersion\Uninstall\Wise Disk Cleaner_is1
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E487EE7D-EAAA-4E2A-9116-E3B477D8A74F}
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{050d4fc8-5d48-4b8f-8972-47c82c46020f}
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{f65db027-aff3-4070-886a-0d87064aabb1}
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}
SOFTWARE\InstallShield\ISEngine12.0
Software\Microsoft\Windows\CurrentVersion\Uninstall\{E487EE7D-EAAA-4E2A-9116-E3B477D8A74F}
SYSTEM\CurrentControlSet\Enum\ACPI\TOS6208
SOFTWARE\Microsoft\Cryptography
SOFTWARE
Microsoft
Windows
CurrentVersion
Uninstall
{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}
CLSID\{BD84B380-8CA2-1069-AB1D-08000948F534}
{C5ABBF53-E17F-4121-8900-86626FC2C973}
{AE50C081-EBD2-438A-8655-8A092E34987A}
CLSID\{0C39A5CF-1A7A-40C8-BA74-8900E6DF5FCD}
{8983036C-27C0-404B-8F08-102D10DCFD74}
{A63293E8-664E-48DB-A079-DF759E0509F7}
{A4115719-D62E-491D-AA7C-E74B8BE3B067}
Control Panel\Mouse
Implemented Categories
CLSID
{BDD1F04B-858B-11D1-B16A-00C0F0283628}\InprocServer
{BDD1F04B-858B-11D1-B16A-00C0F0283628}
CLSID\{BDD1F04B-858B-11D1-B16A-00C0F0283628}
{C74190B6-8589-11D1-B16A-00C0F0283628}\InprocServer
{C74190B6-8589-11D1-B16A-00C0F0283628}
CLSID\{C74190B6-8589-11D1-B16A-00C0F0283628}
{1EFB6596-857C-11D1-B16A-00C0F0283628}\InprocServer
{1EFB6596-857C-11D1-B16A-00C0F0283628}
CLSID\{1EFB6596-857C-11D1-B16A-00C0F0283628}
{66833FE6-8583-11D1-B16A-00C0F0283628}\InprocServer
{66833FE6-8583-11D1-B16A-00C0F0283628}
CLSID\{66833FE6-8583-11D1-B16A-00C0F0283628}
{2C247F23-8591-11D1-B16A-00C0F0283628}\InprocServer
{2C247F23-8591-11D1-B16A-00C0F0283628}
CLSID\{2C247F23-8591-11D1-B16A-00C0F0283628}
{8E3867A3-8586-11D1-B16A-00C0F0283628}\InprocServer
{8E3867A3-8586-11D1-B16A-00C0F0283628}
CLSID\{8E3867A3-8586-11D1-B16A-00C0F0283628}
{F08DF954-8592-11D1-B16A-00C0F0283628}\InprocServer
{F08DF954-8592-11D1-B16A-00C0F0283628}
CLSID\{F08DF954-8592-11D1-B16A-00C0F0283628}
{35053A22-8589-11D1-B16A-00C0F0283628}\InprocServer
{35053A22-8589-11D1-B16A-00C0F0283628}
CLSID\{35053A22-8589-11D1-B16A-00C0F0283628}
{DD9DA666-8594-11D1-B16A-00C0F0283628}\InprocServer
{DD9DA666-8594-11D1-B16A-00C0F0283628}
CLSID\{DD9DA666-8594-11D1-B16A-00C0F0283628}
{C27CCE32-8596-11D1-B16A-00C0F0283628}\InprocServer
{C27CCE32-8596-11D1-B16A-00C0F0283628}
{C27CCE33-8596-11D1-B16A-00C0F0283628}\InprocServer
{C27CCE33-8596-11D1-B16A-00C0F0283628}
{C27CCE34-8596-11D1-B16A-00C0F0283628}\InprocServer
{C27CCE34-8596-11D1-B16A-00C0F0283628}
{C27CCE37-8596-11D1-B16A-00C0F0283628}\InprocServer
{C27CCE37-8596-11D1-B16A-00C0F0283628}
{C27CCE38-8596-11D1-B16A-00C0F0283628}\InprocServer
{C27CCE38-8596-11D1-B16A-00C0F0283628}
{C27CCE35-8596-11D1-B16A-00C0F0283628}\InprocServer
{C27CCE35-8596-11D1-B16A-00C0F0283628}
{C27CCE36-8596-11D1-B16A-00C0F0283628}\InprocServer
{C27CCE36-8596-11D1-B16A-00C0F0283628}
{C27CCE39-8596-11D1-B16A-00C0F0283628}\InprocServer
{C27CCE39-8596-11D1-B16A-00C0F0283628}
{C27CCE3A-8596-11D1-B16A-00C0F0283628}\InprocServer
{C27CCE3A-8596-11D1-B16A-00C0F0283628}
{C27CCE3C-8596-11D1-B16A-00C0F0283628}\InprocServer
{C27CCE3C-8596-11D1-B16A-00C0F0283628}
{C27CCE3D-8596-11D1-B16A-00C0F0283628}\InprocServer
{C27CCE3D-8596-11D1-B16A-00C0F0283628}
{C27CCE3B-8596-11D1-B16A-00C0F0283628}\InprocServer
{C27CCE3B-8596-11D1-B16A-00C0F0283628}
{C27CCE3E-8596-11D1-B16A-00C0F0283628}\InprocServer
{C27CCE3E-8596-11D1-B16A-00C0F0283628}
{C27CCE3F-8596-11D1-B16A-00C0F0283628}\InprocServer
{C27CCE3F-8596-11D1-B16A-00C0F0283628}
{C27CCE40-8596-11D1-B16A-00C0F0283628}\InprocServer
{C27CCE40-8596-11D1-B16A-00C0F0283628}
{C27CCE41-8596-11D1-B16A-00C0F0283628}\InprocServer
{C27CCE41-8596-11D1-B16A-00C0F0283628}
{C27CCE42-8596-11D1-B16A-00C0F0283628}\InprocServer
{C27CCE42-8596-11D1-B16A-00C0F0283628}
TypeLib
{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}
2.0
FLAGS
win32
HELPDIR
Interface
{2334D2B1-713E-11CF-8AE5-00AA00C00905}
{2334D2B3-713E-11CF-8AE5-00AA00C00905}
{1EFB6594-857C-11D1-B16A-00C0F0283628}
{1EFB6595-857C-11D1-B16A-00C0F0283628}
{1EFB6597-857C-11D1-B16A-00C0F0283628}
{1EFB6599-857C-11D1-B16A-00C0F0283628}
{66833FE4-8583-11D1-B16A-00C0F0283628}
{66833FE5-8583-11D1-B16A-00C0F0283628}
{66833FE7-8583-11D1-B16A-00C0F0283628}
{66833FE9-8583-11D1-B16A-00C0F0283628}
{66833FEB-8583-11D1-B16A-00C0F0283628}
{66833FED-8583-11D1-B16A-00C0F0283628}
{8E3867A1-8586-11D1-B16A-00C0F0283628}
{8E3867A2-8586-11D1-B16A-00C0F0283628}
{8E3867A4-8586-11D1-B16A-00C0F0283628}
{8E3867AA-8586-11D1-B16A-00C0F0283628}
{35053A20-8589-11D1-B16A-00C0F0283628}
{35053A21-8589-11D1-B16A-00C0F0283628}
{C74190B4-8589-11D1-B16A-00C0F0283628}
{C74190B5-8589-11D1-B16A-00C0F0283628}
{C74190B7-8589-11D1-B16A-00C0F0283628}
{C74190B8-8589-11D1-B16A-00C0F0283628}
{BDD1F049-858B-11D1-B16A-00C0F0283628}
{BDD1F04A-858B-11D1-B16A-00C0F0283628}
{BDD1F04C-858B-11D1-B16A-00C0F0283628}
{BDD1F04E-858B-11D1-B16A-00C0F0283628}
{BDD1F050-858B-11D1-B16A-00C0F0283628}
{BDD1F051-858B-11D1-B16A-00C0F0283628}
{BDD1F053-858B-11D1-B16A-00C0F0283628}
{BDD1F055-858B-11D1-B16A-00C0F0283628}
{2C247F21-8591-11D1-B16A-00C0F0283628}
{2C247F22-8591-11D1-B16A-00C0F0283628}
{2C247F24-8591-11D1-B16A-00C0F0283628}
{2C247F26-8591-11D1-B16A-00C0F0283628}
{F08DF952-8592-11D1-B16A-00C0F0283628}
{F08DF953-8592-11D1-B16A-00C0F0283628}
{C8A3DC00-8593-11D1-B16A-00C0F0283628}
{DD9DA660-8594-11D1-B16A-00C0F0283628}
{DD9DA662-8594-11D1-B16A-00C0F0283628}
{DD9DA664-8594-11D1-B16A-00C0F0283628}
{DD9DA665-8594-11D1-B16A-00C0F0283628}
CLSID\{66833FE6-8583-11D1-B16A-00C0F0283628}\Implemented Categories
{7DD95801-9882-11CF-9FA9-00AA006C42C4}
{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\InprocServer
{248DD896-BB45-11CF-9ABC-0080C7E7B78D}
CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}
{248DD897-BB45-11CF-9ABC-0080C7E7B78D}\InprocServer
{248DD897-BB45-11CF-9ABC-0080C7E7B78D}
{248DD890-BB45-11CF-9ABC-0080C7E7B78D}
1.0
{248DD892-BB45-11CF-9ABC-0080C7E7B78D}
{248DD893-BB45-11CF-9ABC-0080C7E7B78D}
CLSID\{ADB880A6-D8FF-11CF-9377-00AA003B7A11}\InprocServer32
SOFTWARE\Microsoft\HTMLHelp\1.x\HHRestrictions\
Software\Riot Games\RADS
Software\Artmoney
HARDWARE\DESCRIPTION\System
software
SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\don't load
Control Panel\don't load
Software\TutoTag
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\gmsd_ca_005010219_is1
Software\Microsoft\Office\16.0\Registration\{D7279DD0-E175-49FE-A623-8FC2FC00AFC4}
Software\Wow6432Node\Microsoft\Office\16.0\Registration\{D7279DD0-E175-49FE-A623-8FC2FC00AFC4}
Software\Asus\EeePC
Software\Microsoft\Windows\CurrentVersion\App Paths\pstubxx.exe
{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}
{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}
{2112AB0A-C86A-4FFE-A368-0DE96E47012E}
{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}
{9E52AB10-F80D-49DF-ACB8-4330F5687855}
{98EC0E18-2098-4D44-8644-66979315A281}
{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}
{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}
{76FC4E2D-D6AD-4519-A663-37BD56068185}
{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}
{491E922F-5643-4AF4-A7EB-4E7A138D8174}
{8AD10C31-2ADB-4296-A8F7-E4701232C972}
{DEBF2536-E1A8-4C59-B6A2-414586476AEA}
{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}
{C4900540-2379-4C75-844B-64E6FAF8716B}
{289A9A43-BE44-4057-A41B-587A76D7E7F9}
{4BFEFB45-347D-4006-A5BE-AC0CB0567192}
{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}
{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}
{C870044B-F49E-4126-A9C3-B52A1FF411E8}
{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}
{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}
{A302545D-DEFF-464B-ABE8-61C8648D939B}
{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}
{E555AB60-153B-4D17-9F04-A5FE99FC15EC}
{054FAE61-4DD8-4787-80B6-090220C4B700}
{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}
{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}
{BCB5256F-79F6-4CEE-B725-DC34E402FD46}
{724EF170-A42D-4FEF-9F26-B60E846FBA4F}
{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}
{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}
{0AC0837C-BBF8-452A-850D-79D08E667CA7}
{D0384E7D-BAC3-4797-8F14-CBA229B392B5}
{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}
{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}
{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}
{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}
{859EAD94-2E85-48AD-A71A-0969CB56A6CD}
{A305CE99-F527-492B-8B1A-7E76FA98D6E4}
{A990AE9F-A03B-4E80-94BC-9912D7504104}
{1A6FDBA2-F42D-4358-A798-B74D745926C5}
{A520A1A4-1780-4FF6-BD18-167343C5AF16}
{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}
{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}
{9E3995AB-1F9C-4F13-B827-48B24B6C7174}
{DF7266AC-9274-4867-8D55-3BD661DE872D}
{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}
{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}
{10C07CD0-EF91-4567-B850-448B77CB37F9}
{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}
{190337D1-B8CA-4121-A639-6D472D16972A}
{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}
{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}
{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}
{B94237E7-57AC-4347-9151-B08C6C32D1F7}
{5CE4A5E9-E4EB-479D-B89F-130C02886155}
{82A74AEB-AEB4-465C-A014-D097EE346D63}
{43668BF8-C14E-49B2-97C9-747784D784B7}
{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}
Software\Microsoft\Windows\CurrentVersion\Explorer\UsersFiles\NameSpace
Software\Microsoft\Windows\CurrentVersion\Explorer\UsersFiles\NameSpace\DelegateFolders
{DFFACDC5-679F-4156-8947-C5C76BC0B67F}
UsersFiles\NameSpace
UsersFiles\NameSpace\DelegateFolders
CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\ShellFolder
Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\ShellFolder
CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\InProcServer32
CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}
CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\Instance
SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}
shell
open
command
DropTarget
Software\Microsoft\Windows\CurrentVersion\Explorer\FileAssociation
Software\Microsoft\Windows\CurrentVersion\Policies\Associations
.ade
.adp
.app
.asp
.bas
.bat
.cer
.chm
.cmd
.com
.cpl
.crt
.csh
CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}
Progid
Software\Microsoft\Windows\CurrentVersion\ShellCompatibility\ProgIDs\exefile
ddeexec
software\microsoft\windows\currentversion\setup\PnpLockdownFiles
Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant
SOFTWARE\Ghisler\Total Commander
Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.txt
Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dll
Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.py
Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.
FEATURE_LEGACY_DLCONTROL_BEHAVIORS
.css
FEATURE_CUSTOM_IMAGE_MIME_TYPES_KB910561
.js
FEATURE_CROSS_DOMAIN_REDIRECT_MITIGATION
FEATURE_BLOCK_LMZ_SCRIPT
Software\Microsoft\Internet Explorer\JScript9
FEATURE_RESPECT_OBJECTSAFETY_POLICY_KB905547
Software\Policies\Microsoft\Internet Explorer\ActiveX Compatibility\{16D51579-A30B-4C8B-A276-0FF4DC41E755}
ActiveX Compatibility\{16D51579-A30B-4C8B-A276-0FF4DC41E755}
.gif
FEATURE_RESTRICTED_ZONE_WHEN_FILE_NOT_FOUND
.jpg
Software\Microsoft\Windows\CurrentVersion\Uninstall\PDFMate Free PDF Merger_is1
SOFTWARE\ASUS\MBSW_SetupPatch
Software\NetTcpHandler
Software\\Microsoft\\Internet Explorer\\Main
SOFTWARE\Mozilla\Mozilla Firefox
SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Applications\Au_.exe
Software\Cyberlink\MediaServer2.2\CyberLink Media Server Service
Software\Clownfish
Software\Loons
Software\Python\PythonCore\RG Link Updater\PythonPath
SOFTWARE\InstallShield\16.0\Professional
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\DAD6F0226D0B0F6479EE3A15725AD9F1
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\DAD6F0226D0B0F6479EE3A15725AD9F1
Software\Classes\Installer\Products\DAD6F0226D0B0F6479EE3A15725AD9F1
SimSun
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\DAD6F0226D0B0F6479EE3A15725AD9F1\InstallProperties
Software\Microsoft\.NETFramework\Policy\AppPatch
v2.0.50727.00000
sample
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Policies\Microsoft\Windows\Installer
SYSTEM\CurrentControlSet\Control\Session Manager
Software\Microsoft\Windows\CurrentVersion\Installer\InProgress
Software\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield Uninstall Information\{220F6DAD-B0D6-46F0-97EE-A35127A59D1F}
Software\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{220F6DAD-B0D6-46F0-97EE-A35127A59D1F}
Software\Microsoft\.NETFramework\Policy\v1.0
Software\Microsoft\NET Framework Setup\NDP\v1.1.4322
Software\Microsoft\NET Framework Setup\NDP\v2.0.50727
Software\Microsoft\NET Framework Setup\NDP\v3.0\Setup
Software\Microsoft\NET Framework Setup\NDP\v3.5
Software\Microsoft\NET Framework Setup\NDP\v4\Client
Software\Microsoft\NET Framework Setup\NDP\v4\Full
Software\Microsoft\Windows\CurrentVersion\App Paths\DriverRestore.exe
FEATURE_CREATE_URL_MONIKER_DISABLE_LEGACY_COMPAT
.ole
SOFTWARE\Microsoft\Wbem\CIMOM
Software\Microsoft\Windows\CurrentVersion\Uninstall\Kernel for Windows Data Recovery_is1
CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance\{9852A670-F845-491B-9BE6-EBD841B8A613}
Software\Microsoft\ActiveMovie\devenum
Software\Microsoft\ActiveMovie\devenum\{33D9A760-90C8-11D0-BD43-00A0C911CE86}
{33D9A760-90C8-11D0-BD43-00A0C911CE86}\Instance
DV Video Encoder
MJPEG Compressor
Software\Microsoft\Windows NT\CurrentVersion\DRIVERS32
Software\Microsoft\Windows NT\CurrentVersion\Installable Compressors
{33D9A760-90C8-11D0-BD43-00A0C911CE86}
cvid
i420
iyuv
mrle
msvc
uyvy
yuy2
yvu9
yvyu
CLSID\{33D9A760-90C8-11D0-BD43-00A0C911CE86}\Instance\DV Video Encoder
CLSID\{33D9A760-90C8-11D0-BD43-00A0C911CE86}\Instance\MJPEG Compressor
Software\Microsoft\ActiveMovie\devenum\{33D9A760-90C8-11D0-BD43-00A0C911CE86}\cvid
Software\Microsoft\ActiveMovie\devenum\{33D9A760-90C8-11D0-BD43-00A0C911CE86}\i420
Software\Microsoft\ActiveMovie\devenum\{33D9A760-90C8-11D0-BD43-00A0C911CE86}\iyuv
Software\Microsoft\ActiveMovie\devenum\{33D9A760-90C8-11D0-BD43-00A0C911CE86}\mrle
Software\Microsoft\ActiveMovie\devenum\{33D9A760-90C8-11D0-BD43-00A0C911CE86}\msvc
Software\Microsoft\ActiveMovie\devenum\{33D9A761-90C8-11D0-BD43-00A0C911CE86}
{33D9A761-90C8-11D0-BD43-00A0C911CE86}\Instance
System\CurrentControlSet\Control\MediaResources\acm
{33D9A761-90C8-11D0-BD43-00A0C911CE86}
17IMA ADPCM
1PCM
2Microsoft ADPCM
49GSM 6.10
6CCITT A-Law
7CCITT u-Law
Software\Microsoft\ActiveMovie\devenum\{33D9A761-90C8-11D0-BD43-00A0C911CE86}\17IMA ADPCM
Software\Microsoft\ActiveMovie\devenum\{33D9A761-90C8-11D0-BD43-00A0C911CE86}\1PCM
Software\Microsoft\ActiveMovie\devenum\{33D9A761-90C8-11D0-BD43-00A0C911CE86}\2Microsoft ADPCM
Software\Microsoft\ActiveMovie\devenum\{33D9A761-90C8-11D0-BD43-00A0C911CE86}\49GSM 6.10
Software\Microsoft\ActiveMovie\devenum\{33D9A761-90C8-11D0-BD43-00A0C911CE86}\6CCITT A-Law
Software\Microsoft\ActiveMovie\devenum\{33D9A761-90C8-11D0-BD43-00A0C911CE86}\7CCITT u-Law
CLSID\{8cae96b7-85b1-4605-b23c-17ff5262b296}
CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance\{8cae96b7-85b1-4605-b23c-17ff5262b296}
Software\Splashtop Inc.\Splashtop Remote Server
Software\Microsoft\PCHealth\ErrorReporting\DW\Debug
SOFTWARE\Microsoft\OASys\OAClient
Software\Microsoft\Office\11.0\Common\InstallRoot
SOFTWARE\Wow6432Node\McAfee\SystemCore
Software\McAfee\CSP
Software\McAfee\CSP\APPS
Software\COMODO\CESM\CESM Agent
system\currentcontrolset\services\ccavsrv\config
AddressBook
Connection Manager
DirectDrawEx
Fontcore
IE40
IE4Data
IE5BAKEX
IEData
MobileOptionPack
Oracle VM VirtualBox Guest Additions
SchedulingAgent
WIC
{929FBD26-9020-399B-9A7A-751D61F0B942}
{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}
{E2B51919-207A-43EB-AE78-733F9C6797C3}
{050d4fc8-5d48-4b8f-8972-47c82c46020f}
{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}
{f65db027-aff3-4070-886a-0d87064aabb1}
{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\720bd56f3ffa070488a6d07860a4ba1b
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\720bd56f3ffa070488a6d07860a4ba1b
Software\Classes\Installer\Products\720bd56f3ffa070488a6d07860a4ba1b
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\8cf4d05084d5f8b49827748cc26420f0
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\8cf4d05084d5f8b49827748cc26420f0
Software\Classes\Installer\Products\8cf4d05084d5f8b49827748cc26420f0
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\91915B2EA702BE34EA8737F3C976793C\InstallProperties
293F613C3D3F6224C97D7F9D6B07E6E2
4E04132216221434788912EF64A710C6
DCF6260E25CF8554699DF8E3D871EE8F
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\79AA332A50D011E4585D700F695D0537
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\79AA332A50D011E4585D700F695D0537
Software\Classes\Installer\UpgradeCodes\79AA332A50D011E4585D700F695D0537
EE6829612D95DC44C913B69F647F151E
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\EE6829612D95DC44C913B69F647F151E
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\EE6829612D95DC44C913B69F647F151E
Software\Classes\Installer\UpgradeCodes\EE6829612D95DC44C913B69F647F151E
B69160B3E28B4521A31682F694B4E72F
4D1FF46ACBC9C764D8111CFAAAB0A8FF
93DBAA8300052C544816EAD4A1C0D2F0
B491FDA46B0B60C43981DD5E71A156A5
20F0BF81D70B6284CA96996F2B1CD0AF
8A1E368F4EC34D146B9AA4ACB796C6E1
4245244DF3526CE409FF0482DD289D98
0AE46362E98DE1A4E873E70FDC57D366
E5103D42553EFF54995E6D1012D22308
74D97021BA4A5EA49A752C60D223F853
E9C8E90C342AE0348811C7C763DBA817
294916F4AA52F8344A30FCEC3ACE46B7
2C99FCB37B4BB3744AA90DD318A08F8B
4DA03D1DE2A48804B95F56E7AC9BBB32
EB07932ED5D346B47A6DB0E601A86B90
4272B56E81CDD3B4AB751FD0EE4CDB4F
78BE0870120F1274BAAFED31690D31D1
801212623D1F7D0498EBF0CCB461E10C
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\0B9FD51D0D07FEB47B5DCFA3AE839156
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\0B9FD51D0D07FEB47B5DCFA3AE839156
Software\Classes\Installer\Products\0B9FD51D0D07FEB47B5DCFA3AE839156
SOFTWARE\Microsoft\CTF\Compatibility\msiexec.exe
1F62F885-32940935
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{13c5d420-cae2-11d4-b34d-00105a1c23dd}
Software\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield Uninstall Information\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}
Software\Microsoft\Windows\CurrentVersion\Uninstall\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}
SOFTWARE\NVIDIA Corporation\Installer
Times New Roman
Software\Wow6432Node\NVIDIA Corporation\Global\Stereo3D
Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\NVIDIAStereo
SOFTWARE\Microsoft\WZCSVC\Parameters\Interfaces\{CFE68B1E-656A-488B-8077-738CA67BA3A5}
{9317b373-f854-47a9-b384-bf199504f5e9}
Software\Microsoft\Windows\CurrentVersion\Uninstall\Comodo Cloud Antivirus_list_uninstall
system\currentcontrolset\services\cmdagent\cisconfigs\0
Software\baidu\Spark
SoftWare\Baidu\
Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice
Software\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Software\Classes\CLSID\{B853E835-9F24-4F4B-B55C-E554D15CCCD2}
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C4ED781C-7394-4906-AAFF-D6AB64FF7C38}
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NUIns
Software\Microsoft\Windows\CurrentVersion\Uninstall\VOPackage
Software\Microsoft\Windows\CurrentVersion\Uninstall\ASPackage
Software\DtsEncodeTools
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WeatherTool
Software\Microsoft\Windows\CurrentVersion\Uninstall\YSPackage
Software\Microsoft\Windows\CurrentVersion\Uninstall\Eppink
SOFTWARE\istartsurfSoftware\istartsurfhp
SOFTWARE\key-findSoftware\key-findhp
SOFTWARE\mystartsearchSoftware\mystartsearchhp
Software\GenericAddon
Software\SpeedChecker
Software\CheckMeUp
Software\CheckMeApp
Software\IneedSpeed
Software\SpeedCheck
Software\SpeeditUp
Software\BlockAndSurf
Software\Safer-Surf
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\NUIns
Software\Wow6432Node\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Software\Wow6432Node\Classes\CLSID\{B853E835-9F24-4F4B-B55C-E554D15CCCD2}
Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VOPackage
Software\AppDataLow\Software\GenericAddon
Software\AppDataLow\Software\SpeedChecker
Software\AppDataLow\Software\CheckMeUp
Software\AppDataLow\Software\CheckMeApp
Software\AppDataLow\Software\IneedSpeed
Software\AppDataLow\Software\SpeedCheck
Software\AppDataLow\Software\SpeeditUp
Software\AppDataLow\Software\BlockAndSurf
Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ASPackage
Software\AppDataLow\Software\Safer-Surf
Software\Wow6432Node\DtsEncodeTools
Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WeatherTool
Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YSPackage
Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Eppink
SOFTWARE\Wow6432Node\istartsurfSOFTWARE\Wow6432Node\istartsurfhp
SOFTWARE\Wow6432Node\key-findSOFTWARE\Wow6432Node\key-findhp
SOFTWARE\Wow6432Node\mystartsearchSOFTWARE\Wow6432Node\mystartsearchhp
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VOPackage
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ASPackage
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Eppink
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\YSPackage
SOFTWARE\SearchProtect
software\Microsoft\idsc
software\Microsoft\{1f7ee1a8-4436-4ffc-b97b-b5b01e87d3d2}
software\Microsoft\idsc20
software\Microsoft\{7b6d6a5c-84cc-42db-b817-000a05728e99}
software\Microsoft\{94ebd7b5-82ae-449t-b679-3d04078ed154}
software\Microsoft\{99cfe81f-094e-46bf-9bf2-7523d2668544}
software\Microsoft\{cf50d5c9-de2c-44cf-9fc8-0c591c97f448}
software\Microsoft\{0f9bf30b-d979-431e-82a9-7ed45eee98c3}
Software\Nosibay\Bubble Dock Tag
Software\AVG
Software\McAfee
Software\Nosibay\Bubble Dock
SOFTWARE\Wow6432Node\MozillaPlugins\@qq.com/QQPCMgr
SOFTWARE\MozillaPlugins\@qq.com/QQPCMgr
SOFTWARE\Tencent
SOFTWARE\Wow6432Node\Tencent
PROTOCOLS\Name-Space Handler\res\
PROTOCOLS\Name-Space Handler\C\
FEATURE_RESTRICT_RES_TO_LMZ
FEATURE_LOAD_SHDOCLC_RESOURCES
SOFTWARE\Classes\PROTOCOLS\Filter\image/jpeg
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Cache
Software\Microsoft\Windows\CurrentVersion\App Paths\TracksEraser.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Glary Utilities_is1
Software\Microsoft\Windows\CurrentVersion\Uninstall\Glary Utilities 3
Software\Microsoft\Windows\CurrentVersion\Uninstall\Glary Utilities 4
Software\Microsoft\Windows\CurrentVersion\Uninstall\Glary Utilities 5
Software\KMPlayer\AlbumArt
Software\KMPlayer\KMP3.0
Software\KMPlayer\KMP3.0\OptionArea
Software\Microsoft\ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}
{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\Instance
System\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\SAMPLE5099B3D0007DC280\
{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}
SOFTWARE\Microsoft\Windows\CurrentVersion\MMDevices\SPDIF_Formats
Default DirectSound Device
Default WaveOut Device
Software\Microsoft\ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\Default DirectSound Device
Software\Microsoft\ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\Default WaveOut Device
Software\KMPlayer\KMP3.0\OptionArea\BaseAudioPlugInList
Software\KMPlayer\KMP3.0\OptionArea\BaseVideoPlugInList
Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ksf
KMPlayer.ksf
Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.kpl
KMPlayer.kpl
Gulim
Software\KMPlayer\WideAlbum
Software\KMPlayer\KMP2.0\OptionArea
SOFTWARE\Classes\PROTOCOLS\Filter\text/css
FEATURE_AJAX_CONNECTIONEVENTS
FEATURE_BINARY_CALLER_SERVICE_PROVIDER
Software\Google\Update\Clients\{430FD4D0-B729-4F61-AA34-91526481799D}
Software\Google\Update\
Software\Google\UpdateDev\
Software\Google\Update\ClientState\
Software\Google\Update\ClientStateMedium\{430FD4D0-B729-4F61-AA34-91526481799D}
Software\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}
Software\Google\Update\ClientStateMedium\{8A69D345-D564-463C-AFF1-A69D9E530F96}
Software\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}
Software\Gameinstaller\Installer
Software\Wow6432Node\Gameinstaller\Installer
Software\Trymedia Systems\ActiveMARK Software\
Software\RealArcade\Games\
Software\GameHouse\Games\
{287b2c47-0d1d-4055-95b6-5d13b8c45410}
ThemeManager
SOFTWARE\MimarSinan\InstallAware\Ident.Cache\{61EBC5FA-D832-41C8-B2E3-192DFE1B91AC}
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\AF5CBE16238D8C142B3E91D2EFB119CA
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\AF5CBE16238D8C142B3E91D2EFB119CA
Software\Classes\Installer\Products\AF5CBE16238D8C142B3E91D2EFB119CA
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\AF5CBE16238D8C142B3E91D2EFB119CA\InstallProperties
SOFTWARE\Microsoft\Windows NT\CurrentVersion\
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\
SOFTWARE\Microsoft\InetStp
SYSTEM\CurrentControlSet\Services\W3SVC\Parameters\Virtual Roots\
Software\Soluto
HARDWARE\DESCRIPTION\System\BIOS
SYSTEM\CurrentControlSet\Services\mssmbios\Data
Software\Microsoft\Windows Script Host\Settings
JSFile\ScriptEngine
SOFTWARE\Microsoft\Windows Script\Features
Software\Microsoft\Wbem\Scripting
SOFTWARE\CashKitten
SOFTWARE\Classes\iTunes\DefaultIcon
System\CurrentControlSet\Control\Video\{B285A319-4BD4-4785-A840-9BDC49C97EFA}\0000
SYSTEM\CurrentControlSet\services\ccavsrv\Config
Control Panel\International
Software\Opera Software
Software\Microsoft\Windows\CurrentVersion\Uninstall\RW-Everything_is1
Software\Microsoft\Windows\CurrentVersion\Uninstall\PDF2EXE_is1
AvastPersistentStorage
Software\AVAST Software\Avast
Software\ALWIL Software\Avast
Software\ALWIL Software\Avast\5.0
Software\ALWIL Software\Avast\4.0
SOFTWARE\Freedom Scientific\JAWS
SOFTWARE\NVDA
SOFTWARE\Corsair\GamingDevice
SOFTWARE\StudySearchWindow
FEATURE_MIME_TREAT_IMAGE_AS_AUTHORITATIVE
SOFTWARE\KONAMIPES6\PES6
SOFTWARE\cv cryptovision\sc interface
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Netscp.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Netscp6.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Netscape.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Mozilla.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\firefox.exe
SOFTWARE\EPSON\InterfaceEpson
PROTOCOLS\Name-Space Handler\https\
Software\Mozilla\Thunderbird\TaskBarIDs
Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER
Software\Zylom\MyZylom\Credentials
Software\Zylom\Games
Software\Microsoft\Windows\CurrentVersion\Explorer\Sharing
Software\Microsoft\Windows\CurrentVersion\PropertySystem\PropertyHandlers\.html
Software\Microsoft\Windows\CurrentVersion\PropertySystem\PropertyHandlers\.gif
Software\Microsoft\Windows\CurrentVersion\PropertySystem\PropertyHandlers\.css
CLSID\{00EF2092-6AC5-47c0-BD25-CF2D5D657FEB}\InprocServer32
FEATURE_WEBOC_GLOBAL_WINLIST
Software\Microsoft\Internet Explorer\Recovery
Software\Microsoft\Internet Explorer\Main\WindowsSearch
SOFTWARE\Microsoft\.NETFramework
AppID\sample
MIME\Database\Content Type\application/x-msdownload
SOFTWARE\Classes\PROTOCOLS\Filter\application/x-msdownload
CLSID\{C39EE728-D419-4BD4-A3EF-EDA059DBD935}
Interface\{B06B0CE5-689B-4AFD-B326-0A08A1A647AF}
CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}
FEATURE_RELEASE_CALLBACK_ON_STOP_BINDING
Software\Microsoft\Windows\CurrentVersion\Uninstall\Ashampoo WinOptimizer_is1
CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Instance
CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Instance\Disabled
Software\Perfect World Entertainment\Arc
SOFTWARE\Acer\Live Updater
${Regkey_Parameters}
Software\Logitech\Parameters
Software\Logitech\EvtMgr6
Software\Wilson WindowWare\Settings\WWW-PROD\WB44I
Software\Wilson WindowWare\Settings\WWWBATCH\MAIN
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\009\
Software\Intel\Display\igfxcui\igfxtray\TrayIcon
SOFTWARE\MySQL
SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
Software\VirtualDub.org\VirtualDub\Preferences
Software\VirtualDub.org\VirtualDub\Saved filespecs
Software\Microsoft\Windows\CurrentVersion\Uninstall\{3B756F35-2504-429A-B36C-EA0961B6A2C0}_is1
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AddressBook\
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Connection Manager\
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DirectDrawEx\
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Fontcore\
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE40\
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE4Data\
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE5BAKEX\
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IEData\
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MobileOptionPack\
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Oracle VM VirtualBox Guest Additions\
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SchedulingAgent\
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WIC\
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{929FBD26-9020-399B-9A7A-751D61F0B942}\
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}\
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E2B51919-207A-43EB-AE78-733F9C6797C3}\
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AddressBook\
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Connection Manager\
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DirectDrawEx\
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Fontcore\
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IE40\
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IE4Data\
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IE5BAKEX\
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IEData\
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\MobileOptionPack\
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SchedulingAgent\
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WIC\
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{050d4fc8-5d48-4b8f-8972-47c82c46020f}\
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}\
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{f65db027-aff3-4070-886a-0d87064aabb1}\
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}\
Software\Tutorials\updatetutorialeshp
{cf4fb361-8f8e-4e04-8011-822cb0d1b082}
{ab25d3c2-9787-4788-99a1-32a4c1208c11}
SOFTWARE\StrongSignal
SOFTWARE\OpenCandy\sdk
Software\Microsoft\Windows\CurrentVersion\Uninstall\{B023AAEF-C0D5-4949-95CE-86AF1603AD1F}_is1
SOFTWARE\Microsoft\Windows\shell\Associations\UrlAssociations\http\UserChoice
SOFTWARE\Microsoft\Internet Explorer
SOFTWARE\Lavasoft\Web Companion
Software\Optimizer Pro
Software\PC Cleaner
Software\Super Optimizer
Software\System Healer
Software\Microsoft\Windows\CurrentVersion\Uninstall\RapidMediaConverter
SOFTWARE\ESET
SOFTWARE\AVAST Software
Software\SevereWeatherAlerts
Software\FastMediaConverter\FastMediaConverterApp
Software\WeatherAlerts\WeatherAlertsApp
Software\StormAlerts\StormAlertsApp
Software\Microsoft\Windows\CurrentVersion\Uninstall\GameHug
Software\Microsoft\Windows\CurrentVersion\Uninstall\DesktopDock
Software\Microsoft\Windows\CurrentVersion\Uninstall\StormWatch
Software\Microsoft\Windows\CurrentVersion\Uninstall\SafeGuard
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\StormWatch
Software\Microsoft\Windows\CurrentVersion\Uninstall\StormWarnings
Software\Microsoft\Windows\CurrentVersion\Uninstall\DesktopBar
Software\InstalledBrowserExtensions\HQ-Video
Software\InstalledBrowserExtensions\Plus HD
Software\InstalledBrowserExtensions\Cinema Plus
Software\InstalledBrowserExtensions\27058
Software\InstalledBrowserExtensions\19979
Software\InstalledBrowserExtensions\30935
Software\Wajam
Software\WajIEnhance
Software\WajaIEnhance
Software\WInternetEnhance
Software\WaInternetEnhance
Software\WajInternetEnhance
Software\WajaInternetEnhance
Software\WInterEnhance
Software\WaInterEnhance
Software\WajInterEnhance
Software\WajaInterEnhance
Software\WIntEnhance
Software\WaIntEnhance
Software\WajIntEnhance
Software\WajaIntEnhance
Software\WNEnhance
Software\WaNEnhance
Software\WajNEnhance
Software\WajaNEnhance
Software\WNetEnhance
Software\WaNetEnhance
Software\WajNetEnhance
Software\WajaNetEnhance
Software\WNetworkEnhance
Software\WaNetworkEnhance
Software\WajNetworkEnhance
Software\WajaNetworkEnhance
Software\WWebEnhance
Software\WaWebEnhance
Software\WajWebEnhance
Software\WajaWebEnhance
Software\WIEnhancer
Software\WaIEnhancer
Software\WajIEnhancer
Software\WajaIEnhancer
Software\WInternetEnhancer
Software\WaInternetEnhancer
Software\WajInternetEnhancer
Software\WajaInternetEnhancer
Software\WInterEnhancer
Software\WaInterEnhancer
Software\WajInterEnhancer
Software\WajaInterEnhancer
Software\WIntEnhancer
Software\WaIntEnhancer
Software\WajIntEnhancer
Software\WajaIntEnhancer
Software\WNEnhancer
Software\WaNEnhancer
Software\WajNEnhancer
Software\WajaNEnhancer
Software\WNetEnhancer
Software\WaNetEnhancer
Software\WajNetEnhancer
Software\WajaNetEnhancer
Software\WNetworkEnhancer
Software\WaNetworkEnhancer
Software\WajNetworkEnhancer
Software\WajaNetworkEnhancer
Software\WWebEnhancer
Software\WaWebEnhancer
Software\WajWebEnhancer
Software\WajaWebEnhancer
AxUniCRS.UniCRSX.1
AxUniCRS.UniCRSX
Component Categories
800
{7DD95802-9882-11CF-9FA9-00AA006C42C4}
{95D06D6A-7B31-48A5-BC90-8C43943BAEF7}
ProgID
VersionIndependentProgID
Programmable
{B6904EB6-F8CB-459F-B319-B3EE9E857CFC}
{A7D922A8-F23E-4CE8-8A27-64C99654E72C}
AxCrossCert.AxCrossCert\CLSID
SOFTWARE\Policies\Chromium
Software\ATI\ACE\Settings\Runtime\
SYSTEM\CurrentControlSet\Services\CardReaderFilter
Software\AVS4YOU\VideoConverter\
ovoli.jane.1
ovoli.jane
{13f0f3ed-8d07-4b98-bcc4-8c1e9b9210d6}
LocalServer32
Version
SOFTWARE\Microsoft\NET Framework Setup\NDP\V4\Client
SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\{CFE68B1E-656A-488B-8077-738CA67BA3A5}\Connection
Safety\Tracking Protection Exceptions
FEATURE_MIME_USE_BUILTIN_ACCEPT_HEADERS
FEATURE_BEHAVIORS
Default Behaviors
Software\Policies\Microsoft\Internet Explorer\ActiveX Compatibility\{ADC6CB82-424C-11D2-952A-00C04FA34F05}
ActiveX Compatibility\{ADC6CB82-424C-11D2-952A-00C04FA34F05}
SOFTWARE\Avg
Software\ESET
Software\CheckPoint
Software\Flowsurf
Software\TabNav
Software\FastSearch
Software\Fast-Search
Software\QuickSearch
CLSID\{08ACFB57-8187-47f0-AF93-56360D03634A}
SOFTWARE\WordShark_1.10.0.20
SOFTWARE\WordShark
SOFTWARE\WordSurfer_1.10.0.19
Software\tstamptoken
SOFTWARE\SpaceSoundPro
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SpaceSoundPro
SOFTWARE\Classes\CLSID\{55FC8D93-9E8B-41D6-84A4-09830910158D}
SOFTWARE\Classes\CLSID\{8244CE7C-A878-4BE9-8B6B-19206DA348C2}
SOFTWARE\Classes\CLSID\{B1FDB64C-07AC-4B60-AEF7-EE65437BE4C6}
SOFTWARE\Classes\CLSID\{F1F0CBDA-5D80-47BA-9A7E-BD9E8C1883A2}
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC}
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{F252F215-5CA5-4643-BCD2-62E4BE7F940E}
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{27C41D5E-53C8-4033-BAD0-1F1BC926AB5C}
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C42C5197-0EE9-4940-893B-F4EF047DFF0F}
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\zz.1740.ssp
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PPStream
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IQIYI Video
SOFTWARE\ShopperPro
SOFTWARE\SearchModule
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\win_en_77_is1
SOFTWARE\WIN
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\rec_ca_231_is1
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SunnyDay4_is1
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\1Gz
Software\360TotalSecurity
SOFTWARE\360TotalSecurity
SOFTWARE\ShopperPro3
SOFTWARE\Goobzo
SOFTWARE\SearchModulePlus
SOFTWARE\Class
SOFTWARE\InternetBrowser
SOFTWARE\DeskBar
SOFTWARE\BrowserAir
SOFTWARE\TheBrowser
SOFTWARE\YTDownloader
CLSID\{033BE5FC-ED4C-48A0-8F07-E0128384D828}
software\{13ca1734-3cad-4f94-ef7f-ab84ccf08ec7}
software\{154667ea-1743-4542-3a21-738ffb10fe54}
software\{61c74471-aa3d-45d5-ef57-2bb43561ed5d}
Software\canortic
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{74f1e872-8d6f-4cc7-58d6-c60d8dfe43ed}
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{55d4b236-fe79-4782-cc2d-55acaf147087}
Software\esties
Software\subpar\{19893c3d-1309-4b95-7643-80882aa33d0f}
SOFTWARE\9bdb6862-e2b2-438d-6c24-6b5de4d5a1f1
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{e20d6e44-c692-4329-d495-57e2996fc3ed}
SOFTWARE\1e8bad4d-072b-48c2-faab-0f9697a10ab7
SOFTWARE\1950c178-e1bd-4c8d-4a81-8c1d5846c3e1
SOFTWARE\{4a4f4999-31eb-416d-304a-9afc235d4d06}
SOFTWARE\{4130650b-6b01-45b1-f03d-4e1b190508f7}
SOFTWARE\{59bcf3c8-2b55-471a-ae11-cb40ec1008a4}
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9280d7b0-5b63-492e-562e-8cd12e21da09}
SOFTWARE\{ba70652c-ece3-41d5-a4e4-eafa388ea69d}
Software\ryofward
SOFTWARE\Avast
Software\AVAST Software
Software\Avast
SOFTWARE\Classes\avast
AppEvents\Schemes\Apps\Avast
SYSTEM\CurrentControlSet\Services\avast! Antivirus
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Avast
GDSetup\Components\{30E36983-4329-4538-B296-27D9ECDCB571}\R_Scanner_GData
GDSetup\Components\{39FB83FC-9596-43A5-938F-A5F55C41F930}\R_Scanner_GData_Engine
GDSetup\Components\{7ABCB3E6-8A8F-4F2B-B357-304170A132D7}\R_Scanner_GData
SOFTWARE\{43026FDD-1104-41C8-B570-5E9A3D7D8152}
SOFTWARE\{9E6892AE-EDB8-490A-9FDD-5A9770E7909E}
SOFTWARE\{C1856559-BA5C-41B7-961C-677E89A2C490}
SOFTWARE\{0D40F91C-41DE-4E06-8B14-ABCCF7A51495}
SOFTWARE\{8B261394-6C7D-4CFC-A767-E02F34A60D8B}
SOFTWARE\{44C29802-3946-42EC-BA6B-EB0953B5CE31}
SOFTWARE\{57C1F957-89AE-41F3-9E2B-18EB4A7F9731}
SOFTWARE\X-AVCSD
SOFTWARE\G Data
SOFTWARE\Symantec
SOFTWARE\OpenVPN
SOFTWARE\Avira
SOFTWARE\Norton
SOFTWARE\McAfee
Software\McAfee Software
SOFTWARE\McAfee.com
Software\McAfeeInstallIntegrator
SOFTWARE\VMware
SOFTWARE\Flashbeat
SOFTWARE\PicColor Utility
SOFTWARE\SecurityUtility
SOFTWARE\LolyKey
SOFTWARE\DoReMe
SOFTWARE\LolliScan
SOFTWARE\SmartPurpleConf
SOFTWARE\KasperskyLab
Software\Rtp
SOFTWARE\Smartbar
Software\RGMservice
Software\Pservice
Software\Vosteran Browser
Software\BoBrowser
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VuuPC
SYSTEMCurrentControlSetServicesVuuPCConnectivity
SOFTWARE\AVAST Software\Avast
Software\Avast Software
Software\MPC
SOFTWARE\Super Optimizer
Software\systweak\RegClean Pro
Software\Tune\up\pro\key
Software\One System Care\PurchaseLink
Software\rising
Software\Tencent\QQPCMgr
Software\Microsoft\Windows\CurrentVersion\Uninstall\q
Software\Microsoft\Windows\CurrentVersion\Uninstall\{96F04C1B-E352-4A90-BED4-11A0FA968BC2}_is1
Software\Huorong
Software\STA\MTview
Software\ADSafe4
SOFTWARE\Microsoft\idsc
SOFTWARE\Microsoft\idsc20
SOFTWARE\Microsoft\{1f7ee1a8-4436-4ffc-b97b-b5b01e87d3d2}
SOFTWARE\Microsoft\{7b6d6a5c-84cc-42db-b817-000a05728e99}
SOFTWARE\Microsoft\{94ebd7b5-82ae-449t-b679-3d04078ed154}
SOFTWARE\Microsoft\{99cfe81f-094e-46bf-9bf2-7523d2668544}
SOFTWARE\Microsoft\{cf50d5c9-de2c-44cf-9fc8-0c591c97f448}
SOFTWARE\Microsoft\{0f9bf30b-d979-431e-82a9-7ed45eee98c3}
HARDWARE\DESCRIPTION\SYSTEM\CentralProcessor\0
SOFTWARE\Microsoft\Windows\CurrentVersion\Run
SOFTWARE\Rtp\state
Software\Smartbar
SOFTWARE\5da059a482fd494db3f252126fbc3d5b
Software\CloudGuard
Software\7E745E7F7BAA4842A833716036DEBF6F
Software\1832BFF4F2BF43989682B0AF5ECB8F68
Software\4033691F40C1493E895E791CE3CF0976
Software\32D26CAEEEFE4E83BD53C0261341085D
Software\0E2A533F19374E488CF48F950F5A07F1
Software\D909B01E08AE40EEA47F9FA8D7CF746B
Software\655ED0DD7DA047618002AF578ADFA012
Software\3DE9D279B98F48E898283B1445515BDB
Software\43B149F5CEBC46BC8103DE23FA2D99BF
Software\F370AC1ED9E143D29D6D3CA1F7A957B3
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\vnlgp
SOFTWARE\AppDataLow\Software\TrailerWatch
SOFTWARE\Microsoft\Tutotag
SOFTWARE\WOW6432Node\Microsoft\Tutotag
SOFTWARE\WOW6432Node\Microsoft\{1f7ee1a8-4436-4ffc-b97b-b5b01e87d3d2}
SOFTWAREWOW6432Node\Microsoft\{7b6d6a5c-84cc-42db-b817-000a05728e99}
SOFTWARE\WOW6432Node\Microsoft\{94ebd7b5-82ae-449t-b679-3d04078ed154}
SOFTWARE\WOW6432Node\Microsoft\{99cfe81f-094e-46bf-9bf2-7523d2668544}
SOFTWARE\WOW6432Node\Microsoft\{cf50d5c9-de2c-44cf-9fc8-0c591c97f448}
SOFTWARE\WOW6432Node\Microsoft\{0f9bf30b-d979-431e-82a9-7ed45eee98c3}
SOFTWARE\WOW6432Node\Microsoft\idsc
SOFTWARE\WOW6432Node\Microsoft\idsc20
SOFTWARE\Classes\CLSID\{632B6D57-8586-40D8-BB34-30D7A7EC537A}
SOFTWARE\Wow6432Node\Classes\CLSID\{632B6D57-8586-40D8-BB34-30D7A7EC537A}
SOFTWARE\Classes\CLSID\{A1E9BF3E-E447-4E27-B5E7-50095B442777}
SOFTWARE\Wow6432Node\Classes\CLSID\{A1E9BF3E-E447-4E27-B5E7-50095B442777}
SOFTWARE\Classes\CLSID\{94F4120C-A8C5-4C54-8594-E83FE800EDBA}
SOFTWARE\Wow6432Node\Classes\CLSID\{94F4120C-A8C5-4C54-8594-E83FE800EDBA}
SOFTWARE\Classes\CLSID\{8DCF3491-CC4B-4353-A993-F74BE1A9735F}
SOFTWARE\Wow6432Node\Classes\CLSID\{8DCF3491-CC4B-4353-A993-F74BE1A9735F}
SOFTWARE\Classes\CLSID\{0D220EDE-02C6-41C1-8558-5A89B52B13D8}
SOFTWARE\Wow6432Node\Classes\CLSID\{0D220EDE-02C6-41C1-8558-5A89B52B13D8}
SOFTWARE\Classes\CLSID\{5F9B9A38-371B-4FEE-B878-01923EB8377F}
SOFTWARE\Wow6432Node\Classes\CLSID\{5F9B9A38-371B-4FEE-B878-01923EB8377F}
SOFTWARE\Classes\CLSID\{E8779DE6-44F9-4D65-97B9-76CE4FC17738}
SOFTWARE\Wow6432Node\Classes\CLSID\{E8779DE6-44F9-4D65-97B9-76CE4FC17738}
SOFTWARE\Classes\CLSID\{8FF10FED-2F0A-4F7F-BE87-B04F1DCD4319}
SOFTWARE\Wow6432Node\Classes\CLSID\{8FF10FED-2F0A-4F7F-BE87-B04F1DCD4319}
SOFTWARE\Classes\CLSID\{84195849-C80E-4647-8EEC-30DA9EAA4E0A}
SOFTWARE\Wow6432Node\Classes\CLSID\{84195849-C80E-4647-8EEC-30DA9EAA4E0A}
SOFTWARE\Classes\CLSID\{3F5EF5F7-35B2-4BB3-A36A-8518B54DC3ED}
SOFTWARE\Wow6432Node\Classes\CLSID\{3F5EF5F7-35B2-4BB3-A36A-8518B54DC3ED}
FEATURE_XMLHTTP
SOFTWARE\Pulse Secure\Logging
SOFTWARE\Pulse Secure\Logging\sample
SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8E375A63-C616-46F1-AC77-59DF78F3A826}\InstalledVersion
SOFTWARE\Microsoft\Code Store Database\Distribution Units\{583C990C-2D38-410c-9A4A-0932D66A754F}\InstalledVersion
{daa7a7c8-2d77-4032-b692-68ad96eb44ed}
Software\Norton\Install
Software\DropboxUpdate\UpdateDev\
Software\DropboxUpdate\Update\
Software\DropboxUpdate\Update\ClientState\
Software\DropboxUpdate\Update\network\secure
Software\DropboxUpdate\Update\Clients\{D8968FF2-E0B1-4A13-A3E2-C9F2995F3BC6}
Software\Microsoft\Windows\CurrentVersion\Uninstall\iPlus manager_is1
Software\Microsoft\Windows\CurrentVersion\Uninstall\Plus Internet_is1
System\CurrentControlSet\Control\ProductOptions
System\CurrentControlSet\Control\SafeBoot\Option
System\CurrentControlSet\Services\Tcpip\Parameters
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\331BD2FCCBFD0F34CB520425BD36FA22
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\331BD2FCCBFD0F34CB520425BD36FA22
Software\Classes\Installer\UpgradeCodes\331BD2FCCBFD0F34CB520425BD36FA22
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SunnyDay21_is1
Software\Hewlett-Packard\File Sanitizer\Settings
Software\Adobe
OpenWithList
OpenWithProgids
.bmp
.cab
.contact
.dib
.dll
.docx
.dwfx
.easmx
.edrwx
.emf
.eprtx
.ex$
.fon
.htm
.html
.ico
.ini
.jfif
.jpe
.jpeg
.jtx
.lnk
.mht
.mhtml
.msc
.ocx
.odt
.otf
.pml
.ps1xml
.py
.rle
.rtf
.scf
.search-ms
.sys
.tif
.tiff
.ttc
.ttf
.txt
.wdp
.wmf
.xml
.xps
.xsl
.zip
FileExts
SOFTWARE\Adobe
Software\Microsoft\Direct3D\MostRecentApplication
SOFTWARE\Microsoft\Direct3D\MostRecentApplication
SOFTWARE\Microsoft\Direct3D
SOFTWARE\Classes\TypeLib
{00000200-0000-0010-8000-00AA006D2EA4}
{00000201-0000-0010-8000-00AA006D2EA4}
2.1
{00000205-0000-0010-8000-00AA006D2EA4}
2.5
{00000206-0000-0010-8000-00AA006D2EA4}
2.6
{00000300-0000-0010-8000-00AA006D2EA4}
2.8
6.0
{00000600-0000-0010-8000-00AA006D2EA4}
{00020430-0000-0000-C000-000000000046}
win64
{000204EF-0000-0000-C000-000000000046}
{00025E01-0000-0000-C000-000000000046}
5.0
{000C1092-0000-0000-C000-000000000046}
409
{00A40DB9-D8B4-40B3-8E0C-A8E8C6B3B720}
{00D25261-A9E4-40B2-BF1E-A8A13DF2542A}
{00F25AE8-3625-4E34-92D4-F0918CF010EE}
{0109E0F4-91AE-4736-A2CE-9D63E89D0EF6}
{0249F559-489F-4977-A0EF-21352C5AD247}
{03837500-098B-11D8-9414-505054503030}
{058F2991-6ADD-4948-89AF-82F58BCF2CCD}
{06290C00-48AA-11D2-8432-006008C3FBFC}
{0A055C02-BABE-4480-BB7B-A8EC723CE9C0}
{0E59F1D2-1FBE-11D0-8FF2-00A0D10038BC}
{0FFF9602-69CF-4728-9EA4-141514866CA2}
{10E3A8C1-B46C-4B6C-B3EF-8E2F48D527D0}
{11A8B8EE-BF30-409A-8EF7-3A143EF70332}
{11DD5EA9-F8DB-4F6E-BF7C-6AADBA404A3D}
{122F1BB4-2723-4ac2-A36A-16BB9E8B99A6}
{13199C00-7494-11D0-8816-00A0C903B83C}
{1320AD9E-A50F-4ED0-B1A4-4E45EC25005E}
{150E2D7A-DAC1-4582-947D-2A8FD78B82CD}
{157702D8-B1C1-40B8-8B46-AF2B40022085}
{15AE3A36-E53B-454d-A816-A7C61CBAB8A4}
Win32
{194508A0-B8D1-473E-A9B6-851AAF726A6D}
{1B773E42-2509-11CF-942F-008029004347}
3.7
{1B8D8AE1-A595-4687-A7AD-9E3828E09B79}
{1C565858-F302-471E-B409-F180AA4ABEC6}
{1C82EAD8-508E-11D1-8DCF-00C04FB951F9}
{1EA4DBF0-3C3B-11CF-810C-00AA00389B71}
1.1
{1fda955a-61ff-11da-978c-0008744faab7}
{204810B3-73B2-11D4-BF42-00B0D0118B56}
{215D64D2-031C-33C7-96E3-61794CD1EE61}
{21D6D480-A88B-11D0-83DD-00AA003CCABD}
{2206CEB0-19C1-11D1-89E0-00C04FD7A829}
{22813728-8BD3-11D0-B4EF-00A0C9138CA4}
{22fb0827-65d0-4c68-8e4f-25d30a422a1d}
{22FDDF82-3032-4174-B179-DC0BFFEBBE62}
{2358C810-62BA-11D1-B3DB-00600832C573}
4.0
{2735412F-7F64-5B0F-8F00-5D77AFBE261E}
{28DCD85B-ACA4-11D0-A028-00AA00B605A4}
{2A005C00-A5DE-11CF-9E66-00AA00A3F464}
{2A75196C-D9EB-4129-B803-931327F72D5C}
{2BF34C1A-8CAC-419F-8547-32FDF6505DB8}
{2C941FD0-975B-59BE-A960-9A2A262853A5}
{2E7D6A71-56CE-4A77-B58F-05DFFF85E251}
{3050F1C5-98B5-11CF-BB82-00AA00BDCE0B}
{3050F4E0-98B5-11CF-BB82-00AA00BDCE0B}
{306F05ED-1019-42A4-B94F-88A057E6736A}
{333C7BC1-460F-11D0-BC04-0080C7055A83}
{353D638F-C81B-4476-8323-63A7EE274205}
{372FCE32-4324-11D0-8810-00A0C903B83C}
{3BAA3119-ECA1-4A32-9A08-595E71AE9DA9}
{3D5905E0-523C-11D1-9FEA-00600832DB4A}
{3DE641EF-0556-4D4A-98D5-7DBD8AD5D70F}
{3EA49599-AF67-4142-B379-C54786F112B2}
{3F4DACA7-160D-11D2-A8E9-00104B365C9F}
5.5
{410381CD-AF42-11D1-8F10-00C04FC2C17B}
{420B2830-E718-11CF-893D-00A0C9054228}
{43136EB0-D36C-11CF-ADBC-00AA00A80033}
{438EDB38-282C-435D-8BE3-4AB90B83CEF5}
{43E734CA-043D-4A70-9A2C-A8F254063D91}
{4486DF98-22A5-4F6B-BD5C-8CADCEC0A6DE}
{44EC0535-400F-11D0-9DCD-00A0C90391D3}
{4A105F44-A270-4796-883B-241A7F362A13}
{4b21f542-0eb5-4205-a12b-59bf2f2555fe}
{4B2E957D-0393-11D1-B1AB-00AA00BA3258}
{4E14FB90-2E22-11D1-9964-00C04FBBB345}
{4F47FCF0-E864-4D97-B309-2F5902306128}
{4FB2D46F-EFC8-4643-BCD0-6E5BFA6A174C}
{501D5FC6-FEA2-4453-B1CF-17E462143EE6}
{50A7E9B0-70EF-11D1-B75A-00A0C90564FE}
{5190C4AF-AB0F-4235-B12F-D5A8FA3F854B}
{54314D1D-35FE-11D1-81A1-0000F87557DB}
{5477469E-83B1-11D2-8B49-00A0C9B7C9C4}
{54AF9343-1923-11D3-9CA4-00C04F72C514}
2.32
{563DC060-B09A-11D2-A24D-00104BD35090}
{565783C6-CB41-11D1-8B02-00600806D9B6}
1.2
{56A868B0-0AD4-11CE-B03A-0020AF0BA770}
{56BC53D1-96DB-11D1-BF3F-000000000000}
{56D04F5D-964F-4DBF-8D23-B97989E53418}
1.5
{58FBCF7C-E7A9-467C-80B3-FC65E8FCCA08}
{5C65924B-E236-11D2-8899-00104B2AFB46}
{5E77EB03-937C-11D1-B047-00AA003B6061}
{5F099F16-6A6E-4BBC-8BD8-98F3221D58C4}
{613808A3-159B-4D91-B4F0-A22AEE2D1AAC}
{61E207A5-827C-42E9-ADFA-165C6A745EE4}
{640D3148-A423-11D2-B943-00C04F79D22F}
{662901FC-6951-4854-9EB2-D9A2570F2B2E}
5.1
{680C64B0-8DA2-4399-BF4B-E94C1E52983E}
{686ba761-d755-4927-929f-94c8f67af1df}
{6A379714-E19D-4D0F-AAC6-20D5F143C420}
{6B100E1A-1385-4D1F-A02E-6E705A76BB6C}
{6BC09690-0CE6-11D1-BAAE-00C04FC2E20D}
{6BC096BB-0CE6-11D1-BAAE-00C04FC2E20D}
{6BC096C5-0CE6-11D1-BAAE-00C04FC2E20D}
{6BC09890-0CE6-11D1-BAAE-00C04FC2E20D}
{6BC098A0-0CE6-11D1-BAAE-00C04FC2E20D}
{6CAAAA3B-6502-40FE-97FC-72A290DC63CF}
{6EB22880-8A19-11D0-81B6-00A0C9231C29}
{7071EC00-663B-4BC1-A1FA-B97F3B917C55}
{714DD4F6-7676-4BDE-925A-C2FEC2073F36}
{728ab348-217d-11da-b2a4-000e7bbb2b09}
{73CA1716-D932-4015-A5DA-0B8037C24788}
{7444C709-39BF-11D1-8CD9-00C04FC29D45}
{74C08640-CEDB-11CF-8B49-00AA00B8A790}
{7501FE6A-42E9-4859-ADAF-AC5A88589B7B}
{7586B340-EC08-11D0-A466-00C04FC30DF6}
{773F1B9A-35B9-4E95-83A0-A210F2DE3B37}
{777BA810-2498-4875-933A-3067DE883070}
{777BA8F1-2498-4875-933A-3067DE883070}
{77A6BD8A-AB60-49FF-853C-B6EE7BABAF96}
{78530B68-61F9-11D2-8CAD-00A024580902}
{7988B57C-EC89-11cf-9C00-00AA00A14F56}
{7999FC20-D3C6-11CF-ACAB-00A024A55AEF}
{7c5a40ae-c944-45d0-ae56-9168519d4048}
{7CDB4C42-D09D-4532-AF9D-B941DF2F3E24}
{7D868ACD-1A5D-4A47-A247-F39741353012}
{7E8BC440-AEFF-11D1-89C2-00C04FB6BFC4}
{81DDF732-4AA8-4A35-BDFF-8B42EFE7C624}
{833E4000-AFF7-4AC3-AAC2-9F24C1457BCE}
{8405D0DF-9FDD-4829-AEAD-8E2B0A18FEA4}
{84E2B44A-0627-43AE-AB85-C0E3C0FFFD49}
{85C3F8F7-CFCE-4259-87FF-CAB1F4521F6E}
{8628F27C-64A2-4ED6-906B-E6155314C16A}
{87099223-C7AF-11D0-B225-00C04FB6C2F5}
{87D5F036-FAC3-4390-A1E8-DFA8A62C09E7}
{8acc2016-04a3-4343-b8e1-1870e35d6a41}
{8C11EFA1-92C3-11D1-BC1E-00C04FA31489}
{8C389764-F036-48F2-9AE2-88C260DCF43B}
{8CC497C9-A1DF-11CE-8098-00AA0047BE5D}
{8cec5857-07a1-11d9-b15e-000d56bfe6ee}
{8cec5860-07a1-11d9-b15e-000d56bfe6ee}
{8cec5899-07a1-11d9-b15e-000d56bfe6ee}
{8D810F97-C1A1-49CA-9902-A7B7E58AF009}
{8E80422B-CAC4-472B-B272-9635F1DFEF3B}
{928CEF0C-5A84-48AC-BF37-C5C21039B83A}
{92AD68AA-17E0-11D1-B230-00C04FB9473F}
{92F94BE2-8C2E-4cd6-88ED-774A5DF42AD3}
{9381D8F6-0288-11D0-9501-00AA00B911A5}
{944DE083-8FB8-45CF-BCB7-C477ACB2F897}
{94A0E92D-43C0-494E-AC29-FD45948A5221}
{94F6FF32-37C3-11D2-8840-00104B2AFB46}
{95CEF0E5-A4ED-4703-B501-AE70A153697A}
{97d25db0-0363-11cf-abc4-02608c9e7553}
{98315905-7BE5-11D2-ADC1-00A02463D6E7}
{9B085638-018E-11D3-9D8E-00C04F72D980}
{9C757116-4367-4DA9-AC0E-6C6577AD5560}
{9CDCD9C9-BC40-41C6-89C5-230466DB0BD0}
{9E175B60-F52A-11D8-B9A5-505054503030}
{9E175B61-F52A-11D8-B9A5-505054503030}
{A1A6B98C-497F-11D1-9217-00C04FBBBFB3}
{A1B0DE63-7454-4184-B5B6-6ACFDAC5C9A6}
{A1B9E03C-3226-11D2-883E-00104B2AFB46}
{A7201431-623E-44A7-A85C-D13AFC0F6AA6}
{A7C01D63-4403-4BE2-B1AF-6EE0A2E6A1E9}
{AAA49BB1-378C-4206-9CAD-53C3372E9550}
{ABBA0019-3075-11D6-88A4-00B0D0200F88}
{AC3B8B4C-B6CA-11D1-9F31-00C04FC29D52}
{ACD4155A-3272-4ad2-A10F-3C844669C6E4}
{ACDF1C98-A273-43B0-959D-6935F7A723BE}
{AD5A0B88-4027-44E2-8626-461FEC6906A2}
{ADB880A2-D8FF-11CF-9377-00AA003B7A11}
{ADE6CC63-3C0E-4B9B-8C59-2DF6E652990A}
{AEB84C80-95DC-11D0-B7FC-B61140119C4A}
{B0A20F08-4B8A-4BDE-9735-8CFC250A6B4B}
{B0C2A63F-AFF8-40E3-B42D-8A542DC909EC}
{B0EDF154-910A-11D2-B632-00C04F79498E}
{B3A00612-1423-4072-A4F9-DE2ADCAA7F3C}
{B596CC9F-56E5-419E-A622-E01BB457431E}
{B691E011-1797-432E-907A-4D8C69339129}
6.1
{B806F1A7-6278-405A-ABE4-E1AA3A3A550B}
{B9C76E7B-D029-44EB-896F-F02FC6E9ABD5}
{BACEDF3E-74AB-11D0-B162-00AA00BA3258}
{BD96C556-65A3-11D0-983A-00C04FC29E30}
{BED7F4EA-1A96-11D2-8F08-00A0C9A6186D}
{BEE4BFEC-6683-3E67-9167-3C0CBC68F40A}
{C2A2B169-4052-4037-88D9-E274AF31C6F7}
{C4F9D6EB-4FBB-3341-A582-AEA37ED6DA94}
8.0
{C5C5C500-3ABC-11D6-B25B-00C04FA0C026}
{C866CA3A-32F7-11D2-9602-00C04F8EE628}
5.4
{c8b522d5-5cf3-11ce-ade5-00aa0044773d}
{CB72A544-F75E-42CB-932E-EB06A7063A66}
Flags
{CC802D05-AE07-4C15-B496-DB9D22AA0A84}
{CD000000-8B95-11D1-82DB-00C04FB1625D}
{CD6C7865-5864-11D0-ABF0-0020AF6B0B7A}
{CF30ADE7-9965-4cf8-BB05-524086FBCCB2}
{CFADAC75-E12C-11D1-B34C-00C04F990D54}
{d0b7e02b-e1a3-11dc-81ff-001185ae5e76}
{D3295D86-D604-11D4-A704-00C04FA137E4}
{D3295D87-D604-11D4-A704-00C04FA137E4}
{D37E2A3E-8545-3A39-9F4F-31827C9124AB}
{D5090061-1F23-4611-8821-7B759123AE68}
{D597DEED-5B9F-11D1-8DD2-00AA004ABD5E}
{D7CA032C-B7D0-429E-9FD7-82241C356B4A}
{D808BD12-DD1E-4cbc-8A3A-0A35010F078A}
{DA524058-BDB4-482A-997A-338AE04D7156}
{DB3442A7-A2E9-4A59-9CB5-F5C1A5D901E5}
{DCB00D01-570F-4A9B-8D69-199FDBA5723B}
{DCB82247-779E-405C-932D-2F123364DF86}
{DCBBBAB6-0001-4BBB-AAEE-338E368AF6FA}
{DD6F48D7-D5B2-4901-BE88-D140D1C40A07}
{dfdfb4eb-32b7-4b7f-a3d4-f798f75d3a46}
{E0E270C2-C0BE-11D0-8FE4-00A0C90A6341}
{e34cb9f1-c7f7-424c-be29-027dcc09363a}
{E4DE3030-0142-4ACA-BA48-8613B56A2555}
{E9970F91-B6AA-11D9-B032-000D56C25C27}
{EA544A21-C82D-11D1-A3E4-00A0C90AEA82}
{EAB22AC0-30C1-11CF-A7EB-0000C05BAE0B}
{EABAA706-4A6D-4E45-A255-A6E86C403ADB}
{ECCDF535-45CC-11CE-B9BF-0080C87CDBA6}
{EDEBC0B7-FA4D-45FB-B750-16C8D2340AE8}
{EE574957-4077-4AD6-8658-327C2C86C5AA}
{EF53050B-882E-4776-B643-EDA472E8E3F2}
2.7
{EFD856A4-5A85-4A1B-ADD5-2EADACE6F6A2}
{F010BE25-296D-4036-980F-5A0669A17577}
{F31091E5-B0A8-11D6-B6FC-005056C00008}
{F5078F18-C551-11D3-89B9-0000F81FE221}
3.0
{F618C513-DFB8-11D1-A2CF-00805FC79235}
{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}
{FC5988CF-6D6A-4812-ADD9-2DDE4F47346F}
{FCDECE01-A39D-11D0-ABE7-00AA0064D470}
{ff9d683b-b90a-49b4-9649-f93756bad71f}
SOFTWARE\Classes
SOFTWARE\Classes\FileType
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Photoshop.exe
SOFTWARE\Microsoft\DirectDraw\MostRecentApplication
SOFTWARE\Microsoft\DirectDraw
SYSTEM\ControlSet001\Control\StillImage\Events\STIProxyEvent
SYSTEM\ControlSet001\Control\StillImage\Events
SOFTWARE\Classes\CLSID\{098a6e1b-2858-452a-861e-768ecf77342b}
SOFTWARE\Classes\CLSID\{12b598b3-499f-4789-b6a4-900f0125e6eb}
Software\Classes\CLSID\{13c5c35e-b099-4275-80b6-cf17de8f2336}
Software\Classes\CLSID\{177e3ca8-73ea-4d4e-a6f0-e2aef336f273}
Software\Classes\CLSID\{1ad38eeb-c67d-4fac-bdf4-779f0cfc85ab}
Software\Classes\CLSID\{1db7f789-1d27-49dd-a0c2-91b13f4ecca4}
Software\Classes\CLSID\{1f7a215c-382b-4973-8093-bc1090a0107b}
Software\Classes\CLSID\{24f0ab76-0d84-4c40-8b96-570fb3985310}
Software\Classes\CLSID\{299fcd63-098d-4039-8aec-f4d83de04865}
Software\Classes\CLSID\{2bd9d654-530e-4ba5-b6d2-b0eb1fea1b32}
Software\Classes\CLSID\{2c253307-8cd7-4747-ad28-64d9d88fe2d9}
Software\Classes\CLSID\{2c7f9b6c-0676-4acc-91b9-53bbe3d4f5ed}
Software\Classes\CLSID\{3407d9a0-a820-4be5-8e28-410d677488aa}
Software\Classes\CLSID\{3DF5B659-0B42-44EA-975F-7FB720964C5A}
Software\Classes\CLSID\{47473c27-0ef2-4604-aec9-85bce5364137}
Software\Classes\CLSID\{48f059ef-bc3e-4763-b820-aa3bb88875ff}
Software\Classes\CLSID\{4a304587-695b-482a-a48d-cdc2c9ac597a}
Software\Classes\CLSID\{568c23fd-cee1-4e9c-a743-5335a23a9134}
Software\Classes\CLSID\{599d4b7a-8c9f-41d0-afbc-54cc1d0f957a}
Software\Classes\CLSID\{6a16cf17-ee0b-4a2f-9f9a-76fac0d51ec5}
Software\Classes\CLSID\{6DECC242-87EF-11cf-86B4-444553540000}
Software\Classes\CLSID\{77afa639-a23d-4710-94a0-5d5de8f19677}
Software\Classes\CLSID\{7bdd6e7b-8ff7-4977-8e6a-5b62cfa47268}
Software\Classes\CLSID\{8aea5346-0dd7-4d56-ae28-0c993f35b6f1}
Software\Classes\CLSID\{8fd90215-58cf-4301-9f13-b0c26ba9fabf}
Software\Classes\CLSID\{96d48725-75bf-4733-962f-120c5681ade4}
Software\Classes\CLSID\{99aea70e-4d13-44bf-a878-33345cbfcbc8}
Software\Classes\CLSID\{9e582123-c2ba-4a25-9e56-3fd3baf8cb71}
Software\Classes\CLSID\{9e6aaf3b-3cd1-47fd-a80a-ebb7adbc53ad}
Software\Classes\CLSID\{9f67edb6-f1d0-458e-b254-67379cabaaa0}
Software\Classes\CLSID\{9fe8667d-3d4d-4509-8c39-659f961e10c6}
Software\Classes\CLSID\{a24cee4d-f054-4189-865a-df11d77ba60b}
Software\Classes\CLSID\{a2770b5c-794a-41fd-8370-feff0ca6fbf9}
Software\Classes\CLSID\{a2dfd5e5-3983-4121-ac5d-e51e392f4dff}
Software\Classes\CLSID\{a5f25dbb-333f-4397-8d33-99e7d9b84e1c}
Software\Classes\CLSID\{a9701d4d-73d2-4547-9ca9-3e655c9d8327}
Software\Classes\CLSID\{b46396c2-8295-4754-b3a0-65c6512fb8f5}
Software\Classes\CLSID\{ba94feb3-1812-4d0b-8954-4aac46c6fc24}
Software\Classes\CLSID\{c21b3526-8bac-496a-8e87-d2edb1fc87d5}
Software\Classes\CLSID\{cbc6639c-1c24-4820-80d9-1166c7d59782}
Software\Classes\CLSID\{d2616c9b-22b5-491b-8285-ff1b2b0b944a}
Software\Classes\CLSID\{d26a2bbd-cb80-486d-bc0e-1218f778d385}
Software\Classes\CLSID\{d8cdc179-c3d5-4eed-a042-938683c29355}
Software\Classes\CLSID\{e548108c-5b87-4bd5-bd88-c034db5b10e4}
Software\Classes\CLSID\{e595896f-0407-4659-994f-19235ffb4d97}
Software\Classes\CLSID\{ecc0e713-bc0d-4c54-86ca-777823d0dbe4}
Software\Classes\CLSID\{ecf6155e-bfaa-40f5-8438-f967fde1f5ff}
Software\Classes\CLSID\{fa15f3c2-ce4f-4df2-a37a-adae44a50d55}
Software\Classes\CLSID\{fbbc7d1e-78ab-432d-970a-daaea9aa1c4d}
Software\Classes\CLSID\{ff49950b-15cf-4228-833c-aaa05baf919e}
SOFTWARE\Classes\Applications\Photoshop.exe
SOFTWARE\Classes\Photoshop.Application
SOFTWARE\Classes\Photoshop.Image
Software\Classes\Photoshop.PlugIn
SOFTWARE\Classes\.8bf
SOFTWARE\Classes\.8bi
SOFTWARE\Classes\.psb
SOFTWARE\Classes\.psd
PersistentHandler
.psd
SOFTWARE\Classes\Photoshop.Application.60
SOFTWARE\Classes\Photoshop.Application.60.1
SOFTWARE\Classes\Photoshop.Image.13
SOFTWARE\Classes\Interface\{01CD87DE-1F53-485D-A096-0D318611AB6D}
SOFTWARE\Classes\Interface\{064BBE94-396D-4B25-9071-AC5B14D0487F}
SOFTWARE\Classes\Interface\{09DA6B10-9684-44EE-A575-01F54660BDDC}
SOFTWARE\Classes\Interface\{16BE80A3-57B1-4871-83AC-7F844EEEB1CA}
SOFTWARE\Classes\Interface\{1B28B8CD-7578-415F-AC67-DC22A69F4C07}
SOFTWARE\Classes\Interface\{22D0B851-E811-40E2-9A79-E84EA602C9F1}
SOFTWARE\Classes\Interface\{288BC58E-AB6A-467C-B244-D225349E3EB3}
SOFTWARE\Classes\Interface\{29C13F49-BCEF-4FE2-BFC7-6F03B82B726F}
SOFTWARE\Classes\Interface\{2DC64F97-8C69-4016-A8EB-89A00217291F}
SOFTWARE\Classes\Interface\{2EB2592D-F02D-4117-A22C-26E5CDFAEEE2}
SOFTWARE\Classes\Interface\{323DD2BC-0205-4A44-9F8E-0CF2556F00DF}
SOFTWARE\Classes\Interface\{372B4D75-EB10-4D0A-8203-5778D521253D}
SOFTWARE\Classes\Interface\{376C4F3B-0345-440B-90D9-FE78AECA249C}
SOFTWARE\Classes\Interface\{38FB4290-9DF6-11D1-B032-00C04FD7EC47}
SOFTWARE\Classes\Interface\{436CE722-7369-4395-ACC2-2DE7A09269DF}
SOFTWARE\Classes\Interface\{45F1195F-3554-4B3F-A00A-E1D189C0DC3E}
SOFTWARE\Classes\Interface\{46AB9A1D-1B32-4C59-8142-B223ECCF1F74}
SOFTWARE\Classes\Interface\{46DFAF34-75E0-470E-8217-B0C763137DD0}
SOFTWARE\Classes\Interface\{478BF855-E42A-4D63-8C9D-F562DE5FF7A8}
SOFTWARE\Classes\Interface\{4B9E6B85-0613-4873-8AB7-575CD2226768}
SOFTWARE\Classes\Interface\{4D40BE2D-FE11-4060-B52A-DE31C837D51D}
SOFTWARE\Classes\Interface\{50D0174F-484D-4A2B-8BF0-A21B84167D82}
SOFTWARE\Classes\Interface\{5148663B-F632-4AB0-9484-2DBC197CEA82}
SOFTWARE\Classes\Interface\{55031766-E456-4E54-A0D0-8E545601A2D8}
SOFTWARE\Classes\Interface\{5DE90358-4D0B-4FA1-BA3E-C91BBA863F32}
SOFTWARE\Classes\Interface\{5F168D2A-F9EA-4866-8C55-4875E0940622}
SOFTWARE\Classes\Interface\{632F36B3-1D76-48BE-ADC3-D7FB62A0C2FB}
SOFTWARE\Classes\Interface\{643099A1-0B67-4920-9B14-E14BE8F63D5F}
SOFTWARE\Classes\Interface\{65D1B010-0D87-481C-B2E6-22EFB5A54129}
SOFTWARE\Classes\Interface\{662506C7-6AAE-4422-ACA4-C63627CB1868}
SOFTWARE\Classes\Interface\{66869370-9672-492D-93AC-0ADD62F427F1}
SOFTWARE\Classes\Interface\{68F15227-7568-47E1-A4F8-5615C24BDD28}
SOFTWARE\Classes\Interface\{69172A3F-E06E-42E6-B733-4DC36E2AC948}
SOFTWARE\Classes\Interface\{6B785D83-5B5F-4402-A712-BAEBD8C5B812}
SOFTWARE\Classes\Interface\{70A60330-E866-46AA-A715-ABF418C41453}
SOFTWARE\Classes\Interface\{726B458C-74B0-47AE-B390-99753B55DF2E}
SOFTWARE\Classes\Interface\{746FEF90-A182-4BD0-A4F6-BB6BBAE87A78}
SOFTWARE\Classes\Interface\{750824C6-C347-4CDB-AA96-8ABA1EBDF9EA}
SOFTWARE\Classes\Interface\{7CA9DE40-9EB3-11D1-B033-00C04FD7EC47}
SOFTWARE\Classes\Interface\{7D14BA29-1672-482F-8F48-9DA1E94800FD}
SOFTWARE\Classes\Interface\{7E8F9046-9F8E-4594-A22C-9F6B4C227CD7}
SOFTWARE\Classes\Interface\{8214A53C-0E67-49D4-A65A-D56F07B17D37}
SOFTWARE\Classes\Interface\{84ADBF06-8354-4B5C-9CB1-EA2565B66C7C}
SOFTWARE\Classes\Interface\{861C9290-2A0C-4614-8606-706B31BFD45B}
SOFTWARE\Classes\Interface\{89417281-E1AF-4800-B82A-9F37ED0478EF}
SOFTWARE\Classes\Interface\{8B0CB532-4ACC-4BF3-9E42-0949B679D120}
SOFTWARE\Classes\Interface\{8B4F1F1E-4ED7-4291-AE61-76ADF4D1D50B}
SOFTWARE\Classes\Interface\{9077D1E1-8959-11CF-86B4-444553540000}
SOFTWARE\Classes\Interface\{90CED625-8D78-11CF-86B4-444553540000}
SOFTWARE\Classes\Interface\{90CED626-8D78-11CF-86B4-444553540000}
SOFTWARE\Classes\Interface\{91A3D47B-9579-4013-9206-7B6859439DA2}
SOFTWARE\Classes\Interface\{91B5F8AE-3CC5-4775-BCD3-FF1E0724BB01}
SOFTWARE\Classes\Interface\{9414F179-C905-11d1-92CC-00600808FC44}
SOFTWARE\Classes\Interface\{94C016CD-178F-4FD7-85BB-F5925A34A122}
SOFTWARE\Classes\Interface\{94C4A25A-2C91-4514-A783-3173AFC48430}
SOFTWARE\Classes\Interface\{95D69B63-B319-44D3-8307-C988E96E7E58}
SOFTWARE\Classes\Interface\{97C81476-3F5D-4934-8CAA-1ED0242105B0}
SOFTWARE\Classes\Interface\{9A37A0AC-E951-4B16-A548-886B77338DE0}
SOFTWARE\Classes\Interface\{9E01C1DA-DF69-4C2C-85EC-616370DF1CF0}
SOFTWARE\Classes\Interface\{ABD0F9CE-822B-4BB1-A811-3EC852B43C0F}
SOFTWARE\Classes\Interface\{B0D18870-EAC3-4D35-8612-6F734B3FA656}
SOFTWARE\Classes\Interface\{B125A66B-4C94-4E55-AF2F-57EC4DCB484B}
SOFTWARE\Classes\Interface\{B1ADEFB6-C536-42D6-8A83-397354A769F8}
SOFTWARE\Classes\Interface\{B249C0B0-A004-11D1-B036-00C04FD7EC47}
SOFTWARE\Classes\Interface\{B249C0B1-A004-11D1-B036-00C04FD7EC47}
SOFTWARE\Classes\Interface\{B3C35001-B625-48D7-9D3B-C9D66D9CF5F1}
SOFTWARE\Classes\Interface\{B6D22EB9-EC6D-46DB-B52A-5561433A1217}
SOFTWARE\Classes\Interface\{B7283EEC-23B1-49A6-B151-0E97E4AF353C}
SOFTWARE\Classes\Interface\{BBCE52D6-5D4B-4691-99E3-62C174BD2855}
SOFTWARE\Classes\Interface\{C1C35524-2AA4-4630-80B9-011EFE3D5779}
SOFTWARE\Classes\Interface\{C2783141-B50D-4F0C-9E2E-BF76EA8A4E60}
SOFTWARE\Classes\Interface\{C88838E3-5A82-4EE7-A66C-E0360C9B0356}
SOFTWARE\Classes\Interface\{D2D1665E-C1B9-4CA0-8AC9-529F6A3D9002}
SOFTWARE\Classes\Interface\{D334A509-00F8-4092-A9AF-6E1176D06536}
SOFTWARE\Classes\Interface\{D54491EF-6F09-4DE3-B49A-D57EDB2F40B8}
SOFTWARE\Classes\Interface\{D74B820F-AA86-42DD-8D85-F4D67A62F200}
SOFTWARE\Classes\Interface\{DC865034-A587-4CC4-8A5A-453032562BE4}
SOFTWARE\Classes\Interface\{DDA16C46-15B2-472D-A659-41AA7BFDC4FD}
SOFTWARE\Classes\Interface\{DFF407C7-3BCC-45AC-B6CC-EE6D52032D85}
SOFTWARE\Classes\Interface\{E7A940CD-9AC7-4D76-975D-24D6BA0FDD16}
SOFTWARE\Classes\Interface\{EC6A366C-F901-488D-A2C3-9E2E78B72DC6}
SOFTWARE\Classes\Interface\{EDC373C3-FE30-40BA-A31C-0251CA7456F1}
SOFTWARE\Classes\Interface\{EE8364D9-B811-4C7D-A3A8-97C4EBFAB83A}
SOFTWARE\Classes\Interface\{F1AF982E-2BBD-406D-9FD6-CA6C898A7FFE}
SOFTWARE\Classes\Interface\{F4D7F5C2-37DB-4DF7-8A7D-528902056596}
SOFTWARE\Classes\Interface\{F4E21694-AEBF-44FB-90AB-EECD58C1B6F3}
SOFTWARE\Classes\Interface\{F715C957-54CE-4E55-9856-591D4CD082FD}
SOFTWARE\Classes\Interface\{F867E6C9-B5DB-4C5A-B3BA-63224D08A01B}
SOFTWARE\Classes\Interface\{F91F9C5B-AC34-45B7-AFF2-871D9DD2E8EC}
SOFTWARE\Classes\Interface\{FC08B435-5F19-49DF-ABE7-ADCE9F0729FF}
Software\Microsoft\Office\16.0\Registration\{6379F5C8-BAA4-482E-A5CC-38ADE1A57348}
Software\Wow6432Node\Microsoft\Office\16.0\Registration\{6379F5C8-BAA4-482E-A5CC-38ADE1A57348}
.WIT
SOFTWARE\Microsoft\CTF\Compatibility\cabinstaller.exe
SOFTWARE\Classes\CLSID\{45B69029-F3AB-4204-92DE-D5140C3E8E74}\InprocServer32
SOFTWARE\Classes\CLSID\{45B69029-F3AB-4204-92DE-D5140C3E8E74}\LocalServer32
1A15D6E1
Software\Microsoft\Windows\CurrentVersion\Internet Settings\PluggableProtocols\
{6EF8E539-12E9-4595-A7C6-3DDA8A4069B2}
SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Shell Folders
Software\Samsung\Samsung Recovery Solution 4
SOFTWARE\RazorWeb
Software\Microsoft\Windows\CurrentVersion\Uninstall\{6049054B-DB11-48E1-A583-9A565D5C8856}_is1
Hardware\Description\System\CentralProcessor\0
NI\3b8b6167\20bb928a
NI\30bc7c4f\3f50fe4f
policy.1.0.xtc&__ab917a421742ccdd
Software\Intel\Setup$
Software\Microsoft\Windows\CurrentVersion\Uninstall\{AAFC96BF-C615-4D77-9A55-C692A7B26FC5}_is1
SOFTWARE\InstallShield\15.0\Professional
SOFTWARE\Skype\Phone\UI\General
SOFTWARE\Skype\Installer
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\74A569CF9384AC046B81814F680F246C
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\74A569CF9384AC046B81814F680F246C
Software\Classes\Installer\Products\74A569CF9384AC046B81814F680F246C
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\74A569CF9384AC046B81814F680F246C\InstallProperties
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\9A9450A669B1C894CACB933400F1BE91
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\9A9450A669B1C894CACB933400F1BE91
Software\Classes\Installer\Products\9A9450A669B1C894CACB933400F1BE91
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9A9450A669B1C894CACB933400F1BE91\InstallProperties
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\0AB19942EE0FDA44C98CE55CA0CE6F7B
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\0AB19942EE0FDA44C98CE55CA0CE6F7B
Software\Classes\Installer\Products\0AB19942EE0FDA44C98CE55CA0CE6F7B
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0AB19942EE0FDA44C98CE55CA0CE6F7B\InstallProperties
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\50E7C3A773EE6D74991EE20BA5D33A7F
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\50E7C3A773EE6D74991EE20BA5D33A7F
Software\Classes\Installer\Products\50E7C3A773EE6D74991EE20BA5D33A7F
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\50E7C3A773EE6D74991EE20BA5D33A7F\InstallProperties
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\E7FF67E4ABEA78C47B88DC745E24B5D9
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\E7FF67E4ABEA78C47B88DC745E24B5D9
Software\Classes\Installer\Products\E7FF67E4ABEA78C47B88DC745E24B5D9
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\E7FF67E4ABEA78C47B88DC745E24B5D9\InstallProperties
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\CF4F71AEFBDF8FC45A92D28913230D35
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\CF4F71AEFBDF8FC45A92D28913230D35
Software\Classes\Installer\Products\CF4F71AEFBDF8FC45A92D28913230D35
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\CF4F71AEFBDF8FC45A92D28913230D35\InstallProperties
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\2A7527EE2A93F2D4D9CA9F2FB5A81E8D
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\2A7527EE2A93F2D4D9CA9F2FB5A81E8D
Software\Classes\Installer\Products\2A7527EE2A93F2D4D9CA9F2FB5A81E8D
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\2A7527EE2A93F2D4D9CA9F2FB5A81E8D\InstallProperties
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\54E7910D668D0D4409FA25F9821FA5AB
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\54E7910D668D0D4409FA25F9821FA5AB
Software\Classes\Installer\Products\54E7910D668D0D4409FA25F9821FA5AB
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\54E7910D668D0D4409FA25F9821FA5AB\InstallProperties
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\4EDD95AA276B12640A61C442284059A7
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\4EDD95AA276B12640A61C442284059A7
Software\Classes\Installer\Products\4EDD95AA276B12640A61C442284059A7
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4EDD95AA276B12640A61C442284059A7\InstallProperties
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\CC978F6D6D95B4D4EAB97D164ED852DE
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\CC978F6D6D95B4D4EAB97D164ED852DE
Software\Classes\Installer\Products\CC978F6D6D95B4D4EAB97D164ED852DE
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\CC978F6D6D95B4D4EAB97D164ED852DE\InstallProperties
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\E8B1B6BFDEF152C4CA99F0D1A352C7D1
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\E8B1B6BFDEF152C4CA99F0D1A352C7D1
Software\Classes\Installer\Products\E8B1B6BFDEF152C4CA99F0D1A352C7D1
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\E8B1B6BFDEF152C4CA99F0D1A352C7D1\InstallProperties
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\BDAD5335AB438EA45A9146D887948864
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\BDAD5335AB438EA45A9146D887948864
Software\Classes\Installer\Products\BDAD5335AB438EA45A9146D887948864
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BDAD5335AB438EA45A9146D887948864\InstallProperties
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\693D336E8815D9E4F8B6FB8BFB43768E
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\693D336E8815D9E4F8B6FB8BFB43768E
Software\Classes\Installer\Products\693D336E8815D9E4F8B6FB8BFB43768E
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\693D336E8815D9E4F8B6FB8BFB43768E\InstallProperties
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\91E52A84EA9DEBB44911F6C4D523B893
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\91E52A84EA9DEBB44911F6C4D523B893
Software\Classes\Installer\Products\91E52A84EA9DEBB44911F6C4D523B893
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\91E52A84EA9DEBB44911F6C4D523B893\InstallProperties
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\AB4C301D509FA7340894BD4267B3EB63
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\AB4C301D509FA7340894BD4267B3EB63
Software\Classes\Installer\Products\AB4C301D509FA7340894BD4267B3EB63
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\AB4C301D509FA7340894BD4267B3EB63\InstallProperties
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\AC357D429EA603E4F8F5FE9CE380FBD3
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\AC357D429EA603E4F8F5FE9CE380FBD3
Software\Classes\Installer\Products\AC357D429EA603E4F8F5FE9CE380FBD3
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\AC357D429EA603E4F8F5FE9CE380FBD3\InstallProperties
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\5EAD28C50BE647342945EB3391ABE428
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\5EAD28C50BE647342945EB3391ABE428
Software\Classes\Installer\Products\5EAD28C50BE647342945EB3391ABE428
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5EAD28C50BE647342945EB3391ABE428\InstallProperties
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\A419E7B35D3992A429BBFAC8F3664C13
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\A419E7B35D3992A429BBFAC8F3664C13
Software\Classes\Installer\Products\A419E7B35D3992A429BBFAC8F3664C13
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A419E7B35D3992A429BBFAC8F3664C13\InstallProperties
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\A0939AE84BF71174FBC8C7807044FE9F
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\A0939AE84BF71174FBC8C7807044FE9F
Software\Classes\Installer\Products\A0939AE84BF71174FBC8C7807044FE9F
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A0939AE84BF71174FBC8C7807044FE9F\InstallProperties
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\CC8CE7506A27F504C93C6DD2B6B22F5A
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\CC8CE7506A27F504C93C6DD2B6B22F5A
Software\Classes\Installer\Products\CC8CE7506A27F504C93C6DD2B6B22F5A
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\CC8CE7506A27F504C93C6DD2B6B22F5A\InstallProperties
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{FC965A47-4839-40CA-B618-18F486F042C6}
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6A0549A9-1B96-498C-ACBC-3943001FEB19}
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{EA17F4FC-FDBF-4CF8-A529-2D983132D053}
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D0197E45-D866-44D0-90AF-529F28F15ABA}
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AA59DDE4-B672-4621-A016-4C248204957A}
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D6F879CC-59D6-4D4B-AE9B-D761E48D25ED}
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{FB6B1B8E-1FED-4C25-AC99-0F1D3A257C1D}
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5335DADB-34BA-4AE8-A519-648D78498846}
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{48A25E19-D9AE-4BBE-9411-6F4C5D328B39}
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D103C4BA-F905-437A-8049-DB24763BBE36}
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{24D753CA-6AE9-4E30-8F5F-EFC93E08BF3D}
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8EA9390A-7FB4-4711-BF8C-7C080744EFF9}
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{057EC8CC-72A6-405F-9CC3-D62D6B2BF2A5}
Software\Microsoft\Internet Explorer\ContinuousBrowsing
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\9A1221D6FB710CE4182F723DE03C7010
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\9A1221D6FB710CE4182F723DE03C7010
Software\Classes\Installer\Products\9A1221D6FB710CE4182F723DE03C7010
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9A1221D6FB710CE4182F723DE03C7010\InstallProperties
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\F9C582BB128C07749807654CBA258CE7
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\F9C582BB128C07749807654CBA258CE7
Software\Classes\Installer\Products\F9C582BB128C07749807654CBA258CE7
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F9C582BB128C07749807654CBA258CE7\InstallProperties
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\7692FC6BE18C0C0489510C7547EF1F02
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\7692FC6BE18C0C0489510C7547EF1F02
Software\Classes\Installer\Products\7692FC6BE18C0C0489510C7547EF1F02
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7692FC6BE18C0C0489510C7547EF1F02\InstallProperties
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\DF94592A3F56C0445A25B61841FC13D9
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\DF94592A3F56C0445A25B61841FC13D9
Software\Classes\Installer\Products\DF94592A3F56C0445A25B61841FC13D9
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\DF94592A3F56C0445A25B61841FC13D9\InstallProperties
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\9D5146B6D3BDAA14495A5193B390BA69
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\9D5146B6D3BDAA14495A5193B390BA69
Software\Classes\Installer\Products\9D5146B6D3BDAA14495A5193B390BA69
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9D5146B6D3BDAA14495A5193B390BA69\InstallProperties
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\521D59DC299285843BFEF5F65BF2AB6D
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\521D59DC299285843BFEF5F65BF2AB6D
Software\Classes\Installer\Products\521D59DC299285843BFEF5F65BF2AB6D
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\521D59DC299285843BFEF5F65BF2AB6D\InstallProperties
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\F4F223B2304F5794BA45354095741284
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\F4F223B2304F5794BA45354095741284
Software\Classes\Installer\Products\F4F223B2304F5794BA45354095741284
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F4F223B2304F5794BA45354095741284\InstallProperties
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\0E9201899CF73FC4BA93F631631229A1
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\0E9201899CF73FC4BA93F631631229A1
Software\Classes\Installer\Products\0E9201899CF73FC4BA93F631631229A1
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0E9201899CF73FC4BA93F631631229A1\InstallProperties
Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome
Software\WinRAR\General
Software\WinRAR\Paths
Software\WinRAR\Profiles
Software\WinRAR\Compression
Software\WinRAR\Profiles\0
Software\WinRAR\Profiles\1
Software\WinRAR\Profiles\2
Software\WinRAR\Profiles\3
Software\WinRAR\Profiles\4
Software\WinRAR\Policy
Software\WinRAR
Software\WinRAR\Profiles\5
Software\WinRAR\SFX\Default
Software\WinRAR\Interface\Themes
Software\WinRAR\General\Toolbar\Buttons
Software\WinRAR\General\Toolbar\Layout
Software\WinRAR\General\Toolbar
Software\WinRAR\ArcHistory
Software\WinRAR\Favorites
Software\WinRAR\TreePanel
Software\WinRAR\FileList
Software\WinRAR\FileList\FileColumnWidths
Software\WinRAR\Setup
Software\WinRAR\Interface\MainWin
.rar
.arj
.lzh
.ace
.7z
.tar
.gz
.uue
.bz2
.jar
.iso
.z
Software\WinRAR\Setup\Links
Software\WinRAR\DialogEditHistory\CustomExt
Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
.lha
.tgz
.xxe
.uu
.tbz2
.bz
.tbz
.taz
Software\Microsoft\Windows\CurrentVersion\Uninstall\thirteen degrees
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\QuickSearch
SOFTWARE\shopperz101120152249
SOFTWARE\Wow6432Node\shopperz101120152249
SOFTWARE\shopperz100920151159
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Note-up
Software\BrowserAir
Software\Microsoft\Windows\CurrentVersion\Uninstall\BrowserAir
Software\Microsoft\Windows\CurrentVersion\Uninstall\BoBrowser
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\win_en_77_is1
SOFTWARE\Wow6432Node\WIN
SOFTWARE\Wow6432Node\CloudGuard
SOFTWARE\CloudGuard
SOFTWARE\7E745E7F7BAA4842A833716036DEBF6F
SOFTWARE\1832BFF4F2BF43989682B0AF5ECB8F68
SOFTWARE\4033691F40C1493E895E791CE3CF0976
SOFTWARE\32D26CAEEEFE4E83BD53C0261341085D
SOFTWARE\0E2A533F19374E488CF48F950F5A07F1
SOFTWARE\ D909B01E08AE40EEA47F9FA8D7CF746B
SOFTWARE\655ED0DD7DA047618002AF578ADFA012
SOFTWARE\3DE9D279B98F48E898283B1445515BDB
SOFTWARE\43B149F5CEBC46BC8103DE23FA2D99BF
SOFTWARE\ F370AC1ED9E143D29D6D3CA1F7A957B3
SOFTWARE\52F8D668751743D79231B4E61DF0D1EF
Software\ClamWin
Software\Classes\GDSetup
Software\Avira
Software\X-AVCSD
Software\Macromedia\FlashPlayerActiveX
Software\Macromedia\FlashPlayerPlugin
Software\Macromedia\FlashPlayerPepper
Software\CompSoft\Doro
SOFTWARE\SearchKnow
Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}
Cambria
TabbedBrowsing
Software\Microsoft\Windows\CurrentVersion\App Paths\MSIEXEC.exe
Software\Microsoft\Windows\CurrentVersion\App Paths\msiexec.exe
SOFTWARE\ahead\Installation\Settings
Software\Ahead\sample\General
Software\Ahead\Shared
v4.0
Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\secondaryinstaller.exe
Software\Microsoft\Windows NT\CurrentVersion\Fonts
{4c91a207-8965-4965-ab46-61c9fcf589be}
{bb311e82-638e-4689-b39a-beafc11e3575}
SOFTWARE\Microsoft\BingBar\SeaPort
SOFTWARE\Microsoft\Search Enhancement Pack\SeaPort
{718EDB37-DDC6-4130-AF85-A8F44E5B2496}
SOFTWARE\JavaSoft\Java Runtime Environment\
SOFTWARE\ej-technologies\exe4j\locatedjvms\
Software\Microsoft\Office\15.0\common\filespaths
Microsoft\Office
Software\Microsoft\Office\15.0\Common\Logging
software\policies\microsoft\windows\windows error reporting
software\microsoft\windows\windows error reporting
software\policies\windows\microsoft\windows error reporting
software\policies\microsoft\windows\windows error reporting\consent
software\microsoft\windows\windows error reporting\consent
Software\Microsoft\Office\15.0\Registration\{D7279DD0-E175-49FE-A623-8FC2FC00AFC4}
Software\Wow6432Node\Microsoft\Office\15.0\Registration\{D7279DD0-E175-49FE-A623-8FC2FC00AFC4}
Software\Microsoft\Office\15.0\ClickToRun\propertyBag
Software\Microsoft\Office\15.0\Common\Debug\
Software\Microsoft\Office\15.0\Common\
SOFTWARE\SecureWebChannel
SOFTWARE\SonicTrain
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\B0AFE77B3DB92214F9A9519A365BAE42
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\B0AFE77B3DB92214F9A9519A365BAE42
Software\Classes\Installer\Products\B0AFE77B3DB92214F9A9519A365BAE42
CLSID\{000C101C-0000-0000-C000-000000000046}
AppID\MSIEXEC.EXE
Interface\{000C101C-0000-0000-C000-000000000046}
CLSID\{000C103E-0000-0000-C000-000000000046}
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B0AFE77B3DB92214F9A9519A365BAE42\InstallProperties
{f73ef6e0-2ca7-4346-b9cb-9cf1fe672ebf}
Software\Norton\{311739EB-5C94-4EE1-B911-2D1F005060F4}
System\CurrentControlSet\Control\Windows
System\CurrentControlSet\Services\W3proxy
System\CurrentControlSet\Services\fwsrv
Software\Alwil Software\Avast\5.0
Software\ALWIL Software\TestSetup
Software\Alwil Software\Avast32
CLSID\{3D85851B-40FE-4472-9722-6F69B5517476}\MiscStatus
Software\Microsoft\Windows\CurrentVersion\Uninstall\{358AF097-92D1-4750-80E1-F71904AC8CE2}_is1
Software\Microsoft\Windows\CurrentVersion\Uninstall\{FC274982-5AAD-4C20-848D-4424A5043010}_is1
Software\SearchProtect
Software\Microsoft\Windows\CurrentVersion\Uninstall\Euro Truck Simulator 2_is1
Comic Sans MS
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IrfanView
Software\Alexa Toolbar
Software\Mozilla
Software\Microsoft\Windows\CurrentVersion\Uninstall\Butterflies Sky New Free Screensaver_is1
SOFTWARE\
htmlfile\shell\open\command
Software\JavaSoft\Java Runtime Environment
Software\IBM\Java2 Runtime Environment
Software\JRockit\Java Runtime Environment
Software\JavaSoft\Java Development Kit
Software\JRockit\Java Development Kit
Software\IBM\Java Development Kit
Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MblTT.exe
NI\3cbf7002\43cd4304
SYSTEM\CurrentControlSet\Services\.NET CLR Networking\Performance
SYSTEM\CurrentControlSet\Services\.net clr networking\Performance
SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
Software\Microsoft\Windows\CurrentVersion\Uninstall\Car Mechanic Simulator 2015_is1
SOFTWARE\Policies\WiX\Burn
NI\6fe2d605\b0ad44f
Classes
pokerstarsuk
DefaultIcon
Internet Explorer
FeatureControl
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PrivaZer\
Calibri
Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sysmon.exe
NI\62\4fdabc63
NI\42441679\1d21172a
SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Assemblies\C:|ProgramData|535531|sysmon.exe
Software\Microsoft\Installer\Assemblies\C:|ProgramData|535531|sysmon.exe
SOFTWARE\Classes\Installer\Assemblies\C:|ProgramData|535531|sysmon.exe
NI\42441679\788b5142
NI\5a8de2c3\2b1a4e4
NI\5a8de2c3\2b1a4e4\57
IL\73843e06\61f4f6f6\3e
IL\141dfd70\41a2a33b\d
policy.8.0.Microsoft.JScript__b03f5f7f11d50a3a
policy.2.0.System.Configuration.Install__b03f5f7f11d50a3a
NI\159a66b8\424bd4d8
NI\159a66b8\424bd4d8\17
Software\JavaSoft\Java Web Start\1.5.0_14
Software\AutoIt v3\AutoIt
Software\WinRAR SFX
FEATURE_SKIP_LEAK_CLEANUP_AT_SHUTDOWN_KB835183
Software\Policies\Hewlett-Packard\HP Software Framework
SOFTWARE\Policies\Hewlett-Packard\HP Software Framework\{51073F98-A595-47f3-8C31-A7C8595388E4}\GPS
Software\Policies\Hewlett-Packard\hpDrvMntSvc
{0018752E-7735-4B30-9DA9-4A01F024F270}
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
SoftWare\CyberLink\Common\YCMMIRAGE\
Software\Microsoft\ActiveMovie\devenum\{860BB310-5D01-11D0-BD3B-00A0C911CE86}
{860BB310-5D01-11D0-BD3B-00A0C911CE86}\Instance
Software\FreshDevices\FreshDownloadDownload
Software\FreshDevices\FreshDownload
Software\FreshDevices\FreshDownload\MIMEType
SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-3979321414-2393373014-2172761192-1000
.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
DC93EB4DF6DD15C41BE98B1707AD14BA
8AF1F526B369C1F771735E93B41517BF
C57A8999DCCCFD8366E2100B694031F6
SOFTWARE\Smart PC Solutions\Smart PC
SOFTWARE\Microsoft\Windows\CurrentVersion\Settings\Smart PC
Software\Microsoft\Office\16.0\Registration\{70D9CEB6-6DFA-4DA4-B413-18C1C3C76E2E}
Software\Wow6432Node\Microsoft\Office\16.0\Registration\{70D9CEB6-6DFA-4DA4-B413-18C1C3C76E2E}
Software\Visual Protect Service\userID
Software\Visual Protect Service
NI\6d89fe36\11fd95ba
SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Applications\soundschemes2.exe
Software\Microsoft\Windows\CurrentVersion\App Paths\soundschemes2.exe
Software\Microsoft\Windows\CurrentVersion\Uninstall\{CE9793E8-C305-45AA-AE10-52EE0ADDED4F}_is1
Software\Microsoft\Office\10.0\Setup\ChainedInstalls
Software\Microsoft\Office\10.0\Setup\ChainedBackup
Software\Microsoft\Office\10.0
Software\Microsoft\Windows\CurrentVersion\Uninstall\Hugin
SOFTWARE\Clients\StartMenuInternet
Software\Ubisoft\Assassin's Creed II\GameUpdate
Software\AnyBurn
SOFTWARE\AnyBurn
Software\Microsoft\Windows\CurrentVersion\Uninstall\Free Any Burn
SOFTWARE\Free Any Burn
SOFTWARE\Microsoft\Ocviy
SOFTWARE\InnovateDirect
MIME\Database\Content Type
image/bmp\Bits
image/gif\Bits
image/jpeg\Bits
image/pjpeg\Bits
image/png\Bits
image/svg+xml\Bits
image/tiff\Bits
image/vnd.ms-dds\Bits
image/vnd.ms-photo\Bits
image/x-emf\Bits
image/x-icon\Bits
image/x-jg\Bits
image/x-png\Bits
image/x-wmf\Bits
CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}\InProcServer32
serverdatasrv.com
death.cantles.1
death.cantles
{03ce664c-448c-4f38-af4b-9d1b74ffd4e9}
{2BE90E07-EB87-4566-9360-D1EAF1B83568}
1.0\\0\\win32
SOFTWARE\\Classes\\Typelib
System\CurrentControlSet\Services\Eventlog\Application\HotFixInstaller
Software\Microsoft\PCHealth\ErrorReporting\DW\Installed
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0DC1503A46F231838AD88BCDDC8E8F7C\InstallProperties
Software\Classes\Installer\Products\0DC1503A46F231838AD88BCDDC8E8F7C
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-3979321414-2393373014-2172761192-1000\Products\0DC1503A46F231838AD88BCDDC8E8F7C\InstallProperties
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\0DC1503A46F231838AD88BCDDC8E8F7C
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\0DC1503A46F231838AD88BCDDC8E8F7C
Software\Microsoft\Windows\CurrentVersion\Uninstall\FONT_is1
Software\BST\bsplayerv1\VirtualReg\RGM1
Software\BST\bsplayerv1\VirtualReg\CLSID\{04FE9017-F873-410E-871E-AB91661A4EF7}
CLSID\{55DA30FC-F16B-49FC-BAA5-AE59FC65F82D}
Software\BST\bsplayerv1\VirtualReg\CLSID\{55DA30FC-F16B-49FC-BAA5-AE59FC65F82D}
SOFTWARE\Microsoft\NET Framework Setup\NDP
jarfile\shell\open\command
Software\Microsoft
Software\Valve\Steam
HARDWARE\DESCRIPTION\System\CentralProcessor\1
Software\Microsoft\Terminal Server Client\Default
HTTP\shell\open\command
SOFTWARE\Classes\origin
SOFTWARE\Blizzard Entertainment
Software\Skype
Software\Microsoft\VisualStudio
Software\VMware
Software\Win7zip
Software\Classes\CLSID\{AF511F75-7EF4-A849-B05E-0D0463F62F92}\00000000\CG1
SYSTEM\CurrentControlSet\services\avgwd
SYSTEM\CurrentControlSet\services\AVP
SOFTWARE\ArcaBit
SYSTEM\CurrentControlSet\services\avast! Antivirus
SYSTEM\CurrentControlSet\services\RsMgrSvc
SYSTEM\CurrentControlSet\services\fshoster
SYSTEM\CurrentControlSet\services\cmdvirth
Software\Classes\CLSID\{AF511F75-7EF4-A849-B05E-0D0463F62F92}\05860166\CG1
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\hwxtesuug.exe
Software\Classes\CLSID\{AF511F75-7EF4-A849-B05E-0D0463F62F92}
Software\Microsoft\DirectX Diagnostic Tool
System\CurrentControlSet\Control\ComputerName\ComputerName
Software\Microsoft\DirectX
CLSID\{25E609E4-B259-11CF-BFC7-444553540000}\InProcServer32
CLSID\{480FF4B0-28B2-11D1-BEF7-00C04FBF8FEF}\InProcServer32
CLSID\{286F484D-375E-4458-A272-B138E2F80A6A}\InProcServer32
System\CurrentControlSet\Services\MNMDD\DEVICE0
SOFTWARE\Wow6432Node
SOFTWARE\SONIX\PCCAM\SNP325
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
SOFTWARE\SP
SOFTWARE\SProtector
SOFTWARE\WebPreserver
SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}
SOFTWARE\{771A53AF-D6BD-4B75-B7C1-D867456B810F}
SOFTWARE\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}
SOFTWARE\{B18C20BD-78D5-4391-BA0E-1659E61868A4}
SOFTWARE\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
SOFTWARE\{34C8031E-4963-4D48-8F87-108A30FFB076}
SOFTWARE\{563A0A37-0BF2-4422-9C2E-83EF50FF4269}
SOFTWARE\{78CD3583-B687-4FAA-9DB7-A49814B018BF}
SOFTWARE\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}\_58453cba
SOFTWARE\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}\_58453cba
SOFTWARE\395b8d33-7936-f125-d94e-4443708be1a2\26324397780508590
SOFTWARE\{12A61307-94CD-4F8E-94BC-918E511FAA81}
SOFTWARE\395b8d33-7936-f125-d94e-4443708be1a2\11515072400508590
SOFTWARE\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}\_58453cba\00000000
SOFTWARE\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}\_58453cba\00000000
SOFTWARE\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}\_344c1489
SOFTWARE\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}\_344c1489
SOFTWARE\395b8d33-7936-f125-d94e-4443708be1a2\15596293732054875
SOFTWARE\395b8d33-7936-f125-d94e-4443708be1a2\6822281482054875
SOFTWARE\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}\_344c1489\00000000
SOFTWARE\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}\_344c1489\00000000
SOFTWARE\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}\_58453cba\ini
SOFTWARE\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}\_fc67e7a0
SOFTWARE\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}\_fc67e7a0
SOFTWARE\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}\_fc67e7a0\00000000
SOFTWARE\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}\_fc67e7a0\00000000
SOFTWARE\AVAST
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\avast
Software\Clients\StartMenuInternet
SOFTWARE\Google\Update\Clients\{430FD4D0-B729-4F61-AA34-91526481799D}
SOFTWARE\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}
Software\Mozilla\Firefox
Software\Systweak\RegClean Pro\Version 6.1
SOFTWARE\PopCap\Zuma
System\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\SAMPLE3FCFD9BD0013B000\
System\CurrentControlSet\Control\MediaResources\
DirectSound\
Speaker Configuration
{6e16c252-b1ee-4259-a76f-5f78c7925945}
SOFTWARE\Softonic\Universal Downloader\
softonic.com
FEATURE_USE_WINDOWEDSELECTCONTROL
FEATURE_CROSS_DOCUMENT_MESSAGING
MIME\Database\Content Type\application/vnd.ms-fontobject
ActiveX Compatibility\{623E2882-FC0E-11D1-9A77-0000F8756A10}
PROTOCOLS\Name-Space Handler\javascript\
FEATURE_INTERNET_SHELL_FOLDERS
FEATURE_IEXPLORE_USE_FEEDVIEWER_ON_FEED_MIMETYPE_DETECTION_KB2920147
SOFTWARE\Microsoft\Internet Explorer\AboutURLs
revsci.net
softonic-analytics.net
pagefair.com
doubleclick.net
Software\Wine
SOFTWARE\Juniper Networks\Logging
SOFTWARE\Juniper Networks\Logging\sample
Software\Microsoft\Windows\CurrentVersion\Uninstall\USB Disk Security_is1
Software\Microsoft\Windows\CurrentVersion\Uninstall\Neoteris Terminal Services
Software\Microsoft\Windows\CurrentVersion\Uninstall\Neoteris_Term_Services
SOFTWARE\Microsoft\Windows
SOFTWARE\PDFComplete\PDF Complete
.DEFAULT\Volatile Environment
S-1-5-19\Volatile Environment
S-1-5-20\Volatile Environment
S-1-5-21-3979321414-2393373014-2172761192-1000\Volatile Environment
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\AppDataLow\Software\Crossrider
Software\AppDataLow\Software\Crossrider
Software\\Microsoft\\Internet Explorer
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Wireshark
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Fiddler2
SOFTWARE\Oracle\VirtualBox
SOFTWARE\Classes\AVG SafeGuard toolbar.BrowserWndAPI
SOFTWARE\AVG SafeGuard toolbar
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG SafeGuard toolbar
Software\AVG SafeGuard toolbar
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GrabRez
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PacFunction
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\InstallConverter
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\System Optimizer Pro
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A0B0DA25-DD15-4739-92A3-62D3424F043A}_is1
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{F7B34B38-02A6-44D5-B8CC-06EB3B8ACFC9}_is1
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IECT2700842
Software\AdblockPlus
SOFTWARE\Adblock Plus for IE
Software\Microsoft\NET Framework Setup\NDP
SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Applications\Setup_AdvancedWinServiceManager_101.exe
SOFTWARE\Microsoft\CTF\Compatibility\Setup_AdvancedWinServiceManager_101.exe
Trebuchet MS
Software\Microsoft\Windows\CurrentVersion\Uninstall\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1
NI\25ada340\542f6baa
NI\71feee57\46152ba3
NI\71feee57\7e87820a
Security\Policy\Extensions\NamedPermissionSets
MediaPermission
WebBrowserPermission
NI\580d2c98\2f2bbf8c
NI\580d2c98\40bc3ea0
SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Applications\dead.exe
{4031db0c-b05e-43bd-ac1b-e1f4d5da0516}
NI\5a5a8178\13299178
policy.2.0.System.EnterpriseServices__b03f5f7f11d50a3a
NI\57d4b1bf\85e83df
NI\57d4b1bf\85e83df\19
IL\3b249b34\27fafbb2\48
IL\3d590c3f\59f3b67b\5d
IL\85e83df\71a5f57e\49
policy.8.0.Microsoft.VisualC__b03f5f7f11d50a3a
policy.2.0.System.Transactions__b77a5c561934e089
software\microsoft\internet explorer
Software\FlashPeak\SlimBrowser\Settings
SYSTEM\CurrentControlSet\Enum\USB\VID_03F0&PID_231D
NI\7b9236a8\6fba6816
SOFTWARE\BrowserSafeguard
SOFTWARE\RocketTab
policy.1.0.System.Data.SQLite__db937bc2d44ff139
NI\5cb12312\4b2ce17b
policy.1.9.Ionic.Zip__edbe51ad942a3f5c
policy.1.9.Microsoft.Win32.TaskScheduler__0d013ddd5178a2ae
policy.4.5.Newtonsoft.Json__30ad4fe6b2a6aeed
NI\3175ab79\2a230338
SOFTWARE\Uniblue\DriverScanner
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C2F8CA82-2BD9-4513-B2D1-08A47914C1DA}_is1
Software\Microsoft\Windows\CurrentVersion\Uninstall\{C2F8CA82-2BD9-4513-B2D1-08A47914C1DA}_is1
Control Panel\Desktop\WindowMetrics
Software\Microsoft\Windows\CurrentVersion\Uninstall\DaumCleaner
Software\Daum\Cleaner
SOFTWARE\DAUM\PotPlayer
SOFTWARE\DAUM\DaumLive
.386
.a
.ai
.aif
.aifc
.aiff
.ani
.ans
.application
.appref-ms
.aps
.art
.asa
.asc
.ascx
.asf
.asm
.asmx
.aspx
.asx
.au
.avi
.bcp
.bin
.bkf
.blg
.bsc
.c
.camp
.cat
.cc
.cda
.cdmp
.cdx
.cgm
.chk
.cls
.cod
.compositefont
.cpp
.crd
.crds
.crl
.cs
.csa
.csproj
.csv
.cur
.cxx
.dat
.db
.dbg
.dbs
.dct
.def
.der
.desklink
.diagcab
.diagcfg
.diagpkg
.dic
.diz
.dl_
.doc
.dos
.dot
.drv
.dsn
.dsp
.dsw
.eps
.etp
.evt
.evtx
.exp
.ext
.ex_
.eyb
.faq
.fif
.fky
.fnd
.fnt
.gadget
.ghi
.gmmp
.group
.grp
.h
.H1C
.H1D
.H1F
.H1H
.H1K
.H1Q
.H1S
.H1T
.H1V
.H1W
.hdp
.hhc
.hlp
.hpp
.hqx
.hta
.htc
.htt
.htw
.htx
.hxx
.i
.ibq
.icc
.icl
.icm
.ics
.idl
.idq
.ilk
.imc
.img
.inc
.inf
.inl
.inv
.inx
.in_
.IVF
.jav
.java
.jbf
.jnt
.Job
.jod
.JSE
.jtp
.jxr
.kci
.label
.latex
.lgn
.lib
.library-ms
.local
.log
.lst
.m14
.m1v
.m3u
.m4a
.mak
.man
.manifest
.mapimail
.mid
.midi
.mig
.mk
.mlc
.mmf
.mov
.movie
.mp2
.mp2v
.mp3
.mpa
.mpe
.mpeg
.mpg
.mpv2
.msg
.msi
.msp
.msrcincident
.msstyles
.msu
.mv
.mydocs
.ncb
.nfo
.nls
.nvr
.obj
.oc_
.odc
.odh
.odl
.osdx
.p10
.p12
.p7b
.p7c
.p7m
.p7r
.p7s
.partial
.pbk
.pch
.pdb
.pds
.perfmoncfg
.pfm
.pfx
.php3
.pic
.pif
.pko
.pl
.plg
.pma
.pmc
.pmr
.pnf
.pot
.pps
.ppt
.prc
.prf
.printerExport
.ps
.ps1
.psc1
.psd1
.psm1
.pyc
.pyo
.pyw
.qds
.rat
.rc
.rc2
.rct
.RDP
.reg
.res
.resmoncfg
.rgs
.rll
.rmi
.rpc
.rsp
.rul
.s
.sbr
.sc2
.scc
.scd
.sch
.scp
.scr
.sct
.searchConnector-ms
.sed
.sfcache
.shtm
.shtml
.sit
.slupkg-ms
.snd
.sol
.sor
.spc
.sql
.srf
.sr_
.sst
.stl
.stm
.svg
.swf
.sym
.sy_
.tab
.tdl
.text
.theme
.themepack
.tlb
.tlh
.tli
.trg
.tsp
.tsv
.udf
.UDL
.udt
.URL
.user
.usr
.VBE
.vbproj
.vbs
.vbx
.vcf
.vcproj
.viw
.vspscc
.vsscc
.vssscc
.vxd
.wab
.wav
.wax
.wbcat
.wcx
.webpnp
.website
.wll
.wlt
.wm
.wma
.wmp
.wmv
.wmx
.wmz
.wpl
.wri
.wsc
.WSF
.WSH
.wsz
.wtx
.wvx
.x
.xaml
.xbap
.xht
.xhtml
.xix
.xlb
.xlc
.xls
.xlt
.xrm-ms
.xsd
.xslt
.z96
.zfsendtotarget
application/atom+xml
application/fractals
application/hta
application/mac-binhex40
application/opensearchdescription+xml
application/pkcs10
application/pkcs7-mime
application/pkcs7-signature
application/pkix-cert
application/pkix-crl
application/postscript
application/rss+xml
application/vnd.ms-pki.certstore
application/vnd.ms-pki.pko
application/vnd.ms-pki.seccat
application/vnd.ms-pki.stl
application/vnd.ms-xpsdocument
application/x-complus
application/x-compress
application/x-compressed
application/x-gzip
application/x-informationCard
application/x-jtx+xps
application/x-latex
application/x-mix-transfer
application/x-ms-application
application/x-ms-license
application/x-ms-xbap
application/x-mswebsite
application/x-pkcs12
application/x-pkcs7-certificates
application/x-pkcs7-certreqresp
application/x-stuffit
application/x-tar
application/x-troff-man
application/x-x509-ca-cert
application/x-zip-compressed
application/xaml+xml
application/xhtml+xml
application/xml
audio/mp3
audio/x-ms-wma
image/bmp
image/gif
image/jpeg
image/pjpeg
image/png
image/svg+xml
image/tiff
image/vnd.ms-dds
image/vnd.ms-photo
image/x-emf
image/x-icon
image/x-jg
image/x-png
image/x-wmf
message/rfc822
model/vnd.dwfx+xps
model/vnd.easmx+xps
model/vnd.edrwx+xps
model/vnd.eprtx+xps
pkcs10
pkcs7-mime
pkcs7-signature
pkix-cert
pkix-crl
text/css
text/html
text/plain
text/scriptlet
text/x-component
text/x-ms-contact
text/x-scriptlet
text/x-vcard
text/xml
video/mpeg
video/x-mpeg
video/x-ms-asf
video/x-msvideo
vnd.ms-pki.certstore
vnd.ms-pki.pko
vnd.ms-pki.seccat
vnd.ms-pki.stl
x-pkcs12
x-pkcs7-certificates
x-pkcs7-certreqresp
x-x509-ca-cert
Software\DownloadManager\
SpecialKeys
v2.0.15524
physis.dextrous.1
physis.dextrous
{0c5174cf-acb8-4af4-bd2f-620c0d0f5026}
Software\Microsoft\Windows\CurrentVersion\PropertySystem\PropertyHandlers\.
Microsoft\Internet Explorer\Main
Software\Microsoft\Windows\CurrentVersion\Uninstall\{8A8EA42B-B6DA-49D5-A2B6-4693F1EB36D2}
Software\Microsoft\Windows\CurrentVersion\Uninstall\{B43EA290-2B1F-4130-B6AA-B6A3A8C44D60}_is1
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Tencent\QQWubi
Software\Microsoft\Windows\CurrentVersion\Uninstall\
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\xmrl.exe
ts
SOFTWARE\Hintsoft
SOFTWARE\Sicent
SOFTWARE\Goyoo
Software\WTools\Selection Tools
Software\WTools\Selection Tools Tag
{279ecae6-e782-49de-806d-69549432f81f}
SOFTWARE\Adobe\Adobe ARM\1.0\ARM
{8a4a8b42-a270-4ad4-95c3-815ded6433fc}
MS PGothic
Software\Ghisler\Windows Commander
Software\Ghisler\Total Commander
Software\GlobalSCAPE\CuteFTP 6 Home\QCToolbar
Software\GlobalSCAPE\CuteFTP 6 Professional\QCToolbar
Software\GlobalSCAPE\CuteFTP 7 Home\QCToolbar
Software\GlobalSCAPE\CuteFTP 7 Professional\QCToolbar
Software\GlobalSCAPE\CuteFTP 8 Home\QCToolbar
Software\GlobalSCAPE\CuteFTP 8 Professional\QCToolbar
Software\GlobalSCAPE\CuteFTP 9\QCToolbar
Software\FlashFXP\3
Software\FlashFXP
Software\FlashFXP\4
Software\FileZilla
Software\FileZilla Client
Software\BPFTP\Bullet Proof FTP\Main
Software\BulletProof Software\BulletProof FTP Client\Main
Software\BPFTP\Bullet Proof FTP\Options
Software\BulletProof Software\BulletProof FTP Client\Options
Software\BPFTP
Software\TurboFTP
Software\Sota\FFFTP
Software\FTP Explorer\FTP Explorer\Workspace\MFCToolBar-224
Software\VanDyke\SecureFX
Software\ExpanDrive
Opera.HTML\shell\open\command
Software\LeechFTP
CLSID\{11C1D741-A95B-11d2-8A80-0080ADB32FF4}\InProcServer32
NI\33613489\40fc6251
NI\1791cba0\5c06d9bb
NI\1791cba0\31d6e130
NI\479e1648\1eb87837
Software\Microsoft\Windows\CurrentVersion\Uninstall\ 3. _is1
Software\Microsoft\.NETFramework\
Software\Microsoft\Plus!\Themes\Current
System\WPA\MediaCenter
System\WPA\TabletPC
SOFTWARE\Yahoo\SS
Software\Microsoft\Windows\CurrentVersion\PropertySystem\PropertyHandlers\.exe
Software\Microsoft\Windows\CurrentVersion\PropertySystem\PropertyHandlers\.localstorage
Software\Microsoft\Windows\CurrentVersion\PropertySystem\PropertyHandlers\.data
Software\Microsoft\Windows\CurrentVersion\PropertySystem\PropertyHandlers\.xml
Software\Microsoft\Windows\CurrentVersion\PropertySystem\PropertyHandlers\.json
Software\Microsoft\Windows\CurrentVersion\PropertySystem\PropertyHandlers\.png
Software\Microsoft\Windows\CurrentVersion\PropertySystem\PropertyHandlers\.js
SYSTEM\CurrentControlSet\Services\
SYSTEM\CurrentControlSet\Control\GroupOrderList
SYSTEM\CurrentControlSet\Services\Tdx
SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters
{31abedba-ebca-445e-822e-a884d07fa572}
CLSID\{7424D571-855B-4578-83CE-AB28DE27FF53
SOFTWARE\Classes\PROTOCOLS\Filter\application/x-shockwave-flash
SOFTWARE\Northcode Inc\SWF Studio\Variables\sablon proje
SOFTWARE\Northcode Inc\SWF Studio\QueuedForDelete
MacromediaFlashPaper.MacromediaFlashPaper
FlashFactory.FlashFactory.1
ShockwaveFlash.ShockwaveFlash.1
FlashFactory.FlashFactory
ShockwaveFlash.ShockwaveFlash.3
ShockwaveFlash.ShockwaveFlash.4
ShockwaveFlash.ShockwaveFlash.5
ShockwaveFlash.ShockwaveFlash.6
ShockwaveFlash.ShockwaveFlash.7
ShockwaveFlash.ShockwaveFlash
{D27CDB6E-AE6D-11cf-96B8-444553540000}
Control
ToolboxBitmap32
MiscStatus
EnableFullPage
.spl
.mfp
{D27CDB70-AE6D-11cf-96B8-444553540000}
MIME
Database
Content Type
application/futuresplash
application/x-shockwave-flash
FlashProp.FlashProp.1
FlashProp.FlashProp
{1171A62F-05D2-11D1-83FC-00A0C9089C5A}
MacromediaFlashPaper.MacromediaFlashPaper\shell\open\command
htmlfile
shell\open\command
Franklin Gothic Medium
Franklin Gothic Medium Italic
Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent
Software\BitTorrent\uTorrent
.torrent
Software\Microsoft\MSDTC\Tracing
Sources
Output
SOFTWARE\Microsoft\MSDTC\MTxOCI
Marlett
Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.torrent
Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.btsearch
NI\6dfd88d9\51bf96da
NI\25f52570\543f8af2
NI\25f52570\4a67a6b9
Identities
NI\e54f75c\2b877807
NI\e54f75c\49ea6aa6
Software\Internet Scrabble Club\WordBiz\1.8.7
TypeLib\{F5078F18-C551-11D3-89B9-0000F81FE221}\6.0\0\win32
Software\LangFly\VLearner\AutoSave
Software\LangFly\VLearner
SYSTEM\CurrentControlSet\Control\Class\{eec5ad98-8080-425f-922a-dabf3de3f69a}
SYSTEM\CurrentControlSet\Control\Class\{36fc9e60-c465-11cf-8056-444553540000}
Software\Microsoft\Windows\CurrentVersion\PropertySystem\PropertyHandlers\.dll
Software\LdapAdmin\Accounts
Software\LdapAdmin\Config
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\39D6758487DD49B4CAD3AA52FA55AF6B
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\39D6758487DD49B4CAD3AA52FA55AF6B
Software\Classes\Installer\Products\39D6758487DD49B4CAD3AA52FA55AF6B
1F62F885-38DD5C0E
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\39D6758487DD49B4CAD3AA52FA55AF6B\InstallProperties
NI\e805d8\4c22b5c4
NI\459e54f0\79149f48
NI\459e54f0\19dc72a4
Software\APN PIP\ipc
Software\Qualcomm\Eudora\CommandLine
Software\Classes\Software\Qualcomm\Eudora\CommandLine\current
Software\Mozilla\Mozilla Thunderbird
Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\explorer.exe
NI\37b8106e\18a7b46e
{78662ce2-ab87-4756-90b5-d769032bc8c0}
Software\Microsoft\Windows\CurrentVersion\Uninstall\AnVir Task Manager_is1
Software\Microsoft\Windows\CurrentVersion\Uninstall\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1
System\CurrentControlSet\Control\Terminal Server
{f414c260-6ac0-11cf-b6d1-00aa00bbbb58}
InprocServer
{F414C260-6AC0-11CF-B6D1-00AA00BBBB58}
CLSID\{F414C260-6AC0-11CF-B6D1-00AA00BBBB58}\Implemented Categories
{F0B7A1A1-9847-11CF-8F20-00805F2CD064}
{F0B7A1A2-9847-11CF-8F20-00805F2CD064}
JScript
LiveScript
JavaScript
JavaScript1.1
JavaScript1.2
JavaScript1.3
ECMAScript
{f414c261-6ac0-11cf-b6d1-00aa00bbbb58}
{F414C261-6AC0-11CF-B6D1-00AA00BBBB58}
CLSID\{F414C261-6AC0-11CF-B6D1-00AA00BBBB58}\Implemented Categories
{0AEE2A92-BCBB-11D0-8C72-00C04FC2B085}
JScript Author
JScript.Compact Author
LiveScript Author
JavaScript Author
JavaScript1.1 Author
JavaScript1.2 AuthorJavaScript1.3 Author
ECMAScript Author
{f414c262-6ac0-11cf-b6d1-00aa00bbbb58}
{F414C262-6AC0-11CF-B6D1-00AA00BBBB58}
CLSID\{F414C262-6AC0-11CF-B6D1-00AA00BBBB58}\Implemented Categories
{F0B7A1A3-9847-11CF-8F20-00805F2CD064}
JScript.Encode
{cc5bbec3-db4a-4bed-828d-08d78ee3e1ed}
{CC5BBEC3-DB4A-4BED-828D-08D78EE3E1ED}
CLSID\{CC5BBEC3-DB4A-4BED-828D-08D78EE3E1ED}\Implemented Categories
JScript.Compact
Software\Microsoft\Windows\CurrentVersion\Uninstall\Dll-Files Fixer_is1
Palit
THPanel
Software\Microsoft\Windows\CurrentVersion\Uninstall\Fatal1ty Mouse Port_is1
Software\Microsoft\Windows\CurrentVersion\Uninstall\ASRock Key Master_is1
Software\ASUS\Dock
Software\Microsoft\Windows\CurrentVersion\Uninstall\85b4347d6f12f4e6
SOFTWARE\Microsoft\SchedulingAgent
SOFTWARE\Nexon\Combat Arms EU\Ver_EU
SOFTWARE\Nexon\Combat Arms EU Installer
NI\2efd260a\61357980
NI\72bb9822\70f6a38b
NI\72bb9822\7771bb61
SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Applications\Install.exe
Starcraft 1.03
SOFTWARE\Microsoft\CTF\Compatibility\Install.exe
SOFTWARE\INTEL\DISPLAY\IGFXCUI\HOTKEYS
Software\Microsoft\Windows\CurrentVersion\App Paths\CEAPPMGR.EXE
Software\Microsoft\Net Framework Setup\NDP\v4\Full
Software\Microsoft\Net Framework Setup\NDP\v4\Client
Software\Microsoft\Net Framework Setup\NDP\v3.5
Software\Microsoft\Net Framework Setup\NDP\v3.5\Setup
Software\Microsoft\DataAccess
SYSTEM\CurrentControlSet\Control\Terminal Server
Software\Microsoft\Windows\CurrentVersion\Uninstall\{EBF539D0-F45C-4138-9756-F390D12471F8}
SYSTEM\CurrentControlSet\Services\Disk\Enum
Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{07C171EC-5167-4901-ABEA-1945DC22531A}\States
Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{07C171EC-5167-4901-ABEA-1945DC22531A}
Software\Microsoft\Windows\CurrentVersion\Uninstall\{07C171EC-5167-4901-ABEA-1945DC22531A}
Software\Microsoft\Office\12.0\Common\InstallRoot
Software\Microsoft\Office\10.0\Common\InstallRoot
Software\Microsoft\Office\9.0\Common\InstallRoot
Software\Microsoft\Office\8.0
SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash\CurVer
SOFTWARE\Microsoft\NET Framework Setup\NDP\v4
SOFTWARE\Internal\Debuger
CLSID\{8856F961-340A-11D0-A96B-00C04FD705A2}\InprocServer32
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\chrome.exe
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\App Paths\chrome.exe
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\App Paths\firefox.exe
Software\Coowon\Update\Clients\{C7F398B8-42B7-40C1-97C0-97A88966C149}
Software\Coowon\UpdateDev\
Software\Coowon\Update\
Software\Coowon\Update\network\secure
Software\Classes
{92C09825-CCFC-4706-92B9-B42382F93C7D}
InprocHandler32
CoowonUpdate.Update3COMClassUser
{0B52EBBD-0D42-4824-B1A8-980CA4C48640}
{3AB5670A-2F78-4DB5-8804-CAC485A296C9}
CoowonUpdate.Update3WebUser.1.0
CoowonUpdate.Update3WebUser
{75ABC8DC-ACFF-466D-B6DD-7125698469F1}
CoowonUpdate.OnDemandCOMClassUser.1.0
CoowonUpdate.OnDemandCOMClassUser
{C8E50220-7B02-4407-B438-3DB18101BA27}
CoowonUpdate.CredentialDialogUser.1.0
CoowonUpdate.CredentialDialogUser
{ADC37745-9907-4663-ABB5-508AF6F8A4B2}
Coowon.OneClickProcessLauncherUser.1.0
Coowon.OneClickProcessLauncherUser
{0CD315E5-B75F-41A8-A047-CDA454343216}
Low Rights
ElevationPolicy
Software\Coowon\Update\ClientState\
Software\Coowon\Update\ClientState\{C7F398B8-42B7-40C1-97C0-97A88966C149}
Software\Microsoft\Advanced INF Setup
Verdana Bold
Software\Microsoft\Windows\CurrentVersion\Uninstall\{3DA224A5-666B-4941-8998-2F19C6D126A5}_is1
Software\uTorrentPlus
Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers
Software\Classes\FalconBetaAccount
Software\Classes\.torrent
Software\uTorrentPurchases\PurchasedKeys
Software\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
CLSID\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}
CLSID\{ad06fb5f-fef7-4a84-8c58-dca34f8e3d36}
CLSID\{ef79f67a-6ad7-4715-a0f8-932fca442023}
CLSID\{1d03a978-ac0c-4004-b9fd-9cf361c7bd3f}
CLSID\{64ead72b-ffd4-4e01-aa3a-4c71665d73e4}
CLSID\{29acf17c-1713-4286-8f40-bfd05f1e70c8}
CLSID\{7b6de06c-7013-4a87-957e-d27d7b977d21}
CLSID\{2d8d9acc-f6d7-4362-8876-a275ca929591}
CLSID\{656461ef-40f6-4115-9ff1-bced9812ccbb}
CLSID\{1fd59ce2-6236-467c-9539-3d8c93fea5e0}
CLSID\{49C795C2-604A-4D18-AEB1-B3EBA27E5EA2}
CLSID\{7473B6BD-4691-4744-A82B-7854EB3D70B6}
CLSID\{B6AC5E3C-5CEB-4E72-B451-F0E1BA983C14}
CLSID\{5BA8E555-8C08-4CC8-80E6-1F8CDD26AE3A}
CLSID\{6DA66498-839A-42A7-8324-FF7D2A532835}
CLSID\{4E871705-D1F3-49D9-814F-1E46E85986B0}
CLSID\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
CLSID\{db131c55-60c8-4adc-84dc-9e76ab06e2dc}
CLSID\{05eeb91a-aef7-4f8a-978f-fb83e7b03f8e}
CLSID\{4ae0c3d6-f713-4eed-bc65-25dc3ffdaac1}
CLSID\{c840e246-6b95-475e-9bd7-caa1c7eca9f2}
CLSID\{e0301295-ab3e-4af3-979f-3d453c5f9f48}
CLSID\{87775fdb-6972-41f9-ae51-8326e38cb206}
CLSID\{181f104b-b000-4010-bb18-41b8205f774d}
CLSID\{03ea5b10-2efa-4311-ac10-04427b02d663}
CLSID\{e9df9360-97f8-4690-afe6-996c80790da4}
CLSID\{3041D03E-FD4B-44E0-B742-2D9B88305F98}
CLSID\{F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA}
CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
CLSID\{91397D20-1446-11D4-8AF4-0040CA1127B6}
Software\BitTorrent
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\TTPlayer
NI\7b7a36f8\767e46f9
NI\59fb610\4e7edf13
NI\59fb610\4d91d9d8
NI\321eb28c\6c418d6
NI\321eb28c\21f72dd6
Software\Microsoft\Windows\CurrentVersion\Uninstall\JetStartAppID_is1
Software\Microsoft\Windows\CurrentVersion\Uninstall\{E557052E-9828-40E4-BFF6-311D3E89DB81}_is1
SOFTWARE\Microsoft\.NETFramework\policy\v2.0
SOFTWARE\Microsoft\.NETFramework\policy\v2.0.50727
SOFTWARE\Microsoft\.NETFramework\
SOFTWARE\DigitalMore
NI\13b8c5e\6297505e
NI\15fe6c75\67bdb42d
NI\15fe6c75\55eb713f
MIME\Database\Content Type\application/octet-stream
SOFTWARE\Native Instruments\Kontakt 5
Software\Microsoft\Windows\CurrentVersion\Uninstall\{8B9FA5FF-3E61-4658-B0DA-E6DDB46D6BAD}_is1
Software\Microsoft\Windows\CurrentVersion\Uninstall\oCam_is1
Software\Daemon
CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance\{FA10746C-9B63-4B6C-BC49-FC300EA5F256}
Software\Microsoft\Windows\CurrentVersion\App Paths\FSViewer.exe
Software\Microsoft\Windows\CurrentVersion\Uninstall\FastStone Image Viewer
FastStone.jpg
FastStone.jpe
FastStone.jpeg
FastStone.bmp
FastStone.gif
FastStone.tif
FastStone.tiff
FastStone.png
FastStone.pcx
FastStone.psd
FastStone.wmf
FastStone.tga
FastStone.crw
FastStone.cr2
FastStone.nef
FastStone.orf
FastStone.raf
FastStone.dng
FastStone.mrw
FastStone.pef
FastStone.srf
FastStone.arw
FastStone.rw2
Directory\shell\Browse with FastStone
Drive\shell\Browse with FastStone
Directory\shell\FSIV
Drive\shell\FSIV
Software\Classes\Directory\shell\FSIV
Software\Classes\Drive\shell\FSIV
driverupdate.net
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MyPC Backup
SOFTWARE\SlimWare Utilities
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\952BA647474611149866C1269F6A0E36
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\952BA647474611149866C1269F6A0E36
Software\Classes\Installer\Products\952BA647474611149866C1269F6A0E36
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\952BA647474611149866C1269F6A0E36\InstallProperties
System\CurrentControlSet\Services\Schedule\Parameters
Software\Microsoft\Windows\CurrentVersion\Explorer\WorkgroupCrawler\Shares
SOFTWARE\Ahnlab\DynaUpdate
SOFTWARE\iSkysoft\iSkysoft Helper Compact
Software\Microsoft\Windows\CurrentVersion\Uninstall\{9BF12010-8799-41A5-A671-E9CFDE9E79F3}_is1
SOFTWARE\DFX\11\23\LASTUSED_DFXG\minimized_to_tray
SOFTWARE\DFX\23\subvendor
SOFTWARE\DFX\23\top_folder
SOFTWARE\VST
System\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\SAMPLE4B1AE3C6014E304E\
Software\Microsoft\Multimedia\LEAP
Software\Microsoft\Multimedia\DirectSound\
Software\Microsoft\MediaPlayer
Software\Microsoft\MediaPlayer\9.0\Registration
Software\InstallPack
Software\Microsoft\Windows\CurrentVersion\Uninstall\{1116089C-14B5-1A23-8113-6124567ABCDE}_is1
SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\avast
SOFTWARE\FrenchModdingTeam\CCAPI\ConsoleManager
Software\Microsoft\Windows\CurrentVersion\Uninstall\{E6C0F5ED-B5EA-451D-8CB1-57902AA188DE}_is1
System\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\SAMPLE5704D3C8002F4800\
SOFTWARE\Microsoft\APL
Software\Microsoft\DirectInput
System\CurrentControlSet\Control\MediaProperties\PrivateProperties\DirectInput
VID_80EE&PID_0021
Calibration
DeviceInstances
Software\Microsoft\DirectInput\MostRecentApplication\
System\CurrentControlSet\Control\MediaResources\Joystick\DINPUT.DLL\CurrentJoystickSettings
Software\Microsoft\DirectMusic
SOFTWARE\Piriform\Recuva
Software\Piriform\Recuva
Software\Microsoft\Windows NT\CurrentVersion\TaskManager
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Software\Helios\TextPad
Software\AI Internet Solutions\CSE 3310 HTML Validator
Software\Helios\TextPad 5\License
.Default\Software\Helios\TextPad 5\License
Software\Helios\TextPad 5\Associations
Software\Helios\TextPad 5
Software\Helios\TextPad 5\Spelling
Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache
Software\Helios\TextPad 5\Document Classes
Software\Helios\TextPad 5\Tools
Software\Helios\TextPad 5\Run
Software\Classes\Applications\TextPad.exe\shell\open\command
Software\Classes\*\shellex\ContextMenuHandlers\TextPad
Software\Helios\TextPad 6\Policy
Software\Helios\TextPad 6\Preferences
System\CurrentControlSet\Services\W3Svc\Parameters\Virtual Roots
Software\Classes\CLSID
Software\Helios\WildEdit
SOFTWARE\Freelancer Mod Manager
.html\OpenWithProgids
Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\OpenWithProgids
SystemFileAssociations\.html
SystemFileAssociations\document
CLSID\{25336920-03F9-11cf-8FD0-00AA00686F13}\Implemented Categories\{00021490-0000-0000-C000-000000000046}
Software\Microsoft\Windows\CurrentVersion\Uninstall\yyxfplayer_is1
SOFTWARE\TeamViewer
SOFTWARE\Microsoft\Windows\CurrentVersion\Setup
SYSTEM\CurrentControlSet\Services\SPP\Debug\Tracing
CLSID\{4B966436-6781-4906-8035-9AF94B32C3F7}
Interface\{ADCF3F49-521F-48A6-BABA-8E20D5D3E861}
CLSID\{23CF860E-9D2C-451A-8E83-C79C848D85A6}
Software\Policies\Microsoft\Windows NT\SystemRestore
Software\Microsoft\Windows NT\CurrentVersion\SystemRestore
Software\Microsoft\Windows NT\CurrentVersion\SystemRestore\Volatile
Software\Install
Software\Install\CurrentVersion
Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted
Software\Install\SystemInfo\SystemFolders
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\1F9ACB2AC6655084791DF7CD39837632
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\1F9ACB2AC6655084791DF7CD39837632
Software\Classes\Installer\Products\1F9ACB2AC6655084791DF7CD39837632
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1F9ACB2AC6655084791DF7CD39837632\InstallProperties
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-3979321414-2393373014-2172761192-1000\Components\90A2D107EB418F542933C10EDE00329A
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\90A2D107EB418F542933C10EDE00329A
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\UpgradeCodes\5D029AD8C14C0E24FB1378AB9489E44E
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\UpgradeCodes\5D029AD8C14C0E24FB1378AB9489E44E
Software\Classes\Installer\UpgradeCodes\5D029AD8C14C0E24FB1378AB9489E44E
Segoe UI Semibold
SOFTWARE\Intel\Intel Matrix Storage Console
SOFTWARE\MimarSinan\InstallAware\Ident.Cache\{EA14948B-C591-4AF6-9A32-3F374317D7A9}
Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-3979321414-2393373014-2172761192-1000\Installer\Products\B84941AE195C6FA4A923F37334717D9A
S-1-5-21-3979321414-2393373014-2172761192-1000\Software\Microsoft\Installer\Products\B84941AE195C6FA4A923F37334717D9A
Software\Classes\Installer\Products\B84941AE195C6FA4A923F37334717D9A
Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B84941AE195C6FA4A923F37334717D9A\InstallProperties
SOFTWARE\WildTangent\Debugging
SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN\FEATURECONTROL\FEATURE_GPU_RENDERING
Software\WildTangent
Software\Policies\Microsoft\Internet Explorer\BrowserEmulation\QuirksPolicyList
Software\Policies\Microsoft\Internet Explorer\BrowserEmulation
Software\Microsoft\Internet Explorer\BrowserEmulation
FEATURE_ALWAYS_SEND_EXTENDED_UA_STRING
FEATURE_VALIDATE_NAVIGATE_URL
FEATURE_CROSSDOMAIN_FIX_KB867801
SOFTWARE\Skype\Phone
Software\Skype\Toolbars\Installer
Software\Skype\PluginManager
Software\Skype\Toolbars\Firefox\PNR
Software\Skype\Toolbars\Internet Explorer
{bdd1eed2-cb3a-4308-ae94-cc92cea53ac5}
SYSTEM\CurrentControlSet\services\Avg\SystemValues
SYSTEM\CurrentControlSet\Control\ComputerName\ComputerName
Volatile Environment
Software\Python\PythonCore\2.7\PythonPath
NI\6399036a\6d9f12e9
NI\443c1d83\47a94da1
NI\443c1d83\6f70a18c
NI\7692cb8e\1ea89576
NI\5275e625\3e0d5156
NI\5275e625\1139555
parvo.airthed.1
parvo.airthed
{b6b37cfd-b71d-4766-ab24-263df6361dce}
SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Applications\finalBundle
Software\CrossBrowser
Software\InstallCore\mysearchdial
Software\InstallCore\metaCrawler
Software\InstallCore\funmoods
Software\InstallCore\SpeeDial
Software\InstallCore\Groovorio
Software\InstallCore\WSE Rocket
Software\InstallCore\WSE_Astromenda
Software\InstallCore\Taplika
Software\Vosteran
Software\InstallCore\WSE_Vosteran
SOFTWARE\InstallCore\WSE_Vosteran
SOFTWARE\Ebonmedia\Ebon
SOFTWARE\Clara
SOFTWARE\BoBrowser
SOFTWARE\OlciniumBrowser
Software\1stBrowser
Software\Beamrise
Software\Appiance
SOFTWARE\1stBrowser
SOFTWARE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Eppink
SOFTWARE\Software\Microsoft\Windows\CurrentVersion\Uninstall\ASPackage
SOFTWARE\Software\Microsoft\Windows\CurrentVersion\Uninstall\APPackage
SOFTWARE\Software\Microsoft\Windows\CurrentVersion\Uninstall\YSPackage
SOFTWARE\Software\Microsoft\Windows\CurrentVersion\Uninstall\VOPackage
SOFTWARE\Software\Nosibay\Bubble Dock
SOFTWARE\Software\Nosibay\Bubble Dock Tag
Software\Microsoft\Windows\CurrentVersion\Uninstall\InfoAtoms
Software\Microsoft\Windows\CurrentVersion\Uninstall\LessTabs
Software\Microsoft\Windows\CurrentVersion\Uninstall\Linksicle
Software\Microsoft\Windows\CurrentVersion\Uninstall\Highlightly
Software\Microsoft\Windows\CurrentVersion\Uninstall\Quiknowledge
Software\Microsoft\Windows\CurrentVersion\Uninstall\SearchSnacks
Software\Microsoft\Windows\CurrentVersion\Uninstall\TermTutor
Software\Microsoft\Windows\CurrentVersion\Uninstall\WordProser
Software\Microsoft\Windows\CurrentVersion\Uninstall\ClickCaption
Software\Microsoft\Windows\CurrentVersion\Uninstall\SuperClick
Software\Microsoft\Windows\CurrentVersion\Uninstall\BetterBrain
Software\Microsoft\Windows\CurrentVersion\Uninstall\TermBlazer
Software\Microsoft\Windows\CurrentVersion\Uninstall\IntelliTerm
Software\Microsoft\Windows\CurrentVersion\Uninstall\PhraseFinder
Software\Microsoft\Windows\CurrentVersion\Uninstall\WordFly
Software\Microsoft\Windows\CurrentVersion\Uninstall\QuickRef
Software\Microsoft\Windows\CurrentVersion\Uninstall\Infonaut
Software\Microsoft\Windows\CurrentVersion\Uninstall\LinkWiz
Software\Microsoft\Windows\CurrentVersion\Uninstall\SwiftSearch
Software\Microsoft\Windows\CurrentVersion\Uninstall\CleverSearch
Software\Microsoft\Windows\CurrentVersion\Uninstall\QuickSurf
Software\Microsoft\Windows\CurrentVersion\Uninstall\Wordinator
Software\Microsoft\Windows\CurrentVersion\Uninstall\WordAnchor
Software\Microsoft\Windows\CurrentVersion\Uninstall\WordSurfer
Software\Microsoft\Windows\CurrentVersion\Uninstall\WordShark
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HotspotShield
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\tuto_monetize_220160408_is1
SOFTWARE\Adobe\Photoshop\90.0\PluginPath
SOFTWARE\Adobe\Photoshop\80.0\PluginPath
SOFTWARE\Adobe\Photoshop\70.0\PluginPath
SOFTWARE\Adobe\Photoshop\60.0\PluginPath
SOFTWARE\Adobe\Photoshop\55.0\PluginPath
SOFTWARE\Adobe\Photoshop\12.0\PluginPath
SOFTWARE\Adobe\Photoshop\11.0\PluginPath
SOFTWARE\Adobe\Photoshop\10.0\PluginPath
SOFTWARE\Adobe\Photoshop Elements\14.0\PluginPath
SOFTWARE\Adobe\Photoshop Elements\13.0\PluginPath
SOFTWARE\Adobe\Photoshop Elements\12.0\PluginPath
SOFTWARE\Adobe\Photoshop Elements\11.0\PluginPath
SOFTWARE\Adobe\Photoshop Elements\10.0\PluginPath
SOFTWARE\Adobe\Photoshop Elements\9.0\PluginPath
SOFTWARE\Adobe\Photoshop Elements\8.0\ApplicationPath
SOFTWARE\Adobe\Photoshop Elements\7.0\PluginPath
SOFTWARE\Adobe\Photoshop Elements\6.0\PluginPath
SOFTWARE\Adobe\Photoshop\9.0\PluginPath
SOFTWARE\Adobe\Photoshop Elements\5.0\PluginPath
SOFTWARE\Adobe\Photoshop Elements\4.0\PluginPath
SOFTWARE\Adobe\Photoshop\8.0\PluginPath
SOFTWARE\Adobe\Photoshop Elements\3.0\PluginPath
SOFTWARE\Adobe\Photoshop\7.0\PluginPath
SOFTWARE\Adobe\Photoshop Elements\2.0\PluginPath
SOFTWARE\Adobe\Photoshop\6.0\PluginPath
SOFTWARE\Adobe\Photoshop\5.5\PluginPath
SOFTWARE\Adobe\Photoshop\5.0\PluginPath
SOFTWARE\Adobe\Photoshop Elements\1.0\PluginPath
SOFTWARE\Corel\Setup\CorelDRAW Graphics Suite 17
SOFTWARE\Corel\Setup\CorelDRAW Graphics Suite 16
SOFTWARE\Corel\Setup\CorelDRAW Graphics Suite 15
SOFTWARE\Corel\Setup\CorelDRAW Graphics Suite 14
SOFTWARE\Corel\Setup\CorelDRAW Graphics Suite 13
SOFTWARE\Corel\Setup\CorelDRAW Graphics Suite 12
SOFTWARE\Serif\PhotoPlus\17.0\Directories
SOFTWARE\Serif\PhotoPlus\16.0\Directories
SOFTWARE\Serif\PhotoPlus\15.0\Directories
SOFTWARE\Serif\PhotoPlus\13.0\Directories
SOFTWARE\Serif\PhotoPlus\12.0\Directories
SOFTWARE\Serif\PhotoPlus\11.0\Directories
SOFTWARE\Serif\PhotoPlus\10.0\Directories
SOFTWARE\Serif\PhotoPlus\9.0\Directories
SOFTWARE\Serif\PhotoPlus\8.0\Directories
SOFTWARE\Serif\PhotoPlus\7.0\Directories
SOFTWARE\Serif\PhotoPlus\6.0\Directories
SOFTWARE\Corel\PaintShop Pro\X8\FileLocations\PlugIns\0
SOFTWARE\Corel\PaintShop Pro\X7\FileLocations\PlugIns\0
SOFTWARE\Corel\PaintShop Pro\X6\FileLocations\PlugIns\0
SOFTWARE\Corel\PaintShop Pro\X5\FileLocations\PlugIns\0
SOFTWARE\Corel\PaintShop Pro\X4\FileLocations\PlugIns\0
SOFTWARE\Corel\Paint Shop Pro\13\FileLocations\PlugIns\0
SOFTWARE\Corel\Paint Shop Pro\12.5\FileLocations\PlugIns\0
SOFTWARE\Corel\Paint Shop Pro\12\FileLocations\PlugIns\0
SOFTWARE\Corel\Paint Shop Pro\11\FileLocations\PlugIns\0
SOFTWARE\Corel\Paint Shop Pro\10\FileLocations\PlugIns\0
SOFTWARE\Jasc\Paint Shop Pro 9\FileLocations\PlugIns\0
SOFTWARE\Jasc\Paint Shop Pro 8\FileLocations\PlugIns\0
SOFTWARE\Microsoft\Picture It!\11.0\InstallDest
SOFTWARE\Ulead Systems\Ulead PhotoImpact\13.0\Installer
SOFTWARE\Ulead Systems\Ulead PhotoImpact\12.0\Installer
SOFTWARE\Ulead Systems\Ulead PhotoImpact\11.0\Installer
SOFTWARE\Ulead Systems\Ulead PhotoImpact\10.0\Installer
Software\Microsoft\Windows\CurrentVersion\Uninstall\Neat Image plug-in for Photoshop_is1
Software\Codyssey\Freeraser\System
Software\Codyssey\Freeraser\Appearance
Software\Codyssey\Freeraser\Window
Software\Codyssey\Freeraser\Main
NI\778d457b\1e33413a
NI\3cca06a0\6dc7d4c0
NI\1da0ed13\558eed1
NI\1da0ed13\6c5abb9b
NI\2a309579\cf1637a
NI\5d1b2185\7c8f731d
NI\5d1b2185\9e07e4f
NI\2968c1d4\12f819d5
SOFTWARE\Reason\Security
Software\Policies\Microsoft\Internet Explorer\ActiveX Compatibility\{ED8C108E-4349-11D2-91A4-00C04F7969E8}
ActiveX Compatibility\{ED8C108E-4349-11D2-91A4-00C04F7969E8}
FEATURE_ADDON_MANAGEMENT
FEATURE_ACTIVEX_REPURPOSEDETECTION
FEATURE_ALLOWEDDOMAINLIST
Software\Clients\StartmenuInternet
Local\Microsoft_WMP_70_CheckForOtherInstanceMutex
CDAMENUUNIKALNYMUTEX
<NULL>
Local\ZonesCacheCounterMutex
Local\ZonesLockedCacheCounterMutex
Global\MiddleRush
{8E48F380-72CE-4c83-B929-72BB132C3C9A}
KB923789
Local\RstrMgr3887CAB8-533F-4C85-B0DC-3E5639F8D511
Local\RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0000
mery.haijin-boys.com
AMResourceMutex3
Global\SearchWindowResults
WBXTRA_TRACE_MUTEX
WBXTRA_TRACE_MUTEX_EX
!IECompat!Mutex
Local\MidiMapper_modLongMessage_RefCnt
MutexNPA_UnitVersioning_2364
Global\3328e94e-fac3-11e5-9e88-08002763e612
Global\be51fcab-fac7-11e5-9e88-08002763e612
Global\Cobian Backup 11 Gravity Engine Mutex Name
Bandicam v1.8.6.321
Global\GetTheResultsHub
EM47D2CDD9E9E7
Local\WLBiciTransferMutex
Global\SearchWebKnow
ASUS ATKOSD2 Mutex
Global\GenerousDeal
SetupIntlMutex
sample[1088]RegValuesLock
sample[1088]ExtMonitorLock
Global\HP_SCAN_APP_MUTEX_
Global\WIATRACE_MUTEX
RealNetworks.Installer
t "mIRC Install"
mIRC Install
RasPbFile
Global\3a886eb8-fe40-4d0a-b78b-9e0bcb683fb7
Local\LRIEElevationPolicyMutex
SpoolerMutex
{FEC7EF28-53E7-4f06-8F56-FA6D670C8D3C}
Local\MSIMGSIZECacheMutex
3E40F524-16FA-440A-B919-B44AB355B174
Global\VideoPadStarting
Local\__DDrawExclMode__
Local\__DDrawCheckExclMode__
Global\IIF-{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}
HpMvInstallExists
Global\1bb6323f-fb30-11e5-9e88-08002763e612
t "__Yahoo! Messenger_suite_Installer__"
_
MutexPolesskayaGlush*.*svchost.comexefile\shell\open\command "%1" %*@
53DE4FAD-F853-44F3-AC39-AD2940E5DD53
t "{3CBF3EBB-235D-4c29-A68B-2BB1F428586E}-pcha_inst"
{
GlobalNotifier-{36DAAA2E-0C25-46B6-A155-7EAECAC16DC7}
process_hacker2_setup_mutex
MutexNPA_UnitVersioning_2636
uxJLpe1m
E487EE7D-EAAA-4E2A-9116-E3B477D8A74F
Local\WinSpl64To32Mutex_1e192_0_3000
Global\{0BB25CA4-59F4-4cf4-B8D2-CD935D8520DB}
Mutex_I2S_{B945EE5C-6F0A-4776-94CD-E9C1742AED5A}
E63DA112-3EDF-4565-A5C6-21F36EACF2D8
AI Suite II Setup ExecuteMutex-Aug
{C20CD437-BA6D-4ebb-B190-70B43DE3B0F3}
{B6EA544E-9884-44ef-A0A5-8474D46E72F9}
Global\saLogMutex
crupdatedownloader
MediaPlayerClassicW
eed3bd3a-a1ad-4e99-987b-d7cb3fcfa7f0 - S-1-5-21-3979321414-2393373014-2172761192-1000
13c5d420-cae2-11d4-b34d-00105a1c23dd
Global\2a0dbcef-fbd6-11e5-9e88-08002763e612
t "WinToolsPremiumPortable"
WinToolsPremiumPortable
Global\ogmservice
Global\HttpLogs
Global\SREProxy
Global\MS
CSreSingleInstanceApp
Global\CashKitten
Local\Opera/Installer/UI_lock
AsusSelectMutex
Global\6ff80d9c-fc19-11e5-9e88-08002763e612
Global\7df14236-fc1d-11e5-9e88-08002763e612
Corsair_Gaming_Device_Trayicon
Global\StudySearchWindow
sample[2596]RegValuesLock
sample[2596]ExtMonitorLock
sample-win7
Global\_MSISETUP_{2956EBA1-9B5A-4679-8618-357136DA66CA}
Local\DDrawWindowListMutex
Local\DDrawDriverObjectListMutex
GSDBFB22DB52F7
.NET CLR Data_Perf_Library_Lock_PID_9f8
.NET CLR Networking_Perf_Library_Lock_PID_9f8
.NET Data Provider for Oracle_Perf_Library_Lock_PID_9f8
.NET Data Provider for SqlServer_Perf_Library_Lock_PID_9f8
.NETFramework_Perf_Library_Lock_PID_9f8
BITS_Perf_Library_Lock_PID_9f8
ESENT_Perf_Library_Lock_PID_9f8
Lsa_Perf_Library_Lock_PID_9f8
MSDTC_Perf_Library_Lock_PID_9f8
MSDTC Bridge 3.0.0.0_Perf_Library_Lock_PID_9f8
MSSCNTRS_Perf_Library_Lock_PID_9f8
PerfDisk_Perf_Library_Lock_PID_9f8
PerfNet_Perf_Library_Lock_PID_9f8
PerfOS_Perf_Library_Lock_PID_9f8
PerfProc_Perf_Library_Lock_PID_9f8
rdyboost_Perf_Library_Lock_PID_9f8
RemoteAccess_Perf_Library_Lock_PID_9f8
ServiceModelEndpoint 3.0.0.0_Perf_Library_Lock_PID_9f8
ServiceModelOperation 3.0.0.0_Perf_Library_Lock_PID_9f8
ServiceModelService 3.0.0.0_Perf_Library_Lock_PID_9f8
SMSvcHost 3.0.0.0_Perf_Library_Lock_PID_9f8
Spooler_Perf_Library_Lock_PID_9f8
TapiSrv_Perf_Library_Lock_PID_9f8
Tcpip_Perf_Library_Lock_PID_9f8
TermService_Perf_Library_Lock_PID_9f8
UGatherer_Perf_Library_Lock_PID_9f8
UGTHRSVC_Perf_Library_Lock_PID_9f8
usbhub_Perf_Library_Lock_PID_9f8
Windows Workflow Foundation 3.0.0.0_Perf_Library_Lock_PID_9f8
WmiApRpl_Perf_Library_Lock_PID_9f8
WSearchIdxPi_Perf_Library_Lock_PID_9f8
Global\LOADPERF_MUTEX
IGFXTRAYMUTEX
_xvm_mtx_file_0x8EDCFD64
_xvm_mtx_reg_0x8EDCFD64
_xvm_mtx_other_0x8EDCFD64
Global\StrongSignal
CRemoteProcApiCalls::m_bShowLoadingScreen
CRemoteProcApiCalls::m_nMaxLoadingScreenOffers
CSDKApi::m_bSkipAllOffersTriggered
CSDKApi::m_bDeclineOfferTriggered
CSDKApi::m_bShowSkipAllButton
CSDKApi::m_bShowDeclineButton
Global\223CEB62-A2BC-4E33-BA9B-FCAC6DAAB1BE
m_wndDummyAPIMsgWindow
CTrackingCalls::m_bIsRunningFromReboot
CSDKApi::GetTimeMSFromStartup
CSDKApi::DevModeMessage
CSDKApi::m_strClientSessionID
CAPIMessageWindow::m_arrayProcIds
CRequestManager::m_aRequestPools
COfferManager::m_nLastError
COfferManager::m_SlowOfferMsTime
COfferManager::m_CurrentOfferValidationTimeStarted
COfferManager::m_bUseLanguageFilter
COfferManager::m_bOfferXMLParsed
COfferManager::m_bByPassFilterTests
COfferManager::m_apOffers
CTrackingCalls::m_maxWaitSecsReboot
CTrackingCalls::m_bHasCalledGetOffers
CTrackingCalls::m_bCanTrackOfferNotReady
COfferSettings::m_bCanShowInitLoadingScreen
COfferSettings::m_nShowLoadingProgressBarDelaySecs
COfferSettings::m_nMaxInitTimeMs
COfferSettings::m_bIsGetOffersComplete
COfferSettings::m_nAsyncInitResult
COfferSettings::m_bGetOffersResultValid
COfferSettings::m_nOffersRequested
CTrackingCalls::m_bHasShownOffer
CTrackingCalls::m_nSkipOffersValue
CTrackingCalls::m_nLastOCGetAsyncOfferStatus
COfferManager::m_bDisabled
CTrackingCalls::m_bHasQueuedTrackProductInstalled
CTrackingCalls::m_bHasQueuedTrackProductInstallFailed
CTrackingCalls::m_bCanTrack_product_install_failed
COfferSettings::m_mapUserFlags
CTrackingCalls::m_bHasScheduledRebootTask
DEFINED_LoadSDKDLL
Global\426F00E8-A1B3-4EB2-8FF8-0950920F5D6E
DEFINED_SetCmdLineValuesW
DEFINED_SetNoCandy
DEFINED_GetNoCandy
Global\C:/debug.log
DelayAppMutex
Luelnao Ropxiusca
Diextodj Pidimou
AVSMEDIA
Jirkeoat Tucquun
Global\AmInst__Runing_1
PulseSecure.LogService.Settings.Mutex.v2
Global\acb944d3-fca4-11e5-9e88-08002763e612
Advinst_4FC3FAC9AE2D4F56AE0E2AE38642DC3C
PrivacyManager_CoreShredder_SessionMutex
Global\RSUMUTEXOFDOOM
Global\c:!windows!system32
AdmonTraceMutex
GLOBESPAN_ADSL_CPL_LOGFILE_MUTEX
F5_Networks_Log_File_Mutex_12288
ipmsg_class
Spotify Update Started Interactive Mutex
WinClon-Scheduler
Global\RazorWeb
Global\IIF-{240C3DDD-C5E9-4029-9DF7-95650D040CF2}
Local\SkypeSetupMutex
WinRAR_Busy
Global\SearchKnow
t "Toolbar_IE_Setup"
Toolbar_IE_Setup
SUC-NORMAL-MODE2005
ao6
Global\{421637E4-F535-41be-8342-4046F46E1657}
Global\SonicTrain
Global\MSILOG_9e0d48fe1d19134GOL.72b84ISM_pmeT_lacoL_ataDppA_7niw_sresU_:C
Global\c339df0d-fd42-11e5-9e88-08002763e612
Global\asw_ais_setup_mutex
MutexNPA_UnitVersioning_3060
C:\sample
Global\.net clr networking
PCC.Preinstaller
ASUS Manager Setup ExecuteMutex-Aug
7433cdb324b04dd5e3c3db213381216c7c539baa
MutexNPA_UnitVersioning_2640
Global\InstDriverSync
MutexNPA_UnitVersioning_2428
SMPCUninstaller
Silkroad Online Launcher
Ready
{0BB25CA4-59F4-4cf4-B8D2-CD935D8520DB}
Local\{7291DB2E-B603-27AC-3FBE-E12971CE3E37}
Global\{0A9E480A-2527-5FA3-EA8F-6673A4FFB96D}
Global\{0A9E480A-2527-5FA3-E68E-6673A8FEB96D}
Global\{0A9E480A-2527-5FA3-BA8E-6673F4FEB96D}
Global\{0A9E480A-2527-5FA3-6A8E-667324FEB96D}
Global\{0A9E480A-2527-5FA3-628E-66732CFEB96D}
Global\{0A9E480A-2527-5FA3-5A8E-667314FEB96D}
Global\{0A9E480A-2527-5FA3-0E8E-667340FEB96D}
Global\{0A9E480A-2527-5FA3-1E8E-667350FEB96D}
Global\{0A9E480A-2527-5FA3-168E-667358FEB96D}
Global\{0A9E480A-2527-5FA3-8E8D-6673C0FDB96D}
Global\{0A9E480A-2527-5FA3-4E8D-667300FDB96D}
Global\{0A9E480A-2527-5FA3-3A8D-667374FDB96D}
Global\{0A9E480A-2527-5FA3-DA8C-667394FCB96D}
Global\{0A9E480A-2527-5FA3-B28C-6673FCFCB96D}
Global\{0A9E480A-2527-5FA3-928C-6673DCFCB96D}
Global\{0A9E480A-2527-5FA3-468C-667308FCB96D}
Global\{0A9E480A-2527-5FA3-368C-667378FCB96D}
Global\{0A9E480A-2527-5FA3-CA8C-667384FCB96D}
Global\{0A9E480A-2527-5FA3-928B-6673DCFBB96D}
Global\{0A9E480A-2527-5FA3-4E8B-667300FBB96D}
Global\{0A9E480A-2527-5FA3-D68A-667398FAB96D}
Global\{0A9E480A-2527-5FA3-8E89-6673C0F9B96D}
Global\{0A9E480A-2527-5FA3-C68A-667388FAB96D}
Global\{0A9E480A-2527-5FA3-4A8A-667304FAB96D}
Global\{0A9E480A-2527-5FA3-DE88-667390F8B96D}
Global\{0A9E480A-2527-5FA3-2E89-667360F9B96D}
Global\{0A9E480A-2527-5FA3-5288-66731CF8B96D}
Global\{0A9E480A-2527-5FA3-4688-667308F8B96D}
Global\{0A9E480A-2527-5FA3-7689-667338F9B96D}
Global\{0A9E480A-2527-5FA3-2686-667368F6B96D}
Global\{0A9E480A-2527-5FA3-3E86-667370F6B96D}
Global\{0A9E480A-2527-5FA3-1685-667358F5B96D}
Global\{0A9E480A-2527-5FA3-F288-6673BCF8B96D}
Global\{0A9E480A-2527-5FA3-8A86-6673C4F6B96D}
Global\{0A9E480A-2527-5FA3-FA87-6673B4F7B96D}
Global\{0A9E480A-2527-5FA3-6E87-667320F7B96D}
Global\{0A9E480A-2527-5FA3-9285-6673DCF5B96D}
Global\{0A9E480A-2527-5FA3-8685-6673C8F5B96D}
Global\{0A9E480A-2527-5FA3-0E87-667340F7B96D}
Global\{0A9E480A-2527-5FA3-5285-66731CF5B96D}
Global\{0A9E480A-2527-5FA3-3685-667378F5B96D}
Global\InnovateDirect
madExceptSettingsMtx$bfc
madToolsMsgHandlerMutex$bf8$40e7dc
Global\mchMixCache$bfc
SonixUsb325TrayIcon
Global\u{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
Local\II948II
Global\DA.58453cba
Global\DQ.58453cba
Global\i{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
MutexNPA_UnitVersioning_2264
Local\II2632II
t "myMutex"
myMutex
COREL Products Keygen v4.0
ZumaMutex
Juniper.LogService.Settings.Mutex.v2
Global\Kupi don
HookApi:{7DDF4ADB-4A01-4F4B-83AA-8D91C21E99D2}:2264:Lock
78BEE965E61B4FDB9C6A6761AB47FC3D
t "69829InstallerMutex"
69829InstallerMutex
Tonec_Internet_Download_Manager_MTX
crfirefoxinstaller
Tencent_QQWubi_TrayIcon_Mutex_JKR
QQWUBI_MUTEX_{6D6341BA-770E-4ab9-9866-A7CEACFE3D05}
t 'Install_Selection Tools'
Install_Selection Tools
SIW - System Information for Windows
Global\YSU_MUTEX
7424D571-855B-4578-83CE-AB28DE27FF53
{1B655094-FE2A-433c-A877-FF9793445069}
Welcome to Microsoft Windows XP
UTorRe~t4823DF041B09
Global\tFVs59g
{EEF4DCB9-E47E-4ee9-A191-C303C366F66C}_Mutex
Global\eaae418d-fe0b-11e5-9e88-08002763e612
_SHuassist.mtx
Global\PIP_Mutex_
SetupWatson_Mutex_Name
THPanel
{85EA6D4E-04CC-48b0-B526-EA9E2FEF56FA}
t "combatarms_eu_installer"
combatarms_eu_installer
{CA39FE4E-F48C-45F7-A71C-BCAE11DADCB8}
DXWSETUP
SupOptSmartScan
Local\sample
Local\Torrent4823DF041B09
Global\ServicePackOrHotfix
TP-LINK-NIC-UTILITY
Global\DigitalMore
sampleN9e4o6QF
{042B0D65-EF5B-4E3F-ADFF-86C726E4F053}
Global\_MSIExecute
Global\ahnlabsupdatealiassingleinstance is running
MutexCBSClientCompactSetup
Global\{EBC3D2AE-1B0E-4899-847A-D77F93088A7F}
Global\{C10EFE0F-391C-4559-B518-58361DECA98E}
sample
WMSetup-UI
gcc-shmem-tdm2-mutex_global_shmem
gcc-shmem-tdm2-global_lock_spinlock
gcc-shmem-tdm2-use_fc_key
gcc-shmem-tdm2-sjlj_once
gcc-shmem-tdm2-once_global_shmem
gcc-shmem-tdm2-once_obj_shmem
gcc-shmem-tdm2-_pthread_tls_once_shmem
gcc-shmem-tdm2-_pthread_tls_shmem
gcc-shmem-tdm2-mtx_pthr_locked_shmem
gcc-shmem-tdm2-mutex_global_static_shmem
gcc-shmem-tdm2-mxattr_recursive_shmem
gcc-shmem-tdm2-pthr_root_shmem
gcc-shmem-tdm2-idListCnt_shmem
gcc-shmem-tdm2-idListMax_shmem
gcc-shmem-tdm2-idList_shmem
gcc-shmem-tdm2-idListNextId_shmem
gcc-shmem-tdm2-fc_key
gcc-shmem-tdm2-_pthread_key_lock_shmem
gcc-shmem-tdm2-cond_locked_shmem_rwlock
gcc-shmem-tdm2-rwl_global_shmem
gcc-shmem-tdm2-_pthread_key_sch_shmem
gcc-shmem-tdm2-_pthread_key_max_shmem
gcc-shmem-tdm2-_pthread_key_dest_shmem
DirectInput.{89521361-AA8A-11CF-BFC7-444553540000}
DirectInput.{5944E682-C92E-11CF-BFC7-444553540000}
AzMixerSelectMutex
NTShell Taskman Startup Mutex
Local\TeamViewer_LogMutex
Games App Patch Mutex
WT_Games_App_Exclusive_4.0.39.3
WTAnalytics.dat_WTAnalytics{98CA00B7-D428-47a8-8EBE-66ADA4179BB9}
WTAnalytics.dat_WTAnalytics{98CA00B7-D428-47a8-8EBE-66ADA4179BB9}_uld
Local\!BrowserEmulation!SharedMemory!Mutex
11710477410094284_BCS
XeTuM bOY759
05F16C88-71D3-42C1-BB4F-E9BAF7DB4A9E
LrJmJXklGC
Global\_no_copies
Local\MSCTF.Asm.MutexDefault1
Global\MiddleRush
Global\CLR_CASOFF_MUTEX
Global\DF6_unique_mutex_id_will_shutdown_or_reboot
DefaultTabtip-MainUI
Global\SearchWindowResults
WBXTRA_TRACE_MUTEX
WBXTRA_TRACE_MUTEX_EX
WBXTRA_TRACE_FILE
WBXTRA_TRACE_FILE_EX
_!SHMSFTHISTORY!_
Global\GetTheResultsHub
Global\SearchWebKnow
ASUS ATKOSD2 Mutex
Global\GenerousDeal
RealNetworks.Installer
3E40F524-16FA-440A-B919-B44AB355B174
process_hacker2_setup_mutex
Global\ProcessHacker2Mutant
WDCMutex2012
RasPbFile
Global\CashKitten
AsusSelectMutex
Global\StudySearchWindow
Local\__DDrawExclMode__
Local\__DDrawCheckExclMode__
Global\StrongSignal
WinClon-Scheduler
Global\RazorWeb
Global\MultiPar_Mutex
Global\SearchKnow
Toolbar_IE_Setup
ao6
Global\SonicTrain
alc_wow
C:\sample
Global\.net clr networking
Global\YouCam31_SingleInstance
SMPCUninstaller
Global\InnovateDirect
BSCDLCRN001
Global\DA.58453cba
Global\DQ.58453cba
Tencent_QQWubi_TrayIcon_Mutex_JKR
QQWUBI_MUTEX_{6D6341BA-770E-4ab9-9866-A7CEACFE3D05}
08f4dc96bbb7af09d1a37fe35c75a42f
DFF_4E7965C1-F27A-44e1-90D1-46EBDFE07955
SupOptSmartScan
JetStartMutex347
Global\DigitalMore
MutexCBSClientCompactSetup
ISkySoft Custom Server Platform Compact
Global\TeamViewer_LogMutex
Local\!BrowserEmulation!SharedMemory!Mutex
LrJmJXklGC
C:\sample
C:\Windows\syswow64\MSCTF.dll
C:\Windows\syswow64\USER32.dll
C:\Windows\syswow64\kernel32.dll
C:\DLL_Loader.exe
C:\Users\win7\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
C:\Users\win7\AppData\Local\Temp\_ir_sf_temp_0\Unicode.lmd
C:\Users\win7\AppData\Local\Tem
C:\Windows\system32\propsys.dll
C:\Windows\SYSTEM32\MSCOREE.DLL
C:\Users\win7\AppData\Local\Temp\~nsu.tmp\Au_.exe
C:\Windows\system32\ODBC32.dll
C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc\MSVCR80.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\system32\RichEd20.dll
C:\Windows\syswow64\CRYPT32.dll
C:\Windows\system32\cryptnet.dll
C:\Windows\system32\RichEd20.DLL
C:\Windows\system32\riched20.dll
C:\Users\win7\AppData\Local\Temp\nsl1957.tmp\webapp-uninstaller.exe
C:\Windows\System32\msxml3.dll
C:\Windows\system32\MSVBVM60.DLL
C:\Users\win7\AppData\Local\Temp\is-K3HOL.tmp\sample.tmp
C:\Windows\system32\MSFTEDIT.DLL
C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18834_none_72d38c5186679d48\gdiplus.dll
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\system32\RICHED20.dll
C:\Windows\SysWOW64\ieframe.dll
C:\Windows\SysWOW64\mshtml.dll
C:\Users\win7\AppData\Local\Temp\downloader.exe
C:\Windows\system32\quartz.dll
C:\Windows\system32\credui.dll
C:\Windows\system32\dsound.dll
C:\Users\win7\AppData\Local\Temp\{3943BD48-91F4-4AF7-93C1-CCA84463D9E9}\ISSetup.dll
C:\Windows\system32\msi.dll
C:\Users\win7\AppData\Local\Temp\is-V3QKL.tmp\sample.tmp
C:\Windows\system32\WINMM.dll
C:\Windows\system32\dxgi.dll
C:\Windows\system32\d3d11.dll
C:\Windows\system32\D3D10Warp.dll
C:\Windows\system32\PROPSYS.dll
C:\Windows\system32\DUser.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\dw20.exe
C:\Windows\system32\RICHED20.DLL
C:\Windows\system32\werui.dll
C:\Windows\SysWOW64\schannel.dll
C:\Users\win7\AppData\Local\Temp\is-I1FC2.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\is-OG679.tmp\innocallback.dll
C:\Users\win7\AppData\Local\Temp\is-OG679.tmp\isslideshow.dll
C:\Windows\System32\msxml6.dll
C:\Users\win7\AppData\Local\Temp\is-03VG6.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\is-H30DO.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\is-Q3425.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\is-UD2JH.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\TeamViewer\Version5\TeamViewer_.exe
C:\Windows\SysWOW64\sti.dll
C:\Windows\system32\QUtil.dll
C:\Windows\system32\eappcfg.dll
C:\Windows\system32\eappprxy.dll
C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc\msvcm80.dll
C:\Users\win7\AppData\Local\Temp\is-G9797.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\IXP000.TMP\BBSetup.exe
C:\Windows\system32\ieframe.dll
C:\Windows\SysWOW64\cmd.exe
C:\Users\win7\AppData\Local\Temp\nsm7228.tmp\g\gtapi_signed.DLL
C:\Users\win7\AppData\Local\Temp\nsm7228.tmp\g\pfWWW.DLL
C:\Users\win7\AppData\Local\Temp\is-KRK85.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\VideoPad-2636-1\ffmpeg19.exe
C:\Windows\system32\EhStorShell.dll
C:\Windows\system32\dSound.dll
C:\Windows\system32\Msftedit.dll
C:\Windows\system32\Riched20.dll
C:\Windows\system32\DSOUND.dll
C:\Users\win7\AppData\Local\Temp\nsoD439.tmp\ywiseextU.DLL
C:\Users\win7\AppData\Local\Temp\is-C5JB6.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\{391B7029-655F-4AEF-97FF-88A8B896C1E9}\Disk1\ISSetup.dll
C:\Users\win7\AppData\Local\Temp\{391B7029-655F-4AEF-97FF-88A8B896C1E9}\_Setup.dll
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\ISRT.dll
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\MFS2Instutil.dll
C:\Windows\system32\MSHTML.dll
C:\Users\win7\AppData\Local\Temp\nsw7FCC.tmp\SimpleFC.dll
C:\Users\win7\AppData\Local\Temp\is-VS13Q.tmp\sample.tmp
C:\Windows\syswow64\crypt32.DLL
C:\Windows\SysWOW64\MSIEXEC.EXE
C:\Windows\SysWOW64\cryptnet.dll
C:\Users\win7\AppData\Local\Temp\is-3JJDM.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\is-4HJAN.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\{7C029707-4E9A-470A-AADA-703787A937A1}\Disk1\ISSetup.dll
C:\Users\win7\AppData\Local\Temp\{7C029707-4E9A-470A-AADA-703787A937A1}\_Setup.dll
C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{E487EE7D-EAAA-4E2A-9116-E3B477D8A74F}\ISRT.dll
C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{E487EE7D-EAAA-4E2A-9116-E3B477D8A74F}\_isres.dll
C:\Users\win7\AppData\Local\Temp\2412a1c9-fb55-11e5-9e88-08002763e612\Ninite.exe
C:\Windows\system32\CRTDLL.DLL
C:\Users\win7\AppData\Local\Temp\27E7832D\sample\plugins\0\StdUI.dll
C:\Windows\system32\mscomctl.ocx
C:\Windows\system32\MSWINSCK.OCX
C:\Windows\system32\tapi32.dll
C:\Windows\SysWOW64\jscript9.dll
C:\Users\win7\AppData\Local\Temp\is-EQOGG.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\nsg99D3.tmp\ghst.exe
C:\Users\win7\AppData\Local\Temp\SSESTART\Setup.exe
C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_50916076bcb9a742\MSVCR90.dll
C:\Users\win7\AppData\Local\Temp\{391B75F5-6733-4AEF-BFD8-84A8B896C1E9}\ISSetup.dll
C:\Users\win7\AppData\Local\Temp\{97937BFE-5F33-426A-9C72-F21F4A2A208E}\ISRT.dll
C:\Windows\SysWOW64\MSCOREE.DLL
C:\Users\win7\AppData\Local\Temp\DRHelper_installStart.exe
C:\Windows\SysWOW64\Wbem\WMIC.exe
C:\Users\win7\AppData\Local\Temp\is-KUQTU.tmp\sample.tmp
C:\Windows\SysWOW64\quartz.dll
C:\Windows\system32\msrle32.dll
C:\Windows\system32\msvidc32.dll
C:\Windows\system32\msyuv.dll
C:\Windows\system32\iyuv_32.dll
C:\Windows\system32\tsbyuv.dll
C:\Windows\system32\iccvid.dll
C:\Windows\system32\msacm32.dll
C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\ccavstart.exe
C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\cmdhtml.dll
C:\Windows\SysWOW64\msiexec.exe
C:\Windows\System32\msi.dll
C:\Temp\NVIDIA\3DVision\nvStInst.exe
C:\Temp\NVIDIA\3DVision\setup.exe
C:\Temp\NVIDIA\3DVision\ISSetup.dll
C:\Users\win7\AppData\Local\Temp\{7C5A5A01-BA31-4712-8E81-703787A937A1}\_Setup.dll
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\ISRT.dll
C:\Temp\NVIDIA\3DVision\setup.e
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\NVINSTNT.DLL
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\ISRT.dll
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\NVINSTNT.DLL
C:\Users\win7\AppData\Local\Temp\nsf1E94.tmp\cpSetup.exe
C:\Users\win7\AppData\Local\Temp\000a3f98.a
C:\Windows\system32\winmm.dll
C:\Users\win7\AppData\Local\Temp\mia4D20.tmp\RP255DriverInstaller.exe
C:\Windows\system32\explorerframe.dll
C:\Windows\Winhlp32.exe
C:\Windows\SysWOW64\wscript.exe
C:\Users\win7\AppData\Local\Temp\37eacdea-fbfb-11e5-9e88-08002763e612\Ninite.exe
C:\Windows\syswow64\KERNELBASE.dll
C:\Windows\SysWOW64\ntdll.dll
C:\Windows\syswow64\msvcrt.dll
C:\Windows\syswow64\shlwapi.DLL
C:\Users\win7\AppData\Local\Temp\is-TDCLD.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\is-DRHQ5.tmp\sample.tmp
C:\Windows\SysWOW64\MRT.exe
?:\sample
C:\Users\win7\AppData\Local\Temp\nslC593.tmp\HiRu.exe
C:\Windows\system32\DINPUT8.dll
C:\Windows\system32\ntshrui.dll
C:\Windows\syswow64\crypt32.dll
C:\Users\win7\AppData\Local\Temp\is-T2PAO.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\is-DPDUS.tmp\sample.tmp
C:\Windows\SysWOW64\net1.exe
C:\WBDHD44I.DLL
C:\Users\win7\AppData\Local\Temp\is-S6L6I.tmp\sample.tmp
C:\Windows\SysWOW64\RunDll32.exe
C:\Users\win7\AppData\Local\Temp\is-L66P9.tmp\sample.tmp
C:\Windows\SysWOW64\RunDll32.ex
C:\Windows\SysWOW64\RichEd20.dll
C:\Users\win7\AppData\Local\Temp\is-MUR9B.tmp\OCSetupHlp.dll
C:\Users\win7\AppData\Local\Temp\is-MUR9B.tmp\UnRAR.exe
C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18834_none_72d38c5186679d48\GDIPLUS.DLL
C:\Windows\SysWOW64\DDRAW.dll
C:\Users\win7\AppData\Local\Temp\is-ANUC4.tmp\sample.tmp
?
?\sample
C:\Users\win7\AppData\Local\Temp\GUM2D7E.tmp\DropboxUpdate.exe
C:\Users\win7\AppData\Local\Temp\GUM2D7E.tmp\goopdate.dll
C:\Users\win7\AppData\Local\Temp\is-VFDLN.tmp\tools.exe
C:\Users\win7\AppData\Local\Temp\is-55OV3.tmp\sample.tmp
C:\Windows\system32\SYSDM.CPL
C:\Users\win7\AppData\Local\Temp\IXP000.TMP\cabinstaller.exe
C:\Users\win7\AppData\Local\Temp\is-G9JNT.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\is-M8OMU.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\~nsuA.tmp\Au_.exe
C:\Users\win7\AppData\Local\Temp\000a9922.a
C:\Windows\system32\dinput8.dll
C:\Windows\system32\schannel.dll
C:\Users\win7\AppData\Local\Temp\000bee61.a
C:\84a77ccea871e1cd00e4d4380f\secondaryinstaller.exe
C:\Users\win7\AppData\Local\Temp\is-VTV4A.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\is-NO3AF.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\is-E7IJC.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\is-7NH9O.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\is-54A3G.tmp\OCSetupHlp.dll
C:\Users\win7\AppData\Local\Temp\is-54A3G.tmp\UnRAR.exe
C:\Users\win7\AppData\Local\Temp\is-KJAU2.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\is-VIF8R.tmp\innocallback.dll
C:\Users\win7\AppData\Local\Temp\is-VIF8R.tmp\isslideshow.dll
C:\Users\win7\AppData\Local\Temp\is-VIF8R.tmp\botva2.dll
C:\Users\win7\AppData\Local\Temp\26286690-fd6d-11e5-9e88-08002763e612\Ninite.exe
C:\Users\win7\AppData\Local\Temp\nsq9FEA.tmp\AlexaToolbar.dll
C:\Users\win7\AppData\Local\Temp\7zSD9CB.tmp\setup-stub.exe
C:\Users\win7\AppData\Local\Temp\is-2S15M.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\MblTT.exe
C:\Users\win7\AppData\Local\Temp\is-HHQ59.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\is-0PLIU.tmp\b2p.dll
C:\Users\win7\AppData\Local\Temp\is-0PLIU.tmp\botva2.dll
C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18834_none_72d38c5186679d48\GDIPlus.DLL
C:\Windows\syswow64\PSAPI.DLL
C:\Windows\system32\uxtheme.dll
C:\Windows\system32\mscoree.dll
C:\ProgramData\535531\sysmon.exe
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\APTAT.Bootstrapper.exe
C:\Windows\SysWOW64\soundschemes2.exe
C:\Windows\SysWOW64\soundscheme
C:\Users\win7\AppData\Local\Temp\is-BEIBV.tmp\sample.tmp
C:\Windows\system32\CRTDLL.dll
C:\Users\win7\AppData\Local\Temp\is-UDIEF.tmp\sample.tmp
C:\Users\win7\AppData\Roaming\Ininbu\oxqyt.exe
C:\Users\win7\AppData\Local\Temp\befbcfdhdg.exe
C:\Windows\SysWOW64\Wbem\wmic.exe
c:\31c37649a87341446d94\HotFixInstaller.exe
C:\Users\win7\AppData\Local\Temp\is-0KLIF.tmp\sample.tmp
C:\Windows\system32\UxTheme.dll
C:\Windows\system32\wsock32.dll
C:\Windows\system32\winspool.drv
C:\Windows\system32\olepro32.dll
C:\Windows\system32\msimg32.dll
C:\Windows\system32\POWRPROF.dll
C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d\comctl32.dll
C:\Windows\system32\DNSAPI.dll
C:\Windows\system32\version.DLL
C:\CFVS_HookDll.dll
C:\Windows\syswow64\CRYPTBASE.dll
C:\Windows\syswow64\SspiCli.dll
C:\Windows\syswow64\CFGMGR32.dll
C:\Windows\syswow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
C:\Windows\syswow64\iertutil.dll
C:\Windows\SysWOW64\sechost.dll
C:\Windows\syswow64\api-ms-win-downlevel-ole32-l1-1-0.dll
C:\Windows\syswow64\ADVAPI32.dll
C:\Windows\syswow64\ole32.DLL
C:\Windows\syswow64\SETUPAPI.dll
C:\Windows\syswow64\SHELL32.dll
C:\Windows\syswow64\api-ms-win-downlevel-version-l1-1-0.dll
C:\Windows\syswow64\profapi.dll
C:\Windows\syswow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
C:\Windows\syswow64\NSI.dll
C:\Windows\syswow64\GDI32.dll
C:\Windows\syswow64\USERENV.dll
C:\Windows\system32\IMM32.DLL
C:\Windows\syswow64\OLEAUT32.dll
C:\Windows\syswow64\urlmon.dll
C:\Windows\syswow64\normaliz.DLL
C:\Windows\syswow64\api-ms-win-downlevel-user32-l1-1-0.dll
C:\Windows\syswow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
C:\Windows\syswow64\comdlg32.dll
C:\Windows\syswow64\WININET.dll
C:\Windows\syswow64\DEVOBJ.dll
C:\Windows\syswow64\WS2_32.dll
C:\Windows\syswow64\USP10.dll
C:\Windows\syswow64\RPCRT4.dll
C:\Windows\syswow64\LPK.dll
C
C:
C:\Windows\SysWOW64\dxgi.dll
C:\Windows\SysWOW64\d3d11.dll
C:\Windows\system32\winbrand.dll
C:\Windows\SysWOW64\dxdiagn.dll
C:\Users\win7\AppData\Local\Temp\tf00294823.dll
C:\Windows\system32\aclui.dll
C:\Users\win7\AppData\Local\Temp\is-7K0E1.tmp\sample.tmp
C:\Users\win7\AppData\Local\Tempfolder\QutrydMakn\VosjuoZivdhn.exe
C:\Users\win7\AppData\Local\Temp\Setup_AdvancedWinServiceManager_101.exe
C:\Users\win7\AppData\Local\Temp\is-O9D2A.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\nsjD065.tmp\dead.exe
C:\Users\win7\AppData\Local\Temp\AIRDAF7.tmp\Install PyxelEdit.exe
C:\Windows\system32\CRYPTNET.dll
C:\Users\win7\AppData\Local\Temp\System.Data.SQLite.dll
C:\Users\win7\AppData\Local\Temp\is-M6B40.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\is-SGKRM.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\nsr4AAB.tmp\UAC.dll
C:\Windows\system32\Connect.dll
C:\Users\win7\AppData\Local\Temp\is-AGITE.tmp\itdownload.dll
C:\Users\win7\AppData\Local\Temp\is-3BSP7.tmp\sample.tmp
C:\Windows\system32\WINSTA.dll
C:\Windows\system32\ntmarta.dll
C:\Windows\system32\WTSAPI32.dll
C:\Windows\system32\wkscli.dll
C:\Windows\system32\srvcli.dll
C:\Windows\system32\netutils.dll
C:\Windows\system32\NETAPI32.dll
C:\Windows\system32\MSIMG32.dll
C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_ec86b8d6858ec0bc\COMCTL32.dll
C:\Users\win7\AppData\Local\Temp\nsl5781.tmp\nsislog.dll
C:\Users\win7\AppData\Local\Temp\is-3KPC5.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\is-3GIFO.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\is-4M4D8.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\is-GH4O8.tmp\b2p.dll
C:\Users\win7\AppData\Local\Temp\is-GH4O8.tmp\botva2.dll
C:\Users\win7\AppData\Local\Temp\is-GH4O8.tmp\CallbackCtrl.dll
C:\Windows\syswow64\psapi.DLL
C:\Windows\SysWOW64\explorer.exe
C:\Users\win7\AppData\Local\Temp\_sablon proje.exe
C:\Windows\system32\Macromed\Flash\~SS3DF7.tmp
C:\Users\win7\AppData\Local\Temp\xns30E7.tmp
C:\Windows\SysWOW64\rundll32.ex
C:\Windows\SysWOW64\PROPSYS.dll
C:\Users\win7\AppData\Local\Temp\nsq357.tmp\nsExec.dll
C:\Users\win7\AppData\Local\Temp\explorer.exe
C:\Users\win7\AppData\Local\Temp\is-S4DD0.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\is-D86PD.tmp\ISTask.dll
C:\Windows\SysWOW64\regsvr32.exe
C:\Windows\system32\jscript.dll
C:\Users\win7\AppData\Local\Temp\is-LKH93.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\is-T8C5G.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\is-E3PEK.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\is-JPO5F.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\FsmSetup\Install.exe
C:\Windows\system32\sxs.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll
C:\Users\win7\AppData\Local\Temp\Tsu5ED29E38.dll
C:\Users\win7\AppData\Local\Temp\{07C171EC-5167-4901-ABEA-1945DC22531A}\_Setup.dll
C:\Users\win7\AppData\Local\Coowon\Update\CoowonUpdate.exe
C:\Users\win7\AppData\Local\Coowon\Update\1.3.33.0\coopdate.dll
C:\Users\win7\AppData\Local\Coowon\Update\1.3.33.0\psuser.dll
C:\Users\win7\AppData\Local\Temp\is-3U742.tmp\sample.tmp
C:\Users\win7\doouta.exe
C:\Users\win7\AppData\Local\Temp\is-KEK8H.tmp\is-59C93.tmp
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\botva2.dll
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\innocallback.dll
C:\Users\win7\AppData\Local\Temp\is-4OAQS.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\is-K14KD.tmp\winmsgctrl.dll
C:\Users\win7\AppData\Local\Temp\is-TTNJI.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\is-VI5KK.tmp\sample.tmp
C:\Windows\SysWOW64\timeout.exe
C:\Windows\SysWOW64\msv1_0.DLL
C:\Users\win7\AppData\Local\Temp\is-10KRU.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\is-UH93A.tmp\TempkillProcess.dll
C:\Users\win7\AppData\Local\Temp\is-04FS6.tmp\sample.tmp
C:\Windows\System32\dsound.dll
C:\Users\win7\AppData\Local\Temp\is-JD8L7.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\yjvbremodic8zu7ypkjnigwi.exe
C:\Users\win7\AppData\Local\Temp\is-SM044.tmp\sample.tmp
C:\Windows\system32\DINPUT.DLL
C:\Users\win7\AppData\Local\Temp\is-RP7AN.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\GLKB2D5.tmp
C:\Users\win7\AppData\Local\Temp\GLCB296.tmp
C:\Windows\SysWOW64\svchost.exe
C:\Users\win7\AppData\Local\Temp\samB172.exe
#34#
C:\Windows\syswow64\SetupApi.dll
C:\Users\win7\AppData\Local\Temp\mia3C42.tmp\UltraFileSearchLite_450_Setup.exe
C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d\COMCTL32.dll
C:\Windows\system32\IPHLPAPI.DLL
C:\Windows\system32\WINNSI.DLL
C:\Windows\syswow64\MSASN1.dll
C:\Windows\syswow64\WINTRUST.dll
C:\Windows\system32\RASAPI32.dll
C:\Windows\system32\rasman.dll
C:\Windows\system32\SensApi.dll
C:\Windows\system32\rtutils.dll
C:\Windows\system32\d3d10level9.dll
C:\Windows\system32\dwmapi.dll
C:\Windows\system32\mshtml.dll
C:\Windows\system32\appHelp.dll
C:\Windows\system32\hnetcfg.dll
C:\Windows\system32\ATL.DLL
C:\Windows\system32\slc.dll
C:\Windows\system32\GPAPI.dll
C:\Windows\system32\mlang.dll
C:\Windows\system32\msimtf.dll
C:\Windows\system32\mswsock.dll
C:\Windows\system32\rasadhlp.dll
C:\Windows\system32\SXS.DLL
C:\Windows\system32\wshtcpip.dll
C:\Windows\system32\wsock32.DLL
C:\Windows\SysWOW64\OLEACC.dll
C:\Users\win7\AppData\Local\Temp\7zS8AAC1398\avgsetupx.exe
C:\Users\win7\AppData\Local\Temp\_MEI27002\python27.dll
C:\Users\win7\AppData\Local\Temp\Creative_ALchemy_AL6_Cleanup.0001
C:\Users\win7\AppData\Local\Temp\Creative_ALchemy_AL6_Cleanup.0001.dir.0000\~df394b.tmp
C:\Users\win7\AppData\Local\Temp\miaB082.tmp\Guitar Rig Mobile IO Setup PC.exe
C:\Windows\BVubiAqv.exe
D
4
C:\Users\win7\AppData\Local\Temp\01-8a0e2e46-07dc-49de-826e-43a81d211841\finalBundle
C:\Users\win7\AppData\Local\Temp\Del5C7.tmp
C:\Users\win7\AppData\Local\Temp\is-346SF.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\is-JEFN9.tmp\sample.tmp
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
C:\Users\win7\AppData\Local\Temp\_ir_sf_temp_0\irsetup.dat
C:\Users\win7\AppData\Local\Temp\IRW1F24.tmp
C:\Users\win7\AppData\Local\Temp\IRW2CA3.tmp
C:\Users\win7\AppData\Local\Temp\IRW3752.tmp
C:\Users\win7\AppData\Local\Temp\~nsu.tmp\Qu_.exe
C:\Users\win7\AppData\Local\Temp\~nsu.tmp\Ru_.exe
C:\Users\win7\AppData\Local\Temp\~nsu.tmp\Su_.exe
C:\Users\win7\AppData\Local\Temp\~nsu.tmp\Tu_.exe
C:\Users\win7\AppData\Local\Temp\~nsu.tmp\Uu_.exe
C:\Users\win7\AppData\Local\Temp\~nsu.tmp\Vu_.exe
C:\Users\win7\AppData\Local\Temp\~nsu.tmp\Wu_.exe
C:\Users\win7\AppData\Local\Temp\~nsu.tmp\Xu_.exe
C:\Users\win7\AppData\Local\Temp\~nsu.tmp\Yu_.exe
C:\Users\win7\AppData\Local\Temp\~nsu.tmp\Zu_.exe
C:\Users\win7\AppData\Local\Temp\~nsu.tmp\Pu_.exe
C:\Users\win7\AppData\Local\Temp\nsjB0FB.tmp
C:\Users\win7\AppData\Local\Temp\nsjB14A.tmp
C:\Users\win7\AppData\Local\Temp\VSD7E47.tmp
C:\Users\win7\AppData\Local\Temp\~DF1CF84295773BEF44.TMP
C:\Users\win7\AppData\Local\Temp\_MSI5166._IS
C:\Users\win7\AppData\Local\Temp\nsb5EE3.tmp
C:\Users\win7\AppData\Local\Temp\nst249.tmp
C:\Users\win7\AppData\Local\Temp\nst24A.tmp
C:\Users\win7\AppData\Local\Temp\nst24A.tmp\nsExec.dll
C:\Users\win7\AppData\Local\Temp\nst24A.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsb8675.tmp
C:\Users\win7\AppData\Local\Temp\nsr8722.tmp
C:\tmp\CertMgr.exe
C:\tmp\software.mares.cer
C:\Users\win7\AppData\Local\Temp\nsr8722.tmp\nsExec.dll
C:\Users\win7\AppData\Local\Temp\nsm1646.tmp
C:\Users\win7\AppData\Local\Temp\nsc1657.tmp
C:\Users\win7\AppData\Local\Temp\nsc1657.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\~1F0B.tmp
C:\Users\win7\AppData\Local\Temp\~1FB8.tmp
C:\Users\win7\AppData\Local\Temp\WER1078.tmp
C:\Users\win7\AppData\Local\Temp\WER1078.tmp.WERInternalMetadata.xml
C:\Users\win7\AppData\Local\Temp\nsr415F.tmp
C:\Users\win7\AppData\Local\Temp\nsc41A0.tmp
C:\Users\win7\AppData\Local\Temp\WER2D1A.tmp
C:\Users\win7\AppData\Local\Temp\WER2D1A.tmp.WERInternalMetadata.xml
C:\Users\win7\AppData\Local\Temp\OfficeC2R763FA550-72E9-4FE4-B7C4-EB6F11C63288\v32.cab
C:\Users\win7\AppData\Local\Temp\OfficeC2R763FA550-72E9-4FE4-B7C4-EB6F11C63288\v32.hash
C:\Users\win7\AppData\Local\Temp\OfficeC2R763FA550-72E9-4FE4-B7C4-EB6F11C63288\VersionDescriptor.xml
C:\Users\win7\AppData\Local\Temp\OfficeC2R6E929EC6-D5F8-4939-ABAE-1E0BA5AD1B72\v32.cab
C:\Users\win7\AppData\Local\Temp\OfficeC2R6E929EC6-D5F8-4939-ABAE-1E0BA5AD1B72\v32.hash
C:\Users\win7\AppData\Local\Temp\OfficeC2R6E929EC6-D5F8-4939-ABAE-1E0BA5AD1B72\VersionDescriptor.xml
C:\Users\win7\AppData\Local\Temp\nse60FA.tmp
C:\Users\win7\AppData\Local\Temp\nsf614B.tmp
C:\Users\win7\AppData\Local\Temp\nsy5E48.tmp
C:\Users\win7\AppData\Local\Temp\nso5E59.tmp
C:\Users\win7\AppData\Local\Temp\nso5E59.tmp\CityHash.dll
C:\Users\win7\AppData\Local\Temp\nso5E59.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsi9A8E.tmp
C:\Users\win7\AppData\Local\Temp\nsc9715.tmp\TvGetVersion.dll
C:\Users\win7\AppData\Local\Temp\nsb6A5D.tmp
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\ask\askrt_it.cab
C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\stubinst_pkg_it.cab
C:\Users\win7\AppData\Local\Temp\nsuE02A.tmp
C:\Users\win7\AppData\Local\Temp\nszE04B.tmp
C:\Users\win7\AppData\Local\Temp\Windows.lnk
C:\Users\win7\AppData\Local\Temp\nsy19B4.tmp
C:\Users\win7\AppData\Local\Temp\nsd19D4.tmp
C:\Users\win7\AppData\Local\Temp\nsd19D4.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\IXP000.TMP\BingBarSetup-Partner.EXE
C:\Users\win7\AppData\Local\Temp\IXP000.TMP\BBSetupConfig.xml
C:\Users\win7\AppData\Local\Temp\IXP000.TMP\BBSetup.exe
C:\Users\win7\AppData\Local\Temp\{675C5CE2-6EE8-43AB-BABA-9F60D98A9FDD}\fpb.tmp
C:\Users\win7\AppData\Local\Temp\nst231.tmp
C:\Users\win7\AppData\Local\Temp\nst232.tmp
C:\Users\win7\AppData\Local\Temp\nst232.tmp\ExecCmd.dll
C:\Users\win7\AppData\Local\Temp\nst232.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsx71C9.tmp
C:\Users\win7\AppData\Local\Temp\nsm7228.tmp
C:\Users\win7\AppData\Local\Temp\browser_crashes\operation_log.txt
C:\Users\win7\AppData\Local\Temp\VideoPadCache\a4c__wt
C:\ProgramData\NCH Software\VideoPad\effects_transitions\a4c__wt
C:\Users\win7\AppData\Local\Temp\nsrE301.tmp
C:\Users\win7\AppData\Local\Temp\nshE312.tmp
C:\Users\win7\AppData\Local\Temp\nshE312.tmp\CityHash.dll
C:\Users\win7\AppData\Local\Temp\nshE312.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nst275D.tmp
C:\Users\win7\AppData\Local\Temp\nsj27BC.tmp
C:\Users\win7\AppData\Local\Temp\nsj27BC.tmp\InstallOptions.dll
C:\Users\win7\AppData\Local\Temp\nsj27BC.tmp\ioSpecial.ini
C:\Users\win7\AppData\Local\Temp\nsj27BC.tmp\modern-wizard.bmp
C:\Users\win7\AppData\Local\Temp\WER3293.tmp
C:\Users\win7\AppData\Local\Temp\WER3293.tmp.WERInternalMetadata.xml
C:\Users\win7\AppData\Local\Temp\nsoD438.tmp
C:\Users\win7\AppData\Local\Temp\nsoD439.tmp
C:\Users\win7\AppData\Local\Temp\nsoD439.tmp\nsnE9F6.tmp.htm
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\setup.inx
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\license.rtf
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\50COMUPD.EXE
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\MfsCleaner.exe
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\IS12Header.bmp
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\Quick Image Navigator.msi
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\TerminateSupport.exe
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\MFS2Instutil.dll
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\Panasonic Update CleanUp.msi
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\WaitMessage.exe
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\MFSMDSetting.exe
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\devmsg.exe
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\CheckISRunOnceValue.exe
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\License.txt
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\MFS2Instutil.ini
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\MFSMDSetting.ini
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\corecomp.ini
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\dotnetinstaller.exe
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\FontData.ini
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\DIFxData.ini
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\ISBEW64.exe
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\StringTable-0009-English.ips
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\isrt.dll
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\default.pal
C:\Users\win7\AppData\Local\Temp\{97937B9A-FE7E-404E-B872-F21F4B2A208E}\{53DE4FAD-F853-44F3-AC39-AD2940E5DD53}\_IsRes.dll
C:\Users\win7\AppData\Local\Temp\b64.rra
C:\Users\win7\AppData\Local\Temp\{391B7029-655F-4AEF-97FF-88A8B896C1E9}
C:\Users\win7\AppData\Local\Temp\{391B7029-655F-4AEF-97FF-88A8B896C1E9}\Disk1\data1.cab
C:\Users\win7\AppData\Local\Temp\{391B7029-655F-4AEF-97FF-88A8B896C1E9}\Disk1\data1.hdr
C:\Users\win7\AppData\Local\Temp\{391B7029-655F-4AEF-97FF-88A8B896C1E9}\Disk1\ISSetup.dll
C:\Users\win7\AppData\Local\Temp\{391B7029-655F-4AEF-97FF-88A8B896C1E9}\Disk1\layout.bin
C:\Users\win7\AppData\Local\Temp\{391B7029-655F-4AEF-97FF-88A8B896C1E9}\Disk1\setup.exe
C:\Users\win7\AppData\Local\Temp\{391B7029-655F-4AEF-97FF-88A8B896C1E9}\Disk1\setup.ini
C:\Users\win7\AppData\Local\Temp\{391B7029-655F-4AEF-97FF-88A8B896C1E9}\Disk1\setup.inx
C:\Users\win7\AppData\Local\Temp\{391B7029-655F-4AEF-97FF-88A8B896C1E9}\Disk1\_Setup.dll
C:\Users\win7\AppData\Local\Temp\{391B7029-655F-4AEF-97FF-88A8B896C1E9}\_Setup.dll
C:\Users\win7\AppData\Local\Temp\{391B7029-655F-4AEF-97FF-88A8B896C1E9}\setup.ini
C:\Users\win7\AppData\Local\Temp\nsx2421.tmp
C:\Users\win7\AppData\Local\Temp\nss2452.tmp
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\msg[1].htm
C:\Users\win7\AppData\Local\Temp\nsb7F4D.tmp
C:\Users\win7\AppData\Local\Temp\nsw7FCC.tmp
C:\Users\win7\AppData\Local\Temp\~DF1A291707B194D3EB.TMP
C:\Users\win7\AppData\Local\Temp\\dd_vcredist_amd64_20150610171551.log
C:\Users\win7\AppData\Local\Temp\\dd_vcredist_amd64_20150610171551_0_vcRuntimeMinimum_x64.log
C:\Users\win7\AppData\Local\Temp\\dd_vcredist_amd64_20150610171551_1_vcRuntimeAdditional_x64.log
C:\Users\win7\AppData\Local\Temp\\dd_vcredist_amd64_20150610174316.log
C:\Users\win7\AppData\Local\Temp\\dd_vcredist_x86_20150610171519.log
C:\Users\win7\AppData\Local\Temp\\dd_vcredist_x86_20150610171519_0_vcRuntimeMinimum_x86.log
C:\Users\win7\AppData\Local\Temp\\dd_vcredist_x86_20150610171519_1_vcRuntimeAdditional_x86.log
C:\Users\win7\AppData\Local\Temp\\dd_vcredist_x86_20150610174309.log
C:\Users\win7\AppData\Local\Temp\\FXSAPIDebugLogFile.txt
C:\Users\win7\AppData\Local\Temp\\StructuredQuery.log
C:\Users\win7\AppData\Local\Temp\\win7.bmp
C:\Users\win7\AppData\Local\Temp\nse2758.tmp
C:\Users\win7\AppData\Local\Temp\nsu2769.tmp
C:\Users\win7\AppData\Local\Temp\nse84B4.tmp
C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{E487EE7D-EAAA-4E2A-9116-E3B477D8A74F}\setup.inx
C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{E487EE7D-EAAA-4E2A-9116-E3B477D8A74F}\license.rtf
C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\corecomp.ini
C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\dotnetinstaller.exe
C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{E487EE7D-EAAA-4E2A-9116-E3B477D8A74F}\FontData.ini
C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{E487EE7D-EAAA-4E2A-9116-E3B477D8A74F}\DIFxData.ini
C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\ISBEW64.exe
C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{E487EE7D-EAAA-4E2A-9116-E3B477D8A74F}\StringTable-0009-English.ips
C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{E487EE7D-EAAA-4E2A-9116-E3B477D8A74F}\isrt.dll
C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{E487EE7D-EAAA-4E2A-9116-E3B477D8A74F}\default.pal
C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{E487EE7D-EAAA-4E2A-9116-E3B477D8A74F}\_IsRes.dll
C:\sample:Zone.Identifier
C:\Users\win7\AppData\Local\Temp\nscD64A.tmp
C:\Users\win7\AppData\Local\Temp\nsiD66B.tmp
C:\Users\win7\AppData\Local\Temp\nsiD66B.tmp\nsExec.dll
C:\Users\win7\AppData\Local\Temp\nsiD66B.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\OfficeC2R57286048-FC33-4E40-9248-C22AED6896DC\v32.cab
C:\Users\win7\AppData\Local\Temp\OfficeC2R57286048-FC33-4E40-9248-C22AED6896DC\v32.hash
C:\Users\win7\AppData\Local\Temp\OfficeC2R57286048-FC33-4E40-9248-C22AED6896DC\VersionDescriptor.xml
C:\Users\win7\AppData\Local\Temp\nsxAD13.tmp
C:\Users\win7\AppData\Local\Temp\nscAD33.tmp
C:\Users\win7\AppData\Local\Temp\nscAD33.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsg99D3.tmp\7za.exe
C:\Users\win7\AppData\Local\Temp\nsg99D3.tmp\bd.dll
C:\Users\win7\AppData\Local\Temp\nsg99D3.tmp\config.ini
C:\Users\win7\AppData\Local\Temp\nsg99D3.tmp\ghst.exe
C:\Users\win7\AppData\Local\Temp\nsg99D3.tmp\NsExec.dll
C:\Users\win7\AppData\Local\Temp\nsg99D3.tmp\res.7z
C:\Users\win7\AppData\Local\Temp\nsrD819.tmp
C:\Users\win7\AppData\Local\Temp\nshD82B.tmp
C:\Users\win7\AppData\Local\Temp\nsz8749.tmp
C:\Users\win7\AppData\Local\Temp\nsu8779.tmp
"C:\Users\win7\AppData\Local\Temp\nsu8779.tmp\System.dll"
C:\Users\win7\AppData\Local\Temp\nsu8779.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\_isC7CD.tmp
C:\Users\win7\AppData\Local\Temp\_isC80D.tmp
C:\Users\win7\AppData\Local\Temp\_isCE29.tmp
C:\Users\win7\AppData\Local\Temp\~CE28.tmp
C:\Users\win7\AppData\Local\Temp\_isD4A2.tmp
C:\Users\win7\AppData\Local\Temp\_isD668.tmp
C:\Users\win7\AppData\Local\Temp\_isDBF7.tmp
C:\Users\win7\AppData\Local\Temp\_isDCB4.tmp
C:\Users\win7\AppData\Local\Temp\_isDD22.tmp
C:\Users\win7\AppData\Local\Temp\_isDD81.tmp
C:\Users\win7\AppData\Local\Temp\_isDDFF.tmp
C:\Users\win7\AppData\Local\Temp\_isDECB.tmp
C:\Users\win7\AppData\Local\Temp\nszB8D9.tmp
C:\Users\win7\AppData\Local\Temp\nsjB919.tmp
C:\Users\win7\AppData\Local\Temp\nso75D0.tmp
C:\Users\win7\AppData\Local\Temp\nse762F.tmp
ini
C:\Users\win7\AppData\Local\Temp\nskDADC.tmp
C:\Users\win7\AppData\Local\Temp\nspDAFC.tmp
C:\Users\win7\AppData\Local\Temp\McCSPInstall.dll
C:\Users\win7\AppData\Local\Temp\nspDAFC.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\~DF12A46B7EF4304A17.TMP
C:\Users\win7\AppData\Local\Temp\skincf60.rra
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\setup.inx
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\IsBkgd.bmp
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\NvInstNT.dll
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\_ISUser.dll
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\corecomp.ini
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\dotnetinstaller.exe
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\FontData.ini
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\ISBEW64.exe
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\StringTable-0009-English.ips
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\isrt.dll
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\default.pal
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\_IsRes.dll
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D7-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\skind396.rra
C:\Users\win7\AppData\Local\Temp\skin3c24.rra
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\setup.inx
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\IsBkgd.bmp
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\NvInstNT.dll
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\_ISUser.dll
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\corecomp.ini
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\dotnetinstaller.exe
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\FontData.ini
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\ISBEW64.exe
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\StringTable-0009-English.ips
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\isrt.dll
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\default.pal
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\_IsRes.dll
C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44A1-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\skin4089.rra
C:\ProgramData\Comodo\CCAV\ccavusage.sdb-journal
C:\Users\win7\AppData\Local\Temp\000a3f98.a
C:\Users\win7\AppData\Local\Temp\000a3826.a
C:\Users\win7\AppData\Local\Temp\WER53E7.tmp
C:\Users\win7\AppData\Local\Temp\WER53E7.tmp.WERInternalMetadata.xml
C:\Users\win7\AppData\Local\Temp\nsqABB0.tmp
C:\Users\win7\AppData\Local\Temp\nsdB95D.tmp
C:\Users\win7\AppData\Local\Temp\nsyB98D.tmp
C:\Privilege.dat
C:\Users\win7\AppData\Local\Temp\_1AA0.tmp
C:\Users\win7\AppData\Local\Temp\_1AD0.tmp
C:\Users\win7\AppData\Local\Temp\_1AD1.tmp
C:\Users\win7\AppData\Local\Temp\_1AD2.tmp
C:\Users\win7\AppData\Local\Temp\_1AD3.tmp
C:\Users\win7\AppData\Local\Temp\_1AE4.tmp
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\KMPVer_English[1].txt
C:\Users\win7\AppData\Local\Temp\OfficeC2R57286048-F60F-4E19-BE4E-9B2AED68B7DC\v32.cab
C:\Users\win7\AppData\Local\Temp\OfficeC2R57286048-F60F-4E19-BE4E-9B2AED68B7DC\v32.hash
C:\Users\win7\AppData\Local\Temp\OfficeC2R57286048-F60F-4E19-BE4E-9B2AED68B7DC\VersionDescriptor.xml
C:\Users\win7\AppData\Local\Temp\nst1FE7.tmp
C:\Users\win7\AppData\Local\Temp\nsj1FF9.tmp
C:\Users\win7\AppData\Local\Temp\nsj1FF9.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\lang.loc
C:\Users\win7\AppData\Local\Temp\mia.tmp
C:\Users\win7\AppData\Local\Temp\nsm3174.tmp
C:\Users\win7\AppData\Local\Temp\nsw31B4.tmp
C:\Users\win7\AppData\Local\Temp\~nsu.tmp\Lu_.exe
C:\Users\win7\AppData\Local\Temp\~nsu.tmp\Mu_.exe
C:\Users\win7\AppData\Local\Temp\~nsu.tmp\Nu_.exe
C:\Users\win7\AppData\Local\Temp\~nsu.tmp\Ou_.exe
C:\Users\win7\AppData\Local\Temp\76EF.tmp
C:\Users\win7\AppData\Local\Temp\779C.tmp
C:\Users\win7\AppData\Local\Temp\77AD.tmp
C:\Users\win7\AppData\Local\Temp\77AE.tmp
C:\Users\win7\AppData\Local\Temp\77BE.tmp
C:\Users\win7\AppData\Local\Temp\77BF.tmp
C:\Users\win7\AppData\Local\Temp\ccavusage.sdb-journal
C:/Users/win7/AppData/Local/Temp/TCL9CAC.tmp
C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160406172832.log
C:\Users\win7\AppData\Local\Temp\Opera Installer\sample
c:\bb39a181ff14752c2ac7a56b\mrt.exe
c:\bb39a181ff14752c2ac7a56b\mrtstub.exe
C:\Users\win7\AppData\Local\Temp\WER1BB.tmp
C:\Users\win7\AppData\Local\Temp\WER1BB.tmp.WERInternalMetadata.xml
C:\Users\win7\AppData\Local\Temp\A~NSISu_.tmp
C:\Users\win7\AppData\Local\Temp\WER2CAE.tmp
C:\Users\win7\AppData\Local\Temp\WER2CAE.tmp.WERInternalMetadata.xml
C:\Users\win7\AppData\Local\Temp\nsdE4D1.tmp
C:\Users\win7\AppData\Local\Temp\nstE4E2.tmp
C:\Users\win7\AppData\Local\Temp\OfficeC2R57286048-F473-4E19-9250-9B2AED68DFDC\v32.cab
C:\Users\win7\AppData\Local\Temp\OfficeC2R57286048-F473-4E19-9250-9B2AED68DFDC\v32.hash
C:\Users\win7\AppData\Local\Temp\OfficeC2R57286048-F473-4E19-9250-9B2AED68DFDC\VersionDescriptor.xml
C:\Users\win7\AppData\Local\Temp\nspABF3.tmp
C:\Users\win7\AppData\Local\Temp\nszB6C3.tmp
C:\Users\win7\AppData\Local\Temp\spltmp.bmp
C:\Users\win7\AppData\Local\Temp\nsc997A.tmp
C:\Users\win7\AppData\Local\Temp\nsc997B.tmp
C:\Users\win7\AppData\Local\Temp\nsc997B.tmp\CityHash.dll
C:\Users\win7\AppData\Local\Temp\nsc997B.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\.zylomisrtemp1459968880\.rzFF64.tmp
C:\ArcInstall_NW_20151009a.exe.idx
C:\Users\win7\AppData\Local\Temp\nsnC53.tmp
C:\Users\win7\AppData\Local\Temp\nsdC64.tmp
C:\Users\win7\AppData\Local\Temp\nsdC64.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nst40C1.tmp
C:\Users\win7\AppData\Local\Temp\nsz417F.tmp
C:\Users\win7\AppData\Local\Temp\nslBACB.tmp
C:\Users\win7\AppData\Local\Temp\nsbBADC.tmp
C:\Users\win7\AppData\Local\Temp\nsbBADC.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsr2A13.tmp
C:\Users\win7\AppData\Local\Temp\nsg2A72.tmp
C:\Users\win7\AppData\Local\Temp\nsl62B5.tmp
C:\Users\win7\AppData\Local\Temp\nsb62C6.tmp
C:\Users\win7\AppData\Local\Temp\nsb62C6.tmp\CityHash.dll
C:\Users\win7\AppData\Local\Temp\nsb62C6.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\is-MUR9B.tmp\stub4_install.exe
C:\Users\win7\AppData\Local\Temp\is-MUR9B.tmp\stub_tmp.rar
C:\Users\win7\AppData\Local\Temp\nsd47FB.tmp
C:\Users\win7\AppData\Local\Temp\nst480C.tmp
C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160407082540.log
C:\Windows\Downloaded Program Files\PulseSetupClient.REBOOT
C:\Users\win7\AppData\Local\Temp\WER2D29.tmp
C:\Users\win7\AppData\Local\Temp\WER2D29.tmp.WERInternalMetadata.xml
C:\Users\win7\AppData\Local\Temp\nswC836.tmp
C:\Users\win7\AppData\Local\Temp\nslC847.tmp
C:\Users\win7\AppData\Local\Temp\OfficeC2R0F488821-B541-4F16-9980-97A403F739EF\v32.cab
C:\Users\win7\AppData\Local\Temp\OfficeC2R0F488821-B541-4F16-9980-97A403F739EF\v32.hash
C:\Users\win7\AppData\Local\Temp\OfficeC2R0F488821-B541-4F16-9980-97A403F739EF\VersionDescriptor.xml
C:\Users\win7\AppData\Local\Temp\Ins7BB2.tmp
C:\Users\win7\AppData\Local\Temp\~DFD5F73F3AB70050DA.TMP
C:\Users\win7\AppData\Local\Temp\Cab79CC.tmp
C:\Users\win7\AppData\Local\Temp\Tar79CD.tmp
C:\Users\win7\AppData\Local\Temp\nsr66C1.tmp
C:\Users\win7\AppData\Local\Temp\nsh67BC.tmp
C:\Users\win7\AppData\Local\Temp\~nsuA.tmp\Mu_.exe
C:\Users\win7\AppData\Local\Temp\~nsuA.tmp\Nu_.exe
C:\Users\win7\AppData\Local\Temp\~nsuA.tmp\Ou_.exe
C:\Users\win7\AppData\Local\Temp\~nsuA.tmp\Pu_.exe
C:\Users\win7\AppData\Local\Temp\~nsuA.tmp\Qu_.exe
C:\Users\win7\AppData\Local\Temp\~nsuA.tmp\Ru_.exe
C:\Users\win7\AppData\Local\Temp\~nsuA.tmp\Su_.exe
C:\Users\win7\AppData\Local\Temp\~nsuA.tmp\Tu_.exe
C:\Users\win7\AppData\Local\Temp\~nsuA.tmp\Uu_.exe
C:\Users\win7\AppData\Local\Temp\~nsuA.tmp\Vu_.exe
C:\Users\win7\AppData\Local\Temp\~nsuA.tmp\Wu_.exe
C:\Users\win7\AppData\Local\Temp\~nsuA.tmp\Xu_.exe
C:\Users\win7\AppData\Local\Temp\~nsuA.tmp\Yu_.exe
C:\Users\win7\AppData\Local\Temp\~nsuA.tmp\Zu_.exe
C:\Users\win7\AppData\Local\Temp\ext23D.tmp
C:\Users\win7\AppData\Local\Temp\plf23C.tmp
C:\Users\win7\AppData\Local\Temp\nsh9A57.tmp
C:\Windows\system32\LogFiles\PunkBuster\pbsvc.log
C:\Users\win7\AppData\Local\Temp\DefaultPackOffer.dll
C:\Users\win7\Desktop\WinRAR.lnk
C:\Users\Public\Desktop\WinRAR.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\WinRAR.lnk
C:\Users\win7\AppData\Local\Temp\\mt5setup_Arabic.mtlang.tmp
C:\Users\win7\AppData\Local\Temp\\mt5setup_French.mtlang.tmp
C:\Users\win7\AppData\Local\Temp\\mt5setup_German.mtlang.tmp
C:\Users\win7\AppData\Local\Temp\\mt5setup_Italian.mtlang.tmp
C:\Users\win7\AppData\Local\Temp\\mt5setup_Japanese.mtlang.tmp
C:\Users\win7\AppData\Local\Temp\\mt5setup_Russian.mtlang.tmp
C:\Users\win7\AppData\Local\Temp\\mt5setup_Spanish.mtlang.tmp
C:\Users\win7\AppData\Local\Temp\\mt5setup_Turkish.mtlang.tmp
C:\Users\win7\AppData\Local\Temp\000a9922.a
C:\Users\win7\AppData\Local\Temp\000a92e8.a
C:\Users\win7\AppData\Local\Temp\{45A532C6-C520-425D-AC0A-E5BC4EFBFB10}\fpb.tmp
C:\Users\win7\AppData\Local\Temp\CR_7EA0A.tmp\SETUP_PATCH.PACKED.7Z
C:\Users\win7\AppData\Local\Temp\CR_7EA0A.tmp\CHROME_PATCH.PACKED.7Z
C:\Users\win7\AppData\Local\Temp\nsu9D8C.tmp
C:\Users\win7\AppData\Local\Temp\nsz9DAD.tmp
C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160407210206.log
C:\Users\win7\AppData\Local\Temp\nsxD3C5.tmp
C:\Users\win7\AppData\Local\Temp\nshD405.tmp
C:\Users\win7\AppData\Local\Temp\000bee61.a
C:\Users\win7\AppData\Local\Temp\000be643.a
__tmp_rar_sfx_access_check_776250
C:\Users\win7\AppData\Local\Temp\OfficeC2R0F488821-B099-4F11-959B-90A4773CA5EE\v32.cab
C:\Users\win7\AppData\Local\Temp\OfficeC2R0F488821-B099-4F11-959B-90A4773CA5EE\v32.hash
C:\Users\win7\AppData\Local\Temp\OfficeC2R0F488821-B099-4F11-959B-90A4773CA5EE\VersionDescriptor.xml
C:\Users\win7\AppData\Local\Temp\nsc9714.tmp
C:\Users\win7\AppData\Local\Temp\nsh9734.tmp
C:\Users\win7\AppData\Local\Temp\nsh9734.tmp\AdvSplash.dll
C:\Users\win7\AppData\Local\Temp\nsh9734.tmp\FontName.dll
C:\Users\win7\AppData\Local\Temp\nsh9734.tmp\InstallOptions.dll
C:\Users\win7\AppData\Local\Temp\nsh9734.tmp\ioSpecial.ini
C:\Users\win7\AppData\Local\Temp\nsh9734.tmp\modern-wizard.bmp
C:\Users\win7\AppData\Local\Temp\nsh9734.tmp\spltmp.bmp
C:\Users\win7\AppData\Local\Temp\nsh9734.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\{A145AABC-0B25-4940-A087-A59DCB79EE7E}\fpb.tmp
C:\ProgramData\Microsoft\BingBar\7.1.361.0\SeaPort\Reports.xml
C:\Users\win7\AppData\Local\Temp\CabC941.tmp
C:\Users\win7\AppData\Local\Temp\TarC942.tmp
C:\Users\win7\AppData\Local\Temp\~6E49.tmp
C:\Users\win7\AppData\Local\Temp\WERADBF.tmp
C:\Users\win7\AppData\Local\Temp\WERADBF.tmp.WERInternalMetadata.xml
C:\Users\win7\AppData\Local\Temp\nsy3450.tmp
C:\Users\win7\AppData\Local\Temp\nst34CF.tmp
C:\Users\win7\AppData\Local\Temp\is-54A3G.tmp\stub4_install.exe
C:\Users\win7\AppData\Local\Temp\is-54A3G.tmp\stub_tmp.rar
C:\Users\win7\AppData\Local\Temp\nsg286.tmp
C:\Users\win7\AppData\Local\Temp\nsu6136.tmp
C:\Users\win7\AppData\Local\Temp\2a24d509-fd6d-11e5-9e88-08002763e612\translation.zip
C:\Users\win7\AppData\Local\Temp\nsb9FD9.tmp
C:\Users\win7\AppData\Local\Temp\nsq9FEA.tmp
C:\Users\win7\AppData\Local\Temp\nsp10E7.tmp
C:\Users\win7\AppData\Local\Temp\nsf10F8.tmp
C:\Users\win7\AppData\Local\Temp\nsf10F8.tmp\ExecCmd.dll
C:\Users\win7\AppData\Local\Temp\nsf10F8.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsbDBBF.tmp
C:\Users\win7\AppData\Local\Temp\nsrDBD0.tmp
C:\Users\win7\AppData\Local\Temp\CabF611.tmp
C:\Users\win7\AppData\Local\Temp\TarF612.tmp
C:\Users\win7\AppData\Local\Temp\WItest~1.tmp
C:\Users\win7\AppData\Local\Temp\WItest~2.tmp
C:\Users\win7\AppData\Local\Temp\WItest~3.tmp
C:\Users\win7\AppData\Local\Temp\WItest~4.tmp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\security.config.cch.2596.722140
C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\enterprisesec.config.cch.2596.722140
C:\Users\win7\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2596.722156
C:\Users\win7\AppData\Local\Temp\nsxCDF7.tmp
C:\Users\win7\AppData\Local\PokerStars.UK\PokerStars.log.1
__tmp_rar_sfx_access_check_662156
C:\Users\win7\AppData\Local\Temp\FR\default.mo
C:\Users\win7\AppData\Local\Temp\DE\default.mo
C:\Users\win7\AppData\Local\Temp\ES\default.mo
C:\Users\win7\AppData\Local\Temp\PT\default.mo
C:\Users\win7\AppData\Local\Temp\IT\default.mo
C:\Users\win7\AppData\Local\Temp\NL\default.mo
C:\Users\win7\AppData\Local\Temp\DA\default.mo
C:\Users\win7\AppData\Local\Temp\UK\default.mo
C:\Users\win7\AppData\Local\Temp\RU\default.mo
C:\Users\win7\AppData\Local\Temp\CS\default.mo
C:\Users\win7\AppData\Local\Temp\EL\default.mo
C:\Users\win7\AppData\Local\Temp\RO\default.mo
C:\Users\win7\AppData\Local\Temp\SK\default.mo
C:\Users\win7\AppData\Local\Temp\HU\default.mo
C:\Users\win7\AppData\Local\Temp\PL\default.mo
C:\Users\win7\AppData\Local\Temp\TR\default.mo
C:\Users\win7\AppData\Local\Temp\BG\default.mo
C:\Users\win7\AppData\Local\Temp\ZHCN\default.mo
C:\Users\win7\AppData\Local\Temp\ZHTW\default.mo
C:\Users\win7\AppData\Local\Temp\AR\default.mo
C:\Users\win7\AppData\Local\Temp\JA\default.mo
C:\Users\win7\AppData\Local\Temp\HE\default.mo
C:\Users\win7\AppData\Local\Temp\CA\default.mo
C:\Users\win7\AppData\Local\Temp\SL\default.mo
C:\Users\win7\AppData\Local\Temp\LT\default.mo
C:\Users\win7\AppData\Local\Temp\SR\default.mo
C:\Users\win7\AppData\Local\Temp\HR\default.mo
C:\Users\win7\AppData\Local\Temp\LV\default.mo
C:\Users\win7\AppData\Local\Temp\SV\default.mo
C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\security.config.cch.2636.606531
C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\enterprisesec.config.cch.2636.606531
C:\Users\win7\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2636.606546
C:\Users\win7\AppData\Local\Temp\aut2C0D.tmp
C:\Users\win7\AppData\Local\Temp\nsa2128.tmp
C:\Users\win7\AppData\Local\Temp\nsq2139.tmp
__tmp_rar_sfx_access_check_640265
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\APTAT.Application.exe
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\APTAT.Application.exe.config
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\APTAT.Bootstrapper.exe
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\APTAT.Core.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\APTAT.Valkyrie.Client.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\cmdapt64.exe
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\cmdapt86.exe
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\FluentValidation.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Fonts\segoeui.ttf
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Fonts\segoeuil.ttf
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Fonts\seguisb.ttf
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Microsoft.ReportViewer.Common.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Microsoft.ReportViewer.DataVisualization.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Microsoft.ReportViewer.ProcessingObjectModel.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Microsoft.ReportViewer.WinForms.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Newtonsoft.Json.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\System.Windows.Interactivity.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Telerik.Windows.Controls.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Telerik.Windows.Controls.FixedDocumentViewers.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Telerik.Windows.Controls.GridView.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Telerik.Windows.Controls.Input.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Telerik.Windows.Controls.Navigation.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Telerik.Windows.Data.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Telerik.Windows.Documents.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Telerik.Windows.Documents.Fixed.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Telerik.Windows.Themes.Windows8.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Telerik.Windows.Zip.dll
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\trl.txt
C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\tvl.txt
C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160408184456.log
c:\log.txt
C:\Users\win7\AppData\Local\Temp\OfficeC2R57286048-F083-4E58-824C-DA2AED68F3DD\v32.cab
C:\Users\win7\AppData\Local\Temp\OfficeC2R57286048-F083-4E58-824C-DA2AED68F3DD\v32.hash
C:\Users\win7\AppData\Local\Temp\OfficeC2R57286048-F083-4E58-824C-DA2AED68F3DD\VersionDescriptor.xml
Setup Log File.log
C:\Users\win7\AppData\Local\Temp\nsn19A1.tmp
C:\Users\win7\AppData\Local\Temp\nsd1A01.tmp
C:\Users\win7\AppData\Local\Temp\nskC83A.tmp
C:\Users\win7\AppData\Local\Temp\nsqC85C.tmp
C:\Users\win7\AppData\Local\Temp\81460141465.txt
C:\sample
C:\Users\win7\AppData\Local\Temp\HFI5F0C.tmp
C:\Users\win7\AppData\Local\Temp\HFI5F0D.tmp
C:\Users\win7\AppData\Local\Temp\HFI6131.tmp
c:\31c37649a87341446d94\3082\eula.rtf
c:\31c37649a87341446d94\3082\HotFixInstallerUI.dll
c:\31c37649a87341446d94\3076\eula.rtf
c:\31c37649a87341446d94\3076\HotFixInstallerUI.dll
c:\31c37649a87341446d94\2070\eula.rtf
c:\31c37649a87341446d94\2070\HotFixInstallerUI.dll
c:\31c37649a87341446d94\2052\eula.rtf
c:\31c37649a87341446d94\2052\HotFixInstallerUI.dll
c:\31c37649a87341446d94\1055\eula.rtf
c:\31c37649a87341446d94\1055\HotFixInstallerUI.dll
c:\31c37649a87341446d94\1053\eula.rtf
c:\31c37649a87341446d94\1053\HotFixInstallerUI.dll
c:\31c37649a87341446d94\1049\eula.rtf
c:\31c37649a87341446d94\1049\HotFixInstallerUI.dll
c:\31c37649a87341446d94\1046\eula.rtf
c:\31c37649a87341446d94\1046\HotFixInstallerUI.dll
c:\31c37649a87341446d94\1045\eula.rtf
c:\31c37649a87341446d94\1045\HotFixInstallerUI.dll
c:\31c37649a87341446d94\1044\eula.rtf
c:\31c37649a87341446d94\1044\HotFixInstallerUI.dll
c:\31c37649a87341446d94\1043\eula.rtf
c:\31c37649a87341446d94\1043\HotFixInstallerUI.dll
c:\31c37649a87341446d94\1042\eula.rtf
c:\31c37649a87341446d94\1042\HotFixInstallerUI.dll
c:\31c37649a87341446d94\1041\eula.rtf
c:\31c37649a87341446d94\1041\HotFixInstallerUI.dll
c:\31c37649a87341446d94\1040\eula.rtf
c:\31c37649a87341446d94\1040\HotFixInstallerUI.dll
c:\31c37649a87341446d94\1038\eula.rtf
c:\31c37649a87341446d94\1038\HotFixInstallerUI.dll
c:\31c37649a87341446d94\1037\eula.rtf
c:\31c37649a87341446d94\1037\HotFixInstallerUI.dll
c:\31c37649a87341446d94\1036\eula.rtf
c:\31c37649a87341446d94\1036\HotFixInstallerUI.dll
c:\31c37649a87341446d94\1035\eula.rtf
c:\31c37649a87341446d94\1035\HotFixInstallerUI.dll
c:\31c37649a87341446d94\1033\eula.rtf
c:\31c37649a87341446d94\1033\HotFixInstallerUI.dll
c:\31c37649a87341446d94\1032\eula.rtf
c:\31c37649a87341446d94\1032\HotFixInstallerUI.dll
c:\31c37649a87341446d94\1031\eula.rtf
c:\31c37649a87341446d94\1031\HotFixInstallerUI.dll
c:\31c37649a87341446d94\1030\eula.rtf
c:\31c37649a87341446d94\1030\HotFixInstallerUI.dll
c:\31c37649a87341446d94\1029\eula.rtf
c:\31c37649a87341446d94\1029\HotFixInstallerUI.dll
c:\31c37649a87341446d94\1028\eula.rtf
c:\31c37649a87341446d94\1028\HotFixInstallerUI.dll
c:\31c37649a87341446d94\1025\eula.rtf
c:\31c37649a87341446d94\1025\HotFixInstallerUI.dll
c:\31c37649a87341446d94\header.bmp
c:\31c37649a87341446d94\watermark.bmp
c:\31c37649a87341446d94\ParameterInfo.xml
c:\31c37649a87341446d94\DHtmlHeader.html
c:\31c37649a87341446d94\HotFixInstaller.exe
c:\31c37649a87341446d94\NDP30SP2-KB976769.msp
c:\31c37649a87341446d94\NDP20SP2-KB976765.msp
c:\31c37649a87341446d94\NDP20SP2-KB980773.msp
C:\Users\win7\AppData\Local\Temp\is-0KLIF.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\is-TDM1M.tmp\_isetup\_RegDLL.tmp
C:\Users\win7\AppData\Local\Temp\is-TDM1M.tmp\_isetup\_setup64.tmp
C:\Users\win7\AppData\Local\Temp\is-TDM1M.tmp\_isetup\_shfoldr.dll
C:\Users\win7\AppData\Local\Temp\sample.madExcept\.
C:\Users\win7\AppData\Local\Temp\sample.madExcept\..
C:\Users\win7\AppData\Local\Temp\_BSPST$_\skin\rgn.dat
C:\Users\win7\AppData\Local\Temp\_BSPST$_\skin\skin.ini
C:\Users\win7\AppData\Local\Temp\_BSPST$_\skin\skinfs.ini
C:\Users\win7\AppData\Local\Temp\_BSPST$_\skin\rgnfs.dat
C:\ProgramData\bett2f002\desktop.ini
C:\ProgramData\bett2f002\hwxtesuug.exe:Zone.Identifier
C:\Users\win7\AppData\Local\Temp\is-29A50.tmp\sample.tmp
C:\Users\win7\AppData\Local\Temp\CabD23B.tmp
C:\Users\win7\AppData\Local\Temp\TarD23C.tmp
C:\Users\win7\AppData\Local\Temp\nsaEEFC.tmp
C:\Users\win7\AppData\Local\Temp\nsqEF0D.tmp
C:\Users\win7\AppData\Local\Temp\\Test.dat
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\$Recycle.Bin\S-1-5-21-3979321414-2393373014-2172761192-1000\desktop.ini
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\apilog.txt
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\CFVS_HookDll.dll
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\CFVS_Injector.exe
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\countdown.py
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\DLL_Loader.exe
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\monkey.py
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\pagefile.sys
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Procmon.exe
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\ar-SA\tipresx.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\bg-BG\tipresx.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\Content.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\el-GR\tipresx.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-correct.avi
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\en-US\FlickLearningWizard.exe.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\en-US\InkWatson.exe.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\en-US\InputPersonalization.exe.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\en-US\IPSEventLogMsg.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\en-US\IpsMigrationPlugin.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\en-US\mip.exe.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\en-US\mshwLatin.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\en-US\ShapeCollector.exe.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\en-US\tabskb.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\en-US\TipBand.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\en-US\TipTsf.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\es-ES\tipresx.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\et-EE\tipresx.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\fi-FI\tipresx.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\FlickLearningWizard.exe
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\fr-FR\tipresx.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\ea.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\keypadbase.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\kor-kor.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_altgr.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_ca.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_jpn.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_kor.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_rtl.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ja-jp.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ko-kr.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-changjei.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-dayi.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-phonetic.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers\numbase.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu\oskmenubase.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad\osknumpadbase.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred\oskpredbase.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ea-sym.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ja-jp-sym.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\symbase.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web\webbase.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\he-IL\tipresx.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\hr-HR\tipresx.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\hu-HU\tipresx.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\hwrcommonlm.dat
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\hwrenalm.dat
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\hwrenclm.dat
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\hwrlatinlm.dat
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\hwruklm.dat
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\hwruksh.dat
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\hwrusalm.dat
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\hwrusash.dat
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\InkDiv.dll
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\InkObj.dll
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\InkWatson.exe
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\ipscat.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\ipschs.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\ipscht.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\ipscsy.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\ipsdan.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\ipsen.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\ipsesp.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\IPSEventLogMsg.dll
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\ipsfin.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\ipsfra.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\ipshrv.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\ipsita.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\ipsjpn.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\ipskor.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\IpsMigrationPlugin.dll
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\ipsnld.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\ipsnor.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\ipsplk.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\IpsPlugin.dll
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\ipsptb.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\ipsptg.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\ipsrom.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\ipsrus.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\ipssrb.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\ipssrl.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\ipssve.xml
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\it-IT\tipresx.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\ja-JP\tipresx.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\journal.dll
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\ko-KR\tipresx.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\lt-LT\tipresx.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\lv-LV\tipresx.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\micaut.dll
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\Microsoft.Ink.dll
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\mip.exe
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\mraut.dll
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\mshwgst.dll
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\nb-NO\tipresx.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\nl-NL\tipresx.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\pl-PL\tipresx.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\pt-BR\tipresx.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\pt-PT\tipresx.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\ro-RO\tipresx.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\rtscom.dll
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\ru-RU\tipresx.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\ShapeCollector.exe
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\sk-SK\tipresx.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\sl-SI\tipresx.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\sr-Latn-CS\tipresx.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\sv-SE\tipresx.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\TabIpsps.dll
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\tabskb.dll
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\TabTip.exe
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\th-TH\tipresx.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\TipBand.dll
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\TipRes.dll
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\tipresx.dll
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\tipskins.dll
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\tiptsf.dll
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\tpcps.dll
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\tr-TR\tipresx.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\uk-UA\tipresx.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\zh-CN\tipresx.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\ink\zh-TW\tipresx.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\msinfo32.exe.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Bears.htm
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Bears.jpg
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Blue_Gradient.jpg
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Cave_Drawings.gif
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Connectivity.gif
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Dotted_Lines.emf
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Garden.htm
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Garden.jpg
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Genko_1.emf
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Genko_2.emf
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Graph.emf
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Green Bubbles.htm
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\GreenBubbles.jpg
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Hand Prints.htm
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\HandPrints.jpg
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Monet.jpg
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Month_Calendar.emf
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Music.emf
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Notebook.jpg
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Orange Circles.htm
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\OrangeCircles.jpg
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.htm
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.jpg
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Pine_Lumber.jpg
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Pretty_Peacock.jpg
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Psychedelic.jpg
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Roses.htm
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Roses.jpg
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Sand_Paper.jpg
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Seyes.emf
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Shades of Blue.htm
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\ShadesOfBlue.jpg
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Shorthand.emf
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Small_News.jpg
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Soft Blue.htm
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\SoftBlue.jpg
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Stars.htm
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Stars.jpg
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Stucco.gif
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Tanspecks.jpg
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Tiki.gif
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\To_Do_List.emf
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\White_Chocolate.jpg
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\Stationery\Wrinkled_Paper.gif
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Microsoft Shared\VGX\VGX.dll
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\Services\verisign.bmp
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\MSTTSFrontendENU.dll
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\MSTTSLoc.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSCommon.dll
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSEngine.dll
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSLoc.dll
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\System\ado\adojavas.inc
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\System\ado\adovbs.inc
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\System\ado\en-US\msader15.dll.mui
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\System\ado\msader15.dll
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\System\ado\msado15.dll
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\System\ado\msado20.tlb
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\System\ado\msado21.tlb
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\System\ado\msado25.tlb
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\System\ado\msado26.tlb
C:\Users\win7\AppData\Local\Temp\DatB5EB.tmp\\Program Files\Common Files\System\ado\msado27.tlb
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\f[2].txt
C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\f[4].txt
C:\Users\win7\AppData\Local\Temp\nsz5095.tmp
C:\Users\win7\AppData\Local\Temp\neoNCSetup.exe
C:\Users\win7\AppData\Local\Temp\samsetupnt.exe
C:\Users\win7\AppData\Local\Temp\samsetup.exe
C:\Users\win7\AppData\Local\Temp\SamLauncher.exe
C:\Users\win7\AppData\Local\Temp\NeoterisSetupDll.exe
C:\Users\win7\AppData\Local\Temp\NeoterisSetup.exe
C:\Users\win7\AppData\Local\Temp\NeoterisSetup.cab
C:\Users\win7\AppData\Local\Temp\dsmmf.exe
C:\Users\win7\AppData\Local\Temp\neoHCSetup.exe
C:\Users\win7\AppData\Local\Temp\neoCacheCleanerSetup.exe
C:\Users\win7\AppData\Local\Temp\neoCBoxSetup.exe
C:\Users\win7\AppData\Local\Temp\neoCitrixServSetup.exe
C:\Users\win7\AppData\Local\Temp\SecureMeetingOutlook.exe
C:\Users\win7\AppData\Local\Temp\neoTermServSetup.exe
C:\Users\win7\AppData\Local\Temp\msrdp.cab
"C:\Users\win7\AppData\Local\Temp\dsNcAdmin_inst.dll"
C:\Users\win7\AppData\Local\Temp\dsNcAdmin_inst.dll
C:\Users\win7\AppData\Local\Temp\nso1040.tmp
C:\ProgramData\PDFC\Test.log
C:\Users\win7\AppData\Local\Temp\Test.log
C:\Users\win7\AppData\Local\Temp\nsdF5B3.tmp
C:\Users\win7\AppData\Local\Temp\nsyF632.tmp
C:\Users\win7\AppData\Local\Temp\nsx72B3.tmp
C:\Users\win7\AppData\Local\Temp\nsc72D3.tmp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\security.config.cch.2848.664031
C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\enterprisesec.config.cch.2848.664031
C:\Users\win7\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2848.664031
C:\Users\win7\AppData\Local\Temp\nsuD0F0.tmp
C:\Users\win7\AppData\Local\Temp\nsjD065.tmp
C:\Users\win7\AppData\Local\Temp\nsjD065.tmp\dead.exe
C:\Users\win7\AppData\Local\Temp\nsjD065.tmp\DivX_codec_updater.exe
C:\Users\win7\AppData\Local\Temp\nsjD065.tmp\setup.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\security.config.cch.2636.685609
C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\enterprisesec.config.cch.2636.685609
C:\Users\win7\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2636.685609
C:\Users\win7\AppData\Local\Temp\nsjB615.tmp
C:\Users\win7\AppData\Local\Temp\{441F2C4A-C520-425D-AC0A-E5BC4FFBF010}\fpb.tmp
C:\Users\win7\AppData\Local\Temp\nsr4A0D.tmp
C:\Users\win7\AppData\Local\Temp\nsr4AAB.tmp
C:\Users\win7\AppData\Local\Temp\nsl399D.tmp
C:\Users\win7\AppData\Local\Temp\nsq39BE.tmp
C:\Users\win7\AppData\Local\Temp\nsq39BE.tmp\nsb3B84.tmp
C:\Users\win7\AppData\Local\Temp\nsq5750.tmp
C:\Users\win7\AppData\Local\Temp\nsl5781.tmp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\security.config.cch.2796.593687
C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\enterprisesec.config.cch.2796.593687
C:\Users\win7\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2796.593687
C:\Users\win7\AppData\Local\Temp\psapi.dll
C:\Users\win7\AppData\Local\Temp\shlwapi.dll
C:\Users\win7\AppData\Local\Temp\msvcrt.dll
C:\Users\win7\AppData\Local\Temp\SiwIo.sys
C:\Users\win7\AppData\Local\Temp\WinIo.VxD
C:\Users\win7\AppData\Local\Temp\MoveHome.EXE
C:\Users\win7\AppData\Local\Temp\SIW.EXE
C:\Users\win7\AppData\Local\Temp\SiwIde.VxD
C:\Windows\TEMP\psapi.dll
C:\Windows\TEMP\shlwapi.dll
C:\Windows\TEMP\msvcrt.dll
C:\Windows\TEMP\SiwIo.sys
C:\Windows\TEMP\WinIo.VxD
C:\Windows\TEMP\MoveHome.EXE
C:\Windows\TEMP\SIW.EXE
C:\Windows\TEMP\SiwIde.VxD
__tmp_rar_sfx_access_check_640640
C:\Users\win7\AppData\Local\Temp\RarSFX0\Binaries\ChromeInstaller.exe
C:\Users\win7\AppData\Local\Temp\RarSFX0\Binaries\empty.localstorage
C:\Users\win7\AppData\Local\Temp\RarSFX0\Binaries\PremadeExtKey.data
C:\Users\win7\AppData\Local\Temp\RarSFX0\Binaries\update.xml
C:\Users\win7\AppData\Local\Temp\RarSFX0\Binaries\Binaries\manifest.json
C:\Users\win7\AppData\Local\Temp\RarSFX0\Binaries\Binaries\images\icon_19.png
C:\Users\win7\AppData\Local\Temp\RarSFX0\Binaries\Binaries\images\logo128.png
C:\Users\win7\AppData\Local\Temp\RarSFX0\Binaries\Binaries\images\logo16.png
C:\Users\win7\AppData\Local\Temp\RarSFX0\Binaries\Binaries\images\logo48.png
C:\Users\win7\AppData\Local\Temp\RarSFX0\Binaries\Binaries\scripts\background.js
C:\Users\win7\AppData\Local\Temp\RarSFX0\Binaries\Binaries\scripts\contentScript.js
C:\Users\win7\AppData\Local\Temp\RarSFX0\Binaries\Binaries\scripts\utils.js
C:\Users\win7\AppData\Local\Temp\RarSFX0\Binaries\Binaries\_metadata\computed_hashes.json
C:\Users\win7\AppData\Local\Temp\RarSFX0\Binaries\Binaries\_metadata\verified_contents.json
C:\Users\win7\AppData\Local\Temp\~temp.dat
C:\Users\win7\AppData\Local\Temp\7W8YDR\Sanal_Kumpas.swf$
C:\Users\win7\AppData\Local\Temp\7W8YDR\Flash_cons.ico$
C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol
C:\Users\win7\AppData\Local\Temp\{44EC31C6-C520-425D-AC0A-E5BC4FFBFF10}\fpb.tmp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\security.config.cch.2272.580359
C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\enterprisesec.config.cch.2272.580359
C:\Users\win7\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2272.580375
C:\Users\win7\AppData\Local\Temp\nscCF4.tmp
C:\Users\win7\AppData\Local\Temp\nssD05.tmp
C:\Users\win7\AppData\Local\Temp\nssD05.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\WER7B16.tmp
C:\Users\win7\AppData\Local\Temp\WER7B16.tmp.WERInternalMetadata.xml
C:\Users\win7\AppData\Local\Temp\~DF94F5E160108CE738.TMP
C:\Users\win7\AppData\Local\Temp\Cab3ACB.tmp
C:\Users\win7\AppData\Local\Temp\Tar3ACC.tmp
C:\Users\win7\AppData\Local\Temp\_is93E2.tmp
C:\Users\win7\AppData\Local\Temp\_is9A3D.tmp
C:\Users\win7\AppData\Local\Temp\~9A2D.tmp
C:\Users\win7\AppData\Local\Temp\nsa346.tmp
C:\Users\win7\AppData\Local\Temp\nsq357.tmp
C:\Users\win7\AppData\Local\Temp\nsq357.tmp\ns3A6.tmp
C:\Users\win7\AppData\Local\Temp\nsq357.tmp\nsExec.dll
C:\Users\win7\AppData\Local\Temp\nsq357.tmp\System.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\security.config.cch.1088.655609
C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\enterprisesec.config.cch.1088.655625
C:\Users\win7\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.1088.655640
C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\security.config.cch.1580.589562
C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\enterprisesec.config.cch.1580.589562
C:\Users\win7\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.1580.589578
C:\Users\win7\AppData\Local\Temp\~DF1C47A56D5FFB2173.TMP
C:\Users\win7\AppData\Local\Temp\nsb2435.tmp
C:\Users\win7\AppData\Local\Temp\nsw2501.tmp
C:\Users\win7\AppData\Local\Temp\618814647InstallerStarted
C:\Windows\Tasks\VideoTime.job
C:\Users\win7\AppData\Local\Temp\nsxAB97.tmp
C:\Users\win7\AppData\Local\Temp\nscABB7.tmp
C:\Users\win7\AppData\Local\Temp\6AD1DB49.dat
C:\Users\win7\AppData\Local\Temp\down.2664.1.ini.part
C:\Users\win7\AppData\Local\Temp\{07C171EC-5167-4901-ABEA-1945DC22531A}\Setup.ico
C:\Users\win7\AppData\Local\Temp\{07C171EC-5167-4901-ABEA-1945DC22531A}\Setup.exe
C:\Users\win7\AppData\Local\Temp\{07C171EC-5167-4901-ABEA-1945DC22531A}\Readme.txt
C:\Users\win7\AppData\Local\Temp\{07C171EC-5167-4901-ABEA-1945DC22531A}\Custom.dll
C:\Users\win7\AppData\Local\Temp\{07C171EC-5167-4901-ABEA-1945DC22531A}\_Setup.dll
C:\Users\win7\AppData\Local\Temp\{07C171EC-5167-4901-ABEA-1945DC22531A}\x64\regsvr32.exe
C:\Users\win7\AppData\Local\Temp\{07C171EC-5167-4901-ABEA-1945DC22531A}\x86\regsvr32.exe
C:\Users\win7\AppData\Local\Temp\Tsu5ED29E38.dll
C:\Users\win7\AppData\Local\Temp\nsb15AF.tmp
C:\Users\win7\AppData\Local\Temp\nsg15CF.tmp
C:\Users\win7\AppData\Local\Temp\nsg15CF.tmp\CityHash.dll
C:\Users\win7\AppData\Local\Temp\nsg15CF.tmp\System.dll
C:\Windows\Tasks\CoowonUpdateTaskUser.job
C:\Windows\Tasks\CoowonUpdateTaskUserS-1-5-21-3979321414-2393373014-2172761192-1000.job
C:\Users\win7\AppData\Local\Temp\HYD4881.tmp
C:\Users\win7\AppData\Local\Temp\utt4C99.tmp
C:\Users\win7\AppData\Local\Temp\utt4DE2.tmp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\security.config.cch.2804.603468
C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\enterprisesec.config.cch.2804.603468
C:\Users\win7\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2804.603484
C:\Users\win7\AppData\Local\Temp\Cab56DE.tmp
C:\Users\win7\AppData\Local\Temp\Tar56DF.tmp
C:\Users\win7\AppData\Local\Temp\nsg1706.tmp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\security.config.cch.948.607140
C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\enterprisesec.config.cch.948.607140
C:\Users\win7\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.948.607156
C:\Users\win7\AppData\Roaming\GetRightToGo\.data
C:\Users\win7\AppData\Roaming\GetRightToGo\.d000
C:\Users\win7\AppData\Local\Temp\nsr47A7.tmp
C:\Users\win7\AppData\Local\Temp\nsy4BC0.tmp
C:\Users\win7\AppData\Local\Temp\nsy4BC0.tmp\System.dll
__tmp_rar_sfx_access_check_650718
C:\Users\win7\AppData\Local\Temp\nsx42ED.tmp
C:\Users\win7\AppData\Local\Temp\nsn42FE.tmp
C:\Users\win7\AppData\Local\Temp\nsn42FE.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nsj804B.tmp
C:\Users\win7\AppData\Local\Temp\nso8108.tmp
C:\Users\win7\AppData\Local\Temp\nsz63D.tmp
C:\Users\win7\AppData\Local\Temp\nsp69D.tmp
C:\Program Files\Common Files\AhnLab\Ascrts\moduler.scd
C:\Program Files\Common Files\AhnLab\Ascrts\modules.scd
C:\Program Files\Common Files\AhnLab\aszrts\moduler.scd
C:\Program Files\Common Files\AhnLab\aszrts\modules.scd
C:\Users\win7\AppData\Local\Temp\nscB24C.tmp
C:\Users\win7\AppData\Local\Temp\nsxB2CB.tmp
C:\Users\win7\AppData\Local\Temp\nsp44DD.tmp
C:\Users\win7\AppData\Local\Temp\nsf458B.tmp
C:\Users\win7\AppData\Local\Temp\control.xml
C:\Users\win7\AppData\Local\Temp\nse4BE8.tmp
C:\Users\win7\AppData\Local\Temp\nsj4C57.tmp
C:\Windows\sysnative\\drivers\etc\hosts
C:\Users\win7\AppData\Local\Temp\yjvbremodic8zu7ypkjnigwi.exe
C:\Users\win7\AppData\Roaming\mssecurity\svchost.exe:Zone.Identifier
C:\Windows\system32\Log.txt
C:\Users\win7\AppData\Local\Temp\nspAE0B.tmp
C:\Users\win7\AppData\Local\Temp\nsvAE2D.tmp
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TextPad.lnk
C:\Users\win7\Desktop\TextPad.lnk
C:\Users\win7\AppData\Roaming\Microsoft\Windows\SendTo\TextPad.lnk
C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TextPad.lnk
C:\Users\win7\AppData\Local\Temp\nsy84D8.tmp
C:\Users\win7\AppData\Local\Temp\nsq8893.tmp
C:\Users\win7\AppData\Local\Temp\GLBBE7F.tmp
C:\Users\win7\AppData\Local\Temp\Creative_ALchemy_AL6_Cleanup.0001.dir.0000\PfdRun.pfd
C:\Users\win7\AppData\Local\Temp\nsjA7E7.tmp
C:\Users\win7\AppData\Local\Temp\nsdF437.tmp
C:\Users\win7\AppData\Local\Temp\nsb945F.tmp
C:\Users\win7\AppData\Local\Temp\nsc7DBB.tmp\inetc.dll
C:\Users\win7\AppData\Local\Temp\nsc7DBB.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\cetrainers\CET27C6.tmp
C:\Users\win7\AppData\Local\Temp\cetrainers\CET27C6.tmp\CET_TRAINER.CETRAINER
C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\security.config.cch.3064.740515
C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\enterprisesec.config.cch.3064.740515
C:\Users\win7\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.3064.740531
C:\Users\win7\AppData\Local\Temp\~DF21D832D2752A94D4.TMP
C:\Users\win7\AppData\Local\Temp\nsyBD20.tmp
C:\Users\win7\AppData\Local\Temp\nsyBD6F.tmp
C:\Users\win7\AppData\Local\Temp\nsyBD6F.tmp\KillProcWMI.dll
C:\Users\win7\AppData\Local\Temp\nsyBD6F.tmp\modern-header.bmp
C:\Users\win7\AppData\Local\Temp\nsyBD6F.tmp\modern-wizard.bmp
C:\Users\win7\AppData\Local\Temp\nsyBD6F.tmp\nsDialogs.dll
C:\Users\win7\AppData\Local\Temp\nsyBD6F.tmp\System.dll
C:\Users\win7\AppData\Local\Temp\nssC046.tmp
C:\Users\win7\AppData\Local\Temp\nsiC141.tmp
Precise Detectors Analysis Results
No Detector Result Received
Advance Heuristics
No Advanced Heuristic Analysis Result Received
Additional File Information
Property | Value |
---|
Name | Virtual Address | Virtual Size | Raw Size | Entropy | MD5 |
---|