C:\Users\win7\AppData\Local\Temp\013c8edc16128c116f00beee1fe56d21\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\is-N9LB8.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\nsy247C.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsq1EDE.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\325f6ef1eb345d57019b1a43de33cbb2\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\nsi190A.tmp\SimpleSC.dll

C:\Users\win7\AppData\Roaming\Microsoft\Blend\14.0\FeedCache\xpsrchw.exe

C:\Users\win7\AppData\Local\Temp\nsw9718.tmp\SimpleSC.dll

C:\Windows\GeoOCX\WebCam\20090916\ImageGUI.dll

C:\Users\win7\AppData\Local\Temp\nsp78B3.tmp\V8._85296_20150814221218.exe

C:\Users\win7\AppData\Local\Temp\7zS77D6.tmp\515f52bb88450.exe

C:\Users\win7\AppData\Local\Temp\nsz58CB.tmp\SimpleSC.dll

C:\ProgramData\Soearcho--NewTeAb\515f05c5b9edb.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\setup.exe

C:\Users\win7\AppData\Local\Temp\is-A86TG.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\is-LJK8F.tmp\sample.tmp

C:\Windows\syswow64\oleaut32.dll

C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_50916076bcb9a742\MSVCR90.dll

C:\Users\win7\AppData\Local\Temp\nshC833.tmp\SimpleSC.dll

C:\Windows\GeoOCX\WebCam\20090916\GVMegaPixelViewer.dll

C:\Users\win7\AppData\Local\Temp\is-4KG8T.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\3b3466ef1cb588b8fa4e82447de17686\preinstaller.exe

C:\Windows\SysWOW64\Wbem\WMIC.exe

C:\Users\win7\AppData\Local\Temp\622210edd7d2b5052ce79dc1b1dcd9d6\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsgBB49.tmp\checktbexist.exe

C:\Users\win7\AppData\Local\Temp\4ae6cf3c7fbd3414df26e8400c7d510e\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\ithttp.dll

C:\Users\win7\AppData\Local\Temp\nsz8333.tmp\SimpleSC.dll

C:\Windows\SysWOW64\svchost.exe

C:\Users\win7\AppData\Local\Temp\is-OTV7R.tmp\is-NQO4R.tmp

C:\Windows\system32\d3d11.dll

C:\Users\win7\AppData\Local\Temp\nsoE348.tmp\setup_31011.exe

C:\Users\win7\AppData\Local\Tempfolder\QiiorAsikv\RoubFedeseu.exe

C:\Users\win7\AppData\Local\Temp\4e2a1aff004f49a5e8fa911f735a399c\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\nsm16E4.tmp\7za.exe

C:\Users\win7\AppData\Local\Temp\pftD7AF~tmp\Disk1\Setup.exe

C:\Users\win7\AppData\Local\Temp\pftB084.tmp\Disk1\Setup.exe

C:\Users\win7\AppData\Local\Temp\9b30ab17762cfe32075060c38291a895\preinstaller.exe

C:\Windows\system32\propsys.dll

C:\Users\win7\AppData\Local\Temp\e873621278eb045fa3d6cb0e9d983d10\preinstaller.exe

C:\Windows\syswow64\shlwapi.DLL

C:\Users\win7\AppData\Local\Temp\nsb1ECF.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-CQABJ.tmp\is-H9UQD.tmp

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp

C:\Windows\GeoOCX\WebCam\20090916\eMapView.ocx

C:\Users\win7\AppData\Local\Temp\nsoE348.tmp\V8._85296_20150814221218.exe

C:\Users\win7\AppData\Local\Temp\fefa3aaf94374590437d72a7b328196e\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Tempfolder\ZicicHhli\MexosiShmoc.exe

C:\Users\win7\AppData\Local\Temp\68fecef9577b6548cd9f9c89137e6238\preinstaller.exe

C:\Windows\syswow64\ole32.DLL

C:\Users\win7\AppData\Roaming\Microsoft\MSXML2\msxml4.dll

C:\Users\win7\AppData\Local\Temp\is-2D315.tmp\sample.tmp

C:\Windows\syswow64\profapi.dll

C:\Users\win7\AppData\Local\Temp\is-7OHN6.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\fefa3aaf94374590437d72a7b328196e\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\is-JKHB7.tmp\sample.tmp

C:\Windows\SysWOW64\regsvr32.exe

C:\Windows\system32\ebkp.dll

C:\ProgramData\R0OSKF.exe

C:\Users\win7\AppData\Local\Temp\nsm2FAC.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsr3019.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Tempfolder\PunepyRiyaqi\KyvtokDuq.exe

C:\Users\win7\AppData\Local\Temp\pft3E71.tmp\setup.exe

C:\Users\win7\AppData\Local\Temp\nsh2EF1.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nskCCD2.tmp\SimpleSC.dll

C:\Windows\system32\DINPUT.DLL

C:\Users\win7\AppData\Local\Temp\nss17EE.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\ac85e0056038215dc4e484ecc5b69fbe\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsz78A3.tmp\SimpleSC.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\dw20.exe

C:\Users\win7\AppData\Local\Temp\71d8cec149ec9115178e8020d4510ae0\downloaderDDLR.exe

C:\Users\win7\AppData\Local\Temp\nsd594F.tmp\nsislog.dll

C:\Users\win7\AppData\Local\Temp\b82b985bee9cc6a610d7c50fc7373126\preinstaller.exe

C:\Windows\syswow64\WININET.dll

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\Ksicfg.dll

C:\Users\win7\AppData\Local\Temp\is-HH893.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\7zSB2EF.tmp\515f05cb479e3.exe

C:\Windows\system32\RICHED20.dll

C:\Windows\GeoOCX\WebCam\20090916\Setup.exe

C:\Users\win7\AppData\Local\Temp\nsh223F.tmp\SimpleSC.dll

C:\Windows\winhlp32.exe

c:\2bbba39a5fce003b322b2010\update\update.exe

C:\Users\win7\AppData\Local\Temp\is-HHG9D.tmp\is-PS2RH.tmp

C:\Users\win7\AppData\Local\Temp\nsp8601.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsl7B53.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\botva2.dll

C:\Users\win7\AppData\Local\Temp\nsc30F4.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\9b30ab17762cfe32075060c38291a895\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\is-U098A.tmp\sample.tmp

C:\Users\win7\AppData\Local\Tempfolder\LiurloUwodmue\WauqJokvud.exe

C:\Windows\syswow64\CFGMGR32.dll

C:\Windows\system32\DMDSKMGR.dll

C:\Windows\SysWOW64\Wbem\wmic.exe

C:\Users\win7\AppData\Local\Temp\nsfC49.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\gert0.dll

C:\Windows\SysWOW64\rundll32.exe

C:\Windows\system32\msimg32.dll

C:\Users\win7\AppData\Local\Tempfolder\ImyubaWob\ReojatGegaiv.exe

C:\Users\win7\AppData\Local\Temp\nsc2358.tmp\SimpleSC.dll

C:\Windows\system32\msi.dll

C:\Users\win7\AppData\Local\Temp\nsg84CC.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\000a40c1.a

C:\Users\win7\AppData\Local\Temp\nsd70C7.tmp\SimpleSC.dll

C:\Windows\system32\winmm.dll

C:\Users\win7\AppData\Local\Temp\nsw7C2E.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-N1BG4.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\is-VLHR2.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\nsq76D2.tmp\SimpleSC.dll

C:\Windows\system32\wsock32.dll

C:\Users\win7\AppData\Local\Temp\tmp.exe

C:\Windows\syswow64\USERENV.dll

C:\Windows\syswow64\comdlg32.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll

C:\Windows\system32\werui.dll

C:\Windows\syswow64\SETUPAPI.dll

C:\Windows\SysWOW64\cmd.exe

C:\Users\win7\AppData\Local\Temp\nsd1917.tmp\north.exe

C:\Windows\syswow64\kernel32.dll

C:\Users\win7\AppData\Local\Temp\nsd8219.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsc13AE.tmp\SimpleSC.dll

C:\Users\win7\Documents\MSDCSC\msdcsc.exe

C:\ProgramData\fiH8GW.exe

C:\Windows\system32\ADVPACK.DLL

C:\Users\win7\AppData\Local\Temp\nsl1D39.tmp\SimpleSC.dll

C:\Windows\system32\MSVBVM60.DLL

C:\Users\win7\AppData\Local\Temp\nsg206A.tmp\SkinH.DLL

C:\Users\win7\AppData\Local\Temp\nsk1DCA.tmp\cpSetup.exe

C:\Users\win7\AppData\Local\Temp\nsz9033.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\ac85e0056038215dc4e484ecc5b69fbe\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\7zS7BFD.tmp\515f05ca0c035.exe

C:\Users\win7\AppData\Local\Temp\nstF103.tmp\SimpleSC.dll

C:\Windows\system32\hhctrl.ocx

C:\Windows\GeoOCX\WebCam\20090916\GvCrypto.dll

C:\Users\win7\AppData\Local\Temp\nslAE1B.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsw399A.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsm2F5E.tmp\SimpleSC.dll

C:\ProgramData\BBroowsee2save\515f52b8125e4.dll

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\botva2.dll

C:\Users\win7\AppData\Local\Temp\f2da611710f7fa687bb7d99d2b938369\preinstaller.exe

C:\Windows\system32\mpr.dll

C:\Users\win7\AppData\Local\Temp\71d8cec149ec9115178e8020d4510ae0\downloaderOFFER1.exe

C:\Windows\system32\twext.dll

C:\Users\win7\AppData\Local\Temp\nss31EE.tmp\SimpleSC.dll

C:\Windows\GeoOCX\WebCam\20090916\LiveX_8320.ocx

C:\Windows\SysWOW64\SCHTASKS.exe

C:\Users\win7\AppData\Local\Temp\nsa1D48.tmp\SimpleSC.dll

C:\Windows\syswow64\LPK.dll

C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d\comctl32.dll

C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18834_none_72d38c5186679d48\GDIPLUS.DLL

C:\Users\win7\AppData\Local\Temp\8353107b4a7ee1912afdcc36da509643\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\Ksicfg.dll

C:\Users\win7\AppData\Local\Temp\is-KJ4HI.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\226fda2318382dfba2850343961c3116\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsrD5FC.tmp\cpSetup.exe

C:\Users\win7\AppData\Local\Tempfolder\EosolfHovha\ZicnaIjav.exe

C:\Windows\System32\msxml6.dll

C:\Users\win7\AppData\Local\Tempfolder\VeicfBubhoxn\AruundNulnio.exe

C:\Windows\SysWOW64\ntdll.dll

C:\Users\win7\AppData\Local\Temp\is-I1FLQ.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\nsa73C0.tmp\SimpleSC.dll

C:\Windows\syswow64\SHELL32.dll

C:\Users\win7\AppData\Local\Temp\nsp78B3.tmp\setup_31011.exe

C:\Windows\system32\RichEd20.dll

C:\Users\win7\AppData\Local\Temp\is-FD9AA.tmp\sample.tmp

C:\Users\win7\AppData\Local\Tempfolder\ShraHas\FakboMumvu.exe

C:\Users\win7\AppData\Local\Temp\nsa753C.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsz761B.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsc6EA4.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsh21AD.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-B8GN7.tmp\sample.tmp

C:\Windows\system32\oleacc.dll

C:\Windows\syswow64\urlmon.dll

C:\Windows\syswow64\shell32.dll

C:\Users\win7\AppData\Local\Folder\windows.exe

C:\Users\win7\AppData\Local\Temp\nsg2DB8.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\ZapSpot.exe

C:\Users\win7\AppData\Local\Temp\GLC744F.tmp

C:\Users\win7\AppData\Roaming\subfolder\rerb.scr

C:\Users\win7\AppData\Local\Temp\ffb9bc25e938db9aa79cfac8ccf48c15\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsv37BB.tmp\a97db507-fa53-474b-870e-0e4ef6b2e105.dll

C:\Users\win7\AppData\Local\Temp\nsq829A.tmp\SimpleSC.dll

C:\Windows\syswow64\USER32.dll

C:\Users\win7\AppData\Local\Temp\nsp2883.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nse1C72.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\68fecef9577b6548cd9f9c89137e6238\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\nszE55B.tmp\SimpleSC.dll

C:\ProgramData\BrouwsEe2save\515f5b4a5a364.dll

C:\ProgramData\kJopnp.exe

C:\Users\win7\AppData\Local\Temp\is-JR7C5.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\nsx255B.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsjB723.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsy90EA.tmp\SimpleSC.dll

C:\Windows\SYSTEM32\MSCOREE.DLL

C:\Users\win7\AppData\Local\Temp\nsb2ED1.tmp\SimpleSC.dll

C:\sample

C:\Users\win7\AppData\Local\Temp\nsw20D2.tmp\SimpleSC.dll

C:\Windows\system32\GLU32.dll

C:\Windows\GeoOCX\WebCam\20090916\GeoEditAVIDllV2.dll

C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18834_none_72d38c5186679d48\GDIPlus.DLL

C:\Users\win7\AppData\Local\Temp\GLK76A3.tmp

C:\Users\win7\AppData\Local\Temp\nsb21D1.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\7zS55DB.tmp\515f05c5b9ea2.exe

C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll

C:\Users\win7\AppData\Local\Temp\is-0SC4M.tmp\is-FTU3B.tmp

C:\Windows\SysWOW64\schtasks.exe

C:\Windows\SysWOW64\quartz.dll

C:\Windows\system32\dxgi.dll

C:\Windows\GeoOCX\WebCam\20090916\GeoDDrawV2.dll

C:\Users\win7\AppData\Local\Tempfolder\QegmaNudp\HuiagbFoopro.exe

C:\Users\win7\AppData\Local\Temp\nsj726D.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsfB523.tmp\SimpleSC.dll

C:\Windows\syswow64\DEVOBJ.dll

C:\Users\win7\AppData\Local\Tempfolder\MihkoObinza\IbolrFirbeti.exe

C:\Windows\syswow64\GDI32.dll

C:\Users\win7\AppData\Local\Temp\nsj8371.tmp\SimpleSC.dll

C:\Windows\system32\EhStorShell.dll

C:\Users\win7\AppData\Local\Tempfolder\VekaWem\YghaPigdi.exe

C:\Windows\system32\DNSAPI.dll

C:\Windows\GeoOCX\WebCam\20090916\LiveClient_8200.dll

C:\Users\win7\AppData\Local\Temp\nsq1D0A.tmp\SimpleSC.dll

C:\Windows\system32\MSFTEDIT.DLL

C:\Windows\system32\RichEd20.DLL

C:\Users\win7\AppData\Local\Temp\f2cc559679c8d17d7bf9c117baf6aa0a\preinstaller.exe

C:\ProgramData\Barowasse2saave\515f05cb47a1c.dll

C:\Users\win7\AppData\Local\Temp\nskA7A6.tmp\SimpleSC.dll

C:\Windows\syswow64\USP10.dll

C:\Users\win7\AppData\Local\Temp\nsd594F.tmp\wTask.exe

C:\Users\win7\AppData\Local\Temp\nsh4855.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\b4e8c2bf475e972ff1129a25635128c5\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsp1D4D.tmp\SimpleSC.dll

C:\Windows\system32\aclui.dll

C:\Users\win7\AppData\Local\Temp\sfx1\_bbg.exe

C:\Windows\system32\crtdll.dll

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\Ksicfg.dll

C:\Users\win7\AppData\Local\Temp\fe9505b7f8b60bc6e1a74dc5c757fe1e\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\nsg2E54.tmp\SimpleSC.dll

C:\Windows\GeoOCX\WebCam\20090916\GvClient_8200.ocx

C:\Users\win7\AppData\Local\Temp\cetrainers\CETEAD5.tmp\extracted\sample

C:\Users\win7\AppData\Local\Temp\nss559E.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsj1BA7.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-J8BHU.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\nsmC906.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\d06fcbb59363a1adb6768ef5c595d7c2\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\nsj350B.tmp\4f6ea680-bfc5-40ae-80ef-f992aa74653f.dll

C:\Users\win7\AppData\Local\Temp\nsc2FBC.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nso5FD6.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsc3142.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsi70E6.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsx2EBD.tmp\SimpleSC.dll

C:\Windows\System32\msxml3.dll

C:\Users\win7\AppData\Local\Temp\nsz32B5.tmp\SimpleSC.dll

C:\Windows\SysWOW64\sechost.dll

C:\Users\win7\AppData\Local\Temp\3b3466ef1cb588b8fa4e82447de17686\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\nsr1F7B.tmp\SimpleSC.dll

C:\Windows\system32\ntshrui.dll

C:\Users\win7\AppData\Roaming\subfolder\filename.exe

C:\Users\win7\AppData\Local\Temp\nsw852A.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\151.exe

C:\Users\win7\AppData\Local\Temp\nss8054.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsrACF5.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Tempfolder\ZoidpOsi\FaopxuWhhagpa.exe

C:\Users\win7\AppData\Local\Temp\nsr2EE1.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsu717E.tmp\SimpleSC.dll

C:\Windows\GeoOCX\WebCam\20090916\POSLiveViewX_8198.ocx

C:\Users\win7\AppData\Local\Temp\is-JVQIJ.tmp\sample.tmp

c:\2bbba39a5fce003b322b2010\upd

C:\Users\win7\AppData\Local\Temp\441cc7d4765d61e4190dc8ce3e1a74a1\downloaderOFFER1.exe

C:\Windows\system32\WINMM.dll

C:\Users\win7\AppData\Local\Tempfolder\WikaaPavnu\OdapGhy.exe

C:\Windows\syswow64\api-ms-win-downlevel-user32-l1-1-0.dll

C:\Users\win7\AppData\Local\Tempfolder\VoivvTieci\RevhGaa.exe

C:\Users\win7\AppData\Local\Temp\ginstall.dll

C:\Windows\system32\IMM32.DLL

C:\Windows\system32\DUser.dll

C:\Users\win7\AppData\Local\Temp\36a29030561d6dd54640db33f63123e2\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\FsmSetup\Install.exe

C:\Windows\system32\syncui.dll

C:\Users\win7\AppData\Local\Temp\nsa7AC6.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\c634e7f446ed0baaaffb97e9c00223b7\downloaderOFFER1.exe

C:\Windows\system32\mscoree.dll

C:\Users\win7\AppData\Local\Temp\nss7ACA.tmp\SimpleSC.dll

C:\Windows\SysWOW64\jscript9.dll

C:\Users\win7\AppData\Local\Temp\nsm225E.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\004cf942.a

C:\Users\win7\AppData\Local\Temp\5a6e0d7e7fb82588b081b16c0bd88029\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsm7EFC.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\4ae6cf3c7fbd3414df26e8400c7d510e\preinstaller.exe

C:\Windows\system32\riched20.dll

C:\Users\win7\AppData\Local\Temp\013c8edc16128c116f00beee1fe56d21\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\Creative_ALchemy_AL6_Cleanup.0001.dir.0000\~df394b.tmp

C:\sxe9812.tmp

C:\Windows\system32\DDRAW.dll

C:\Users\win7\AppData\Local\Temp\IXP000.TMP\B.exe

C:\Users\win7\AppData\Local\Temp\nsh2027.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsg6C03.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\~nsu.tmp\Au_.exe

C:\Windows\syswow64\api-ms-win-downlevel-normaliz-l1-1-0.dll

C:\Users\win7\AppData\Local\Temp\ginst0.dll

C:\Windows\system32\ODBC32.DLL

C:\Users\win7\AppData\Local\Temp\4d817503ee65560a8dcdb650fa6add61\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\nspA63F.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\7zS7336.tmp\515f52b8125c4.exe

C:\Users\win7\AppData\Local\Temp\nsy25F8.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsg1FD8.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nst703B.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\9c2704c22ceab0ebc352c74d631e8669\downloaderOFFER1.exe

C:\CFVS_HookDll.dll

c:\da8df086ca54f7fdd325c4\update\update.exe

C:\Windows\syswow64\CRYPT32.dll

C:\Users\win7\AppData\Local\Temp\7fa4afec6c5bbf4ae0e9f0a6485532ac\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\tsldrl6660\setup.exe

C:\Windows\SysWOW64\cmd.execf

C:\Windows\GeoOCX\WebCam\20090916\IA_VIDEO.dll

C:\Windows\syswow64\NSI.dll

C:\Users\win7\AppData\Local\Temp\nsn8BFD.tmp\SimpleSC.dll

C:\Windows\syswow64\KERNELBASE.dll

C:\Users\win7\AppData\Local\Temp\nse724E.tmp\SimpleSC.dll

C:\sxe19DB.tmp

C:\Users\win7\AppData\Local\Temp\nsv1EA5.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsl4DF3.tmp\SimpleSC.dll

C:\Windows\system32\winspool.drv

C:\Users\win7\AppData\Local\Tem

C:\Users\win7\AppData\Local\Temp\PB7DC5.tmp

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\ithttp.dll

C:\Users\win7\AppData\Local\Temp\nsyB022.tmp\SimpleSC.dll

C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc\MSVCR80.dll

C:\Windows\SysWOW64\cryptnet.dll

C:\Users\win7\AppData\Local\Temp\nswC408.tmp\SimpleSC.dll

C:\Windows\syswow64\api-ms-win-downlevel-advapi32-l1-1-0.dll

C:\Users\win7\AppData\Local\Temp\622210edd7d2b5052ce79dc1b1dcd9d6\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\IXP000.TMP\M.exe

C:\Windows\system32\UXTHEME.DLL

C:\Users\win7\AppData\Local\Temp\nsmC422.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\Ksicfg.dll

c:\da8df086ca54f7fdd325c4\updat

C:\Windows\system32\DSound.dll

C:\Users\win7\AppData\Local\Temp\is-HDJS0.tmp\is-9FF4K.tmp

C:\Users\win7\AppData\Local\Temp\Set7B32.tmp

C:\ProgramData\BBroowsee2save\515f52bb88489.dll

C:\Users\win7\AppData\Local\Temp\nss95B4.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsm7EAE.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsc20F2.tmp\SimpleSC.dll

C:\Windows\GeoOCX\WebCam\20090916\PtzStick_Parser.dll

C:\Users\win7\AppData\Local\Temp\7zS2C7E.tmp\515f5b4a5a32e.exe

C:\Users\win7\AppData\Local\Temp\Creative_ALchemy_AL6_Cleanup.0001

C:\Windows\syswow64\MSCTF.dll

C:\Windows\syswow64\RPCRT4.dll

C:\Windows\system32\opengl32.dll

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\botva2.dll

C:\Windows\syswow64\ADVAPI32.dll

C:\Users\win7\AppData\Local\Temp\nsaE650.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsjA6FF.tmp\SimpleSC.dll

C:\Windows\system32\LZ32.DLL

C:\Windows\SysWOW64\MSIEXEC.EXE

C:\Users\win7\AppData\Local\Temp\nsf795F.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\IML32.dll

C:\Users\win7\AppData\Local\Temp\nsi324C.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Tempfolder\FonbOmacd\NijosoBeelta.exe

C:\Users\win7\AppData\Local\Temp\nshF05B.tmp\2c373164-efdd-4a23-bcae-d359c2f35578.dll

C:\Users\win7\AppData\Local\Temp\nsw9592.tmp\SimpleSC.dll

C:\Windows\syswow64\msvcrt.dll

C:\Users\win7\AppData\Local\Temp\f2da611710f7fa687bb7d99d2b938369\downloaderOFFER1.exe

C:\Windows\svchost.exe

C:\Users\win7\AppData\Local\Temp\ef9f727098f02eb359d2c1dac93f30ee\preinstaller.exe

C:\Windows\system32\version.DLL

C:\Users\win7\AppData\Local\Temp\nsc7BA4.tmp\SimpleSC.dll

C:\Windows\GeoOCX\WebCam\20090916\RPB_8300.ocx

C:\Users\win7\AppData\Local\Temp\nsb4835.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-ACBJR.tmp\itdownload.dll

C:

C:\Users\win7\AppData\Local\Temp\3db95c0d2bab524b5259c84257550ed1\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsn31CF.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsw2164.tmp\SimpleSC.dll

C:\Windows\system32\RICHED20.DLL

C:\32788R22FWJFW\swreg.exe

C:\Users\win7\AppData\Local\Temp\7fa4afec6c5bbf4ae0e9f0a6485532ac\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\is-1M7DH.tmp\sample.tmp

C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18834_none_72d38c5186679d48\gdiplus.dll

C:\Users\win7\AppData\Local\Temp\ActSys\SSL\import_root_cert.exe

C:\Users\win7\AppData\Local\Temp\nsv2B09.tmp\SimpleSC.dll

C:\Windows\system32\msftedit.DLL

C:\Users\win7\AppData\Local\Temp\nsg1DB6.tmp\SimpleSC.dll

C:\Windows\syswow64\OLEAUT32.dll

C:\Users\win7\AppData\Local\Temp\nsm2FF9.tmp\GetPrivateInstaller_woautorun.exe

C:\Users\win7\AppData\Local\Temp\nsu8F4C.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsa7A29.tmp\nsRandom.dll

C:\Windows\system32\DSOUND.dll

C:\Users\win7\AppData\Local\Temp\is-ACBJR.tmp\innocallback.dll

C:\Users\win7\AppData\Local\Temp\nsv7607.tmp\SimpleSC.dll

C:\Windows\system32\CRTDLL.dll

C:\Users\win7\AppData\Local\Tempfolder\DoltuJonisep\MufjCucgi.exe

C:\Users\win7\AppData\Local\Tempfolder\UlynWioaa\NyjgitAcuifz.exe

C:\Users\win7\AppData\Local\Temp\nst1AFB.tmp\SimpleSC.dll

C:\Windows\system32\olepro32.dll

C:\Windows\system32\MSHTML.DLL

C:\Users\win7\AppData\Local\Temp\nsq7C0E.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Tempfolder\MycoVifazo\LanfVydnau.exe

C:\Windows\system32\cryptnet.dll

C:\Users\win7\AppData\Local\Temp\b82b985bee9cc6a610d7c50fc7373126\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\3db95c0d2bab524b5259c84257550ed1\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\nsq4F84.tmp\setupcl.exe

C:\Users\win7\AppData\Local\Temp\nsy92DC.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\ffb9bc25e938db9aa79cfac8ccf48c15\downloaderOFFER1.exe

C:\Windows\system32\MSCOREE.DLL

C:\Users\win7\AppData\Local\Temp\nsi3082.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsa330E.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\d06fcbb59363a1adb6768ef5c595d7c2\preinstaller.exe

C:\Windows\syswow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll

C:\Users\win7\AppData\Local\Temp\nsz7EE1.tmp\SimpleSC.dll

C:\Windows\syswow64\normaliz.DLL

C:\Windows\GeoOCX\WebCam\20090916\GeoWatermark.dll

C:\Windows\syswow64\api-ms-win-downlevel-ole32-l1-1-0.dll

C:\Windows\syswow64\SspiCli.dll

C:\Users\win7\AppData\Local\Temp\nss1926.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nso26A4.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsa85A4.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\9c2704c22ceab0ebc352c74d631e8669\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\4e2a1aff004f49a5e8fa911f735a399c\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\nse73D4.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\441cc7d4765d61e4190dc8ce3e1a74a1\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsx2FEB.tmp\SimpleSC.dll

C:\Windows\GeoOCX\WebCam\20090916\DMPTZControlDLL.dll

C:\Windows\system32\ieframe.DLL

C:\Users\win7\AppData\Local\Temp\f2cc559679c8d17d7bf9c117baf6aa0a\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\64b86246e9aa3fa79b9535db49b20b8d\downloaderOFFER1.exe

C:\Windows\system32\ODBC32.dll

C:\Users\win7\AppData\Local\Temp\Trojan.exe

C:\Users\win7\AppData\Local\Temp\GLCE8F.tmp

C:\Windows\system32\SXS.DLL

C:\Users\win7\AppData\Local\Temp\nsw892E.tmp\SimpleSC.dll

C:\Windows\system32\ieframe.dll

C:\Windows\SysWOW64\DDRAW.dll

C:\Users\win7\AppData\Local\Temp\325f6ef1eb345d57019b1a43de33cbb2\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsd3015.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-E5SNR.tmp\sample.tmp

C:\Windows\system32\D3D10Warp.dll

C:\Windows\system32\dwmapi.dll

C:\Windows\syswow64\WS2_32.dll

C:\Users\win7\AppData\Local\Temp\nse8250.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-TLF8K.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\000a3d85.a

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\beepdl.dll

C:\Users\win7\AppData\Local\Temp\GLKFD8.tmp

C:\Users\win7\AppData\Local\Temp\nsa41D8.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nse7338.tmp\SimpleSC.dll

C:\Windows\system32\quartz.dll

C:\Users\win7\AppData\Local\Temp\nsc230A.tmp\cpSetup.exe

C:\Users\win7\AppData\Local\Temp\nsn2607.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Tempfolder\ortmp\orion.exe

C:\Users\win7\AppData\Local\Temp\is-NAM86.tmp\sample.tmp

C:\Windows\SysWOW64\schannel.dll

C:\Users\win7\AppData\Local\Temp\ab5d4243cc93ed6bbca90dd95ca61177\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\fe9505b7f8b60bc6e1a74dc5c757fe1e\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\mss863E.tmp

C:\Users\win7\AppData\Local\Temp\nsk1DCA.tmp\nsRandom.dll

{�a��

C:\Windows\system32\MSHTML.dll

C:\Windows\GeoOCX\WebCam\20090916\RPBAudio.ocx

C:\Users\win7\AppData\Local\Temp\nsi2F54.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsy4046.tmp\SimpleSC.dll

C:\Windows\syswow64\api-ms-win-downlevel-version-l1-1-0.dll

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\botva2.dll

C:\Users\win7\AppData\Local\Temp\ab5d4243cc93ed6bbca90dd95ca61177\preinstaller.exe

C:\sample.01

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\beepdl.dll

C:\Users\win7\AppData\Local\Temp\nsj1BF5.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nss6E66.tmp\SimpleSC.dll

C:\Windows\system32\acppage.dll

C:\Users\win7\AppData\Local\Temp\nsx250D.tmp\SimpleSC.dll

C:\Windows\SysWOW64\mshtml.dll

C:\Windows\SysWOW64\ieframe.dll

C:\Windows\system32\DCIMAN32.dll

C:\Windows\system32\PROPSYS.dll

C:\Windows\SysWOW64\DUser.dll

C:\Windows\syswow64\iertutil.dll

C:\Users\win7\AppData\Local\Temp\c634e7f446ed0baaaffb97e9c00223b7\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsr2F7D.tmp\SimpleSC.dll

C:\ProgramData\Barowasse2saave\515f05ca0c06e.dll

C:\Users\win7\AppData\Local\Temp\nsa7674.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\64b86246e9aa3fa79b9535db49b20b8d\preinstaller.exe

C:\Windows\syswow64\CRYPTBASE.dll

C:\Users\win7\AppData\Local\Temp\nsm7E60.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsy1A30.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\ef9f727098f02eb359d2c1dac93f30ee\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\minidownload.exe

C:\Users\win7\AppData\Local\Temp\VSD492D.tmp\DotNetFX\dotnetchk.exe

C:\Windows\GeoOCX\WebCam\200909

C:\Windows\syswow64\crypt32.dll

C:\Users\win7\AppData\Local\Temp\nso34DC.tmp\SimpleSC.dll

C:\Windows\system32\SearchFolder.dll

C:\Windows\system32\CRTDLL.DLL

C:\Users\win7\AppData\Local\Temp\nsh7DA5.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsuA912.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsr4717.tmp\SimpleSC.dll

C:\Windows\system32\TAPI32.dll

C:\Users\win7\AppData\Local\Temp\4d817503ee65560a8dcdb650fa6add61\downloaderOFFER1.exe

C:\DLL_Loader.exe

EnableSpdyDebugAsserts

Compatible

AutoConfigURL

<NULL>

DOMStorage

Plane15

ScavengeCacheFileLimit

Version

SIG

SystemSetupInProgress

WpadDns

WpadDecision

Plane12

MS Shell Dlg 2

WriteProtect

ILDependencies

TotalLimit

LegacyPolicyTimeStamp

Expand Alt Text

NIUsageMask

SavedLegacySettings

DefaultConnectionSettings

SqmHttpStreamRandomUploadPoolSize

SendTimeOut

ConnectRetries

DuoProtocols

Disable

WpadDecisionTime

MixedContentBlockImages

ConfigString

InstallRoot

ConfigMask

Plane14

Status

KeepAliveTimeout

Plane2

WpadExpirationDays

DataFilePath

Plane8

SystemProductName

Plane5

WarnOnBadCertRecving

DbgManagedDebugger

EvalationData

LastModTime

Enable AutoImageResize

SessionMerging

UrlEncoding

WarnOnZoneCrossing

System.Windows.Forms

DontUseDNSLoadBalancing

DisableSecuritySettingsCheck

IECompatVersionLow

IEPropFontName

IsTextPlainHonored

FrameTabWindow

CacheLocation

Plane11

PreResolveLimit

CVListXMLVersionLow

NIDependencies

Password

SecureProtocols

AdminTabProcs

XDomainRequest

ClientAuthBuiltInUI

MinimumSystemTimerResolution

VML

Plane4

ButtonsText

WarnOnPostRedirect

NoDrives

Plane6

SyncMode5

Modules

IESerifFontName

CreateUriCacheSize

Plane10

DnsCacheEntries

EnablePrivateObjectHeap

ContextLimit

IEFixedFontName

index1

WpadDetectedUrl

NavigationDelay

WpadDhcp

Microsoft.VisualBasic

Display Inline Videos

TRACE_CLUSTER

TRACE_TRACE

Plane13

SpecialFoldersCacheSize

Use_DlgBox_Colors

MaxConnectionsPerProxy

LoggingLevel

MaxConnectionsPer1_0Server

AutoDetect

MaxSubDomains

GCStressStartAtJit

RenderingLoopMaxTime

LatestIndex

Play_Background_Sounds

DisableNTLMPreAuth

ProcessID

IdnEnabled

AlwaysDrainOnRedirect

ProxyEnable

MVID

WpadOverride

Default_CodePage

DisplayName

Move System Caret

DisableBranchCache

FEATURE_CLIENTAUTHCERTFILTER

IECompatVersionHigh

EnabledScopes

ProxyHttp1.1

Tahoma

DnsCacheTimeout

System.Drawing

WpadDecisionReason

DaysToKeep

IESansSerifFontName

Plane7

PreConnectLimit

JScriptProfileCacheEventDelay

EnableHttp1_1

CoInternetCombineIUriCacheSize

System.Runtime.Remoting

MaxQueueCount

DisableBasicOverClearChannel

DownloadCacheQuotaInKB

USERNAME

WarnAlwaysOnPost

RetryCnt

EnablePunycode

SecurityIdIUriCacheSize

ConnectTimeOut

DisableReadRange

ZoomDisabled

MissingDependencies

Anchor Color Visited

ProxyOverride

Print_Background

Size

IEFontSizePrivate

ScavengeCacheLowerBound

Plane16

Plane9

mscorlib

SmoothScroll

Anchor Color

FrameMerging

BadProxyExpiresTime

Plane3

Always Use My Font Size

UseFirstAvailable

CLSID

System.Configuration

CertCacheNoValidate

Content Type

ShareCredsWithWinHttp

Always Use My Font Face

FtpDefaultExpiryTimeSecs

ProgramFilesDir

System

UserContextLockCount

NoToolbarsOnTaskbar

System.Web

AutoRecover

SocketSendBufferLength

Disable Diagnostics Mode

LogResourceBinds

FromCacheTimeout

TabProcGrowth

UseHR

System.Management

ProxyServer

UseLegacyIdentityFormat

ClientCacheSize

WindowsEdition

Show image placeholders

WarnOnPost

IE

Plane1

MediaSubType

VersioningLog

SeparateArc

DisableScriptDebuggerIE

CSS_Compat

Accessibility

Latest

logging

IdentifierLimit

SocketReceiveBufferLength

AutoProxyDetectType

ServerInfoTimeout

SendExtraCRLF

IEFontSize

RootDomainLimit

DisableCachingOfSSLPages

IEUIFontName

ILUsageMask

UserContextListCount

a.cmt

ScavengeCacheFileLifeTime

950

Play_Animations

System.Xml

a.del

Log

sample

Display Inline Images

GCStressStart

window position

MaxConnectionsPerServer

Allow Programmatic Cut_Copy_Paste

f.info.pos

EnableUTF8

NoProtectedModeBanner

LeashLegacyCookies

associate_mailto

a.exto

ImmExec

Xml

RestoreFolder

XMLHTTP

ObjectLimit

Name

TRACE_PERFMON

Disable Script Debugger

.HLP

DnsCacheEnabled

{065CD657CFC419117}

Start

CombineFalseStartData

ConfigureArchive

flash_kb

Use Web Based FTP

SystemBiosVersion

CommonFilesDir

No3DBorder

ReceiveTimeOut

EnableLog

autocompact

ProtectedModeOffForAllZones

LogFailures

RtfConverterFlags

MaxArchiveCount

E4247F43E4247F43

NoGuiFromShim

DomainLimit

MaxHttpRedirects

Class

Platform

System.Security

DisableConfigCache

NoClientChecks

Load

Disable Visited Hyperlinks

DevOverrideEnable

EnableLUA

OnTop

AppData

DisableKeepAlive

CorporateWerUseAuthentication

EnableCriticalLogger

CVListXMLVersionHigh

TcpAutotuning

PendingFileRenameOperations

Persistent

Anchor Underline

OnlyUseLatestCLR

compact_threshold

MiscFlags

CLRLoadLogDir

CorporateWerUseSSL

DisableMSIPeek

WpadSearchAllDomains

UseRAR

EnableNegotiate

AV

Detailed

HttpDefaultExpiryTimeSecs

Microsoft.JScript

WizardMode

Default_IEFontSizePrivate

PathsNone

NoRun

DisableFalseStartBlocklist

InstallDate

ProviderOrder

WarnOnHTTPSToHTTPRedirect

Cleanup HTCs

Install

Anchor Color Hover

CategoryOptions

AddArcOnly

NoRecentDocsHistory

cpSetup.exe

DbgJITDebugLaunchSetting

a.test

Always Use My Colors

VersionLoadedLast

CacheMode

Use Anchor Hover Color

Segoe UI

MS Sans Serif

TRACE_VSSBACKUP

newmsg_run_command

CSDVersion

NoManageMyComputerVerb

ProviderPath

folders_rect

RegisteredOrganization

System.Runtime.Serialization.Formatters.Soap

CorporateWerPortNumber

BootExecute

AlternateShell

f.test

Startup

1AA79FE5B3F7E611EA6

colwidths

GlitchInstrumentation

ForceLog

smtp_bcc

sYearMonth

PipelineEnableTrackModules

a.lock

auto_version_check

LOCALAPPDATA

EnforceP3PValidity

GenerateMask

CorporateWerServer

OpenShared

UninstallString

RestrictRun

NoBrowserOptions

f.lock.pos

email_address

TRACE_UTIL

LogSize

CLR20r3

BaseBoardManufacturer

ReuseWindow

LR

Method

f.exit

f.exto

a.view.pos

FileSort

Emulation

flash_delay

Recovery

wt_stock

EmailArcTo

System.Configuration.Install

DictSizeLZ

Publisher

UseMP3CrossFade

Move

{A520A1A4-1780-4FF6-BD18-167343C5AF16}

SaveDumpStart

Cache

ForceBFCacheCandidacyPass

RegisteredOwner

Q300829

System.Deployment

server

HWID

BackColor

newmsg_run

ComputerName

CurrentVersion

NoNetConnectDisconnect

messageFont

show_balloon

LoggingDisabled

D87CBA3CF103BA167330

C:\\sample.exe

folder_location

Type

LibraryPath

ExecutablesToExclude

a.rep

ProductType

First Time User

wt_dictionary_text

smtp_server

IfaceHeight

System.Data.SqlXml

ClearArc

WINDOW_LEFT

WidthChangedDisplay

msglist_toolbar

msglist_start_open

TRACE_UI

Lock

DefaultConsent

f.view

Stop Music

Autorun

ConnCnt

WhenNegative

f.info

CmtFile

DontShowUI

SaveStreams

f0Cm5CHwj

MS Shell Dlg

AllowUnsafeObjectPassing

PersistentCompletedType

auth_username

a.prot

PrnFileSize

MaxCachedTiles1

ProgramsTab

NoCDBurning

360Safetray

LimitLog

SP

wave_new_mail_disable

System.Web.Services

Application

TRACE_TM

a.prot.pos

85FF8030E5AD53B6E236

ClassicShell

wave_got_mail_nopath

NoDispAppearancePage

single_message_window

ProductName

f.cmt

DataStreamEnabledState

DisableQueue

DisplayIcon

Microsoft Sans Serif

NoDispScrSavPage

6&E993E07&0&0000

FullRow

Multimedia

ArcName

TRACE_ETWTRACE

RecVolNumber

external_on_tray_click

ut

Win31FileSystem

a.add

wt_weather_text

{450D8FBA-AD25-11D0-98A8-0800361B1103}

msg_list_rect

SourcePath

ProfileImagePath

Start Page

NoSMHelp

NoClose

UseDoubleClickTimer

SystemRoot

SFXIcon

PathsAbsDrive

NoDesktopCleanupWizard

KeyNotifyNext

FlagsEnabledAuto

GenerateArcName

FontEnabledInvalid

FileTimeBefore

360sd

ViewState

f.sfx.pos

TRACE_LU

OWNDC

ServiceDll

Default Impersonation Level

FontUpdatedHide

ArcSort

Common Fonts

inhbQUcup0

DebugOutEnabled

disable_tray

a.add.pos

reply_to_address

Priority

Test

Placement

EnableOutputDebugString

D6560F8CAD52162AA

AdvancedTab

cmd /c C:\Users\win7\AppData\Roaming\Microsoft\Blend\14.0\FeedCache\xpsrchw.exe

LineUpdatedQuick

ProductId

width

PpScheds

Hidden

NoSharedDocuments

FileMinutes

IfaceWidth

Driver

Common Programs

SingleClick

USERDOMAIN

DontSendAdditionalData

use_sig

DefaultOverrideBehavior

FirstStart

NoMDTM

NoThemesTab

resize_msg_list

ProtocolName

f.exto.pos

NoSecConsole

DisplayVersion

Shell

QueuePesterInterval

NoSecurityTab

FnpuLnkD

System.DirectoryServices.Protocols

PreviewPages

a.sfx

ShowHiddenFolders

System.ServiceProcess

PlatformCompressedValid

DisplayString

f.extr.pos

Active

f.prot

{IA223AD2D825482AE}

UseMPHeap

Band0

Debugger

dumb_pop3

show_server_name

midi_device_type

f.del

Description

Ret

BootDir

SFXLogo

a.info

JNHhElA

DisableArchive

SwapMouseButtons

Security Packages

IdSite32

QuickCompressedUrl

messageColor

NoSaveSettings

PackageCode

max_speak

NoChangeStartMenu

MemoryBufferSize

First Counter

ForceQueue

a.exit

f.exit.pos

vacation_mode

C:\Users\win7\AppData\Local\Temp\GLF1A7A.tmp

printerName

Common AltStartup

HomePage

PortName

full_name

WaitToKillServiceTimeout

File1

ExclNames

y9HZv1

Fonts

f.add.pos

f.add

f.cmt.pos

OldVolNames

apcsample

num_last_rcpt

ShowGrid

Solid

NoDesktop

flash_always

wt_dictionary

FileTimeAfter

wt_weather

Common Startup

midi_device

Check

NumberOfLogEntries

Disabled

AltStartup

interval

PraQ9Mb

Favorites

History

f.rep

f.rep.pos

NameNotifyClear

f.test.pos

PageCompletedLast

uf

StartMenuLogOff

InstallLocation

tray_double_click

NoDispSettingsPage

FileNames

DisablePersonalDirChange

folders_enabled

CustomExt

����

NoViewContextMenu

??

FileTimeMode

i6QDZMEUD

sort_reversed

7C203726731316264

NetworkThrottlingIndex

a.view

flash_msglist

Common Desktop

Band2

column0

ItemCompletedMax

SlideShowDelay

PageLocalizedInvalid

ValueLocalizedAuto

Common AppData

FileDays

Desktop

speech_summary

SendEFSFiles

ProgID

auto_store

1

86xdyvAq8

Appinit_Dlls

Backedup

NoAddRemovePrograms

ArcTimeLatest

Ratings

UserUpdatedValid

wave_new_mail_nopath

Background

QI

ForceClassicControlPanel

sort_column

CacheOk

ConnWiz Admin Lock

f.sfx

filters_enabled

SystemPartition

ForceUserModeCabCollection

ForegroundUpdatedInvalid

Lang

System.Web.RegularExpressions

~MHz

PrnFilePath

a.sfx.pos

TypeLocalizedActive

TempFolder

0

Logon User Name

6C6B08827FAA3C33CAD

PackDetails

ShowDegree

LargeButtons

ForegroundLoadedInvalid

PlatformSavedValid

FormSuggest Passwords

IDUpdatedLocal

PrivacyAdvanced

VolumeSize

use_auth_login

StartModifiedLast

HelpLink

MSOGL

TypeModifiedMax

speech_enabled

ForeColor

URLInfoAbout

bold_header_names

GeneralTab

DebugLogLevel

UseProxy

trust_stat

TRACE_GATEWAY

QuitWithEsc

ProcessOwners

password

InstallationType

a.extr.pos

002F16D78AB0E61CC

Notification Packages

msglistontop

SyncFiles

Taskman

wt_stock_text

PreventAutoRun

wave_got_mail

2

StoreNames

wave_new_mail

Module Path

C:\Users\win7\AppData\Local\Temp\GLF804B.tmp

TRACE_CM

appdata

InstallLanguage

CommentName

ProductSuite

Dictionary

VuobNZqByW

ShowImageInfo

NoPropertiesMyComputer

Enabled

TRACE_SVC

runtime

2130B6F1C237F008

ServiceControlManagerExtension

TRACE_CONTACT

DlgHistory

tgBTnLC

a.rep.pos

Path

rarreg.key

TEMP

CmtText

anote

NoNetworkConnections

RSz

System.Design

ConnectionsTab

NoHardwareTab

use_midi

FontSize

URLUpdateInfo

PrinterName

WINDOW_HEIGHT

charset

f.extr

{20D04FE0-3AEA-1069-A2D8-08002B30309D}

FontBold

PipelineHostReuse

ShowComment

TrapPollTimeMilliSecs

64CC5D8392BD36B54D

Fresh

TRACE_MTXOCI

link_folder_msglist

WINDOW_WIDTH

DictSize

nmOXMsqTYn

CmtTextData

f.wiz.pos

f.est

PathsAbs

Names

auto_download_messages

Userinit

FolderHeight

FieldChangedQuick

disable_filter_notify

DebugLogPath

3

show_html_mime

newmsg_popup

wave_got_mail_disable

SystemBiosDate

filter_file

RD

NoControlPanel

26E814982D95C3FB

Counter Names

MediaPath

auto_poll

Check_If_Default

MRU-InitialDir

NoPropertiesRecycleBin

SharedDir

font

a.extr

FileMappingSize

ProcessorNameString

Band1

PipelineHostTimeout

f.del.pos

Sound

PROCESSOR_ARCHITECTURE

xq9QCU8W

AuthVer

UIHost

Basis

NumberOfCsPools

VersionControl

FileHours

wrap_length

SetupExecute

TRACE_TIP

a.lock.pos

Left

PanelPath0

ValueEnabledCurrent

PackedCatalogItem

ThumbNailPrnOffset

CleanCount

LastFolder

a.info.pos

USERPROFILE

Key

a.exto.pos

Random Start

DisableCMD

last_redirect

UpdateDays

DisableTaskMgr

wrap_enabled

Font

ImageEditor

238

TRACE_PROXY

APPDATA

NoFileMenu

LastAd

poll_on_startup

flash_trayicon

{645FF040-5081-101B-9F08-00AA002F954E}

iDmw1vv2

ul

BypassDataThrottling

speech_flash_override

33DE92A0894D461857DB

auth_password

PreventRun

GlobalFlag

InstallerLocation

Seed

HelpTelephone

System.DirectoryServices

Default

f.wiz

Start Menu

PendingCPUQueue

System.Core

UpdateInf

ProfilesDirectory

max_message_size

a.test.pos

D5

Location

msg_rect

B29DDC7CC1E610D970F

FilterLogLevel

5sT5pLzZ

StartupPrograms

f.view.pos

ShortcutBehavior

BkColorFullScreen

SystemResponsiveness

TRACE_RESOURCE

0F46FB5B2D8A9D9FCB4A

FormSuggest

APPCRASH

IsMultiInstance

xxY5UAsq

ClassManagerFlags

Module Change

Ver_Sb1

Authentication Packages

NoPropertiesMyDocuments

PipelineDebugLog

sig_file

ID

username

MMax

version

HeightLoadedClear

NoSimpleStartMenu

WINDOW_MAX

PipelineEnableVEH

FontItalic

ShowMissingIE4Error

FXMemEnabled

SecurityTab

lr o�S�V�b�N

Common Favorites

C:\Windows\System32\MsAudio.ocx

Forecasts

EnableExtensions

D4

Locked Down

PipelineBufferSize

4nqaFdKM6TS53o0N

Joystick Id

ThumbsHide

AutoSearch

Library

IESound

Logging

a.wiz

TRACE_KTMRM

Want Music

ShowToolbar

Primary Only

ShowRealFileIcons

ComForce

done

HideDesc

PortNumber

{I65CD657CFC419117}

C:\Users\win7\AppData\Local\Temp\GLF1A5A.tmp

DriverVersion

Scanning

Language

BkColorWindow

NoStartMenuNetworkPlaces

TRACE_LOG

FitShrinkOnly

rarkey

ThumbNailPrnSize

Format

TraceFilePath

IJWEntrypointCompatMode

AppTitleFull

Microsoft.VisualC

Band3

ShowDots

spam_url

LastUpdateTime

DispatcherPath

OsLoaderPath

RegTest

ShowTenthsPlace

C:\Windows\System32\wmaudioredist.exe

JITDebug

File4

organization

DevicePath

System.Transactions

WINDOW_TOP

System.EnterpriseServices

skwgtdcinfo

Log File Max Size

f.prot.pos

UsePlayedNum

WIN7-PC

NoFindFiles

SortOrder

AppTitle

DLLDirectory32

TRACE_XA

CheckUpdatedStyle

ContentTab

ArcTimeOriginal

Update

GinaDLL

Band4

RegName

Execute

WaitForOther

SecurityProviders

SSz

C:\Windows\System32\actskin4.ocx

ResetWebSettings

COM+Enabled

FileUpdatedUse

HeightCompressedShow

Ax15TMlP3

4

PrivacyTab

SonyAgent

Programs

SlideShowNoSaver

height

Id32

NoWindowsUpdate

Flags

DriverName

ShowFeels

DisplayLogo

Ver_Sb2

MP3CrossFadeMS

EnableDebugLog

C:\Users\win7\AppData\Local\Temp\CTOSChk.exe

Copyright

AppSetup

mtime

PrnFileName

NoSetTaskbar

PageControlWidth

SFX

ProcessLasso

ShowToolTips

EraseDest

DLLDirectory

verifysignatures

a.del.pos

VolPause

a.exit.pos

a.cmt.pos

Options

f.lock

a.wiz.pos

StartLoadImage

EncryptHeaders

MakeTrans

System.Data

NoFolderOptions

HideMP3Explorer

Selected Module File

AllowUppercase

InstallSuccess

external_file

NoSMMyDocs

File3

SlideShowAutoRestart

SFXModule

CompanyName

Logging Directory

TRACE_MISC

Frame4

log_comm

UpdateType

Common Start Menu

lan

AdvpackLogFile

FullLocalizedPersistent

Frame5

shownowindows

NoNetHood

Init

part

InstanceType

ThumbsSave

Run

showall

ctime

DisplayMode

D122A61217FB7DC0437

NoDispCPL

Timeout

NoDispBackgroundPage

GUID

SlideShowFullScreen

Reg

ClearSavedPlatform

ShowSystemMenu

LogLevel

CPU Priority

IfaceLeft

EventLogLevel

HideSign

xpos

AltColor

msglist_retain_focus

AbbrevDesc

RegSerial

BgsMsndTimeToRunSecs

5

ActiveCompletedFlags

LegacyWPADSupport

UseCtxExplorer

DisableRegistryTools

ImagePath

My Music

SetVisualStyle

S0InitialCommand

ShowUnits

AltEncryptionColor

B87067DDF7D2B09BC

Values

DepOfLookAsideBuf

FirstRun

ActivePageIndex

ThumbNailSize

SkinFolder

LastPage

FormatForDisplayHelper

Path0

atime

SpoolPath

CheckDate

ypos

shownomicrosoft

CardLayoutIndex

MSG_CONFIRMCLEAN

FontName

HideCursorFullScreen

debug

MM

EulaAccepted

ArchivesFirst

DLL

DXTFilterBehavior

File2

ProviderId

ListMode

Personal

LocalNotifyUrl

ImageInfoRotated

SoundMoniker

MachineGuid

Scrnsave.exe

ExePath

Shutdown

C:\Users\win7\AppData\Local\Temp\nsa1D48.tmp\SimpleSC.dll

\\.\COM209

C:\Users\win7\AppData\Local\Temp\shndec_.cab

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Related Programs\Slideshow Creator Software.lnk

c:\users\win7\appdata\local\tempfolder\qiiorasikv\xeunbuejyades.dat

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\top-line[1].gif

\\.\J:

C:\Users\win7\AppData\Local\Temp\nst2848.tmp

C:\Data\Textures\Gui\Host_game_frame.dds

C:\Users\win7\AppData\Local\Temp\nsq9487.tmp

C:\Users\win7\AppData\Roaming\HLEThjJwJF\PKrvSGxBAr.exe

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\WF8Y9C1N.txt

C:\Users\win7\AppData\Local\Temp\7zS2C7E.tmp\settings.ini

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\Infobar\image\infobar_login.png

C:\Users\win7\AppData\Local\Temp\nsu717E.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsr2E93.tmp\nsArray.dll

C:\Windows\GeoOCX\WebCam\20090916\GeoCodecReg\GeoImageEnhance.dll

C:\Users\win7\AppData\Local\Temp\nsn6FCD.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsm2FF9.tmp\GetPrivateInstaller_woautorun.exe

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\G9I2KVST.txt

\\.\COM139

C:\Users\win7\AppData\Local\Temp\#folder#\melt.bat

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\VIDO.ini

C:\Users\win7\AppData\Local\Temp\nsbAB5F.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\000a40c1.a

C:\Users\win7\AppData\Local\Temp\pftD7AF~tmp\pftw1.pkg

C:\Users\win7\AppData\Roaming\XLEThjJwJF\9124.xml

C:\Users\win7\AppData\Local\Temp\nsb4533.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\f[1].js

C:\Users\win7\AppData\Local\Temp\nsq76D2.tmp\System.dll

C:\Windows\system32\goo\neal\notc.dat

C:\Users\win7\AppData\Local\Temp\free-invoice.gif

C:\Windows\system32\PartyPoker_Installer\SmartInstaller.exe

C:\Users\win7\AppData\Local\Temp\nsw852A.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\7fa4afec6c5bbf4ae0e9f0a6485532ac\volcano.exe

C:\Users\win7\AppData\Local\Temp\nsz8067.tmp\\420921765

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Branding-UltimateN-Client-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM11.tmp

C:\sample

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/Editorb6.bmp

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/1navmenu.jpg

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat

C:\Users\win7\AppData\Local\Temp\nskA6BB.tmp

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\Infobar\image\infobar_close_hover.png

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM16.tmp

C:\Users\win7\AppData\Local\Temp\nsl7B53.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Tempfolder\DoltuJonisep\nssutil3.dll

\\.\COM120

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_No8.bmp

\\.\COM62

C:\Users\win7\AppData\Local\Temp\nst1AFB.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\b4e8c2bf475e972ff1129a25635128c5\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Local\Temp\nse28D5.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-EU83C.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\f[1].js

mchppIc.exe

C:\Users\win7\AppData\Local\Tempfolder\DoltuJonisep\freebl3.dll

C:\Users\win7\AppData\Local\Temp\nsy1945.tmp

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/Editorb2.bmp

C:\Users\win7\AppData\Local\Temp\nsi2F54.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsr2E92.tmp

C:\Users\win7\AppData\Local\Temp\is-40HMF.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-FD9AA.tmp\sample.tmp

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/section7.html

C:\Windows\GeoOCX\WebCam\20090916\IG_STable.xml

C:\Windows\GeoOCX\WebCam\20090916\alert.wav

C:\Windows\CFVS_HookDll.pdb

C:\Users\win7\AppData\Local\Temp\1800916459.xml

C:\Windows\shdocvw.dll

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\CommonAppDataFolder\Cisco\Cisco AnyConnect Secure Mobility Client\Profile\AnyConnectProfile.xsd

C:\Users\win7\AppData\Local\Temp\nsq7A88.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsr2FCB.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\d06fcbb59363a1adb6768ef5c595d7c2\pricepeep.exe

C:\Users\win7\AppData\Roaming\subfolder\filename.exe

C:\Users\win7\AppData\Local\Temp\12aubfff5\license.txt

C:\Users\win7\AppData\Local\Temp\nsf2A30.tmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\dmax.dll

c:\Program Files\Alexa Booster v3.2\Proxy\google-keywords.txt

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~zh-CN~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\7zS55DB.tmp\jjhklgikohjiaahlibnfgegobedhpgmf\sqlite.js

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM67.tmp

C:\Users\win7\AppData\Local\Temp\nsp8601.tmp\System.dll

C:\Users\win7\AppData\Roaming\ALEThjJwJ\aFKrvSG.exe

C:\Users\win7\AppData\Local\Temp\nsu25A0.tmp\nsArray.dll

\\.\COM75

C:\Users\win7\AppData\Local\Temp\nsu7799.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Adobe\Updater5\AUTrans.xml_

C:\Users\win7\AppData\Local\Temp\nsm56AC.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\Stupid.xml

C:\symbols\dll\CFVS_HookDll.pdb

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui

C:\Windows\GeoOCX\WebCam\20090916\GeoCodecReg\GeoCodecReg.exe

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerDist-Client-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

32788R22FWJFW\setpath.cfxxe

\\.\V:

C:\Users\win7\AppData\Local\Temp\RarSFX0\WBchppI.exe

MSWINSCN.OCX

C:\Users\win7\AppData\Local\Temp\nsu8F4C.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsi190A.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsy4046.tmp\SimpleSC.dll

C:\Windows\system32\symbols\dll\wntdll.pdb

c:\download\driver\12950\Program\DIFxAPI.dll

C:\Users\win7\AppData\Local\Temp\aiw686671.bmp

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/insideout.jpg

C:\Users\win7\AppData\Local\Temp\7zS7BFD.tmp\pnadleldkhfpclgofgnnmhblfcamfhfa\background.html

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred\oskpredbase.xml

C:\Users\win7\AppData\Local\Temp\aaiw686673.bmp

C:\Users\Public\Downloads\dm-743B.tmp

C:\Users\win7\AppData\Local\Temp\is-97GVD.tmp\_isetup\_shfoldr.dll

C:\Windows\system32\COMCAT.DLL

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\res\unpinned_button.png

C:\Windows\system32\l_intl.nls

C:\Users\win7\AppData\Local\Temp\nsa2BC4.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\7zS77D6.tmp

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/Editorb9.bmp

\\.\COM187

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/copy14.html

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/Code.cod

C:\Users\win7\AppData\Local\Temp\DIQ\flashplayer_151\DomaIQ.exe

C:\Users\win7\AppData\Local\Temp\nsw399A.tmp\System.dll

c:\IES_Files\Outdoor\Bollards\OSA8R-HID\OSA8R-100PSMH120-AS.IES

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Basic-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsi1A20.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsv2B09.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\QQBrowser.exe

C:\Users\win7\AppData\Local\Temp\mss863E.tmp

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\fr\alerter.country

\\.\COM74

C:\Users\win7\AppData\Local\Tempfolder\DoltuJonisep\softokn3.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\T1CNG3WW.txt

C:\Users\win7\AppData\Local\Temp\nsp1CFF.tmp\\227176954

32788R22FWJFW\n.pif

C:\Windows\GeoOCX\WebCam\20090916\GeoCodecReg\G264.inf

32788R22FWJFW\023.dat

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/copy6.html

C:\Users\win7\AppData\Local\Temp\000a397e.a

C:\Users\win7\AppData\Local\Temp\nsx23D5.tmp\nsArray.dll

C:\Windows\GeoOCX\WebCam\20090916\GvMegaPixelViewer.xml

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\AcutVista_SSD-7971D.ini

C:\Program Files\Chameleon Clock\Sounds\Clocks\Bigben2.wav

C:\image\baritem_delete.png

C:\Program Files\Chameleon Clock\Sounds\Clocks\Bigben.wav

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-Package~31bf3856ad364e35~amd64~~8.0.7601.17514.cat

\\.\COM211

C:\Users\win7\AppData\Local\Temp\nsn9631.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nsv4429.tmp\\427697726

C:\Users\win7\AppData\Local\Temp\nst1B49.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\5a6e0d7e7fb82588b081b16c0bd88029\volcano.exe

WhatsNew.txt

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM83.tmp

c:\OkiDriver\OKIB2200B2400\AskOki.dll

C:\Users\win7\AppData\Local\Temp\nsm6D0E.tmp\NSISdl.dll

C:\pkey.txt

C:\Windows\GeoOCX\WebCam\20090916\GMultiCast.dll

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\copy11.html

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM77.tmp

\\.\COM237

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~nl-NL~7.1.7601.16492.cat

C:\Windows\system32\691187.tmp

C:\Users\win7\AppData\Local\Temp\nsg1FD8.tmp\SimpleSC.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\pcdSkin.ini

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\Outbox.ZDT

C:\Users\win7\AppData\Local\Temp\nsgBB49.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsg7ACE.tmp\NSISdl.dll

\\.\COM33

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/Editorb4.bmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\2V693FZO.txt

C:\sample_hosts.txt

C:\Users\win7\AppData\Local\Temp\fe9505b7f8b60bc6e1a74dc5c757fe1e\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Local\Temp\nsc1790.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsc8C0C.tmp\System.dll

\\.\Scsi7:

C:\Users\win7\AppData\Local\Temp\is-S45LH.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\nsx7139.tmp\\1035797652

C:\Windows\system32\dssenh.dll

\\.\COM88

C:\Users\win7\AppData\Local\Temp\DIQ\test-av13490_004\config.dll

C:\Users\win7\AppData\Roaming\FileZilla\filezilla.xml

32788R22FWJFW\xpreg.dat

C:\Users\win7\AppData\Local\Temp\9c2704c22ceab0ebc352c74d631e8669\volcano.exe

C:\Users\win7\AppData\Local\Temp\pft3E71.tmp\data1.cab

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\Btn_Dir.png

C:\Users\win7\AppData\Local\Temp\nst3294.tmp

C:\Users\win7\AppData\Local\Temp\nss1703.tmp

C:\Users\win7\AppData\Local\Temp\nse73D4.tmp\SimpleSC.dll

C:\ProgramData\BrouwsEe2save\uninstall.exe

c:\Program Files\Alexa Booster v3.2\Skins\scanner.jpg

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\webctrl.dll

C:\Users\win7\AppData\Local\Temp\Cleaning.ico

C:\WINDOWS\FONTS\VERDANA.TTF

32788R22FWJFW\Assoc.cmd

C:\Users\win7\AppData\Local\Temp\nsl2C9F.tmp\436686940

C:\Users\win7\Desktop

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\NW7QUT47.txt

C:\Users\win7\AppData\Local\Temp\nse2542.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nsr2F7D.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\Infobar\image\infobar_login.png

C:\Users\win7\AppData\Local\Temp\nsnB3E7.tmp\769355975

C:\Temp

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/buywordsbad.gif

C:\Users\win7\AppData\Local\Temp\nsb1F1C.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Network Shortcuts

C:\Windows\System32\DriverStore\infpub.dat

C:\Users\win7\AppData\Local\Temp\nsq76D2.tmp\SimpleSC.dll

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\Selection Tools Uninstall.exe

C:\Windows\System32\dnsapi.dll

C:\Windows\SysWOW64\Wbem\textvaluelist.xsl

\\.\COM61

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\left.bmp

C:\Intel\Logs\IntelChipset.log

C:\Users\win7\AppData\Local\Temp\nst585C.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\FDM1WNVG.txt

C:\Users\win7\AppData\Local\Temp\nsiB13F.tmp

C:\Users\win7\AppData\Local\Temp\nsm56AC.tmp\NSISdl.dll

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/killerlayout.jpg

C:\Users\win7\AppData\Local\Temp\nss22D5.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsr90DC.tmp\NSISdl.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~hu-HU~7.1.7601.16492.cat

C:\useragents.txt

C:\Users\win7\AppData\Local\Microsoft\Windows\Caches\cversions.1.db

C:\Users\win7\AppData\Local\Temp\\~DFCB0D5091C0D5E805.TMP

C:\Windows\wkernel32.pdb

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\SoundTap Streaming Recorder.lnk

C:\Users\win7\AppData\Local\Temp\rd7CD8.tmp\____swmxs

C:\Users\win7\AppData\Local\Temp\nsq4F84.tmp\nsExec.dll

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\pbbkg.png

\\.\COM159

C:\Windows\System32\WMAUDI~1.EXE

C:\Users\win7\AppData\Local\Temp\nso8AB8.tmp\\494401783

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\WListViewEx.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\NH7IS26Q.txt

C:\Users\win7\AppData\Local\Temp\sample.rbt

C:\Data\Scripts\Gui\MessageBoxConnecting.gui

C:\Users\win7\AppData\Local\Temp\nsgC3AA.tmp\nsArray.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\GV_GeoPTZini.dll

\\.\COM224

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\keypadbase.xml

C:\ProgramData\Barowasse2saave

C:\Users\win7\AppData\Local\Temp\nsgC3AA.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsx250D.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsb2ED1.tmp\SimpleSC.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\EXLI65HT.txt

C:\ProgramData\SharedSettings.ccs

\\.\COM231

C:\Users\win7\AppData\Local\Temp\nsz8FE5.tmp\nsArray.dll

C:\Users\win7\AppData\Roaming\Opera\Opera\opcacrt6.datC:\Users\win7\AppData\Roaming\Opera\Opera\profile\opcacrt6.dat

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\section6.html

C:\Users\win7\AppData\Local\Temp\nsw2DA6.tmp\nsArray.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~en-US~7.1.7601.16492.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-NetworkDiagnostics-DirectAccessEntry-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsa1F60.tmp\\996606040

C:\Users\win7\AppData\Local\Temp\nsv7A59.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich6usb.inf

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\ZND28V7V.txt

C:\Users\win7\AppData\Local\Temp\nsw2E15.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM44.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\7K79YTXG.txt

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\res\cues_bg.jpg

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich6ide.inf

C:\Users\win7\AppData\Local\Temp\nsd594F.tmp\nsislog.dll

C:\Users\win7\AppData\Local\Temp\PB7DC5.tmp

C:\Windows\GeoOCX\WebCam\20090916\GeoRunTimeMergeAVI.dll

C:\Users\win7\AppData\Local\Temp\nsa4F73.tmp

C:\Users\win7\AppData\Local\Temp\nsr2E93.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nsd257B.tmp\1008489509

C:\Users\win7\AppData\Local\Temp\nso7641.tmp

C:\Users\win7\AppData\Local\Temp\nsr2F2F.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\010914i[1].htm

c:\Program Files\Common Files\Microsoft Shared\ink\hr-HR\tipresx.dll.mui

C:\Users\win7\AppData\Local\Temp\is-97GVD.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnadleldkhfpclgofgnnmhblfcamfhfa

C:\Users\win7\AppData\Local\Temp\12aubfff5\CustomerJoinPlan.txt

C:\Users\win7\AppData\Roaming\Opera\Opera\opcacrt6.dat

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/Editorb3.bmp

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/copy7.html

C:\Users\win7\AppData\Local\Temp\nsp81FD.tmp\nsArray.dll

\\.\COM20

c:\Program Files\Common Files\Microsoft Shared\ink\Content.xml

C:\Users\win7\AppData\Local\Temp\nsa7AC6.tmp\SimpleSC.dll

\\.\Scsi1:

C:\Users\win7\AppData\Local\Temp\nsf1C2F.tmp\572138058

C:\Users\win7\AppData\Local\Temp\nsl1FEC.tmp

C:\Users\win7\AppData\Local\Temp\{0654AC99-2BF5-4929-9C44-4B6872A6C4E0}\_ISMSIDEL.INI

C:\Users\win7\AppData\Local\Temp\pftD7AF~tmp\Disk1\data2.cab

quuGhrj.exe

C:\Users\win7\AppData\Local\Temp\f2cc559679c8d17d7bf9c117baf6aa0a\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Local\Temp\nsgBB49.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nst1AFB.tmp\SimpleSC.dll

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/section5.html

C:\Users\win7\AppData\Local\Temp\aut3056.tmp

c:\OkiDriver\OKIB2200B2400\OPPERLOC.DLL

C:\Users\win7\AppData\Local\Folder\windows.exe

C:\Users\win7\AppData\Local\Temp\nsr6C43.tmp\NSISdl.dll

C:\Data\Scripts\Gui\PageSingleMission.gui

c:\Program Files\Alexa Booster v3.2\Skins\step2.jpg

C:\Users\win7\AppData\Local\Temp\nsg206A.tmp\Splash_logo.bmp

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/copy10.html

C:\Users\win7\AppData\Local\Temp\64b86246e9aa3fa79b9535db49b20b8d\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsh79EE.tmp

C:\Windows\system32\ebkp.dll

c:\OkiDriver\OKIB2200B2400\opne002d.scr

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-VistaPlus-Update~31bf3856ad364e35~amd64~~11.2.9600.16428.cat

C:\Users\win7\AppData\Local\Temp\nsh6CEF.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich6id2.inf

C:\Users\win7\Desktop\symbols\dll\CFVS_HookDll.pdb

32788R22FWJFW\FKMGen.cmd

C:\Users\win7\AppData\Local\Temp\nsw6B78.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsm2F5E.tmp\SimpleSC.dll

C\sr\i7ApaaLclTm\X00TPBee

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\copy5.html

c:\download\driver\12950\SoftwareDriver\Driver\CMxPCI8.INF

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~he-IL~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nshC833.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM20.tmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZRU.bmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~bg-BG~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nst2711.tmp\NSISdl.dll

C:\Windows\GeoOCX\WebCam\20090916\IA_STable_001.xml

C:\Users\win7\AppData\Local\Temp\nsj3EBB.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\3db95c0d2bab524b5259c84257550ed1\volcano.exe

c:\Program Files\Common Files\Microsoft Shared\ink\fi-FI\tipresx.dll.mui

\\.\O:

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_14.bmp

C:\Users\win7\AppData\Local\Temp\nssD71A.tmp\Processes.dll

C:\Users\win7\AppData\Roaming\QuwoxaBATH\JQJDxakvoU.exe

C:\Users\win7\AppData\Local\Temp\nsfC49.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsgBB49.tmp\nsDialogs.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GJrYnjUOgh.lnk

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\Dlg_Btn.png

C:\Users\win7\AppData\Local\Temp\nswAEF6.tmp\\1170874219

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\apc.conf

\\.\E:

C:\Users\win7\AppData\Local\Temp\Scan.ico

C:\Data\Scripts\Gui\PageJoinGame.gui

C:\Users\win7\AppData\Local\Temp\nsn8BFD.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsj1BA7.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsw7D18.tmp\NSISdl.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\GVNVR_SDK.ini

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/section1.html

\\.\Q:

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/discounts.html

32788R22FWJFW\ERDNT.e_e

\\.\COM252

C:\Users\win7\AppData\Local\Temp\nsn3133.tmp\System.dll

C:\Windows Update\update.bat

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_11.bmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Canon_C300NA.ini

C:\Users\win7\AppData\Local\Temp\nsb5F81.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nsoE348.tmp\V8._85296_20150814221218.exe

C:\Users\win7\AppData\Local\Temp\nsb21D1.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsp2883.tmp\SimpleSC.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_4.bmp

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\asl-icn-mini-home-32x32x2.gif

C:\Python27\exe\DVRArchiveViewer.pdb

C:/Windows/system32/MSCOMCT2.OCX

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\Editorb4.bmp

C:\Users\win7\AppData\Local\Temp\\~DF7856710A8FAD5A32.TMP

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\CommonAppDataFolder\Cisco\Cisco AnyConnect Secure Mobility Client\VPNManifestClient.xml

\\.\COM59

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~sl-SI~7.1.7601.16492.cat

\\.\COM161

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\Btn_Dir.png

C:\Users\win7\AppData\Local\Temp\nss4B52.tmp\909029299

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\nJfxcWgTsy.lnk\desktop.ini

C:\Users\win7\AppData\Local\Temp\tmp8C7B.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\TPHUFDXJ.txt

C:\Users\win7\AppData\Local\Temp\nsr2EE1.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsp78B3.tmp\setup_31011.exe

\\.\COM174

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\ext[1].js

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\7185bdf1gw1ewyl50mtpeg20go0a5u10[1].gif

C:\Users\win7\AppData\Local\Temp\nsq7720.tmp\nsArray.dll

c:\title.jpg

C:\Users\win7\AppData\Local\Temp\nsh6D3D.tmp\NSISdl.dll

\\.\PhysicalDrive8

\\.\COM47

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\ui[1].js

C:\Users\win7\AppData\Local\Temp\nss7ACA.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\e873621278eb045fa3d6cb0e9d983d10\volcano.exe

C:\Data\Textures\Gui\EditBoxBack2.dds

C:\Users\win7\AppData\Local\Temp\nsb7BFE.tmp

C:\Users\win7\AppData\Local\Temp\nsc3141.tmp

C:\Users\win7\AppData\Local\Temp\nso71A2.tmp\1047987572

C:\Users\win7\AppData\Local\Temp\nsf34A9.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\is-C85U7.tmp\_isetup\_shfoldr.dll

\\.\COM105

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\529U1EM5.txt

\\.\pipe\pipe_console

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/outsidein.jpg

C:\Windows\system32\GLBSINST.%$D

C:\Users\win7\AppData\Local\Temp\7zS55DB.tmp\jjhklgikohjiaahlibnfgegobedhpgmf

C:\Users\win7\AppData\Local\Temp\nsh223F.tmp\System.dll

C:\ProgramData\CoffeeCup Software\SharedSettings.ccs

C:\Users\win7\AppData\Local\Temp\nsk7894.tmp\NSISdl.dll

C:\Windows\GeoOCX\WebCam\20090916\GeoEditAVIDllV2.dll

C:\Users\win7\AppData\Local\Temp\nsq7720.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\E220AutoRunLog.tmp

C:\Users\win7\AppData\Local\Temp\nsz78A3.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsr2E93.tmp\\1150307986

ReadMe.txt

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_1.bmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZLD.bmp

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM19.tmp

C:\Users\win7\AppData\Local\Temp\nsy8713.tmp\\1150069636

C:\Users\win7\AppData\Local\Temp\nskB7C0.tmp\\844504445

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lxBArVzWJ.lnk\desktop.ini

C:\Windows\GeoOCX\WebCam\20090916\SceneChangeDetection.xml

/dev/urandom

32788R22FWJFW\zip.cfxxe

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers.xml

C:\Users\win7\AppData\Local\FlashFXP\4\History.dat

C:\Users\win7\AppData\Local\Temp\rd7CD8.tmp\main.lzx.swf

C:\Users\win7\AppData\Local\Temp\nsp81FD.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\SharedSettings_1_0_5.ccs

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\Font Xtra.x32

32788R22FWJFW\svchost.vista.dat

C:\Users\win7\AppData\Local\Temp\nsg6866.tmp\780660593

C:\Users\win7\AppData\Local\Temp\nsl1E23.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\DIQ\flashplayer_151\routes.dll

C:\Windows\System32\WindowsPowerShell\v1.0\symbols\dll\wkernelbase.pdb

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-LanguagePack-Package-wrapper~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\9c2704c22ceab0ebc352c74d631e8669\OpenCL.dll

C:\Users\win7\AppData\Local\Temp\nsfF539.tmp\nsisdl.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\8FCTP7J9.txt

\\.\COM113

C:\Users\win7\AppData\Local\Temp\{0903A383-0598-4DEC-8D80-08B12F2C46B7}\0x0422.ini

C:\Users\win7\AppData\Local\Temp\nsc30F4.tmp\System.dll

\\.\VBoxMiniRdrDN

C:\Windows\system32\ascIPNT.DLL

C:\Users\win7\AppData\Local\Temp\nsq7A88.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nss80A2.tmp\NSISdl.dll

autocad_32bit_Keygen.exe

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\iml32.dll

C:\Users\win7\AppData\Local\Temp\nss17EE.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\8353107b4a7ee1912afdcc36da509643\BitAcceleratorDDLRinstaller.exe

\\.\COM27

C:\Users\win7\AppData\Local\Temp\nsdB20B.tmp\1203085571

32788R22FWJFW\NirCmd.chm

C:\Users\win7\AppData\Local\Temp\$inst\2.tmp

32788R22FWJFW\md5sum00.pif

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\VBOXXHARDDISK_VB66c88d96-4b6cc820[1].htm

C:\Windows\System32\WindowsPowerShell\v1.0\wkernelbase.pdb

C:\Data\KeyboardMap.info

C:\Python27

C:\Users\win7\AppData\Local\Temp\nsz7681.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsz1AD7.tmp\\1114010628

C:\Windows\syswow64\kernel32.dll

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\CallbackCtrl.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~lv-LV~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsk86CB.tmp\NSISdl.dll

C:\Program Files\Alexa Booster v3.2\uninstall.exe

C:\Users\win7\AppData\Local\Temp\nssAD44.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Tempfolder\DoltuJonisep\PomtoKof.dat

\\.\Scsi6:

C:\Users\win7\AppData\Roaming\Opera\Opera x64\opcacrt6.dat

c:\Users\win7\AppData\Local\Temp\sfx1\BB40eng.dix

C:\Users\win7\AppData\Local\Temp\nsb1ECF.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nskB80E.tmp\\766223370

C:\Users\win7\AppData\Local\Temp\nsz32B5.tmp\System.dll

C:\Windows\SysWOW64\ieframe.dll

c:\download\driver\12950\SoftwareDriver\Driver\AUDIO3D3.DLL

C:\Users\win7\Desktop\GIF to Flash Converter.lnk

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/formula1.html

\\.\PhysicalDrive2

C:\Users\win7\AppData\Local\Temp\nsz8067.tmp\nsArray.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ImageBasedSetup-IE-Package-Base-Downlevel~31bf3856ad364e35~amd64~~6.3.9600.16428.cat

\\.\SIWDEBUG

C:\Users\win7\AppData\Local\Temp\nsr397B.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nsd594F.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\{0903A383-0598-4DEC-8D80-08B12F2C46B7}\_ISMSIDEL.INI

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\extreme[1].htm

C:\Users\win7\AppData\Local\Temp\nsfD7E9.tmp\\169530211

C:\Users\win7\AppData\Local\Temp\nsb4835.tmp\System.dll

C:\Users\win7\AppData\Roaming\Microsoft\MSXML2\msxml4r.dll

\\.\COM146

C:\Users\win7\AppData\Local\Temp\GdiPlus.dll

C:\Users\win7\AppData\Local\Temp\nsp78B3.tmp\V8._85296_20150814221218.exe

C:\Users\win7\AppData\Local\Temp\nsl399E.tmp\NSISdl.dll

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-phonetic.xml

c:\sample.

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\service\perfctrl.dll

\\.\COM154

C:\Users\win7\AppData\Local\Temp\nsn3132.tmp

\\.\VBoxGuest

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\Microsoft.VC90.CRT\msvcr90.dll

C:\Users\win7\AppData\Local\Temp\nso5FD6.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nso2273.tmp\NSISdl.dll

C:\Windows\GeoOCX\WebCam\20090916\RPB_8300.ocx

\\.\Scsi2:

c:\users\win7\appdata\local\temp\info.txt

C:\Users\win7\AppData\Local\Temp\is-S45LH.tmp\_isetup\_shfoldr.dll

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ja-jp-sym.xml

32788R22FWJFW\List-D.bat

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM60.tmp

C:\Users\win7\AppData\Local\Temp\nsy90EA.tmp\System.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\ZC.dll

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/1navright.jpg

C:\Data\Textures\Gui\Options_Assignments_01.dds

C:\Users\win7\AppData\Local\Temp\rd7CD8.tmp\____mmfp.ocx

c:\Program Files\Common Files\Microsoft Shared\ink\ar-SA\tipresx.dll.mui

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\botva2.dll

C:\Users\win7\AppData\Local\Temp\nsy7191.tmp

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\QQBrowserFrame.dll

C:\Users\win7\AppData\Local\Temp\nsc230A.tmp\cpSetup.exe

C:\Users\win7\AppData\Local\Temp\nsc6DB9.tmp\nsArray.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Info.ini

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\LEJB3BSY.txt

C:\Program Files\Chameleon Clock\Sounds\Clocks\wwatchalarm.wav

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\Btn_Done.png

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\GRJ0THYF.txt

C:\Users\win7\AppData\Roaming\Microsoft

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\dm_bar_up[1]

C:\Users\win7\AppData\Local\Temp\DIQ\test-av13688_004\OfferBrokerage_14003.exe

\\.\COM21

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM72.tmp

C:\Users\win7\AppData\Local\Temp\nsl7B53.tmp\System.dll

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/mixup.jpg

C:\Users\win7\AppData\Local\Temp\is-U098A.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\nsz2953.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nsg14EF.tmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\utils[1].js

c:\download\driver\12950\SoftwareDriver\Driver\CMUDAX64.CAT

c:\countdown.py

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\WSysInfo.dll

sfiles\bimage.tmp

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\pbn-1B727E14D52A42D1AF46944087C66BCB.zdt

sfiles\skin.ini

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Kalatal.ini

C:\Program Files\Chameleon Clock\Sounds\Clocks\chime.mp3

C:\Users\win7\AppData\Local\Temp\nsy25F8.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsbAB5F.tmp\\1012881966

C:\Users\win7\AppData\Local\Temp\nsfEA73.tmp\NSISdl.dll

c:\users\win7\appdata\local\tempfolder\ortmp\orionhelper.bit

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_No0.bmp

C:\Users\win7\AppData\Local\Temp\nsg1DB6.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\Dlg_Btn_Cancel.png

APLOC.dll

C:\Users\win7\AppData\Local\Temp\nspB38C.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsg6C03.tmp\SimpleSC.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\DTGBUK95.txt

C:\Users\win7\AppData\Local\Temp\nsb2DE7.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM9.tmp

C:\totalcmd.inc

C:\Users\win7\AppData\Local\Temp\nsuCBD7.tmp

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM25.tmp

C:\Windows\SysWOW64\wshom.ocx

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IjxjVBc.lnk\desktop.ini

C:\Users\win7\AppData\Local\Temp\nsr2E93.tmp\NSISdl.dll

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\res\error.ico

C:\Users\win7\AppData\Local\Temp\nsn7A19.tmp\\853323409

C:\Program Files\Motion-Twin\haxe\lib/std/.current

C:\Users\win7\AppData\Local\Temp\nsjFCDB.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\\~DF8AD34D8AC56E6D14.TMP

C:\Data\Textures\Gui\CreateMission_Save_03.dds

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\DZOXFMT5.txt

C:\Data\Scripts\Gui\MessageBoxConnectionFailed.gui

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZZIn.bmp

C:\winrar.lng

C:\Users\win7\AppData\Local\Temp\nsd70C7.tmp\1195322159

C:\Users\win7\AppData\Roaming\HLEThjJwJF\5910.xml

32788R22FWJFW\handle.cfxxe

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\Editorb9.bmp

c:\download\driver\12950\SoftwareDriver\Driver\CMxPCI2.INF

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\Editorb3.bmp

C:\Users\win7\AppData\Local\Temp\nsq1D0A.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsbC511.tmp\nsArray.dll

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\CommonAppDataFolder\Cisco\Cisco AnyConnect Secure Mobility Client\AnyConnectLocalPolicy.xsd

C:\Users\win7\AppData\Local\Temp\nss1752.tmp\\757915156

C:\Users\win7\AppData\Local\Temp\7zS7336.tmp\515f52b8125e4.tlb

C:\Users\win7\AppData\Local\Temp\7zS77D6.tmp\hpcdeopkgienceaajfkaohfhnacpfamh\manifest.json

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\YVO36RN2.txt

C:\Users\win7\AppData\Local\Temp\nseB5CC.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\pftB084.tmp\Disk1\layout.bin

\\.\Scsi14:

32788R22FWJFW\w_sock.dll

C:\Users\win7\AppData\Local\Temp\nsu96A9.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\DIQ\test-av6941_004\OfferBrokerage_14003.exe

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\BBD\img\common\win_bottom_right_msk.png

C:\Users\win7\AppData\Local\Temp\004cf942.a

C:\Users\win7\AppData\Local\Temp\nsp1C62.tmp

C:\Temp\installtemped

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\Z9VYN99P.txt

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~ja-JP~7.1.7601.16492.cat

C:\Settings\Recents.xml

C:\Users\win7\AppData\Local\Temp\nsaF4CC.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsr7990.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsb1F1C.tmp\\742967182

/dev/random

C:\Users\win7\AppData\Local\Temp\c634e7f446ed0baaaffb97e9c00223b7\volcano.exe

C:\Data\Textures\Gui\MPlrTeamStatsBack1.dds

C:\Users\win7\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config

C:\Users\win7\AppData\Local\Temp\nsz58CB.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsi3082.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsm6C72.tmp\Processes.dll

32788R22FWJFW\License\UnxUtilsDist.html

C:\Users\win7\AppData\Local\Temp\nsb2ED1.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsv2B09.tmp\System.dll

C:\Users\win7\AppData\Roaming\DhDDYNXdLBfE\8760.xml

C:\Users\win7\AppData\Local\Temp\nsh54C2.tmp\NSISdl.dll

C:\Data\Scripts\Gui\MessageBoxInvalidPilotName.gui

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GetPrivate\GetPrivate.lnk

C:\Users\win7\AppData\Roaming\rLEThjJw\lJFKrvSGxB.exe

C:\Users\win7\AppData\Local\Tempfolder\ortmp\nss3.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\H9GGFBWE.txt

C:\Users\win7\AppData\Local\Temp\nsp1D4D.tmp\System.dll

fVzWJrYnjUO.dat

\\.\COM68

C:\Users\win7\AppData\Local\Temp\nsm6D0E.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsw7C7C.tmp\\267185768

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\downloading_icon[1]

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/buywords.gif

C:\Users\win7\AppData\Local\Temp\nsa753C.tmp\System.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\223DE96EE265046957A660ED7C9DD9E7_EFF9B9BA98DEAA773F261FA85A0B1771

C:\Users\win7\AppData\Local\Temp\nsy7192.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsf7910.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\ci0-temp\logo.bmp

\\.\COM126

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\RX214D.ini

C:\Users\win7\AppData\Local\Temp\nsy2694.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsw9718.tmp\System.dll

C:\Windows\System32\schtasks.exe

C:\Users\win7\AppData\Local\Temp\nsz417F.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsi19D1.tmp

C:\Users\win7\AppData\Local\Temp\nskB80E.tmp\766223370

\\.\COM18

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\error_icon[1]

\\.\COM216

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\Bkg.bmp

C:\Users\win7\Downloads\desktop.ini

C:\Users\win7\AppData\Local\Temp\nsc3058.tmp\\711675182

C:\Users\win7\AppData\Local\Temp\nsy7596.tmp\\619467634

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\Macromedia.lok

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~th-TH~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\12aubfff5\appdata\\{6970B802-2F13-4038-B620-33B0211D26A0}

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM58.tmp

C:\Users\win7\AppData\Local\Temp\nsx16D5.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsq1D0A.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM76.tmp

C:\Users\win7\AppData\Local\Temp\aut305A.tmp

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM54.tmp

C:\Users\win7\AppData\Local\Temp\nsn2F1A.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\F6YQHU60.txt

C:\Users\win7\AppData\Local\Temp\nsgDDF8.tmp\\462088281

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\Infobar\css\base.css

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Minking.ini

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\BBD\img\common\win_bottom_left.png

C:\Users\win7\AppData\Local\Temp\nsaCE68.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nsr20B2.tmp\NSISdl.dll

32788R22FWJFW\iexplore.exe

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/formula7.html

WinRAR.chm

C:\Users\win7\AppData\Roaming\e\config.db

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/Editorb10.bmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\GB0CO6KD.txt

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpbejmkogknnkjbfcacgbckomaofefka\1\manifest.json

C:\Users\win7\AppData\Local\Temp\7fa4afec6c5bbf4ae0e9f0a6485532ac\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Local\Temp\nsx9767.tmp\nsArray.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\SonySNC_RX530.ini

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\ST\img\common\win_bottom_right.png

C:\Users\win7\AppData\Local\Temp\nsh2027.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\4ae6cf3c7fbd3414df26e8400c7d510e\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM74.tmp

C:\image\baritem_contents.png

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\res\status_ico_good.png

32788R22FWJFW\restore_pt.vbs

C:\ProgramData\FlashFXP\4\Sites.dat

\\.\COM81

C:\Users\win7\AppData\Local\Temp\7fa4afec6c5bbf4ae0e9f0a6485532ac\pricepeep.exe

C:\Users\win7\AppData\Roaming\Selection Tools.installation.log

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-Package~31bf3856ad364e35~amd64~en-US~11.2.9600.16428.cat

\\.\SICE

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/copy9.html

C:\Users\win7\AppData\Local\Temp\nse7338.tmp\SimpleSC.dll

C:\32788R22FWJFW\iexplore.exe

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_rtl.xml

C:\Users\win7\AppData\Local\Temp\nsg6BB5.tmp

C:\Users\win7\AppData\Local\Temp\nsg206A.tmp\AdvSplash.dll

C:\Windows\GIF to Flash Converter Uninstaller.exe

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\webctrl.dll

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkmejkdfcnncpgjajbiahlekpebhcnhl

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\asl-icn-mini-join-32x32x2.gif

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-NFS-ClientSKU-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\7zS2C7E.tmp\jkmejkdfcnncpgjajbiahlekpebhcnhl\background.html

C:\Users\win7\AppData\Local\Temp\nsc7BA4.tmp\System.dll

\\.\COM203

C:\Users\win7\AppData\Local\Temp\nsk1DCA.tmp\System.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_No3.bmp

C:\Users\win7\AppData\Local\Temp\nsz18BE.tmp\NSISdl.dll

C:\Windows\GeoOCX\WebCam\20090916\LiveX_8320.ocx

C:\Users\win7\AppData\Local\Temp\nsr1493.tmp\\1078530471

C:\Users\win7\AppData\Local\Temp\nsgBB49.tmp\WrapAppSrc

C:\Users\win7\AppData\Local\Temp\nse2888.tmp\\1146630580

C:\Users\win7\AppData\Local\Temp\nsj1BF5.tmp\SimpleSC.dll

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\JEC_D.ini

32788R22FWJFW\rogues.dat

\\.\COM5

c:\$Recycle.Bin\S-1-5-21-3979321414-2393373014-2172761192-1000\desktop.ini

\\.\COM133

C:\Users\win7\AppData\Local\Temp\YandexBarIE00000.log

C:\Users\win7\AppData\Local\Temp\nsg6E82.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\226fda2318382dfba2850343961c3116\pricepeep.exe

C:\Users\win7\AppData\Local\Temp\Creative_ALchemy_AL6_Cleanup.0001.dir.0000\~efe2.tmp

C:\Users\win7\AppData\Local\Temp\nsd81CA.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~ru-RU~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsw6B78.tmp\\127274093

C:\Users\win7\AppData\Local\Temp\nsi2F54.tmp\System.dll

C:\ProgramData\CoffeeCup Software\SharedSettings_1_0_5.ccs

C:\Users\win7\AppData\Roaming\FastStone\FSIV\FSViewer.db

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\AJN45OY1.txt

C:\uninstal.ini

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\copy2.html

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\Editorb10.bmp

C:\ProgramData\SharedSettings.sqlite

C:\Windows\System32\msxml3.dll

C:\Users\win7\AppData\Local\Temp\nsxA014.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\Dlg_Btn_OK.png

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\ui[1].css

C:\Users\win7\AppData\Local\Temp\nss4B52.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\8[1].htm

C:\Users\win7\AppData\Local\Temp\nsm225E.tmp\SimpleSC.dll

Uninstall.lst

C:\Data\Scripts\Gui\PageJoinGameTeams.gui

C:\Users\win7\AppData\Local\Temp\nsd31E8.tmp

C:\Users\win7\AppData\Local\Temp\nsq9488.tmp\StdUtils.dll

C:\32788R22FWJFW\Rkey.cmd

C:\Users\win7\AppData\Local\Temp\pftD7AF~tmp\Disk1\Setup.ini

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM21.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\MBGU6WFP.txt

C:\Users\win7\AppData\Local\Temp\\~DF1B290EAC90A85F43.TMP

C:\Users\win7\AppData\Local\Temp\nsv6826.tmp

C:\Users\win7\AppData\Local\Temp\nsi3D34.tmp\105448008

C:\Users\win7\AppData\Local\Temp\nsx23D5.tmp\365011575

C:\Users\win7\AppData\Local\Temp\nsu7799.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nssAD44.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\71d8cec149ec9115178e8020d4510ae0\volcano.exe

C:\Windows\GeoOCX\WebCam\20090916\Setup.exe

C:\Users\win7\AppData\Local\Temp\nsk3479.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM39.tmp

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM51.tmp

C:\Users\win7\AppData\Local\Temp\nsl2C9F.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsj1BA7.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\\Creative_ALchemy_AL6_Cleanup.0001.dir.0000\PfdRun.pfd

C:\Users\win7\AppData\Local\Temp\nsuB310.tmp\606766963

wdmaud.drv

32788R22FWJFW\FIXLSP.bat

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/section2.html

C:\Users\win7\AppData\Local\Temp\nst2675.tmp\\1002973400

C:\Users\win7\AppData\Local\CoffeeCup Software\SharedSettings.ccs

c:\download\driver\12950\SoftwareDriver\Driver\CMxPCI1.INF

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\BBD\img\common\bt_close_focus.jpg

C:\Users\win7\AppData\Local\Temp\nsp842D.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\e873621278eb045fa3d6cb0e9d983d10\BitAcceleratorDDLRinstaller.exe

\\.\COM153

\\.\COM95

data.pck

32788R22FWJFW\Boot.bat

C:\Windows\System32\run-time.vbs

C:\Users\win7\AppData\Local\Temp\nsj726D.tmp\SimpleSC.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Messoa.ini

C:\AdobeAUM_rootCert.cer

C:\WINDOWS\FONTS\ARIALI.TTF

C:\Users\win7\AppData\Local\Temp\nsj8371.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsv1DC4.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\S0VA6ZC2.txt

C:\Users\win7\AppData\Local\Temp\nsd3015.tmp\System.dll

C:\Python27\Scripts\symbols\dll\wntdll.pdb

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/Editorb7.bmp

C:\Windows\MSCOMCTL.OCX

C:\Users\win7\AppData\Local\Temp\nsr1F7B.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nsi324C.tmp\System.dll

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\BBD\img\common\win_edge_top.png

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\WListViewEx.dll

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad.xml

http://www.raidcall.com/

null/.haxelib

C:\Users\win7\AppData\Local\Temp\nsv4429.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Downloaded Installations\{ECF6FE39-A8B0-411B-83AC-75A17875FE6F}\rserv34pl.msi

C:\Users\win7\AppData\Local\Temp\nsqF529.tmp

newtmail.exe

C:\Users\win7\AppData\Local\Temp\nskCCD2.tmp\System.dll

C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll

\\.\COM26

C:\Users\win7\AppData\Roaming\EbkReader\{B9EBB217-D189-44F1-9FA3-CE24806469F0}\favorites.dat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Wired-Network-Drivers-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/formula4.html

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\VU41QHLK.txt

32788R22FWJFW\c.bat

C:\Users\win7\AppData\Local\Temp\nsgDDF8.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkniaejinldagieikdjacfpfchffkhhi\1\manifest.json

rar.lng

C:\Users\win7\AppData\Local\Temp\nsw20D2.tmp\SimpleSC.dll

\\.\COM39

C:\Users\win7\AppData\Local\Temp\nsw7D18.tmp\\1029906993

\\.\COM119

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\Code.cod

\\.\COM118

C:\Users\win7\AppData\Local\Temp\nsr2E93.tmp\1150307986

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich5core.inf

\\.\COM140

\\.\COM141

C:\Users\win7\AppData\Local\Temp\aut1A32.tmp

Descript.ion

C:\Users\win7\AppData\Local\Temp\nsw4FAE.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\7zSB2EF.tmp\dpbejmkogknnkjbfcacgbckomaofefka\background.html

C:\Users\win7\AppData\Local\Temp\nsl4D08.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\S2S56WZ5.txt

C:\Users\win7\AppData\Local\Temp\is-40HMF.tmp\_isetup\_setup64.tmp

\\.\COM55

C:\Users\win7\AppData\Local\Temp\nso27DC.tmp\211411778

\\.\COM106

C:\Users\win7\AppData\Local\Temp\b82b985bee9cc6a610d7c50fc7373126\pricepeep.exe

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM5.tmp

C:\Users\win7\AppData\Local\Tempfolder\ortmp\libplds4.dll

C:\Users\win7\AppData\Local\Temp\nsv511F.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\PrScrn.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\CPT.ini

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\QQBrowser.exe

\\.\COM82

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hArVzWJrYn.lnk

C:\Users\win7\AppData\Local\Temp\7zS7336.tmp\lkniaejinldagieikdjacfpfchffkhhi\content.js

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp

C:\Users\win7\AppData\Local\Temp\{33A25180-3328-4EB4-9337-9DA72FD0395B}\_ISMSIDEL.INI

c:\download\driver\12950\CmSetx.dll

C:\Users\win7\AppData\Local\Temp\nsi254B.tmp

C:\Users\win7\AppData\Roaming\eLEThjJwJF\dKrvSGxBAr.exe

C:\Users\win7\AppData\Local\Temp\aut3057.tmp

C:\Users\win7\AppData\Local\Tempfolder\ortmp\orionHelper.bit

C:\Users\win7\AppData\Local\Temp\nsdB20B.tmp\\1203085571

C:\Users\win7\AppData\Local\Temp\nsr1619.tmp\\128704196

C:\Users\win7\AppData\Local\Temp\nsv37BA.tmp

C:\Users\win7\AppData\Local\Temp\nsb204B.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsy4046.tmp\System.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~tr-TR~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nso8AB8.tmp\NSISdl.dll

C:\Windows\system32\spool\DRIVERS\x64\3\STDSCHMX.GDL

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-OfflineFiles-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsb1F1C.tmp\742967182

C:\Users\win7\AppData\Local\Temp\nsr1493.tmp\NSISdl.dll

C:\Windows\ciplListBar3N.ocx

C:\Users\win7\AppData\Local\Temp\nsu8CFA.tmp\\1109788421

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~zh-HK~7.1.7601.16492.cat

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager\Internet Download Manager.lnk

\\.\Scsi11:

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\MOWTPOC2.txt

C:\Users\win7\AppData\Local\Temp\nslB5DE.tmp

C:\Users\win7\AppData\Local\Temp\nsm1695.tmp

C:\Users\win7\AppData\Local\Temp\622210edd7d2b5052ce79dc1b1dcd9d6\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsp29FE.tmp

C:\Users\win7\AppData\Local\Temp\nsu7799.tmp\\680383182

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\extreme[1].htm

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/formula3.html

C:\Users\win7\AppData\Local\Temp\nsu8CFA.tmp\nsArray.dll

32788R22FWJFW\AWF.cmd

C:\Users\win7\AppData\Local\Temp\is-U84KA.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\7zS2C7E.tmp\jkmejkdfcnncpgjajbiahlekpebhcnhl\sqlite.js

Preloader.jpg

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\manifest.xml

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\GETZAPPED.GIF

C:\Users\win7\AppData\Local\Temp\nsg2D69.tmp

C:\Windows\system32\Msstkprp.dll

C:\Users\win7\AppData\Local\Temp\nsv7A59.tmp\\583544826

C:\Users\win7\AppData\Local\Temp\is-ACBJR.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\nsw2DC7.tmp

C:\Users\win7\AppData\Roaming\DUOghDDY\cNXdLBfEuN.exe

C:\Users\win7\AppData\Local\Temp\Elite_Xl2k\GCXL4081.PPD

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\XVzWJrYnjUOg.lnk

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\dirapi.mch

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM81.tmp

C:\Users\win7\AppData\Local\Temp\12aubfff5\appdata\\{3E9C7A5B-D249-4C28-A451-53E1024AD354}

C:\Users\win7\AppData\Local\Temp\nsm7E60.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsp9949.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nspA63F.tmp\System.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\exit.bmp

C:\Users\win7\AppData\Local\Temp\nsl1D39.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsv1EA5.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsj1B0A.tmp

C:\ZapImages\slb-BevelEdges.gif

C:\Users\win7\AppData\Local\Temp\nsk86CC.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\Dlg_Btn_Close.png

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\ea.xml

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM28.tmp

C:\services.exe

C:\Windows\system32\Player\Lily_Player.cfg

C:\Users\win7\AppData\Local\Temp\nso723E.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\FileZilla\recentservers.xml

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\ST\img\common\win_edge_right.png

C:\Users\Public\Downloads\dm-BDC1.tmp

C:\Users\win7\AppData\Local\Temp\nsw399A.tmp\SimpleSC.dll

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/mixandmatch.html

C:\Users\win7\AppData\Local\Temp\nsyCBBF.tmp\NSISdl.dll

C:\Program Files\Chameleon Clock\Sounds\Clocks\clock03.wav

C:\Users\win7\AppData\Local\Temp\nsg2DB8.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-JKHB7.tmp\sample.tmp

C:\tcmdkey.zip

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\Btn_Done.png

C:\Users\win7\AppData\Local\Temp\nsk9246.tmp\NSISdl.dll

C:\Windows\system32\ffffffffffffffff

C:\Users\win7\AppData\Local\Temp\nsx3CA6.tmp

C:\Users\win7\AppData\Local\Temp\nskB31F.tmp\nsArray.dll

C:\Windows\COMCAT.DLL

32788R22FWJFW\catchme.cfxxe

\extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}\chrome.manifest

C:\Users\win7\AppData\Local\Temp\\~DF2EA58404E2934CF8.TMP

C:\Users\win7\AppData

C:\Users\win7\AppData\Local\Temp\nseBF64.tmp\\390787467

C:\Users\win7\AppData\Local\Temp\Setup Log 2015-11-19 #001.txt

C:\Users\win7\AppData\Local\Temp\{0654AC99-2BF5-4929-9C44-4B6872A6C4E0}\Setup.INI

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/copy5.html

C:\Windows\ciplListBar.ocx

C:\Users\win7\AppData\Local\Temp\nsh2EF0.tmp

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/formula5.html

C:\Users\win7\AppData\Local\Temp\nso4E8D.tmp\NSISdl.dll

C:\sample.exe

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\A6JPRX2B.txt

C:\Windows\VGSCDAPI.VXD

C:\Users\win7\AppData\Local\Temp\nsmC422.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nse7385.tmp

C:\Users\win7\AppData\Local\Temp\nsb1F6A.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~de-DE~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\epc-D95220E65D4B47B19A3EEF7AD1F83832.zdt

C:\Users\win7\AppData\Local\Temp\nsr6C43.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsf79FB.tmp\nsArray.dll

C:\Users\win7\AppData\Local\GlobalSCAPE\CuteFTP\sm.dat

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\ManifestTool.exe

pzWJrYnjUOghDD.dat

C:\Users\win7\AppData\Local\Temp\nsi2FE6.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\aiw686781.EXE

C:\Windows\system32\wbem\XSL-Mappings.xml

C:\Users\win7\AppData\Local\Temp\A223AD2D825482AE.TMP

C:\Windows\system32\stdole32.tlb

C:\Users\win7\AppData\Local\Temp\nsv3915.tmp\\1041041361

C:\Users\win7\AppData\Local\Temp\nsz78A3.tmp\System.dll

32788R22FWJFW\CregC.dat

C:\Users\win7\AppData\Roaming\e\e.db

C:\Users\win7\AppData\Local\Temp\7zS2C7E.tmp\jkmejkdfcnncpgjajbiahlekpebhcnhl\manifest.json

\\.\COM90

C:\Users\win7\AppData\Local\Temp\\~DF9C61883FE875624E.TMP

C:\Users\win7\AppData\Local\Temp\nswC408.tmp\System.dll

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_altgr.xml

C:\ProgramData\FlashFXP\3\Quick.dat

C:\Users\win7\AppData\Local\Temp\nsp1CFF.tmp\nsArray.dll

C:\Windows\system32\en-US\erofflps.txt

C:\Users\win7\AppData\Local\Temp\nsw2DA6.tmp\\492358780

C:\Users\win7\AppData\Local\Temp\nsp1CFF.tmp\NSISdl.dll

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/copy12.html

C:\Windows\system32\MSWINSCN.OCX

C:\Users\win7\AppData\Local\Temp\Elite_Xl2k\GCX12081.PPD

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/index.swf

C:\Users\win7\AppData\Local\Temp\nss3104.tmp\\858294717

C:\Windows\system32\bedc\miv\bijs.dat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Common-Drivers-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\home.bmp

\\.\SCSI0:

C:\Users\win7\AppData\Local\Temp\nsx16D5.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Temp\nsm217D.tmp\NSISdl.dll

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AAA WMA Converter\AAA WMA Converter Help.lnk

C:\Users\win7\AppData\Local\Temp\$inst\9.tmp

C:\Users\win7\AppData\Local\Temp\is-CRKNN.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\622210edd7d2b5052ce79dc1b1dcd9d6\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Local\Temp\nsc9F98.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsq829A.tmp\System.dll

\\.\SIWVID

C:\Users\win7\AppData\Local\Temp\nsy1A30.tmp\System.dll

C:\Data\Scripts\Gui\PageHostGame.gui

C:\Users\win7\AppData\Local\Temp\nsa1C10.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsx6F21.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsuB3F9.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\verificar_ip[1].htm

C:\Users\win7\AppData\Local\Temp\nsa2CAD.tmp

C:\Users\win7\AppData\Local\Temp\9c2704c22ceab0ebc352c74d631e8669\stub.exe

C:\Users\win7\AppData\Local\Temp\\~DFACE54DD3C836D5B1.TMP

C:\Users\win7\AppData\Local\Temp\nsf7910.tmp\nsJSON.dll

C:\Windows\GeoOCX\WebCam\20090916\GeoCodecReg\GAVC.inf

C:\Windows\system32\APLOC.dll

C:\Users\win7\AppData\Local\Temp\Elite_Xl2k\GCXL6081.PPD

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/formula8.html

C:\Users\win7\AppData\Local\Temp\is-OTV7R.tmp\is-NQO4R.tmp

C:\Users\win7\AppData\Local\Temp\{0903A383-0598-4DEC-8D80-08B12F2C46B7}\Setup.INI

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\Font Asset.x32

C:\Users\win7\AppData\Local\Temp\nswAEF6.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM12.tmp

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\EditorIco.ico

C:\Users\win7\AppData\Local\Temp\nsa77EF.tmp\NSISdl.dll

32788R22FWJFW\Rust.str

C:\Data\Scripts\Gui\Frontend.gui

C:\Users\win7\AppData\Local\Temp\153209002.xml

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM43.tmp

\\.\COM54

C:\Users\win7\AppData\Local\Temp\nsm23E3.tmp

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM37.tmp

C:\Users\win7\wcx_ftp.ini

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\Q1QF8MYS.txt

C:\Users\win7\AppData\Local\Temp\nsyA321.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsw95DF.tmp

uninstall.lng

C:\Windows\RICHTX32.oca

C:\Users\win7\AppData\Local\Temp\nsj71D0.tmp

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-dayi.xml

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\EyeView T2-SA27.ini

C:\Users\win7\AppData\Local\Temp\nsw2EB1.tmp

C:\Users\win7\AppData\Local\Temp\nsyA539.tmp\ftconfig.ini

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\e[1].gif

C:\Users\win7\AppData\Local\Temp\\~DF55519D3F70FD7AFB.TMP

C:\Users\win7\AppData\Local\Tempfolder\ortmp\nssckbi.dll

BackGround.bmp

C:\ProgramData\SharedSettings_1_0_5.ccs

C:\Users\win7\AppData\Local\Temp\nsa7323.tmp

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\Img1.png

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\CallbackCtrl.dll

C:\Users\win7\AppData\Local\Temp\nsy71DF.tmp

C:\Python27\Scripts\symbols\dll\wkernelbase.pdb

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~nb-NO~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsz1AD7.tmp\NSISdl.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\VCC50i.ini

C:\Users\win7\AppData\Local\Temp\nsz8333.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsl7A68.tmp

C:\Users\win7\AppData\Local\Temp\nsv82B8.tmp

C:\Users\win7\AppData\Roaming\KLEThjJwJFKr\KvSGxBArVzW.exe

JjVBchp.exe

C:\Users\win7\AppData\Local\Temp\~zs227B.tmpepc-D95220E65D4B47B19A3EEF7AD1F83832.zdt

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\Bkg.bmp

C:\Users\win7\AppData\Local\Temp\12aubfff5\Config.xml

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\hpcdeopkgienceaajfkaohfhnacpfamh\1\manifest.json

C:\Users\win7\AppData\Local\Adobe\Updater5\AUTrans.sig

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Pelco_P.dll

C:\ProgramData\sample.log

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\1navright.jpg

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Invoicing Software.lnk

C:\Users\win7\AppData\Local\Temp\nsa1FFC.tmp\StdUtils.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\right.bmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsw2164.tmp\System.dll

C:\Windows\GeoOCX\WebCam\20090916\GeoCodecReg\GXGM20.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C5FD5BF0CE6372B1CAFE381FD0BC969C

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM42.tmp

C:\ZapImages\epc-D95220E65D4B47B19A3EEF7AD1F83832.zdt

C:\Users\win7\AppData\Local\Temp\is-PTDNB.tmp\_isetup\_setup64.tmp

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/section4.html

C:\Users\win7\AppData\Local\Temp\nsw2DA6.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\7zS77D6.tmp\515f52bb88450.exe

C:\Users\win7\AppData\Local\Temp\nsa85A4.tmp\System.dll

C:\PROGRA~2\WMACON~1\wma.cnt

C:\Users\win7\AppData\Local\Temp\nsp8C8C.tmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_9.bmp

c:\OkiDriver\OKIB2200B2400\OKB3E002.VER

C:\Users\win7\AppData\Local\Temp\Uninst.bat

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-LocalPack-US-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsv3915.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsc13AE.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nss17EE.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\is-ACBJR.tmp\innocallback.dll

C:\Users\win7\AppData\Local\Temp\nsm7CD9.tmp\UserInfo.dll

c:\OkiDriver\OKIB2200B2400\OPPE_H01.HLP

C:\Users\win7\AppData\Local\Temp\7zS2C7E.tmp\jkmejkdfcnncpgjajbiahlekpebhcnhl\lsdb.js

C:\Users\win7\AppData\Local\Temp\nso27DC.tmp\NSISdl.dll

c:\download\driver\12950\SoftwareDriver\Driver\CMxPCI9.INF

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\pb.png

32788R22FWJFW\Update-CF.cmd

C:\Users\win7\AppData\Local\Temp\pft3E71.tmp\pftw1.pkg

C:\Users\win7\AppData\Roaming\id

Avira Trial Reset v2.3.exe

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Basic-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

\\.\COM46

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZLU.bmp

C:\Users\win7\AppData\Local\Temp\nss8054.tmp\System.dll

C:\Windows\wmaudioredist.exe

\\.\COM19

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\6UH9XGSM.txt

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\pbbkg.png

C:\Users\win7\AppData\Local\Temp\nsd594F.tmp\System.dll

C:\Program Files\Chameleon Clock\Sounds\_ci_gentee_

c:\Program Files\Alexa Booster v3.2\Proxy\conf.txt

C:\Users\win7\AppData\Local\Temp\is-3IOQ3.tmp\_isetup\_setup64.tmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\HiSharp PelcoP.ini

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\ST\img\common\win_top_left_msk.png

C:\Users\win7\AppData\Local\Temp\nsg6866.tmp\\780660593

c:\download\driver\12950\SoftwareDriver\Driver\cmudax64.sys

\\.\COM204

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientExtensions-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsc13AE.tmp\System.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~es-ES~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM35.tmp

Vodelic_mode_d_emploi_video.html

C:\Users\win7\AppData\Local\Temp\nsd70C7.tmp\SimpleSC.dll

__tmp_rar_sfx_access_check_674140

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Help-Customization-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\vido.dll

C:\Users\win7\AppData\Local\Temp\nsb4533.tmp\nsArray.dll

C:\Windows\system32\RICHTX32.oca

C:\Users\win7\AppData\Local\Temp\nsvC31C.tmp

C:\WINDOWS\FONTS\SEGOEUIL.TTF

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\Q32JAK6L.txt

Msstkprp.dll

C:\branding.key

C:\Users\win7\AppData\Local\Temp\nsj8F38.tmp

C:\Windows\SysWOW64\dnsapi.dll

C:\Users\win7\AppData\Local\Temp\nsw892E.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nshF05A.tmp

C:\Users\win7\AppData\Local\Temp\nsh6D3D.tmp\\977503959

C:\Users\win7\AppData\Local\Temp\nsaAF1.tmp

C:\\image\baritem_contents.png

C:\Windows\symbols\dll\System.Windows.Forms.pdb

C:\Users\win7\AppData\Local\Temp\nsu1DB9.tmp

32788R22FWJFW\SvcDrv.vbs

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web.xml

Temp

C:\Data\Scripts\Gui\MessageBoxSwitchAssignment.gui

C:\Users\win7\AppData\Local\Temp\nskB31F.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsmC906.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\ci0-temp\install.bmp

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/copy11.html

C:\Users\win7\AppData\Local\Temp\nsc20F2.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsd6F41.tmp\\1213879438

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM68.tmp

32788R22FWJFW\md5sum.pif

d:\can.dat

C:\Users\win7\AppData\Local\Temp\rd7CD8.tmp\____swmx

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/formula9.html

C:\Users\win7\AppData\Local\Temp\nsq7BC0.tmp\\1017444673

C:\Windows\GeoOCX\WebCam\20090916\IA_VIDEO.dll

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\Btn_Inst.png

C:\Users\win7\AppData\Local\Temp\pftD7AF~tmp\Disk1\setup.inx

32788R22FWJFW\tail.cfxxe

C:\Users\win7\Desktop\dll\wntdll.pdb

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\BBD\img\common\win_edge_right.png

C:\Users\win7\AppData\Local\Temp\000a37d8.a

C:\Windows\GeoOCX\WebCam\20090916\IPCam.dll

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\res\vpn_connected.ico

32788R22FWJFW\swxcacls.cfxxe

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\Ksicfg.dll

C:\Users\win7\AppData\Local\Temp\nsa7A29.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\skin\DarkStripes.gt

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\CheckBox.png

32788R22FWJFW\023v.dat

C:\Python27\DVRArchiveViewer.pdb

32788R22FWJFW\zhsvc.dat

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\ST\img\common\win_edge_left_msk.png

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ImageBasedSetup-IE-Package-Base-Downlevel~31bf3856ad364e35~amd64~en-US~6.3.9600.16428.cat

C:\Users\win7\AppData\Local\Temp\nsx255B.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nse8250.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM36.tmp

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\copy8.html

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich7core.inf

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\GPLH2Q8S.txt

C:\Users\win7\AppData\Local\Temp\nsh86A0.tmp\1104102062

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_jpn.xml

C:\Users\win7\AppData\Local\Temp\is-V1R8B.tmp\_isetup\_setup64.tmp

C:\Windows\system32\shdocvw.dll

32788R22FWJFW\LocalService.dat

C:\ProgramData\Soearcho--NewTeAb

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM92.tmp

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM7.tmp

C:\Users\win7\AppData\Local\Temp\nsa2BC4.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsl4DF3.tmp\System.dll

RICHTX32.oca

WinRAR.exe

C:\Users\win7\AppData\Local\Temp\nsb1CB7.tmp\862653124

C:\Users\win7\AppData\Local\Temp\nsi70E6.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsy25F8.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\is-U84KA.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nskD76B.tmp

C:\Users\win7\AppData\Local\Temp\nsnADC0.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsfB926.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsx16D5.tmp\nss188B.tmp

C:\ProgramData\fiH8GW.au3

C:\Users\win7\AppData\Local\Temp\nst2675.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsh7D56.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsc7B08.tmp\\432805234

C:\Users\win7\AppData\Local\Temp\nsv516D.tmp\NSISdl.dll

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\copy1.html

\\.\COM229

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\proj.dll

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\Editorb6.bmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\ui[1].css

C:\Users\win7\AppData\Local\Temp\nsqDF2.tmp\NSISdl.dll

C:\Windows\system32\691484.tmp

32788R22FWJFW\P.cmd

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/introduction.html

32788R22FWJFW\List-C.bat

C:\symbols\exe\DVRArchiveViewer.pdb

C:\Users\win7\AppData\Local\Temp\nsg1DB6.tmp\System.dll

ccrpprg6.ocx

C:\Windows\system32\ciel\kulm\sur.dat

C:\Users\win7\AppData\Local\Temp\nsc8C0B.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\6ZYVFKAH.txt

c:\download\driver\12950\SoftwareDriver\Driver\CMRMDRV3.DLL

C:\Users\win7\AppData\Local\Temp\nsm225E.tmp\System.dll

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/copy8.html

C:\ZapImages\GETZAPPED.GIF

C:\Users\win7\AppData\Local\Temp\nsv1C3F.tmp\\687567743

C:\Users\win7\AppData\Local\Temp\IXP000.TMP\B.exe.config

C:\Users\win7\AppData\Local\Temp\nsf2BE2.tmp

C:\Users\win7\AppData\Local\Temp\nsm2FF9.tmp\GetPrivateInstaller_woautorun.exe.crypted

C:\Users\win7\AppData\Local\Temp\nsyB022.tmp\System.dll

C:\Windows\explorer.exe.\

C:\Users\win7\AppData\Local\Temp\nsj71D1.tmp\nsWeb.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\A6IFW55H.txt

C:\Users\win7\AppData\Local\Temp\nsj8D9B.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nsb4533.tmp\449694061

\\.\COM125

C:\Users\win7\AppData\Local\Temp\nsw90AD.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM2.tmp

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\Btn_Close.png

\\.\COM67

C:\Users\win7\AppData\Local\Temp\nsn2607.tmp\813416745

C:\Users\win7\AppData\Local\Temp\$inst\5.tmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\ELMO PTC-1000.ini

C:\Users\win7\AppData\Local\Temp\nsq784D.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\ithttp.dll

C:\Users\win7\AppData\Local\Temp\nsx8072.tmp

\\.\COM48

32788R22FWJFW\swsc.cfxxe

C:\Windows\inf\oem2.inf

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/copy2.html

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\Editorb5.bmp

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\BBD\img\common\win_bottom_left_msk.png

c:\download\driver\12950\SoftwareDriver\Driver\VMix.dll

C:\Users\win7\AppData\Local\Temp\7zS7336.tmp\lkniaejinldagieikdjacfpfchffkhhi\background.html

\\.\COM134

C:\Users\win7\AppData\Local\Temp\GUT4331.tmp

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM30.tmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\utils[1].js

C:\Users\win7\AppData\Local\Temp\nsn8BFD.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsm16E4.tmp\nsExec.dll

C:\Windows\system32\\\\wuapi.dll

C:\Users\win7\AppData\Local\Temp\nss23BF.tmp

C:\ProgramData\FlashFXP\3\Sites.dat

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\0DSZK3WT.txt

C:\Users\win7\AppData\Local\Temp\nsi3082.tmp\System.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Sensors-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsd6F41.tmp\1213879438

C:\Users\win7\AppData\Local\Temp\nse8C9C.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nsl7701.tmp\Processes.dll

\\.\COM70

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDMSetup2.log

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AAA WMA Converter\Uninstall.lnk

C:\Users\win7\AppData\Local\Temp\nsf1C2F.tmp\NSISdl.dll

C:\uninstall.lng

C:\Users\win7\AppData\Roaming\kp_installst.dt

c:\OkiDriver\OKIB2200B2400\OPPE_M00.DAT

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\N16RTBJZ.txt

C:\Users\win7\AppData\Local\Temp\is-U84KA.tmp\Setbum.dll

C:\Users\win7\AppData\Local\Temp\nsh8605.tmp\nsArray.dll

c:\users\win7\appdata\local\tempfolder\imyubawob\jimfididueb.dat

C:\ProgramData\Motive\critical.txt

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Printer-Drivers-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp/server.exe

C:\Users\win7\AppData\Local\Temp\nsr9E6E.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nswC408.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsf79FB.tmp\\709972679

C:\Users\win7\AppData\Local\Temp\nss79E9.tmp

C:\Users\win7\AppData\Local\Adobe\Updater5\Data\AdobeUpdater_meta.txt

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\pb.png

C:\Users\win7\AppData\Local\Microsoft\Windows

C:\Windows\system32\spool\DRIVERS\x64\3\KMPCT.exe

C:\Users\win7\AppData\Local\Temp\nsm16E4.tmp\[RANDOM_STRING].7z

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\164[1].txt

C:\Users\win7\AppData\Local\Temp\nst8DF1.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsq7C0E.tmp\System.dll

C:\PROGRA~2\WMACON~1\UNWISE.EXE

C:\Users\win7\AppData\Local\Temp\nsj7ED1.tmp\Processes.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~fi-FI~7.1.7601.16492.cat

C:\Users\win7\AppData\Roaming\NLEThjJwJ\KFKrvSGxB.exe

C:\Users\win7\AppData\Local\Temp\\~DFECE1CD09F0DA26E8.TMP

\\.\COM79

WinCon.SFX

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\service\7z.exe

C:\Windows\ascIPNT.DLL

C:\Users\win7\AppData\Local\Temp\HWID

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\Dlg_bkg.png

C:\Users\win7\AppData\Local\Temp\nseA4C7.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RArVzWJrYnj.lnk\desktop.ini

C:\Users\Public\Documents\BrainsBreaker puzzles\BBrk.ini

C:\Users\win7\AppData\Local\Temp\nsp8CDB.tmp\500292442

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\e[1].gif

C:\Users\win7\AppData\Roaming\CoffeeCup Software\SharedSettings_1_0_5.ccs

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Lilin.ini

C:\ProgramData\Microsoft\Windows

\\.\PhysicalDrive7

C:\Users\win7\AppData\Local\Temp\nsvB61D.tmp\\226427853

C:\Users\win7\AppData\Local\Temp\nsy71E0.tmp\nsWeb.dll

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\kor-kor.xml

\\.\COM188

C:\Users\win7\AppData\Local\Temp\is-LJK8F.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\nsy7547.tmp

C:\Program Files\Teamspeak2_RC2\uninstall.exe

C:\Users\win7\AppData\Local\Temp\7zS55DB.tmp

C:\WINDOWS\FONTS\TIMES.TTF

c:\windows\syswow64\iccvid.dll

C:\Users\win7\AppData\Local\Temp\nsrACF5.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsj8371.tmp\System.dll

C:\Windows\wkernelbase.pdb

32788R22FWJFW\toolbar.sed

C:\Users\win7\AppData\Local\Temp\nsf44AB.tmp\Processes.dll

COMCTL3N.DLL

C:\Users\win7\AppData\Local\Temp\nsf7422.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Temp\\~DFCB020680EECAE218.TMP

32788R22FWJFW\Kollect.bat

C:\Windows\System32\WindowsPowerShell\v1.0\dll\wkernel32.pdb

C:\Program Files\Alexa Booster v3.2\Alexa Booster v3.2.exe

C:\Users\win7\AppData\Local\Temp\nsrD5FC.tmp\cpSetup.exe

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/formula6.html

C:\Users\win7\AppData\Local\Temp\nst703B.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsd9210.tmp

MSCOMCT2.OCX

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\Infobar\image\infobar_offlineurl.png

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\Editorb1.bmp

C:\Users\win7\AppData\Local\Temp\nsa2C60.tmp\\1079415773

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkWatson.exe.mui

\\.\COM175

C:\Users\win7\AppData\Local\Temp\is-U84KA.tmp\isskin.dll

C:\Users\win7\AppData\Roaming\FlashFXP\3\History.dat

C:\Users\win7\AppData\Local\Temp\nsf9226.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nskD36.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\FlashFXP\4\Quick.dat

C:\Users\win7\AppData\Local\Temp\nst76AF.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsd70C7.tmp\System.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\switchOn.bmp

C:\Users\win7\AppData\Local\Temp\nsw2164.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsgD1D8.tmp\NSISdl.dll

dArVzWJrYn.dat

C:\Users\win7\AppData\Local\Temp\nsb2AE4.tmp\NSISdl.dll

C:\Windows\inf\oem0.inf

C:\Users\win7\AppData\Roaming\google-zfnxix\sample\zfnxix.json

C:\Users\win7\AppData\Local\FlashFXP\3\Sites.dat

C:\Windows\system32\TABCTL3N.OCX

C:\Windows\Msstkprp.dll

C:\Users\win7\AppData\Local\Temp\nso34DC.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\Uninstall.ico

C:\image\baritem_option.png

/etc/.haxepath

\\.\COM13

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ESB2id2.inf

C:\Users\win7\AppData\Local\Temp\nsr1619.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\7zS2C7E.tmp\515f5b4a5a32e.exe

C:\Users\win7\AppData\Local\Temp\nsk1EB4.tmp\\513061213

C:\Data\Textures\Gui\Options_Assignments_03.dds

C:\Users\win7\AppData\Local\Temp\c634e7f446ed0baaaffb97e9c00223b7\DirectDownloaderInstaller.exe

C:\title.jpg

C:\Users\win7\AppData\Local\Temp\C0A52B82.TMP

C:\Users\win7\AppData\Local\Temp\nsf1D66.tmp

C:\Users\win7\AppData\Local\Temp\nsy1A30.tmp\SimpleSC.dll

C:\Users\win7\Desktop\dll\wkernelbase.pdb

C:\Users\win7\AppData\Local\Temp\nsm2FF9.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nsk1C4D.tmp

C:\Users\win7\AppData\Local\Temp\71d8cec149ec9115178e8020d4510ae0\downloaderOFFER1.exe

\\.\COM66

C:\Users\win7\AppData\Local\Temp\nsg7ACE.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\pft3E71.tmp\setup.boot

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IjxjVBc.lnk

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\BBD\img\common\win_top_left.png

C:\Users\win7\AppData\Roaming\pid.txt

C:\Windows\GeoOCX\WebCam\20090916\POSLiveViewX_8198.ocx

C:\Users\win7\AppData\Local\Temp\nsh86A0.tmp\nsArray.dll

C:\Windows\system32\kitg\geba\uwu.dat

\\.\COM147

\\.\COM232

C:\Users\win7\AppData\Local\Temp\nsi26D2.tmp\\1131546406

C:\Users\win7\AppData\Local\Temp\nsv7607.tmp\SimpleSC.dll

C:\Users\win7\AppData\Roaming\CoffeeCup Software\SharedSettings.ccs

C:\image\baritem_open.png

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~uk-UA~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\skin\DarkStripes.gt

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM26.tmp

C:\Users\win7\AppData\Local\Temp\nskA7A6.tmp\System.dll

\\.\D:

\\.\COM112

C:\Users\win7\AppData\Local\Temp\nsu83FE.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\TridentCore.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZ_BK.bmp

32788R22FWJFW\List-B.bat

C:\\image\barbutton_right.png

C:\PROGRA~2\WMACON~1\settings.ini

C:\Users\win7\AppData\Local\Temp\nsy8F48.tmp\\1128005201

C:\Users\win7\AppData\Local\Temp\nsl7B52.tmp

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\Infobar\image\security.png

\\.\COM60

C:\Windows\GeoOCX\WebCam\20090916\RPBAudio.ocx

C:\Users\win7\AppData\Local\Temp\is-ACBJR.tmp\_isetup\_shfoldr.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IIS-WebServer-AddOn-2-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsq1EDE.tmp\System.dll

\\.\COM162

C:\ProgramData\Barowasse2saave\uninstall.exe

c:\IES_Files\Outdoor\Bollards\OSA8R-HID\OSA8R-100PSMH120-AC.IES

C:\Windows\system32\oqu\dof\aacoa.dat

32788R22FWJFW\Kill-All.cmd

C:\Users\win7\AppData\Local\Temp\{33A25180-3328-4EB4-9337-9DA72FD0395B}\rserv34pl.msi

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/section6.html

C:\Users\win7\AppData\Local\Temp\ab5d4243cc93ed6bbca90dd95ca61177\volcano.exe

C:\Users\win7\Documents\MSDCSC

C:\Users\win7\AppData\Local\Temp\nsn3133.tmp\StdUtils.dll

c:\Users\win7\AppData\Local\Temp\sfx1\_bbg.exe

ctags.cnf

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\BugReport.exe

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\copy12.html

C:\Users\win7\AppData\Local\Temp\fe9505b7f8b60bc6e1a74dc5c757fe1e\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Local\Temp\pft3E71.tmp\engine32.cab

C:\Users\win7\AppData\Local\Temp\nsf74BE.tmp

C:\Users\win7\AppData\Local\Temp\nse724E.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nssAD44.tmp\121723934

C:\Users\win7\AppData\Local\Temp\nss559E.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\4e2a1aff004f49a5e8fa911f735a399c\volcano.exe

C:\Users\win7\AppData\Local\Temp\nsv7607.tmp\System.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager\license.lnk

C:\Users\win7\AppData\Local\Temp\nsb7B62.tmp

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\pbn-D099EB9026F14E0A9F0E6CA8D757AABF.zdt

\\.\COM41

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\section3.html

C:\Windows\system32\MSHTML.tlb

C:\Users\win7\AppData\Local\Temp\nseB5CC.tmp\\150734581

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\acsock64.inf

C:\Users\win7\AppData\Local\Temp\nsc7F59.tmp

C:\Windows\ciplImageLis3N.ocx

32788R22FWJFW\ndis_combofix.dat

32788R22FWJFW\ND_.bat

C:\Users\win7\AppData\Local\Temp\013c8edc16128c116f00beee1fe56d21\volcano.exe

\\.\G:

C:\Windows\System32\drivers\etc\services

C:\Users\win7\AppData\Local\Temp\nsb845E.tmp

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Express Rip CD Ripper.lnk

C:\Users\win7\AppData\Local\Temp\nst41CF.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsy8F48.tmp\NSISdl.dll

TechNote.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\BL6YHMCU.txt

C:\Users\win7\AppData\Local\Temp\nsg7C6C.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsrD5FC.tmp\nsArray.dll

C:\My Documents\How To Install Presets! READ!!!.txt

C:\Users\win7\AppData\Local\Temp\nsjA6FF.tmp\SimpleSC.dll

\\.\NTICE

\\.\COM173

C:\Users\win7\AppData\Local\Temp\nss3DB5.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsh4855.tmp\System.dll

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/copy1.html

C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk

C:\Users\win7\AppData\Local\Temp\nsg84CC.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\Btn_Close.png

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_Clear.bmp

C:\WINDOWS\FONTS\SEGUISYM.TTF

C:\Python27\Scripts\CFVS_HookDll.pdb

C:\Users\win7\AppData\Local\Temp\nskE9F5.tmp

C:\Users\win7\AppData\Local\Temp\~GLH0001.TMP

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\rightUP.bmp

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\Btn_Inst.png

C:\Users\win7\AppData\Local\Temp\nsh21AD.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\Dlg_icon.png

\\.\COM4

C:\Users\win7\AppData\Local\Temp\\~DF43A97E88127BFBCB.TMP

c:\users\win7\appdata\local\tempfolder\punepyriyaqi\poebfucip.dat

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\acsmux64.inf

C:\Users\win7\AppData\Local\Temp\Cab70F5.tmp

C:\PROGRA~2\WMACON~1\unwise.exe

C:\Users\win7\AppData\Local\Temp\TMP4352$.TMP

c:\download\driver\12950\Program\difxapi64.dll

C:\Users\win7\AppData\Roaming\Microsoft\MSXML2\msxml4.dll

C:\Users\win7\AppData\Local\Temp\nsa2C60.tmp\1079415773

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\JVC_IPCAM_PTZ.ini

C:\Users\win7\AppData\Local\Temp\nsj9023.tmp\Processes.dll

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\mixup.jpg

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Drivers-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\BP76R53L.txt

C:\Users\win7\AppData\Local\Temp\nsh7D56.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsb7C4D.tmp\1146937031

c:\OkiDriver\OKIB2200B2400\OPPE.DAT

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/Editorb1.bmp

C:\Users\win7\AppData\Local\Temp\nsh2DC2.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nszE55B.tmp\System.dll

CONIN$

File_Id.diz

C:\Users\win7\AppData\Local\Temp\nsc9F98.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsc248F.tmp

C:\Users\win7\AppData\Local\Temp\nsd8219.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsa330E.tmp\System.dll

C:\Windows\System32\Wbem\wkernelbase.pdb

C:\Windows\MSSTDFMN.DLL

C:\Users\win7\AppData\Local\Temp\nsg201B.tmp\nsArray.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\AM68VFS7.txt

C:\Users\win7\AppData\Local\Temp\nse2972.tmp\NSISdl.dll

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/outsidein.html

C:\Users\win7\AppData\Local\Temp\nsp1D4D.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsjB686.tmp

C:\Users\win7\AppData\Roaming\eLEThjJwJF\7470.xml

C:\Users\win7\AppData\Local\Temp\7zS2C7E.tmp\jkmejkdfcnncpgjajbiahlekpebhcnhl\515f5b4a5a1807.48198382.js

C:\UnzDll.dll

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\msvcr71.dll

C:\Users\win7\AppData\Local\Temp\nsp1C6C.tmp

C:\Users\win7\AppData\Roaming\FlashFXP\4\Sites.dat

RarExt64.dll

C:\Users\win7\AppData\Local\Temp\Elite_Xl2k\ReadMe.txt

\\.\COM245

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Help-CoreClientUAPSN-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsg2E54.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsk1DCA.tmp\nsRandom.dll

C:\Users\win7\AppData\Local\Temp\E592A50D-87A9-437F-9F9B-31AA642D3A9Bmp\\tE592A50D-87A9-437.tmp

C:\Users\win7\AppData\Local\Temp\7fa4afec6c5bbf4ae0e9f0a6485532ac\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsb4533.tmp\\449694061

C:\Windows\System32\msxml3.dll\1

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ko-kr.xml

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM46.tmp

C:\Users\win7\Desktop\symbols\dll\wntdll.pdb

C:\Users\win7\AppData\Local\Temp\DIQ\test-av13490_004\DomaIQ.exe

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\Editorb2.bmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-Optional-Package~31bf3856ad364e35~amd64~en-US~11.2.9600.16428.cat

C:\Users\win7\AppData\Local\Temp\tmp_gui\tmp_0\tmp_2320_1.dat

32788R22FWJFW\pev.exe

C:\Program Files\Chameleon Clock\Sounds\Clocks\Clock3.wav

C:\Users\win7\AppData\Local\Temp\nsg6C03.tmp\System.dll

32788R22FWJFW\svc_wht.dat

C:\Users\win7\AppData\Local\Temp\nsl2B70.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsg1FD8.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsz32B5.tmp\SimpleSC.dll

C:\Users\win7\Contacts\desktop.ini

\\.\COM76

C:\Users\win7\AppData\Local\Temp\nsh21AD.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\{33A25180-3328-4EB4-9337-9DA72FD0395B}\0x0409.ini

C:\Users\win7\AppData\Local\Temp\ab5d4243cc93ed6bbca90dd95ca61177\pricepeep.exe

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Lilin820.ini

C:\Users\win7\AppData\Local\Temp\nsmE3A2.tmp\NSISdl.dll

C:\Windows\system32\ciplImageList.ocx

C:\Users\win7\AppData\Local\Temp\nslB62D.tmp\Processes.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\60E31627FDA0A46932B0E5948949F2A5

C:\Data\Scripts\Gui\PageSplashRenderware.gui

c:\da8df086ca54f7fdd325c4\update\update.inf

C:\Users\win7\AppData\Local\Temp\nsj350B.tmp\4f6ea680-bfc5-40ae-80ef-f992aa74653f.dll

C:\Users\win7\AppData\Local\Temp\nsh5474.tmp

C:\Users\win7\AppData\Local\Temp\nso26A4.tmp\SimpleSC.dll

32788R22FWJFW\netsvc.vista.dat

C:\Users\win7\AppData\Local\Temp\nsq1DA6.tmp\\160949597

C:\Data\Scripts\Gui\MessageBoxAreYouSure.gui

C:\Users\win7\AppData\Local\Temp\nss8D54.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsa7A29.tmp\LangDLL.dll

C:\Users\win7\AppData\Local\Temp\nsg7ACE.tmp\581706123

C:\Users\win7\AppData\Local\Temp\is-36CJS.tmp\_isetup\_RegDLL.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~da-DK~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsd2314.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\7zS55DB.tmp\jjhklgikohjiaahlibnfgegobedhpgmf\content.js

C:\Users\win7\AppData\Local\Temp\nss95B4.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsz7EE1.tmp\SimpleSC.dll

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\ST\img\common\win_top_right.png

C:\Users\win7\AppData\Local\Temp\\~DF58C338C59A169B6B.TMP

C:\Users\win7\AppData\Local\Temp\nsc7B08.tmp\432805234

c:\Program Files\Common Files\Microsoft Shared\ink\hu-HU\tipresx.dll.mui

C:\Users\win7\AppData\Local\Temp\nsn31CF.tmp\SimpleSC.dll

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/copy3.html

32788R22FWJFW\Prep.inf

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\formula8.html

C:\Users\win7\AppData\Local\Temp\nsc6CCF.tmp

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM90.tmp

Uninstall.exe

C:\Users\win7\AppData\Local\Temp\nsn2607.tmp\\813416745

C:\symbols\dll\wntdll.pdb

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\error_icon[1]

C:\Python27\Scripts\wntdll.pdb

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~ko-KR~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\7zS2C7E.tmp\jkmejkdfcnncpgjajbiahlekpebhcnhl

C:\Windows\GeoOCX\WebCam\20090916\Logo.bmp

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\QBExtensionFramework.dll

32788R22FWJFW\Fin.dat

zSGxBArVzWJr.dat

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\V76H33PG.txt

C:\Users\win7\AppData\Roaming\uLEThjJw

C:\Windows\SysWOW64\dllcache\dnsapi.dll

C:\Users\win7\AppData\Local\Temp\nsf8F5B.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nsd18C9.tmp\nsArray.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\VCC4.ini

C:\Settings\Certificates\client.crt

C:\Users\win7\AppData\Local\Temp\nsrEE5B.tmp\Processes.dll

C:\Settings\Favorites.xml

C:\Users\win7\AppData\Local\Temp\nsl1D39.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsc6DB9.tmp\1079041222

C:\Users\win7\AppData\Local\Temp\nsn2607.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\NYT2086A.txt

C:\Users\win7\AppData\Local\Temp\4ae6cf3c7fbd3414df26e8400c7d510e\volcano.exe

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\Text Asset.x32

C:\Users\win7\AppData\Local\Temp\\~DFDF61059ABCE401BB.TMP

C:\Windows\system32\Asycfilt.dll

C:\Users\win7\AppData\Local\Temp\cetrainers\CET1B81.tmp\CET_TRAINER.CETRAINER

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\navi.ico

C:\Users\win7\AppData\Local\Temp\nsk377C.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsx3086.tmp

C:\Users\win7\AppData\Local\Temp\nsqDF2.tmp\189585693

Rar.exe

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\Infobar\css\base.css

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ja-jp.xml

C:\Users\win7\AppData\Local\Temp\nsfC49.tmp\System.dll

C:\WINDOWS\FONTS\MSJH.TTF

C:\Windows\System32\WindowsPowerShell\v1.0\wkernel32.pdb

C:\Users\win7\AppData\Local\Temp\ci0-temp\uninstall.ico

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\MESSOA D-700 series.ini

C:\Users\win7\AppData\Local\Temp\nsp799D.tmp\1119186236

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\outsidein.html

C:\Data\Scripts\Gui\MessageBoxNoCd.gui

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\I48T2Z2V.txt

C:\Users\win7\AppData\Local\Temp\nsgBB49.tmp\RK.bmp

C:\Users\win7\AppData\Local\Temp\nsg11A0.tmp\NSISdl.dll

C:\ZapImages\asl-icn-mini-support-32x32x2.gif

C:\Users\win7\AppData\Local\Temp\nsh7DF3.tmp\nsWeb.dll

RarExt.dll

Formats\lzh.fmt

c:\windows\system32\drivers\adpahci.sys

C:\Users\win7\AppData\Local\Temp\nsb6E14.tmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_7.bmp

C:\Users\win7\AppData\Local\Temp\nsz761B.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsr6B58.tmp

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM85.tmp

c:\Program Files\Alexa Booster v3.2\Skins\2P.bmp

C:\Users\win7\AppData\Local\Temp\netlog.txt

\\.\COM244

C:\Users\win7\AppData\Local\Temp\7zS55DB.tmp\settings.ini

C:\Users\win7\AppData\Local\Temp\nsi2683.tmp

C:\Users\win7\AppData\Local\Temp\nso28C6.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nstF018.tmp

C:\WINDOWS\FONTS\ANGSA.TTF

C:\Users\win7\AppData\Local\Temp\nsz7681.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsk86CB.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\uninst.exe

C:\Users\win7\AppData\Local\Temp\12aubfff5\appdata\\thumb\https___mail.qq.com_.jpg

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\7S4IO594.txt

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\index[1].htm

C:\Users\win7\AppData\Roaming\EbkReader\{B9EBB217-D189-44F1-9FA3-CE24806469F0}\ebk.dat

C:\Users\win7\AppData\Local\Temp\nss8CB8.tmp\StdUtils.dll

C:\Windows\GeoOCX\WebCam\20090916\SSL.dll

c:\users\win7\appdata\local\tempfolder\liurlouwodmue\loegpanyu.dat

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\ZC-122.ini

32788R22FWJFW\mtee.cfxxe

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM17.tmp

\\.\COM210

32788R22FWJFW\safeboot.def.dat

C:\ProgramData\kJopnp.au3

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\828298824EA5549947C17DDABF6871F5_7711FB3A44D1E4EB005F46022D09BCC0

C:\Users\win7\AppData\Roaming\mLEThjJw\oJFKrvSG.exe

C:\Users\win7\AppData\Local\Temp\nsa7A29.tmp\nsisdt.dll

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\WavePad Sound Editor.lnk

C:\Users\win7\AppData\Local\Temp\$inst\7.tmp

C:\Windows\system32\rundll32.exe

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\A8V5DPDX.txt

C:\wkernel32.pdb

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\ani-logomain-117x84.gif

C:\ProgramData\FileZilla\filezilla.xml

32788R22FWJFW\katch.cmd

sfiles\lang.ini

C:\Users\win7\AppData\Local\Temp\ci0-temp\AlexaBooster_uninstlist.gea

C:\Users\win7\AppData\Local\Temp\nsx16D4.tmp

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/EditorIco.ico

C:\Users\win7\AppData\Local\Temp\nsn2607.tmp\SimpleSC.dll

C:\LINGO.INI

C:\Users\win7\AppData\Local\Temp\nsjFCDB.tmp\NSISdl.dll

C:\Python27\Scripts\dll\wkernel32.pdb

C:\Users\win7\AppData\Local\Temp\nso74A3.tmp

C:\Users\win7\AppData\Local\Temp\nss3104.tmp\nsArray.dll

32788R22FWJFW\FileKill.cfxxe

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\CFYRBGUR.txt

C:\Users\win7\AppData\Local\Temp\nsaAD3F.tmp

C:\Users\win7\AppData\Local\Temp\nsc2FBC.tmp\System.dll

C:/Windows/system32/VB6JP.DLL

C:\Users\win7\AppData\Local\Temp\nse8B64.tmp\\989149078

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\e[1].gif

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Dynacolor2.ini

\\.\COM94

C:\Users\win7\AppData\Local\Temp\nsv751C.tmp\NSISdl.dll

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web\webbase.xml

C:\Windows\system32\dll\wkernelbase.pdb

C:\Users\win7\AppData\Local\Temp\nsr2EE1.tmp\624915643

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager\Grabber Help.lnk

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml

C:\Users\win7\AppData\Local\Temp\nsg2E54.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsn31CF.tmp\System.dll

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/copy4.html

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/1navleft.jpg

C:\Users\win7\AppData\Local\Temp\DIQ\flashplayer_151\config.dll

C:\Users\win7\AppData\Local\Temp\nsi70E6.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsa7589.tmp\NSISdl.dll

C:\sample.ini

C:\Users\win7\AppData\Local\Temp\7zS7BFD.tmp\pnadleldkhfpclgofgnnmhblfcamfhfa\lsdb.js

C:\Users\win7\AppData\Local\Temp\nss6FEC.tmp\nsArray.dll

C:\Windows\system32\wmaudioredist.exe

\\.\COM217

C:\~ZS-LocalServerTest.foo

C:\Users\win7\AppData\Local\Temp\nsr1493.tmp\1078530471

C:\ProgramData\GlobalSCAPE\CuteFTP Lite\sm.dat

C:\Users\win7\AppData\Local\Temp\nsk9246.tmp\nsArray.dll

C:\Windows\system32\MSVCRTD.DLL

C:\Users\win7\AppData\Local\Temp\nsr2EE1.tmp\SimpleSC.dll

C:\Users\win7\AppData\Roaming\SharedSettings.sqlite

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\slb-BevelEdges.gif

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\StorVision.ini

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\Dlg_Btn_Close.png

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\beepdl.dll

C:\Windows\system32\urot\vifq\gaa.dat

C:\ProgramData\R0OSKF.exe

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\BBD\img\common\win_edge_bottom.png

C:\Users\win7\AppData\Local\Temp\nsv82B9.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nstC967.tmp\nsArray.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\0O5BBSKI.txt

c:\windows\system32\drivers\adp94xx.sys

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/formula2.html

C:\Users\win7\AppData\Local\Temp\12auf94d4\appdata\\Adblock\{43789A6F-8316-54A6-96D4-87874B9CC177}

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM0.tmp

C:\Windows\COMCTL3N.DLL

C:\Users\win7\AppData\Local\Temp\IXP000.TMP\B.exe

\\.\L:

C:\Users\win7\AppData\Local\Temp\nsi2599.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nso28C6.tmp\\307909633

C:\Users\win7\AppData\Local\Temp\nss6FEC.tmp\\565464247

C:\Users\win7\AppData\Local\Temp\nsw2EB2.tmp\StdUtils.dll

c:\download\driver\12950\SoftwareDriver\Driver\CmiCnfg3.cpl

C:\Users\win7\AppData\Local\Temp\nsg206A.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nsh8C2A.tmp\NSISdl.dll

C:\cygwin\etc\setup\last-connection

Avira Registry Cleaner\View.bmp

C:\Users\win7\AppData\Local\Temp\nsk1EB4.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsk1BB2.tmp\\118216779

C:\Users\win7\AppData\Local\Temp\nsc6EA4.tmp\SimpleSC.dll

32788R22FWJFW\BootSect.dll

C:\Users\win7\AppData\Roaming\iVMhdbei\iVMhdbei.exe

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerToPeer-Full-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\1P2H0IOT.txt

C:\Users\win7\AppData\Local\Temp\nsp81FD.tmp\\480236960

C:\Users\win7\AppData\Local\Temp\4d817503ee65560a8dcdb650fa6add61\pricepeep.exe

C:\Users\win7\AppData\Local\Temp\nss1926.tmp\System.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CodecPack-Basic-Encoder-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsd594F.tmp\version.ini

C:\Users\win7\AppData\Local\Temp\pftD7AF~tmp\Disk1\layout.bin

C:\Users\win7\AppData\Local\Temp\pft3E71.tmp\UnInstall.iss

32788R22FWJFW\SetEnvmt.bat

32788R22FWJFW\RCLink.dat

C:\Windows\system32\MSVBVM60.DLL

C:\Windows\system32\msvcrt.dll

c:\Program Files\Alexa Booster v3.2\Alexa Booster v3.2.exe

C:\Users\win7\AppData\Local\Temp\nsl2C9F.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\pft3E71.tmp\layout.bin

C:\Users\win7\AppData\Local\Temp\nse1C72.tmp\System.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\switch.bmp

C:\Users\win7\AppData\Local\Temp\aut3058.tmp

C:\Program Files\Alexa Booster v3.2

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\Edit.png

C:\Users\win7\AppData\Local\Temp\is-2PQ60.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\Donate.ico

C:\Users\win7\AppData\Local\Temp\nst2711.tmp\959661730

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\BBD\img\common\win_bottom_right.png

Zip.SFX

__tmp_rar_sfx_access_check_1743250

c:\OkiDriver\OKIB2200B2400\OPPE_M00.DLL

C:\Users\win7\AppData\Local\Temp\nsf1CCB.tmp\\838647836

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\ST\img\common\win_edge_right_msk.png

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~cs-CZ~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsb7B63.tmp\457014823

32788R22FWJFW\NetworkService.dat

C:\Users\win7\AppData\Local\Temp\nsa73C0.tmp\System.dll

c:\download\driver\12950\CmiOemConfig.ini

C:\Users\win7\AppData\Local\Temp\nsf1C2F.tmp\\572138058

\\.\COM32

C:\Game.exe

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/copy13.html

C:\Users\win7\AppData\Local\Temp\nsi1A20.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsa41D8.tmp\System.dll

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\vpnagent.exe

C:\Users\win7\AppData\Local\Temp\nsv2C41.tmp\\617765131

C:\Users\win7\AppData\Local\Temp\nscA033.tmp\NSISdl.dll

C:\Data\Textures\Gui\AssignmentsBack.dds

C:\Users\win7\AppData\Local\Temp\nsa7A29.tmp\nsRandom.dll

C:\Users\win7\AppData\Roaming\GlobalSCAPE\CuteFTP Lite\sm.dat

C:\Users\win7\AppData\Local\Temp\nsd594F.tmp

\\.\COM101

C:\Users\win7\AppData\Local\Temp\nsc6EA4.tmp\System.dll

C:\Windows\system32\~GLH0004.TMP

C:\Users\win7\AppData\Local\Temp\nsw4FAE.tmp\nsArray.dll

\\.\COM100

C:\Users\win7\AppData\Local\Temp\fe9505b7f8b60bc6e1a74dc5c757fe1e\volcano.exe

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A34B45DD28A5DAEFDA3E0BA2FCE7DE24_D8309B1ECA516AE8FCEB10D1DC37BE8F

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\00RFMB8T.txt

C:\Users\win7\AppData\Local\Temp\3db95c0d2bab524b5259c84257550ed1\DirectDownloaderInstaller.exe

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Pana_IPro.ini

C:\Users\win7\AppData\Local\Temp\nsz2A5F.tmp\\1115100230

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Accounting Software.lnk

C:\Users\win7\AppData\Local\Temp\nsz2A5F.tmp\nsArray.dll

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\vpnva.inf

bdcap32.dll

32788R22FWJFW\Catch-sub.cmd

c:\OkiDriver\OKIB2200B2400\ophcwnxt.dll

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\Btn_Close.png

C:\Users\win7\AppData\Roaming\WeatherWatcher\Skins\Forecasts\Splendid\Current.html

32788R22FWJFW\License\Zip - license.txt

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~sk-SK~7.1.7601.16492.cat

C:\Windows\GeoOCX\WebCam\20090916\GeoCodecReg\GJPG.inf

C:\Users\win7\AppData\Local\Temp\nsp2883.tmp\System.dll

C:\Python27\wkernelbase.pdb

C:\Windows\system32\COMCTL32.DLL

C:\Users\win7\AppData\Local\Temp\nsw852A.tmp\SimpleSC.dll

__tmp_rar_sfx_access_check_758859

C:\Users\win7\AppData\Local\Temp\nsc218E.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nsg84CC.tmp\System.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MSMQ-Client-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nss7FB7.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsy8713.tmp\NSISdl.dll

C:\Windows\inf\oem5.PNF

C:\Windows\GeoOCX\WebCam\20090916\OCXDebug.ini

C:\Users\win7\AppData\Local\Temp\b82b985bee9cc6a610d7c50fc7373126\volcano.exe

C:\Users\win7\AppData\Local\Temp\226fda2318382dfba2850343961c3116\BitAcceleratorDDLRinstaller.exe

ciplImageList.ocx

C:\Users\win7\AppData\Local\Temp\nsg206A.tmp\SkinH.DLL

c:\OkiDriver\OKIB2200B2400\OPHCWNXS.dll

C:\Users\win7\AppData\Local\Temp\fefa3aaf94374590437d72a7b328196e\BitAcceleratorDDLRinstaller.exe

Formats\gz.fmt

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM34.tmp

C:\Users\win7\AppData\Local\Temp\nsk1DCA.tmp\nsArray.dll

\\.\COM42

C:\Users\win7\AppData\Local\Temp\nst703B.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\1268573008.xml

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers\numbase.xml

C:\Users\win7\AppData\Local\Temp\nsz58CB.tmp\SimpleSC.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\84AFE219AEC53B0C9251F5E19EF019BD_DBDA70FA0C7F0763826EA9179F77D209

C:\Users\win7\AppData\Local\Temp\nsk4343.tmp\KillProcDLL.dll

C:\Users\win7\AppData\Local\Temp\nsd594F.tmp\modern-header.bmp

C:\Users\win7\AppData\Local\Temp\nsy7596.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsjA6FF.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsu747F.tmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PelcoSpetra3.ini

\\.\REGMON

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\BBD\img\common\win_top_right.png

C:\Users\win7\AppData\Local\Temp\7zS55DB.tmp\515f05c5b9edb.dll

installer.bat

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Soearcho--NewTeAb\Soearcho--NewTeAb.lnk

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich5ide.inf

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\mshwLatin.dll.mui

__tmp_rar_sfx_access_check_4553203

C:\Windows\GeoOCX\WebCam\20090916\GeoCodecReg\GEOX.inf

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\Microsoft.VC90.CRT\msvcp90.dll

C:\Users\win7\AppData\Local\Temp\nsm16E3.tmp

C:\Users\win7\AppData\Local\Temp\nsz4E31.tmp\\892719323

C:\Users\win7\AppData\Local\Temp\fefa3aaf94374590437d72a7b328196e\volcano.exe

C:\Users\win7\AppData\Local\Temp\\~DF8B16D9040D1F3FDB.TMP

C:\Users\win7\AppData\Local\Temp\3b3466ef1cb588b8fa4e82447de17686\volcano.exe

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\VHNC2NT8.txt

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\Archivo.dec

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\verificar_ip[1].htm

C:\Users\win7\AppData\Local\Temp\aut5508.tmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\dm[1]

C:\Users\win7\AppData\Local\Temp\nsyCAD5.tmp\NSISdl.dll

c:\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PCDSkin.bmp

C:\Users\win7\AppData\Roaming\QuwoxaBATH

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-BLB-Client-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\ProgramData\Soearcho--NewTeAb\uninstall.exe

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\win7\AppData\Local\Temp\nspE574.tmp

\\.\COM158

C:\Users\win7\AppData\Local\Temp\nsb21D1.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsx250D.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\anote.png

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Switch Sound File Converter.lnk

C:\Users\win7\AppData\Local\Temp\nsz2869.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nslAE1B.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsr152F.tmp\\146410224

C:\Users\win7\AppData\Local\Temp\nsb2D07.tmp\Processes.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\NKSL98BO.txt

c:\download\driver\12950\Setup.exe

C:\Users\win7\AppData\Local\Temp\nsr2F2F.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\Btn_Done.png

C:\Users\win7\AppData\Local\Temp\nsi324C.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsk1EB4.tmp\513061213

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich5usb.inf

C:\Users\win7\AppData\Local\Temp\nsd18C9.tmp\\825095914

\\.\COM14

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM61.tmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Bosch.ini

C:\Users\win7\AppData\Local\Temp\nsm56AC.tmp\428719227

C:\Users\win7\AppData\Local\Temp\nsc2358.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nss80A2.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsa36FA.tmp\StdUtils.dll

C:\Windows\GeoOCX\WebCam\20090916\GvMegaPixelSetting.ini

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\BBD\img\common\win_top_left_msk.png

C:\Users\win7\AppData\Local\Temp\nsw7C2E.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsx2EBD.tmp\System.dll

C:\Data\Textures\Gui\SingleMission_DeleteMission_03.dds

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Drivers-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\Microsoft.NET\Framework\v2.0.50727\Config\machine.config

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Libraries\Documents.library-ms

C:\Users\win7\AppData\Local\Temp\nss95B4.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsd8D93.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\12aubfff5\QBInstaller.dll

ccrpprg3N.ocx

C:\Windows\system32\wbem\texttable.xsl

32788R22FWJFW\history.bat

C:\Windows\System32\WindowsPowerShell\v1.0\dll\wntdll.pdb

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\dm_bar_down[1]

C:\Users\win7\AppData\Local\Temp\nsa2C11.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~fr-FR~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsv4F10.tmp

C:\ZapImages\asl-icn-mini-home-32x32x2.gif

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\GKB.ini

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\IpsMigrationPlugin.dll.mui

C:\Users\win7\AppData\Local\Temp\325f6ef1eb345d57019b1a43de33cbb2\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Local\Temp\9b30ab17762cfe32075060c38291a895\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsc16F4.tmp\\365624476

C:\Program Files\Motion-Twin\haxe\lib/hxcpp/.current

C:\Users\win7\AppData\Local\Temp\nsj416E.tmp

C:\Windows\Imagination Studio.dat

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\carregando[1].gif

C:\Windows\GeoOCX\WebCam\20090916\GvCrypto.dll

C:\Windows\desktop.ini

C:\Users\win7\AppData\Local\Temp\Elite_Xl2k\GCCX8_16.INF

32788R22FWJFW\w2kreg.dat

autocad_64bit_Keygen.exe

C:\Users\win7\AppData\Local\Temp\nsv37BB.tmp\a97db507-fa53-474b-870e-0e4ef6b2e105.dll

C:\Users\win7\AppData\Local\Temp\nsh463C.tmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\index[1]

C:\Users\win7\AppData\Local\Temp\nsm8B56.tmp\StdUtils.dll

C:\ProgramData\FlashFXP\4\Quick.dat

C:\Users\win7\AppData\Local\Temp\nss6FEB.tmp

C:\Users\win7\AppData\Local\Tempfolder\ortmp\libnspr4.dll

C:\Users\win7\AppData\Local\Temp\nsg5F03.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsg1E51.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\e[1].gif

C:/Windows/system32/VB6STKIT.DLL

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\service\xperf.exe

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\Bkg.bmp

C:\Users\win7\AppData\Local\Temp\nsr4717.tmp\System.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager\Grabber Help.lnk

C:\Users\win7\AppData\Local\Temp\7zS55DB.tmp\515f05c5b9ea2.exe

c:\OkiDriver\OKIB2200B2400\ok021b3c.cap

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\HHPJH5MB.txt

C:\Users\win7\AppData\Local\Temp\nso34DC.tmp\System.dll

\\.\COM186

C:\Users\win7\AppData\Local\Temp\nsm225E.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsv516D.tmp\\725090903

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~nl-NL~7.1.7601.16492.cat

c:\download\driver\12950\OemIcon\Logo.ICO

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\TOA_cc551.ini

C:\Users\win7\AppData\Local\Temp\nsyA539.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsm6D0E.tmp\\923909173

C:\Users\win7\AppData\Local\Temp\nsk8D58.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\tsldrl6660\link.dat

C:\Data\Scripts\Gui\MessageBoxNotAllAssigned.gui

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\QRCode.dll

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu.xml

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\dot.bmp

C:\Windows\System32\WindowsPowerShell\v1.0\dll\wkernelbase.pdb

C:\Users\win7\AppData\Local\Temp\\~DF110BFAC606AB6C7A.TMP

C:\Users\win7\AppData\Local\Temp\_MSI5166._IS

C:\Users\win7\AppData\Local\Temp\nsw7C2E.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsd594F.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nsl2C03.tmp\StdUtils.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\enterprisesec.config.cch

C:\Users\win7\AppData\Local\Temp\nsk1DCA.tmp\cpSetup.exe

C:\Users\win7\AppData\Local\Temp\nsk377C.tmp\\1153542742

C:\Users\win7\Desktop\CFVS_HookDll.pdb

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM63.tmp

MSWINSCK.OCX

C:\Users\win7\AppData\Local\Temp\nsg206A.tmp\ButtonLinker.dll

C:\ProgramData\Microsoft

__tmp_rar_sfx_access_check_750281

C:\Windows\SysWOW64

32788R22FWJFW\gsar.cfxxe

\\.\COM89

C:\Users\win7\Desktop\BitTorrent.lnk

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Dynacolor.ini

C:\Users\win7\AppData\Local\Temp\nsjC29C.tmp\NSISdl.dll

C:\Users\win7\AppData\Local

C:\Windows\system32\OLEAUT32.DLL

C:\Users\win7\AppData\Local\Temp\4e2a1aff004f49a5e8fa911f735a399c\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsx255B.tmp\SimpleSC.dll

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager\Internet Download Manager.lnk

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\ST\img\common\bt_close_focus.jpg

c:\download\driver\12950\Program\CmiInstallResAll.dll

c:\download\driver\12950\SoftwareDriver\Driver\CmRmDrv64.EXE

C:\Users\win7\AppData\Local\Temp\nsr2F7D.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsg6E82.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Tempfolder\ortmp\freebl3.dll

C:\Users\win7\AppData\Local\Temp\ci0-temp\AlexaBooster.set

C:\Users\win7\AppData\Local\Temp\nsmC906.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\Btn_Dir.png

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\BBD\img\common\win_edge_left_msk.png

C:\Users\win7\AppData\Local\Tempfolder\DoltuJonisep\nss3.dll

\??\C:\Windows\system32\acppage.dll

C:\Users\win7\AppData\Local\Temp\nsp81AE.tmp

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\res\mftogglebtn-down.png

License.txt

C:\Users\win7\AppData\Local\Temp\nsa7674.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsz7681.tmp\\665707608

c:\Program Files\Common Files\Microsoft Shared\ink\hwrenalm.dat

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\SAE.ini

C:\Users\win7\AppData\Local\Temp\nsx16D5.tmp\nsx24C2.tmp

C:\Users\win7\AppData\Local\Temp\nsd594F.tmp\HttpRequest.dll

C:\Users\win7\AppData\Local\Temp\pftD7AF~tmp\Disk1\setup.bmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Bosch.dll

C:\Users\win7\AppData\Local\Temp\nsm7EAE.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsk1DCA.tmp\Base64.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\7U00H0GK.txt

C:\Users\win7\AppData\Local\Temp\nss8901.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\USQSW49C.txt

C:\Users\win7\AppData\Local\Temp\DIQ\test-av46804_004\DomaIQ10.exe

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\app[1].js

32788R22FWJFW\ffdefstr.dll

C:\Users\win7\AppData\Local\Temp\nsp794E.tmp\NSISdl.dll

C:\Windows\System.Windows.Forms.pdb

C:\Users\win7\AppData\Local\Temp\68fecef9577b6548cd9f9c89137e6238\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsi246C.tmp\NSISdl.dll

WchppIc.exe

C:\Users\win7\AppData\Local\Temp\nsw2E15.tmp\nsJSON.dll

OK

C:\Users\win7\AppData\Local\Temp\nsg1DB6.tmp\\832586926

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZFOut.bmp

\\.\COM17

C:\Windows\GeoOCX\WebCam\20090916\GeoUpdaterDll.dll

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk

C:\Users\win7\AppData\Local\Temp\nsq6A1F.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nse8B64.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nshC366.tmp

C:\Users\win7\AppData\Local\Temp\is-97GVD.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\nsi26D2.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\7zSB2EF.tmp\515f05cb47a1c.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\26M9EMBN.txt

C:\Users\win7\AppData\Local\Temp\pftA501.tmp\pftw1.pkg

C:\ZapImages\asl-btn-big-home-83x28x2.gif

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\libacess_js[1].htm

Formats\7zxa.dll

C:\Users\win7\AppData\Local\Temp\nsj350A.tmp

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\Infobar\image\infobar_close_hover.png

C:\Users\win7\AppData\Local\Temp\nsz73B5.tmp\568528752

C:\Users\win7\AppData\Local\Temp\nsa1D47.tmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\Down.bmp

C:\Users\win7\AppData\Local\Temp\nsd257B.tmp\nsArray.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\switchOff.bmp

C:\Users\win7\AppData\Local\Temp\{0654AC99-2BF5-4929-9C44-4B6872A6C4E0}\0x0809.ini

C:\Users\win7\AppData\Local\Temp\nsw3861.tmp

C:\Users\win7\AppData\Local\Temp\nsfB523.tmp\System.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Samsung.ini

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/Editorb5.bmp

\\.\AIDA64Driver

C:\Users\win7\AppData\Local\Temp\nsz84B8.tmp

C:\Users\win7\AppData\Local\Temp\nsz761B.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsz2869.tmp\\1207750429

RarFiles.lst

C:\Windows\LicenseManagerV2.pdb

Formats\7z.fmt

C:\Users\win7\AppData\Local\Temp\nsa85A4.tmp\SimpleSC.dll

32788R22FWJFW\ERUNT.cfxxe

C:\Users\win7\AppData\Local\Temp\nss6E66.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\is-U84KA.tmp\gcpum.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_2.bmp

C:\Users\win7\AppData\Local\Temp\nsi5697.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Temp\nsr1F7B.tmp\System.dll

c:\Program Files\Alexa Booster v3.2\Skins\1.bmp

C:\Users\win7\AppData\Local\Temp\nszA5E1.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\pbn-F891C1AE5FD1497993CA9FFF5966CA06.zdt

C:\Users\win7\AppData\Local\Temp\nsuA912.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsa7589.tmp

C:\Users\win7\AppData\Local\Temp\nsh7DA5.tmp\System.dll

winrar.lng

C:\Users\win7\AppData\Local\Temp\is-0BDME.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\nsq79EB.tmp

\\.\COM218

C:\Users\win7\AppData\Local\Temp\nsz9033.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nss6FEC.tmp\565464247

C:\Users\win7\AppData\Local\Temp\nst3E5D.tmp\Processes.dll

32788R22FWJFW\RegScan.cmd

C:\Users\win7\AppData\Local\Temp\nsb1CB7.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\cancel[1]

C:\Users\win7\AppData\Local\Temp\pft3E71.tmp\data1.hdr

C:\Users\win7\AppData\Local\Temp\nsx2EBD.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsi246C.tmp\\709666229

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\formula5.html

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\paused_icon[1]

c:\Program Files\Common Files\Microsoft Shared\ink\he-IL\tipresx.dll.mui

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM22.tmp

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\interview.html

C:\Users\win7\AppData\Local\Temp\nsr16B4.tmp

C:\Users\win7\AppData\Local\Temp\nsoE348.tmp\setup_31011.exe

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\AdemCo.ini

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\jquery[1].js

C:\Users\win7\AppData\Local\Temp\nso26A4.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsq20F5.tmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\rightDown.bmp

C:\Python27\Scripts\symbols\dll\CFVS_HookDll.pdb

C:\Users\win7\AppData\Local\Temp\013c8edc16128c116f00beee1fe56d21\pricepeep.exe

\\?\hid#vid_80ee&pid_0021#6&e993e07&0&0000#{4d1e55b2-f16f-11cf-88cb-001111000030}

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GPwTuuGhrjxj.lnk

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM75.tmp

C:\Users\win7\AppData\Local\Temp\is-C85U7.tmp\_isetup\_setup64.tmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Dome_PelcoP.ini

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\formula2.html

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\service\7z.exe

C:\Users\win7\AppData\Local\Temp\nss7ACA.tmp\SimpleSC.dll

C:\WINDOWS\FONTS\ARIALBD.TTF

C:\Users\win7\AppData\Local\Temp\7zS7336.tmp\lkniaejinldagieikdjacfpfchffkhhi

C:\Users\win7\AppData\Local\Temp\nso282A.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsz7EE1.tmp\System.dll

C:\Users\win7\AppData\Local\Tempfolder\ortmp\orion.exe

C:\Users\win7\AppData\Roaming\subfolder\rerb.scr

C:\Users\win7\AppData\Local\Temp\nsm7EFC.tmp\SimpleSC.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Panasonic.ini

C:\Users\win7\AppData\Local\Temp\pftD7AF~tmp\Disk1\Setup.exe

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZ_BK_Disable.bmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\top-line[1].gif

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\s9[1].gif

C:\Users\win7\AppData\Local\Temp\nsbC511.tmp\\650521284

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_No5.bmp

C:\Users\win7\AppData\Local\Temp\nsm7CD9.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Temp\nsr3019.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsn9595.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nsc2358.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM48.tmp

C:\Users\win7\AppData\Local\Temp\DIQ\flashplayer_151\OfferBrokerage_14003.exe

\\.\COM190

C:\Users\win7\AppData\Local\Temp\nsgD1D8.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\Assistant.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~sr-LATN-CS~7.1.7601.16492.cat

C:\DVRArchiveViewer.pdb

C:\Users\win7\AppData\Local\Temp\nsv2D2A.tmp

C:\Users\win7\AppData\Local\Temp\nsu7799.tmp\680383182

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\httpErrorPagesScripts[1]

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich7id2.inf

C:\Users\win7\AppData\Local\Temp\is-V1R8B.tmp\_isetup\_shfoldr.dll

C:\Windows\inf\oem1.PNF

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZUp.bmp

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AAA WMA Converter\AAA WMA Converter.lnk

C:\Windows\System32\Wbem\dll\CFVS_HookDll.pdb

C:\Users\win7\AppData\Local\Temp\GUM4330.tmp\psmachine.dll

C:\Users\win7\AppData\Local\Temp\nsu83FE.tmp\\460556029

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\8P26VWMW.txt

C:\Data\Textures\Gui\Options_Assignments_04.dds

Formats\z.fmt

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Anytime-Upgrade-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\pft3E71.tmp\data2.cab

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM40.tmp

C:\lang.dat

C:\Users\win7\AppData\Local\Temp\nsi246C.tmp\nsArray.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\COP-CD55X-PELCO_D2400.ini

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsx6F21.tmp\\760571060

\\.\COM228

C:\Windows\symbols\dll\wkernel32.pdb

C:\Users\win7\AppData\Local\Temp\7zS7BFD.tmp\515f05ca0c035.exe

C:\dll\CFVS_HookDll.pdb

C:\Users\win7\AppData\Local\Temp\nsb204B.tmp\\722400949

UnRAR.exe

C:\Users\win7\AppData\Local\Temp\is-3IOQ3.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\All\E7520.inf

C:\Users\win7\AppData\Local\Temp\RGI70DF.tmp

C:\Users\win7\AppData\Local\ExpanDrive\drives.js

C:\Users\win7\AppData\Local\Temp\nsqDF2.tmp\\189585693

C:\Users\win7\AppData\Local\Temp\nsi2635.tmp

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM84.tmp

C:\sample.scr

C:\Users\win7\AppData\Local\Temp\nss31EE.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsm2FAC.tmp\System.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\dm_bar_up[1]

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\D0ULMBFH.txt

c:\Program Files\Common Files\Microsoft Shared\ink\hwrenclm.dat

C:\Users\win7\AppData\Local\Temp\nsz66B4.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-40HMF.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\CheckBox.png

C:\Users\win7\AppData\Local\Temp\nsqDF2.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\BUDAPI.X32

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\dr.dll

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/section3.html

\\?\C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx

C:\Users\win7\AppData\Local\Temp\nse2888.tmp\nsArray.dll

32788R22FWJFW\SRestore.cmd

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\SonySNC_RZ25.ini

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\LG_Multix.ini

C:\Users\win7\AppData\Local\Temp\nsq4F84.tmp\[RANDOM_STRING].7z

WgaLogon.dll

C:\Users\win7\AppData\Local\Temp\WD7D93.tmp

C:\Users\win7\AppData\Local\Temp\nseBF15.tmp

c:\download\driver\12950\SoftwareDriver\Driver\CMxPCI6.INF

\\.\COM205

ciplImageLis3N.ocx

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\pbn-8FEF2BFB952A42E0AC59CD2A142FDC8C.zdt

32788R22FWJFW\Combobatch.bat

C:\Users\win7\AppData\Local\Temp\DIQ\test-av6941_004\DomaIQ10.exe

C:\Users\win7\AppData\Local\Temp\is-P3NFI.tmp\sample.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\Z10HJ4T8.txt

C:\Python27\wkernel32.pdb

C:\Users\win7\AppData\Local\Adobe\Updater5\Data\AdobeUpdater.aum

C:\Users\win7\AppData\Local\Tempfolder\ortmp\nssutil3.dll

C:\Users\win7\AppData\Local\Temp\nsh2EF1.tmp\System.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\ELMO PTC-200C.ini

C:\Users\win7\AppData\Local\Temp\nsc230A.tmp\nsArray.dll

C:\ProgramData\Microsoft\Windows\Start Menu

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Prism Video File Format Converter.lnk

C:\Users\win7\AppData\Local\Temp\nsk86CC.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\DIQ\Player_151\config.dll

C:\Users\win7\AppData\Local\Temp\nst41CF.tmp\nsArray.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\3X2MS59D.txt

C:\Users\win7\AppData\Local\Temp\nse7338.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsuA912.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsk86CB.tmp\\1166890363

C:\Users\win7\AppData\Local\Temp\ActSys\SSL\import.bat

32788R22FWJFW\OSid.vbs

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\s9[1].gif

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Help-Customization-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\441cc7d4765d61e4190dc8ce3e1a74a1\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Local\Temp\nsy8F48.tmp\nsArray.dll

32788R22FWJFW\region.dat

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\5SU1GT71.txt

C:\Users\win7\AppData\Local\Temp\nse8C9B.tmp\NSISdl.dll

C:\Pack.mpk

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\CDR7JU2F.txt

C:\Users\win7\Desktop\wkernel32.pdb

C:\Users\win7\AppData\Local\Temp\fe9505b7f8b60bc6e1a74dc5c757fe1e\pricepeep.exe

C:\Users\win7\AppData\Local\Temp\nsy90EA.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nse8B15.tmp

rarext.lng

C:\Users\win7\AppData\Roaming\CuteFTP\sm.dat

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\acsock.xml

C:\Users\win7\AppData\Local\Temp\nsh223F.tmp\SimpleSC.dll

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/Editorb8.bmp

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM56.tmp

c:\download\driver\12950\CmUtil.dll

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\formula9.html

C:\Users\win7\AppData\Local\Temp\68fecef9577b6548cd9f9c89137e6238\volcano.exe

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\WebpDecodeFilter.dll

C:\Users\win7\AppData\Local\Temp\nsbAB5F.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\aaiw686675.bmp

C:\Users\win7\AppData\Local\Temp\GLG801B.tmp

C:\Users\win7\AppData\Local\Temp\GUM4330.tmp\DuuquUpdateHelper.msi

c:\download\driver\12950\SoftwareDriver\Driver\cmudax3.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\223DE96EE265046957A660ED7C9DD9E7_5F4A6047A3FBCAF69FE9965B6C68B6B7

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\D-max.ini

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM24.tmp

C:\Users\win7\AppData\Local\Temp\nsg7C6C.tmp\\381900402

C:\Users\win7\AppData\Local\Temp\Creative_ALchemy_AL6_Cleanup.0001.dir.0000\PfdRun.pfd

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~ro-RO~7.1.7601.16492.cat

C:\Windows\GeoOCX\WebCam\20090916\GoogleMap.htm

C:\Users\win7\AppData\Local\Temp\nsg7C6C.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsc2229.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsy2694.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Google\Chrome\User Data

C:\Users\win7\AppData\Local\Temp\nsv1CDA.tmp

C:\Users\win7\AppData\Local\Temp\7zS77D6.tmp\515f52bb88489.tlb

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZ_BK_Empty.bmp

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\Btn_Dir.png

C:\Windows\system32\DVRArchiveViewer.pdb

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Wired-Network-Drivers-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

\\.\COM168

C:\Users\win7\AppData\Local\Temp\nss31EE.tmp\System.dll

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\ST\img\common\bt_close_click.jpg

C:\Users\win7\AppData\Local\Temp\nsg7BCF.tmp

C:\Users\win7\AppData\Local\Temp\nsp794E.tmp\194114351

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\JM7X90OM.txt

C:\Users\win7\AppData\Local\Temp\jastp.txt

c:\Program Files\Common Files\Microsoft Shared\ink\el-GR\tipresx.dll.mui

C:\Users\win7\AppData\Local\Temp\nsiB060.tmp\469409043

\\.\R:

C:\Windows\system32\jepz\ujyt\nhd.dat

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Panasonic_BB_BL.ini

C:\ProgramData\chrome.exe

Wincon.SFX

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM23.tmp

32788R22FWJFW\Exe.reg

\\.\PhysicalDrive6

C:\Users\win7\AppData\Local\Temp\nsz4E31.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsp8CDB.tmp\NSISdl.dll

32788R22FWJFW\netsvc.dat

C:\Users\win7\AppData\Local\Temp\nsbC511.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsw20D2.tmp\System.dll

c:\Program Files\Common Files\Microsoft Shared\ink\hwrcommonlm.dat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-Package~31bf3856ad364e35~amd64~en-US~8.0.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsa7A29.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\rd7CD8.tmp\rd7CD9.tmp

C:\Users\win7\AppData\Local\Temp\nsn6FCD.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsw9592.tmp\SimpleSC.dll

C:\Users\win7\Documents

C:\Users\win7\AppData\Roaming\FileZilla\recentservers.xml

C:\ProgramData\sample\

\\.\COM132

C:\Users\win7\AppData\Local\Temp\nss8054.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\$inst\8.tmp

MSVBVM6N.DLL

C:\Users\win7\AppData\Local\Temp\nsrC484.tmp

C:\Users\win7\AppData\Local\Temp\nse29C0.tmp\\172628766

\\.\COM202

C:\ProgramData\R0OSKF.au3

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Pelco_D.dll

C:\Users\win7\AppData\Local\Temp\nsv2B57.tmp\Processes.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\NewErrorPageTemplate[1]

32788R22FWJFW\CF-Script.cmd

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\paused_icon[1]

C:\Users\win7\AppData\Local\Temp\nsr9390.tmp\NSISdl.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-LanguagePack-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\ProgramData\ExpanDrive\drives.js

Avira Registry Cleaner\msvcr71.dll

\\.\COM142

C:\rar.lng

Formats\ace.fmt

C:\Users\win7\AppData\Local\Temp\nst4180.tmp

C:\image\baritem_play.png

C:\Users\win7\AppData\Local\Temp\is-CRKNN.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nsp78B3.tmp\21.tmp

\\.\COM93

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ParentalControls-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsh6D3D.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\\~DFA9E6C7F14B9A4C34.TMP

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM87.tmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_No6.bmp

c:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml

C:\Users\win7\AppData\Local\Temp\nskB31F.tmp\\253123095

C:\Users\win7\Desktop\wntdll.pdb

\\.\COM97

C:\Windows\inf\oem1.inf

C:\Users\win7\AppData\Local\Temp\nsu791F.tmp

C:\Windows\GeoOCX\WebCam\20090916\GeoWatermark.dll

C:\Users\win7\AppData\Local\Temp\$inst\4.tmp

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM8.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-Optional-Package~31bf3856ad364e35~amd64~~8.0.7601.17514.cat

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\res\mftogglebtn.png

\\.\COM40

C:\Users\win7\AppData\Local\Temp\nsc8C0C.tmp\nsisdl.dll

C:\Users\win7\AppData\Local\Temp\nsx255B.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsh6CEF.tmp\nsArray.dll

\\.\COM145

C:\Users\win7\AppData\Local\Temp\nsh3BAC.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\Microsoft\Blend\14.0\FeedCache\xpsrchw.exe.config

C:\Users\win7\AppData\Local\Temp\7zS7336.tmp\lkniaejinldagieikdjacfpfchffkhhi\lsdb.js

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\98JE9070.txt

\\.\COM152

C:\Program Files\Motion-Twin\haxe\lib/hxcpp/.dev

c:\users\win7\appdata\local\tempfolder\veicfbubhoxn\dyvimsycu.dat

C:\Users\win7\AppData\Local\Temp\nsu8CFA.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsd257B.tmp\\1008489509

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_16.bmp

c:\OkiDriver\OKIB2200B2400\OKB3E002.INF

C:\Users\win7\AppData\Local\Temp\nsm7DC3.tmp

C:\Users\win7\AppData\Local\Temp\is-S45LH.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\ST\layout.xml

C:\Users\win7\AppData\Local\Temp\nsh86A0.tmp\\1104102062

C:\Users\win7\AppData\Local\Temp\nss1752.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsv1C3E.tmp

C:\Users\win7\AppData\Local\Temp\nsz3652.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\W3VPE336.txt

C:\Windows\32BitFtp.ini

C:\Users\win7\AppData\Local\Temp\RarSFX0\WchppIc.exe

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_No9.bmp

C:\Users\win7\AppData\Local\Temp\nsq829A.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsw892E.tmp\SimpleSC.dll

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\copy13.html

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\resources.pri

\\.\COM155

C:\Users\win7\AppData\Local\Temp\GUM4330.tmp\DuuquUpdateBroker.exe

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\ui[1].css

\\.\COM15

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\67F6625BC22310D5C99DDE12020DBD90

C:\Users\win7\AppData\Local\Temp\is-NHHA7.tmp\_isetup\_setup64.tmp

c:\download\driver\12950\SoftwareDriver\Driver\CMRMDRV64.DLL

32788R22FWJFW\swreg.exe

32788R22FWJFW\DPF.str

C:\Users\win7/.sqliterc

C:\Users\win7\AppData\Local\Temp\nsw4779.tmp

C:\Users\win7\AppData\Local\Temp\nsz4E31.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hArVzWJrYn.lnk\desktop.ini

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\app[1].js

C:\Users\win7\AppData\Local\Temp\nsx255B.tmp\\317341499

C:\Windows\system32\ric\reat\comb.dat

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM93.tmp

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\copy4.html

\\.\COM84

C:\Windows\system32\blackbox-keys.txt

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-HomeBasicNEdition-wrapper~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\Imagination Studio.dll

C:\Users\win7\AppData\Local\Temp\nsh1712.tmp

C:\Users\win7\AppData\Local\Temp\nsj726D.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nst76AF.tmp\\823495562

C:\Users\win7\AppData\Local\Temp\nsmABEB.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\EHYCYTMU.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\HDFPI9N1.txt

C:\Users\win7\AppData\Local\Temp\pft3E71.tmp\setup.exe

C:\Windows\system32\dll\wkernel32.pdb

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Killbits-Package~31bf3856ad364e35~amd64~~8.0.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\BugReport.exe

C:\Users\win7\AppData\Local\Temp\nsb204B.tmp\NSISdl.dll

C:\Windows\system32\Comcat.dll

C:\Users\win7\AppData\Roaming\ZapSpot\System\etc\AppMsg.zml

C:\Users\win7\AppData\Local\Temp\nsk1BB2.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\aut306B.tmp

c:\download\driver\12950\OemIcon\Thumbs.db

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\Infobar\image\infobar_close_normal.png

C:\Windows\system32\drivers\etc\hosts

C:\Users\win7\AppData\Local\Tempfolder\DoltuJonisep\libplds4.dll

C:\Windows\system32\gunt\karx\cap.dat

C:\Users\win7\AppData\Local\Temp\IPMx2\All\945.inf

C:\Users\win7\AppData\Local\Temp\7zS2C7E.tmp

C:\Users\win7\AppData\Local\Temp\aaiw686674.bmp

C:\Users\win7\AppData\Local\Temp\nstF103.tmp\System.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\EZ.dll

C:\Users\win7\AppData\Local\Temp\nsf78C3.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsv4429.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\DIQ\test-av13688_004\routes.dll

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\SystemFolder\vpnevents.dll

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/interview.html

\\.\S:

C:\Users\win7\AppData\Local\Temp\nsc230A.tmp\151347482

C:\Program Files\Teamspeak2_RC2\_ci_gentee_

\\.\Nsi

C:\Users\win7\AppData\Local\Temp\nso8AB8.tmp\nsArray.dll

\\.\COM238

C:\Users\win7\AppData\Local\Temp\nsl7B04.tmp

C:\Users\win7\AppData\Local\Adobe\Updater5\aum.log

C:\Users\win7\AppData\Local\Temp\nshF05B.tmp\2c373164-efdd-4a23-bcae-d359c2f35578.dll

32788R22FWJFW\LocalSystemNetworkRestricted.dat

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\VOJH2NYR.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\7OC8IN9Z.txt

wntdll.pdb

C:\Users\win7\AppData\Local\Temp\nsm7EAE.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsu25A0.tmp\\684128688

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\analytics[1].js

C:\Users\win7\AppData\Local\Temp\nsy247C.tmp\SimpleSC.dll

C:\Windows\system32\gaq\ofe\esuud.dat

C:\Users\win7\AppData\Local\Temp\nsf795F.tmp\System.dll

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\ST\img\common\win_edge_bottom_msk.png

C:\Windows\GeoOCX\WebCam\20090916\PCDStable_8320.xml

C:\Users\win7\AppData\Local\Temp\IPMx2\All\915M.inf

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\res\transition_3.ico

C:\Users\win7\AppData\Local\Temp\Trojan.exe

\\.\COM199

C:\Users\win7\AppData\Local\Temp\nsr152F.tmp\NSISdl.dll

C:\Windows\System32\Wbem\symbols\dll\wntdll.pdb

C:\Users\win7\AppData\Local\Temp\nso282A.tmp\NSISdl.dll

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-changjei.xml

C:\Users\win7\AppData\Local\Temp\nsm8B56.tmp\System.dll

C:\Windows\svchost.exe

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\index.html

C:\Users\win7\AppData\Local\GDIPFONTCACHEV1.DAT

32788R22FWJFW\embedded.sed

\\.\COM6

32788R22FWJFW\Boot-Rk.cmd

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Classic FTP Software.lnk

MyMusicTube.swf

C:\Users\win7\AppData\Local\Temp\nsg1DB6.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\EventTracing.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\P280NA27.txt

\\.\Scsi5:

C:\Users\win7\AppData\Local\Temp\aut3059.tmp

C:\sample\1

C:\Users\win7\AppData\Local\Temp\nst1B49.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nst41CF.tmp\\1201008518

\\.\COM165

32788R22FWJFW\FIND3M.bat

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\pbn-AB85E39971104D748D9F1EA42F6BD65F.zdt

32788R22FWJFW\w2k_sock.dll

C:\Users\win7\AppData\Local\Temp\nsm225E.tmp\NSISdl.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZRD.bmp

c:\Program Files\Alexa Booster v3.2\uninstall.exe

C:\Users\win7\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\GIF to Flash Converter\Help.lnk

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Branding-ProfessionalN-Client-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsgEBAB.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjhklgikohjiaahlibnfgegobedhpgmf

C:\Users\win7\AppData\Local\Temp\pftD7AF~tmp\Disk1\Setup.bmp

MSSTDFMT.DLL

C:\Users\win7\AppData\Local\Temp\rd7CD8.tmp\rd7CDA.tmp

C:\Windows\symbols\dll\wntdll.pdb

C:\Users\win7\AppData\Local\Temp\nsz8FE5.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nss4B52.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\\~DFD97DC53F41BEB22D.TMP

MSSTDFMN.DLL

C:\Users\win7\AppData\Local\Temp\purchase order.pdf

C:\Windows\MSCOMCTL32.OCX

C:\Users\win7\AppData\Local\Temp\441cc7d4765d61e4190dc8ce3e1a74a1\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsa1F60.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsx12F2.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Anytime-Upgrade-Results-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

\\.\PhysicalDrive13

C:\Users\win7\AppData\Roaming\uLEThjJw\GJFKrvSGxB.exe

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerToPeer-Full-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.pdb

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\WDDV2886.txt

C:\Users\win7\AppData\Local\Temp\nsc7BA4.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsm42D.tmp

C:\Windows\system32\actskin4.ocx

\\.\COM215

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\BBD\layout.xml

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM32.tmp

C:\Users\win7\AppData\Local\Temp\WER745F.tmp.WERInternalMetadata.xml

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Doxillion Document Converter.lnk

SmartInstaller.exe

C:\Users\win7\AppData\Local\Temp\nsk7579.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-LocalPack-CA-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\GeoOCX\WebCam\20090916\POSLiveViewX_STable_8100.xml

C:\Users\win7\AppData\Local\Temp\nsm6C24.tmp\1210133932

C:\Users\win7\AppData\Local\Temp\ef9f727098f02eb359d2c1dac93f30ee\pricepeep.exe

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\HS1GGZ3H.txt

\\.\COM80

C:\Users\win7\AppData\Local\Temp\_switch_rl

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\??????? WinRAR.lnk

C:\Users\win7\AppData\Local\Temp\d06fcbb59363a1adb6768ef5c595d7c2\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Local\Temp\nse1AEB.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~en-GB~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\line[1]

C:\Users\win7\AppData\Local\Temp\7zS7336.tmp\lkniaejinldagieikdjacfpfchffkhhi\manifest.json

C:\Python27\Scripts\dll\CFVS_HookDll.pdb

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM78.tmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\wrapper[1]

C:\Users\win7\AppData\Local\Temp\nsc3058.tmp\711675182

C:\Users\win7\AppData\Local\Temp\7zS2C7E.tmp\515f5b4a5a364.dll

\\.\Scsi4:

C:\Users\win7\AppData\Local\Temp\nsi3C4A.tmp\Processes.dll

c:\windows\system32\drivers\aliide.sys

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\MouseGesture.dll

C:\Users\win7\AppData\Local\Temp\nsm86C0.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsa7A29.tmp\ioSpecial.ini

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Barowasse2saave\Uninstall.lnk

C:\Users\win7\AppData\Local\Temp\sfx1\_bbg.exe

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\navi.ico

C:\Users\win7\AppData\Roaming\SharedSettings.ccs

32788R22FWJFW\appinit.bad

C:\Windows\System32\Wbem\exe\DVRArchiveViewer.pdb

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\pbn-BC0E2BBD502F41D7BC8CF7D74B35293B.zdt

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM18.tmp

32788R22FWJFW\hidec.exe

C:\Users\win7\AppData\Local\Temp\nsr2DF6.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\WPCUG73F.txt

C:\Users\win7\AppData\Local\Temp\nsp85B2.tmp

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred.xml

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-Optional-Package~31bf3856ad364e35~amd64~~11.2.9600.16428.cat

C:\Users\win7\AppData\Local\Temp\nsk1EB4.tmp\nsArray.dll

C:\Users\win7\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch

C:\Windows\system32\ccrpprg3N.ocx

C:\Users\win7\AppData\Local\Temp\nsg2C80.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\08DG606B.txt

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~es-ES~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsn2607.tmp\System.dll

C:\Windows\dll\wkernel32.pdb

\\.\PhysicalDrive9

C:\Users\win7\AppData\Local\Temp\nsd7114.tmp\NSISdl.dll

\\.\COM45

C:\Users\win7\AppData\Local\Temp\fefa3aaf94374590437d72a7b328196e\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Local\Tempfolder\DoltuJonisep\ssl3.dll

C:\Users\win7\AppData\Local\Temp\nsm7EFC.tmp\System.dll

\\.\COM246

C:\Users\win7\AppData\Local\Temp\nss23B5.tmp

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Golden Records LP Converter.lnk

\\.\COM212

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZIRISin.bmp

C:\Users\win7\AppData\Local\Temp\is-EU83C.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\nsc182B.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Branding-UltimateN-Client-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsd257B.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsl1E23.tmp\120566233

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\GetMes700.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\E8SJBJ2R.txt

C:\Users\win7\AppData\Local\Temp\nsl2172.tmp

C:\Users\win7\AppData\Local\Temp\nsi6F11.tmp

C:\Users\win7\AppData\Local\Temp\nse724E.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\is-CQABJ.tmp\is-H9UQD.tmp

C:\Users\win7\AppData\Local\Temp\nsr2EE1.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsf1DAA.tmp

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\CheckBox.png

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\IOMBTIH2.txt

C:\Users\win7\AppData\Local\Temp\nsl79B4.tmp

C:\Data\Textures\Gui\CreateMission_Save_02.dds

\\.\COM189

C:\Users\win7\AppData\Local\Temp\nsn4A48.tmp

C:\Users\win7\AppData\Local\Tempfolder\DoltuJonisep\nssckbi.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\normal_bg[1]

C:\Users\win7\AppData\Local\Temp\nsu1BEF.tmp

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad.xml

C:\Users\win7\AppData\Local\Temp\nsr6C43.tmp\915532859

C:\Users\win7\AppData\Local\Temp\nsp3498.tmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\language[1]

C:/Program Files/TSK/sound.pat

C:\Users\win7\AppData\Local\Temp\nsgDDF8.tmp\462088281

\\.\H:

c:\OkiDriver\OKIB2200B2400\OPPE_S00.DAT

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\formula7.html

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\msvcrt.dll

__tmp_rar_sfx_access_check_755796

C:\Windows\System32\WindowsPowerShell\v1.0\symbols\dll\wkernel32.pdb

C:\Data\Strings.info

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\X1STFDHL.txt

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM31.tmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\ui[1].js

ini.dat

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\Microsoft.VC90.CRT\msvcp90.dll

c:\cgvi5r6i\vgdgfd.72g

C:\Users\win7\AppData\Local\Temp\nsc7B08.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsz2904.tmp

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Preferences

C:\Users\win7\AppData\Local\Temp\nsp8CDB.tmp\\500292442

C:\WeatherWatcher.log

C:\Users\win7\AppData\Local\Temp\nspB916.tmp\NSISdl.dll

\\.\COM87

C:\Users\win7\AppData\Local\Temp\nskF4BB.tmp

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\Infobar\image\infobar_close_active.png

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM79.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\RDT2MBDV.txt

C:\Users\win7\AppData\Local\Temp\nsq7BC0.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsiB060.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsg7ACE.tmp\\581706123

c:\windows\system32\vboxtray.exe

C:\ProgramData\FlashFXP\3\History.dat

c:\users\win7\appdata\local\temp\sfx1\bbgift.puz

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\pbn-CB1CD343FA4F4C8DB7C935D5D4D1C01E.zdt

C:\Users\win7\AppData\Roaming\FlashFXP\3\Sites.dat

C:\Users\win7\AppData\Local\Temp\nshC833.tmp\SimpleSC.dll

32788R22FWJFW\dosdev.exe

C:\Users\win7\AppData\Local\Temp\ac85e0056038215dc4e484ecc5b69fbe\DirectDownloaderInstaller.exe

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~~7.1.7601.16492.cat

\\.\COM121

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\dnserrordiagoff[1]

C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll

c:\Program Files\FontLab\FontLab\mpw32.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Panasonic_BB381_481.ini

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM33.tmp

C:\Users\win7\AppData\Local\Temp\b82b985bee9cc6a610d7c50fc7373126\BitAcceleratorDDLRinstaller.exe

\\.\COM1

\\.\COM176

c:\Program Files\Alexa Booster v3.2\Proxy\agents.txt

C:\Users\win7\AppData\Local\Temp\AdwCleaner.jpg

C:\Users\win7\AppData\Local\Temp\\~DFDA1C1CD56ED870BD.TMP

C:\Users\win7\AppData\Local\Temp\nsc79CF.tmp\NSISdl.dll

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\res\minimize-hover.png

C:\Users\win7\AppData\Local\Temp\nsw1FE7.tmp

C:\Windows\inf\ntprint.PNF

c:\download\driver\12950\SoftwareDriver\Driver\CMxPCI7.INF

\\.\COM222

C:\Users\win7\AppData\Local\Temp\is-VLONM.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\e873621278eb045fa3d6cb0e9d983d10\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Local\Temp\nst2711.tmp\nsArray.dll

D:\ChamClock\Logo by Granin\install-addons.bmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\WR14WSMU.txt

\\.\COM236

C:\Users\win7\AppData\Local\Temp\nsa85A4.tmp\nsExec.dll

C:\Users\win7\AppData\Local\Temp\\~DFAD1269649A08007E.TMP

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\Edit.png

C:\Users\win7\AppData\Local\Temp\nsfDB2.tmp

C:\Users\win7\AppData\Local\Temp\nstE5EE.tmp\NSISdl.dll

C:\Windows\system32\cee\inua\lixd.dat

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\OO0LK6TB.txt

C:\Users\win7\AppData\Local\Temp\nst1B49.tmp\\935077591

Order.htm

C:\Windows\system32\COMCTL3N.OCX

C:\Users\win7\AppData\Local\Temp\nsq7720.tmp\\558552086

C:\Users\win7\AppData\Local\Temp\nsnB3E7.tmp\nsArray.dll

C:\Windows\system32\wntdll.pdb

C:\Windows\system32\691765.tmp

C:\Windows\GeoOCX\WebCam\20090916\GeoCodecReg\GXAVC.dll

ASLOC.dll

C:\Users\win7\AppData\Local\Temp\nst76AF.tmp\NSISdl.dll

C:\Windows\System32\WindowsPowerShell\v1.0\wntdll.pdb

C:\Users\win7\AppData\Local\Temp\is-Q8QEV.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\7W01F2NA7U737xD7AC6G3Zh81k

C:\Users\win7\AppData\Local\Temp\nso1A8D.tmp

C:\Users\win7\AppData\Local\Temp\nsk9246.tmp\1181702137

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\OMVW2P30.txt

C:\Users\win7\AppData\Local\Adobe\Updater5\AdobeUpdaterPrefs.dat

C:\Users\win7\AppData\Local\Temp\nsw9592.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsq2059.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CodecPack-Basic-Package-wrapper~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich8smb.inf

C:\Users\win7\AppData\Local\Temp\nsx9767.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nscAE6B.tmp

C:\Users\win7\AppData\Local\Temp\nsw7C7C.tmp\267185768

C:\ZapImages\ani-logomain-117x84.gif

32788R22FWJFW\REGDACL.sed

C:\Users\win7\AppData\Local\Temp\nse9189.tmp

C:\Users\win7\AppData\Local\Temp\nsdA642.tmp

C:\Users\win7\AppData\Local\Temp\is-PTDNB.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\GLKFD8.tmp

C:\Users\win7\AppData\Local\Temp\9c2704c22ceab0ebc352c74d631e8669\downloaderOFFER1.exe

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\kxBArVzWJrYn.lnk

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich7usb.inf

C:\Windows\system32\MSSTDFMT.DLL

\\.\PhysicalDrive0

C:\Users\win7\AppData\Local\Temp\nsj8EEA.tmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\EverFocus.ini

c:\Program Files\Common Files\Microsoft Shared\ink\es-ES\tipresx.dll.mui

C:\Users\win7\AppData\Local\Temp\nskCCD2.tmp\SimpleSC.dll

C:\Python27\symbols\dll\CFVS_HookDll.pdb

32788R22FWJFW\Auto-RC.cmd

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Axis_PTZ.ini

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\D3UFP1ST.txt

C:\Users\win7\AppData\Local\Temp\nss8D53.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nszA5E1.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsx16D5.tmp\lxdl.dll

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\WSysInfo.dll

C:\Users\win7\AppData\Local\Temp\nsg6E82.tmp\\570537705

C:\Python27\dll\wkernel32.pdb

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\RRCV0DH3.txt

winrar.chm

C:\Users\win7\AppData\Local\Temp\nse8B64.tmp\989149078

C:\Python27\symbols\dll\wkernel32.pdb

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientExtensions-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

c:\OkiDriver\OKIB2200B2400\OPPESLOC.DLL

C:\Users\win7\AppData\Local\Temp\nse2946.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM14.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\YB7U3PB5.txt

C:\Users\win7\AppData\Local\Temp\nse28D5.tmp

C:\Users\win7\AppData\Local\Temp\nsv1D77.tmp\nsWeb.dll

C:\Windows\system32\olepro32.dll

32788R22FWJFW\vistareg.dat

C:\Users\win7\AppData\Local\Temp\DIQ\test-av13490_004\OfferBrokerage_14003.exe

C:\Windows\RICHTX32.OCX

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkmejkdfcnncpgjajbiahlekpebhcnhl\1\manifest.json

C:\Users\win7\AppData\Local\Temp\nsp1E37.tmp\\539484055

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\acsock64.cat

\\.\COM235

C:\Users\win7\AppData\Local\Temp\is-NHHA7.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\nsr2F2F.tmp\315094195

C:\ProgramData\CoffeeCup Software\SharedSettings.sqlite

C:\Users\win7\AppData\Local\Temp\nsa395F.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-VLONM.tmp\_isetup\_isdecmp.dll

C:\Users\win7\AppData\Local\Temp\b82b985bee9cc6a610d7c50fc7373126\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Local\Temp\nsv8842.tmp

c:\users\win7\appdata\local\tempfolder\qegmanudp\lijufamoah.dat

C:\Windows\system32\symbols\exe\DVRArchiveViewer.pdb

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\Editorb7.bmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZZOut.bmp

C:\Users

\\.\PHYSICALDRIVE0

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\Microsoft.VC90.CRT\msvcr90.dll

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\Ksicfg.dll

C:\Users\win7\AppData\Local\Temp\nsiCBAF.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nstC967.tmp\NSISdl.dll

C:\KyoRm.ini

C:\Windows\system32\Msflxgrd.ocx

Formats\UNACEV2.DLL

C:/Windows/system32/CMDLGJP.DLL

C:\Users\win7\AppData\Local\Temp\nsu2A1E.tmp\System.dll

C:\Windows\Imagination Studio.scr

C:\My Documents\mega-pack

\\.\COM223

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\killerlayout.jpg

C:\Users\win7\AppData\Local\Temp\nsf1C2F.tmp\565191847

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\nJfxcWgTsy.lnk

C:\Users\win7\AppData\Local\Temp\nsk7894.tmp\nsArray.dll

32788R22FWJFW\Creg.dat

C:\Users\win7\AppData\Local\Temp\nsd257A.tmp

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM55.tmp

WgaTray.exe

C:\Windows\dll\wntdll.pdb

c:\apilog.txt

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich7ide.inf

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM10.tmp

C:\Users\win7\AppData\Local\Temp\nsgBB49.tmp\NSISdl.dll

C:\myapp.exe

C:\Users\win7\AppData\Roaming\Microsoft\MSXML2\msxml4a.dll

C:\Users\win7\AppData\Local\Temp\{0654AC99-2BF5-4929-9C44-4B6872A6C4E0}\0x0409.ini

C:\Users\win7\AppData\Local\Temp\is-4KG8T.tmp\sample.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\UJ1TO3Y2.txt

C:\Users\win7\AppData\Local\Temp\nsq1EDE.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nszA5E1.tmp\\340359336

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\tabskb.dll.mui

32788R22FWJFW\License\mtee.txt.txt

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\ZapSpot\System\Core.zdt

C:\Users\win7\AppData\Local\Temp\nsx23D5.tmp\\365011575

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM70.tmp

C:\Users\win7\AppData\Local\Temp\nsh7A8A.tmp

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM27.tmp

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\insideout.html

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\Btn_Done.png

c:\python27\dlls\py.ico

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RArVzWJrYnj.lnk

C:\Users\win7\AppData\Local\Temp\nsm225E.tmp\\442134949

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\DX8C2WAM.txt

C:\Users\win7\AppData\Local\Temp\nsmE3A2.tmp\\384317956

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\WListViewEx.dll

C:\WINDOWS\FONTS\IMPACT.TTF

32788R22FWJFW\netsvc.xp.dat

C:\Users\win7\AppData\Local\Temp\nsn326B.tmp\\858941668

\\.\PhysicalDrive10

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\section1.html

C:\Users\win7\Desktop\dll\CFVS_HookDll.pdb

C:\Users\win7\AppData\Local\Temp\nsn326B.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\VLKMTUFC.txt

C:\Users\win7\AppData\Local\Temp\nsgD1D8.tmp\\1099403155

C:\Users\win7\AppData\Local\Temp\nsf1CCB.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsp1E37.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsd70C7.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsk7894.tmp\\936337443

C:\Users\win7\AppData\Local\Temp\nss55EB.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nseA5B1.tmp

C:\Users\win7\AppData\Local\Temp\nsh223E.tmp

C:\Users\win7\AppData\Local\Temp\nsr2DF7.tmp\nsWeb.dll

C:\Data\Textures\Gui\Options_Assignments_02.dds

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\resume[1]

C:\Users\win7\AppData\Roaming\SharedSettings_1_0_5.ccs

\\.\COM239

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/insideout.html

RarExtLoader.exe

C:\Users\win7\AppData\Local\Temp\nsa330E.tmp\SimpleSC.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~pt-PT~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsnB3E7.tmp\\769355975

\\.\COM71

C:\Windows\system32\kuui\wij\maks.dat

C:\Users\win7\AppData\Local\Temp\nshBEA4.tmp

C:\Users\win7\AppData\Local\Temp\nsq1D0A.tmp\System.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\JEC_P.ini

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\CallbackCtrl.dll

\\.\COM34

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\Editorb8.bmp

\\.\COM28

C:\Users\win7\AppData\Local\Temp\\~DF3751328F33314E67.TMP

C:\Users\win7\AppData\Local\Temp\nsd8219.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsc3142.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsh8605.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\VSD492D.tmp\DotNetFX\dotnetchk.exe

C:\Users\win7\AppData\Local\Temp\nsx2FEB.tmp\SimpleSC.dll

32788R22FWJFW\Combo-Fix.sys

C:\Users\win7\AppData\Local\Temp\nsv1EA5.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsz1AD7.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsw9718.tmp\SimpleSC.dll

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Soearcho--NewTeAb\Uninstall.lnk

C:\Users\win7\AppData\Local\Microsoft

C:\Users\win7\AppData\Local\Temp\4d817503ee65560a8dcdb650fa6add61\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsuB310.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsk1BB2.tmp\NSISdl.dll

\\.\COM11

C:\Users\win7\AppData\Local\Temp\IPMx2\All\855.inf

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8A574ED5927B3CEC9626151D220C7448

C:\Users\win7\AppData\Local\Temp\nsy8F48.tmp\1128005201

C:\Users\win7\AppData\Local\Temp\nsjB282.tmp

C:\Users\win7\Documents\blackbox-keys.txt

C:\Windows\system32\symbols\dll\wkernelbase.pdb

C:\Users\win7\AppData\Local\Temp\nsxACC6.tmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\cancel[1]

\\.\Y:

C:\Users\win7\AppData\Local\Temp\nsk1C9B.tmp

C:\Users\win7\AppData\Local\Temp\~GLH0000.TMP

C:\Users\win7\AppData\Local\Temp\nsq1D0A.tmp\\379891449

C:\Users\win7\AppData\Local\Temp\nsm2EC2.tmp\nsWeb.dll

ascbalo3N.dll

C:\Users\win7\AppData\Local\Temp\DIQ\test-av13688_004\config.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\ui[1].css

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_Enter.bmp

C:\Users\win7\AppData\Local\CoffeeCup Software\SharedSettings.sqlite

C:\Users\win7\AppData\Local\Temp\68fecef9577b6548cd9f9c89137e6238\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Local\Temp\nsl2DD6.tmp

C:\Program Files\desktop.ini

C:\wc32to16.exe

C:\Users\win7\AppData\Local\Temp\nsh6CEF.tmp\\1008523559

C:\Users\win7\AppData\Local\Temp\nsi6F5F.tmp

C:\Users\win7\AppData\Local\Temp\

C:\Users\win7\AppData\Local\Temp\nsi3D34.tmp\\105448008

C:\Users\win7\AppData\Local\Temp\is-ACBJR.tmp\itdownload.dll

c:\Program Files\Alexa Booster v3.2\Skins\3.bmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Sony.ini

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\ssleay32.dll

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\section5.html

C:\Users\Public\Desktop

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\res\about_hover.png

C:\Windows\COMCTL32.DLL

C:\Users\win7\AppData\Local\Temp\nso8E41.tmp

\\.\PIPE\DAV RPC SERVICE

C:\Users\win7\AppData\Local\Temp\nsu25A0.tmp\684128688

C:\Users\win7\AppData\Local\Temp\nsy7192.tmp\\427833926

C:\Users\win7\AppData\Local\Temp\nsb156C.tmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\104[1]

32788R22FWJFW\SnapShot.cmd

c:\download\driver\12950\SoftwareDriver\INI\cmudax3.ini

C:\Users\win7\AppData\Local\Temp\nsb1CB7.tmp\\862653124

32788R22FWJFW\CSet.cmd

C:\Users\win7\AppData\Local\Temp\7zS2C7E.tmp\515f5b4a5a364.tlb

C:\Users\win7\AppData\Local\Temp\\~DF354D6BA716BA062F.TMP

C:\Users\win7\AppData\Roaming\WIN7-PC.FKG

C:\Users\win7\AppData\Local\Temp\nsg2069.tmp

C:\Users\win7\AppData\Local\Temp\nso27DC.tmp\\211411778

C:\Windows\OLEAUT3N.DLL

32788R22FWJFW\av.cmd

C:\Users\win7\AppData\Local\Temp\nsm2FF9.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsz73B5.tmp\\568528752

\\.\COM58

\??\C:\Windows\system32\syncui.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\vVzWJrYnj.lnk

C:\Users\win7\AppData\Local\Temp\nsy8713.tmp\nsArray.dll

C:\Windows\inf\oem0.PNF

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~zh-CN~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\7zS7336.tmp\settings.ini

C:\Users\win7\AppData\Local\Temp\nsmE3A2.tmp\384317956

C:\Users\win7\AppData\Local\Temp\nsc94BA.tmp\NSISdl.dll

c:\OkiDriver\OKIB2200B2400\OPB240N.dat

C:\Users\win7\AppData\Local\Temp\nsh8605.tmp\568188251

C:\Skins\1.skn

C:\sample.gui

C:\Users\win7\AppData\Local\Temp\nsl5ED4.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsc16F4.tmp\nsArray.dll

C:\Windows\system32\wkernelbase.pdb

\\.\COM63

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Gadget-Platform-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\Btn_Inst.png

CONOUT$

C:\Users\win7\AppData\Local\GlobalSCAPE\CuteFTP Pro\sm.dat

C:\Users\win7\AppData\Local\Temp\nsm6C24.tmp\nsArray.dll

C:\Windows\System32\MsAudio.ocx

C:\ProgramData\FileZilla\sitemanager.xml

C:\Users\win7\AppData\Local\Temp\nsl1E23.tmp\\120566233

C:\Users\win7\AppData\Local\Temp\ab5d4243cc93ed6bbca90dd95ca61177\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\6N4F6AIC.txt

C:\Users\win7\AppData\Local\Temp\nsx7FD6.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsh21FA.tmp\NSISdl.dll

C:\Windows\system32\ASYCFILT.DLL

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\Ksicfg.dll

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\Infobar\inforBar.html

C:/Program Files/TSK/tsksound.dll

C:\Users\win7\AppData\Local\Temp\nsp842D.tmp\608912117

C:\Users\win7\AppData\Local\Temp\nsw4FAE.tmp\\861052772

C:\Users\win7\AppData\Local\Temp\nsq7599.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\8HRY3KCY.txt

\\.\COM122

C:\image\barbutton_right.png

C:\Users\win7\AppData\Local\Temp\nsp8CDB.tmp\nsArray.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Common-Modem-Drivers-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich5id2.inf

C:\Users\win7\AppData\Local\Temp\nsx16D5.tmp\inetc.dll

C:\Users\win7\AppData\Local\Temp\RarSFX0\mchppIc.exe

C:\Users\win7\AppData\Roaming\GlobalSCAPE\CuteFTP\sm.dat

\??\C:\Windows\system32\EhStorShell.dll

C:\Users\win7\AppData\Local\Temp\nsr475A.tmp

C:\Users\win7\AppData\Local\Temp\nstDAFD.tmp\931263985

C:\Users\win7\AppData\Local\Temp\nsx8B46.tmp

C:\Users\win7\AppData\Local\Temp\nsp78B3.tmp\ZipDLL.dll

\\.\COM200

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PhotoBasicPackage~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\GlobalSCAPE\CuteFTP Lite\sm.dat

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\ZapSpot.exe

bVzWJrYnjUO.dat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nso28C6.tmp\307909633

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\ithttp.dll

C:\Users\win7\AppData\Local\Temp\is-MEJF8.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\000a3d85.a

C:\Users\win7\AppData\Local\Temp\nsa2C60.tmp\nsArray.dll

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\ST\img\common\bt_close_default.jpg

C:\Users\win7\AppData\Local\Temp\nsp794E.tmp\\194114351

C:\ProgramData\GHISLER\wcx_ftp.ini

C:\Users\win7\AppData\Local\Temp\nsr5EA6.tmp\NSISdl.dll

C:\image\barbutton_left.png

C:\Users\win7\AppData\Local\Tempfolder\ortmp\softokn3.dll

C:\Users\win7\AppData\Local\Temp\nsi16F1.tmp

C:\Users\win7\AppData\Local\Temp\nsy92DC.tmp\System.dll

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/index.html

C:\Users\win7\AppData\Local\Temp\nsz8067.tmp\NSISdl.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~pt-BR~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsz1AD7.tmp\1114010628

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D7B4E43171BB9E412497B0377F4343E7

C:\Users\win7\AppData\Local\Temp\nsx2FEB.tmp\System.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\YSSWAERZ.txt

C:\Windows\system32\ciplImageLis3N.ocx

\\.\COM25

C:\Users\win7\AppData\Local\Temp\DIQ\Player_151\routes.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\mobi2[1].js

\\.\COM248

C:\Users\win7\AppData\Local\Temp\nss1752.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsoB080.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM64.tmp

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\uninst.exe

C:\Users\win7\AppData\Local\Temp\Tar70F6.tmp

C:\Users\win7\AppData\Local\Tempfolder\DoltuJonisep\libplc4.dll

\\.\N:

C:\Windows\System32\dllcache\dnsapi.dll

C:\Users\win7\AppData\Local\Temp\nsr1493.tmp\nsArray.dll

C:\Windows\wntdll.pdb

C:\Users\win7\AppData\Roaming\CoffeeCup Software\SharedSettings.sqlite

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\XVzWJrYnjUOg.lnk\desktop.ini

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\Downloader.dll

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\asl-icn-mini-games-32x32x2.gif

C:\Users\win7\AppData\Local\Temp\{0903A383-0598-4DEC-8D80-08B12F2C46B7}\0x0419.ini

C:\Users\win7\AppData\Local\Temp\\~DF1F964BFD8192D358.TMP

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\ext[1].js

C:\Users\win7\AppData\Local\Temp\nsq5CD1.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nss6E17.tmp

C:\Windows\GeoOCX\WebCam\20090916\ImageGUI.dll

C:\Users\win7\AppData\Local\Temp\nsd6F41.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\desktop.ini

C:\Users\win7\AppData\Local\Temp\nsi3EB0.tmp\splash.bmp

__tmp_rar_sfx_access_check_1825656

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A34B45DD28A5DAEFDA3E0BA2FCE7DE24_87910BE1C29EBFE2C02400CF6890DE18

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\JYXL1SXV.txt

C:\Users\win7\AppData\Local\Temp\f2da611710f7fa687bb7d99d2b938369\volcano.exe

C:\Users\win7\AppData\Local\Temp\nsoFCAB.tmp

C:\Users\win7\AppData\Local\Temp\nse73D4.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\\~DFAE72EFF6687B264C.TMP

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\buywords.gif

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\BBD\img\common\bt_close_click.jpg

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_84FF9D6F15EF7AC15278E8CA625D6354

C:\Users\win7\AppData\Local\Temp\7zS77D6.tmp\hpcdeopkgienceaajfkaohfhnacpfamh\lsdb.js

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\botva2.dll

C:\ProgramData\FlashFXP\4\History.dat

C:\Users\win7\AppData\Local\CoffeeCup Software\SharedSettings_1_0_5.ccs

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Related Programs\VideoPad Video Editor.lnk

C:\Users\win7\AppData\Local\Temp\nsf865E.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\SharedSettings_1_0_5.sqlite

C:\Users\win7\AppData\Local\Temp\7zS7BFD.tmp\settings.ini

C:\Users\win7\AppData\Local\Temp\nsg2EA1.tmp

C:\Users\win7\AppData\Local\Temp\nsk797D.tmp

c:\users\win7\appdata\local\tempfolder\wikaapavnu\lohutaaho.dat

C:\Users\win7\AppData\Local\Temp\is-280BG.tmp\_isetup\_setup64.tmp

\\.\COM144

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\nsd18C9.tmp\825095914

32788R22FWJFW\srizbi.md5

C:\Users\win7\AppData\Local\Temp\nsf75F6.tmp

C:\Users\win7\AppData\Local\Temp\nsk7894.tmp\936337443

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\ca\alerter.country

C:\Users\win7\AppData\Local\Temp\DIQ\flashplayer_154\OfferBrokerage_14003.exe

c:\Program Files\FontLab\FontLab\MPWizard.CFG

\\.\COM12

\\.\COM51

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\resume[1]

C:\Users\win7\AppData\Local\Temp\nsm2FF9.tmp\nsResize.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\GetPosSen.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Tempfolder\DoltuJonisep\sqlite3.dll

C:\Users\win7\AppData\Local\Temp\nsb1F1C.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsa7626.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsd8B0A.tmp\NSISdl.dll

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus\McAfee Security Scan Plus.lnk

C:\Python27\symbols\dll\wntdll.pdb

C:\Windows\GeoOCX\WebCam\20090916\GeoCodecReg

C:\Users\win7\AppData\Local\Temp\12aubfff5\appdata\\Adblock\{43789A6F-8316-54A6-96D4-87874B9CC177}

C:\Users\win7\AppData\Local\Temp\nsi5ECB.tmp

C:\Users\win7\AppData\Local\Temp\nstC967.tmp\269705472

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\MixPad MultiTrack Mixer.lnk

c:\OkiDriver\OKIB2200B2400\OPPE_H00.HLP

\\.\SIWVIDSTART

1.zip

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\ST\img\common\win_bottom_left_msk.png

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Editions-ClientN-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nss567D.tmp

C:\Windows\COMCTL3N.OCX

\\.\PhysicalDrive15

C:\Users\win7\AppData\Local\Temp\nsdB35A.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Printer-Drivers-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

\\.\Scsi12:

C:\Users\win7\AppData\Local\Temp\SPI38FC.tmp\setup.lic

\\.\PhysicalDrive4

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\Selection Tools.exe

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\YAAN.ini

C:\Users\win7\AppData\Local\Temp\nsk1DCA.tmp\1.zip

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\Dlg_Btn_Cancel.png

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\utils[1].js

c:\IES_Files\Outdoor\Bollards\OSA8R-HID\OSA8R-100PSMH120-CG.IES

MsAudio.ocx

C:\ZapImages\asl-btn-big-support-83x28x2.gif

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM69.tmp

C:\Users\win7\AppData\Local\Temp\nstE5A0.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsy247C.tmp\System.dll

32788R22FWJFW\List.bat

C:\Users\win7\AppData\Local\Temp\nsw2DA6.tmp\492358780

C:\Users\win7\Videos\desktop.ini

32788R22FWJFW\Lang.bat

C:\Users\win7\AppData\Local\Temp\nsr152F.tmp\nsArray.dll

C:\Windows\RICHTX32.DEP

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\mobi2[1].js

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\copy6.html

__tmp_rar_sfx_access_check_1093156

C:\\image\baritem_option.png

C:\Users\win7\AppData\Local\Temp\nse8B64.tmp\nsArray.dll

c:\OkiDriver\OKIB2200B2400\OPPE_F01.dll

C:\Users\win7\AppData\Local\Temp\nsc3057.tmp

C:\Windows\wcx_ftp.ini

C:\image\baritem_new.png

C:\Users\win7\AppData\Local\Temp\Elite_Xl2k\GCXL8081.PPD

C:\Users\win7\AppData\Local\Temp\nsn7A19.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\{0903A383-0598-4DEC-8D80-08B12F2C46B7}\0x0409.ini

C:\Users\win7\AppData\Local\Temp\nsq94D5.tmp

\\.\COM29

C:\Windows\system32\MsAudio.ocx

c:\Program Files\Alexa Booster v3.2\Proxy\referers.txt

C:\Users\win7\AppData\Local\Temp\nsr2EE1.tmp\NSISdl.dll

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base.xml

C:\\image\baritem_open.png

c:\download\driver\12950\SoftwareDriver\Driver\CMxPCI4.INF

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\HXXI3S48.txt

C:\Users\win7\AppData\Local\Temp\12auf94d4\license.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\XR0RXMP2.txt

C:\Users\win7\AppData\Local\Temp\nsiB060.tmp\NSISdl.dll

\\.\COM38

C:\Python27\dll\wntdll.pdb

\\.\Scsi10:

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\1navleft.jpg

\\.\COM86

C:\Users\win7\AppData\Local\Temp\Elite_Xl2k\GCX12S1.PPD

C:\Windows\inf\oem4.inf

C:\Users\win7\AppData\Local\Temp\nsv3915.tmp\NSISdl.dll

c:\Program Files\Alexa Booster v3.2\Proxy\proxy.txt

C:\Python27\dll\wkernelbase.pdb

C:\Users\win7\AppData\Local\Temp\nsg206A.tmp\SkinH.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94C18AA77707A64853AFFBE6D6382F75

C:\Users\win7\AppData\Local\Temp\Cab9E6C.tmp

C:\Windows\Msflxgrd.ocx

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~ar-SA~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\4ae6cf3c7fbd3414df26e8400c7d510e\pricepeep.exe

C:\Settings\Queue.xml

C:\Users\win7\AppData\Local\Temp\nsa7AC6.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nslAE1B.tmp\SimpleSC.dll

\\.\COM83

C:\Users\win7\AppData\Local\Temp\nsk9246.tmp\\1181702137

C:\Users\win7\AppData\Local\Temp\5a6e0d7e7fb82588b081b16c0bd88029\DirectDownloaderInstaller.exe

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\SamSung.dll

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\acsint64.sys

\\.\Scsi8:

C:\WINDOWS\FONTS\COMICBD.TTF

C:\Users\win7\AppData\Local\Temp\nsc94BA.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsgC3AA.tmp\\978525460

C:\Windows\dll\System.Windows.Forms.pdb

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\ShapeCollector.exe.mui

C:\sample.config

C:\Users\win7\AppData\Local\Temp\nsgF973.tmp

c:\download\driver\12950\SoftwareDriver\Driver\CMUDAX3.CAT

C:\Users\win7\AppData\Roaming\FlashFXP\4\Quick.dat

C:\Files

C:\Users\win7\AppData\Local\Temp\nst58AB.tmp\nsArray.dll

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\res\company_logo.png

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM57.tmp

C:\Users\win7\AppData\Local\Temp\nse29C0.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-MEJF8.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\nsoE348.tmp\ZipDLL.dll

C:\WINDOWS\FONTS\CONSOLAB.TTF

C:\TDSSKiller.3.0.0.44_21.11.2015_04.15.37_log.txt

C:\Users\win7\AppData\Local\Temp\nss8054.tmp\StdUtils.dll

c:\pagefile.sys

C:\Users\win7\AppData\Local\Temp\nsg94E6.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nst76AF.tmp\823495562

C:\Users\win7\AppData\Local\Temp\nsx16D5.tmp\nsm22AE.tmp

C:\Windows\GeoOCX\WebCam\20090916\GVMegaPixelViewer.dll

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM45.tmp

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\SystemFolder\vpncategories.dll

C:\Users\win7\AppData\Local\Temp\is-EU83C.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Roaming\Microsoft\desktop.ini

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\formula4.html

C:\Users\win7\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\GIF to Flash Converter\GIF to Flash Converter.lnk

C:\Users\win7\AppData\Local\Temp\nse29C0.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\\~DF9C3570AC0EDC4241.TMP

C:\Users\win7\AppData\Local\Temp\nsu8CFA.tmp\1109788421

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml

C:\Users\win7\AppData\Local\Temp\nse29C0.tmp\172628766

C:\Windows\Picture-SK\main.jpg

C:\Users\win7\AppData\Local\Temp\nsr3019.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nst7172.tmp\NSISdl.dll

Default.SFX

C:\Users\win7\AppData\Local\Temp\nsv2C41.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\pb.png

C:\Users\win7\AppData\Local\Temp\nsx320C.tmp

C:\Users\win7\Documents\MSDCSC\msdcsc.exe

Formats\cab.fmt

C:\Windows\GeoOCX\WebCam\20090916\ssleay32.dll

C:\Users\win7\AppData\Local\Temp\nsp799D.tmp\NSISdl.dll

\\.\PhysicalDrive11

C:\Users\win7\AppData\Local\Temp\DIQ\flashplayer_154\config.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich8usb.inf

C:\Users\win7\AppData\Roaming\eLEThjJwJF

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager\TUTORIALS.lnk

\\.\COM249

zlib.dll

C:\Windows\system32\spool\DRIVERS\x64\3\STDDTYPE.GDL

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\Infobar\image\security.png

\\.\COM131

C:\Users\win7\AppData\Local\Temp\nsaC56C.tmp\Processes.dll

C:\Data\Scripts\Gui\MessageBoxRestartNeeded.gui

C:\Users\win7\AppData\Local\Temp\\~DFCB608224964CE9C8.TMP

32788R22FWJFW\netsvc.bad.dat

C:\Users\win7\AppData\Local\Temp\tsldrl6660\index.scr

C:\Users\win7\AppData\Local\Temp\nsb7C4D.tmp\\1146937031

C:\Users\win7\AppData\Local\Temp\nsp799D.tmp\\1119186236

C:\Users\win7\AppData\Local\Temp\nsd594F.tmp\ButtonEvent.dll

C:\Settings\Certificates\client.key

C:\miniie.exe

C:\WINDOWS\FONTS\MICROSS.TTF

\\.\COM156

C:\Users\win7\AppData\Local\Temp\nsq7BC0.tmp\1017444673

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZRight.bmp

\\.\PIPE\srvsvc

\\.\COM35

32788R22FWJFW\License\streamtools.zip

C:\Users\win7\AppData\Local\Temp\nsz8333.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\DIQ\flashplayer_154\DomaIQ.exe

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\1I6GVVXF.txt

C:\Users\win7\AppData\Local\Temp\DIQ\test-av46804_004\OfferBrokerage_14003.exe

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GJrYnjUOgh.lnk\desktop.ini

/etc/ctags.conf

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\NSCOREOE.txt

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Disk-Diagnosis-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\Dlg_Btn_OK.png

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\mobi[1].js

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\JVC_Vn_series.ini

C:\Users\win7\AppData\Local\Temp\nsj276E.tmp

C:\Users\win7\AppData\Local\Temp\nsg11A0.tmp\nsArray.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~et-EE~7.1.7601.16492.cat

\\.\COM213

C:/Windows/system32/imagehlp.dll

Formats

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\H2ON21OP.txt

C:\library.dat

c:\OkiDriver\OKIB2200B2400\OPPE_UI.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~sv-SE~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nse1AA7.tmp

C:\Users\win7\AppData\Local\Temp\nsj2942.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\7zS7336.tmp\515f52b8125c4.exe

C:\Users\win7\AppData\Local\Temp\nsbC511.tmp\650521284

C:\Users\win7\AppData\Local\Temp\nsv6907.tmp\Processes.dll

C:\Windows\RICHED32.DLL

C:\Data\Scripts\Gui\MessageBoxInvalidGameName.gui

\\.\COM167

C:\Data\Scripts\Gui\PageOptions.gui

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\OBW9LKDS.txt

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\pbbkg.png

C:\Windows\GeoOCX\WebCam\20090916\PTZ\SmartTable.xml

Lily_Music.cfg

C:\Users\win7\AppData\Local\Temp\nsx7139.tmp\1035797652

COMCTL32.OCX

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\Btn_Close.png

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\Resource.dll

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\vpncli.exe

C:\Users\win7\AppData\Local\Temp\nsuB3F9.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\nsx1770.tmp

\\.\Scsi3:

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~pl-PL~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsx7139.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\analytics[1].js

C:\Users\win7\AppData\Local\Temp\nsk1DCA.tmp\nso28C7.tmp

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\QQBrowserSecurityCenter.exe

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\tssafeedit.dat

C:\Users\win7\AppData\Local\Temp\nsvB61D.tmp\NSISdl.dll

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/EditorLogo.bmp

\\.\BCMDMCCP

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\pbbkg.png

C:\Users\win7\AppData\Local\Temp\nsh8B40.tmp

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\ST\img\common\win_top_left.png

C:\ProgramData\SharedSettings_1_0_5.sqlite

C:\Users\win7\AppData\Local\Temp\nsj1BF5.tmp\System.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Sensors-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\ProgramData\Microsoft\desktop.ini

c:\Program Files\FontLab\FontLab\FLCompo.exe

\\.\COM166

C:\Users\win7\AppData\Local\Temp\is-N9LB8.tmp\sample.tmp

\\.\COM214

C:\Users\win7\AppData\Local\Temp\7zSB2EF.tmp\dpbejmkogknnkjbfcacgbckomaofefka\content.js

C:\Users\win7\AppData\Local\Temp\nsc6D6B.tmp

C:\Users\win7\AppData\Local\Temp\622210edd7d2b5052ce79dc1b1dcd9d6\pricepeep.exe

C:\Users\win7\AppData\Local\Temp\nsy8AF5.tmp\NSISdl.dll

C:\Settings\HashIndex.xml

C:\Python27\Scripts\dll\wkernelbase.pdb

C:\Users\win7\AppData\Local\Temp\is-HHG9D.tmp\is-PS2RH.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~hr-HR~7.1.7601.16492.cat

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\vpnva64.cat

\\.\COM226

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\mip.exe.mui

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\YYVZKWCY.txt

C:\Users\win7\AppData\Local\Temp\nsx858.tmp

C:/Windows/system32/MSCC2JP.DLL

C:/Program Files/TSK/Readme_s.txt

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM52.tmp

C:\Windows\symbols\LicenseManagerV2.pdb

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\TextXtra.x32

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IE-Troubleshooters-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

Avira Registry Cleaner\msvcp71.dll

32788R22FWJFW\av.vbs

C:\Users\win7\AppData\Local\Temp\nsr152F.tmp\146410224

C:\Users\win7\AppData\Local\Temp\nsnDA8E.tmp

C:\Users\win7\AppData\Local\Temp\7zS7BFD.tmp\pnadleldkhfpclgofgnnmhblfcamfhfa\content.js

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\ST\img\common\win_edge_top.png

32788R22FWJFW\License\pv_5_2_2.zip

Formats\tar.fmt

C:\Users\win7\AppData\Local\CoffeeCup Software\SharedSettings_1_0_5.sqlite

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\5Z41773A.txt

C:\Users\win7\AppData\Local\Temp\nsi24FD.tmp

c:\download\driver\12950\SoftwareDriver\Driver\CMRMDRV3.EXE

C:\Users\win7\AppData\Local\Temp\nsr44D.tmp\nsWeb.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\223DE96EE265046957A660ED7C9DD9E7_EFF9B9BA98DEAA773F261FA85A0B1771

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\pb.png

\\.\PhysicalDrive1

C:\Data\Scripts\Gui\Game.gui

C:\Windows\System32\DriverStore\infstrng.dat

C:\Users\win7\AppData\Local\Temp\nsaE650.tmp\System.dll

32788R22FWJFW\MoveIt.bat

\\.\PhysicalDrive12

C:\Users\win7\AppData\Roaming\WeatherWatcher\WeatherWatcher.log

32788R22FWJFW\asp.str

Formats\uue.fmt

C:\Users\win7\AppData\Local\Temp\nss80A2.tmp\841337790

C:\dll\wkernelbase.pdb

\\.\COM179

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IE-Hyphenation-Package-English~31bf3856ad364e35~amd64~~6.3.9412.0.cat

C:\Windows\assembly\pubpol1.dat

32788R22FWJFW\svchost.dat

c:\download\driver\12950\SoftwareDriver\Driver\CMxPCI5.INF

c:\OkiDriver\OKIB2200B2400\Opdmn054.dll

C:\Users\win7\AppData\Local\Temp\nsg21A1.tmp

C:\Users\win7\AppData\Local\Temp\nsv3915.tmp\1041041361

C:\Users\win7\AppData\Local\Temp\is-0SC4M.tmp\is-FTU3B.tmp

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\CheckBox.png

C:\Users\win7\AppData\Local\Temp\nsi3D34.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\64b86246e9aa3fa79b9535db49b20b8d\DirectDownloaderInstaller.exe

TABCTL3N.OCX

C:\Windows\System32\WindowsPowerShell\v1.0\symbols\dll\CFVS_HookDll.pdb

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6EE18E7C9044AB68AF295DC6CAF43C7E_1D9AC458315F4E69D67E803A5FDBCE6E

C:\Windows\SysWOW64\Dxtmsft.dll

C:\Users\win7\AppData\Local\Temp\nsk377C.tmp\1153542742

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\dm_bar_down[1]

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM15.tmp

C:\Windows\Temp

C:\Users\win7\AppData\Local\Temp\nse1C72.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsi5697.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\7zS77D6.tmp\515f52bb88489.dll

C:\Windows\system32\emaz\nha\govc.dat

\\.\COM50

C:\Users\win7\AppData\Local\Temp\nsy2694.tmp\1127153949

c:\svn_1.7.5_stable\DVR\_Bin\Release Trace\DVRArchiveViewer.pdb

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\WZGD1SQ3.txt

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Indexing-Service-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\MSVCRTD.DLL

C:\Users\win7\AppData\Local\Temp\4e2a1aff004f49a5e8fa911f735a399c\pricepeep.exe

C:\Users\win7\AppData\Local\Temp\aaiw686672.bmp

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\res\unpinned.png

C:\Windows\System32\WindowsPowerShell\v1.0\symbols\dll\wntdll.pdb

C:\Windows\system32\lao\bad\zifov.dat

C:\Users\win7\AppData\Local\Temp\nsm1FA9.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\EK68PDTE.txt

C:\Users\win7\AppData\Local\Temp\nsp1E37.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Tempfolder\DoltuJonisep\nssdbm3.dll

32788R22FWJFW\grep.cfxxe

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_5.bmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~nb-NO~7.1.7601.16492.cat

c:\users\win7\appdata\local\tempfolder\doltujonisep\pomtokof.dat

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\Dlg_Btn_OK.png

C:\Users\win7\AppData\Local\Temp\nsu83FE.tmp\460556029

C:\Users\win7\AppData\Local\Google\Chrome

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\18ROWH02.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\NHC34GVH.txt

COMDLG32.OCX

C:\Users\win7\AppData\Local\Temp\nss180F.tmp

UnrarSrc.txt

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu\oskmenubase.xml

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6EE18E7C9044AB68AF295DC6CAF43C7E_1D9AC458315F4E69D67E803A5FDBCE6E

\\.\COM37

C:\Users\win7\AppData\Local\Temp\nsjB723.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsc878.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsa1D48.tmp\System.dll

\??\C:\Windows\system32\ntshrui.dll

C:\Users\win7\AppData\Local\Temp\nskA7A6.tmp\SimpleSC.dll

C:\Data\Textures\Gui\SingleMission_DeleteMission_02.dds

C:\Users\win7\AppData\Local\Temp\nse1C71.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\QuwoxaBATH\6472.xml

C:\Users\win7\AppData\Local\Temp\nstC9B5.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM4.tmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\dm_bar_right[1]

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\Edit.png

C:\Users\win7\AppData\Local\Temp\808275445.xml

C:\Windows\system32\spool\DRIVERS\x64\3\unidrv.hlp

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\res\pinned_button.png

C:\Windows\system32\saiv\oab\udou.dat

C:\Users\win7\AppData\Local\Temp\aut7C8D.tmp

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\msvcp71.dll

32788R22FWJFW\CregC.cmd

C:\Users\win7\AppData\Local\Temp\\~DFC22C0477C3B6FA33.TMP

install62953.exe

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_Text.bmp

C:\Users\win7\AppData\Local\Temp\nsj775A.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\8CQFR4QQ.txt

MSCOMCT3N.OCX

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\verificar_ip[1].htm

C:\Windows\assembly\NativeImages_v2.0.50727_32\index1c2.dat

C:\Users\win7\AppData\Local\Temp\nsq1D0A.tmp\379891449

ascIP95.DLL

C:\\image\barbutton_middle.png

C:\Users\win7\AppData\Local\Temp\nsm1732.tmp\nsWeb.dll

C:\Python27\Scripts\symbols\dll\wkernel32.pdb

C:\Users\win7\AppData\Local\Temp\\~DF4C33D0B6CBC41A30.TMP

32788R22FWJFW\Create.cmd

C:\fLog.tx

C:\Users\win7\AppData\Local\Temp\3b3466ef1cb588b8fa4e82447de17686\BitAcceleratorDDLRinstaller.exe

32788R22FWJFW\GetHive.cmd

C:\Users\win7\AppData\Local\Temp\nsd18C9.tmp\NSISdl.dll

\\.\COM178

C:\Users\win7\AppData\Local\Temp\IPMx2\All\E7220.inf

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~it-IT~7.1.7601.16492.cat

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

C:\Users\win7\AppData\Local\Temp\nst899E.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsa7A29.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nsg1EED.tmp

C:\Users\win7\AppData\Local\Temp\nsz2952.tmp\NSISdl.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZOption.bmp

C:\Users\win7\AppData\Local\Temp\nsq1CBB.tmp

C:\Users\win7\AppData\Local\Temp\Creative_ALchemy_AL6_Cleanup.0001.dir.0000\~de2314.tmp

C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\machine.config

C:\Users\win7\AppData\Local\Temp\nsj17C4.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsxAE9B.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\A223AD2D.RREF

C:\Users\win7\AppData\Local\Temp\\~DF8AA20E884959FDB4.TMP

C:\Users\win7\AppData\Local\Temp\nst27FA.tmp

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkniaejinldagieikdjacfpfchffkhhi

C:\Users\win7\AppData\Local\Temp\difE5FD.tmp

C:\\AppsBlackList_user.xml

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTU.ini

C:\Users\win7\AppData\Local\Temp\nsn7A19.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-HDJS0.tmp\is-9FF4K.tmp

32788R22FWJFW\extract.cfxxe

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\B3ZQEJST.txt

32788R22FWJFW\lnkread.vbs

\\.\COM225

C:\Users\win7\AppData\Local\Temp\nsc6E55.tmp

C:\Python27\symbols\exe\DVRArchiveViewer.pdb

C:\Windows\GeoOCX\WebCam\20090916\eMapView.ocx

C:\Users\win7\AppData\Roaming\FlashFXP\4\History.dat

\\.\COM24

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich8ide.inf

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\acsmux.cat

C:\Users\win7\AppData\Local\Temp\nsp1E37.tmp\539484055

C:\Users\win7\AppData\Local\Temp\nst8DF1.tmp\\328237516

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\Dlg_bkg.png

\\.\COM85

C:\Users\win7\AppData\Local\Temp\nsi246C.tmp\709666229

C:\ProgramData\Microsoft\Windows\Start Menu\Programs

C:\Users\win7\AppData\Local\Temp\nsn6F7E.tmp

C:\Users\win7\AppData\Local\FlashFXP\3\History.dat

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\ELMO PTC-400C.ini

C:\Users\win7\AppData\don note.txt

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\ext[1].js

C:\Users\win7\AppData\Local\Temp\nsm7CD9.tmp

C:\Support\bin\setup.exe

C:\ProgramData

C:\Users\win7\AppData\Local\Temp\nsx6F21.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsh7D56.tmp\924249673

C:\Users\win7\AppData\Local\Temp\nsy8AA7.tmp

C:\Users\win7\AppData\Local\Temp\nsi3D34.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nszA5E1.tmp\340359336

C:\Users\win7\AppData\Local\Temp\7zS55DB.tmp\jjhklgikohjiaahlibnfgegobedhpgmf\manifest.json

C:\Program Files\Chameleon Clock\Sounds\Clocks\Clock4.wav

C:\Users\win7\AppData\Local\Temp\nsm7E60.tmp\System.dll

c:\download\driver\12950\SoftwareDriver\Driver\cmudax3.sys

C:\Users\win7\AppData\Local\Temp\nse8250.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM59.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~de-DE~7.1.7601.16492.cat

\\.\PhysicalDrive3

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-NetFx3-OC-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsz8FE5.tmp\\105175608

\\.\T:

C:\Windows\GeoOCX\WebCam\20090916\SceneChangeDetection.dll

\\.\PhysicalDrive14

C:\Users\win7\AppData\Local\Temp\nsb2DE7.tmp\\545374715

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\gdiplus.dll

C:\Users\win7\AppData\Local\Temp\nsz2A5F.tmp\NSISdl.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Dome_PelcoD.ini

32788R22FWJFW\clsid.c

C:\Program Files\Chameleon Clock\Sounds\Clocks\Churchbell.wav

c:\Program Files\FontLab\FontLab\mpwizard.hlp

C:\Users\win7\AppData\Local\Temp\nsf1CCB.tmp\nsArray.dll

C:\Windows\system32\juk\oje\agibj.dat

C:\Users\win7\AppData\Local\Temp\is-0BDME.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\nskB80E.tmp\nsArray.dll

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip\7-Zip Help.lnk

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\win7\AppData\Local\Temp\nsc7DD3.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\BBWOATXL.txt

C:\Data\Textures\Gui\Join_Game_frame.dds

C:\Users\win7\AppData\Local\Temp\nsc3C6D.tmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\dm_bar_left[1]

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\ST\img\common\win_bottom_left.png

C:\Users\win7\AppData\Local\Temp\nsu83FE.tmp\NSISdl.dll

\\.\COM143

C:\Users\win7\AppData\Local\Temp\7zS55DB.tmp\jjhklgikohjiaahlibnfgegobedhpgmf\background.html

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\it\alerter.country

C:\Users\win7\AppData\Local\Temp\nsb8410.tmp\NSISdl.dll

\\.\COM91

32788R22FWJFW\ForceLibrary.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\5LRLXUN0.txt

c:\Program Files\Alexa Booster v3.2\Skins\step3.jpg

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\us\alerter.country

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~ko-KR~7.1.7601.16492.cat

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_8.bmp

C:\Users\win7\AppData\Local\Temp\nst8DF1.tmp\NSISdl.dll

C:\ProgramData\GlobalSCAPE\CuteFTP Pro\sm.dat

C:\Windows\system32\wma-share2.exe

C:\Users\win7\AppData\Local\Temp\nskB80E.tmp\NSISdl.dll

C:\32788R22FWJFW\hidec.exe

C:\Users\win7\AppData\Local\Temp\nsu8175.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\4NH6ZTGT.txt

C:\Data\Scripts\Gui\MessageBoxOverwrite.gui

C:\Users\win7\AppData\Roaming\FlashFXP\3\Quick.dat

C:\Users\win7\AppData\Local\Temp\nsfD7E9.tmp\NSISdl.dll

C:\ZapImages\asl-btn-big-games-83x28x2.gif

C:\Users\win7\AppData\Local\Temp\nsu2769.tmp

C:\Users\win7\AppData\Local\Temp\12auf94d4\appdata\\{6970B802-2F13-4038-B620-33B0211D26A0}

C:\Users\win7\AppData\Local\Temp\nsb1F1C.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\DITBW7MB.txt

C:\Program Files\Teamspeak2_RC2\uninstall.ini

C:\Users\win7\AppData\Local\Temp\7zS55DB.tmp\jjhklgikohjiaahlibnfgegobedhpgmf\lsdb.js

\\.\COM96

C:\Users\win7\AppData\Local\Temp\nsc6DB9.tmp\\1079041222

C:\Users\win7\AppData\Local\Temp\nsn326B.tmp\nsArray.dll

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\??????????? ?? ?????????? ?????? RAR.lnk

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\OUY825MA.txt

C:\Users\win7\AppData\Local\Temp\nsd6F41.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsw92C5.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsy8921.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsx23D5.tmp\NSISdl.dll

\\.\Scsi0:

C:\Users\win7\AppData\Local\Temp\2748-0.jpg

C:\Users\win7\AppData\Local\Temp\nst3410.tmp

C:\Users\win7\AppData\Local\Temp\nsf795F.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsv516D.tmp\nsArray.dll

C:\Program Files\Chameleon Clock\Sounds\Clocks\alarm_soff.wav

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM47.tmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\e[2].gif

C:\Users\win7\AppData\Local\Temp\IPMx2\All\852.inf

c:\OkiDriver\OKIB2200B2400\OPPEPP3.dll

C:\Users\win7\AppData\Local\Temp\Trojan.exe.config

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\EditorLogo.bmp

Formats\iso.fmt

C:\Users\win7\AppData\Local\Tempfolder\DoltuJonisep\libnspr4.dll

C:\Windows\inf\oem3.PNF

C:\Users\win7\AppData\Local\Temp\nsc3058.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\8G8UYRVM.txt

C:\Program Files\Chameleon Clock\Sounds\Clocks\clock04.wav

C:\Windows\GeoOCX\WebCam

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu

C:\Users\win7\AppData\Local\Temp\DIQ\test-av13490_004\routes.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PhotoBasicPackage~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\formula6.html

C:\WINDOWS\FONTS\CONSOLAZ.TTF

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager\Uninstall IDM.lnk

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~cs-CZ~7.1.7601.16492.cat

C:\Users\win7\AppData\Roaming\KLEThjJwJFKr\4917.xml

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\6A97463M.txt

C:\Users\win7\Documents\My Videos\desktop.ini

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\VCC3.ini

\\.\COM201

LegitCheckControl.DLL

C:\Users\win7\AppData\Local\Temp\nsv7A59.tmp\nsArray.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nseBF64.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\Img1.png

C:\Windows\GeoOCX\WebCam\20090916\GeoCodecReg\GeoCodec_ReadOnly.dll

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\acsint.inf

C:\Users\win7\AppData\Local\Temp\crontab\crontab.log

C:\Users\win7\AppData\Local\Temp\nsn2607.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\All\965m.inf

C:\Users\win7\AppData\Local\Google

C:\Users\win7\AppData\Local\Temp\GUM4330.tmp\goopdateres_ru.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~lv-LV~7.1.7601.16492.cat

\\.\Kbd

C:\Users\win7\AppData\Local\Temp\nsy7C6F.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsx16D5.tmp\nsr2FCF.tmp

puzzle.pzl

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\kxBArVzWJrYn.lnk\desktop.ini

C:/Windows/system32/wshom.ocx

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

C:\Users\win7\AppData\Local\Temp\nsm6C24.tmp\NSISdl.dll

\\.\pipe\3806ea06455358ae64

C:\Users\win7\Documents\MSDCSC\desktop.ini

C:\Settings\ADLSearch.xml

C:\Users\win7\AppData\Local\Temp\nsx30D4.tmp

C:\Users\win7\AppData\Local\Temp\nsjB638.tmp

C:\Users\win7\AppData\Local\Temp\nsr6C43.tmp\\915532859

__tmp_rar_sfx_access_check_1031843

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\Bkg.bmp

C:\Users\win7\AppData\Local\Temp\pftD7AF~tmp\Disk1\ikernel.ex_

\\.\COM73

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\copy14.html

C:\ProgramData\GlobalSCAPE\CuteFTP\sm.dat

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\copy3.html

c:\windows\scripten_i.log

C:\Users\win7\AppData\Local\Temp\12auf94d4\nsis_skin.gt

C:\Windows\GeoOCX\WebCam\20090916\GeoCodecReg\GXAMP4.dll

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\asl-btn-big-support-83x28x2.gif

\\.\PIPE\samr

Temp/installtemped

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\res\status_ico_trusted.png

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Geovision_VISCA.ini

C:\Windows\system32\kibi\buq\caig.dat

\\.\Scsi9:

32788R22FWJFW\Rkey.cmd

C:\Users\win7\AppData\Local\Temp\nsi1A20.tmp\1098075203

C:\Users\win7\AppData\Local\Temp\nsq1F21.tmp

C:\Users\win7\AppData\Local\Temp\nsgC3AA.tmp\978525460

C:\Users\win7\AppData\Local\Temp\Creative_ALchemy_AL6_Cleanup.0001.dir.0000\~df394b.tmp

\\.\X:

\\.\COM3

C:\Users\win7\AppData\Local\Temp\nsq7720.tmp\558552086

c:\Program Files\FontLab\FontLab\FLCompo.cnt

c:\OkiDriver\OKIB2200B2400\opjobinf.dll

C:\Users\win7\AppData\Local\Temp\nswD479.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\f2cc559679c8d17d7bf9c117baf6aa0a\BitAcceleratorDDLRinstaller.exe

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~11.2.9412.0.cat

C:\Users\win7\AppData\Local\Temp\nsnBEC5.tmp\nsWeb.dll

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\index.swf

C:\Users\win7\AppData\Local\Temp\nso8AB8.tmp\494401783

C:\Users\win7\AppData\Local\Temp\9c2704c22ceab0ebc352c74d631e8669\pricepeep.exe

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM88.tmp

C:\Windows\system32\CFVS_HookDll.pdb

\\.\SuperBPMDev0

C:\Users\win7\AppData\Local\Temp\ffb9bc25e938db9aa79cfac8ccf48c15\BitAcceleratorDDLRinstaller.exe

C:\Data\Scripts\Gui\PageSplashAlienware.gui

C:\Users\win7\Documents\splash.ini

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Personalization-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Indexing-Service-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\Microsoft.VC90.CRT\msvcm90.dll

C:\Users\win7\AppData\Local\Temp\nsa29F9.tmp\NSISdl.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZDown.bmp

C:\Windows\System32\WScript.exe

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\dirapi.dll

C:\Users\win7\AppData\Local\Temp\nsn5530.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\extreme[1].htm

C:\Users\win7\AppData\Local\Temp\DIQ\test-av6941_004\routes.dll

C:\Users\win7\AppData\Local\Temp\nsfF539.tmp\System.dll

C:\Users\win7\Desktop\20141204163206964.pdf

C:\Users\win7\AppData\Local\Temp\nsd8A78.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsg201B.tmp\NSISdl.dll

C:\Windows\GeoOCX\WebCam\20090916\libeay32.dll

ascbalon.dll

C:\Settings\Queue.xml.tmp

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp

C:\Users\win7\AppData\Local\Temp\nsc6DB9.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\KLEThjJwJFKr

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\formula3.html

C:\Users\win7\AppData\Local\Temp\nsa2A47.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\d06fcbb59363a1adb6768ef5c595d7c2\BitAcceleratorDDLRinstaller.exe

C:\Windows\SysWOW64\atl.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DB87D2AB058205E5452E4516D5631B

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\acsint.sys

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM66.tmp

C:\Users\win7\AppData\Local\Temp\nsy7192.tmp\427833926

C:\Users\win7\AppData\Local\Temp\013c8edc16128c116f00beee1fe56d21\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Local\Temp\nse2972.tmp\nsArray.dll

32788R22FWJFW\VInfo

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\asl-btn-big-about-83x28x2.gif

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\MFC71.dll

C:\Users\win7\Desktop\exe\DVRArchiveViewer.pdb

C:\Users\win7\AppData\Local\Temp\nsc230A.tmp\NSISdl.dll

\\.\PhysicalDrive5

C:\sample.01

C:\Users\win7\AppData\Roaming\ALEThjJwJ\8495.xml

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZFIn.bmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager\TUTORIALS.lnk

c:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\tipresx.dll.mui

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\skin\LightStripes.gt

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\res\transition_1.ico

C:\Windows\dll\Microsoft.VisualBasic.pdb

__tmp_rar_sfx_access_check_1542000

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\DynaHawk_Zh701.ini

C:\Users\win7\AppData\Local\Temp\nsg206A.tmp\skinh.she

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\img-main-800x572.gif

C:\Users\win7\AppData\Roaming\mLEThjJw\4140.xml

C:\Windows\GeoOCX\WebCam\20090916\GeoCodecReg\GeoCodec.dll

C:\Users\win7\AppData\Local\Temp\nsd1917.tmp\north.exe

\\.\COM2

C:\Windows\symbols\exe\DVRArchiveViewer.pdb

C:\Users\win7\AppData\Local\Temp\12auf94d4\appdata\\{3E9C7A5B-D249-4C28-A451-53E1024AD354}

C:\Users\win7\AppData\Local\Temp\nsd70C7.tmp\\1195322159

OLEAUT3N.DLL

C:\Users\win7\AppData\Local\SharedSettings.ccs

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\formula1.html

\\.\COM177

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\ST\img\common\win_edge_bottom.png

C:\Windows\System32\DriverStore\en-US\ntprint.inf_loc

C:\Users\win7\AppData\Local\Temp\nsa2C60.tmp\NSISdl.dll

C:\Windows\DVRArchiveViewer.pdb

C:\Users\win7\AppData\Local\Temp\nsj77A8.tmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_15.bmp

\\.\COM247

C:\Users\win7\AppData\Local\Temp\nsq1DA6.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\asl-btn-big-join-83x28x2.gif

C:\Users\win7\AppData\Local\Temp\nsr84BC.tmp

C:\Windows\inf\oem3.inf

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\5POET2SJ.txt

C:\Users\win7\AppData\Local\SharedSettings.sqlite

C:\Users\win7\AppData\Local\Temp\IPMx2\All\945GM.inf

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\KamKo.ini

Avira Registry Cleaner\MFC71.dll

\\.\COM49

C:\Data\Scripts\Gui\PageSplashFirst.gui

C:\Users\win7\AppData\Local\Tempfolder\ortmp\sqlite3.dll

\\.\COM171

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\4EGCHNX4.txt

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager\IDM Help.lnk

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich9ide.inf

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\beepdl.dll

C:\Users\win7\Favorites\desktop.ini

C:\Users\win7\AppData\Local\Temp\nsc30F3.tmp

C:\Windows\system32\osuj\rak\narl.dat

C:\Users\win7\AppData\Local\Temp\nsz1B24.tmp

C:\Users\win7\AppData\Local\Temp\nsh2D48.tmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\background[1]

C:\Windows\Imagination Studio.exe

C:\Windows\system32\~GLH0008.TMP

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\Infobar\image\infobar_offlineurl.png

\\.\COM110

C:\Users\win7\AppData\Local\Temp\nsmC422.tmp\SimpleSC.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\ELBEX.ini

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\acsock.cat

C:\Windows\msvcrt.dll

C:\Users\win7\AppData\Local\Temp\GLJ749F.tmp

C:\Windows\GeoOCX\WebCam\20090916\GvClient_8200.ocx

32788R22FWJFW\dd.cfxxe

C:\Windows\system32\Oleaut32.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-EnterpriseNEdition-wrapper~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nso8A69.tmp

C:\Users\win7\AppData\Local\Temp\ab5d4243cc93ed6bbca90dd95ca61177\DirectDownloaderInstaller.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Related Programs\Video Streaming Server.lnk

C:\ProgramData\CuteFTP\sm.dat

C:\Windows\system32\dll\CFVS_HookDll.pdb

C:\Users\win7\AppData\Local\Tempfolder\DoltuJonisep\MufjCucgi.exe

C:\Users\win7\AppData\Local\Temp\nst71C0.tmp

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\MouseGesture.dll

C:\Users\win7\AppData\Local\Temp\nsv2B08.tmp

C:\Users\win7\AppData\Local\Temp\DIQ\flashplayer_154\routes.dll

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\BBD\img\common\win_edge_top_msk.png

\\?\C:\Windows\system32\Macromed\Flash\mms.cfg

C:\Users\win7\AppData\Local\Temp\Creative_ALchemy_AL6_Cleanup.0001

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\TYQ8F4Q6.txt

C:\ProgramData\BrouwsEe2save

C:\Users\win7\AppData\Local\Temp\nss559E.tmp\System.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CodecPack-Basic-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\rar.ini

C:\Windows\system32\jaks\xaa\meei.dat

C:\Users\win7\AppData\Local\Temp\nsg2D1B.tmp

C:\Users\win7\AppData\Local\Temp\nsn7A19.tmp\853323409

\\.\COM221

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\KZC.ini

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsp8601.tmp\SimpleSC.dll

\\.\COM36

C:\Windows\system32\RICHTX32.OCX

C:\Windows\olepro32.dll

C:\Windows\symbols\dll\Microsoft.VisualBasic.pdb

C:\Users\win7\AppData\Local\GHISLER\wcx_ftp.ini

C:\Users\win7\AppData\Local\Temp\is-36CJS.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\gb\alerter.country

C:\Users\win7\AppData\Local\Temp\nsg6866.tmp\NSISdl.dll

C:\Windows\ascbalon.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Pishion 22X.ini

C:\Windows\INF\ntprint.inf

C:\Users\win7\AppData\Local\Temp\nsl4DF3.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\\~DFBBC422E467B290EE.TMP

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Express Dictate Recorder.lnk

C:/Windows/system32/MSCMCJP.DLL

C:\Users\win7\AppData\Local\Temp\nsq4F84.tmp\7za.exe

C:\Windows\system32\RICHED32.DLL

C:\Users\win7\AppData\Local\Temp\7zSB2EF.tmp\dpbejmkogknnkjbfcacgbckomaofefka\lsdb.js

C:\Windows\GeoOCX\WebCam\20090916\GeoCodecReg\GM20.inf

\\.\Z:

C:\Users\win7\AppData\Local\Temp\325f6ef1eb345d57019b1a43de33cbb2\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\hpcdeopkgienceaajfkaohfhnacpfamh

C:\Users\win7\AppData\Local\Temp\nsg6B67.tmp

C:\Windows\system32\STDOLE2.TLB

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\acsmux.sys

C:\WINDOWS\FONTS\ARIAL.TTF

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\3BOL5VFW.txt

C:\Users\win7\AppData\Local\Temp\nsr7CAA.tmp

C:\Windows\GeoOCX\WebCam\20090916\GeoCodecReg\GMP4.inf

\\.\COM184

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM49.tmp

C:\Users\win7\AppData\Local\Temp\nsrD5FC.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsq370A.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nsoE348.tmp\21.tmp

\\.\COM23

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich9usb.inf

C:\Users\win7\AppData\Local\FlashFXP\4\Sites.dat

C:\Users\win7\AppData\Local\Temp\c634e7f446ed0baaaffb97e9c00223b7\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsc2FBC.tmp\SimpleSC.dll

C:\Rar.txt

C:\WINDOWS\FONTS\SEGOEUI.TTF

\\.\COM234

\\.\COM227

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BC2602F5489CFE3E69F81C6328A4C17C_849A9AE095E451B9FFDF6A58F3A98E26

C:\image\baritem_pause.png

32788R22FWJFW\NT-OS.cmd

C:\Data\Scripts\Gui\PageCreateMission.gui

C:\Windows\MSVBVM60.DLL

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\copy9.html

C:\Users\win7\AppData\Local\Temp\7zS7BFD.tmp\pnadleldkhfpclgofgnnmhblfcamfhfa\515f05ca0be412.41361429.js

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnadleldkhfpclgofgnnmhblfcamfhfa\1\manifest.json

c:\users\win7\appdata\local\tempfolder\zicichhli\aquxrdae.dat

\\.\COM197

C:\Windows\MSSTDFMT.DLL

C:\Users\win7\AppData\Local\Temp\nsu717E.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsc30F4.tmp\SimpleSC.dll

C:\Windows\inf\oem4.PNF

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\extreme[1].htm

C:\Users\win7\AppData\Local\Temp\~GLH0002.TMP

C:\Users\win7\AppData\Local\Temp\DIQ\Player_151\OfferBrokerage_14003.exe

C:\Users\win7\AppData\Local\Temp\nsc94BA.tmp\\1067021553

C:\Users\win7\AppData\Local\Temp\nsd594F.tmp\cmd.xml

C:\Users\win7\AppData\Local\Temp\aut54E8.tmp

C:\Users\win7\AppData\Local\Temp\is-3IOQ3.tmp\_isetup\_RegDLL.tmp

C:\WinRAR.exe

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-NetFx3-OC-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM91.tmp

C:\Users\win7\AppData\Local\Temp\\~DF6B382F0FE4BB6EB5.TMP

C:\Users\win7\AppData\Roaming\Microsoft\Blend\14.0\FeedCache\xpsrchw.exe

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\BBD\img\common\bt_close_default.jpg

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_No7.bmp

C:\Users\win7\AppData\Local\Temp\nswAEA7.tmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\utils[1].js

\\.\COM72

C:\Users\win7\AppData\Local\Temp\nstDAFD.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\EventTracing.dll

C:\Users\win7\AppData\Local\Temp\GUM4330.tmp\npDuuquUpdate3.dll

32788R22FWJFW\DelClsid.bat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Refresh-LanguagePack-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\12aubfff5\appdata\\thumb\http___browser.qq.com_new_wechat1.0.html_type=1.jpg

C:\Users\win7\AppData\Local\Temp\Report.ico

C:\Users\win7\AppData\Local\Temp\nsu25A0.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\Microsoft\Internet Explorer

C:\Windows\STDOLE2.TLB

C:\Windows\ASLOC.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-LocalPack-GB-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\System32\Wbem\symbols\exe\DVRArchiveViewer.pdb

C:\jenkins\workspace\cfvs-CamasHookDll-Devel\Dynamic\CAMAS\CamasNative\CFVS_HookDll\Release\CFVS_HookDll.pdb

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Help-CoreClientUAPSN-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

\\.\COM206

C:\Users\win7\AppData\Local\Temp\5a6e0d7e7fb82588b081b16c0bd88029\BitAcceleratorDDLRinstaller.exe

\\.\COM130

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\e[2].gif

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipBand.dll.mui

C:\Users\win7\Desktop\symbols\exe\DVRArchiveViewer.pdb

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\ext[1].js

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad.xml

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Semsonmatic.ini

C:\Windows\GeoOCX\WebCam\20090916\PTZ\VISCA.dll

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\_isetup\_shfoldr.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\SonySNC_P5.ini

C:\ProgramData\FileZilla\recentservers.xml

C:\Windows\System32\Wbem\dll\wkernel32.pdb

C:\Users\win7\AppData\Local\Temp\z748.xml

smi2txt_error.log

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_No4.bmp

C:\Users\win7\AppData\Local\Temp\nstDAFD.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsk377C.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\f2da611710f7fa687bb7d99d2b938369\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Local\Temp\t1cc01b.exe

C:\Users\win7\AppData\Local\Temp\nssAF17.tmp

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\asl-sysbuttons-16x14x4.gif

C:\Windows\System32\notepad.exe

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\7Y2UKU8B.txt

C:\WINDOWS\FONTS\WINGDING.TTF

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Help-CoreClientUAUEN-Package-Lang~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\N8528SDE.txt

C:\Data\Textures\Gui\MPlrTeamStatsBack2.dds

32788R22FWJFW\files.pif

C:\Users\win7\AppData\Local\Temp\nsw7C7C.tmp\nsArray.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\Y037OOKE.txt

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EB2C4AB8B68FFA4B7733A9139239A396_AD876BD6070522D4EE8560FE72EBB41A

C:\Users\All Users

C:\Users\win7\AppData\Local\Temp\is-2PQ60.tmp\_isetup\_setup64.tmp

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\introduction.html

32788R22FWJFW\ERDNTDOS.LOC

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\mobi[1].js

Rar.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\GWP6ISIP.txt

C:\Users\win7\AppData\Local\Temp\nsn251C.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Backup-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Data\Textures\Gui\CreateMission_Save_04.dds

C:\ZapImages\asl-icn-mini-games-32x32x2.gif

C:\Users\win7\AppData\Local\Temp\pft3E71.tmp\setup.inx

C:\Users\win7\AppData\Local\Temp\nsd8D93.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\is-C85U7.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\errorPageStrings[1]

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM53.tmp

C:\Windows\system32\whg\lyr\ohaem.dat

C:\Windows\system32\dll\wntdll.pdb

C:\Users\win7\AppData\Local\Temp\is-36CJS.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\nsgBB49.tmp\modern-header.bmp

C:\Windows\system32\691062.tmp

C:\Users\win7\AppData\Local\Temp\nsvB61D.tmp\nsArray.dll

\\.\COM10

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\JVC_TK.ini

C:\Users\win7\AppData\Local\Temp\nsz8FE5.tmp\105175608

C:\Users\win7\AppData\Local\Temp\nsq7C0E.tmp\SimpleSC.dll

C:/Windows/system32/CMCTLJP.DLL

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\dm_bar_right[1]

C:\Users\win7\AppData\Local\Temp\IXP000.TMP\B.ex_

C:\Users\win7\AppData\Local\Temp\nsy8247.tmp

C:\Users\win7\AppData\Local\Temp\nsz31D4.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\E64T6U1O.txt

c:\download\driver\12950\SoftwareDriver\Driver\CMxPCI3.INF

C:\Users\win7\AppData\Local\Temp\nsp78B2.tmp

C:\Users\win7\AppData\Local\Temp\nse4E01.tmp

C:\WINDOWS\FONTS\ANGSAB.TTF

C:\Users\win7\AppData\Local\Temp\DIQ\test-av6941_004\DomaIQ.exe

RICHTX32.OCX

\\.\IDMWFP

C:\sample.msg

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\KR4G5JT8.txt

C:\Users\win7\AppData\Local\Temp\nsk1DCA.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\ELVU302C.txt

C:\Users\win7\AppData\Local\Temp\000a3a58.a

C:\Users\win7\AppData\Local\Temp\nsz70B2.tmp

C:\Users\win7\AppData\Local\Temp\nsc7B08.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsnB3E7.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\\~DF28484836B65F8E27.TMP

c:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\67F6625BC22310D5C99DDE12020DBD90

C:\Users\win7\AppData\Local\Temp\nsq7BC0.tmp\NSISdl.dll

c:\Users\win7\AppData\Local\Temp\sfx1\tex_def.jpg

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~pt-PT~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsrD5FC.tmp\234055065

C:\Windows\system32\ascIP95.DLL

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\skin\LightStripes.gt

C:/Windows/system32/COMDLG32.OCX

C:\Users\win7\AppData\Local\Temp\nsjF08F.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\DIQ\test-av6941_004\config.dll

C:\Users\win7\AppData\Local\Temp\nso71A2.tmp\nsArray.dll

C:\image\barbutton_middle.png

C:\Users\win7\Saved Games\desktop.ini

\\.\Scsi13:

C:\Windows\System32\WindowsPowerShell\v1.0\dll\CFVS_HookDll.pdb

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\ACTi_IPCam.ini

C:\Users\win7\AppData\Local\Temp\7zS7336.tmp\lkniaejinldagieikdjacfpfchffkhhi\sqlite.js

C:\Windows\system32\kee\luma\sokb.dat

C:\Users\win7\AppData\Roaming\XLEThjJwJF

C:\\image\baritem_pause.png

C:\Users\win7\AppData\Local\Temp\nsg7C6C.tmp\381900402

\\.\COM136

\\.\COM164

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\reset[1].css

\\.\COM129

C:\32788R22FWJFW\n.pif

C:\Windows\GeoOCX\WebCam\20090916

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\GO20KNQT.txt

C:\symbols\dll\wkernel32.pdb

C:\Users\win7\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3979321414-2393373014-2172761192-1000\58b8aea4ae7184a912187a66498d9b0c_c4b6765a-c53d-4b48-b576-0e1db4e9f3bc

C:\Users\win7\AppData\Local\Temp\nstC967.tmp\\269705472

C:\Users\win7\AppData\Local\Temp\nsi3C49.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\resume[1]

C:\32788R22FWJFW\P.cmd

C:\Users\win7\AppData\Local\Temp\nsm16E4.tmp\7za.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Video Capture Software.lnk

\\.\COM8

\\.\COM78

C:\Users\win7\AppData\Local\Temp\nsf825A.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsc23A5.tmp

C:\Users\win7\AppData\Local\Temp\nsv2D2A.tmp\moperDOCIM_eng.ini

C:\Users\win7\AppData\Local\Temp\7zS77D6.tmp\hpcdeopkgienceaajfkaohfhnacpfamh\sqlite.js

\\.\P:

C:\ProgramData\sample.rbt

C:\Windows\GeoOCX\WebCam\20090916\MiniDump.dll

C:\Users\win7\AppData\Local\Temp\nsh2027.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Tempfolder\ortmp\libplc4.dll

C:\Users\win7\AppData\Local\Temp\Tar9E6D.tmp

\\.\COM123

C:/Windows/system32/MSCOMCTL.OCX

C:\Users\win7\AppData\Local\Temp\nst1B96.tmp

C:\Users\win7\AppData\Local\Temp\nsg1DB6.tmp\nsArray.dll

32788R22FWJFW\RegDo.sed

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\828298824EA5549947C17DDABF6871F5_D1BCEE7E304F0D5FB8AA811D9B2D0835

C:/Windows/system32/shfolder.dll

C:\Users\win7\AppData\Local\Temp\nsrACF5.tmp\SimpleSC.dll

Avira Registry Cleaner\README.TXT

C:\ProgramData\CoffeeCup Software\SharedSettings_1_0_5.sqlite

\\.\F:

\\.\COM43

C:\Users\win7\AppData\Local\Temp\nsf5072.tmp

C:\Users\win7\AppData\Local\Temp\nsy2694.tmp\\1127153949

/ctags.cnf

C:\Windows\GeoOCX\WebCam\20090916\GeoCodecReg\GeoImageEnhance.xml

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\07CO8OBD.txt

Formats\bz2.fmt

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\DomeName.ini

C:\Users\win7\AppData\Local\Temp\4d817503ee65560a8dcdb650fa6add61\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Local\Temp\temp.lnk

C:\Users\win7\AppData\Local\Temp\nsf79FB.tmp\NSISdl.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\HiSharp PelcoD.ini

C:\Users\win7\AppData\Local\Temp\nsp8112.tmp

wkernelbase.pdb

C:\Users\win7\AppData\Local\Temp\nsb4835.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\Elite_Xl2k\GCXL6161.PPD

\\.\COM169

C:\Users\win7\AppData\Local\Temp\f2da611710f7fa687bb7d99d2b938369\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\pause[1]

C:\Users\win7\AppData\Local\Temp\nsdC908.tmp

C:\Users\win7\AppData\Local\Temp\nsz73B5.tmp\nsArray.dll

\\.\COM242

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\SonySNC_RX570.ini

C:\Users\win7\AppData\Local\Temp\pftD7AF~tmp\Disk1\data1.hdr

C:\Windows\TABCTL32.OCX

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\PrScrn.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\HP9XG5DE.txt

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\Resource.dll

C:\Users\win7\AppData\Local\Temp\nsc9F98.tmp\150530281

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\service\PerfTraceService.exe

C:\Users\win7\AppData\Local\Temp\9b30ab17762cfe32075060c38291a895\volcano.exe

C:\Users\win7\AppData\Local\Temp\nst8360.tmp

C:\Users\win7\AppData\Roaming

C:\Users\win7\AppData\Local\Temp\\~DF912131F89FBEC97E.TMP

MSVCRTD.DLL

C:\ProgramData\BBroowsee2save\515f52b8125e4.tlb

\\.\COM31

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\TOA.dll

C:\Users\win7\AppData\Local\Temp\nss6FEC.tmp\NSISdl.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_10.bmp

c:\Program Files\Alexa Booster v3.2\Proxy\dedicated_sites.dat

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\Skin.ini

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM82.tmp

C:\Windows\system32\juqo\wih\revl.dat

C:\Users\win7\AppData\Local\Temp\nsl1DD4.tmp

C:\Users\win7\AppData\Local\Temp\12aubfff5\nsis_skin.gt

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\error_icon[1]

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\acsint64.inf

\\.\COM44

C:\Windows\system32\~GLH000d.TMP

C:\Users\win7\AppData\Local\Temp\nsg2C80.tmp\489770976

c:\download\driver\12950\SoftwareDriver\Driver\UDAPROP3.DLL

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager\IDM Help.lnk

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\copy10.html

C:\ntdetect.com

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZHome.bmp

C:\Users\win7\AppData\Roaming\DUOghDDY

C:\Users\win7\AppData\Local\Temp\nsn593E.tmp

\\.\COM157

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\BULSS9KP.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\5HMT0074.txt

C:/Windows/system32/shlwapi.dll

c:\OkiDriver\OKIB2200B2400\OPB2400.dat

C:\Windows\system32\bova\kye\teji.dat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

\\.\COM255

32788R22FWJFW\run2.sed

__tmp_rar_sfx_access_check_754828

C:\Windows\GeoOCX\WebCam\20090916\PTZStick.dll

\\.\COM102

C:\Users\win7\AppData\Local\Temp\nsm2F5E.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsv2C41.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsqC34B.tmp

C:\Users\win7\AppData\Local\FlashFXP\3\Quick.dat

C:\Users\win7\AppData\Local\Temp\nsl4486.tmp

C:\Users\win7\AppData\Local\Temp\nsp799D.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\Set7B32.tmp

C:\Users\win7\AppData\Local\Temp\nsfEA73.tmp\nsArray.dll

C:\WINDOWS\FONTS\TIMESBD.TTF

C:\exe\DVRArchiveViewer.pdb

C:\Users\win7\AppData\Local\Temp\nsg83E1.tmp

\\.\COM98

C:\Windows\system32\fyb\xegk\wajm.dat

C:\Users\win7\AppData\Local\Temp\nso71A2.tmp\NSISdl.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\DongYang.ini

C:\Users\win7\AppData\Local\Temp\nssAD44.tmp\\121723934

C:\ProgramData\BBroowsee2save\uninstall.exe

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions

\\.\COM52

C:\WINDOWS\FONTS\TAHOMA.TTF

C:\Users\win7\AppData\Local\Temp\f2cc559679c8d17d7bf9c117baf6aa0a\pricepeep.exe

C:\Users\win7\AppData\Local\Temp\\~DF6C75C582383C95DD.TMP

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\RCS9XLWO.txt

VjxjVBc.exe

C:\Users\win7\AppData\Roaming\HLEThjJwJF

C:\Users\win7\Desktop\DVRArchiveViewer.pdb

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~el-GR~7.1.7601.16492.cat

32788R22FWJFW\image001.gif

\\.\COM92

C:\Users\win7\Favorites\NCH Software Download Site.lnk

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BC2602F5489CFE3E69F81C6328A4C17C_849A9AE095E451B9FFDF6A58F3A98E26

C:\Users\win7\AppData\Local\Temp\7zS77D6.tmp\hpcdeopkgienceaajfkaohfhnacpfamh

C:\Users\win7\AppData\Local\Temp\65CD657CFC419117.TMP

\??\C:\Windows\system32\twext.dll

C:\Users\win7\AppData\Local\Temp\ci0-temp\uninstall.bmp

\\?\C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\OGGB4BWP\localhost\sample\SW3_197042.sol

\\.\W:

C:\Users\win7\AppData\Local\Temp\nsc3142.tmp\SimpleSC.dll

ciplListBar3N.ocx

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IE-Spelling-Package-English~31bf3856ad364e35~amd64~~6.3.9412.0.cat

C:\Users\win7\AppData\Local\Temp\\~DFB77520E5931B8BFB.TMP

C:\Windows\system32\spool\DRIVERS\x64\3\STDSCHEM.GDL

C:\Windows\system32\doox\aeu\vhbi.dat

Default.lst

\\.\COM69

C:\Users\win7\AppData\Local\Temp\\~DFE384BE79BD2D6F20.TMP

C:\Users\win7\AppData\Local\Temp\nseBF64.tmp\390787467

C:\Users\win7\Documents\My Pictures\desktop.ini

C:\Users\win7\AppData\Local\Tempfolder\DoltuJonisep\smime3.dll

C:\Users\win7\AppData\Local\Temp\nsx6F21.tmp\760571060

c:\download\driver\12950\Program\CmeAuVist64.exe

\\.\COM149

C:\Users\win7\AppData\Local\Temp\RarSFX0\quuGhrj.exe

C:\Users\win7\AppData\Local\Temp\nsk1BB2.tmp\118216779

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RWJrYnjUOg.lnk\desktop.ini

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\H3J8CMLL.txt

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_No1.bmp

C:\Users\win7\AppData\Local\Temp\nsk86CC.tmp\891391371

C:\Users\win7\AppData\Local\Temp\ac85e0056038215dc4e484ecc5b69fbe\BitAcceleratorDDLRinstaller.exe

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipTsf.dll.mui

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\webctrl.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\resume[1]

C:\Users\win7\AppData\Local\Temp\\~DF452F27A5AD537304.TMP

C:\Users\win7\AppData\Local\Temp\nsq1D0A.tmp\SimpleSC.dll

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\outsidein.jpg

\\.\COM103

\??\C:\Windows\system32\NetworkExplorer.dll

C:\Users\win7\AppData\Local\Temp\nsh86A0.tmp\NSISdl.dll

25.tmp

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_ca.xml

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\app[1].js

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZ_BK_enable.bmp

C:\Users\win7\AppData\Local\Temp\nsuB310.tmp\NSISdl.dll

C:\ZapImages\asl-icn-mini-about-32x32x2.gif

C:\Users\win7\AppData\Local\Temp\64b86246e9aa3fa79b9535db49b20b8d\pricepeep.exe

\\.\K:

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\ST\img\common\win_bottom_right_msk.png

C:\Users\win7\AppData\Local\Temp\nst1B49.tmp\935077591

C:\Users\win7\AppData\Local\Temp\nsv2B12.tmp

C:\Users\win7\AppData\Local\FileZilla\sitemanager.xml

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\acsock64.sys

C:\Windows\Fonts\staticcache.dat

C:\WINDOWS\FONTS\SIMSUN.TTC

C:\Users\win7\AppData\Local\Temp\004cf069.a

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~en-GB~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsd7162.tmp

\\.\I:

32788R22FWJFW

C:\sample.fav

C:\Users\win7\AppData\Local\Temp\nsiB060.tmp\\469409043

C:\Users\win7\AppData\Local\Temp\is-280BG.tmp\_isetup\_shfoldr.dll

C:\Windows\GeoOCX\WebCam\20090916\GeoCodecReg\GeoADPCM.acm

C:\Users\win7\AppData\Local\Temp\nsa2AD9.tmp

C:\Users\win7\AppData\Local\Temp\nsw6B78.tmp\nsArray.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~ro-RO~7.1.7601.16492.cat

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\ST\img\common\win_top_right_msk.png

matong.dat

C:\Windows\system32\OLEAUT3N.DLL

C:\Users\win7\AppData\Roaming\ExpanDrive\drives.js

C:\Users\win7\AppData\Local\Temp\is-VLONM.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\GUM4330.tmp\psuser.dll

C:\Users\win7\AppData\Local\Temp\nss80A2.tmp\\841337790

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BrouwsEe2save\Uninstall.lnk

c:\monkey.py

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\Infobar\inforBar.html

C:\Users\win7\AppData\Local\Temp\nsfD7E9.tmp\169530211

C:\Users\win7\AppData\Local\Temp\nsn94AA.tmp

c:\users\win7\appdata\local\tempfolder\mihkoobinza\jahlogivfepu.dat

C:\Users\win7\AppData\Local\Temp\nse2888.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\\~DF8A255E8E04466F9F.TMP

C:\Users\win7\AppData\Local\Temp\8353107b4a7ee1912afdcc36da509643\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\BitTorrent.lnk

C:\Users\win7\AppData\Local\Temp\nsv1C3F.tmp\NSISdl.dll

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\section7.html

C:\Users\win7\AppData\Local\Temp\nsc96E9.tmp

C:\Users\win7\AppData\Local\Temp\7zSB2EF.tmp

C:\Windows\GeoOCX

C:\Users\win7\AppData\Local\Temp\nsg6E82.tmp\570537705

\\.\COM77

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\BBD\img\common\win_edge_left.png

C:\Users\win7\AppData\Local\Temp\nst7124.tmp

C:\Users\win7\AppData\Local\Temp\nsw7C7C.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsq7C0D.tmp

\\.\COM219

C:\Python27\Scripts\DVRArchiveViewer.pdb

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\Infobar\image\infobar_close_active.png

C:\Settings\DCPlusPlus.xml.tmp

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EB2C4AB8B68FFA4B7733A9139239A396_D76DB901EE986B889F30D8CC06229E2D

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\FRTJ2TAQ.txt

\\.\COM30

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\QBUtils.dll

c:\Program Files\Alexa Booster v3.2\Skins\step1.jpg

\\.\COM191

C:\Users\win7\AppData\Local\Temp\nsr2F2F.tmp\\315094195

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main.xml

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM6.tmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZIRISout.bmp

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\res\minimize.png

\\.\VGSCDAPI.VXD

C:\Users\win7\AppData\Local\Temp\DIQ\test-av46804_004\DomaIQ.exe

C:\sample.00

C:\Program Files\Motion-Twin\haxe\lib/std/.dev

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\section2.html

C:\Users\Public\Documents\My Videos\desktop.ini

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\YA2NHNK3.txt

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\ST\img\common\win_edge_left.png

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjhklgikohjiaahlibnfgegobedhpgmf\1\manifest.json

C:\Windows\system32\mahg\bhca\epi.dat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~zh-TW~7.1.7601.16492.cat

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\BBD\img\common\win_top_right_msk.png

C:\Windows\ASYCFILT.DLL

C:\Users\win7\AppData\Local\Temp\nsv8354.tmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZLeft.bmp

C:\Users\win7\AppData\Local\Temp\DIQ\test-av13688_004\DomaIQ.exe

C:\Windows\GeoOCX\WebCam\20090916\GvCodecLib.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\QF9KU4G1.txt

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\leftDown.bmp

C:\Data\Scripts\Gui\OptionsControls.gui

C:\Users\win7\AppData\Local\Temp\nsn6FCD.tmp\\1143838476

32788R22FWJFW\ERUNT.LOC

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\mixandmatch.html

C:\PROGRA~2\WMACON~1\wma-share2.exe

C:\Users\win7\AppData\Local\Temp\nsg206A.tmp\modern-header.bmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-BusinessScanning-Feature-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

wmaudioredist.exe

C:\Users\win7\AppData\Local\Temp\nso72D9.tmp

C:\Users\Public\Documents\My Music\desktop.ini

C:\tmp.exe

C:\Users\win7\AppData\Local\Temp\\~DF85FB992E336DBEB1.TMP

C:\Users\win7\AppData\Local\Temp\004cf347.a

\\?\C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\OGGB4BWP\localhost\sample\SW3_197042.sxx

C:\Users\win7\AppData\Local\Temp\is-N1BG4.tmp\sample.tmp

C:\Python27\wntdll.pdb

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Common-Drivers-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\\image\baritem_delete.png

C:\Users\win7\AppData\Local\Temp\7zS7336.tmp\515f52b8125e4.dll

c:\download\driver\12950\SoftwareDriver\Driver\CMiDS3D3.DLL

C:\Users\win7\AppData\Local\Temp\nsb204B.tmp\722400949

C:\Python27\Scripts\dll\wntdll.pdb

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\UB0FM1VY.txt

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\CommonAppDataFolder\Cisco\Cisco AnyConnect Secure Mobility Client\update.txt

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\connecting_icon[1]

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\Infobar\image\icon.png

C:\Users\win7\AppData\Local\Temp\nsf1CCB.tmp\838647836

C:\Users\win7\AppData\Local\Temp\nsaE650.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich9id2.inf

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZReadIni.dll

C:\Users\win7\AppData\Local\Temp\nst2675.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsz2869.tmp\NSISdl.dll

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\res\gradient.png

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\jquery[1].js

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\section4.html

C:\wkernelbase.pdb

\\.\COM192

C:\Users\win7\AppData\Local\Temp\nsh6CEF.tmp\1008523559

C:\ZapImages\asl-btn-big-join-83x28x2.gif

C:\Users\Default User

C:\drivers\modem\setup.exe

C:\Users\win7\AppData\Local\Temp\nsb2D4B.tmp\nsWeb.dll

\\.\COM254

C:\WinRAR.hlp

C:\Users\win7\AppData\Local\Temp\nsg206A.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\ef9f727098f02eb359d2c1dac93f30ee\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsy7596.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nspA63F.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Tempfolder\ortmp\ssl3.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Gadget-Platform-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

\\.\COM99

C:\Users\win7\AppData\Local\Temp\12aubfff5\appdata\\{CAA4306F-826C-4c1b-8FC6-571F84949DB4}

C:\Users\win7\AppData\Local\Temp\nsb2DE7.tmp\NSISdl.dll

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\res\status_ico_attention.png

C:\Users\win7\AppData\Local\Temp\{33A25180-3328-4EB4-9337-9DA72FD0395B}\1033.MST

C:\Users\win7\AppData\Local\Temp\nsm2FAC.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsa73C0.tmp\SimpleSC.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\Large_switch.bmp

C:\Users\win7\AppData\Local\Temp\nskB7C0.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\7zS55DB.tmp\515f05c5b9edb.tlb

C:\Windows\system32\ohi\keia\losn.dat

C:\Users\win7\AppData\Local\Temp\nsa3897.tmp

C:\Users\win7\AppData\Local\Temp\nsjF08F.tmp\\198268457

C:\Users\win7\AppData\Local\Temp\nsx944C.tmp

C:\Windows\Picture-SK\SK.jpg

C:\Program Files\Chameleon Clock\Sounds\Clocks\Cuckoo.wav

C:\Users\win7\AppData\Local\Temp\CTOSChk.exe

C:\Users\win7\AppData\Local\Temp\is-B8GN7.tmp\sample.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-DesktopWindowManager-uDWM-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsd2E98.tmp

C:\Users\win7\AppData\Local\Temp\7zS77D6.tmp\hpcdeopkgienceaajfkaohfhnacpfamh\515f52bb882504.94475068.js

C:\Users\win7\AppData\Local\Temp\is-VLONM.tmp\_isetup\_RegDLL.tmp

http://www.program4pc.com/

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\libeay32.dll

C:\symbols\dll\wkernelbase.pdb

C:\PROGRA~3\Mozilla\enmgqym.exe

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\ST\img\common\win_edge_top_msk.png

c:\OkiDriver\OKIB2200B2400\okb3e002.cat

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\NanWang.ini

C:\Users\win7\AppData\Local\Temp\12auf94d4\appdata\\{3349050F-829E-4bb2-AACF-03E3A6B68677}

\\.\COM163

C:\Python27\dll\CFVS_HookDll.pdb

\\.\COM57

c:\Program Files\Alexa Booster v3.2\Skins\1P.bmp

C:\Users\win7\AppData\Local\Temp\nse2972.tmp\\1184494241

C:\Data\Scripts\Gui\PageSplashIAVision.gui

C:\Users\win7\AppData\Local\Temp\nse6637.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-PTDNB.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\nsi184B.tmp

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\skinpath.conf

C:\desktop.ini

C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.pdb

C:\Users\win7\AppData\Local\Temp\SPI38FC.tmp\setup.bmp

C:\Users\win7\AppData\Local\Temp\nsi1A20.tmp\\1098075203

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\QQBrowserLiveup.exe

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\vpnva.sys

C:\Users\win7\AppData\Local\Temp\nsw4FAE.tmp\861052772

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\InputPersonalization.exe.mui

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Recent\desktop.ini

32788R22FWJFW\badclsid.c

\\.\COM150

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM71.tmp

C:\Users\win7\AppData\Roaming\NLEThjJwJ\7914.xml

C:\Users\win7\Documents\My Music\desktop.ini

C:\Windows\system32\woru\sewo\heo.dat

C:\Users\win7\AppData\Local\Temp\441cc7d4765d61e4190dc8ce3e1a74a1\pricepeep.exe

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\X11WQCY3.txt

C:\\image\baritem_new.png

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Roaming\ZapSpot\System\Core.zdt

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\23B523C9E7746F715D33C6527C18EB9D

C:\Users\win7\AppData\Local\Temp\DIQ\Player_151\DomaIQ10.exe

C:\Users\win7\AppData\Local\Temp\nsc3058.tmp\nsArray.dll

\\.\COM109

C:\Users\win7\AppData\Local\Temp\nss6E66.tmp\SimpleSC.dll

C:\Windows\System32\Wbem\symbols\dll\wkernel32.pdb

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\f[1].js

C:\Users\win7\AppData\Local\Temp\nsy6FBD.tmp

C:\Users\win7\AppData\Local\Temp\DIQ\test-av13490_004\DomaIQ10.exe

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM29.tmp

C:\Users\win7\AppData\Local\Temp\12auf94d4\Config.xml

C:\Users\win7\AppData\Local\Temp\nszE470.tmp

\\.\COM185

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\insideout.jpg

C:\Users\win7\AppData\Local\Temp\GUM4330.tmp\goopdateres_en.dll

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\es\alerter.country

C:\Users\win7\AppData\Local\Temp\IPMx2\All\g33q35.inf

c:\download\driver\12950\SoftwareDriver\Driver\CmiCnfg64.cpl

c:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\tipresx.dll.mui

C:\Users\win7\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\GIF to Flash Converter\Uninstall.lnk

\\.\COM16

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\Edit.png

Avira Registry Cleaner\RegCleaner.exe

C:\Users\win7\AppData\Local\Temp\nseBF64.tmp\nsArray.dll

\\.\COM198

Formats\arj.fmt

C:\Windows\system32\qed\jak\aojiy.dat

C:\Users\win7\AppData\Local\Temp\7zSB2EF.tmp\515f05cb479e3.exe

C:\Users\win7\AppData\Local\Temp\DIQ\test-av13688_004\DomaIQ10.exe

\\.\COM207

C:\Users\win7\AppData\Local\Temp\nsg397F.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\022UXOQH.txt

C:\Users\win7\AppData\Local\Temp\is-Q8QEV.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\DIQ\test-av46804_004\config.dll

\\.\COM22

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_545CE018AB81BDC22528678FE2EFB798

C:\Users\win7\AppData\Local\Temp\nsq7C0E.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\\~DF4E75D53405899D54.TMP

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\libacess_js[1].htm

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad\osknumpadbase.xml

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IE-Troubleshooters-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\dll\wkernelbase.pdb

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05C228D5A90F8E552A04359DBA3E6884

C:\Users\win7\AppData\Local\Temp\nso278D.tmp

C:\Users\win7\AppData\Roaming\mLEThjJw

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~zh-TW~7.1.7601.16492.cat

C:\Users\win7\Searches\desktop.ini

C:\Users\win7\AppData\Local\Temp\RarSFX0

C:\Users\win7\AppData\Local\Temp\nsjB723.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsdB20B.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsl29EA.tmp\NSISdl.dll

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\RecordPad Sound Recorder.lnk

C:\Users\win7\AppData\Local\Temp\nsw229C.tmp\nsWeb.dll

32788R22FWJFW\pv.com

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\app[1].js

c:\OkiDriver\OKIB2200B2400\OPB220N.dat

C:\Users\win7\AppData\Local\Temp\nsr1619.tmp\128704196

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\InstallHelper.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alexa Booster 3.2\Uninstall.lnk

C:\Users\win7\AppData\Local\Temp\nsf7422.tmp\UserInfo.dll

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_kor.xml

c:\download\driver\12950\SoftwareDriver\Driver\CmiFltr.dll

C:\Windows\system32\\wuapi.dll

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\Dlg_Btn_Close.png

C:\Users\win7\AppData\Local\Temp\nsx9767.tmp\\1167639464

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-BusinessScanning-Feature-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsc20F2.tmp\SimpleSC.dll

c:\da8df086ca54f7fdd325c4\update\update.exe

C:\Users\win7\AppData\Local\Temp\nsg2E05.tmp

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\BBD\img\common\win_edge_right_msk.png

C:\dll\wntdll.pdb

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZConfigTable.xml

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\acsmux64.sys

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich6core.inf

C:\Users\win7\AppData\Local\Temp\nsd1917.tmp\north.exe.config

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Express Talk Softphone.lnk

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\jquery[1].js

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich9smb.inf

\\?\C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\H4F9GZHW\localhost\sample\cardgamesolitaire.com.sxx

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Graphics File Converter.lnk

C:\Users\win7\AppData\Local\Temp\nsg6866.tmp\nsArray.dll

C:\Windows\System32\WindowsPowerShell\v1.0\CFVS_HookDll.pdb

C:\ZapImages\p-img-GameLogo.gif

C:\Users\win7\AppData\Local\Temp\7zS7BFD.tmp\pnadleldkhfpclgofgnnmhblfcamfhfa

C:\Users\win7\AppData\Roaming\CoffeeCup Software\SharedSettings_1_0_5.sqlite

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\Selection Tools Update.exe

ADLOC.dll

UNACEV2.DLL

C:\Users\win7\AppData\Local\Temp\nsb7C4D.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsgBB49.tmp\licdata.rtf

\\.\U:

C:\Windows\ccrpprg3N.ocx

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EB2C4AB8B68FFA4B7733A9139239A396_D76DB901EE986B889F30D8CC06229E2D

C:\Users\win7\AppData\Local\Temp\nsx7139.tmp\nsArray.dll

\\.\COM137

C:\Users\win7\AppData\Local\Temp\nsq1DA6.tmp\nsArray.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\HHDUXP1M.txt

C:\Windows\system32\wbem\wbemdisp.TLB

\\.\COM148

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\7WHUJJ7D.txt

\\.\COM111

c:\windows\system32\vboxmrxnp.dll

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\symbase.xml

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\vArVzWJ.lnk

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_13.bmp

C:\Users\win7\AppData\Local\Temp\nsk1DCA.tmp\498079189

32788R22FWJFW\Install-RC.cmd

C:\Windows\system32\COMCTL32.OCX

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\S3VXHR2Q.txt

C:\Users\win7\AppData\Local\Temp\nsb7B63.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsv2C41.tmp\617765131

32788R22FWJFW\SuppScan.cmd

C:\Users\win7\AppData\Local\Temp\nso71A2.tmp\\1047987572

C:\sample.web

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM73.tmp

\\.\COM220

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\WWKWOIGC.txt

C:\Windows\GeoOCX\WebCam\20090916\RegOCX.INI

C:\ProgramData\kJopnp.exe

__tmp_rar_sfx_access_check_5054234

C:\WINDOWS\FONTS\ARIALBI.TTF

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\vpnva.cat

C:\Users\win7\AppData\Local\Temp\pftB084.tmp\Disk1\Setup.inx

C:\Users\win7\AppData\Local\Tempfolder\ortmp\nssdbm3.dll

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\service\PerfTraceService.exe

C:\Users\win7\AppData\Local\Temp\nsp842D.tmp\\608912117

C:\Data\Scripts\Gui\MessageBoxInvalidPlayerName.gui

C:\Users\win7\AppData\Local\Temp\nsa41D8.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\4ae6cf3c7fbd3414df26e8400c7d510e\DirectDownloaderInstaller.exe

32788R22FWJFW\NirCmd.cfxxe

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F463A8EC6EA3A214C73FB4FC74B1B1BD

c:\Program Files\FontLab\FontLab\FLCompo.hlp

C:\Users\win7\AppData\Roaming\Microsoft\Windows

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\dm_bar_left[1]

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\acsmux64.cat

C:\Windows\system32\wkernel32.pdb

c:\Program Files\Alexa Booster v3.2\Skins\2.bmp

C:\Users\win7\AppData\Local\Temp\nsc16F4.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\OIO6OU74.txt

C:\Windows\SysWOW64\Dxtrans.dll

C:\Windows\MSCOMCT2.OCX

Avira Registry Cleaner

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM80.tmp

C:\Users\win7\AppData\Local\Temp\\~DFF9E89BA68850C9C6.TMP

C:\Users\win7\AppData\Local\Temp\nsd8CF6.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GPwTuuGhrjxj.lnk\desktop.ini

C:\Windows\System32\actskin4.ocx

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\VACon64.exe

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\YL0M2DIV.txt

C:\ProgramData\Barowasse2saave\515f05ca0c06e.tlb

\\.\COM64

C:\Windows\system32\exe\DVRArchiveViewer.pdb

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich8id2.inf

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\_isetup\_setup64.tmp

TABCTL32.OCX

C:\Windows\System32\Wbem\dll\wntdll.pdb

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\CallbackCtrl.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PtzConfig.dll

C:\Users\win7\AppData\Local\Temp\nsp1CFF.tmp\227176954

C:\share_nt.exe

C:\Users\win7\AppData\Local\Temp\nse1CBF.tmp

WBchppI.exe

C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\mx\alerter.country

C:\Users\win7\AppData\Local\Adobe\Updater5\AUTrans.xml

C:\Users\win7\AppData\Local\Temp\nst2711.tmp\\959661730

C:\Users\win7\Desktop\dll\wkernel32.pdb

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\PBTQTH6H.txt

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\service\qqtrack.xml

C:\Users\win7\AppData\Local\Temp\nsh8605.tmp\\568188251

C:\Users\win7\AppData\Local\Temp\nsm39A9.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsz73B5.tmp\NSISdl.dll

32788R22FWJFW\AspackDie.cfxxe

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM38.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-LocalPack-AU-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nst58AB.tmp\NSISdl.dll

C:\Windows\system32\ascbalo3N.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\All\915.inf

C:\Users\win7\AppData\Local\Temp\nsuB7AF.tmp

C:\Users\win7\AppData\Local\Temp\holderwb.txt

C:\Users\win7\AppData\Local\Temp\nsx255B.tmp\nsArray.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-TopLevel~31bf3856ad364e35~amd64~~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\GUM4330.tmp\DuuquUpdateOnDemand.exe

C:\Users\win7\AppData\Local\Temp\nsa1F60.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsz2869.tmp\1207750429

C:\Users\win7\AppData\Local\Temp\WER95F6.tmp.WERInternalMetadata.xml

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\desktop.ini

\\.\COM108

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\paused_icon[1]

C:\Users\win7\AppData\Local\Temp\7zS77D6.tmp\settings.ini

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\reset[1].css

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Barowasse2saave\Barowasse2saave.lnk

C:\Users\win7\AppData\Local\Temp\7zS77D6.tmp\hpcdeopkgienceaajfkaohfhnacpfamh\background.html

\\.\COM107

actskin4.ocx

C:\Users\win7\AppData\Local\Temp\nsmA33E.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsu40CD.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~hi-IN~7.1.7601.16492.cat

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\copy7.html

C:\Users\win7\AppData\Local\Temp\b4e8c2bf475e972ff1129a25635128c5\BitAcceleratorDDLRinstaller.exe

C:\Windows\System32\Wbem\wntdll.pdb

\\.\COM56

C:\Users\win7\AppData\Local\Temp\nskB31F.tmp\253123095

C:\Windows\MSVBVM6N.DLL

C:\Users\win7\AppData\Roaming\DhDDYNXdLBfE\guNPwTuuGhr.exe

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~lt-LT~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsg201B.tmp\153662886

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Sensormatic.dll

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\pbn-1730F5A724224F9D91D18EC1FDCA52A5.zdt

C:\Users\win7\AppData\Local\Temp\nsg2DB8.tmp\System.dll

C:\Data\Textures\Gui\SingleMission_DeleteMission_04.dds

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\icone_cadeado[1].gif

C:\Users\win7\AppData\Local\Temp\IPMx2\All\965g.inf

C:\Users\win7\AppData\Local\Temp\SPI38FC.tmp\setup.dat

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\QQBrowserFrame.dll

\\.\COM151

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\VACon.exe

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\asl-icn-mini-about-32x32x2.gif

C:\Users\win7\AppData\Local\Temp\nsxAE9B.tmp\NSISdl.dll

C:\Python27\Scripts\wkernelbase.pdb

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\analytics[1].js

C:\Users\win7\AppData\Local\Temp\nsx86B0.tmp

C:\Users\win7\AppData\Local\Temp\nso27DC.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsc16F4.tmp\365624476

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\TridentCore.dll

C:\ProgramData\BBroowsee2save

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Canon_C50i.ini

C:\Users\win7\AppData\Local\Temp\nsfD7E9.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsj1C90.tmp

7zxa.dll

C:\Users\win7\AppData\Local\Temp\nsjF08F.tmp\NSISdl.dll

c:\programdata\microsoft\windows\start menu\programs\startup\desktop.ini

C:\ZapImages\asl-icn-mini-join-32x32x2.gif

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RWJrYnjUOg.lnk

C:\Users\win7\AppData\Roaming\XLEThjJwJF\yKrvSGxBArVz.exe

C:\Users\win7\AppData\Local\Temp\VSDFA5.tmp\install.log

C:\Users\win7\AppData\Local\Temp\DIQ\Player_151\DomaIQ.exe

C:\Users\win7\AppData\Local\Temp\226fda2318382dfba2850343961c3116\DirectDownloaderInstaller.exe

C:\Windows\symbols\dll\wkernelbase.pdb

C:\Users\Public\Documents\My Pictures\desktop.ini

C:\Windows\Fonts\desktop.ini

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\res\GUI.ico

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~pl-PL~7.1.7601.16492.cat

C:\Windows\System32\Wbem\wkernel32.pdb

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\1navmenu.jpg

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\resources.pri

C:\Users\win7\AppData\Local\Temp\nsn2654.tmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\UP.bmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\Y99GVE3X.txt

C:\Users\win7\AppData\Local\Temp\7zSB2EF.tmp\515f05cb47a1c.tlb

C:\Users\win7\AppData\Local\Temp\nsl2D3A.tmp

\\.\PIPE\wkssvc

C:\Settings\files.xml.bz2

C:\Users\win7\AppData\Local\Temp\nsa7674.tmp\System.dll

C:\Windows\GeoOCX\WebCam\20090916\msvcr71.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\GV_AccessIni_Memory.dll

\\.\COM135

C:\Users\win7\AppData\Local\Temp\pft3E71.tmp\setup.ini

C:\Windows\exe\DVRArchiveViewer.pdb

C:\Users\win7\AppData\Local\Temp\nst70D6.tmp

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip\7-Zip File Manager.lnk

C:\Windows\system32\MSCOMCTL32.OCX

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Hyper-V-Guest-Integration-Drivers-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsh7D56.tmp

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM13.tmp

C:\Users\win7\AppData\Local\Temp\nsg7C6C.tmp\369335932

C:\Windows\system32\ciplListBar.ocx

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\Dlg_Btn_OK.png

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest

C:\Users\win7\AppData\Local\Temp\IPMx2\All\E7230.inf

C:\Users\win7\AppData\Local\Temp\IPMx2\Vista\5000XZVP.inf

C:\Windows\System32\Wbem\symbols\dll\wkernelbase.pdb

ConfigParams.ini

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\Btn_Inst.png

C:\ProgramData\R0OSKF

C:\Windows\MSWINSCK.OCX

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\QBExtensionFramework.dll

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\Plugins\vpnipsec.dll

C:\Windows\System32\DriverStore\infstor.dat

C:\Users\win7\AppData\Local\Temp\nsl1122.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~ar-SA~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\7zSB2EF.tmp\dpbejmkogknnkjbfcacgbckomaofefka\manifest.json

C:\Windows\system32\ascbalon.dll

C:\Users\win7\AppData\Local\Temp\nslD1A8.tmp

C:\Users\win7\AppData\Local\Temp\\~DFDECBA2749F49C22F.TMP

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\YAAN.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\Skin_Heb.ini

C:\Users\win7\AppData\Local\Temp\nsg2C80.tmp\\489770976

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~tr-TR~7.1.7601.16492.cat

c:\users\win7\appdata\local\tempfolder\voivvtieci\kubwoocan.dat

wma-share2.exe

C:\Users\win7\AppData\Local\Temp\nsz4E31.tmp\892719323

C:\Windows\system32\RICHTX32.DEP

C:\Data\Textures\Gui\SingleMission_DeleteMission_01.dds

C:\Users\win7\AppData\Local\Temp\nspB8C8.tmp\NSISdl.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_84FF9D6F15EF7AC15278E8CA625D6354

c:\Program Files\Alexa Booster v3.2\Proxy\PROXYs.txt

C:\Users\win7\AppData\Local\Temp\7zS7BFD.tmp

C:\Users\win7\AppData\Local\Temp\226fda2318382dfba2850343961c3116\volcano.exe

C:\Users\win7\AppData\Roaming\pidloc.txt

C:\Users\win7\AppData\Local\Temp\ext6414.tmp

C:\Users\win7\AppData\Local\Temp\7zSB2EF.tmp\dpbejmkogknnkjbfcacgbckomaofefka\sqlite.js

/usr/local/etc/ctags.conf

\\.\COM233

C:\Windows\system32\MSCOMCT3N.OCX

C:\Users\win7\AppData\Local\Temp\7zS7336.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\FLRWD44E.txt

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\FlickLearningWizard.exe.mui

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\vpncommon.dll

C:\Users\win7\AppData\Local\Temp\nss1926.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\7zS7BFD.tmp\pnadleldkhfpclgofgnnmhblfcamfhfa\sqlite.js

C:\Users\win7\AppData\Local\Temp\nse2972.tmp\1184494241

C:\Users\win7\AppData\Local\Temp\nsuB447.tmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZRUI.dll

\\.\M:

C:\Users\win7\AppData\Roaming\GHISLER\wcx_ftp.ini

C:\Users\win7\AppData\Local\Temp\nsg7B33.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\SendTo\desktop.ini

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\botva2.dll

32788R22FWJFW\Purity.dat

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\pause[1]

C:\Users\win7\AppData\Local\Temp\3db95c0d2bab524b5259c84257550ed1\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\product.conf

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\asl-icn-mini-support-32x32x2.gif

C:\Windows\GeoOCX\WebCam\20090916\GeoCodecReg\GeoADPCM.inf

C:\Users\win7\AppData\Local\Temp\nsn326B.tmp\858941668

C:\Users\win7\AppData\Local\Temp\nsg2C80.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\ffb9bc25e938db9aa79cfac8ccf48c15\volcano.exe

C:\Windows\system32\Stdole2.tlb

C:\ZapImages\img-main-800x572.gif

C:\Users\win7\AppData\Local\Temp\nsb1ECF.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\service\qqtrack.xml

C:\Users\win7\AppData\Local\Temp\71d8cec149ec9115178e8020d4510ae0\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Local\Temp\is-Q8QEV.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM89.tmp

C:\Users\win7\AppData\Local\Temp\nsm6C24.tmp\\1210133932

\\.\COM65

C:\Windows\GeoOCX\WebCam\20090916\LiveClient_8200.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\8VDNTORI.txt

C:\Users\win7\AppData\Local\Temp\nsd8F82.tmp

C:\Users\win7\AppData\Local\Temp\is-I1FLQ.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\nsr1619.tmp\nsArray.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\JxIni.dll

\\.\COM53

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-OfflineFiles-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\COMDLG32.OCX

C:\Users\win7\AppData\Local\Temp\nsh2EFA.tmp

C:\Users\win7\AppData\Local\Temp\nsv82B9.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nss1752.tmp\757915156

C:\Users\win7\AppData\Local\Temp\nsg206A.tmp\System.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\GIJ2FWNF.txt

C:\Users\win7\AppData\Local\Temp/hassnae.jpg

C:\Users\win7\AppData\Local\Temp\nsm2093.tmp

C:\WINDOWS\FONTS\CONSOLAI.TTF

C:\Users\win7\AppData\Local\Tempfolder\ortmp\smime3.dll

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\Dlg_icon.png

c:\Program Files\Common Files\Microsoft Shared\ink\et-EE\tipresx.dll.mui

C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll

C:\Windows\actskin4.ocx

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\IPSEventLogMsg.dll.mui

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\askInstallChecker[1].htm

C:\Users\win7\AppData\Local\Temp\nsj32A5.tmp\nsWeb.dll

C:\ZapImages\asl-sysbuttons-16x14x4.gif

C:\Users\win7\AppData\Local\Temp\nsk1DCA.tmp\2.jpg

C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\security.config.cch

C:\Users\win7\AppData\Local\Temp\pft3E71.tmp\setup.iss

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\temp0000

C:\Windows\ccrpprg6.ocx

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\SonySNC_RZ50.ini

C:\Users\win7\AppData\Local\Temp\\{6740F9E3-1353-47DD-9765-BA49FC4C3479}\YandexBarIE.msi

\\.\COM7

c:\download\driver\12950\SoftwareDriver\Driver\CMxPCI0.INF

C:\Users\win7\AppData\Local\Temp\nso282A.tmp\\333821725

C:\Users\desktop.ini

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\GRMZTO7E.txt

C:\Users\win7\AppData\Local\Temp\68fecef9577b6548cd9f9c89137e6238\pricepeep.exe

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\SonySNC_RX550.ini

C:\Users\win7\AppData\Local\Temp\36a29030561d6dd54640db33f63123e2\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsl2C02.tmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_No2.bmp

C:\Windows\dll\CFVS_HookDll.pdb

C:\Users\win7\AppData\Local\Temp\pftD7AF~tmp\Disk1\data1.cab

C:\Users\win7\AppData\Local\Temp\_crypt5915760.scr

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\res\about.png

C:\Users\win7\AppData\Local\Temp\d06fcbb59363a1adb6768ef5c595d7c2\volcano.exe

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-Package-TopLevel~31bf3856ad364e35~amd64~~11.2.9600.16428.cat

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\828298824EA5549947C17DDABF6871F5_D1BCEE7E304F0D5FB8AA811D9B2D0835

C:\Users\win7\AppData\Local\Temp\nsv4429.tmp\427697726

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-LocalPack-ZA-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\PROGRA~2\WMACON~1\temp.000

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-HomePremiumNEdition-wrapper~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Anytime-Upgrade-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

c:\users\win7\appdata\local\tempfolder\eosolfhovha\lespupufpopp.dat

C:\Windows\ascIP95.DLL

C:\Users\win7\AppData\Local\CuteFTP\sm.dat

C:\logo.swf

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-SideShow-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_12.bmp

32788R22FWJFW\Wmi_rem.vbs

C:\Users\win7\AppData\Local\Temp\GLK76A3.tmp

C:\Windows\GeoOCX\WebCam\20090916\STable_8200.xml

C:\ProgramData\BBroowsee2save\515f52bb88489.tlb

C:\Data\Textures\Gui\EditBoxShortBack.dds

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\asl-btn-big-home-83x28x2.gif

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\QEY85EX2.txt

C:\Users\win7\AppData\Local\Temp\nsa2BC4.tmp\\1127085849

C:\Users\win7\AppData\Local\Temp\GUM4330.tmp\DuuquCrashHandler.exe

C:\Users\win7\AppData\Local\Temp\nsm9F39.tmp

C:\LicenseManagerV2.pdb

C:\Users\win7\AppData\Roaming\FileZilla\sitemanager.xml

C:\Users\win7\AppData\Local\Temp\nst7124.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsmE3A2.tmp\nsArray.dll

32788R22FWJFW\NirCmdC.cfxxe

\\.\COM124

\??\C:\Windows\SysWOW64\ieframe.dll

Keygen32.exe

C:\Users\win7\AppData\Local\Temp\nsc9F98.tmp\\150530281

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\DIQ\test-av46804_004\routes.dll

32788R22FWJFW\safeboot.def.vista.dat

C:\Users\win7\AppData\Local\Temp\nsk1DCA.tmp\Inetc.dll

C:\Users\win7\AppData\Local\Temp\nsv1C3F.tmp\687567743

C:\Users\win7\AppData\Local\Temp\nstDAFD.tmp\\931263985

C:\Users\win7\Desktop\symbols\dll\wkernel32.pdb

\\.\COM230

C:\Windows\system32\caoe\iso\goka.dat

C:\Windows\system32\foc\suvb\wurk.dat

C:\Users\win7\AppData\Local\Temp\nsi3EB0.tmp\splash.wav.WAV

C:\Users\win7\AppData\Local\Temp\nsq7BBF.tmp

C:\Users\win7\AppData\Local\Temp\is-U84KA.tmp\InoDll.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A34B45DD28A5DAEFDA3E0BA2FCE7DE24_87910BE1C29EBFE2C02400CF6890DE18

32788R22FWJFW\ERDNTWIN.LOC

C:\Settings\Profiles.xml

C:\Users\win7\AppData\Local\Temp\nsxAE9B.tmp\\639931717

C:\Users\win7\AppData\Local\Temp\nsa8374.tmp\nsWeb.dll

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Related Programs\Video Tape to DVD Converter.lnk

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\ui[1].js

C:\Users\win7\AppData\Local\Temp\nsdB20B.tmp\NSISdl.dll

C:\Windows\system32\ore\keet\voxk.dat

C:\Windows\system32\nae\bug\tawbe.dat

C:\Users\win7\AppData\Local\Temp\nsgBB49.tmp\checktbexist.exe

C:\Users\win7\AppData\Local\Temp\nsk792F.tmp

C:\Windows\system32\aid\usy\fuouf.dat

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\GetPelcoD.dll

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup

\\.\COM196

\\.\COM9

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Branding-ProfessionalN-Client-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Lilin7625.ini

__tmp_rar_sfx_access_check_2239000

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-Package~31bf3856ad364e35~amd64~~11.2.9600.16428.cat

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui

C:\Users\Public\Desktop\Debut Video Capture Software.lnk

C:\PROGRA~2\WMACON~1\wma.hlp

\\.\COM183

C:\Program Files\Chameleon Clock\Sounds\Clocks\Doorbell.wav

C:\Users\win7\AppData\Local\Temp\nsp1CFE.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-7OHN6.tmp\sample.tmp

C:\Windows\system32\MSCOMCTL.OCX

C:\Windows\system32\MSVBVM6N.DLL

C:\Data\Textures\Gui\CreateMission_Save_01.dds

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~it-IT~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsn8D34.tmp

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\service\QQTrace.ini

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\84AFE219AEC53B0C9251F5E19EF019BD_2C9D5E6D83DF507CBE6C15521D5D3562

C:\Windows\GeoOCX\WebCam\20090916\DMPTZControlDLL.dll

32788R22FWJFW\Policies.dat

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ea-sym.xml

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\Dlg_Btn_Cancel.png

C:\

C:\Users\win7\AppData\Local\Temp\nsb7B63.tmp\\457014823

C:\Users\win7\AppData\Local\Temp\nss3104.tmp\858294717

32788R22FWJFW\LocalServiceNetworkRestricted.dat

C:\Users\win7\AppData\Local\Temp\\~DF9053D80C70BE666B.TMP

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\api[1].htm

\\.\COM170

\\.\COM104

C:\Users\win7\AppData\Local\Temp\nsl1E23.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\\~DFF21EFAC20EA8D99F.TMP

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\modules\nosibox\conf\alert\BBD\img\common\win_edge_bottom_msk.png

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM3.tmp

C:\Users\win7\AppData\Local\Temp\WER60CC.tmp.WERInternalMetadata.xml

C:\Users\win7\AppData\Local\Temp\nsb7B63.tmp\nsArray.dll

C:\ProgramData\kJopnp

C:\Windows\system32\MSSTDFMN.DLL

C:\Users\win7\AppData\Local\Temp\nseB5CC.tmp\150734581

C:\Windows\system32\symbols\dll\wkernel32.pdb

C:\Users\win7\AppData\Local\Temp\nsm23E4.tmp\nsWeb.dll

\\.\COM193

C:\Users\win7\AppData\Local\Temp\nsd594F.tmp\wTask.exe

C:\Users\win7\AppData\Local\Temp\ffb9bc25e938db9aa79cfac8ccf48c15\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Local\Temp\nsx255B.tmp\317341499

C:\Users\win7\AppData\Local\Temp\nsb7C4D.tmp\NSISdl.dll

C:\Windows\system32\Olepro32.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\SamSung_Tech.dll

\\.\COM127

C:\Users\win7\AppData\Local\Temp\7zS77D6.tmp\hpcdeopkgienceaajfkaohfhnacpfamh\content.js

C:\Windows\system32\MSWINSCK.OCX

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Pelco_SpectraIV-IP.ini

C:\Users\win7\AppData\Local\Temp\nsw6B78.tmp\127274093

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\Dlg_bkg.png

C:\Windows\MsAudio.ocx

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BrouwsEe2save\BrouwsEe2save.lnk

C:\PROGRA~2\WMACON~1\readme.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\vVzWJrYnj.lnk\desktop.ini

C:\Users\win7\AppData\Local\Temp\IPMx2\All\5000XZVP.inf

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\acsock.inf

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\Dlg_Btn.png

C:\Users\win7\AppData\Local\Temp\nsg201B.tmp\\153662886

C:\Users\win7\AppData\Local\Temp\nswA32D.tmp

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\Uninstall.exe

C:\Windows\GeoOCX\WebCam\20090916\GeoCodecReg\GX264.dll

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\tssafeedit.dat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~en-US~7.1.7601.16492.cat

ciplListBar.ocx

C:\Users\win7\AppData\Local\Temp\nsh4855.tmp\SimpleSC.dll

C:\Windows\GeoOCX\WebCam\20090916\GeoCodecReg\GXJPG.dll

C:\Windows\system32\cikp\geft\ahy.dat

C:\Windows\system32\spool\DRIVERS\x64\3\mxdwdui.gpd

\\.\COM114

C:\Users\win7

C:\Users\win7\AppData\Local\Temp\7zSB2EF.tmp\dpbejmkogknnkjbfcacgbckomaofefka

\\.\COM180

C:\Users\win7\AppData\Local\Temp\is-CRKNN.tmp\_isetup\_RegDLL.tmp

C:\Windows\system32\hoh\soc\ueror.dat

C:\Windows\system32\rsaenh.dll

C:\Users\win7\AppData\Local\Temp\nsv1C3F.tmp\nsArray.dll

c:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui

C:\Settings\DCPlusPlus.xml

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\WebpDecodeFilter.dll

C:\Users\win7\AppData\Local\Temp\nsr227C.tmp

C:\Users\win7\AppData\Local\Temp\nskB7C0.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsa7626.tmp\\614836826

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~ru-RU~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\Dlg_bkg.png

c:\OkiDriver\OKIB2200B2400\OPB2200.dat

c:\Program Files\Alexa Booster v3.2\Proxy\URLs.txt

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6EE18E7C9044AB68AF295DC6CAF43C7E_91BA75AD693AB7B7E875623F88BD0B72

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM65.tmp

C:\Users\win7\AppData\Local\Temp\nskB7C0.tmp\844504445

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alexa Booster 3.2\Alexa Booster v3.2.lnk

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\ui[1].js

C:\Users\win7\AppData\Local\Temp\nst41CF.tmp\1201008518

C:\Users\win7\AppData\Roaming\InfraRecorder\Settings.xml

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\acsock.sys

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\QQBrowserSecurityCenter.exe

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\ZATVLFKK.txt

C:\Users\win7\AppData\Local\Temp\nsm3095.tmp

C:\Users\win7\AppData\Local\Temp\nsr4717.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\webctrl.dll

C:\Windows\system32\kiat\hak\ladi.dat

\\.\COM117

c:\Program Files\Alexa Booster v3.2\_ci_gentee_

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\Downloader.dll

\\.\COM240

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-Package-MiniLP~31bf3856ad364e35~amd64~en-US~11.2.9600.16428.cat

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BBroowsee2save\Uninstall.lnk

C:\Users\win7\AppData\Local\Temp\nst8EDA.tmp

C:\Users\win7\AppData\Local\Temp\nsp2936.tmp

C:\Users\win7\AppData\Roaming\WeatherWatcher

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new

C:\Users\win7\AppData\Local\Temp\nsvB61D.tmp\226427853

C:\Users\win7\AppData\Local\Temp\nsb6C32.tmp

C:\Users\win7\AppData\Roaming\WTools\Selection Tools\

\\.\COM243

C:\Users\win7\AppData\Local\Temp\nsz9033.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nss3104.tmp\NSISdl.dll

C:\ProgramData\Soearcho--NewTeAb\515f05c5b9edb.tlb

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lxBArVzWJ.lnk

C:\Users\win7\AppData\Local\Temp\nswAEF6.tmp\nsArray.dll

32788R22FWJFW\zDomain.dat

C:\Users\win7\AppData\Local\Temp\nsh7DA5.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsg11A0.tmp\\801601376

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM86.tmp

C:\Users\win7\AppData\Local\Temp\nss4B52.tmp\\909029299

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\WJJJP8NB.txt

C:\Users\win7\AppData\Local\Temp\nsa7626.tmp\614836826

c:\Program Files\Alexa Booster v3.2\Skins\4.bmp

32788R22FWJFW\safeboot.dat

C:\Users\win7\AppData\Local\Temp\nsfB523.tmp\SimpleSC.dll

C:/Windows/system32/run-time.vbs

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB

C:\Users\win7\AppData\Roaming\DhDDYNXdLBfE

C:\Windows\GeoOCX\WebCam\20090916\PTZ

C:\Users\win7\AppData\Local\Temp\nsg206A.tmp\Splash_logo.wav.WAV

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\res\attention.ico

c:\users\win7\appdata\local\tempfolder\fonbomacd\iiuzemecuhh.dat

C:\Windows\System32\cmd.exe

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\WSysInfo.dll

C:\Program Files\Internet Explorer\iexplore.exe

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\vpncommoncrypt.dll

C:\Users\win7\AppData\Local\Temp\holdermail.txt

C:\Users\win7\AppData\Local\Temp\\~DF891BE321E240E3D9.TMP

C:\Users\win7\AppData\Local\Temp\nseB5CC.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000008.db

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\vArVzWJ.lnk\desktop.ini

wkernel32.pdb

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\NetWork.dll

C:\Users\win7\AppData\Local\Temp\nsbE314.tmp

C:\Users\win7\AppData\Local\Temp\nsk86CC.tmp\\891391371

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\zlib1.dll

C:\PerfLogs

C:\Users\win7\AppData\Local\Temp\nsw2EB2.tmp\System.dll

C:\Windows\INF\ntprint.PNF

C:\Users\win7\AppData\Local\Temp\nsa7626.tmp\nsArray.dll

C:\Windows\system32\cib\ila\pyedp.dat

32788R22FWJFW\system_ini.dat

C:\WINDOWS\FONTS\COMIC.TTF

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\leftUP.bmp

C:\Program Files

\\?\C:\Windows\system32\mms.cfg

ascIPNT.DLL

\\?\C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#local\settings.sxx

C:\Windows\System32\WindowsPowerShell\v1.0\symbols\exe\DVRArchiveViewer.pdb

C:\Users\win7\AppData\Local\Temp\nsh7D56.tmp\\924249673

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager\Uninstall IDM.lnk

\\.\COM253

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs

C:\Users\win7\AppData\Local\Temp\64b86246e9aa3fa79b9535db49b20b8d\volcano.exe

C:\Users\win7\AppData\Local\Temp\nso28C6.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsr1F7B.tmp\SimpleSC.dll

__tmp_rar_sfx_access_check_675078

C:\Users\win7\AppData\Local\Temp\nsd75B4.tmp

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\res\pinned.png

c:\users\win7\appdata\local\tempfolder\shrahas\iolartook.dat

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\VideoPad Video Editor.lnk

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\vpnapi.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~hu-HU~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nse8037.tmp

\??\C:\Windows\system32\explorerframe.dll

C:\Users\win7\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\GIF to Flash Converter\Visit Home Page.lnk

C:\Windows\system32\ASLOC.dll

\\?\C:\Users\win7\AppData\Local\Temp\install\decoder.dll

C:\Users\win7\AppData\Local\Temp\nstF103.tmp\SimpleSC.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-SideShow-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\12aubfff5\appdata\\homepage\0\website\bgsearch_day.jpg

C:\Users\win7\AppData\Local\Temp\nsa2BC4.tmp\1127085849

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Related Programs\Video Capture Software.lnk

C:\Python27\symbols\dll\wkernelbase.pdb

C:/Windows/system32/msvbvm60.dll

ascii.txt

32788R22FWJFW\ncmd.cfxxe

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\trans[1]

C:/Windows/system32/COMCTL32.OCX

C:\Windows\symbols\dll\CFVS_HookDll.pdb

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~11.2.9412.0.cat

c:\download\driver\12950\Program\CmeAuVist.exe

\\.\COM160

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\RUI.ini

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~sv-SE~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsfEA73.tmp\352379005

C:\ProgramData\iml.xml

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\Infobar\image\icon.png

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\Dlg_Btn_Cancel.png

C:\ProgramData\Barowasse2saave\515f05cb47a1c.tlb

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\Dlg_Btn.png

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsc94BA.tmp\1067021553

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~bg-BG~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\s9[1].gif

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_6.bmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_3.bmp

C:\Users\win7\AppData\Local\Temp\nsg7C6C.tmp\\369335932

C:\Settings\GeoIpCountryWhois.csv

C:\Users\win7\AppData\Local\Temp\\~DF3F0B45D34D96C665.TMP

\\.\COM250

C:\Windows\system32\temp.000

C:\Windows\INF\setupapi.app.log

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BBroowsee2save\BBroowsee2save.lnk

C:\Users\win7\AppData\Local\Temp\nsgD1D8.tmp\1099403155

C:\Windows\system32\dfrgui.exe

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\QQBrowserLiveup.exe

C:\Users\win7\AppData\Roaming\GlobalSCAPE\CuteFTP Pro\sm.dat

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\Microsoft.VC90.CRT\msvcm90.dll

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\res\status_ico_error.png

C:\Users\win7\AppData\Local\Temp\nsd594F.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\QBUtils.dll

C:\Users\Public\Documents

C:\Windows\GeoOCX\WebCam\20090916\GeoDDrawV2.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\21215B04FEB2AF188D6B621698846539

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM41.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-NFS-ClientSKU-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\NanWangV4.ini

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\84AFE219AEC53B0C9251F5E19EF019BD_2C9D5E6D83DF507CBE6C15521D5D3562

C:\Windows\GeoOCX\WebCam\20090916\PtzStick_Parser.dll

C:\Users\win7\AppData\Local\Temp\nst58AB.tmp\\806879135

C:\Users\win7\AppData\Local\Temp\IPMx2\install.cfg

C:\Users\win7\AppData\Local\Temp\nsuB310.tmp\\606766963

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MSMQ-Client-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsm56AC.tmp\\428719227

C:\Users\win7\AppData\Local\Temp\7zS7BFD.tmp\pnadleldkhfpclgofgnnmhblfcamfhfa\manifest.json

C:\Users\win7\AppData\Local\Temp\nsjFCDB.tmp\\710108879

[RANDOM_STRING].7z

C:\Python27\Scripts\symbols\exe\DVRArchiveViewer.pdb

\\.\COM208

C:\Users\win7\AppData\Local\Temp\nsz2486.tmp

C:\Users\win7\AppData\Local\Temp\nswF984.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\IconCache.db

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~pt-BR~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsfEA73.tmp\\352379005

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\Dlg_Btn.png

C:\Users\win7\AppData\Local\Temp\nsb2DE7.tmp\545374715

C:\Windows\system32\691703.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~hr-HR~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsf42E0.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Disk-Diagnosis-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\CommonAppDataFolder\Microsoft\Event Viewer\Views\Cisco\CiscoAnyConnect.xml

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\Dlg_Btn_Close.png

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\service\xperf.exe

C:\Windows\system32\ogh\aobi\sicp.dat

C:\Users\win7\AppData\Roaming\BitTorrent\bittorrent.lng

C:\Windows\inf\oem2.PNF

C:\Users\win7\AppData\Local\Temp\IPMx2\All\E8500.inf

MSCOMCTL.OCX

C:\Windows\wma-share2.exe

C:\Users\win7\AppData\Local\Temp\nszE55B.tmp\SimpleSC.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IIS-WebServer-AddOn-2-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\ruta.txt

C:\Windows\system32\wdmaud.drv

c:\users\win7\appdata\local\temp\fon.bmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Backup-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols.xml

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\service\QQTrace.ini

C:\Users\win7\AppData\Local\Temp\nsg11A0.tmp\801601376

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nsgDDF8.tmp\nsArray.dll

\\.\FILEMON

C:\\image\barbutton_left.png

C:\Users\win7\AppData\Roaming\uLEThjJw\9022.xml

C:\Users\win7\AppData\Roaming\rLEThjJw\3118.xml

C:\Users\win7\AppData\Roaming\ALEThjJwJ

C:\Windows\SysWOW64\scrrun.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~th-TH~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\325f6ef1eb345d57019b1a43de33cbb2\pricepeep.exe

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Desktop_Shell-GettingStarted-NoWindowsLive-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsz2A5F.tmp\1115100230

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\WSysInfo.dll

C:\Users\win7\AppData\Local\Temp\nsp794E.tmp\nsArray.dll

C:\Windows\MSWINSCN.OCX

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\ac_sock_fltr_api.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~et-EE~7.1.7601.16492.cat

C:\Windows\system32\spool\DRIVERS\x64\3\STDNAMES.GPD

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\Assistant.dll

C:\WINDOWS\FONTS\VERDANAB.TTF

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~he-IL~7.1.7601.16492.cat

\\.\Scsi15:

C:\Users\win7\AppData\Local\Temp\nsl2C9F.tmp\\436686940

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ichXdev.inf

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\ACTi_6510.ini

C:\Users\win7\AppData\Local\Temp\000a3528.a

C:\Users\win7\AppData\Local\Temp\325f6ef1eb345d57019b1a43de33cbb2\volcano.exe

C:\Users\win7\AppData\Local\Temp\nsd3015.tmp\SimpleSC.dll

C:\Windows\System32\Wbem\dll\wkernelbase.pdb

C:\Windows\System32\WindowsPowerShell\v1.0\DVRArchiveViewer.pdb

C:\Windows\System32\Wbem\symbols\dll\CFVS_HookDll.pdb

C:\Users\Public

C:\Users\win7\AppData\Local\Temp\nst58AB.tmp\806879135

\\.\COM138

c:\users\win7\appdata\local\tempfolder\vekawem\lojodiuoenue.dat

C:\Users\win7\AppData\Local\Temp\nsd70C7.tmp\NSISdl.dll

\\.\COM172

C:\WINDOWS\FONTS\MARLETT.TTF

C:\Users\win7\AppData\Local\SharedSettings_1_0_5.sqlite

C:\Users\win7\AppData\Local\Temp\nsh2EF1.tmp\SimpleSC.dll

C:\Windows\inf\oem5.inf

C:\Users\win7\AppData\Local\Temp\nsl2C9E.tmp

C:\Users\win7\AppData\Local\Temp\nsi26D2.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsh6D3D.tmp\977503959

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~sl-SI~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsg1DB6.tmp\832586926

C:\Users\win7\AppData\Local\Temp\nse2888.tmp\1146630580

C:\Users\win7\AppData\Local\Temp\nsu8F4C.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsv94A7.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsd8D93.tmp\\783248397

C:\Users\win7\AppData\Local\Temp\aut306C.tmp

C:\Users\win7\AppData\Local\Temp\nsi190A.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsg7AE5.tmp

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\Infobar\js\base.js

C:\Program Files\Teamspeak2_RC2\TeamSpeak.RU

C:\Users\win7\AppData\Roaming\WTools

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ParentalControls-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Anytime-Upgrade-Results-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~ja-JP~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsyB022.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsoF05F.tmp

C:\CFVS_HookDll.pdb

C:\Users\win7\AppData\Local\Temp\nsb1CB7.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nse1A59.tmp

C:\Windows\system32\MFC42.DLL

c:\everex\powernow\setup.exe

C:\Users\win7\AppData\Local\Temp\nsw7D18.tmp\1029906993

C:\Users\win7\AppData\Local\Temp\nsr2EE1.tmp\\624915643

C:\Users\win7\AppData\Local\Temp\nsn243C.tmp

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3151BAC9462B3E2DEE2326609B77DE7E

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\Infobar\image\infobar_fav.png

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CodecPack-Basic-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsd8D93.tmp\783248397

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpbejmkogknnkjbfcacgbckomaofefka

C:\Users\win7\AppData\Roaming\ortmp\uninstaller.exe

C:\\image\baritem_play.png

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\INAL43JH.txt

\\.\COM195

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\buywordsbad.gif

c:\users\win7\appdata\roaming\microsoft\windows\start menu\programs\startup\desktop.ini

C:\Users\win7\AppData\Local\Temp\nsj721E.tmp

C:\ProgramData\BrouwsEe2save\515f5b4a5a364.tlb

C:\Users\win7\AppData\Local\Temp\\~DF49075A3A72F4D2CD.TMP

C:\Users\win7\AppData\Local\Temp\nsp81FD.tmp\480236960

C:\Windows\system32\oub\aon\ixorm.dat

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Related Programs\Video File Format Converter.lnk

C:\Users\win7\AppData\Local\FileZilla\filezilla.xml

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~el-GR~7.1.7601.16492.cat

\??\C:\Windows\System32\shdocvw.dll

C:\Settings\HashData.dat

C:\Users\win7\AppData\Local\Temp\aut7C9D.tmp

C:\Users\win7\AppData\Local\Temp\nsy92DC.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsn6FCD.tmp\1143838476

C:\Windows\MFC42.DLL

C:\dcppboot.xml

C:\Windows\system32\wbem\\texttable.xsl

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\Infobar\image\infobar_fav.png

C:\Users\win7\AppData\Local\Temp\is-MEJF8.tmp\_isetup\_shfoldr.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~fr-FR~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\\~DFF1752384A2D24888.TMP

\\.\COM115

C:\Program Files\Chameleon Clock\Sounds\Clocks\Cuckoo1.wav

C:\Users\win7\AppData\Local\Temp\nsy7192.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\DUOghDDY\2464.xml

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\res\status_ico_neutral.png

C:\Windows\SysWOW64\shell32.dll

C:\Windows\MSCOMCT3N.OCX

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~hi-IN~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\Infobar\js\base.js

C:\Users\win7\AppData\Local\Temp\nsw7D18.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nst8DF1.tmp\328237516

32788R22FWJFW\ComboFix-Download.cfxxe

C:\Windows\System32\WindowsPowerShell\v1.0\exe\DVRArchiveViewer.pdb

C:\Users\win7\AppData\Local\Temp\nsyB55D.tmp

C:\Users\win7\AppData\Local\Temp\nsg206A.tmp\ioSpecial.ini

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\Core.ZDT

C:\Users\win7\AppData\Local\Folder\windows.exe.config

C:\Users\win7\AppData\Local\Temp\GUM4330.tmp\goopdate.dll

C:\Windows\system32\ADLOC.dll

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\vpnva64.inf

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ICM-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

\\.\COM251

C:\dll\wkernel32.pdb

C:\Users\win7\AppData\Local\Temp\Quarantine.exe

C:\Users\win7\AppData\Local\Temp\is-2PQ60.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\nsw2EB2.tmp\nsWeb.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~sk-SK~7.1.7601.16492.cat

\\.\COM182

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~zh-HK~7.1.7601.16492.cat

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\res\transition_2.ico

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM50.tmp

C:\Windows\system32\TABCTL32.OCX

C:\Users\win7\AppData\Local\Temp\nsv7A59.tmp\583544826

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\acsint64.cat

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager\license.lnk

C:\Users\win7\AppData\Local\Temp\nsu83AF.tmp

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\Ksicfg.dll

C:\Users\win7\AppData\Local\Temp\is-NHHA7.tmp\_isetup\_shfoldr.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~sr-LATN-CS~7.1.7601.16492.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Help-CoreClientUAUEN-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nso5FD6.tmp\SimpleSC.dll

C:\wntdll.pdb

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\downloading_icon[1]

C:\Users\win7\AppData\Local\Temp\12aubfff5\appdata\\{B00DFF21-511E-4249-BCB9-EECC370D796B}

c:\2bbba39a5fce003b322b2010\update\branches.inf

C:\Users\win7\AppData\Local\Temp\nsbAB5F.tmp\1012881966

C:\Users\win7\AppData\Local\Temp\{6740F9E3-1353-47DD-9765-BA49FC4C3479}\YandexBarIE.msi

C:\Users\win7\AppData\Local\Temp\nsk86CB.tmp\1166890363

C:\Users\win7\AppData\Local\Temp\nsb1C68.tmp

Language.ini

c:\users\win7\appdata\local\tempfolder\ulynwioaa\afhgajpem.dat

C:\Windows\COMCTL32.OCX

C:\Users\win7\AppData\Local\Temp\nsd26B2.tmp

C:\Users\win7\AppData\Local\Temp\\~DFCA8CDC735C1A2BC1.TMP

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\service\perfctrl.dll

C:\Windows

c:\users\win7\appdata\local\tempfolder\zoidposi\wuelkmuhfine.dat

C:\Windows\system32\symbols\dll\CFVS_HookDll.pdb

\\.\COM128

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM62.tmp

C:\Users\win7\AppData\Local\Temp\7zS7BFD.tmp\515f05ca0c06e.tlb

C:\Data\Scripts\Gui\OptionsAssignments.gui

C:\Users\win7\AppData\Local\Temp\nsw2F00.tmp\nsWeb.dll

C:\Windows\ciplImageList.ocx

__tmp_rar_sfx_access_check_2196156

Avira Registry Cleaner\RegCleaner.dll

lJrYnjUOghDDY.dat

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BC2602F5489CFE3E69F81C6328A4C17C_ED04D8BCFC668EEC75B627867581DAC5

C:\Users\win7\AppData\Local\Temp\nso282A.tmp\333821725

32788R22FWJFW\dumphive.cfxxe

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\asl-btn-big-games-83x28x2.gif

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\trans[1]

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich8core.inf

C:\Users\win7\AppData\Local\Temp\is-0BDME.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\NetWork.dll

C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\OGGB4BWP\localhost\sample\SW3_197042.sol

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\skin\ThirdParty.gt

C:\Users\win7\AppData\Local\Temp\DIQ\flashplayer_154\DomaIQ10.exe

\\.\COM181

C:\ZapImages\asl-btn-big-about-83x28x2.gif

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\skin\ThirdParty.gt

COMCTL3N.OCX

C:\WINDOWS\FONTS\CONSOLA.TTF

C:\Windows\System32\mshta.exe

C:\Users\win7\AppData\Local\Temp\\~DF244957AFF486DC36.TMP

C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\security.config

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Libraries

C:\Users\win7\AppData\Local\Temp\nsx2FEA.tmp

C:\Users\win7\AppData\Local\Temp\7zS7336.tmp\lkniaejinldagieikdjacfpfchffkhhi\515f52b8123be9.82403050.js

C:\Users\win7\AppData\Local\Temp\\~DFC0AEC537FA8A340B.TMP

C:\Users\win7\AppData\Local\Temp\7zSB2EF.tmp\settings.ini

C:\Users\win7\AppData\Local\Temp\nsa753C.tmp\SimpleSC.dll

__tmp_rar_sfx_access_check_1057906

C:\Users\win7\Desktop\wkernelbase.pdb

C:\Users\win7\AppData\Local\Temp\nsv516D.tmp\725090903

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\acsmux.inf

C:\Users\win7\AppData\Local\Temp\nsq1DA5.tmp

C:\Users\win7\AppData\Local\Temp\nsp842D.tmp\NSISdl.dll

C:\Windows\ascbalo3N.dll

C:\Users\win7\AppData\Local\Temp\nsm6D0E.tmp\923909173

C:\Users\win7\AppData\Local\Temp\nsdAF56.tmp

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\dr.dll

32788R22FWJFW\License

C:\sample:Zone.Identifier

C:\Users\win7\AppData\Local\Temp\Setup Log 2015-11-16 #001.txt

C:\Users\win7\AppData\Local\Temp\IPMx2\All\865.inf

C:\Users\win7\AppData\Local\CSIDL_

C:\Program Files\Motion-Twin\haxe\lib/./nme/.dev

C:\Windows\system32\MSCOMCT2.OCX

C:\Users\win7\AppData\Local\Temp\nsn8C4A.tmp

C:\Program Files\Chameleon Clock\Sounds\Clocks\doorbell.mp3

C:\Users\win7\AppData\Local\Temp\nsf79FB.tmp\709972679

C:\Users\win7\AppData\Local\Temp\nsa798D.tmp

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\WinSetup-Release-web-deploy.msi

C:\Windows\POSLiveViewX_STable_8100.xml

C:\Users\win7\AppData\Local\Temp\nsf1C2F.tmp\\565191847

C:\Users\win7\AppData\Local\Temp\nsz1B72.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-Optional-Package~31bf3856ad364e35~amd64~en-US~8.0.7601.17514.cat

Msflxgrd.ocx

C:\PROGRA~2\WMACON~1\WMA-SH~1.EXE

C:\Users\win7\AppData\Local\Temp\nsa1F60.tmp\996606040

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\95R8KV3C.txt

C:\Windows\System32\Wbem\DVRArchiveViewer.pdb

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\BitTorrent.lnk

C:\Users\win7\AppData\Local\Temp\nsf1D5C.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Common-Modem-Drivers-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\vpnui.exe

C:\Windows\system32\ciplListBar3N.ocx

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ESB2ide.inf

C:\Windows\system32\spool\DRIVERS\x64\3\mxdwdui.ini

C:\Windows\ADLOC.dll

C:\Users\win7\AppData\Local\Temp\\~DFAD4807C81535F7F0.TMP

C:\Users\win7\AppData\Local\Temp\IPMx2\Vista\945.inf

C:\Users\win7\AppData\Local\Temp\nsq1DA6.tmp\160949597

C:\Users\win7\AppData\Local\Temp\nsq1443.tmp

C:\Users\win7\AppData\Local\Temp\7zS2C7E.tmp\jkmejkdfcnncpgjajbiahlekpebhcnhl\content.js

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ICM-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\WListViewEx.dll

F:\temp\files\Silverlight-prob.wmv

C:\Users\win7\AppData\Local\Temp\nsjFCDB.tmp\710108879

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ESB2usb.inf

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~fi-FI~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsz7681.tmp\665707608

C:\Users\win7\AppData\Local\Temp\IPMx2\All\dmi_pci.inf

\\.\COM241

C:\Windows\SysWOW64\stdole2.tlb

32788R22FWJFW\FD-SV.cmd

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-BLB-Client-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~da-DK~7.1.7601.16492.cat

C:\Windows\APLOC.dll

C:\Users\win7\AppData\Local\Temp\nsjF08F.tmp\198268457

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\res\mftogglebtn-down-solid.png

MSCOMCTL32.OCX

C:\Users\win7\AppData\Local\Temp\7zSB2EF.tmp\dpbejmkogknnkjbfcacgbckomaofefka\515f05cb477e45.02549708.js

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\_isetup\_shfoldr.dll

C:\Windows\system32\ieframe.dll

C:\WINDOWS\FONTS\TRADBDO.TTF

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\vpnagentutilities.dll

C:\Users\win7\AppData\Local\Temp\12auf94d4\CustomerJoinPlan.txt

\\.\COM194

C:\Users\win7\AppData\Local\Temp\nsy7596.tmp\619467634

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\vpnva64.sys

C:\Users\win7\AppData\Local\Microsoft\Windows\History\desktop.ini

C:\Windows\System32\drivers

C:\Users\win7\AppData\Local\Temp\nsn1711.tmp\nsWeb.dll

C:\Windows\OLEAUT32.DLL

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\Infobar\image\infobar_close_normal.png

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Network Shortcuts\desktop.ini

C:\Users\win7\Desktop\symbols\dll\wkernelbase.pdb

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Hyper-V-Common-Drivers-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\12aubfff5\appdata\\{B00D20E2-207A-431A-9712-E1279792681B}

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Debut Video Capture Software.lnk

C:\Windows\TABCTL3N.OCX

C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\enterprisesec.config

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich9core.inf

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\Dlg_icon.png

C:\Users\win7\AppData\Local\Temp\nswAEF6.tmp\1170874219

C:\Users\win7\AppData\Local\Temp\RarSFX0\JjVBchp.exe

__tmp_rar_sfx_access_check_2491609

\\.\COM116

C:\Users\win7\AppData\Local\Temp\DIQ\flashplayer_151\DomaIQ10.exe

C:\Users\win7\Links\desktop.ini

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Program Files\Motion-Twin\haxe\lib/./nme/.current

C:\Windows\System32\Wbem\CFVS_HookDll.pdb

C:\Users\win7\AppData\Local\Temp\nsg21EF.tmp

C:\Users\win7\AppData\Local\Temp\nsm225E.tmp\442134949

C:\Users\win7\AppData\Local\Temp\12aubfff5\appdata\\{3349050F-829E-4bb2-AACF-03E3A6B68677}

C:\Users\win7\AppData\Local\Temp\nsf1C2F.tmp\nsArray.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerDist-Client-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\scratch.bat

C:\Users\win7\AppData\Local\Temp\nsp1A98.tmp

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\botva2.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~uk-UA~7.1.7601.16492.cat

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\discounts.html

C:\Users\win7\AppData\Local\Temp\12auf94d4\QBInstaller.dll

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\vpndownloader.exe

C:\Windows\Microsoft.VisualBasic.pdb

C:\Python27\Scripts\exe\DVRArchiveViewer.pdb

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\OpenSource.html

C:\Users\win7\AppData\Local\Temp\\~DFFBE2752571DD86F3.TMP

C:\Users\win7\AppData\Local\Temp\\~DF3CC91CC72C2C9439.TMP

RICHTX32.DEP

C:\Users\win7\AppData\Local\Temp\nsz8067.tmp\420921765

C:\Users\win7\AppData\Local\Temp\nsx9767.tmp\1167639464

C:\WINDOWS\FONTS\MSYH.TTF

32788R22FWJFW\mynul.dat

C:\Users\win7\AppData\Roaming\Microsoft\Blend\14.0\FeedCache\ScriptedSandbox.exe

C:\Users\win7\AppData\Local\Temp\nsbAB10.tmp

C:\Users\win7\AppData\Local\Temp\GUM4330.tmp\DuuquUpdate.exe

C:\Users\win7\AppData\Local\Temp\7zS55DB.tmp\jjhklgikohjiaahlibnfgegobedhpgmf\515f05c5b9ccb7.51093443.js

c:\windows\system32\drivers\adpu320.sys

C:\Users\win7\AppData\Local\Temp\nsgDDA9.tmp

C:\Python27\Scripts\wkernel32.pdb

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\res\status_ico_transition.png

C:\Users\win7\AppData\Local\Temp\nsi26D2.tmp\1131546406

C:\Users\win7\AppData\Local\Temp\nsy8713.tmp\1150069636

C:\Users\win7\AppData\Local\Temp\nsxAE9B.tmp\639931717

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\Dialogs.dll

C:\Users\win7\AppData\Roaming\NLEThjJwJ

C:\Data\Textures\Gui\EditBoxBack4.dds

C:\Users\win7\AppData\Local\Temp\\~DFC9E396967BA2E7D3.TMP

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\Dlg_icon.png

32788R22FWJFW\ddsDo.sed

C:\Python27\CFVS_HookDll.pdb

C:\Windows\system32\ccrpprg6.ocx

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~lt-LT~7.1.7601.16492.cat

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res

C:\Windows\System32

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\23B523C9E7746F715D33C6527C18EB9D

C:\Users\win7\AppData\Local\Temp\12aubfff5\appdata\\thumb\http___qzone.qq.com_.jpg

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\top-line[1].gif

C:\WINDOWS\FONTS\MALGUN.TTF

C:\Users\win7\AppData\Local\Temp\nsh703E.tmp

c:\OkiDriver\OKIB2200B2400\OPPE_UM.dll

C:\Users\win7\AppData\Local\Temp\nsl7BEE.tmp

C:\ProgramData\fiH8GW

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\Dialogs.dll

C:\Users\win7\AppData\Roaming\rLEThjJw

C:\Users\win7\AppData\Local\Temp\7zS7BFD.tmp\515f05ca0c06e.dll

32788R22FWJFW\sed.cfxxe

C:\Windows\COMDLG32.OCX

C:\Windows\system32\COMCTL3N.DLL

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\_isetup\_setup64.tmp

C:\ProgramData\fiH8GW.exe

C:\WINDOWS\FONTS\TAHOMABD.TTF

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\carregando[1].gif

C:\Users\win7\AppData\Roaming\WIN7-PCp.jpg

c:\users\win7\appdata\local\tempfolder\mycovifazo\omiouspofs.dat

C:\Users\win7\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch

C:\Users\win7\AppData\Local\Temp\RarSFX0\VjxjVBc.exe

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\QRCode.dll

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\rdam0x K5ylogger 4.3.9\rdam0x K5ylogger 4.3.9.lnk

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\acsint.cat

\\?\C:\Users\win7\AppData\Local\Temp\install\84A010D\res\neutral.ico

C:\Users\win7\AppData\Local\Temp\nst2675.tmp\1002973400