<NULL>

EB10073F-A472-46E4-BADD-2741CE9C9507

Local\MidiMapper_modLongMessage_RefCnt

Local\ZonesCacheCounterMutex

Local\ZonesLockedCacheCounterMutex

Global\1f4541cc-fa79-11e5-a469-0800270b3b33

CarboniteSetup32

!IECompat!Mutex

Local\MSIMGSIZECacheMutex

_!SHMSFTHISTORY!_

3a8G5q9B4k8S4h0E1m5

Global\SearchWindowResults

SetupIntlMutex

mchMixCache$a9c

Frz_State

EpsonScanSetup_Mutex

Local\Opera/Installer/UI_lock

RAL3BBEAAA4

3BBEAAA4::WK

Global\7ba77c32-fa92-11e5-a469-0800270b3b33

klcp32_setup_mutex

RasPbFile

Global\MiddleRush

Global\0cfdb552-fa9d-11e5-a469-0800270b3b33

Local\RstrMgr3887CAB8-533F-4C85-B0DC-3E5639F8D511

Local\RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0000

{C::::sample}

Global\7dfc2cb7-faa8-11e5-a469-0800270b3b33

Local\WLBiciTransferMutex

Global\7dfc2cb6-faa8-11e5-a469-0800270b3b33

Global\SearchWebKnow

t "QMBlueScreenFixSetup_11.4.17347.218"

QMBlueScreenFixSetup_11.4.17347.218

Global\MSILOG_c9b63e7c1d18ee0gol.00000hcraeSxednaY_pmeT_lacoL_ataDppA_7niw_sresU_:C

WMSetup10RTM-UI

DirectInput.{89521361-AA8A-11CF-BFC7-444553540000}

DirectInput.{5944E682-C92E-11CF-BFC7-444553540000}

Global\saLogMutex

crfirefoxinstaller

KyUffThOkYwRRtgPP

Global\{758F66C0-4B4C-4c4a-81F9-D289C5CCE8E5}

Global\StrongSignal

Global\AmInst__Runing_1

Local\__DDrawExclMode__

Local\__DDrawCheckExclMode__

Local\DDrawWindowListMutex

Local\DDrawDriverObjectListMutex

Local\DisplayLinkSetupDisplayLink GraphicsPrevInstanceDetector

Picasa2

Picasa

MutexNPA_UnitVersioning_1724

crchromeinstaller

Global\IIF-{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}

EOSOptionRunning

Global\McciLogger::Logger::Mutex::3.0

Global\asw_pro_setup_mutex

PCSolClient

SpoolerMutex

CSP_ConnectorApp

Global\IIF-{1CEAC85D-2590-4760-800F-8DE5E91F3700}

MediaPlayerClassicW

95A5756335A574A364C6

_SHuassist.mtx

Global\SearchKnow

EAInstallerV1Setup

eed3bd3a-a1ad-4e99-987b-d7cb3fcfa7f0 - S-1-5-21-3979321414-2393373014-2172761192-1000

AMResourceMutex3

387B92CC-8773-42D6-90FD-AA737BEC6713

Global\GetTheResultsHub

Global\54e6487e-fbc0-11e5-a469-0800270b3b33

Global\51644d94-fbc6-11e5-a469-0800270b3b33

Global\_MSIExecute

SLDBGDWLD-AF6BF1C9-C5F0-4ada-BDAA-DD967FBF2B32

HKAB32DBA6DDE1

Global\IIF-

GlobalNotifier-{36DAAA2E-0C25-46B6-A155-7EAECAC16DC7}

SUC-NORMAL-MODE2005

IGFXTRAYMUTEX

Global\WindowsUpdateTracingMutex

t 'A309 DeviceStage 1.0.0.1'

A309 DeviceStage 1.0.0.1

WinRAR_Busy

SetupWatson_Mutex_Name

Global\netfxeventlog.1.0

RAZORWORKS-FR2

Global\IIF-{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}

fCDelphiOneInstanceAppCommunicationMessageId

RAL4D7C2858

4D7C2858::WK

{EFA23C47-D97B-44d2-BB9C-5CA16C7B02C2}

c3a15ebe-22fa-412b-9c01-0c3b18361ddc

CRemoteProcApiCalls::m_bShowLoadingScreen

CRemoteProcApiCalls::m_nMaxLoadingScreenOffers

CSDKApi::m_bSkipAllOffersTriggered

CSDKApi::m_bDeclineOfferTriggered

CSDKApi::m_bShowSkipAllButton

CSDKApi::m_bShowDeclineButton

Global\223CEB62-A2BC-4E33-BA9B-FCAC6DAAB1BE

m_wndDummyAPIMsgWindow

CTrackingCalls::m_bIsRunningFromReboot

CSDKApi::GetTimeMSFromStartup

CSDKApi::DevModeMessage

CSDKApi::m_strClientSessionID

CAPIMessageWindow::m_arrayProcIds

CRequestManager::m_aRequestPools

COfferManager::m_nLastError

COfferManager::m_SlowOfferMsTime

COfferManager::m_CurrentOfferValidationTimeStarted

COfferManager::m_bUseLanguageFilter

COfferManager::m_bOfferXMLParsed

COfferManager::m_bByPassFilterTests

COfferManager::m_apOffers

CTrackingCalls::m_maxWaitSecsReboot

CTrackingCalls::m_bHasCalledGetOffers

CTrackingCalls::m_bCanTrackOfferNotReady

COfferSettings::m_bCanShowInitLoadingScreen

COfferSettings::m_nShowLoadingProgressBarDelaySecs

COfferSettings::m_nMaxInitTimeMs

COfferSettings::m_bIsGetOffersComplete

COfferSettings::m_nAsyncInitResult

COfferSettings::m_bGetOffersResultValid

COfferSettings::m_nOffersRequested

CTrackingCalls::m_bHasShownOffer

CTrackingCalls::m_nSkipOffersValue

CTrackingCalls::m_nLastOCGetAsyncOfferStatus

COfferManager::m_bDisabled

CTrackingCalls::m_bHasQueuedTrackProductInstalled

CTrackingCalls::m_bHasQueuedTrackProductInstallFailed

CTrackingCalls::m_bCanTrack_product_install_failed

COfferSettings::m_mapUserFlags

CTrackingCalls::m_bHasScheduledRebootTask

DEFINED_LoadSDKDLL

Global\426F00E8-A1B3-4EB2-8FF8-0950920F5D6E

DEFINED_SetCmdLineValuesW

DEFINED_SetNoCandy

DEFINED_GetNoCandy

Sehjio Iohadkamm

{FEC7EF28-53E7-4f06-8F56-FA6D670C8D3C}

Global\{1540E76E-5D27-444e-8070-5FA04F1A3142}

Global\IIF-{65153EA5-8B6E-43b6-857B-C6E4FC25798A}

Global\BBLogServerRunV6

Global\BBLogSysRegMutex_V6

Global\BBLogSysReadAccMutex_V6

Global\BBLogSysWriteAccMutex_V6

gcc-shmem-tdm2-mutex_global_static_shmem

gcc-shmem-tdm2-mxattr_recursive_shmem

gcc-shmem-tdm2-pthr_root_shmem

gcc-shmem-tdm2-idListCnt_shmem

gcc-shmem-tdm2-idListMax_shmem

gcc-shmem-tdm2-idList_shmem

gcc-shmem-tdm2-idListNextId_shmem

gcc-shmem-tdm2-fc_key

gcc-shmem-tdm2-_pthread_key_lock_shmem

gcc-shmem-tdm2-_pthread_cancelling_shmem

gcc-shmem-tdm2-cond_locked_shmem_rwlock

gcc-shmem-tdm2-rwl_global_shmem

gcc-shmem-tdm2-_pthread_key_sch_shmem

gcc-shmem-tdm2-_pthread_key_max_shmem

gcc-shmem-tdm2-_pthread_key_dest_shmem

t "Global\vuze_leap_503d3fe5-d65f-4894-bc7d-ce1271f1486d"

Global\vuze_leap_503d3fe5-d65f-4894-bc7d-ce1271f1486d

Global\OurSearchWindow

4BAE4C76-44C3-418F-B715-6BBF5A65323E

{042B0D65-EF5B-4E3F-ADFF-86C726E4F053}

t "Updater Kinoroom Browser"

Updater Kinoroom Browser

DYMO QuickPrint Application

IF

uxJLpe1m

Global\edf5bd63-fcfd-11e5-a469-0800270b3b33

Global\edf5bd62-fcfd-11e5-a469-0800270b3b33

Global\GenerousDeal

Global\TITANIUM_MUTEX_SETUP

SAMPLE

t "TeamViewer_Win32_Instance_Mutex"

TeamViewer_Win32_Instance_Mutex

IObit_StartMenu8_InstallServices

{4196D960-68B0-4BEB-B312-3C1B4654068D} setup

SETUP.EXE

Global\WdsSetupLogInit

Global\SetupLog

ED1674F5-5165-49BF-B546-AE5343111540

{D58864DD-8398-44bd-84C2-0AA512B8FF3A}_S-1-5-21-3979321414-2393373014-2172761192-1000

Global\InternetExplorerInstaller

Global\ServicePackOrHotfix

Local\SkypeSetupMutex

ConnMonitor

Local\SUPEREASYDU_4E7965C1-F27A-44e1-90D1-46EBDFE07955

CH84B6AYQR5P0hygU/HNKw==

aamul.log

4VCuk4HUbDYrl9204wd2/g==

Local\Shell.CMruPidlList

Global\C::Users:win7:AppData:Local:Microsoft:Windows:Explorer:thumbcache_idx.db!rwWriterMutex

Global\C::Users:win7:AppData:Local:Microsoft:Windows:Explorer:thumbcache_32.db!dfMaintainer

Global\C::Users:win7:AppData:Local:Microsoft:Windows:Explorer:thumbcache_96.db!dfMaintainer

Global\C::Users:win7:AppData:Local:Microsoft:Windows:Explorer:thumbcache_256.db!dfMaintainer

Global\C::Users:win7:AppData:Local:Microsoft:Windows:Explorer:thumbcache_1024.db!dfMaintainer

Global\C::Users:win7:AppData:Local:Microsoft:Windows:Explorer:thumbcache_sr.db!dfMaintainer

Global\C::Users:win7:AppData:Local:Microsoft:Windows:Explorer:thumbcache_idx.db!ThumbnailCacheInit

Global\C::Users:win7:AppData:Local:Microsoft:Windows:Explorer:thumbcache_idx.db!rwReaderRefs

Global\_MSISETUP_{2956EBA1-9B5A-4679-8618-357136DA66CA}

Global\d686ea02-fd94-11e5-a469-0800270b3b33

madExceptSettingsMtx$acc

Wise365Mutex2012

Global\SonicTrain

gfhdfghdfh

sjBf+10

partner_minimutex

5629186B-0207-4659-AE5D-B09282932A86_519

Global\{6CEC65D9-BBF0-1EB2-ABB6-3F4C018ED570}

__CANON_DRIVER_UNINSTALLER__

Global\333c7c9a-fdb2-11e5-a469-0800270b3b33

Global\InnovateDirect

Global\_SetupTemplate_{313C107A-773F-41b9-9106-5022C06CBB0B}

mchMixCache$ad4

sample

asd

Global\DUMPREPOTERPROTECTOR

Global\Mutex_BIDUI18NGUID_conf.db

ChineseHacker-2

CLauncherApp::MohPA

Global\DigitalMore

MUTEX_SCBASE_RUNONCE

mutex_qqbrowser

t "1"

1

Global\.net clr networking

Global\C:/debug.log

MutexPolesskayaGlush*.*svchost.comexefile\shell\open\command "%1" %*@

2fedd336-1eb4-4f48-81e4-0de0e21c4a53

Global\{5EE357DB-BE24-40d1-9E7C-25C9EFBABA49}Google Toolbar

Global\{A5FD5037-E931-4b19-9B64-13F4B72C4033}

SHOW_ICON_XP_MUTEX

Global\{8180136E-B0DE-428f-BD8F-138E07C0407D}

RDPCLIP is already running

Local\RDPSoundStreamMutex

Local\LRIEElevationPolicyMutex

AIDA32 - Worldwide Sysinfo Tool

t 'Connectify'

Connectify

Global\OCMGRA83015A06AEE440DA97756D8BB5590A3

Angry Angel v3.0

Global\hpqFlash.log

HPQFlash-UniqueMutexName-GoHuskers

Global\PassandPlay

HPKONGINST{d76aa900-b3ad-4ccb-b1d3-a70f90295520}

e2cff14c-3623-41cd-a8c5-f4ef4e0fb087

QQDown_Tencent_SZCN_00

win75

OLEAUT32.DLL

SXS.DLL

kernel32

advapi32.dll

SspiCli.dll

ADVAPI32.dll

CRYPTBASE.dll

kernel32.dll

ole32.dll

user32.dll

user32

gdi32

C:\Windows\system32\kernel32.dll

C:\Users\win7\AppData\Local\Temp\LJNMG2\utility.dll

API-MS-Win-Core-LocalRegistry-L1-1-0.dll

C:\Windows\system32\ole32.dll

C:\Windows\syswow64\MSCTF.dll

shell32

SHELL32.dll

imm32.dll

API-MS-WIN-Service-Management-L1-1-0.dll

API-MS-WIN-Service-winsvc-L1-1-0.dll

RPCRT4.dll

MMDevAPI.DLL

propsys.dll

wdmaud.drv

MMDEVAPI.DLL

SETUPAPI.dll

SHLWAPI.dll

AUDIOSES.DLL

msacm32.drv

midimap.dll

C:\Windows\system32\Macromed\Common\SwSupport.dll

C:\Windows\system32\Macromed\Shockwave\SwSupport.dll

Secur32.dll

API-MS-WIN-DOWNLEVEL-SHLWAPI-L1-1-0.DLL

api-ms-win-downlevel-advapi32-l2-1-0.dll

OLEAUT32.dll

api-ms-win-downlevel-shlwapi-l2-1-0.dll

CFGMGR32.dll

C:\Windows\system32\WINMM.dll

C:\Windows\system32\Macromed\Flash\~SS9E8C.tmp

comctl32.dll

C:\sample

C:\Windows\system32\wer.dll

USER32.dll

SensApi.dll

werui.dll

DUI70.dll

Comctl32.dll

ntdll.dll

DUser.dll

C:\Windows\system32\DUser.dll

C:\Windows\system32\RICHED20.DLL

UxTheme.dll

dwmapi.dll

C:\Windows\system32\xmllite.dll

WINHTTP.dll

winhttp.dll

WS2_32.dll

IPHLPAPI.DLL

NSI.dll

API-MS-WIN-Service-Management-L2-1-0.dll

DNSAPI.dll

secur32.dll

ncrypt.dll

C:\Windows\SysWOW64\bcryptprimitives.dll

CRYPT32.dll

USERENV.dll

API-MS-Win-Security-SDDL-L1-1-0.dll

CRYPTSP.dll

cryptnet.dll

C:\Windows\system32\cryptnet.dll

profapi.dll

urlmon.dll

PROPSYS.dll

api-ms-win-downlevel-ole32-l1-1-0.dll

MSHTML.dll

ieframe.dll

WININET.dll

shell32.dll

mshtml.dll

IEFRAME.dll

API-MS-Win-Security-LSALookup-L1-1-0.dll

MLANG.dll

d2d1.dll

DWrite.dll

dxgi.dll

C:\DXGIDebug.dll

C:\Windows\system32\DXGIDebug.dll

gdi32.dll

setupapi.dll

WINTRUST.dll

d3d11.dll

D3D10Warp.dll

C:\Windows\system32\D3D10Warp.dll

msls31.dll

ntmarta.dll

cscapi.dll

mscms.dll

icm32.dll

api-ms-win-core-winrt-l1-1-0.dll

C:\Windows\System32\msxml3r.dll

security.dll

gdiplus.dll

msimg32.dll

WindowsCodecs.dll

uxtheme.dll

IMM32.dll

DWMAPI.DLL

imageres.dll

WINTRUST.DLL

C:\Windows\syswow64\CRYPT32.dll

imagehlp.dll

bcrypt.dll

C:\Users\win7\AppData\Local\Temp\GUM2DE2.tmp\goopdate.dll

VERSION.dll

ADVAPI32.DLL

dbghelp.dll

rpcrt4.dll

C:\Users\win7\AppData\Local\Temp\GUM2DE2.tmp\goopdateres_en.dll

SHFOLDER

C:\Users\win7\AppData\Local\Temp\nso21E1.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nso21E1.tmp\CityHash.dll

dhcpcsvc.DLL

C:\Windows\system32\ws2_32

WINSPOOL.DRV

COMCTL32.DLL

SHELL32.DLL

olepro32.dll

wwlib.dll

C:\Windows\system32\msi.dll

Advapi32.dll

Msftedit.dll

C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18834_none_72d38c5186679d48\gdiplus.dll

C:\Windows\SysWOW64\ieframe.dll

iertutil.dll

msi.dll

KERNEL32.DLL

KERNEL32.dll

GDI32.dll

comdlg32.dll

COMCTL32.dll

ws2_32.dll

inetmib1.dll

snmpapi.dll

C:\Windows\system32\urlmon.dll

C:\Windows\system32\riched20.dll

C:\Windows\SysWOW64\msi.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll

mscoree.dll

ntdll

C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\ole32.dll

AdvApi32.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll

PSAPI.DLL

shlwapi.dll

C:\dbghelp.dll

C:\Windows\system32\dbghelp.dll

wtsapi32.dll

C:\Windows\syswow64\KERNELBASE.dll

C:\Users\win7\AppData\Local\Temp\is-2I36Q.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-2I36Q.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-QS3UH.tmp\_isetup\_shfoldr.dll

shfolder.dll

C:\Users\win7\AppData\Local\Temp\is-QS3UH.tmp\_isetup\_iscrypt.dll

C:\Users\win7\AppData\Local\Temp\is-QS3UH.tmp\psvince.dll

C:\Users\win7\AppData\Local\Temp\is-QS3UH.tmp\WinCPUID.dll

C:\Windows\system32\imageres.dll

C:\Windows\system32\shell32.dll

C:\Users\win7\AppData\Local\Temp\is-QS3UH.tmp\ffSpkCfg.dll

C:\Windows\system32\DSOUND.dll

RICHED20.DLL

C:\Windows\System32\shdocvw.dll

RichEd20

C:\Users\win7\AppData\Local\Temp\nscA9A0.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsb2B6.tmp\System.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll

RichEd20.dll

mscorsec.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll

C:\Users\win7\AppData\Local\Temp\is-RCMOC.tmp\_isetup\_shfoldr.dll

Rstrtmgr.dll

C:\Windows\system32\shlwapi.dll

USER32

Comctl32

UXTHEME

C:\Windows\system32\EhStorShell.dll

C:\Windows\system32\ntshrui.dll

srvcli.dll

slc.dll

c:\windows\system32\imageres.dll

Kernel32.dll

WINSTA.dll

OLEACCRC.DLL

C:\Windows\system32\user32.dll

C:\sampleENU.dll

C:\sampleLOC.dll

wininet.dll

URLMON.DLL

Ntdll.dll

C:\Windows\SysWOW64\TSAPPCMP.DLL

COMCTL32

C:\Windows\SysWOW64\KERNEL32.DLL

MsiMsg.dll

C:\Windows\SysWOW64\OLE32.DLL

C:\Windows\SysWOW64\SHELL32.DLL

C:\Windows\SysWOW64\APPHELP.DLL

C:\Windows\SysWOW64\VERSION.DLL

C:\Windows\SysWOW64\sxs.DLL

C:\Windows\SysWOW64\MSCOREE.DLL

C:\Windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll

C:\Windows\SysWOW64\SHLWAPI.DLL

C:\Windows\SysWOW64\NTDLL.DLL

C:\Windows\SysWOW64\ADVAPI32.DLL

C:\Windows\System32\msxml6r.dll

Winhttp.dll

C:\Users\win7\AppData\Local\Temp\nso55AB.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nso55AB.tmp\UAC.dll

AdvAPI32

SECUR32

C:\Users\win7\AppData\Local\Temp\nso55AB.tmp\InstallOptions.dll

MSIMG32.dll

WINMM.dll

C:\Users\win7\AppData\Local\Temp\nsi8446.tmp\System.dll

ntshrui.dll

netutils.dll

api-ms-win-core-synch-l1-2-0

api-ms-win-core-fibers-l1-1-1

advapi32

api-ms-win-core-localization-l1-2-1

api-ms-win-appmodel-runtime-l1-1-1

ext-ms-win-kernel32-package-current-l1-1-0

COMDLG32.dll

MPR.dll

WSOCK32.dll

C:\Users\win7\AppData\Local\Temp\nstC8D5.tmp\LangDLL.dll

C:\Users\win7\AppData\Local\Temp\nstC8D5.tmp\Aero.dll

Dwmapi.dll

C:\Users\win7\AppData\Local\Temp\nstC8D5.tmp\BrandingURL.dll

C:\Users\win7\AppData\Local\Temp\nstC8D5.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nstC8D5.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nstC8D5.tmp\CustomLicense.dll

USP10.dll

C:\Users\win7\AppData\Local\Temp\nstC8D5.tmp\ToolTips.dll

C:\Users\win7\AppData\Local\Temp\nsnB817.tmp\LangDLL.dll

C:\Users\win7\AppData\Local\Temp\nsnB817.tmp\Aero.dll

C:\Users\win7\AppData\Local\Temp\nsnB817.tmp\BrandingURL.dll

C:\Users\win7\AppData\Local\Temp\nsnB817.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nsnB817.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsnB817.tmp\CustomLicense.dll

C:\Users\win7\AppData\Local\Temp\nsnB817.tmp\ToolTips.dll

C:\wbxtrace.dll

\ieatgpc.dll

C:\nbrpfw.dll

colorui.dll

dinput.dll

compstui.dll

inetres.dll

User32

C:\Users\win7\AppData\Local\Temp\nsk646C.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsk646C.tmp\SetupHelper.dll

C:\Users\win7\AppData\Local\Temp\nsk646C.tmp\SetupHelperENU.dll

C:\Users\win7\AppData\Local\Temp\nsk646C.tmp\SetupHelperLOC.dll

Ws2_32.dll

shlwapi

C:\Users\win7\AppData\Local\Temp\001b6984.a

C:\Users\win7\AppData\Local\Temp\001b6f02.a

jscript9.dll

C:\Windows\system32\Msimtf.dll

OLEACC.DLL

C:\Windows\system32\Oleacc.dll

dwrite.dll

C:\Windows\SysWOW64\NETAPI32.DLL

MSISIP.DLL

crypt32.dll

C:\Windows\SysWOW64\DUser.dll

C:\Windows\system32\WININET.dll

api-ms-win-core-sysinfo-l1-2-1

XInput1_4.dll

XInput1_3.dll

HID.DLL

SETUPAPI.DLL

WINMM.DLL

USER32.DLL

OPENGL32

VBoxOGL.dll

C:\Windows\system32\gdi32.dll

C:\Windows\system32\odbcint.dll

MSVCRT.DLL

atiadlxx.dll

atiadlxy.dll

C:\Users\win7\AppData\Local\Temp\nseC65F.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nseC65F.tmp\CityHash.dll

C:\Users\win7\AppData\Local\Temp\nsp7249.tmp\LangDLL.dll

C:\Users\win7\AppData\Local\Temp\nsp7249.tmp\Aero.dll

C:\Users\win7\AppData\Local\Temp\nsp7249.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nsp7249.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsp7249.tmp\nsExec.dll

Cabinet.dll

DEVRTL.dll

NTDLL

SSPICLI

Iphlpapi.dll

C:\Users\win7\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Program Files\Microsoft Silverlight\sllauncher.exe

ddraw.dll

C:\Windows\SysWOW64\DDRAW.dll

C:\Windows\SysWOW64\jscript9.dll

C:\Users\win7\AppData\Local\Temp\DL2.tmp\NIVO\DisplayLinkUsbCo2.dll

RICHED32.DLL

C:\Users\win7\AppData\Local\Temp\nsg180A.tmp\System.dll

mscoree

C:\Users\win7\AppData\Local\Temp\nsg180A.tmp\StartMenu.dll

C:\Users\win7\AppData\Local\Temp\nsk4EE9.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsk4EE9.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nsk4EE9.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\is-63IJ0.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-63IJ0.tmp\idp.dll

KERNEL32

C:\Windows\syswow64\WININET.dll

urlmon

ole32

winhttp

C:\Windows\system32\AdvApi32.dll

C:\Windows\system32\Msi.dll

feclient.dll

C:\Users\win7\AppData\Local\Temp\is-TVBA1.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-TVBA1.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-400K7.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-400K7.tmp\PSInstallHelper.dll

C:\Users\win7\AppData\Local\Temp\is-400K7.tmp\idp.dll

MSFTEDIT.DLL

C:\Users\win7\AppData\Local\Temp\nskE33E.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nskE33E.tmp\ltnsis.dll

C:\Users\win7\AppData\Local\Temp\nskE33E.tmp\InstallOptions.dll

C:\Windows\system32\sfc.dll

C:\Users\win7\AppData\Local\Temp\7zSFEC8.tmp\pstubxx.exe

C:\Users\win7\AppData\Local\Temp\is-2V446.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nszF0DF.tmp\AdvSplash.dll

C:\Users\win7\AppData\Local\Temp\nszF0DF.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nszF0DF.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\nszF0DF.tmp\AlwaysOnTop.dll

C:\Users\win7\AppData\Local\Temp\nszF0DF.tmp\InstallOptions.dll

Rasapi32.dll

C:\Picasa3i18n.dll

iphlpapi.dll

C:\Users\win7\AppData\Local\Temp\nsdD6F2.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nsdD6F2.tmp\InstallOptions.dll

d3d9.dll

oleaut32.dll

winmm.dll

winspool.drv

d3d10_1.dll

VBoxDisp.dll

WS2_32.DLL

Fwpuclnt.dll

IdnDL.dll

Normaliz.dll

C:\Users\win7\AppData\Local\Temp\nsc2A80.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsc2A80.tmp\nsisXML.dll

MSVCRT.dll

C:\Users\win7\AppData\Local\Temp\nse7083.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nse7083.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nse7083.tmp\StartMenu.dll

C:\Users\win7\AppData\Local\Temp\is-0PVQN.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-0PVQN.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-1J1QC.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nsn1C20.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsn1C20.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nsn1C20.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nsn1C20.tmp\ServicesHelper.dll

Riched20.dll

C:\Windows\SysWOW64\msls31.dll

C:\Users\win7\AppData\Local\Temp\is-3G867.tmp\_isetup\_shfoldr.dll

LogRecord.dll

C:\Users\win7\AppData\Local\Temp\nsz9A18.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\nsz9A18.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsz9A18.tmp\Banner.dll

C:\Users\win7\AppData\Local\Temp\nsz9A18.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nsz9A18.tmp\nsExec.dll

C:\Windows\system32\dwmapi.dll

C:\Users\win7\AppData\Local\Temp\AIR1D32.tmp\\Adobe AIR\Versions\1.0\Adobe AIR.dll

version.dll

Versions\1.0\Adobe AIR.dll

C:\Users\win7\AppData\Local\Temp\AIR1D32.tmp\Adobe AIR\Versions\1.0\Resources\WebKit.dll

C:\Users\win7\AppData\Local\Temp\AIR1D32.tmp\Adobe AIR Installer.exe

C:\ohotfixr.dll

C:\Windows\SysWOW64\timeout.exe

C:\Users\win7\AppData\Local\Temp\nsvD464.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsvD464.tmp\InstallOptions.dll

C:\Program Files\Alwil Software\Avast4\ashBase.dll

mciavi32.dll

C:\Windows\system32\winhttp.dll

C:\Users\win7\AppData\Local\Temp\is-GU6F5.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-GU6F5.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-824K9.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-824K9.tmp\ISDone.dll

C:\Users\win7\AppData\Local\Temp\is-824K9.tmp\isskin.dll

C:\Users\win7\AppData\Local\Temp\is-824K9.tmp\b2p.dll

C:\Users\win7\AppData\Local\Temp\is-824K9.tmp\botva2.dll

GDIPlus

C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18834_none_72d38c5186679d48\GDIPlus.DLL

C:\Users\win7\AppData\Local\Temp\is-GU6F5.tmp\sample.tmp

UXTHEME.DLL

C:\Users\win7\AppData\Local\Temp\is-824K9.tmp\skin.tm

C:\Users\win7\AppData\Local\Temp\is-824K9.tmp\CallbackCtrl.dll

newdev.dll

cfgmgr32.dll

C:\Users\win7\AppData\Local\Temp\nsl91B4.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nsl91B4.tmp\System.dll

uxtheme

C:\Users\win7\AppData\Local\Temp\nsh9E88.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\pft2278~tmp\dt_inst.dll

C:\Windows\system32\ntdll.dll

C:\Windows\system32\bcrypt.dll

C:\Windows\system32\USP10.dll

C:\Windows\system32\msls31.dll

C:\Windows\system32\version.dll

C:\Windows\system32\mpr.dll

C:\Windows\system32\uxtheme.dll

C:\Windows\system32\gdiplus.dll

atlthunk.dll

ComCtl32.dll

NETAPI32.DLL

C:\Users\win7\AppData\Local\Temp\nsn78E0.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsn78E0.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nsn78E0.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\IIF9475.tmp\ar-SA\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF9475.tmp\cs-CZ\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF9475.tmp\da-DK\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF9475.tmp\de-DE\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF9475.tmp\el-GR\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF9475.tmp\en-US\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF9475.tmp\es-ES\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF9475.tmp\fi-FI\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF9475.tmp\fr-FR\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF9475.tmp\he-IL\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF9475.tmp\hu-HU\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF9475.tmp\it-IT\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF9475.tmp\ja-JP\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF9475.tmp\ko-KR\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF9475.tmp\nb-NO\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF9475.tmp\nl-NL\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF9475.tmp\pl-PL\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF9475.tmp\pt-BR\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF9475.tmp\pt-PT\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF9475.tmp\ru-RU\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF9475.tmp\sk-SK\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF9475.tmp\sl-SI\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF9475.tmp\sv-SE\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF9475.tmp\th-TH\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF9475.tmp\tr-TR\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF9475.tmp\zh-CN\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF9475.tmp\zh-TW\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF9475.tmp\en-US\resource.dll.mui

C:\Windows\system32\MSFTEDIT.dll

SPINF.dll

C:\mpciconlib.dll

C:\Users\win7\AppData\Local\Temp\is-C4MR0.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-C4MR0.tmp\apxInst.dll

C:\Windows\system32\csrcs.exe

C:\Windows\system32\twext.dll

C:\Windows\system32\syncui.dll

C:\Windows\system32\acppage.dll

C:\Windows\System32\csrcs.exe

C:\Users\win7\AppData\Local\Temp\suicide.bat

C:\Windows\system32\Winsta.dll

C:\Windows\SysWOW64\taskkill.exe

C:\Users\win7\AppData\Local\Temp\nsy7202.tmp\INetC.dll

WININET

C:\Users\win7\AppData\Local\Temp\nsy7202.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsy7202.tmp\nsExec.dll

C:\Users\win7\AppData\Local\Temp\nse73F7.tmp.bat

C:\Users\win7\AppData\Local\Temp\is-UUI7B.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-UUI7B.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-TSIB8.tmp\_isetup\_shfoldr.dll

dsound.dll

C:\Windows\system32\dsound.dll

C:\PProcDLL.dll

PProcDLL.dll

msdmo.dll

C:\Users\win7\AppData\Local\Temp\GUM847A.tmp\goopdate.dll

C:\Users\win7\AppData\Local\Temp\GUM847A.tmp\goopdateres_en.dll

C:\Users\win7\AppData\Local\Temp\nsd56E8.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsd56E8.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nsd56E8.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nsd56E8.tmp\ServicesHelper.dll

C:\Windows\system32\winmm.dll

C:\Windows\system32\ws2_32.dll

C:\Windows\system32\iphlpapi.dll

MSVCP90.dll

MSVCR90.dll

C:\Windows\system32\Mmtimer.dll

C:\Windows\system32\wintab32.dll

C:\Users\win7\AppData\Local\Temp\nsp21E.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsp21E.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nsp21E.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nsp21E.tmp\ServicesHelper.dll

C:\Users\win7\AppData\Local\Temp\is-NJF0H.tmp\_isetup\_shfoldr.dll

C:\Windows\system32\DBGHELP.DLL

C:\Windows\system32\KERNEL32.DLL

C:\Users\win7\AppData\Local\Temp\IIF3080.tmp\ar-SA\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF3080.tmp\cs-CZ\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF3080.tmp\da-DK\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF3080.tmp\de-DE\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF3080.tmp\el-GR\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF3080.tmp\en-US\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF3080.tmp\es-ES\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF3080.tmp\fi-FI\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF3080.tmp\fr-FR\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF3080.tmp\he-IL\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF3080.tmp\hu-HU\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF3080.tmp\it-IT\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF3080.tmp\ja-JP\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF3080.tmp\ko-KR\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF3080.tmp\nb-NO\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF3080.tmp\nl-NL\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF3080.tmp\pl-PL\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF3080.tmp\pt-BR\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF3080.tmp\pt-PT\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF3080.tmp\ru-RU\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF3080.tmp\sk-SK\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF3080.tmp\sl-SI\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF3080.tmp\sv-SE\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF3080.tmp\th-TH\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF3080.tmp\tr-TR\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF3080.tmp\zh-CN\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF3080.tmp\zh-TW\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF3080.tmp\en-US\resource.dll.mui

MSFTEDIT.dll

wsock32.dll

NTDLL.DLL

d3d8.dll

DSOUND.dll

mscat32.dll

wintrust.dll

C:\Users\win7\AppData\Local\Temp\nsq8E1D.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsx490B.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsx490B.tmp\bassmod.dll

C:\Users\win7\AppData\Local\Temp\nsx490B.tmp\brandingurl.dll

C:\Windows\system32\VB6ES.DLL

C:\Windows\SysWOW64\SAGE.DLL

C:\Users\win7\AppData\Local\Temp\nsiCE15.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsiCE15.tmp\CityHash.dll

C:\Users\win7\AppData\Local\Temp\is-F013D.tmp\_isetup\_shfoldr.dll

\sldBgDwldResu.dll

libx264-128.dll

C:\Users\win7\AppData\Local\Temp\nssBB7C.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nssBB7C.tmp\StartMenu.dll

C:\Windows\SysWOW64\cryptnet.dll

C:\Users\win7\AppData\Local\Temp\nss223A.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nss223A.tmp\StartMenu.dll

\mso.dll

MSO.dll

C:\zlib.pyd

Kernel32

Shlwapi.dll

Shell32.dll

Urlmon.dll

C:\rarlng.dll

riched32.dll

cabinet.dll

IMAGEHLP.DLL

mpr.dll

MSLS31.dll

C:\Windows\system32\ExplorerFrame.dll

OLEAUT32

MSCOREE.DLL

C:\Program Files\Internet Explorer\iexplore.exe

C:\Windows\system32\mspaint.exe

C:\Windows\System32\mspaint.exe

C:\Windows\system32\NOTEPAD.EXE

C:\Windows\System32\notepad.exe

c:\windows\system32\mspaint.exe

c:\windows\system32\notepad.exe

c:\program files\internet explorer\iexplore.exe

C:\Users\win7\AppData\Local\Temp\nspBE75.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nspBE75.tmp\System.dll

riched20.dll

C:\Autodesk\AutoCAD_2016_Italian_Win_32_64bit_wi_it-IT\AutodeskInstallNow.exe

C:\Users\win7\AppData\Local\Temp\GLCE048.tmp

C:\Users\win7\AppData\Local\Temp\GLKE059.tmp

C:\PROGRA~2\DILLIS~1\FF9SER~1\UNWISE.EXE

C:\PROGRA~2\DILLIS~1\FF9SER~1\FFINDE~1.EXE

C:\PROGRA~2\DILLIS~1\FF9SER~1\FF9DOC~1.EXE

C:\PROGRA~2\DILLIS~1\FF9SER~1\Config.xml

CABINET.DLL

C:\PROGRA~2\DILLIS~1\FF9SER~1\LUCENE~1.DLL

C:\PROGRA~2\DILLIS~1\FF9SER~1\LUCENE~2.DLL

C:\PROGRA~2\DILLIS~1\FF9SER~1\LUCENE~3.DLL

C:\PROGRA~2\DILLIS~1\FF9SER~1\LUCENE~4.DLL

C:\PROGRA~2\DILLIS~1\FF9SER~1\LU83A2~1.DLL

C:\PROGRA~2\DILLIS~1\FF9SER~1\LUDE85~1.DLL

C:\PROGRA~2\DILLIS~1\FF9SER~1\LU0FA4~1.DLL

C:\PROGRA~2\DILLIS~1\FF9SER~1\LUE6F7~1.DLL

C:\PROGRA~2\DILLIS~1\FF9SER~1\LU7D46~1.DLL

C:\PROGRA~2\DILLIS~1\FF9SER~1\SNOWBA~1.DLL

C:\PROGRA~2\DILLIS~1\FF9SER~1\FFINDE~1.DLL

C:\PROGRA~2\DILLIS~1\FF9SER~1\HIGHLI~1.DLL

C:\PROGRA~2\DILLIS~1\FF9SER~1\FFSERV~1.EXE

C:\PROGRA~2\DILLIS~1\FF9SER~1\FF9CON~1.EXE

C:\PROGRA~2\DILLIS~1\FF9SER~1\FF9SER~1.EXE

C:\PROGRA~2\DILLIS~1\FF9SER~1\FF9SER~1.CON

C:\PROGRA~2\DILLIS~1\FF9SER~1\ffdrobj.pbd

C:\PROGRA~2\DILLIS~1\FF9SER~1\ffdw1.pbd

C:\PROGRA~2\DILLIS~1\FF9SER~1\ffdw2.pbd

C:\PROGRA~2\DILLIS~1\FF9SER~1\ffdw3.pbd

C:\PROGRA~2\DILLIS~1\FF9SER~1\ffdw4.pbd

C:\PROGRA~2\DILLIS~1\FF9SER~1\ffi9dw.pbd

C:\PROGRA~2\DILLIS~1\FF9SER~1\libjcc.dll

C:\PROGRA~2\DILLIS~1\FF9SER~1\LIBJUT~1.DLL

C:\PROGRA~2\DILLIS~1\FF9SER~1\pbdwe115.dll

C:\PROGRA~2\DILLIS~1\FF9SER~1\pbodb115.ini

C:\PROGRA~2\DILLIS~1\FF9SER~1\Pbodb115.dll

C:\PROGRA~2\DILLIS~1\FF9SER~1\pbrtc115.dll

C:\PROGRA~2\DILLIS~1\FF9SER~1\Pbshr115.dll

C:\PROGRA~2\DILLIS~1\FF9SER~1\pbtra115.dll

C:\PROGRA~2\DILLIS~1\FF9SER~1\pbdpl115.dll

C:\PROGRA~2\DILLIS~1\FF9SER~1\pbvm115.dll

C:\PROGRA~2\DILLIS~1\FF9SER~1\Zlib.dll

C:\PROGRA~2\DILLIS~1\FF9SER~1\gdiplus.dll

C:\PROGRA~2\DILLIS~1\FF9SER~1\atl71.dll

C:\PROGRA~2\DILLIS~1\FF9SER~1\mfc71u.dll

C:\PROGRA~2\DILLIS~1\FF9SER~1\msvci70.dll

C:\PROGRA~2\DILLIS~1\FF9SER~1\msvcp70.dll

C:\PROGRA~2\DILLIS~1\FF9SER~1\msvcp71.dll

C:\PROGRA~2\DILLIS~1\FF9SER~1\msvcr70.dll

C:\PROGRA~2\DILLIS~1\FF9SER~1\MICROS~1.MAN

C:\PROGRA~2\DILLIS~1\FF9SER~1\msvcr80.dll

C:\Users\win7\AppData\Local\Temp\nsy2FB2.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\{e46eca4f-393b-40df-9f49-076faf788d83}\.ba1\wixstdba.dll

C:\Windows\system32\wups.dll

C:\Windows\system32\wu.upgrade.ps.dll

C:\Windows\system32\Riched20.dll

C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll

C:\Users\win7\AppData\Local\Temp\nsvE0A6.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsvE0A6.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nsvE0A6.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\is-I2TMP.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-I2TMP.tmp\psvince.dll

C:\Users\win7\AppData\Local\Temp\is-VPL4K.tmp\_isetup\_shfoldr.dll

mozglue.dll

C:\Users\win7\AppData\Local\Temp\is-ENGLL.tmp\_isetup\_shfoldr.dll

C:\\win764\setup.exe

C:\Users\win7\AppData\Local\Temp\nsbC4E5.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsw892D.tmp\System.dll

C:\Windows\system32\VBoxMRXNP.dll

C:\Windows\System32\drprov.dll

C:\Windows\System32\ntlanman.dll

C:\Windows\System32\davclnt.dll

install.res.1033.dll

C:\Windows\SysWOW64\\msi.dll

c:\7635da084e7cc1e4729b9f020bcae3\CustomText.1033.dll

C:\Windows\system32\RichEd20.dll

C:\Users\win7\AppData\Local\Temp\is-CBRVV.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-CBRVV.tmp\sample.EN

C:\MSVCR90.dll

C:\msvcm90.dll

msvcm90.dll

C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_50916076bcb9a742\msvcm90.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System\908ba9e296e92b4e14bdc2437edac603\System.ni.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\716ee14dc9aafde2b5f7f387d842661d\System.ServiceProcess.ni.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5a401fd2a7689ff13fb54182953f9c40\System.Drawing.ni.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\6949c4470a81970ec3de0a575d93babc\System.Windows.Forms.ni.dll

C:\Windows\system32\wucltux.dll

C:\Steam.dll

dinput8.dll

dpnhpast.dll

C:\Windows\system32\dinput8.dll

getkey.dll

C:\Users\win7\AppData\Local\Temp\nsu831D.tmp\System.dll

Shell32

C:\Windows\System32\imageres.dll

C:\Users\win7\AppData\Local\Temp\is-RFKM6.tmp\_isetup\_shfoldr.dll

resutils.dll

C:\Users\win7\AppData\Local\Temp\is-MTOUR.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-MTOUR.tmp\sample.EN

C:\Windows\system32\LecSetup2.dll

C:\AICommand.bat

credui.dll

msvcrt.dll

psapi.dll

C:\Windows\System32\svchost.exe

System

C:\Windows\System32\wininit.exe

C:\Windows\System32\services.exe

C:\Windows\System32\lsass.exe

C:\Windows\System

C:\Users\win7\AppData\Local\Temp\is-7K8KS.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-7K8KS.tmp\isxdl.dll

api-ms-win-security-systemfunctions-l1-1-0

C:\Users\win7\AppData\Local\Temp\0NObhxHBGR.tmp\htmlayout.dll

OLEACC.dll

HTMLayout.dll

C:\Users\win7\AppData\Local\Temp\nst9A11.tmp\System.dll

C:\Windows\system32\UxTheme.dll

C:\Users\win7\AppData\Roaming\downer\xldl.dll

DSound.dll

C:\Windows\system32\DSound.dll

Winmm.dll

C:\Users\win7\AppData\Local\Temp\nsn1F23.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsn1F23.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\nsn1F23.tmp\g\gtapi_signed

C:\Users\win7\AppData\Local\Temp\nsn1F23.tmp\g\gcapi_dll

C:\Users\win7\AppData\Local\Temp\nsn1F23.tmp\ButtonEvent.dll

C:\Users\win7\AppData\Local\Temp\nsn1F23.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nsn1F23.tmp\g\pfWWW

C:\Users\win7\AppData\Local\Temp\GLC4F2A.tmp

C:\Users\win7\AppData\Local\Temp\GLK4F5A.tmp

C:\Windows\Temp\mgxoschk.dll

C:\Windows\Temp\mgxoschkENU.dll

C:\Windows\Temp\mgxoschkLOC.dll

C:\Windows\system32\mgxoschk.dll

C:\Windows\system32\mgxoschkENU.dll

C:\Windows\system32\mgxoschkLOC.dll

C:\Users\win7\AppData\Local\Temp\is-FSKQ7.tmp\OCSetupHlp.dll

Crypt32.dll

C:\Users\win7\AppData\Local\Temp\is-FSKQ7.tmp\GCountry.dll

C:\Users\win7\AppData\Local\Temp\is-2H5H3.tmp\_isetup\_shfoldr.dll

WDRTOOL.DLL

Wlanapi.dll

Wzcsapi.dll

SecretaryshipOutfield

NaturallyPouting

NotificationNortherner

C:\Windows\system32\UXTHEME

C:\Windows\system32\USERENV

C:\Windows\system32\SETUPAPI

C:\Windows\system32\SHFOLDER

C:\Users\win7\AppData\Local\Temp\nsl4F91.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsl4F91.tmp\UserInfo.dll

C:\Windows\system32\RichEd20

C:\Users\win7\AppData\Local\Temp\nsl4F91.tmp\ButtonEvent.dll

C:\Users\win7\AppData\Local\Temp\nsl4F91.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nsl4F91.tmp\nsProcess.dll

C:\Program Files\CCleaner\CCleaner.exe

C:\Users\win7\AppData\Local\Temp\nsl4F91.tmp\inetc.dll

C:\Users\win7\AppData\Local\Temp\is-3PPAK.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-3PPAK.tmp\ISDone.dll

C:\Users\win7\AppData\Local\Temp\is-3PPAK.tmp\b2p.dll

C:\Users\win7\AppData\Local\Temp\is-3PPAK.tmp\botva2.dll

C:\Windows\system32\atl.dll

C:\Windows\system32\ntmarta.dll

C:\Windows\system32\powrprof.dll

C:\Windows\system32\d3d9.dll

C:\Windows\system32\d3d8thk.dll

C:\Windows\system32\mscms.dll

C:\Windows\system32\userenv.dll

C:\Windows\system32\profapi.dll

C:\Windows\system32\ieframe.dll

C:\Windows\system32\oleacc.dll

C:\Windows\system32\oleaccrc.dll

C:\Windows\system32\msasn1.dll

C:\Windows\system32\crypt32.dll

C:\Windows\system32\psapi.dll

C:\Windows\system32\advapi32.dll

C:\Windows\system32\propsys.dll

C:\Windows\system32\secur32.dll

C:\Windows\system32\pcacli.dll

C:\Windows\system32\devrtl.dll

C:\Windows\system32\apphelp.dll

C:\Windows\system32\Shell32.dll

C:\Users\win7\AppData\Local\Temp\{D7320363-073C-458D-A310-F10481F8D045}\fpb.tmp

C:\Users\win7\AppData\Local\Temp\{29BB7895-B437-4BE4-A530-9CF8BBAD692F}\fpb.tmp

C:\Windows\system32\Advapi32.dll

C:\Windows\system32\Msimg32.dll

atl.dll

C:\Users\win7\AppData\Local\Temp\nsc878E.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nszA592.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nszA592.tmp\CityHash.dll

C:\Users\win7\AppData\Local\Temp\nsb5D1A.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsb5D1A.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nsb5D1A.tmp\InstallOptions.dll

C:\1033\sample.dll

C:\9\sample.dll

SHFolder.dll

KWData.4.1.0.99957.dll

KWDebug.4.1.0.99957.dll

KWDebugDll_win32.4.1.0.99957.dll

KWExternLib.4.1.0.99957.dll

KWMainLib.4.1.0.99957.dll

KWMainLibData.4.1.0.99957.dll

KWMainLib_win.4.1.0.99957.dll

KWUtils.4.1.0.99957.dll

Kwift_DP.4.1.0.99957.dll

Wtsapi32.dll

KWMainlib.4.1.0.99957.dll

C:\Users\win7\AppData\Local\Temp\nsj5B21.tmp\UAC.dll

ADVAPI32

ShlWAPI

C:\Users\win7\AppData\Local\Temp\nsj5B21.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsj5B21.tmp\NSISPluginW.dll

C:\Users\win7\AppData\Local\Temp\nsj5B21.tmp\NSISPlugin.dll

C:\Users\win7\AppData\Local\Temp\nsj5B21.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsj5B21.tmp\nsDialogs.dll

UIAutomationCore.dll

C:\Users\win7\AppData\Local\Temp\nsj5B21.tmp\nsisFirewallW.dll

mapi32x.dll

C:\Program Files\Internet Explorer\IEXPLORE.EXE

powrprof.dll

IMGUTIL.DLL

C:\Users\win7\AppData\Local\Temp\nsh5576.tmp\LangDLL.dll

C:\Users\win7\AppData\Local\Temp\nsh5576.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\{33A254F0-31F8-4EB4-B3FD-9BA72FD0395B}\_Setup.dll

C:\Users\win7\AppData\Local\Temp\{33A254F0-31F8-4EB4-B3FD-9BA72FD0395B}\Disk1\ISSetup.dll

C:\Users\win7\AppData\Local\Temp\{1F4545E3-1D7B-4557-83EC-867463B34059}\{4BAE4C76-44C3-418F-B715-6BBF5A65323E}\ISRT.dll

C:\Users\win7\AppData\Local\Temp\{1F4545E3-1D7B-4557-83EC-867463B34059}\{4BAE4C76-44C3-418F-B715-6BBF5A65323E}\_isres.dll

C:\Users\win7\AppData\Local\Temp\{1F4545E3-1D7B-4557-83EC-867463B34059}\{4BAE4C76-44C3-418F-B715-6BBF5A65323E}\_isuser.dll

C:\Windows\system32\AppHelp.dll

C:\Users\win7\AppData\Local\Temp\{33A254F0-31F8-4EB4-B3FD-9BA72FD0395B}\Disk1\data1.hdr

C:\Users\win7\AppData\Local\Temp\{1F4545E3-1D7B-4557-83EC-867463B34059}\{4BAE4C76-44C3-418F-B715-6BBF5A65323E}\_ISRes.dll

C:\temp\devcon.bat

C:\Users\win7\AppData\Local\Temp\{1F4545E3-1D7B-455B-83EC-867463B34059}\{4BAE4C76-44C3-418F-B715-6BBF5A65323E}\ISRT.dll

C:\Users\win7\AppData\Local\Temp\{1F4545E3-1D7B-455B-83EC-867463B34059}\{4BAE4C76-44C3-418F-B715-6BBF5A65323E}\_isres.dll

C:\Users\win7\AppData\Local\Temp\{1F4545E3-1D7B-455B-83EC-867463B34059}\{4BAE4C76-44C3-418F-B715-6BBF5A65323E}\_isuser.dll

C:\Users\win7\AppData\Local\Temp\{1F4545E3-1D7B-455B-83EC-867463B34059}\{4BAE4C76-44C3-418F-B715-6BBF5A65323E}\_ISRes.dll

Msi.DLL

kbdus.dll

C:\Users\win7\AppData\Local\Temp\is-UG272.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-QD66G.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-QD66G.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-2J06T.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-2J06T.tmp\ISDone.dll

C:\Users\win7\AppData\Local\Temp\is-2J06T.tmp\isskin.dll

C:\Users\win7\AppData\Local\Temp\is-2J06T.tmp\b2p.dll

C:\Users\win7\AppData\Local\Temp\is-2J06T.tmp\botva2.dll

C:\Users\win7\AppData\Local\Temp\is-QD66G.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\is-2J06T.tmp\skin.tm

C:\Users\win7\AppData\Local\Temp\is-2J06T.tmp\CallbackCtrl.dll

MSVCP60.dll

C:\Users\win7\AppData\Local\Temp\nslE094.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nslE094.tmp\CityHash.dll

C:\Users\win7\AppData\Local\Temp\GLK461F.tmp

C:\Users\win7\AppData\Local\Temp\msvcr71.dll

MPR.DLL

C:\Users\win7\AppData\Local\Temp\GLF5298.tmp

C:\Users\win7\AppData\Local\Temp\GLM4A47.tmp

WININET.DLL

C:\SMARTD~1\UNINST~1.EXE

C:\SMARTD~1\Messages.exe

C:\SMARTD~1\SD.exe

C:\SMARTD~1\SDUI.exe

C:\SMARTD~1\DLLs.exe

C:\SMARTD~1\Tooltips.exe

C:\Users\win7\AppData\Local\Temp\oc_CB92\OCDLL.DLL

\realplay.exe

C:\Users\win7\AppData\Local\Temp\rninst~0\ui_data\inst_config\compat.dll

C:\Users\win7\AppData\Local\Temp\nsy6BB.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\is-PKBAL.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-PKBAL.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-O30DA.tmp\_isetup\_shfoldr.dll

C:\32788R22FWJFW\SWREG.ENU

C:\32788R22FWJFW\SWREG.EN

C:\Users\win7\AppData\Local\Temp\000b501e.a

C:\Users\win7\AppData\Local\Temp\000b584c.a

C:\Users\win7\AppData\Local\Temp\nsq70D7.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsq70D7.tmp\nsDialogs.dll

C:\PYTHON27.DLL

Kernel32.DLL

C:\Windows\syswow64\dbghelp.dll

iexplore.exe

C:\Users\win7\AppData\Local\Temp\nsz6F85.tmp\internalsample_icon.ico

C:\Users\win7\AppData\Local\Temp\nsz6F85.tmp\DXGIDebug.dll

C:\Plugins\lwf.dll

C:\Plugins\ldf.dll

C:\Plugins\lwf_jp2.dll

C:\Plugins\ldf_jpm.dll

C:\Plugins\IlmImf.dll

C:\language\xnviewen.dll

OLE32.DLL

C:\Windows\system32\SHFOLDER.dll

C:\Users\win7\AppData\Local\Temp\nspD849.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nspD849.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nspD849.tmp\StartMenu.dll

IMM32.DLL

POWRPROF.DLL

C:\Windows\system32\UXTHEME.dll

C:\Windows\system32\USERENV.dll

C:\Windows\system32\SETUPAPI.dll

C:\Users\win7\AppData\Local\Temp\nsg4E88.tmp\LangDLL.dll

C:\Users\win7\AppData\Local\Temp\nsg4E88.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsg4E88.tmp\FindProcDLL.dll

C:\Users\win7\AppData\Local\Temp\nsg4E88.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nsg4E88.tmp\w7tbp.dll

MsiHnd.dll

DWMAPI

C:\Users\win7\AppData\Local\Temp\is-0DCA2.tmp\OCSetupHlp.dll

C:\Users\win7\AppData\Local\Temp\is-0DCA2.tmp\GCountry.dll

C:\Users\win7\AppData\Local\Temp\GLCC7A9.tmp

C:\Users\win7\AppData\Local\Temp\GLFD410.tmp

C:\Windows\system32\MSCOREE.DLL

C:\Users\win7\AppData\Local\Temp\VSDF8A3.tmp\DotNetFX\dotnetchk.exe

C:\Users\win7\AppData\Local\Temp\nspFCB7.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nspFCB7.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\is-83F3K.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-83F3K.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\nsa59C0.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsf9D0.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsf9D0.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nsf9D0.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nsf9D0.tmp\ServicesHelper.dll

C:\Users\win7\AppData\Local\Temp\nsp2D67.tmp\TvGetVersion.dll

C:\Users\win7\AppData\Local\Temp\nsp2D67.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\nsp2D67.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nsp2D67.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsp2D67.tmp\linker.dll

C:\Users\win7\AppData\Local\Temp\is-MDJRQ.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-MDJRQ.tmp\RegTokenManager.dll

C:\Users\win7\AppData\Local\Temp\is-GFS9E.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-GFS9E.tmp\itdownload.dll

C:\Users\win7\AppData\Local\Temp\is-GFS9E.tmp\itdownload.ENU

C:\Users\win7\AppData\Local\Temp\is-GFS9E.tmp\itdownload.EN

sfc.dll

C:\Users\win7\AppData\Local\Temp\27H3NVHJ\unpack.dll

C:\Windows\system32\CRTDLL.DLL

C:\Users\win7\AppData\Local\Temp\27H3NVHJ\sample\plugins\0\CustomUI.dll

C:\Users\win7\AppData\Local\Temp\27H3NVHJ\sample\plugins\0\CustomUI.ENU

C:\Users\win7\AppData\Local\Temp\27H3NVHJ\sample\plugins\0\CustomUI.EN

Setupapi.dll

C:\Users\win7\AppData\Local\Temp\_ZupSfx0\setup.ENU

C:\Users\win7\AppData\Local\Temp\_ZupSfx0\setup.EN

netapi32.dll

radmin32.dll

RASAPI32.dll

RASMAN.DLL

rtutils.dll

C:\8ee40aee15ca8a443f6560ce4e8090\spclite.exewdscore.dll

C:\Windows\system32\wdscore.dll

C:\8ee40aee15ca8a443f6560ce4e8090\spclite.exe

C:\8ee40aee15ca8a443f6560ce4e8090\c730df7abc687b13c2dbf7440938883a\SpWizUi.dll

C:\8ee40aee15ca8a443f6560ce4e8090\c730df7abc687b13c2dbf7440938883a\SpError.dll

C:\Windows\Branding\Basebrd\Basebrd.dll

NTDLL.dll

C:\Users\win7\AppData\Local\Temp\{33A254D0-3618-4EB4-B3F1-9BA72FD0395B}\_Setup.dll

C:\Users\win7\AppData\Local\Temp\{33A254D0-3618-4EB4-B3F1-9BA72FD0395B}\Disk1\ISSetup.dll

C:\Users\win7\AppData\Local\Temp\{1F4545E3-7897-4547-83EC-867463B34059}\{ED1674F5-5165-49BF-B546-AE5343111540}\ISRT.dll

C:\Users\win7\AppData\Local\Temp\{1F4545E3-7897-4547-83EC-867463B34059}\{ED1674F5-5165-49BF-B546-AE5343111540}\_isres.dll

C:\Users\win7\AppData\Local\Temp\{33A254D0-3618-4EB4-B3F1-9BA72FD0395B}\Disk1\data1.hdr

C:\Users\win7\AppData\Local\Temp\{1F4545E3-7897-4547-83EC-867463B34059}\{ED1674F5-5165-49BF-B546-AE5343111540}\_ISRes.dll

C:\fsprod.dll

c:\bc76f78b0a00cb936ba3390715\update\sqmapi.dll

c:\bc76f78b0a00cb936ba3390715\update\iesetup.exe

C:\Windows\system32\wintrust.dll

RASAPI32.DLL

RASDLG.DLL

GSM_codec.dll

oleacc.dll

cryptui.dll

C:\Users\win7\AppData\Local\Temp\DefaultPackOffer.dll

C:\Monitor.dll

C:\Users\win7\AppData\Local\Temp\nsv8435.tmp\TvGetVersion.dll

C:\Users\win7\AppData\Local\Temp\nsv8435.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\nsv8435.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsv8435.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nsv8435.tmp\linker.dll

msuser.dll

shdocvw.dll

C:\Windows\system32\setupapi.dll

C:\Windows\system32\McxDriv.dll

C:\Windows\System32\setupapi.dll

C:\Windows\system32\mmsys.cpl

C:\Windows\system32\mdminst.dll

C:\Windows\system32\SensorsCpl.dll

C:\Windows\System32\SysClass.DLL

C:\Windows\system32\NetCfgx.dll

C:\Windows\system32\sti_ci.dll

C:\Windows\System32\\imageres.dll

C:\Windows\system32\batt.dll

C:\Windows\system32\sccls.dll

C:\Windows\system32\AuxiliaryDisplayClassInstaller.dll

C:\Windows\system32\bthci.dll

<NULL>

isxdl.dll

difxapi.dll

C:\Windows\System32\ShellStyle.dll

explorerframe.dll

MsftEdit.dll

C:\Windows\system32\networkexplorer.dll

msctf.dll

C:\Windows\system32\comctl32.dll

C:\Windows\system32\MSI.DLL

C:\Windows\system32\wininet.dll

MSDART.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\99cdfef98595ed91f14936cf52a49c54\System.Management.ni.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\12dc10e5c0e8d176cf21a16a6fc5fc3b\Microsoft.VisualBasic.ni.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\Gdiplus.dll

C:\Users\win7\AppData\Local\Temp\726984.bat

C:\Users\win7\AppData\Local\Temp\is-02F69.tmp\_isetup\_shfoldr.dll

FaultRep.dll

C:\Users\win7\AppData\Roaming\WiseCare365\WiseCare365.ENU

C:\Users\win7\AppData\Roaming\WiseCare365\WiseCare365.EN

SRCLIENT.DLL

C:\Users\win7\AppData\Roaming\WiseCare365\WiseCare365.exe

XmlLite.dll

C:\Users\win7\AppData\Local\Temp\nsiEF8C.tmp\LuaBridge.dll

C:\Users\win7\AppData\Local\Temp\nsiEF8C.tmp\System.dll

lua51.dll

.\LuaXML_lib.dll

C:\Users\win7\AppData\Local\Temp\nsiEF8C.tmp\LuaSocket\socket\core.dll

.\ffi.dll

.\bit.dll

wininet

C:\Users\win7\AppData\Local\Temp\nsiEF8C.tmp\LuaSocket\mime\core.dll

C:\Users\win7\AppData\Local\Temp\nsiEF8C.tmp\versioninfo.dll

C:\Users\win7\AppData\Local\Temp\nsiEF8C.tmp\UACInfo.dll

C:\Users\win7\AppData\Local\Temp\nsiEF8C.tmp\FloatingProgress.dll

C:\Users\win7\AppData\Local\Temp\nsiEF8C.tmp\ffi.dll

C:\Users\win7\AppData\Local\Temp\nsiEF8C.tmp\bit.dll

C:\Users\win7\AppData\Local\Temp\is-H8AUP.tmp\_isetup\_shfoldr.dll

chrome_frame_helper.dll

C:\Windows\system32\NTDLL.DLL

C:\Windows\system32\ADVAPI32.DLL

C:\Users\win7\AppData\Local\Temp\is-1THQS.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-1THQS.tmp\_isetup\_isdecmp.dll

C:\Users\win7\AppData\Local\Temp\nsyA49E.tmp\Banner.dll

C:\Users\win7\AppData\Local\Temp\nsyA49E.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-VFC66.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-VFC66.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-P418H.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-P418H.tmp\idp.dll

C:\Users\win7\AppData\Local\Temp\is-P418H.tmp\innocallback.dll

C:\Users\win7\AppData\Local\Temp\is-P418H.tmp\innocallback.ENU

C:\Users\win7\AppData\Local\Temp\is-P418H.tmp\innocallback.EN

C:\Users\win7\AppData\Local\Temp\is-P418H.tmp\isslideshow.dll

C:\Users\win7\AppData\Local\Temp\is-P418H.tmp\isslideshow.ENU

C:\Users\win7\AppData\Local\Temp\is-P418H.tmp\isslideshow.EN

C:\Users\win7\AppData\Local\Temp\is-P418H.tmp\ISDone.dll

C:\Windows\system32\wbem\xml\wmi2xml.dll

ImgUtil.dll

C:\Users\win7\AppData\Local\Temp\DXGIDebug.dll

C:\Windows\SysWOW64\urlmon.dll

setup.dll

C:\Users\win7\AppData\Local\Temp\GUMC17A.tmp\goopdate.dll

C:\Users\win7\AppData\Local\Temp\GUMC17A.tmp\goopdateres_en.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\30280e5e7d89ffe702df50de4d339fc7\System.Configuration.Install.ni.dll

C:\Users\win7\AppData\Local\Temp\nscD5B0.tmp\System.dll

shcore.dll

ccLib.dll

C:\Users\win7\AppData\Local\Temp\nsyA5D6.tmp\System.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\OLEAUT32.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\4fddb3cf84aed83214f65fbe791348e5\Microsoft.PowerShell.ConsoleHost.ni.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management.A#\24f3f84b0793777ae7337796ef5551a5\System.Management.Automation.ni.dll

C:\Windows\assembly\GAC_MSIL\System.Management.Automation\1.0.0.0__31bf3856ad364e35\System.Management.Automation.dll

C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\psapi.dll

C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\ntdll.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\63e9d5c341d64a753cde97f5a3d65c71\System.Core.ni.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\1a6d99549254a6a0dbac7b728f3e010b\Microsoft.PowerShell.Commands.Diagnostics.ni.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Man#\34420c5bbb60572350b8af1a12d94451\Microsoft.WSMan.Management.ni.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\f45bc0251cceb599622f55cc1c7f4aba\System.Transactions.ni.dll

C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\7fcb194ae385dc872688067fb024bd55\Microsoft.PowerShell.Commands.Utility.ni.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\61bdc0f0c598b66a5af21dc10f824141\Microsoft.PowerShell.Commands.Management.ni.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\2b0a3b04b44b8d8e3cd4d489220d8c35\Microsoft.PowerShell.Security.ni.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\culture.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\en-US\mscorrc.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\en\mscorrc.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\d49908aa93a23c84847b1f8b1b667860\System.Xml.ni.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\cbe531dae622018576dbf7b1fca5ce47\System.DirectoryServices.ni.dll

C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\secur32.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\4b335bfaa07fc54f2d72213d33f53e97\System.Data.ni.dll

C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll

wow32.dll

LZ32.DLL

WSOCK32

C:\Windows\System32\hhctrl.ocx

C:\Windows\system32\Shdocvw.dll

svchost.exe

WINHTTP

C:\Users\win7\AppData\Local\Temp\is-V8OBF.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nsgDA0B.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsgDA0B.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nsgDA0B.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nsgDA0B.tmp\ServicesHelper.dll

C:\Windows\system32\asycfilt.dll

C:\Users\win7\AppData\Local\Temp\nsa9AB6.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\080416201931594.exe

winscard.dll

pstorec.dll

cOmsVcs.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\csc.exe

C:\Windows\Microsoft.NET\Framework\v2.0.50727\alink.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\0967cf5c31691f38d013263304d2dacb\System.Runtime.Remoting.ni.dll

C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\uxtheme.dll

RichEd20.DLL

C:\Windows\system32\RichEd20.DLL

C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\shell32.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\007fc007edc388d9806dff94ee04f129\System.Configuration.ni.dll

C:\Users\win7\AppData\Local\Temp\q1rehw09.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\\wminet_utils.dll

C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\oleaut32.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\21f876e85bfaa433a999a410eda373bc\System.Web.ni.dll

C:\Users\win7\AppData\Local\Temp\~DFA5944.tmp

MSVBVM60.DLL

ntvdm64.dll

C:\Users\win7\AppData\Local\Temp\is-M8VHE.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-1URR9.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-1URR9.tmp\sample.EN

C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\comctl32.dll

C:\Users\win7\AppData\Local\Temp\nsvF7AF.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsvF7AF.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\nsvF7AF.tmp\g\gtapi_signed

C:\Users\win7\AppData\Local\Temp\nsvF7AF.tmp\g\gcapi_dll

C:\Users\win7\AppData\Local\Temp\nsvF7AF.tmp\ButtonEvent.dll

C:\Users\win7\AppData\Local\Temp\nsvF7AF.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nsvF7AF.tmp\g\pfWWW

C:\Users\win7\AppData\Local\Temp\nsb7897.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\GLC8B91.tmp

C:\Users\win7\AppData\Local\Temp\GLK8DB5.tmp

C:\Users\win7\AppData\Local\Temp\GLK8DB5.ENU

C:\Users\win7\AppData\Local\Temp\GLK8DB5.EN

C:\Users\win7\AppData\Local\Temp\is-AASNL.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-AASNL.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-DTOH4.tmp\_isetup\_shfoldr.dll

Wintrust.dll

C:\Users\win7\AppData\Local\Temp\is-ERQRU.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nse3FD4.tmp\InstallOptions.dll

C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\shell32.dll

C:\Users\win7\AppData\Local\Temp\\bassmod.dll

C:\gcapi_14601477692472.dll

C:\gtapi_14601477692472.dll

C:\gdapi_14601477692472.dll

odbc32.dll

BrLogAPI.dll

BrDbgOut.dll

BrDbgOtW.dll

twain_32.dll

C:\Users\win7\AppData\Local\Temp\nsu267F.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nsu267F.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsm5C7A.tmp\LangDLL.dll

C:\Users\win7\AppData\Local\Temp\nsm5C7A.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nsm5C7A.tmp\StartMenu.dll

C:\Users\win7\AppData\Local\Temp\RarSFX0\AoTTG.exe

Netapi32.dll

MAPI32.DLL

C:\krnln.fnr

unrar3.dll

Userenv.dll

C:\Windows\system32\IconCodecService.dll

Mpr.dll

BavDllFilter.dll

C:\FileSplitUpLoad.dll

C:\Users\win7\AppData\Local\Temp\is-I9RHG.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-I9RHG.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-014CD.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-014CD.tmp\ISDone.dll

C:\Users\win7\AppData\Local\Temp\is-014CD.tmp\isgsg.dll

C:\Users\win7\AppData\Local\Temp\is-014CD.tmp\b2p.dll

C:\Users\win7\AppData\Local\Temp\is-014CD.tmp\botva2.dll

C:\Users\win7\AppData\Local\Temp\is-014CD.tmp\CallbackCtrl.dll

C:\Users\win7\AppData\Local\Temp\GLC62BB.tmp

C:\Windows\system32\Kernel32.DLL

C:\Users\win7\AppData\Local\Temp\_IsUser.dll

C:\Windows\system32\User32.DLL

C:\Users\win7\AppData\Local\Temp\

WSOCK32.DLL

D3DREF9.DLL

C:\Users\win7\AppData\Local\Temp\12aub8835\QBInstaller.dll

C:\Users\win7\AppData\Local\Temp\nse64FF.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nse64FF.tmp\Base64.dll

C:\Users\win7\AppData\Local\Temp\nse64FF.tmp\Inetc.dll

C:\Users\win7\AppData\Local\Temp\nse64FF.tmp\ZipDLL.dll

C:\WINDOWS\SYSTEM32\VB6ES.DLL

C:\Users\win7\AppData\Local\Temp\bhs614F.tmp

C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\rasapi32.dll

rasapi32.dll

C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\ws2_32.dll

C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\winhttp.dll

C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\iphlpapi.dll

sxs.dll

C:\Users\win7\AppData\Local\Temp\shell32.dll

dll_helper.dll

C:\CFVS_Injector.exe

C:\Windows\syswow64\ADVAPI32.dll

avifil32.dll

C:\Windows\syswow64\GDI32.dll

C:\Windows\system32\IMM32.DLL

C:\Windows\syswow64\kernel32.dll

C:\Windows\syswow64\oleaut32.dll

openal32.dll

C:\Windows\syswow64\ole32.DLL

C:\Users\win7\AppData\Local\Temp\Clean\Clean.cmd

MFC42.DLL

C:\Windows\system32\cryptsp.dll

C:\Windows\system32\clbcatq.dll

C:\Windows\system32\wsock32.dll

C:\Windows\system32\winnsi.dll

C:\Windows\system32\slc.dll

C:\Windows\system32\gpapi.dll

C:\Windows\system32\hnetcfg.dll

C:\Windows\system32\dnsapi.dll

C:\Windows\system32\rasman.dll

C:\Windows\system32\rasapi32.dll

C:\Windows\system32\sensapi.dll

C:\Windows\system32\rasadhlp.dll

C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll

C:\Windows\system32\sxs.dll

C:\Windows\system32\rpcrtremote.dll

C:\Windows\system32\schannel.dll

C:\Users\win7\AppData\Local\Temp\{2FEEDC52-073C-458D-A310-F10481F8D445}\fpb.tmp

C:\Users\win7\AppData\Local\Temp\{29FB9719-B437-4BE4-A530-9CF8BBAD692F}\fpb.tmp

PSAPI.dll

IPHLPAPI.dll

WTSAPI32.dll

C:\Users\win7\AppData\Local\Temp\687a5f04\setup.exe

OLE32.dll

C:\Windows\system32\NTDLL.dll

C:\Users\win7\AppData\Local\Temp\687a5f04\DXGIDebug.dll

C:\Windows\system32\clusapi.dll

c:\479a4da8d12a28199ba28704e4e82762\_sfx_.dll

C:\Users\win7\AppData\Local\Temp\jkiBCA8.tmp

C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\bcrypt.dll

MSVCIRT.dll

C:\\qipsurf.dll

C:\\27.14.1453.94\qipsurf.dll

C:\Users\win7\AppData\Local\Temp\is-0CSH8.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-0CSH8.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-FCLCS.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-FCLCS.tmp\idp.dll

C:\Users\win7\AppData\Local\Temp\is-FCLCS.tmp\itdownload.dll

C:\Users\win7\AppData\Local\Temp\is-FCLCS.tmp\itdownload.ENU

C:\Users\win7\AppData\Local\Temp\is-FCLCS.tmp\itdownload.EN

C:\Users\win7\AppData\Local\Temp\is-FCLCS.tmp\SupOptHelper.dll

ieakui.dll

C:\Users\win7\AppData\Local\Temp\7zS209.tmp\Activation.cmd

C:\CFVS_I~1.EXE

C:\DLL_LO~1.EXE

C:\Procmon.exe

C:\PROGRA~2\COMMON~1\MICROS~1\ink\mip.exe

C:\PROGRA~2\COMMON~1\MICROS~1\MSInfo\msinfo32.exe

C:\PROGRA~2\INTERN~1\ieinstal.exe

C:\PROGRA~2\INTERN~1\ielowutil.exe

C:\PROGRA~2\INTERN~1\iexplore.exe

C:\PROGRA~2\WINDOW~1\wab.exe

C:\PROGRA~2\WINDOW~1\wabmig.exe

C:\PROGRA~2\WINDOW~1\WinMail.exe

C:\PROGRA~2\WINDOW~2\ACCESS~1\wordpad.exe

C:\PROGRA~2\WINDOW~4\ImagingDevices.exe

C:\PROGRA~2\WI4223~1\sidebar.exe

C:\PROGRA~3\PACKAG~1\{050D4~1\VCREDI~1.EXE

C:\PROGRA~3\PACKAG~1\{F65DB~1\VCREDI~1.EXE

C:\Python27\Lib\DISTUT~1\command\WININS~1.EXE

C:\Python27\Lib\DISTUT~1\command\WININS~2.EXE

C:\Python27\Lib\DISTUT~1\command\WININS~3.EXE

C:\Python27\Lib\DISTUT~1\command\WININS~4.EXE

C:\Python27\Lib\DISTUT~1\command\WI02EA~1.EXE

C:\Python27\Lib\SITE-P~1\pip\_vendor\distlib\t32.exe

C:\Python27\Lib\SITE-P~1\pip\_vendor\distlib\t64.exe

C:\Python27\Lib\SITE-P~1\pip\_vendor\distlib\w32.exe

C:\Python27\Lib\SITE-P~1\pip\_vendor\distlib\w64.exe

C:\Python27\Lib\SITE-P~1\SETUPT~1\cli-32.exe

C:\Python27\Lib\SITE-P~1\SETUPT~1\cli-64.exe

C:\Python27\Lib\SITE-P~1\SETUPT~1\CLI-AR~1.EXE

C:\Python27\Lib\SITE-P~1\SETUPT~1\cli.exe

C:\Python27\Lib\SITE-P~1\SETUPT~1\gui-32.exe

C:\Python27\Lib\SITE-P~1\SETUPT~1\gui-64.exe

C:\Python27\Lib\SITE-P~1\SETUPT~1\GUI-AR~1.EXE

C:\Python27\Lib\SITE-P~1\SETUPT~1\gui.exe

C:\Python27\Scripts\EASY_I~2.EXE

C:\Python27\Scripts\EASY_I~1.EXE

C:\Python27\Scripts\pip.exe

C:\Python27\Scripts\PIP27~1.EXE

C:\Python27\Scripts\pip2.exe

C:\Users\win7\AppData\Local\Temp\is-4A9VN.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-4A9VN.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-0D1M5.tmp\_isetup\_shfoldr.dll

gdiplus

comctl32

C:\bin\launcher.dll

SbieDll.dll

DCIMAN32.DLL

C:\Users\win7\AppData\Local\Temp\tsldrl6660\DXGIDebug.dll

psapi

MSVBVM60

C:\Users\win7\AppData\Local\Temp\is-28OUG.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-28OUG.tmp\innocallback.dll

C:\Users\win7\AppData\Local\Temp\is-28OUG.tmp\innocallback.ENU

C:\Users\win7\AppData\Local\Temp\is-28OUG.tmp\innocallback.EN

C:\Users\win7\AppData\Local\Temp\is-28OUG.tmp\IsProgressBar.dll

C:\Users\win7\AppData\Local\Temp\is-28OUG.tmp\IsProgressBar.ENU

C:\Users\win7\AppData\Local\Temp\is-28OUG.tmp\IsProgressBar.EN

C:\Users\win7\AppData\Local\Temp\is-28OUG.tmp\isskin.dll

C:\Users\win7\AppData\Local\Temp\is-MDOJG.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\is-28OUG.tmp\CoopLand.cjstyles

C:\Users\win7\AppData\Local\Temp\is-28OUG.tmp\botva2.dll

C:\Users\win7\AppData\Local\Temp\is-EQLVV.tmp\_isetup\_shfoldr.dll

Ntdll

C:\Users\win7\AppData\Local\Temp\dfsAE95.tmp

C:\Users\win7\AppData\Local\Temp\nsw464B.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsw464B.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nsw464B.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\is-SP3CI.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-SP3CI.tmp\sample.EN

C:\ntdll

xpsp2res.dll

C:\Users\win7\AppData\Local\Temp\nsuA95F.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsuA95F.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nsuA95F.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\is-04PQ1.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-04PQ1.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\000badde.a

C:\Users\win7\AppData\Local\Temp\000bb550.a

C:\Users\win7\AppData\Local\Temp\GUM2073.tmp\goopdate.dll

C:\Users\win7\AppData\Local\Temp\GUM2073.tmp\goopdateres_en.dll

userenv.dll

C:\Users\win7\AppData\Local\Temp\nsl69B3.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsl69B3.tmp\UAC.dll

OCSetupHlp

jsproxy.dll

C:\Users\win7\AppData\Local\Temp\nsl69B3.tmp\nsDialogs.dll

rasdlg.dll

d3dxof.dll

C:\Flpl\Unins.cmd

icmp.dll

C:\Users\win7\AppData\Local\Temp\is-EPS8E.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-EPS8E.tmp\itdownload.dll

C:\Users\win7\AppData\Local\Temp\is-EPS8E.tmp\itdownload.ENU

C:\Users\win7\AppData\Local\Temp\is-EPS8E.tmp\itdownload.EN

C:\Users\win7\AppData\Local\Temp\is-EPS8E.tmp\ISSkin.dll

C:\Users\win7\AppData\Local\Temp\is-3QNTL.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\is-EPS8E.tmp\Office2007.cjstyles

C:\Users\win7\AppData\Local\Temp\FlashDLL.dll

C:\Users\win7\AppData\Local\Temp\FlashDLLENU.dll

C:\Users\win7\AppData\Local\Temp\FlashDLLLOC.dll

msi

C:\Users\win7\AppData\Local\Temp\is-SA9LT.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-SA9LT.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\GLCD3FA.tmp

C:\Users\win7\AppData\Local\Temp\{8e3f1ff5-86c3-4054-8cab-bba92838d4a6}\.ba1\wixstdba.dll

C:\Users\win7\AppData\Local\Temp\is-N2VO0.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-N2VO0.tmp\ISDone.dll

C:\Users\win7\AppData\Local\Temp\is-N2VO0.tmp\isgsg.dll

C:\Users\win7\AppData\Local\Temp\is-N2VO0.tmp\WinTB.dll

C:\Users\win7\AppData\Local\Temp\is-N2VO0.tmp\b2p.dll

C:\Users\win7\AppData\Local\Temp\is-N2VO0.tmp\botva2.dll

C:\Users\win7\AppData\Local\Temp\is-N2VO0.tmp\CallbackCtrl.dll

NETAPI32.dll

POWRPROF.dll

C:\Users\win7\AppData\Local\Temp\is-GPMG2.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-CEJLN.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-CEJLN.tmp\sample.EN

APPHELP.dll

C:\Users\win7\AppData\Local\Temp\is-TSUH7.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-TSUH7.tmp\CallbackCtrl.dll

C:\Users\win7\AppData\Local\Temp\is-TSUH7.tmp\ISDone.dll

C:\Users\win7\AppData\Local\Temp\nsj1857.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\nsj1857.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsj1857.tmp\nsExec.dll

oledlg.dll

C:\Users\win7\AppData\Local\Temp\nsc798C.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsc798C.tmp\nsDialogs.dll

npolgdet.dll

CABINET

C:\Users\win7\AppData\Local\Temp\nsh533D.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsh533D.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nsh533D.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\nsh533D.tmp\nsDialogs.dll

ReadProcessMemory

Toolhelp32ReadProcessMemory

WriteProcessMemory

GetThreadContext

SetThreadContext

CreateProcessA

CreateProcessW

ShellExecuteExW

ShellExecuteExA

ShellExecuteW

IsDebuggerPresent

ShellExecuteA

CreateProcess

InternetReadFile

CreateServiceA

CreateServiceW

ShellExecuteEx

ShellExecute

NtCreateProcess

NtCreateProcessEx

WinExec

ZwCreateProcess