C:\Windows\system32\dinput8.dll

C:\Users\win7\AppData\Local\Temp\7c460ffc43d81bc155b60ff2a41f6fe9\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\is-04I2G.tmp\sample.tmp

C:\CRACK\PATCH.EXE

C:\Users\win7\AppData\Local\Temp\51b530fdfca524d0fb3ba10c7a56071c\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\1783e112db52f14d8bbb859c581621ee\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\1783e112db52f14d8bbb859c581621ee\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\nse7035.tmp\GetPrivateInstaller_woautorun.exe

C:\Users\win7\AppData\Local\Temp\1783e112db52f14d8bbb859c581621ee\downloaderSTUB.exe

C:\Users\win7\AppData\Local\Temp\is-U4ECK.tmp\sample.tmp

C:\Windows\system32\mscoree.dll

C:\Windows\SysWOW64\WScript.exe

C:\Windows\system32\MSHTML.DLL

C:\Users\win7\AppData\Local\Temp\19877d67a779994779e897cef475469b\preinstaller.exe

C:\Windows\system32\WINMM.DLL

C:\Windows\SysWOW64\jscript9.dll

C:\Users\win7\AppData\Local\Temp\Jgl_Rt\bunchweb1.exe

C:\Windows\system32\cryptnet.dll

C:\Windows\syswow64\WININET.dll

C:\Windows\syswow64\MSCTF.dll

C:\Windows\System32\msxml6.dll

C:\Windows\system32\riched20.dll

C:\Users\win7\AppData\Local\Tempfolder\WiseshVepdomb\MemekeHhw.exe

C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_50916076bcb9a742\MSVCR90.dll

C:\Users\win7\AppData\Local\Tempfolder\NekguNewim\DebnEuka.exe

C:\Users\win7\AppData\Local\Temp\5d3e687ec77ac9bbac7baeaed99d0d59\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\34de4613903d936aecd50d9797ec48e6\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Tempfolder\SefxohFeuoor\ForpErutm.exe

C:\Users\win7\AppData\Local\Temp\7c460ffc43d81bc155b60ff2a41f6fe9\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\is-UHVUJ.tmp\sample.tmp

C:\Windows\SysWOW64\Wbem\WMIC.exe

C:\Users\win7\AppData\Local\Tempfolder\TeidfOagehwe\SimkiHugma.exe

C:\Windows\system32\RichEd20.dll

C:\Users\win7\AppData\Local\Temp\261b55742615f111f03f941ce52dc4e4\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\is-83J4I.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp

C:\Users\win7\AppData\Local\Tempfolder\BaeurIuoj\FunsigJaq.exe

C:\Windows\SysWOW64\NOTEPAD.EXE

C:\Users\win7\AppData\Local\Temp\is-7R67I.tmp\sample.tmp

C:\Windows\SysWOW64\svchost.exe

C:\Users\win7\AppData\Local\Temp\sfx1\_bbg.exe

C:\Users\win7\AppData\Local\Tempfolder\IofhopFicu\FitgaNahfu.exe

C:\Windows\system32\d3d11.dll

C:\Users\win7\AppData\Local\Temp\{DF2BFBED-3E75-420E-A0E5-765704C8D91B}\_Setup.dll

C:\Users\win7\AppData\Local\Temp\d73b989f8bebc4a4b59f91fe7c949077\downloaderDDLR.exe

C:\Users\win7\AppData\Local\Temp\3a323904ccb01666e8b97fe1f2f6f1bf\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\is-AF5OS.tmp\is-1K4CH.tmp

C:\Users\win7\AppData\Local\Tempfolder\IlupayXio\EpemOcinofu.exe

C:\Users\win7\AppData\Local\Temp\is-CJH1B.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\6efb25bc8da8c8c2c9e8048717b44cc2\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\5d3e687ec77ac9bbac7baeaed99d0d59\downloaderOFFER1.exe

C:\Windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll

C:\Windows\syswow64\CRYPT32.dll

C:\ProgramData\Barowasse2saave\515f05ce29392.dll

C:\Windows\syswow64\USER32.dll

C:\Windows\system32\propsys.dll

C:\Windows\system32\KBDUS.DLL

C:\ProgramData\BBroowsee2save\515f52b6468e9.dll

C:\Users\win7\AppData\Local\Tempfolder\PokbhvAyv\XejadSibitih.exe

C:\Windows\syswow64\shlwapi.DLL

C:\Users\win7\AppData\Local\Temp\be65e9678dd5d48d48970c7dbd120df9\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\OA6j0qm2Ap5iqgiXDLlySmIaqS\OA6j0qm2Ap5iqgiXDLlySmIaqSOA6j0qm2Ap5iqgiXDLlySmIaqS_a9.exe

C:\Users\win7\AppData\Local\Temp\OA6j0qm2Ap5iqgiXDLlySmIaqS\OA6j0qm2Ap5iqgiXDLlySmIaqS_has.exe

C:\Users\win7\AppData\Local\Tempfolder\NhnimGuryoph\HhdugAxudo.exe

C:\Windows\system32\ieframe.dll

C:\ProgramData\Barowasse2saave\515f05cca2d7e.dll

C:\Windows\system32\Riched20.dll

C:\Windows\system32\MSVBVM60.DLL

C:\Users\win7\AppData\Local\Temp\2f2ef0d4f0b4de33eb48fcaf471d6340\downloaderOFFER1.exe

C:\Windows\SYSTEM32\MSCOREE.DLL

C:\Users\win7\AppData\Local\Temp\d194c315be1140b7ec59a88f07e39a46\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\443450c2d789e5630023baddfe2a97cc\downloaderOFFER1.exe

C:\Windows\system32\D3D10Warp.dll

C:\Users\win7\AppData\Local\Tempfolder\JaroiLubm\JojsykOlolrit.exe

C:\Windows\system32\credui.dll

C:\Users\win7\AppData\Local\Temp\38f2bb0256db33a8f41436ef966638fe\downloaderSTUB.exe

C:\Users\win7\AppData\Local\Tem

C:\Windows\system32\dsound.dll

C:\Users\win7\AppData\Local\Temp\d73b989f8bebc4a4b59f91fe7c949077\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\is-TTL1U.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\OA6j0qm2Ap5iqgiXDLlySmIaqS\OA6j0qm2Ap5iqgiXDLlySmIaqSOA6j0qm2Ap5iqgiXDLlySmIaqSOA6j0qm2Ap5iqgiXDLlySmIaqS_br.exe

C:\Users\win7\AppData\Local\Tempfolder\JupxonQyb\RawtebOkat.exe

C:\sample

C:\Users\win7\AppData\Local\Tempfolder\MiilnaFyhfoo\HehfhMeuyf.exe

C:\Users\win7\AppData\Local\Temp\7zS6BB0.tmp\515f05cca2d47.exe

C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc\MSVCR80.dll

C:\Users\win7\AppData\Local\Tempfolder\FhupagTueibub\BhvhoPibsox.exe

C:\Users\win7\AppData\Local\Temp\source11001.exe

C:\Users\win7\AppData\Local\Temp\xns8D1E.tmp

C:\Users\win7\AppData\Local\Temp\261b55742615f111f03f941ce52dc4e4\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsc55CB.tmp\cpSetup.exe

C:\Windows\system32\DINPUT8.dll

C:\Users\win7\AppData\Local\Temp\f839514addcc6805918cc9f67bcd6e75\preinstaller.exe

C:\Windows\SysWOW64\PROPSYS.dll

C:\Windows\system32\uxtheme.dll

C:\Users\win7\AppData\Local\Temp\nsg8091.tmp\GetPrivateInstaller_woautorun.exe

C:\Windows\system32\quartz.dll

C:\Users\win7\AppData\Local\Temp\TsuDA2E776F.dll

C:\Windows\system32\dxgi.dll

C:\Users\win7\AppData\Local\Temp\is-0FKJ4.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\e476d6026eb8a2312ee94ba7aa477005\preinstaller.exe

C:\Windows\Microsoft.NET\Framework\v2.0.50727\dw20.exe

C:\Users\win7\AppData\Local\Temp\is-0VCOV.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\e476d6026eb8a2312ee94ba7aa477005\downloaderSTUB.exe

C:\Windows\syswow64\SHELL32.dll

C:\Windows\system32\EhStorShell.dll

C:\Windows\system32\RICHED20.dll

C:\Windows\system32\MSVFW32.dll

C:\Users\win7\AppData\Local\Tempfolder\ortmp\orion.exe

C:\Users\win7\AppData\Local\Temp\nsa86D1.tmp\GetPrivateInstaller_woautorun.exe

C:\Users\win7\AppData\Local\Temp\7zSE540.tmp\515f52b6468b0.exe

C:\Users\win7\AppData\Local\Tempfolder\QubmKhrheoa\JisjhbLhkib.exe

C:\Windows\SysWOW64\schannel.dll

C:\Users\win7\AppData\Local\Temp\be65e9678dd5d48d48970c7dbd120df9\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\5d3e687ec77ac9bbac7baeaed99d0d59\downloaderSTUB.exe

C:\Users\win7\AppData\Local\Temp\528dd5088dd2bdf0b990dc6dd3376971\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\tsldrl6660\setup.exe

C:\Users\win7\AppData\Local\Tempfolder\IvhfiSueamfh\PewojyUfe.exe

C:\Windows\system32\RichEd20.DLL

C:\Windows\system32\MSHTML.dll

C:\Users\win7\AppData\Local\Temp\is-8B93V.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\e1c1e048af3eb4f5776b5551aa16d363\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\is-1BV3K.tmp\sample.tmp

C:\Windows\system32\DMDSKMGR.dll

C:\Windows\syswow64\GDI32.dll

C:\Windows\system32\DSOUND.DLL

C:\Users\win7\AppData\Local\Temp\nsj44D6.tmp\GetPrivateInstaller_woautorun.exe

C:\Users\win7\AppData\Local\Temp\7zSEEA6.tmp\515f05c882f7a.exe

C:\Users\win7\AppData\Local\Tempfolder\PidymOmawpip\LidiAdol.exe

C:\ProgramData\Barowasse2saave\515f05c882fb3.dll

C:\Windows\system32\dinput.dll

C:\Users\win7\AppData\Local\Temp\6efb25bc8da8c8c2c9e8048717b44cc2\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\is-MFLR5.tmp\sample.tmp

C:\ProgramData\Seearrchh-NewuTab\515f52b3b1e65.dll

C:\Windows\SysWOW64\rundll32.exe

C:\Users\win7\AppData\Local\Temp\uz5qYgMMv9zSRQfaKwHcoKYkDUG\uz5qYgMMv9zSRQfaKwHcoKYkDUG_has.exe

C:\Users\win7\AppData\Local\Tempfolder\DonijhBegsah\LhgerpHolga.exe

C:\Users\win7\AppData\Local\Temp\38f2bb0256db33a8f41436ef966638fe\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\34de4613903d936aecd50d9797ec48e6\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\51b530fdfca524d0fb3ba10c7a56071c\downloaderOFFER1.exe

C:\Windows\SysWOW64\mshtml.dll

C:\Windows\SysWOW64\ieframe.dll

C:\ProgramData\N24dft.exe

C:\Users\win7\AppData\Local\Temp\462C4735-BAB0-7891-A34D-580F9211D2C5\Setup.exe

C:\Windows\system32\PROPSYS.dll

C:\Users\win7\AppData\Local\Temp\is-L8N8I.tmp\WS_Log.dll

C:\Users\win7\AppData\Local\Temp\7zS902B.tmp\515f52b3b1e2c.exe

����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������

C:\Users\win7\AppData\Local\Tempfolder\AuqeaCua\CecdUfa.exe

C:\Users\win7\AppData\Local\Temp\nstEA14.tmp\GetPrivateInstaller_woautorun.exe

C:\Users\win7\AppData\Local\Tempfolder\NozulMusfi\RhecueGoc.exe

C:\Users\win7\AppData\Local\Temp\1d4b8f77a8f1a4b47e33c540585fb190\downloaderDDLR.exe

C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll

C:\Users\win7\AppData\Local\Tempfolder\NoicdIdhrib\KutliOomufg.exe

C:\Users\win7\AppData\Local\Temp\3a323904ccb01666e8b97fe1f2f6f1bf\downloaderSTUB.exe

C:\Windows\system32\werui.dll

C:\Users\win7\AppData\Local\Tempfolder\JummPeod\TonhaCelnaa.exe

C:\Windows\SysWOW64\cmd.exe

C:\Users\win7\AppData\Local\Temp\1d4b8f77a8f1a4b47e33c540585fb190\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\is-L8N8I.tmp\WS_SaleProcess.dll

C:\Windows\syswow64\kernel32.dll

C:\Users\win7\AppData\Local\Temp\d77dc95484dc6c4d4458546230aa3d47\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\528dd5088dd2bdf0b990dc6dd3376971\downloaderOFFER1.exe

C:\Windows\System32\msxml3.dll

C:\Windows\system32\sxs.dll

C:

C:\Users\win7\AppData\Local\Tempfolder\JogoYtem\NowyeuTumroe.exe

C:\Users\win7\AppData\Local\Tempfolder\PyrfowTunn\IyrafEfo.exe

C:\Windows\system32\ntshrui.dll

C:\Users\win7\AppData\Local\Temp\f839514addcc6805918cc9f67bcd6e75\downloaderOFFER1.exe

C:\Windows\system32\RICHED20.DLL

C:\Users\win7\AppData\Local\Temp\is-7F2JM.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\IXP000.TMP\Setup.exe

C:\Users\win7\AppData\Local\Temp\nsp70C3.tmp\cpSetup.exe

������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������

C:\Users\win7\AppData\Local\Temp\e1c1e048af3eb4f5776b5551aa16d363\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\is-U89O1.tmp\sample.tmp

C:\sxe6649.tmp

C:\Windows\SysWOW64\ntdll.dll

C:\Users\win7\AppData\Local\Temp\FB4B2B76-3823-4004-A4F5-C019BA623A48-RTT\RUpdate.exe

C:\Users\win7\AppData\Local\Temp\d73b989f8bebc4a4b59f91fe7c949077\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe

C:\Users\win7\AppData\Local\Tempfolder\JonsPibgh\LirpIta.exe

C:\Users\win7\AppData\Local\Temp\ActSys\SSL\import_root_cert.exe

C:\Users\win7\AppData\Local\Temp\d77dc95484dc6c4d4458546230aa3d47\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\19877d67a779994779e897cef475469b\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Tempfolder\BabdamVhd\GesdSayet.exe

C:\Windows\system32\TAPI32.dll

C:\Users\win7\AppData\Local\Temp\7zS7E49.tmp\515f05ce2935a.exe

C:\Users\win7\AppData\Local\Temp\d194c315be1140b7ec59a88f07e39a46\downloaderOFFER1.exe

C:\Windows\system32\DSOUND.dll

C:\Users\win7\AppData\Local\Temp\5d3e687ec77ac9bbac7baeaed99d0d59\downloaderDDLR.exe

C:\Windows\system32\shell32.dll

libeay32.dll

C:\Users\win7\AppData\Local\Temp\nsg8BC8.tmp\inetc.dll

secur32.dll

C:\Users\win7\AppData\Local\Temp\nsj1F5D.tmp\NSISdl.dll

NTDLL

C:\Users\win7\AppData\Local\Temp\nsdEB3D.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsaE1C8.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsdEA53.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsp8995.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsq8BB8.tmp\NSISdl.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\\wminet_utils.dll

C:\Users\win7\AppData\Local\Temp\nsl7EE7.tmp\SimpleSC.dll

oehook.dll

C:\Users\win7\AppData\Local\Temp\nsd7811.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsi84C2.tmp\nsResize.dll

C:\Users\win7\AppData\Local\Temp\nsi6CAB.tmp\nsArray.dll

DSOUND.DLL

C:\Users\win7\AppData\Local\Temp\nst86A6.tmp\NSISdl.dll

msvbvm60

C:\Users\win7\AppData\Local\Temp\nsi835C.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsw7AD8.tmp\19d9bc56-21cf-4ea2-96f0-66125fc53ade.dll

C:\Users\win7\AppData\Local\Temp\nsp6597.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsh77D7.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nsr6941.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsdEB3D.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nstEB9B.tmp\System.dll

DL

C:\Windows\system32\urlmon.dll

C:\Users\win7\AppData\Local\Temp\nsb8BA9.tmp\SimpleSC.EN

urlmon.dll

C:\Windows\System32\msxml3r.dll

tbssvc.dll

C:\Users\win7\AppData\Local\Temp\nsyF6E6.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsd85AD.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsy78DC.tmp\SimpleSC.dll

shlwapi

winhttp.dll

imagehlp.dll

C:\Users\win7\AppData\Local\Temp\nsi935D.tmp\KillProcDLL.dll

C:\Users\win7\AppData\Local\Temp\is-L8N8I.tmp\WS_VersionProcess.EN

C:\Windows\system32\shell32

C:\Users\win7\AppData\Local\Temp\nsc82A0.tmp\nsArray.dll

C:\Windows\system32\uxtheme.dll

C:\Windows\system32\msimg32.dll

COMCTL32.DLL

netutils.dll

C:\Users\win7\AppData\Local\Temp\nsm775A.tmp\StdUtils.dll

imm32.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\culture.dll

C:\Users\win7\AppData\Local\Temp\nsc7854.tmp\SimpleSC.dll

Wtsapi32.dll

C:\Users\win7\AppData\Local\Temp\nsqF0FA.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsaE34E.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsn6D19.tmp\SimpleSC.ENU

SensApi.dll

C:\Users\win7\AppData\Local\Temp\nsu7BCA.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nssE840.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nswF168.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nstEA14.tmp\nsResize.dll

C:\Users\win7\AppData\Local\Temp\nsgFE0A.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nseED12.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsn762D.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsu8744.tmp\NSISdl.dll

Secur32.dll

C:\Users\win7\AppData\Local\Temp\nsn6B93.tmp\StdUtils.dll

wdmaud.drv

profapi.dll

C:\Windows\system32\sxs.dll

C:\Users\win7\AppData\Local\Temp\nsmCC4B.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-ESACR.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nsf7BBB.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsqE3FA.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsf7D8F.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsbF30D.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nswE5EE.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsj6181.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsp8995.tmp\StdUtils.dll

C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18834_none_72d38c5186679d48\GDIPLUS.DLL

MSWSOCK.dll

KERNEL32.dll

C:\Users\win7\AppData\Local\Temp\is-NIEM2.tmp\_isetup\_shfoldr.dll

C:\Windows\system32\CRTDLL.DLL

C:\Users\win7\AppData\Local\Temp\nskEE1C.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsl7EE7.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nse7A34.tmp\SimpleSC.ENU

C:\Windows\system32\EhStorShell.dll

C:\sampleLOC.dll

C:\Users\win7\AppData\Local\Temp\nsl7315.tmp\SimpleSC.ENU

wtsapi32.dll

C:\Users\win7\AppData\Local\Temp\nsb7595.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsaD515.tmp\NSISdl.dll

ntdll.dll

gdi32.dll

C:\Users\win7\AppData\Local\Temp\nsxCF49.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsiDC88.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsl7F82.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsj1F5D.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsd83D8.tmp\nsResize.dll

C:\Users\win7\AppData\Local\Temp\nsq7F49.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsm8286.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsb8BA9.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsp7E11.tmp\nsArray.dll

RICHED20.DLL

C:\Users\win7\AppData\Local\Temp\Jgl_Rt\jesterrun0.ENU

C:\Users\win7\AppData\Local\Temp\nsn77B3.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nskEF54.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nse7A34.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nscE8CC.tmp\nsArray.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll

C:\Users\win7\AppData\Local\Temp\nsg6902.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nse864A.tmp\nsArray.dll

C:\Windows\system32\jsproxy.dll

C:\Users\win7\AppData\Local\Temp\nseED12.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\is-VDPSG.tmp\ithttp.EN

C:\Users\win7\AppData\Local\Temp\nsz9463.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nssF58E.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-UHVUJ.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-ESACR.tmp\beepdl.EN

C:\Windows\System32\davclnt.dll

srvcli.dll

C:\Plugins\soundtouch.dll

C:\Users\win7\AppData\Local\Temp\nsk53FA.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsb74F9.tmp\NSISdl.dll

MSHTML.dll

C:\Users\win7\AppData\Local\Temp\nse7A34.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsq8BB8.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nspD43B.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nst6EBF.tmp\NSISdl.dll

PSAPI.DLL

COMDLG32.DLL

C:\Users\win7\AppData\Local\Temp\nsb7595.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nst6171.tmp\SimpleSC.ENU

C:\Windows\SysWOW64\bcryptprimitives.dll

C:\Users\win7\AppData\Local\Temp\tsldrl6660\DXGIDebug.dll

C:\Users\win7\AppData\Local\Temp\nslE513.tmp\nsArray.dll

AUDIOSES.DLL

C:\Users\win7\AppData\Local\Temp\nso863A.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsn2BD.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsuE1A8.tmp\System.dll

WININET.DLL

C:\Users\win7\AppData\Local\Temp\nsd77C3.tmp\nsArray.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll

kernel32

C:\Users\win7\AppData\Local\Temp\nsu7BCA.tmp\System.dll

PSAPI.DLL

C:\Users\win7\AppData\Local\Temp\nslE38C.tmp\nsResize.dll

C:\ProgramData\Barowasse2saave\515f05c882fb3.dll

C:\Users\win7\AppData\Local\Temp\nsmDA36.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsgFE0A.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsu7BCA.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nssC3B0.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsb6895.tmp\NSISdl.dll

URLMON.DLL

C:\Users\win7\AppData\Local\Temp\nsn8F90.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsl8BE7.tmp\nsArray.dll

C:\ntdll.dll

WINMM.dll

C:\Users\win7\AppData\Local\Temp\nstD0B1.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsl8A61.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nslD813.tmp\nsArray.dll

C:\Windows\system32\DSOUND.dll

C:\Users\win7\AppData\Local\Temp\nsh7F20.tmp\NSISdl.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\OLEAUT32.dll

C:\Users\win7\AppData\Local\Temp\nsy796E.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsiE93A.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsfD6BB.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nskEFA2.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsh8271.tmp\nsWeb.dll

DUI70.dll

C:\Users\win7\AppData\Local\Temp\nsn7717.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nssDC78.tmp\System.dll

wininet.dll

C:\Windows\system32\user32

C:\Users\win7\AppData\Local\Temp\nsg8091.tmp\nsResize.dll

C:\Users\win7\AppData\Local\Temp\is-VDPSG.tmp\ithttp.ENU

C:\Users\win7\AppData\Local\Temp\nsiE987.tmp\UserInfo.dll

advapi32.dll

C:\Users\win7\AppData\Local\Temp\nsi84C2.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Temp\nsr4BFB.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsoEC18.tmp\nsArray.dll

WINSTA.dll

C:\Users\win7\AppData\Local\Temp\nsi84C2.tmp\nsDialogs.dll

CRYPT32.dll

C:\Users\win7\AppData\Local\Temp\nsbFF23.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsf7D8F.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nss847A.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsy6E90.tmp\System.dll

Cabinet.dll

C:\Windows\system32\iphlpsvc.dll

C:\Users\win7\AppData\Local\Temp\nsc7854.tmp\System.dll

uSER32

C:\Users\win7\AppData\Local\Temp\462C4735-BAB0-7891-A34D-580F9211D2C5\Babylon.exe

C:\Users\win7\AppData\Local\Temp\nsi6D96.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nspD43B.tmp\System.dll

MSVCRT.dll

user32.dll

Advapi32.dll

C:\sampleENU.dll

C:\Users\win7\AppData\Local\Temp\nsrDAA3.tmp\SimpleSC.dll

API-MS-WIN-Service-winsvc-L1-1-0.dll

C:\Plugins\jsfx.dll

C:\Users\win7\AppData\Local\Temp\nsz9378.tmp\nsJSON.dll

IPHLPAPI.dll

gdiplus.dll

C:\Users\win7\AppData\Local\Temp\nszECF3.tmp\nsWeb.dll

D3D10Warp.dll

C:\Users\win7\AppData\Local\Temp\nsl7EE7.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsqE3FA.tmp\SimpleSC.dll

api-ms-win-downlevel-ole32-l1-1-0.dll

psapi.dll

SETUPAPI.DLL

C:\Users\win7\AppData\Local\Temp\nsrE581.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsr6941.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsk53FA.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsdB73C.tmp\NSISdl.dll

HTTPAPI.DLL

C:\Windows\system32\ntdll

C:\Users\win7\AppData\Local\Temp\is-GN01Q.tmp\_isetup\_shfoldr.dll

winspool.drv

C:\Users\win7\AppData\Local\Temp\InstTemp0\userinstall.dll

C:\Users\win7\AppData\Local\Temp\nsa7C37.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsa8938.tmp\SimpleSC.dll

\\?\C:\Users\win7\AppData\Roaming\Neuxpower Solutions Ltd\NXPowerLite\install\decoder.dll

MSHTML.DLL

C:\Users\win7\AppData\Local\Temp\nsr4BFB.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nse6F9A.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsy6CBC.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nstEA14.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nsx75CF.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsbE571.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsu8744.tmp\nsArray.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\ole32.dll

C:\Users\win7\AppData\Local\Temp\nsn7717.tmp\NSISdl.dll

OLEACC.dll

C:\Users\win7\AppData\Local\Temp\nsuE10C.tmp\SimpleSC.dll

C:\Windows\system32\sfc.dll

C:\Windows\system32\vb6chs.dll

C:\Users\win7\AppData\Local\Temp\nsy84A4.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsiDC3A.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsx210.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsd6D29.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nsf7BBB.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsgE5DE.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsn759B.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-H5441.tmp\ithttp.ENU

C:\Users\win7\AppData\Local\Temp\is-NIEM2.tmp\ithttp.EN

C:\Users\win7\AppData\Local\Temp\nsq811E.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsxCEAD.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsg97DE.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsd855F.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsg97DE.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsxCEAD.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsj6ECF.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nso6ABE.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsj87A0.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nsc7854.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsy7978.tmp\nsArray.dll

C:\Windows\system32\user.exe

VERSION.dll

C:\Users\win7\AppData\Local\Temp\nst8521.tmp\SimpleSC.dll

Fwpuclnt.dll

C:\Users\win7\AppData\Local\Temp\nsk53FA.tmp\System.dll

C:\sa.dll

C:\Users\win7\AppData\Local\Temp\nsv565A.tmp\KillProcDLL.dll

C:\Users\win7\AppData\Local\Temp\nsoDE7C.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsf7BBB.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nse7AD0.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsyAB07.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsfE31F.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-Q7C3R.tmp\_isetup\_shfoldr.dll

NTDLL.dll

C:\Users\win7\AppData\Local\Temp\nsn6D19.tmp\SimpleSC.EN

API-MS-Win-Core-LocalRegistry-L1-1-0.dll

c:\Users\win7\AppData\Local\Temp\sfx1\gdipacc.dll

C:\Users\win7\AppData\Local\Temp\nsy61DE.tmp\NSISdl.dll

WSOCK32.dll

C:\Users\win7\AppData\Local\Temp\nsgA5C8.tmp\nsExec.dll

hhctrl.ocx

C:\Users\win7\AppData\Local\Temp\nsvA367.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsy77A4.tmp\nsArray.dll

shfolder.dll

C:\Users\win7\AppData\Local\Temp\nse7AD0.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsrB227.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsk7DF2.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsuD4A8.tmp\SimpleSC.dll

WS2_32.dll

C:\Users\win7\AppData\Local\Temp\nsvCCCD.tmp\SimpleSC.ENU

USER32.dll

comctl32

C:\Users\win7\AppData\Local\Temp\nsmE64C.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nss777A.tmp\StdUtils.dll

shell32.dll

uxtheme

SHFOLDER

C:\Users\win7\AppData\Local\Temp\nsiE9D6.tmp\nsExec.dll

msacm32.dll

C:\Users\win7\AppData\Local\Temp\nsn759B.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsp87C1.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsh77D7.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsw8C26.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsfE31F.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nst8521.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsa8938.tmp\SimpleSC.EN

C:\ProgramData\Barowasse2saave\515f05ce29392.dll

riched32.dll

C:\Users\win7\AppData\Local\Temp\nsp715F.tmp\SimpleSC.dll

mscoree.dll

UxTheme.dll

SetupApi.DLL

libnspr4.dll

C:\Users\win7\AppData\Local\Temp\nskEFA2.tmp\SimpleSC.EN

C:\Windows\SysWOW64\psapi.dll

C:\Users\win7\AppData\Local\Temp\nsjDF95.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsj44D6.tmp\nsResize.dll

C:\Users\win7\AppData\Local\Temp\nst6D87.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsn77B3.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsq811E.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsr75A4.tmp\nsArray.dll

C:\Windows\system32\tbssvc.dll

C:\Users\win7\AppData\Local\Temp\ginstall.dll

C:\Users\win7\AppData\Local\Temp\nst6D87.tmp\NSISdl.dll

C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\psapi.dll

C:\Users\win7\AppData\Local\Temp\nsn8291.tmp\System.dll

C:\Windows\system32\Wintrust.dll

C:\sample

C:\Users\win7\AppData\Local\Temp\is-L8N8I.tmp\WS_SaleProcess.ENU

C:\Users\win7\AppData\Local\Temp\nsf4728.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsd798D.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\is-L8N8I.tmp\WS_SaleProcess.dll

cryptnet.dll

C:\Users\win7\AppData\Local\Temp\nsn6D19.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsp8995.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nssE92A.tmp\SimpleSC.EN

reslib.dll

C:\Users\win7\AppData\Local\Temp\nsnDCF5.tmp\SimpleSC.dll

C:\Windows\system32\ole32.dll

C:\Users\win7\AppData\Local\Temp\nsuE10C.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsn8291.tmp\SimpleSC.dll

C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\ntdll.dll

kernel32.DLL

C:\Users\win7\AppData\Local\Temp\nsl7F82.tmp\nsArray.dll

WINTRUST.dll

C:\Users\win7\AppData\Local\Temp\nso6E52.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsfE1E7.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nscDA94.tmp\nsArray.dll

C:\Windows\system32\D3D10Warp.dll

C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\uxtheme.dll

C:\Windows\system32\glide3x.dll

C:\Users\win7\AppData\Local\Temp\nsjECE3.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsp8773.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsf8909.tmp\SimpleSC.ENU

hpqqpawr.rsc

smime3.dll

C:\Users\win7\AppData\Local\Temp\nssDCC6.tmp\nsExec.dll

Kernel32.DLL

C:\Users\win7\AppData\Local\Temp\is-83J4I.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\nsyDE6C.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nskEF54.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsn7801.tmp\NSISdl.dll

C:\Windows\system32\umpo.dll

C:\Users\win7\AppData\Local\Temp\nsiE987.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Temp\nsy84A4.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsjEC46.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Temp\nswA4A9.tmp\KillProcDLL.dll

DUser.dll

msvcrt.dll

iphlpapi.dll

API-MS-Win-Security-LSALookup-L1-1-0.dll

C:\Users\win7\AppData\Local\Temp\nsiDC3A.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsb8C44.tmp\nsArray.dll

api-ms-win-downlevel-advapi32-l2-1-0.dll

C:\Users\win7\AppData\Local\Temp\{DF2BFBED-3E75-420E-A0E5-765704C8D91B}\_Setup.dll

C:\Users\win7\AppData\Local\Temp\nso6EA0.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nswE504.tmp\nsArray.dll

ntdll

Comctl32.dll

d3d11.dll

C:\Users\win7\AppData\Local\Temp\is-H5441.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nsmE784.tmp\SimpleSC.dll

KerNel32

C:\Users\win7\AppData\Local\Temp\nsh7F20.tmp\nsArray.dll

GDI32.DLL

C:\Users\win7\AppData\Local\Temp\nsy6CBB.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nswDA26.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nss85B2.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsrB227.tmp\SimpleSC.ENU

dinput8.dll

C:\Users\win7\AppData\Local\Temp\nslE3DB.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsaEE7A.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nslE779.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nse7AD0.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nseEC28.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nssE92A.tmp\SimpleSC.ENU

IS

C:\Users\win7\AppData\Local\Temp\nsu7A44.tmp\NSISdl.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll

C:\Users\win7\AppData\Local\Temp\nsg7FB2.tmp\NSISdl.dll

%SystemRoot%\System32\hhctrl.ocx

C:\Users\win7\AppData\Local\Temp\nsg6902.tmp\NSISdl.dll

OLE32.DLL

C:\Users\win7\AppData\Local\Temp\nseEC28.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nszE12B.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsz7B9B.tmp\nsWeb.dll

oledlg.dll

C:\Windows\system32\vb6ko.dll

C:\Users\win7\AppData\Local\Temp\nsm7458.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsi7830.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nscF3AA.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsy9108.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsh6AD7.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsaE34E.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\is-CJH1B.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\nso6ABE.tmp\SimpleSC.EN

georamapation90214620019348

C:\Users\win7\AppData\Local\Temp\nslE779.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nss85B2.tmp\SimpleSC.EN

C:\Windows\system32\imageres.dll

C:\Users\win7\AppData\Local\Temp\nse158E.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nso6CD6.tmp\nsExec.dll

C:\Users\win7\AppData\Local\Temp\nscDBCC.tmp\NSISdl.dll

C:\Program Files\Microsoft Silverlight\sllauncher.exe

C:\Users\win7\AppData\Local\Temp\nsj6F1C.tmp\nsArray.dll

DMDskRes2.dll

C:\Users\win7\AppData\Local\Temp\nsr8DDA.tmp\NSISdl.dll

C:\Windows\syswow64\CRYPT32.dll

C:\Users\win7\AppData\Local\Temp\nsf8909.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsk7DF2.tmp\StdUtils.dll

msvcrt

C:\Users\win7\AppData\Local\Temp\nsa64EC.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nssDCC5.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Temp\nscF3F8.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nst6EBF.tmp\nsArray.dll

DMDskRes.dll

C:\Users\win7\AppData\Local\Temp\nssDCC5.tmp\nsResize.dll

C:\Windows\system32\Oleacc.dll

C:\Users\win7\AppData\Local\Temp\nsk8AA4.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nseC74A.tmp\Processes.dll

NETAPI32.dll

kernel32

C:\Users\win7\AppData\Local\Temp\nscDBCC.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsp70C3.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nst8521.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsr6941.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsy78DC.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsyD208.tmp\SimpleSC.dll

ssleay32.dll

C:\Users\win7\AppData\Local\Temp\is-NEG17.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nscF3AA.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsuD4A8.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nszBB59.tmp\nsArray.dll

Cryptdll.dll

C:\Windows\System32\ntoskrnl.exe

ADVAPI32.dll

C:\Users\win7\AppData\Local\Temp\is-L8N8I.tmp\WS_VersionProcess.ENU

C:\Users\win7\AppData\Local\Temp\nsj87A1.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nse6FE7.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\nslE513.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsc55CB.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsaEE7A.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsc833C.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nseED12.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nshCF2F.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsw6912.tmp\nsArray.dll

C:\Windows\system32\userenv.dll

fizzanst3523gs45023857309

C:\Users\win7\AppData\Local\Temp\nsb745D.tmp\NSISdl.dll

WINHTTP.dll

C:\Users\win7\AppData\Local\Temp\nsfE31F.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsdDDA1.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsj6355.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-L8N8I.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nsuE10C.tmp\SimpleSC.EN

RICHED32.DLL

C:\Users\win7\AppData\Local\Temp\nsd85AD.tmp\nsArray.dll

C:\Windows\System32\drprov.dll

C:\Users\win7\AppData\Local\Temp\nswE5EE.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsd6D29.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsxE775.tmp\NSISdl.dll

C:\ProgramData\N24dft.exe

C:\Users\win7\AppData\Local\Temp\nsb8C44.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsdF5CD.tmp\System.dll

kernel32.dll

C:\Users\win7\AppData\Local\Temp\xns8D1E.tmp

C:\Users\win7\AppData\Local\Temp\nsuE10C.tmp\System.dll

C:\Windows\system32\MSI.DLL

C:\Users\win7\AppData\Local\Temp\nsl679B.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsj6181.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsg742E.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsz7101.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsiB9B2.tmp\SimpleSC.dll

DCIMAN32.DLL

C:\Users\win7\AppData\Local\Temp\nsn85E0.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nscB265.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsaD516.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsh69ED.tmp\SimpleSC.ENU

WindowsCodecs.dll

shell32

C:\Users\win7\AppData\Local\Temp\nsh69ED.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nst8521.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsjEB0F.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nso6CD6.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsbF139.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsd6C3F.tmp\NSISdl.dll

user32

C:\Users\win7\AppData\Local\Temp\nsuD4A8.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nshCF2F.tmp\SimpleSC.dll

winmm.dll

C:\Users\win7\AppData\Local\Temp\nsl7315.tmp\SimpleSC.dll

C:\Windows\System32\imageres.dll

C:\Users\win7\AppData\Local\Temp\nsh8E38.tmp\NSISdl.dll

C:\Windows\system32\drivers\pacer.sys

C:\Users\win7\AppData\Local\Temp\nsd855F.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsa86D1.tmp\nsResize.dll

C:\Users\win7\AppData\Local\Temp\nsm8CD2.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsnE9A7.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsnCECB.tmp\System.dll

SHELL32.dll

C:\Users\win7\AppData\Local\Temp\nsfC8D1.tmp\NSISdl.dll

C:\Windows\system32\riched20.dll

C:\Users\win7\AppData\Local\Temp\nsp37F7.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsnEA43.tmp\NSISdl.dll

C:\Plugins\elastique2.dll

dsound.dll

COMDLG32.dll

nssutil3.dll

C:\Windows\system32\asycfilt.dll

KBDUS.DLL

C:\Users\win7\AppData\Local\Temp\033f8e4b.a

C:\Users\win7\AppData\Local\Temp\nsu6430.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsmE5FE.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsfC9BB.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nsm5C70.tmp\nsWeb.dll

gdi32.DLL

Iphlpapi.dll

C:\Users\win7\AppData\Local\Temp\nsm736E.tmp\NSISdl.dll

C:\Windows\system32\cscsvc.dll

C:\Users\win7\AppData\Local\Temp\nsn6B93.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsaEE7A.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsi765C.tmp\NSISdl.dll

d2d1.dll

C:\Users\win7\AppData\Local\Temp\nsoDE7C.tmp\SimpleSC.ENU

riched20.dll

rearoute.dll

C:\Users\win7\AppData\Local\Temp\nsa72D6.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsb7631.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsd8426.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Temp\nsq7F49.tmp\nsJSON.dll

OLEAUT32.dll

C:\Plugins\diracLE.dll

C:\Users\win7\AppData\Local\Temp\nsr6941.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-L8N8I.tmp\WS_AgentProcess.dll

C:\Users\win7\AppData\Local\Temp\nsdDDA1.tmp\SimpleSC.EN

Userenv.dll

C:\Users\win7\AppData\Local\Temp\is-NFAB7.tmp\ItDownload_wex.EN

C:\Users\win7\AppData\Local\Temp\nsw765F.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsn6D19.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsjEC46.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsm8286.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsm6AA8.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsqF148.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsu7B7C.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsqF148.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nssF58E.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsr8CF1.tmp\SimpleSC.EN

<NULL>

C:\Windows\system32\msi.dll

C:\Users\win7\AppData\Local\Temp\nsp7E11.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsmDA36.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nskEE1C.tmp\SimpleSC.dll

gdi32

DWrite.dll

C:\Users\win7\AppData\Local\Temp\nse7083.tmp\nsResize.dll

C:\Users\win7\AppData\Local\Temp\nslD813.tmp\NSISdl.dll

wpcap.dll

C:\Users\win7\AppData\Local\Temp\nsdAAD8.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nst6171.tmp\SimpleSC.EN

CFGMGR32.dll

C:\Users\win7\AppData\Local\Temp\nsl7EE7.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsb4B9C.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsn762D.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\is-UHVUJ.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\nsm7458.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nse7083.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsbE571.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsn86CA.tmp\KillProcDLL.dll

C:\Users\win7\AppData\Local\Temp\nsuE1A8.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nssDC78.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsoEC18.tmp\NSISdl.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5a401fd2a7689ff13fb54182953f9c40\System.Drawing.ni.dll

C:\Windows\system32\crtdll.dll

C:\Users\win7\AppData\Local\Temp\nsr4BFB.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsrE581.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsi835C.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nsx81E5.tmp\nsWeb.dll

comctl32.dll

C:\Users\win7\AppData\Local\Temp\nsy796E.tmp\nsArray.dll

SHELL32.DLL

C:\Users\win7\AppData\Local\Temp\nsx831D.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsy84A4.tmp\SimpleSC.EN

RichEd20

security.dll

C:\Users\win7\AppData\Local\Temp\nsw9012.tmp\nsArray.dll

WINSPOOL.DRV

winmm

C:\Users\win7\AppData\Local\Temp\nsmE5FE.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nst6171.tmp\System.dll

RPCRT4.dll

C:\Users\win7\AppData\Local\Temp\nsb74F9.tmp\nsArray.dll

SHLWAPI.dll

ddraw.dll

C:\Users\win7\AppData\Local\Temp\nsr7FA3.tmp\SimpleSC.EN

GDI32.dll

USERENV.dll

C:\Users\win7\AppData\Local\Temp\nsqE3FA.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nse7AD0.tmp\SimpleSC.EN

MMDEVAPI.DLL

C:\Users\win7\AppData\Local\Temp\nse158E.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsiCD70.tmp\System.dll

user32

C:\Windows\system32\wtsapi32.dll

C:\Users\win7\AppData\Local\Temp\nsl8C35.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsc4C88.tmp\NSISdl.dll

C:\\sqmapi.dll

C:\Users\win7\AppData\Local\Temp\nsp6597.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nswE504.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nskEFA2.tmp\SimpleSC.ENU

midimap.dll

C:\Users\win7\AppData\Local\Temp\nsi6CFA.tmp\NSISdl.dll

KeRnEl32

C:\Users\win7\AppData\Local\Temp\nsl7E4B.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nscDA94.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nse7035.tmp\nsResize.dll

C:\Users\win7\AppData\Local\Temp\nsyD034.tmp\nsArray.dll

C:\Windows\system32\wbem\xml\wmi2xml.dll

C:\Users\win7\AppData\Local\Temp\nse6FE7.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Temp\ActSys\SSL\import.bat

C:\Users\win7\AppData\Local\Temp\is-H5441.tmp\ithttp.EN

AdvApi32

C:\Users\win7\AppData\Local\Temp\nsb7631.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsvF07C.tmp\UserInfo.dll

kernel32

C:\Users\win7\AppData\Local\Temp\nszBB59.tmp\NSISdl.dll

SPINF.dll

C:\Users\win7\AppData\Local\Temp\nsh116.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nslCB61.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsf4728.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nsq7F49.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nsuE1A8.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsvF07C.tmp\nsJSON.dll

NetLogon.dll

olepro32.dll

C:\Users\win7\AppData\Local\Temp\nsr7FA3.tmp\System.dll

C:\Windows\system32\Secur32.dll

C:\Users\win7\AppData\Local\Temp\nsa72D6.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nsp7B5D.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nssDCC5.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nst6E23.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsz6F7B.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsl8BE7.tmp\NSISdl.dll

NET

C:\Users\win7\AppData\Local\Temp\nsp87C1.tmp\NSISdl.dll

MSVBVM60.DLL

C:\Users\win7\AppData\Local\Temp\is-7R67I.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\nsv721B.tmp\SimpleSC.dll

C:\Windows\system32\Msimtf.dll

C:\Users\win7\AppData\Local\Temp\nsm8CD2.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsv73EF.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nse864A.tmp\NSISdl.dll

userenv.dll

Kernel32.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\007fc007edc388d9806dff94ee04f129\System.Configuration.ni.dll

C:\Users\win7\AppData\Local\Temp\nsi250.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsjE07F.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsl7315.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsy84A4.tmp\System.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\12dc10e5c0e8d176cf21a16a6fc5fc3b\Microsoft.VisualBasic.ni.dll

mscorsec.dll

C:\Windows\system32\Psapi.dll

C:\Users\win7\AppData\Local\Temp\is-H5441.tmp\ithttp.dll

C:\Users\win7\AppData\Local\Temp\nse6F9A.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsxCEAD.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\is-L8N8I.tmp\WS_Log.dll

netapi32.dll

C:\Users\win7\AppData\Local\Temp\nskD7BA.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsb745D.tmp\SimpleSC.EN

PROPSYS.dll

C:\Users\win7\AppData\Local\Temp\nsrA8BA.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nse7A34.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsr8C55.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsnCECB.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Temp\nsuEF88.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nse7036.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsnC42C.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsuD4A8.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsaE1C8.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsb7595.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nss777A.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsn83C9.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsk53FA.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsp8773.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsp715F.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsb745D.tmp\nsArray.dll

C:\Windows\system32\kernel32.dll

C:\Users\win7\AppData\Local\Temp\nsz7CC9.tmp\nsArray.dll

drt.dll

C:\Users\win7\AppData\Local\Temp\nssA82A.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsp715E.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nst6171.tmp\SimpleSC.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\30280e5e7d89ffe702df50de4d339fc7\System.Configuration.Install.ni.dll

C:\Users\win7\AppData\Local\Temp\nsbE571.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsj87A0.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nssDC78.tmp\SimpleSC.EN

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\99cdfef98595ed91f14936cf52a49c54\System.Management.ni.dll

C:\Windows\system32\wer.dll

C:\Users\win7\AppData\Local\Temp\is-L8N8I.tmp\WS_SaleProcess.EN

C:\Users\win7\AppData\Local\Temp\TsuDA2E776F.dll

C:\Windows\system32\PeerDistSvc.dll

C:\Users\win7\AppData\Local\Temp\nsn8291.tmp\SimpleSC.EN

api-ms-win-core-winrt-l1-1-0.dll

C:\Users\win7\AppData\Local\Temp\nsz7CC9.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsuEF88.tmp\SimpleSC.dll

ole32.dll

COMCTL32.dll

C:\Users\win7\AppData\Local\Temp\nsoEA91.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsyD034.tmp\NSISdl.dll

ws2_32.dll

C:\Users\win7\AppData\Local\Temp\nsm69BE.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nse70D2.tmp\SimpleSC.EN

version.dll

C:\Users\win7\AppData\Local\Temp\nsb7631.tmp\nsExec.dll

C:\Users\win7\AppData\Local\Temp\nsoD218.tmp\nsArray.dll

pstorec.dll

C:\Users\win7\AppData\Local\Temp\nsw8C26.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nsy6E90.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsa7C37.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nswF168.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsi6D96.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsr4C48.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsi6CAB.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsa7372.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsqF0FA.tmp\SimpleSC.dll

SETUPAPI.dll

C:\Users\win7\AppData\Local\Temp\nsl679B.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsy6CBB.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsb745D.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsa8938.tmp\SimpleSC.ENU

wintrust.dll

ntmarta.dll

dhcpcsvc.DLL

USER32.DLL

C:\Users\win7\AppData\Local\Temp\is-0VCOV.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\nse7083.tmp\nsJSON.dll

C:\\AYCtlU.dll

C:\Users\win7\AppData\Local\Temp\nse5E69.tmp\nsResize.dll

C:\Users\win7\AppData\Local\Temp\nsc82A0.tmp\NSISdl.dll

C:\Plugins\elastique.dll

C:\Users\win7\AppData\Local\Temp\nsxE775.tmp\nsArray.dll

C:\Windows\System32\shdocvw.dll

C:\Users\win7\AppData\Local\Temp\nsr76DD.tmp\inetc.dll

C:\Users\win7\AppData\Local\Temp\nsy78DC.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsq6682.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-ESACR.tmp\beepdl.dll

C:\Users\win7\AppData\Local\Temp\~vis0000\vise32ex.dll

C:\Users\win7\AppData\Local\Temp\nsd6D29.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nshD97B.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsd6C3F.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsaE1C8.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsi6CFA.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\is-0VCOV.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\nsy78DC.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsqE3FA.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsm8CD2.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsiB70D.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nswF41C.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsh6AD7.tmp\nsArray.dll

C:\Windows\system32\CRTDLL.dll

C:\Users\win7\AppData\Local\Temp\nstAAE8.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsp715F.tmp\SimpleSC.EN

DEVRTL.dll

C:\rarlng.dll

C:\Users\win7\AppData\Local\Temp\nseED12.tmp\SimpleSC.ENU

C:\Windows\Microsoft.NET\Framework\v2.0.50727\en-US\mscorrc.dll

C:\Users\win7\AppData\Local\Temp\nso6E52.tmp\System.dll

AVICAP32.dll

msi.dll

C:\Users\win7\AppData\Local\Temp\nsk70F2.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nslE38C.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Temp\nsv73EF.tmp\StdUtils.dll

C:\Windows\System32\msxml6r.dll

C:\Users\win7\AppData\Local\Temp\nsj6ECF.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsrDAA3.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsp715F.tmp\SimpleSC.ENU

imageres.dll

WINMM.DLL

C:\Users\win7\AppData\Local\Temp\nsf4728.tmp\nsResize.dll

C:\Users\win7\AppData\Local\Temp\nsjDF95.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsb7595.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsdDDA1.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nso6E52.tmp\SimpleSC.EN

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\716ee14dc9aafde2b5f7f387d842661d\System.ServiceProcess.ni.dll

WS2_32.DLL

C:\Users\win7\AppData\Local\Temp\nsy6CBC.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsnDCF5.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsjEB0F.tmp\System.dll

API-MS-Win-Security-SDDL-L1-1-0.dll

C:\Users\win7\AppData\Local\Temp\nsu6430.tmp\nsArray.dll

C:\Windows\system32\dinput8.dll

MMDevAPI.DLL

C:\Users\win7\AppData\Local\Temp\nsqF0FA.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsq811E.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsa64EC.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsl8AAF.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsjECE3.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsv721B.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsrE581.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsfC8D1.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsnDCF5.tmp\SimpleSC.EN

C:\Windows\system32\DSOUND.DLL

C:\Windows\system32\odbcint.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System\908ba9e296e92b4e14bdc2437edac603\System.ni.dll

C:\Users\win7\AppData\Local\Temp\nsdEA53.tmp\SimpleSC.dll

C:\Windows\system32\~

KERNEL32

C:\Users\win7\AppData\Local\Temp\is-L8N8I.tmp\WS_AgentProcess.EN

C:\Users\win7\AppData\Local\Temp\nshCF2F.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsn762D.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nse6F9A.tmp\SimpleSC.EN

KeRNEL32

IEFRAME.dll

C:\Users\win7\AppData\Local\Temp\nsuE1A8.tmp\SimpleSC.dll

C:\Windows\system32\MSVBVM60.DLL

C:\Users\win7\AppData\Local\Temp\nsl8A61.tmp\SimpleSC.dll

C:\Windows\system32\ntshrui.dll

C:\Users\win7\AppData\Local\Temp\nshD97B.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsaD516.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsmDA84.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsd83D8.tmp\System.dll

C:\Windows\SysWOW64\WScript.exe

WLDAP32.dll

C:\Users\win7\AppData\Local\Temp\nspE051.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nspD43B.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsrB227.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsoD218.tmp\NSISdl.dll

SXS.DLL

MSVCRT.DLL

C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll

ieframe.dll

C:\Users\win7\AppData\Local\Temp\nsd838B.tmp\nsArray.dll

C:\Windows\system32\advpack.dll

C:\Windows\system32\pnrpsvc.dll

C:\Users\win7\AppData\Local\Temp\nso6EEE.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsiB9B2.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsh80EB.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nscF3F8.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsk722A.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsm7458.tmp\SimpleSC.ENU

SSPICLI

OLEAUT32.DLL

MPR.dll

fxsresm.dll

C:\Users\win7\AppData\Local\Temp\nsvCCCD.tmp\SimpleSC.dll

USeR32

C:\Users\win7\AppData\Local\Temp\RarSFX0\BTuuGhr.exe

C:\Users\win7\AppData\Local\Temp\nsiE93A.tmp\NSISdl.dll

C:\Windows\system32\xmllite.dll

C:\Users\win7\AppData\Local\Temp\nseDF28.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nsn77B3.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsfE31F.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsb745D.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsn7801.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsc4C88.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nslE779.tmp\SimpleSC.EN

msimg32.dll

C:\Users\win7\AppData\Local\Temp\nsy8408.tmp\System.dll

C:\Windows\system32\VB6ES.DLL

C:\Users\win7\AppData\Local\Temp\nswE5EE.tmp\SimpleSC.EN

psapi.DLL

C:\Users\win7\AppData\Local\Temp\nssDC78.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsa8938.tmp\System.dll

OLEACC.DLL

nvcuda.dll

C:\Users\win7\AppData\Local\Temp\nsy84A4.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsyD208.tmp\SimpleSC.EN

C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\oleaut32.dll

mshtml.dll

C:\Windows\system32\advapi32.dll

C:\Users\win7\AppData\Local\Temp\nsh69ED.tmp\System.dll

KeRnEl32

CRYPTSP.dll

C:\Users\win7\AppData\Local\Temp\{DF2BFBED-3E75-420E-A0E5-765704C8D91B}\Custom.dll

C:\Users\win7\AppData\Local\Temp\nsr75A4.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsm736E.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsdEA53.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsvCCCD.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsy6E90.tmp\SimpleSC.ENU

WLDMLRES.DLL

1

C:\Users\win7\AppData\Local\Temp\nsl66FF.tmp\nsWeb.dll

C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\bcrypt.dll

C:\Users\win7\AppData\Local\Temp\is-NFAB7.tmp\ItDownload_wex.ENU

WsmRes.dll

C:\Users\win7\AppData\Local\Temp\nsqF148.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsxCF49.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nss7816.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsc55CB.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsl8C35.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsp7B5D.tmp\NSISdl.dll

uxtheme.dll

C:\Users\win7\AppData\Local\Temp\nsj6355.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nskFC54.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nso6EA0.tmp\NSISdl.dll

C:\Windows\system32\glide2x.dll

RichEd32.dll

C:\Users\win7\AppData\Local\Temp\nsf7BBB.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsbE571.tmp\SimpleSC.EN

ncrypt.dll

C:\Users\win7\AppData\Local\Temp\nsc7854.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsoDE7C.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nso6EEE.tmp\nsArray.dll

slc.dll

sxs.dll

C:\Users\win7\AppData\Local\Temp\03738601.a

C:\Users\win7\AppData\Local\Temp\nsaE1C8.tmp\SimpleSC.EN

newdev.dll

DWMAPI.DLL

VERSION.DLL

IPHLPAPI.DLL

C:\Users\win7\AppData\Local\Temp\nsrB227.tmp\SimpleSC.EN

setupapi.dll

C:\Users\win7\AppData\Local\Temp\nsvCCCD.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsr808D.tmp\nsWeb.dll

C:\Windows\system32\drivers\ndis.sys

C:\Users\win7\AppData\Local\Temp\nst86A6.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nse158E.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nse7083.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nsv721B.tmp\SimpleSC.EN

dwmapi.dll

C:\Users\win7\AppData\Local\Temp\nsq7F49.tmp\nsResize.dll

C:\Users\win7\AppData\Local\Temp\nswDA26.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nss769A.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nss904C.tmp\nsWeb.dll

shlwapi.DLL

comdlg32.dll

C:\Users\win7\AppData\Local\Temp\nsrE581.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsgE3BC.tmp\System.dll

C:\Windows\system32\crypt32.dll

C:\Users\win7\AppData\Local\Temp\nsz87FF.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsyDE6C.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsh80EB.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nst6EBF.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsi6D96.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\is-4MFVH.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nsr8D8D.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nss847A.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsk722A.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nspD43B.tmp\SimpleSC.dll

atl.dll

c:\windows\system32\imageres.dll

C:\Users\win7\AppData\Local\Temp\nse5E69.tmp\System.dll

NTDLL.DLL

C:\Users\win7\AppData\Local\Temp\nsrDAA3.tmp\System.dll

Advapi32.DLL

C:\Users\win7\AppData\Local\Temp\nsgFE0A.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nss85B2.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsdDDA1.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsm8CD2.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nslE38C.tmp\System.dll

bcrypt.dll

NSI.dll

C:\Users\win7\AppData\Local\Temp\nsfE1E7.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nslD68D.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsg75B4.tmp\nsWeb.dll

C:\Windows\system32\winsta.dll

C:\Users\win7\AppData\Local\Temp\is-VDPSG.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nsbF139.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsr7640.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsr7FA3.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsx75CF.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsi7830.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsf8909.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\is-IIFFB.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nse70D2.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsu70E2.tmp\StdUtils.dll

C:\Windows\system32\dsound.dll

C:\Users\win7\AppData\Local\Temp\nsb740F.tmp\SimpleSC.dll

lsm.exe

IMM32.DLL

C:\Users\win7\AppData\Local\Temp\nsn8F90.tmp\NSISdl.dll

C:\Windows\system32\WINMM.dll

C:\Users\win7\AppData\Local\Temp\nsw8DF0.tmp\040244ea-880d-474a-83c9-61f830bcb17b.dll

C:\Users\win7\AppData\Local\Temp\nsy77A4.tmp\NSISdl.dll

MLANG.dll

OLE32.dll

C:\Users\win7\AppData\Local\Temp\nse6F9A.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsd8426.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Google\Chrome\Application\chrome.exe

C:\ProgramData\BBroowsee2save\515f52b6468e9.dll

C:\Users\win7\AppData\Local\Temp\nsl8BE6.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nszE12B.tmp\NSISdl.dll

wsock32.dll

C:\Users\win7\AppData\Local\Temp\nsp8995.tmp\System.dll

C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18834_none_72d38c5186679d48\gdiplus.dll

C:\Users\win7\AppData\Local\Temp\nsrA8BA.tmp\NSISdl.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\0967cf5c31691f38d013263304d2dacb\System.Runtime.Remoting.ni.dll

C:\Users\win7\AppData\Local\Temp\nso7A68.tmp\nsArray.dll

UIAutomationCore.dll

C:\Users\win7\AppData\Local\Temp\nsp70C3.tmp\nsArray.dll

werui.dll

C:\Windows\system32\GDI32.dll

C:\Users\win7\AppData\Local\Temp\nssE840.tmp\nsArray.dll

wintab32.dll

C:\Users\win7\AppData\Local\Temp\nsl8A61.tmp\SimpleSC.EN

C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\ntdll.dll

avrt.dll

C:\Users\win7\AppData\Local\Temp\nsr8CF1.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nso6ABE.tmp\SimpleSC.dll

libssl32.dll

C:\Users\win7\AppData\Local\Temp\nsq6682.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsx83B8.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsm6AA8.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsd7811.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\Jgl_Rt\jesterrun0.EN

C:\Users\win7\AppData\Local\Temp\nsu70E2.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsmE784.tmp\System.dll

C:\Windows\system32\wintrust.dll

C:\Users\win7\AppData\Local\Temp\nsyD208.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsy84A4.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsb7631.tmp\SimpleSC.dll

msacm32.drv

C:\Users\win7\AppData\Local\Temp\nsoDE7C.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nswF168.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsd855F.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsi84C2.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsj6ECF.tmp\SimpleSC.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\6949c4470a81970ec3de0a575d93babc\System.Windows.Forms.ni.dll

C:\Users\win7\AppData\Local\Temp\nsgFE0A.tmp\SimpleSC.EN

C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\en\mscorrc.dll

C:\Users\win7\AppData\Local\Temp\nsd838B.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsw6912.tmp\NSISdl.dll

advapi32

C:\Users\win7\AppData\Local\Temp\nsq8C06.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nse5E69.tmp\nsDialogs.dll

C:\Windows\system32\mscoree.dll

Shell32.dll

C:\Users\win7\AppData\Local\Temp\nsz9378.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\nslE779.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nse7AD0.tmp\SimpleSC.dll

API-MS-WIN-DOWNLEVEL-SHLWAPI-L1-1-0.DLL

C:\Users\win7\AppData\Local\Temp\nsd83D8.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Temp\nsd77C3.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsmDA84.tmp\NSISdl.dll

C:\Windows\system32\Netapi32.dll

dwrite.dll

C:\Users\win7\AppData\Local\Temp\nsl7363.tmp\nsArray.dll

C:\Windows\system32\kernel32

C:\Users\win7\AppData\Local\Temp\nsb8BA9.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\is-CJH1B.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\nsg742E.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsnEA43.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsg7FB2.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsr8208.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nssE92A.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsb740F.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nssA82A.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsy6E90.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nscF3AA.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsyDCE6.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsz7101.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-L8N8I.tmp\WS_AgentProcess.ENU

C:\Users\win7\AppData\Local\Temp\nstD0B1.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsuD544.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-L8N8I.tmp\WS_VersionProcess.dll

C:\Users\win7\AppData\Local\Temp\nslBE13.tmp\nsArray.dll

dxgi.dll

C:\Users\win7\AppData\Local\Temp\nskEE1C.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nshCF2F.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsh69ED.tmp\SimpleSC.dll

srclient.dll

C:\Windows\syswow64\MSCTF.dll

OLEACCRC.DLL

C:\Users\win7\AppData\Local\Temp\nssDCC5.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nss769A.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nse158E.tmp\SimpleSC.ENU

C:\Windows\system32\RICHED20.DLL

C:\Users\win7\AppData\Local\Temp\nsuEF88.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsr8C55.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsr8257.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsd855F.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nse70D2.tmp\System.dll

msls31.dll

C:\Users\win7\AppData\Local\Temp\is-NFAB7.tmp\_isetup\_shfoldr.dll

oleaut32.dll

C:\Users\win7\AppData\Local\Temp\nsf4728.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Temp\nsxCF49.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsr8CF1.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsx83B8.tmp\nsArray.dll

SHELL32

C:\Users\win7\AppData\Local\Temp\nsf72A7.tmp\nsExec.dll

C:\Users\win7\AppData\Local\Temp\nsi765C.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsm775A.tmp\System.dll

CRYPTBASE.dll

C:\Users\win7\AppData\Local\Temp\nsi6D96.tmp\SimpleSC.ENU

C:\Windows\system32\shlwapi.dll

C:\Users\win7\AppData\Local\Temp\nsd6D29.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsn8291.tmp\SimpleSC.ENU

uSeR32

API-MS-WIN-Service-Management-L1-1-0.dll

API-MS-WIN-Service-Management-L2-1-0.dll

C:\Users\win7\AppData\Local\Temp\nsc833C.tmp\System.dll

fwpuclnt.dll

C:\Users\win7\AppData\Local\Temp\nsbF139.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-ESACR.tmp\beepdl.ENU

C:\DXGIDebug.dll

C:\Users\win7\AppData\Local\Temp\nsu7B7C.tmp\NSISdl.dll

Clusapi.DLL

ntshrui.dll

C:\Users\win7\AppData\Local\Temp\nsb745D.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsl7315.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nso7A68.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nse7AD0.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsc771C.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nssE92A.tmp\nsExec.dll

C:\Users\win7\AppData\Local\Temp\nsqF148.tmp\System.dll

nss3.dll

C:\Users\win7\AppData\Local\Temp\nslFCA2.tmp\KillProcDLL.dll

C:\Users\win7\AppData\Local\Temp\nsuD544.tmp\nsArray.dll

cscsvc.dll

api-ms-win-downlevel-shlwapi-l2-1-0.dll

C:\Windows\system32\DXGIDebug.dll

C:\Users\win7\AppData\Local\Temp\nso6E52.tmp\SimpleSC.ENU

ShFolder.DLL

C:\Windows\System32\ntlanman.dll

C:\Users\win7\AppData\Local\Temp\nsb740F.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nskEFA2.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-NIEM2.tmp\ithttp.ENU

C:\Users\win7\AppData\Local\Temp\nsxF55F.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsn6B93.tmp\System.dll

C:\Windows\system32\VBoxMRXNP.dll

C:\Users\win7\AppData\Local\Temp\nsp37F7.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsaEF64.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nslD68D.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsaF04E.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsmE784.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsp880F.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsbFF23.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nst6E23.tmp\nsArray.dll

cscapi.dll

C:\Users\win7\AppData\Local\Temp\Jgl_Rt\jesterrun0.dll

wintab32

C:\Users\win7\AppData\Local\Temp\nse5E69.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Temp\nsxCEAD.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsfD6BB.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsr7FA3.tmp\SimpleSC.dll

AdvApi32.dll

C:\Windows\system32\DUser.dll

C:\Users\win7\AppData\Local\Temp\nsj7CB9.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nss85B2.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsp880F.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nse70D2.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsgE3BC.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nsoEA91.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Temp\nsj87A0.tmp\nsJSON.dll

amxxpc32.dll

C:\Users\win7\AppData\Local\Temp\nsm9984.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsd83D8.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nsj87A0.tmp\nsResize.dll

C:\Users\win7\AppData\Local\Temp\nsl7E4B.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsy61DE.tmp\nsArray.dll

WININET.dll

RichEd20.dll

DNSAPI.dll

C:\Users\win7\AppData\Local\Temp\nsx831D.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsb6895.tmp\nsArray.dll

C:\Windows\SysWOW64\ieframe.dll

C:\Users\win7\AppData\Local\Temp\nspE051.tmp\System.dll

C:\Windows\system32\Iphlpapi.dll

COMCTL32

C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll

C:\Users\win7\AppData\Local\Temp\nsb8BA9.tmp\SimpleSC.ENU

C:\Windows\system32\Shell32.dll

C:\Users\win7\AppData\Local\Temp\nsy78DC.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\is-83J4I.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\nsqF0FA.tmp\System.dll

C:\Windows\system32\SHFolder.dll

msftedit.dll

C:\Users\win7\AppData\Local\Temp\is-NIEM2.tmp\ithttp.dll

C:\Windows\system32\user32.dll

C:\Users\win7\AppData\Local\Temp\037381ac.a

HID.DLL

C:\Users\win7\AppData\Local\Temp\is-7R67I.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\nsu7BCA.tmp\SimpleSC.dll

crypt32.dll

Riched20.dll

C:\Users\win7\AppData\Local\Temp\nskD7BA.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsaEE7A.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsw8276.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsn6B93.tmp\NSISdl.dll

kernel256

C:\Users\win7\AppData\Local\Temp\nswE5EE.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nskFC54.tmp\StdUtils.dll

SspiCli.dll

C:\Users\win7\AppData\Local\Temp\nsmE784.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsw9012.tmp\NSISdl.dll

C:\Windows\system32\lsm.exe

C:\Users\win7\AppData\Local\Temp\nsm7458.tmp\System.dll

pnrpsvc.dll

C:\Users\win7\AppData\Local\Temp\nsdEA53.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsgE5DE.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsvA367.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsaD515.tmp\nsArray.dll

AzRoles.dll

C:\Users\win7\AppData\Local\Temp\nsf8909.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsuEF88.tmp\SimpleSC.ENU

KERNEL32.DLL

WINTRUST.DLL

C:\ProgramData\Barowasse2saave\515f05cca2d7e.dll

C:\Users\win7\AppData\Local\Temp\nsn8544.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsr4BFB.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsxCF49.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsyB76B.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsj6F1C.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsiB9B2.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\03737b05.a

C:\Windows\system32\dwmapi.dll

C:\Users\win7\AppData\Local\Temp\nscF3AA.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsy7978.tmp\NSISdl.dll

OLEPRO32.DLL

C:\Users\win7\AppData\Local\Temp\nseEC28.tmp\SimpleSC.dll

propsys.dll

IMM32.dll

C:\Users\win7\AppData\Local\Temp\nsj6ECF.tmp\SimpleSC.EN

avcodec.dll

C:\Users\win7\AppData\Local\Temp\nseDF28.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nscE8CC.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nswF168.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsnDCF5.tmp\System.dll

msimsg.dll

C:\Users\win7\AppData\Local\Temp\nshE6C9.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsu7A44.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nso6ABE.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsrDAA3.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsjE07F.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nslE38C.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nsn8592.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nslBE13.tmp\NSISdl.dll

PeerDistSvc.dll

C:\Users\win7\AppData\Local\Temp\nsk7BDA.tmp\nsArray.dll

C:\ProgramData\Seearrchh-NewuTab\515f52b3b1e65.dll

C:\Users\win7\AppData\Local\Temp\nsi250.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsb9993.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsz87FF.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsl7E99.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nsf716F.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nswF41C.tmp\NSISdl.dll

C:\Windows\system32\ntdll.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\Gdiplus.dll

C:\Users\win7\AppData\Local\Temp\nsq6808.tmp\nsArray.dll

C:\Windows\system32\cryptnet.dll

C:\Users\win7\AppData\Local\Temp\nsr908F.tmp\System.dll

rstrtmgr.dll

aticalrt.dll

C:\Users\win7\AppData\Local\Temp\nsl8A61.tmp\SimpleSC.ENU

rpcrt4.dll

gdiplus

ADVAPI32.DLL

C:\Users\win7\AppData\Local\Temp\nsl7363.tmp\NSISdl.dll

C:\Windows\SysWOW64\DDRAW.dll

C:\Users\win7\AppData\Local\Temp\nsyD208.tmp\System.dll

C:\Windows\system32\ws2_32

C:\Users\win7\AppData\Local\Temp\nsm9984.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-NFAB7.tmp\ItDownload_wex.dll

C:\Users\win7\AppData\Local\Temp\nseEC28.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\is-VDPSG.tmp\ithttp.dll

C:\Users\win7\AppData\Local\Temp\nsk7BDA.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsq6808.tmp\NSISdl.dll

#39#

#72#

#45#

#53#

#38#

#76#

#44#

#37#

#34#

.txt

program

#30#

#43#

#42#

#5C#

#36#

#6F#

#35#

#41#

#6E#

#3D#

#6D#

#6C#

#33#

#6B#

.EXE

#64#

#31#

#70#

#68#

[-C-]

#22#

ample

#4C#

#52#

#75#

#2F#

#79#

#3E#

[-D-]

#67#

#5F#

#66#

#3C#

#3A#

#63#

https

http

document

[-c-]

#46#

#74#

#50#

#32#

#58#

[-d-]

#20#

#61#

.exe

res

#54#

#2D#

file

#73#

#77#

#69#

#65#

tretGfgffgd

tretgfgffgd

Plane12

IESerifFontName

<NULL>

Version

Compatible

EvalationData

LatestIndex

IEPropFontName

Move System Caret

DontSendAdditionalData

Plane16

ServerInfoTimeout

DisableSecuritySettingsCheck

InstallRoot

DefaultConnectionSettings

ConfigMask

Expand Alt Text

Plane7

SystemSetupInProgress

Plane9

System.Windows.Forms

UserContextListCount

SIG

Always Use My Font Size

System

NIDependencies

Microsoft.VisualBasic

WpadDetectedUrl

ContextLimit

Plane6

AutoDetect

IECompatVersionHigh

DataFilePath

SavedLegacySettings

Enable AutoImageResize

MaxConnectionsPer1_0Server

Platform

DisableKeepAlive

IECompatVersionLow

950

CVListXMLVersionLow

No3DBorder

EnableHttp1_1

SecurityIdIUriCacheSize

WpadDecisionReason

System.Xml

ConnectRetries

SendExtraCRLF

EnablePunycode

ScavengeCacheLowerBound

WpadDns

Plane11

SecureProtocols

VolumeSize

MinimumSystemTimerResolution

SendTimeOut

ConfigString

ProxyOverride

Plane5

TRACE_CLUSTER

WpadDecisionTime

TRACE_TRACE

SessionMerging

Play_Animations

DisplayName

ScavengeCacheFileLifeTime

MissingDependencies

Plane8

CacheMode

Plane15

System.Deployment

CmtTextData

CombineFalseStartData

WpadDhcp

ProcessID

Plane3

RtfConverterFlags

UserContextLockCount

ForceLog

WpadDecision

DownloadCacheQuotaInKB

MaxConnectionsPerProxy

TotalLimit

DOMStorage

ConnectTimeOut

DaysToKeep

Plane13

DontUseDNSLoadBalancing

ILUsageMask

AutoConfigURL

Default_CodePage

Plane14

SystemProductName

DisableMMX

JScriptProfileCacheEventDelay

GCStressStartAtJit

Status

Plane2

NIUsageMask

WarnOnPostRedirect

Print_Background

DisableNTLMPreAuth

MaxConnectionsPerServer

Anchor Color Visited

CVListXMLVersionHigh

CoInternetCombineIUriCacheSize

Q300829

XDomainRequest

0

Size

MVID

DisableConfigCache

ProxyEnable

ProxyServer

Play_Background_Sounds

IdnEnabled

WpadSearchAllDomains

DisableReadRange

SmoothScroll

Disable

KeepAliveTimeout

UseHR

Use Web Based FTP

IEFontSizePrivate

RenderingLoopMaxTime

Plane10

IdentifierLimit

AllowForDebug

Plane1

UrlEncoding

ReceiveTimeOut

fWrap

IESansSerifFontName

EnableNegotiate

Always Use My Font Face

Name

WpadExpirationDays

FrameTabWindow

IEUIFontName

AdminTabProcs

Disable Diagnostics Mode

FtpDefaultExpiryTimeSecs

Plane4

DnsCacheEntries

ILDependencies

VML

CLSID

mscorlib

ProgramFilesDir

MaxSubDomains

IE

Anchor Color Hover

FrameMerging

DisableScriptDebuggerIE

PreResolveLimit

DnsCacheEnabled

ProxyHttp1.1

OnlyUseLatestCLR

LeashLegacyCookies

LegacyPolicyTimeStamp

MS Shell Dlg 2

CreateUriCacheSize

DevOverrideEnable

FromCacheTimeout

SocketSendBufferLength

ZoomDisabled

Always Use My Colors

VersioningLog

WarnOnBadCertRecving

IEFontSize

EnableSpdyDebugAsserts

ShareCredsWithWinHttp

LastModTime

SqmHttpStreamRandomUploadPoolSize

Modules

IsTextPlainHonored

AlwaysDrainOnRedirect

PreConnectLimit

Display Inline Images

DisableMSIPeek

MaxHttpRedirects

Programs

EnableUTF8

Show image placeholders

BadProxyExpiresTime

iWindowPosX

DuoProtocols

HttpDefaultExpiryTimeSecs

ArcName

UseFirstAvailable

TRACE_PERFMON

CommonFilesDir

WarnOnPost

Disable Script Debugger

SyncMode5

Anchor Color

.HLP

TabProcGrowth

ObjectLimit

System.Drawing

Display Inline Videos

mtime

TRACE_PROXY

WarnAlwaysOnPost

Accessibility

NoClose

Win31FileSystem

IEFixedFontName

DbgManagedDebugger

lfUnderline

EnableLog

index1

System.Runtime.Remoting

WarnOnHTTPSToHTTPRedirect

CacheLocation

Latest

System.Web

File4

NoClientChecks

Use Anchor Hover Color

LogResourceBinds

ClientCacheSize

Disable Visited Hyperlinks

Allow Programmatic Cut_Copy_Paste

SocketReceiveBufferLength

Anchor Underline

Default_IEFontSizePrivate

CLRLoadLogDir

TRACE_RESOURCE

ScavengeCacheFileLimit

OEM

73296F6F060034833C

Content Type

System.Configuration.Install

FEATURE_CLIENTAUTHCERTFILTER

DbgJITDebugLaunchSetting

Solid

EnforceP3PValidity

AutoProxyDetectType

Install

DisableCachingOfSSLPages

PushBack

RestrictRun

Use_DlgBox_Colors

System.Configuration

Cleanup HTCs

Enabled

ImmExec

DisableBasicOverClearChannel

NumPlayedShow

InstallDate

sample

RootDomainLimit

NoDrives

ProtectedModeOffForAllZones

AppData

CSS_Compat

LoggingLevel

ClientAuthBuiltInUI

System.Security

CertCacheNoValidate

MachineGUID

SystemBiosVersion

GCStressStart

DomainLimit

TRACE_VSSBACKUP

System.Management

System.Runtime.Serialization.Formatters.Soap

OnTop

IECookies

MS Sans Serif

TcpAutotuning

DisableBranchCache

SwapMouseButtons

DnsCacheTimeout

NavigationDelay

GlitchInstrumentation

ArcTimeLatest

XMLHTTP

StatusBar

MiscFlags

LogFailures

SpecialFoldersCacheSize

WindowsEdition

addon0

FileNames

WarnOnZoneCrossing

PathsAbs

GenerateMask

UseLegacyIdentityFormat

PlatformUpdatedBefore

NoNetConnectDisconnect

GUID

Timeout

iWindowPosDY

Segoe UI

SFXLogo

NoRun

Microsoft.JScript

EnablePrivateObjectHeap

TRACE_UTIL

RegisteredOrganization

PathsAbsDrive

DisconectedObjectCleanupPeriod

MacroRSFail

AutoRecover

BaseBoardManufacturer

NoProtectedModeBanner

DisableFalseStartBlocklist

SaveStreams

lfCharSet

WpadOverride

ProcessOwners

OpenShared

MixedContentBlockImages

DigitalProductId

7E6944E24CB26D113345

EmailArcTo

LocationListVersion

2OYyyQ3Yj4

lfStrikeOut

svcVersion

CorporateWerUseSSL

PrivacyAdvanced

UseDoubleClickTimer

SeparateArc

ncacn_np

EnableLUA

SFX

Joystick Id

RegisteredOwner

EnableDebugLog

NoGuiFromShim

TRACE_UI

OldVolNames

DigitalProductId4

TRACE_GATEWAY

CmtFile

File1

lfFaceName

VYN8OO1tZL

4B8AF1AFE739D11AE3E

Test

ProductId

TRACE_KTMRM

Disabled

Persistent

G1jsvNimhv

600733140F31F8717A7

ExclNames

8C79619F957B65219D19

TRACE_TM

uz5qYgMMv9zSRQfaKwHcoKYkDUG_has.exe

User

Class

My Music

EraseDest

Personal

My Video

Lock

DefaultOverrideBehavior

~MHz

Password

TRACE_ETWTRACE

AllowUnsafeObjectPassing

SyncFiles

Serial

TRACE_LOG

NoRecentDocsHistory

lfOutPrecision

FileHours

AV

Userinit

Default

DisableArchive

DisconnectedObjectCleanupAge

DebugLogLevel

PageModifiedNext

DisplayLogo

VersionControl

TraceFilePath

LogFile

6&E993E07&0&0000

lfOrientation

TRACE_LU

Y9fyGo9CQ

{D8A92BEE-67C4-B2AF-AF37-B607D13E4C8B}

System.ServiceProcess

PreviewPages

PackDetails

DebugOutEnabled

EnabledScopes

xSajuAPZsj

Recovery

Desktop

CorporateWerServer

DefaultScope

Seed

addon9

AdvpackLogFile

Max16BitReturnSize

rarreg.key

uudata

TRACE_XA

My Pictures

DXTFilterBehavior

lfClipPrecision

CallTimeout

Key

StoreNames

FolderNotifyInvalid

DisplaySavedUser

Organization

UninstallString

szHeader

InstallerXmlURL

UseWINSAFER

DebugLogPath

lfQuality

addon7

System.DirectoryServices

Code

Common Programs

OWNDC

Common AppData

TRACE_MTXOCI

ValueNotifyShow

ProcessorNameString

iPointSize

9AE145C7766AD652170

SFXIcon

InstallLanguage

BeforePlayedBackground

RecVolNumber

DictSizeLZ

rarkey

ArcTimeOriginal

SonyAgent

LogSecuritySuccesses

CurrentVersion

Fresh

MemoryBufferSize

Update

iWindowPosY

Shutdown

iMarginRight

atime

RemoveNetPanel

iMarginLeft

WaitToKillServiceTimeout

DisableQueue

ClearArc

Background

TrustPolicy

AY4ZanK

VolPause

IgnoreUserSettings

ForceUserModeCabCollection

Logging

setup.exe

fSaveWindowPositions

TRACE_CM

ContextNotifyCheck

addon8

Location

Last Counter

SADef

TRACE_CONTACT

PendingFileRenameOperations

FileDays

SendEFSFiles

ConfigureArchive

GenerateArcName

iWindowPosDX

lfWeight

FileTimeMode

InstallToolBar

D901C2A3567292171E1E

TRACE_MISC

LoggingDisabled

SP

zGr2jLJw

RemoteActivationPolicy

addon1

t1

MaxQueueCount

addon3

Start Page

addon2

iMarginBottom

QueuePesterInterval

PnpInstanceID

Log File Max Size

AddArcOnly

80792E2B4E1840D4

ResetSAFail

DefaultConsent

Counter 009

EncryptHeaders

BypassDataThrottling

SFXModule

PathsNone

Priority

PlatformModifiedAuto

Start Menu

Move

OleServerBusyTimeout

addon6

WaitForOther

9T2i9efM

AppIdFlag

lfItalic

File2

C:\sample

TRACE_SVC

User Agent

ctime

CodePointToFontMap

h1

lfPitchAndFamily

UseRAR

wextract_cleanup0

MaxArchiveCount

CLR20r3

ncadg_ip_udp

URL

BrowserInstalled1

Logging Directory

TRACE_TIP

OdjN3byy

PathUpdatedCurrent

Emulation

File3

CorporateWerUseAuthentication

DontShowUI

FileMinutes

NextInstance

LicenseKey

AppliedDPI

CurrentID

SFXElevate

ReqData_4_1_20%ChainStartTime_

7kplAxO7Dx

fMLE_is_broken

LuaOffLoRIEOn

Startup

lfEscapement

Method

F459189EE1E21EDEC36

CorporateWerPortNumber

BrowserInstalled0

LogLevel

DataStreamEnabledState

ForceQueue

TSAppCompat

iMarginTop

ResetSSFail

CSDVersion

addon5

addon4

ncacn_ip_tcp

4DD337D3745EFF053

szTrailer

OA6j0qm2Ap5iqgiXDLlySmIaqS_has.exe

{8C5F9AD2-0000-4A39-B27C-6A4C83F8E19A}

{69DC4768-446B-4F82-A6B0-63966A243064}

Software\WinRAR\Profiles\3

Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\

System\CurrentControlSet\Services\Tcpip\Parameters

SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings

Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections

52-54-00-12-35-02

Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad

Software\WinRAR\Profiles\1

Software\WinRAR\Interface\Themes

Software\Classes\CLSID\{45D6B830-2B6B-20BC-2A02-792C225010B4}\ProgID

Software\Classes\CLSID\{AB4F8F48-2061-737E-BBAE-7F96CF60405D}\ProgID

Software\Microsoft\Windows Script Host\Settings

DeviceInstances

System\CurrentControlSet\Control\SecurityProviders\Schannel

Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4A11612-1AA0-58E6-8E6F-16FE118B7CA0}

Software\Microsoft\RestartManager\Session0000

TypeLib

Software\Classes\CLSID\{7CC55F9A-A8FB-CFEA-096E-2524B809AC19}\ProgID

Software\WinRAR\Profiles\0

Software\Microsoft\Windows\CurrentVersion\Internet Settings

Software\Microsoft\Internet Explorer\Main

VID_80EE&PID_0021

Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7CC55F9A-A8FB-CFEA-096E-2524B809AC19}

Local AppWizard-Generated Applications

Calibration

Software\Microsoft\Fusion\GACChangeNotification\Default

SkillEmpire

Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

Software\BabyTest

Software\Classes\CLSID\{AB4F8F48-2061-737E-BBAE-7F96CF60405D}

Software\WinRAR\Profiles\2

Software\Classes\CLSID\{45D6B830-2B6B-20BC-2A02-792C225010B4}

.key

impudent.lanital.1

Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform

Software\Classes\CLSID\{7CC55F9A-A8FB-CFEA-096E-2524B809AC19}\InProcServer32

DBG

HARDWARE\DEVICEMAP\SERIALCOMM

Software\Classes\InstantBackupFile\Shell\open

Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53EEE44A-75FE-78BE-A5F9-E4DFBC38D4D9}

DC3_FEXEC

Software\Microsoft\Windows\CurrentVersion\Uninstall\UNetbootin

Software\Microsoft\Windows\CurrentVersion\RunOnce

Software\WinRAR\Profiles\4

SOFTWARE\GetPrivate

Software\Microsoft\DirectInput\MostRecentApplication\

Software

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C670DCAE-E392-AA32-6F42-143C7FC4BDFD}

SOFTWARE\Microsoft\Windows\CurrentVersion\ime\IMTC70

Software\Classes\InstantBackupFile

Software\Classes\.ibf

Software\Towodo Software\Instant Backup\Info

Software\Classes\CLSID\{53EEE44A-75FE-78BE-A5F9-E4DFBC38D4D9}\InProcServer32

Software\Microsoft\Windows\CurrentVersion\Uninstall\SPASS_0

Microsoft\Windows\CurrentVersion\Uninstall

sample

Software\Microsoft

Software\Classes\CLSID\{53EEE44A-75FE-78BE-A5F9-E4DFBC38D4D9}\ProgID

Software\Classes\InstantBackupFile\DefaultIcon

CurVer

Software\Towodo Software\Instant Backup\License

ProgID

Software\SPASS

System\CurrentControlSet\Control\MediaProperties\PrivateProperties\DirectInput

LocalServer32

Software\Microsoft\Windows

Software\Microsoft\Windows NT\CurrentVersion\Winlogon

Software\Magenta-Systems\Passwd

Software\Babylon\Babylon Client

Software\Microsoft\Windows\CurrentVersion

Software\AskToolbar\Update

Software\Classes\CLSID\{AB4F8F48-2061-737E-BBAE-7F96CF60405D}\InProcServer32

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GetPrivate

Recent File List

0

CLSID\{9C453F21-396D-11D5-9734-70E252C10127}\LocalServer32

CLSID\{9C453F21-396D-11D5-9734-70E252C10127}

Test.cap

SOFTWARE\Rasmussen Software

SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Version

Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached

impudent.lanital

SAMPLE45B7F83600091200

Software\Microsoft\Windows\CurrentVersion\Uninstall

Settings

Software\Classes\InstantBackupFile\Shell\open\command

SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\P3P\History

CLSID\{9C453F21-396D-11D5-9734-70E252C10127}\ProgID

Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AB4F8F48-2061-737E-BBAE-7F96CF60405D}

Software\Classes\CLSID\{7CC55F9A-A8FB-CFEA-096E-2524B809AC19}

SOFTWARE\Microsoft\Windows NT\CurrentVersion

Software\Classes\CLSID\{D4A11612-1AA0-58E6-8E6F-16FE118B7CA0}\InProcServer32

Software\SPASS\SPASS

Software\Classes\CLSID\{53EEE44A-75FE-78BE-A5F9-E4DFBC38D4D9}

Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{45D6B830-2B6B-20BC-2A02-792C225010B4}

CLSID

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C3F3165C-74D3-6FDB-3274-14FDA8698CFA}

Programmable

sample.eBookNSHandler

Software\Digital River\SoftwarePassport\PQDVD\PQ DVD to Apple TV Converter\0

Software\WinRAR SFX

VersionIndependentProgID

Software\Hauppauge\HcwDriverInstall

Software\Microsoft\DirectInput

Software\Classes\CLSID\{45D6B830-2B6B-20BC-2A02-792C225010B4}\InProcServer32

Software\SPASS\SPASS\3.7

Software\DirectDownloader\OpenBitCoin2

{055e57e3-f3e3-4199-b7ba-c390a8f40133}

Software\Classes\CLSID\{D4A11612-1AA0-58E6-8E6F-16FE118B7CA0}\ProgID

SOFTWARE\JavaSoft\

MostRecentApplication

SYSTEM\CurrentControlSet\Control\WOW

Software\Classes\CLSID\{D4A11612-1AA0-58E6-8E6F-16FE118B7CA0}

sample.eBookNSHandler\Clsid

SOFTWARE\GetPrivate\Components

Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID

Software\WinRAR\General

C:\Users\win7\AppData\Local\Temp\462C4735-BAB0-7891-A34D-580F9211D2C5\bab091.norecovericon.dat

\\.\PhysicalDrive10

C:\Users\win7\AppData\Local\Temp\nsv73EF.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nsaE1C8.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nse7036.tmp\nsWeb.dll

c:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\tipresx.dll.mui

C:\WINDOWS\FONTS\FRANK.TTF

C:\Users\win7\AppData\Local\Temp\is-ESACR.tmp\Dlg_Btn_Cancel.png

\\?\C:\Users\win7\AppData\Roaming\Neuxpower Solutions Ltd\NXPowerLite\install\50A2E39\oestore.dll

c:\apilog.txt

C:\Users\win7\AppData\Roaming\REAPER\ColorThemes\.\toolbar_blank.png

C:\WINDOWS\FONTS\UPCEBI.TTF

C:\Users\win7\AppData\Local\Temp\nsk722A.tmp\NSISdl.dll

v1_191.red

C:\Users\win7\AppData\Local\Temp\nsk70F2.tmp\nsWeb.dll

C:\WINDOWS\FONTS\CANDARAI.TTF

C:\Users\win7\AppData\Local\Temp\nssA82A.tmp\NSISdl.dll

C:\sample

__tmp_rar_sfx_access_check_54596218

\\?\C:\Users\win7\AppData\Roaming\Neuxpower Solutions Ltd\NXPowerLite\install\50A2E39\1049

C:\Users\win7\AppData\Local\Temp\nsd855F.tmp\System.dll

C:\Users\win7\AppData\Local\Tempfolder\NhnimGuryoph\nss3.dll

C:\Users\win7\AppData\Local\Temp\nst8521.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsd83D8.tmp\System.dll

h1_26.red

C:\Users\win7\AppData\Local\Temp\nsk722A.tmp\928199480

C:\Users\win7\AppData\Local\Temp\nsf7BBB.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsm6AA8.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\tsldrl6660\banner.htm

C:\Users\win7\AppData\Local\Temp\nsb745D.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsf4728.tmp\nsResize.dll

C:\Users\win7\AppData\Local\Temp\nsaD69B.tmp

C:\Users\win7\AppData\Local\Temp\nsn86CA.tmp\KillProcDLL.dll

C:\Users\win7\AppData\Local\Temp\nseED12.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsd7726.tmp

C:\Users\win7\AppData\Local\Temp\is-VDPSG.tmp\webctrl.dll

C:\Users\win7\AppData\Local\Temp\nsoEE7D.tmp

C:\Users\win7\AppData\Local\Temp\nsr6A78.tmp

C:\Users\win7\AppData\Roaming\gtopala\siw\siw_init.xml

C:\Users\win7\AppData\Local\Temp\nsb8C44.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat

C:\Users\win7\AppData\Local\Temp\nsgE5DE.tmp\nsArray.dll

C:\CRACK\PATCH.EXE

\\.\SIWVID

C:\Users\win7\AppData\Local\Temp\jusched.log

C:\Users\win7\AppData\Local\Temp\nsa7C37.tmp\\1024390884

C:\Users\win7\AppData\Local\Temp\nsfD6BB.tmp\nsArray.dll

sGxBArVzWJrYnjU.dat

C:\Users\win7\AppData\Local\Temp\nse7AD0.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\is-4MFVH.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nsr7FA3.tmp\System.dll

C:\Users\win7\AppData\Local\Tempfolder\WiseshVepdomb\MemekeHhw.exe

C:\Users\win7\AppData\Local\Temp\nsi6D96.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nslBE13.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\f[1].js

C:\Users\win7\AppData\Local\Temp\_ir_sf_temp_0\irsetup.dat

C:\Users\win7\AppData\Local\Temp\528dd5088dd2bdf0b990dc6dd3376971\OpenCL.dll

C:\Users\win7\AppData\Local\Temp\nsiE987.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Temp\nsaD515.tmp\\786823653

C:\Users\win7\AppData\Local\Tempfolder\IlupayXio\sqlite3.dll

C:\Users\win7\AppData\Local\Temp\nskD7BA.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsy61DE.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsy6E90.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsn7801.tmp\nsArray.dll

C:\Windows\system32\l_intl.nls

C:\Users\win7\AppData\Local\Temp\nsk64DB.tmp

C:\Users\win7\AppData\Local\Temp\nsd83D8.tmp\DL.dll

C:\Users\win7\AppData\Local\Temp\nsaF04E.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsu7BCA.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsqF0FA.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsm6A0B.tmp

C:\Users\win7\AppData\Local\Temp\nseDF28.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Tempfolder\ortmp\sqlite3.dll

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui

C:\Users\win7\AppData\Local\Temp\nst6171.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Tempfolder\NoicdIdhrib\libplds4.dll

C:\Users\win7\AppData\Local\Temp\nsp715F.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsq811E.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsm775A.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\is-NEG17.tmp\_isetup\_shfoldr.dll

C:\Users\win7\Favorites\desktop.ini

C:\Users\win7\AppData\Local\Temp\nsz7101.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsz6400.tmp

C:\Users\win7\AppData\Local\Temp\nsyDE6C.tmp\1093444395

Notes\Version history.txt

C:\Users\win7\AppData\Local\Temp\nso7A68.tmp\\1046795820

C:\Users\win7\AppData\Local\Temp\nsm7458.tmp\SimpleSC.dll

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred\oskpredbase.xml

C:\Users\win7\AppData\Local\Temp\is-NIEM2.tmp\Dlg_bkg.png

C:\WINDOWS\FONTS\ARIBLK.TTF

C:\Users\win7\AppData\Local\Temp\nsv721B.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsk722A.tmp\\984109669

C:\Users\win7\AppData\Local\Temp\nsp7B5D.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-NIEM2.tmp\CallbackCtrl.dll

C:\Users\win7\AppData\Local\Temp\nsvA367.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsy61DE.tmp\\135684457

C:\Users\win7\AppData\Local\Temp\nsd7811.tmp\\1009068360

C:\Users\win7\AppData\Local\Tempfolder\SefxohFeuoor\ssl3.dll

C:\Users\win7\AppData\Local\Tempfolder\IofhopFicu\libnspr4.dll

C:\WINDOWS\FONTS\ANGSAB.TTF

C:\Users\win7\AppData\Local\Temp\nsm736E.tmp\\939163597

C:\Users\win7\AppData\Local\Temp\nsgA5C8.tmp\nsExec.dll

C:\Users\win7\AppData\Local\Temp\nss85B2.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nslE513.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\DIQ\flashplayer_151\DomaIQ.exe

C:\Users\win7\AppData\Local\Temp\nsd6C3F.tmp\340359336

C:\Users\win7\AppData\Local\Temp\nsiDC88.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\261b55742615f111f03f941ce52dc4e4\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\nse864A.tmp\NSISdl.dll

C:\Windows\System32\dnsapi.dll

C:\Users\win7\AppData\Local\Temp\nsi765C.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsg97DE.tmp\937597295

C:\Users\win7\AppData\Local\Temp\nskEF54.tmp\881584955

C:\Users\win7\AppData\Local\Temp\nsgE3BB.tmp

C:\Users\win7\AppData\Local\Temp\nszD340.tmp

x1_12.red

C:\Windows\system32\zmovie.cfg

C:\Users\win7\AppData\Local\Temp\nsn85E0.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\tsldrl6660\index.scr

C:\Users\win7\AppData\Local\Temp\nsh77D7.tmp\StdUtils.dll

Notes\Checksums.txt

x1_1.red

C:\Users\win7\AppData\Local\Temp\nsjE296.tmp\NSISdl.dll

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\kor-kor.xml

x1_8.red

\\?\C:\Windows\system32\Macromed\Flash\mms.cfg

\\?\C:\Users\win7\AppData\Roaming\Neuxpower Solutions Ltd\NXPowerLite\install\50A2E39\NXPowerLite41.x64.msi

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\M2UBE4LT.txt

C:\Users\win7\AppData\Roaming\REAPER\reaper-license.rk

C:\Users\win7\AppData\Local\Tempfolder\WiseshVepdomb\LiyaswFiknagp.dat

C:\rar.ini

x1_17.red

C:\Users\win7\AppData\Local\Temp\nskEF54.tmp\\881584955

C:\Users\win7\AppData\Local\Tempfolder\PokbhvAyv\nss3.dll

C:\Users\win7\AppData\Local\Temp\nssE840.tmp\879644102

C:\\client\builddate.txt

C:\Users\win7\AppData\Local\Temp\nse6F9A.tmp\SimpleSC.dll

C:\toolbar_blank.png

C:\Users\win7\AppData\Local\Temp\nsa7372.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsyD208.tmp\SimpleSC.dll

credits.exe

C:\Users\win7\AppData\Local\Temp\nsjEB0F.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\is-NFAB7.tmp\_isetup\_shfoldr.dll

x1_16.red

C:\Users\win7\AppData\Local\Temp\nsp6597.tmp\\1129775803

C:\Users\win7\AppData\Local\Temp\nsy84A4.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\2f2ef0d4f0b4de33eb48fcaf471d6340\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\462C4735-BAB0-7891-A34D-580F9211D2C5\bab033.tbinst.dat

C:\Users\win7\AppData\Local\Temp\nsaE34E.tmp\817809202

C:\Users\win7\AppData\Local\Temp\nsi7830.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Tempfolder\BabdamVhd\libplc4.dll

C:\Users\win7\AppData\Local\Temp\34de4613903d936aecd50d9797ec48e6\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\nssDCC6.tmp\7za.exe

C:\Users\win7\AppData\Local\Tempfolder\IlupayXio\nssckbi.dll

C:\Users\win7\ctags.cnf

C:\Users\win7\AppData\Local\Temp\nsf7D8F.tmp\NSISdl.dll

\\.\Scsi7:

C:\Users\win7\AppData\Local\Temp\nsn8290.tmp

C:\Users\win7\AppData\Local\Temp\nsfC8D1.tmp\1006923206

C:\Users\win7\AppData\Local\Temp\nsbE571.tmp\System.dll

C:\WINDOWS\FONTS\SIMFANG.TTF

C:\Users\win7\AppData\Local\Temp\is-VDPSG.tmp\WSysInfo.dll

C:\Users\win7\AppData\Local\Temp\nsaEF64.tmp\System.dll

C:\Users\win7\AppData\Local\Tempfolder\SefxohFeuoor\libplds4.dll

C:\Users\win7\AppData\Local\Temp\nsg742E.tmp\\128976596

C:\Users\win7\AppData\Local\Temp\nswE504.tmp\639795516

C:\Windows\system32\GDIPFONTCACHEV1.DAT

C:\WINDOWS\FONTS\SHRUTIB.TTF

C:\Users\win7\AppData\Local\Temp\nsqE495.tmp

install41305.exe

C:\Users\win7\AppData\Local\Temp\nsiE93A.tmp\1203562272

C:\WINDOWS\FONTS\VERDANA.TTF

C:\Users\win7\AppData\LocalLow\Oracle\Java\jre1.8.0_65\jds56379437.tmp

C:\Users\win7\Desktop

C:\Users\win7\AppData\Local\Temp\is-NFAB7.tmp\info.iam

C:\Users\win7\AppData\Local\Temp\nse7AD0.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\7zS6BB0.tmp\dmhfdlngglhgmdlpmmdodefgadjnkcii\sqlite.js

C:\Users\win7\AppData\Local\Tempfolder\SefxohFeuoor\sqlite3.dll

C:\Users\win7\AppData\Local\Temp\nshCF2F.tmp\System.dll

__tmp_rar_sfx_access_check_54488984

C:\Users\win7\AppData\Local\Temp\nsxCF49.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nszBB59.tmp\336443579

C:\Users\win7\AppData\Local\Temp\nsr4C48.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Network Shortcuts

C:\Users\win7\AppData\Local\Tempfolder\NhnimGuryoph\nssckbi.dll

C:\Windows\SysWOW64\Wbem\textvaluelist.xsl

C:\Users\win7\AppData\Local\Temp\nsr4BFB.tmp\SimpleSC.dll

C:\WINDOWS\FONTS\ARIAL.TTF

C:\Users\win7\AppData\Local\Temp\nsu7B7C.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsj44D6.tmp\nsResize.dll

C:\Users\win7\AppData\Local\Temp\nsrDAA3.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsj6355.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsp70C3.tmp\\319929303

C:\Users\win7\AppData\Local\Temp\nsf72A7.tmp\[RANDOM_STRING].7z

C:\Users\win7\AppData\Local\Temp\nsr75A4.tmp\\896022178

sample

C:\Windows\system32\filr\yse\keak.dat

C:\Users\win7\AppData\Local\Temp\nsq6682.tmp\\804495631

C:\Users\win7\AppData\Local\Microsoft\Windows\Caches\cversions.1.db

C:\Users\win7\AppData\Local\Tempfolder\IvhfiSueamfh\libplc4.dll

C:\Users\win7\AppData\Local\Tempfolder\SefxohFeuoor\ForpErutm.exe

C:\Users\win7\AppData\Local\Temp\tsldrl6660\link.dat

C:\Users\win7\AppData\Local\Tempfolder\PyrfowTunn\nss3.dll

C:\Users\win7\AppData\Local\Temp\qlfqeao

C:\Users\win7\AppData\Local\Temp\nss85B2.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsxF55F.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\help.txt

C:\Users\win7\AppData\Local\Temp\nsnDCF5.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nskC8A1.tmp

C:\Users\win7\AppData\Local\Temp\nsj6ECF.tmp\SimpleSC.dll

C:\WINDOWS\FONTS\GEORGIAB.TTF

npcmodes/.amx

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\keypadbase.xml

C:\Users\win7\AppData\Local\Temp\nsl7F82.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsn6B93.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nsn759B.tmp\\932796237

C:\ProgramData\Barowasse2saave

C:\Users\win7\AppData\Local\Temp\nsz9463.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsp7B5D.tmp\\1181872387

C:\Users\win7\AppData\Local\Temp\nsmDA84.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nslE38C.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Tempfolder\PyrfowTunn\IyrafEfo.exe

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BC2602F5489CFE3E69F81C6328A4C17C_849A9AE095E451B9FFDF6A58F3A98E26

C:\Users\win7\AppData\Local\Temp\nslE38C.tmp\NET.dll

C:\Users\win7\AppData\Local\Temp\nse5E69.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsl7F82.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsr76DD.tmp\inetc.dll

C:\Users\win7\AppData\Local\Temp\nsy796E.tmp\910902052

C:\Users\win7\AppData\Local\Tempfolder\BabdamVhd\nssutil3.dll

C:\Users\win7\AppData\Local\Temp\is-AF5OS.tmp\is-1K4CH.tmp

C:\Users\win7\AppData\Local\Temp\be65e9678dd5d48d48970c7dbd120df9\BitAcceleratorDDLRinstaller.exe

h1_11.red

C:\Users\win7\AppData\Local\Temp\nsyF81D.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\VD4LV9X2.txt

C:\Users\win7\AppData\Local\Temp\nsn8F90.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsgE3BC.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nscE8CC.tmp\\1209657232

C:\Users\win7\AppData\Local\Temp\nsc82A0.tmp\\875489995

C:\Users\win7\AppData\Local\Temp\nsm775A.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nsvF07C.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\nsu70E1.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\3NCVNTXC.txt

C:\Users\win7\AppData\Roaming\Opera\Opera\opcacrt6.dat

C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\machine.config

C:\Users\win7\AppData\Local\Temp\033f8e4b.a

C:\ProgramData\sNHjOi1.vbs

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini

C:\Users\win7\AppData\Local\Temp\\~DF49251A3D91BABC37.TMP

h1_18.red

C:\Users\win7\AppData\Local\Temp\38f2bb0256db33a8f41436ef966638fe\downloaderSTUB.exe

C:\Users\win7\AppData\Local\Temp\e1c1e048af3eb4f5776b5551aa16d363\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Local\Temp\nse6F9A.tmp\System.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\010914i[1].htm

\\?\C:\Users\win7\AppData\Roaming\Neuxpower Solutions Ltd\NXPowerLite\install\50A2E39\NXPowerLite41.msi

C:\Users\win7\AppData\Local\Tempfolder\PyrfowTunn\nssckbi.dll

C:\Users\win7\AppData\Local\Temp\is-VDPSG.tmp\botva2.dll

C:\Users\win7\AppData\Local\Temp\nscF3F8.tmp\1021053979

C:\Users\win7\AppData\Local\Temp\nsp7E11.tmp\nsArray.dll

C:\WINDOWS\FONTS\CAMBRIAZ.TTF

C:\Users\win7\AppData\Local\Temp\~E47F23.tmp

C:\Users\win7\AppData\Local\Temp\is-NEG17.tmp\_isetup\_setup64.tmp

x1_20.red

C:\Users\win7\AppData\Local\Temp\7zS7E49.tmp\515f05ce2935a.exe

C:\Users\win7\AppData\Local\Temp\nsy796E.tmp\\910902052

C:\Users\win7\AppData\Local\Temp\nsm736E.tmp\NSISdl.dll

\\?\C:\Users\win7\AppData\Roaming\Neuxpower Solutions Ltd\NXPowerLite\install\50A2E39\NXPLiteOutlook.dll

c:\Program Files\Common Files\Microsoft Shared\ink\Content.xml

h1_4.red

\\.\Scsi1:

redrace.dat

C:\Users\win7\AppData\Local\Temp\is-VDPSG.tmp\WListViewEx.dll

C:\Users\win7\AppData\Local\Temp\nsr6941.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsq6808.tmp\\618854733

C:\Users\win7\AppData\Local\Temp\nsqE3FA.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nso6F89.tmp

C:\vice.ini

C:\Users\win7\AppData\Local\Temp\nss834B.tmp

C:\Users\win7\AppData\Local\Tempfolder\JupxonQyb\ssl3.dll

C:\Users\win7\AppData\Local\Temp\nsuD544.tmp\\666592910

C:\Users\win7\AppData\Local\Temp\nsc82A0.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsyF6E6.tmp\System.dll

C:\WINDOWS\FONTS\KOKILAI.TTF

C:\Users\win7\AppData\Local\Temp\nsb697E.tmp

C:\Users\win7\AppData\Local\Temp\nskFC54.tmp\StdUtils.dll

C:\WINDOWS\FONTS\CORDIAI.TTF

C:\Users\win7\AppData\Local\Temp\nsg7391.tmp

C:\ProgramData\N24dft.au3

C:\Users\win7\AppData\Local\Temp\nsrE581.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsdDDA1.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nslD813.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Tempfolder\SefxohFeuoor\nssckbi.dll

C:\Users\win7\AppData\Local\Tempfolder\JogoYtem\YhivzePukcia.dat

C:\Users\win7\AppData\Local\Tempfolder\AuqeaCua\freebl3.dll

C:\Users\win7\AppData\Local\Temp\nsp37F7.tmp\NSISdl.dll

\\.\PhysicalDrive2

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\utils[1].js

C:\Users\win7\AppData\Local\Temp\nse79E5.tmp

C:\Users\win7\AppData\Local\Temp\nsqF311.tmp

C:\Users\win7\AppData\Local\Tempfolder\NoicdIdhrib\nssckbi.dll

C:\Users\win7\AppData\Local\Temp\nscF3F8.tmp\\1021053979

.\.ctags

C:\Users\win7\AppData\Local\Tempfolder\JupxonQyb\libplds4.dll

C:\Users\win7\AppData\Local\Temp\nsrCCB8.tmp

v1_905.red

C:\Users\win7\AppData\Local\Temp\nssDCC6.tmp\[RANDOM_STRING].7z

C:\Users\win7\AppData\Local\Temp\nsz14D2.tmp

C:\Users\win7\AppData\Local\Temp\nslE513.tmp\624064391

C:\Users\win7\AppData\Local\Temp\nsrA8BA.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsfC8D1.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsaE39B.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\7zSE540.tmp\fkjeojoangpmoeckmdgmibinanicmghc\manifest.json

C:\Users\win7\AppData\Local\Temp\nsd7735.tmp

v1_904.red

c:\Program Files\Common Files\Microsoft Shared\ink\fi-FI\tipresx.dll.mui

C:\Users\win7\AppData\Local\Temp\nsx831D.tmp\\485889269

C:\Users\win7\AppData\Local\Tempfolder\NoicdIdhrib\nss3.dll

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmhfdlngglhgmdlpmmdodefgadjnkcii\1\manifest.json

\\?\C:\Users\win7\AppData\Roaming\Neuxpower Solutions Ltd\NXPowerLite\install\50A2E39\NXPMenuAddin.dll

C:\Users\win7\AppData\Local\Temp\nsg97DE.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nse158E.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\7c460ffc43d81bc155b60ff2a41f6fe9\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\nsp880F.tmp\663358154

C:\Windows\system32\kebv\fidb\rul.dat

C:\Users\win7\AppData\Local\Temp\nsr8C55.tmp\\968072094

C:\Users\win7\AppData\Local\Temp\nse7A34.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsfC9BB.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nsi250.tmp\\514218915

C:\Users\win7\AppData\Local\Tempfolder\FhupagTueibub\libplc4.dll

C:\Users\win7\AppData\Local\Temp\nsi6C5D.tmp

\\?\hid#vid_80ee&pid_0021#6&e993e07&0&0000#{4d1e55b2-f16f-11cf-88cb-001111000030}

C:\Users\win7\AppData\Local\Temp\1d4b8f77a8f1a4b47e33c540585fb190\downloaderDDLR.exe

C:\Users\win7\AppData\Local\Temp\nsj1F5D.tmp\\1071584260

C:\Users\win7\AppData\Local\Temp\is-NIEM2.tmp\WListViewEx.dll

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipBand.dll.mui

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\ext[1].js

C:\Users\win7\AppData\Local\Temp\nsd798D.tmp\System.dll

x1_6.red

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad.xml

C:\Users\win7\AppData\Local\Tempfolder\IvhfiSueamfh\nssckbi.dll

C:\Users\win7\AppData\Local\Temp\nsc82A0.tmp\NSISdl.dll

C:\WINDOWS\FONTS\MSGOTHIC.TTC

C:\Users\win7\AppData\Local\Temp\nsd85AD.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsjE07F.tmp\\593146942

C:\Users\win7\AppData\Local\Temp\nsqF148.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsaD515.tmp\786823653

C:\WINDOWS\FONTS\ANGSAUZ.TTF

C:\Users\win7\AppData\Local\Temp\is-H5441.tmp\Ksicfg.dll

C:\WINDOWS\FONTS\MEIRYO.TTC

C:\Users\win7\AppData\Local\Tempfolder\IofhopFicu\nss3.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\49514950C94E8026A2B06312597DFF49_33A0493B3756EC93EB52782457685E27

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\ext[1].js

C:\Users\win7\AppData\Local\Temp\nslE38C.tmp\nsResize.dll

C:\Users\win7\AppData\Local\Temp\nsiEABF.tmp

C:\Users\win7\AppData\Local\Temp\is-NIEM2.tmp\Dlg_Btn.png

\\.\PhysicalDrive8

C:\Users\win7\AppData\Local\Temp\nsfE282.tmp

C:\Users\win7\AppData\Local\Temp\nsu70E2.tmp\System.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\ui[1].js

C:\Users\win7\AppData\Local\Tempfolder\WiseshVepdomb\nss3.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\CAZOTF9Q.txt

C:\Users\win7\AppData\Local\Temp\nss77C7.tmp

C:\Windows\system32\seoz\zil\kaov.dat

C:\Users\win7\AppData\Local\Temp\nsp8946.tmp

C:\Users\win7\AppData\Local\Temp\nsb7631.tmp\nsExec.dll

C:\Users\win7\AppData\Local\Temp\nscF3F8.tmp\NSISdl.dll

C:\WINDOWS\FONTS\KOKILAB.TTF

C:\Users\win7\AppData\Local\Temp\nsl8BE6.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsr8256.tmp

C:\Users\win7\AppData\Local\Temp\nsp8995.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\tsldrl6660\setup.exe

C:\Windows\system32\mms.cfg

C:\Users\win7\AppData\Local\Temp\nsvE67E.tmp

C:\ProgramData\Barowasse2saave\uninstall.exe

C:\Users\win7\AppData\Local\Temp\nsh7F20.tmp\nsArray.dll

C:\WINDOWS\FONTS\UPCJI.TTF

C:\Users\win7\AppData\Local\Temp\nst6D87.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nso6EA0.tmp\\962760285

C:\Users\win7\AppData\Local\Temp\nsx83B8.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsz7101.tmp\141166516

C:\Users\win7\AppData\Local\Temp\nsp6597.tmp\nsArray.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EB2C4AB8B68FFA4B7733A9139239A396_AD876BD6070522D4EE8560FE72EBB41A

C:\Users\All Users

C:\Users\win7\AppData\Local\Temp\\~DF229F9F80CDCC1C88.TMP

/dev/urandom

C:\Users\win7\AppData\Local\Temp\OA6j0qm2Ap5iqgiXDLlySmIaqS\OA6j0qm2Ap5iqgiXDLlySmIaqSOA6j0qm2Ap5iqgiXDLlySmIaqSOA6j0qm2Ap5iqgiXDLlySmIaqS_br.exe

C:\Users\win7\AppData\Local\Temp\nsm8286.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsm6AA8.tmp\233714564

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers.xml

C:\Users\win7\AppData\Local\Tempfolder\QubmKhrheoa\nss3.dll

C:\Users\win7\AppData\Local\Temp\nsnE9A7.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\ActSys\SSL\import.bat

sfiles\bimage.tmp

C:\Users\win7\AppData\LocalLow\Oracle\Java\jre1.8.0_65\jds56379140.tmp

C:\Users\win7\AppData\Local\Temp\nsb8C44.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\mobi[1].js

C:\Users\win7\AppData\Local\Tempfolder\MiilnaFyhfoo\smime3.dll

C:\Users\win7\AppData\Local\Tempfolder\IlupayXio\libplc4.dll

x1_10.red

C:\Users\win7\AppData\Local\Temp\DIQ\flashplayer_151\routes.dll

C:\Users\win7\AppData\Local\Tempfolder\MiilnaFyhfoo\HehfhMeuyf.exe

C:\Users\win7\AppData\Local\Temp\nsbE60C.tmp

C:\Users\win7\AppData\Local\Temp\nslD813.tmp\\404032938

v1_34.red

C:\Users\win7\AppData\Local\Temp\nslBE13.tmp\\189585693

C:\Users\win7\AppData\Local\Temp\is-NIEM2.tmp\Dlg_Btn_Close.png

C:\Users\win7\AppData\Local\Temp\nsy78DC.tmp\System.dll

C:\Users\win7\AppData\Local\Tempfolder\AuqeaCua\ssl3.dll

C:\Users\win7\AppData\Local\Tempfolder\QubmKhrheoa\softokn3.dll

C:\WINDOWS\FONTS\KARTIKA.TTF

C:\Users\win7\AppData\Local\Temp\nsj6355.tmp\nsArray.dll

C:\WINDOWS\FONTS\PHAGSPA.TTF

C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini

C:\Users\win7\AppData\Local\Temp\3a323904ccb01666e8b97fe1f2f6f1bf\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Local\Temp\nsc833B.tmp

C:\Users\win7\AppData\Local\Temp\nssF58E.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\is-NFAB7.tmp\ItDownload_wex.dll

v1_903.red

C:\Users\win7\AppData\Local\Temp\nsw8DF0.tmp\040244ea-880d-474a-83c9-61f830bcb17b.dll

C:\Users\win7\AppData\Local\Temp\nssF58E.tmp\352004454

C:\Users\win7\AppData\Local\Temp\nslE4C4.tmp

C:\Users\win7\AppData\Local\Tempfolder\IlupayXio\smime3.dll

C:\WINDOWS\FONTS\TRADBDO.TTF

\\.\Scsi6:

C:\rar.lng

c:\Users\win7\AppData\Local\Temp\sfx1\BB40eng.dix

C:\Windows\SysWOW64\ieframe.dll

C:\Users\win7\AppData\Local\Temp\nsbE438.tmp

C:\Users\win7\AppData\Local\Temp\nsy7978.tmp\\196089254

C:\Users\win7\AppData\Local\Temp\nsu8744.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nspD43B.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsn8F90.tmp\nsArray.dll

C:\WINDOWS\FONTS\SEGUISB.TTF

C:\Users\win7\AppData\Local\Temp\nspE051.tmp\System.dll

C:\Users\win7\AppData\Local\Tempfolder\PyrfowTunn\sqlite3.dll

C:\Users\win7\AppData\Local\Temp\nsfE31F.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsaE3E9.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nszE12B.tmp\\822916711

x1_19.red

C:\Users\win7\AppData\Local\Temp\nsq8ACD.tmp

C:\Users\win7\AppData\Local\Temp\nsk7BDA.tmp\\933000537

C:\Users\win7\AppData\Local\Temp\nsq7297.tmp

C:\Users\win7\AppData\Local\Temp\nsm82D3.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Tempfolder\IvhfiSueamfh\libnspr4.dll

v1_789.red

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-phonetic.xml

c:\sample.

C:\Users\win7\AppData\Local\Temp\nsn759B.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsmE5FE.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\tsldrl6660\data.pck

C:\Users\win7\AppData\Local\Temp\nsz7101.tmp\\141166516

\\.\Scsi2:

C:\Users\win7\AppData\Local\Temp\nsb8BA9.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsg677B.tmp

C:\Users\win7\AppData\Local\Temp\nsn8F90.tmp\\335864728

C:\Users\win7\AppData\Local\Temp\nsb4A64.tmp

C:\Users\win7\AppData\Local\Temp\nsr808D.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nscF3AA.tmp\System.dll

C:\Users\win7\AppData\Local\Tempfolder\IofhopFicu\nssckbi.dll

C:\Users\win7\AppData\Local\Temp\nsm80BB.tmp

C:\Windows\system32\oeu\zum\bonba.dat

C:\ProgramData\NDCvuh1.vbs

C:\Users\win7\AppData\Local\Temp\nsuEF88.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\7zS902B.tmp\jfjahgbhkoidecpcmlippenojpfkjijd\background.html

C:\Users\win7\AppData\Local\Temp\nsoDE7C.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsq7E1B.tmp

C:\Users\win7\AppData\Roaming\REAPER\Data\track_icons\toolbar_blank.png

C:\Users\win7\AppData\Local\Temp\nsb7595.tmp\System.dll

c:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui

c:\Program Files\Common Files\Microsoft Shared\ink\ar-SA\tipresx.dll.mui

C:\Users\win7\AppData\Local\Temp\nsmDA84.tmp\\1192053353

c:\Users\win7\AppData\Local\Temp\sfx1\tex_def.jpg

C:\Users\win7\AppData\Local\Tempfolder\JogoYtem\nssutil3.dll

C:\Users\win7\AppData\Local\Temp\nsiCD70.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsrB227.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsd6C3F.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Tempfolder\PyrfowTunn\ssl3.dll

C:\Users\win7\AppData\Local\Temp\nsn6B93.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nse70D2.tmp\SimpleSC.dll

C:\Users\win7\AppData\Roaming\Microsoft

C:\Users\win7\AppData\Local\Temp\7zS6BB0.tmp\settings.ini

c:\users\win7\appdata\local\tempfolder\ivhfisueamfh\dyvdecoyjt.dat

C:\Users\win7\AppData\Local\Tempfolder\QubmKhrheoa\JisjhbLhkib.exe

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\ui[1].css

C:\Users\win7\AppData\Local\Tempfolder\WiseshVepdomb\libplds4.dll

C:\WINDOWS\FONTS\UPCEI.TTF

C:\Users\win7\AppData\Local\Temp\\~DFC95B13665C7C2C4F.TMP

C:\Users\win7\AppData\Local\Temp\nsy1D97.tmp

C:\Users\win7\AppData\Local\Temp\nsa72D6.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nsz7101.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsb745D.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsmE784.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsgFE0A.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsdD13C.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\N6Q0F1MK.txt

C:\WINDOWS\FONTS\UPCJB.TTF

c:\countdown.py

C:\Users\win7\AppData\Local\Temp\nsfE31F.tmp\SimpleSC.dll

C:\Users\win7\Saved Games\desktop.ini

C:\Users\win7\AppData\Local\Temp\nse5E69.tmp\nsJSON.dll

\\.\Scsi13:

C:\Users\win7\AppData\Local\Temp\nse8733.tmp

\\.\SICE

C:\Windows\system32\zfont.txt

sfiles\skin.ini

C:\Users\win7\AppData\Local\Temp\51b530fdfca524d0fb3ba10c7a56071c\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\nsdEA53.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsiE9D6.tmp\[RANDOM_STRING].7z

C:\Users\win7\AppData\Local\Tempfolder\IofhopFicu\libplds4.dll

C:\Users\win7\AppData\Local\Temp\nsq7F49.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Temp\d73b989f8bebc4a4b59f91fe7c949077\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\nsp8995.tmp\448774710

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini

C:\Users\win7\AppData\Local\Temp\nsqCD97.tmp

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SPASS\SPASS 3.7\SPASS Desktop.lnk

C:\Users\win7\AppData\Local\Temp\nsgE3BC.tmp\System.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\reset[1].css

c:\users\win7\appdata\local\tempfolder\ortmp\orionhelper.bit

C:\Users\win7\AppData\Local\Temp\nsr8D8D.tmp\nsWeb.dll

C:\Windows\SysWOW64\wshom.ocx

C:\Users\win7\AppData\Local\Temp\nsoECB3.tmp

C:\Users\win7\AppData\Local\Temp\nsk722A.tmp\\928199480

C:\Users\win7\AppData\Local\Tempfolder\WiseshVepdomb\ssl3.dll

C:\Users\win7\AppData\Local\Temp\nsx6C1E.tmp

C:\Users\win7\AppData\Local\Temp\nsxCDC2.tmp

C:\Users\win7\AppData\Local\Temp\nsr82F2.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\7zS902B.tmp\jfjahgbhkoidecpcmlippenojpfkjijd\lsdb.js

C:\Users\win7\AppData\Local\Temp\nswF41C.tmp\901538287

C:\Users\win7\AppData\Local\Tempfolder\NhnimGuryoph\sqlite3.dll

C:\Users\win7\AppData\Local\Temp\nsj6F1C.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsaD516.tmp\\1069200756

C:\Users\win7\AppData\Local\Temp\nsr6941.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nssA82A.tmp\\1166754163

C:\Users\win7\AppData\Local\Temp\nsl7363.tmp\1145234528

c:\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui

C:\Users\win7\AppData\Local\Temp\nse7035.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Tempfolder\ortmp\libplc4.dll

C:\Users\win7\AppData\Local\Temp\nso6E52.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\is-04I2G.tmp\sample.tmp

C:\Users\win7\AppData\Local\Tempfolder\IvhfiSueamfh\PewojyUfe.exe

\\.\Scsi14:

C:\Users\win7\AppData\Local\Temp\nsfE1E7.tmp\\792918612

C:\Users\win7\AppData\Local\Temp\6efb25bc8da8c8c2c9e8048717b44cc2\volcano.exe

C:\Users\win7\AppData\Local\Temp\nsi835C.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nsr8EBA.tmp

C:\Users\win7\AppData\Local\Temp\nsz87FF.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Tempfolder\FhupagTueibub\softokn3.dll

x1_18.red

C:\Users\win7\AppData\Local\Tempfolder\SefxohFeuoor\smime3.dll

C:\Users\win7\AppData\Local\Temp\nsyDE6C.tmp\\1093444395

C:\Users\win7\AppData\Local\Temp\nsgD8DD.tmp

C:\Users\win7\AppData\Local\Temp\nsk53FA.tmp\System.dll

C:\WINDOWS\FONTS\ANGSAU.TTF

C:\WINDOWS\FONTS\DAUNPENH.TTF

C:\Users\win7\AppData\Local\Temp\nsm7458.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\is-GN01Q.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config

C:\Users\win7\AppData\Local\Temp\nsdEA04.tmp

C:\Users\win7\AppData\Local\Temp\nse7AD0.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsb8C44.tmp\\514252965

C:\Users\win7\AppData\Local\Temp\nsl7E99.tmp\StdUtils.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GetPrivate\GetPrivate.lnk

C:\Users\win7\AppData\Local\Tempfolder\MiilnaFyhfoo\libplds4.dll

C:\Users\win7\AppData\Local\Temp\be65e9678dd5d48d48970c7dbd120df9\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\IXP000.TMP\98.cab

C:\Users\win7\AppData\Local\Tempfolder\ortmp\nss3.dll

C:\Users\win7\AppData\Local\Temp\nsy6E90.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Tempfolder\IofhopFicu\sqlite3.dll

C:\Users\win7\AppData\Local\Temp\nsr7FA3.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsd8426.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Tempfolder\FhupagTueibub\nssutil3.dll

C:\Users\win7\AppData\Local\Temp\nsn6B93.tmp\\736838172

C:\WINDOWS\FONTS\ANGSAI.TTF

C:\Users\win7\AppData\Local\Tempfolder\PyrfowTunn\libplc4.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\223DE96EE265046957A660ED7C9DD9E7_EFF9B9BA98DEAA773F261FA85A0B1771

C:\Users\win7\AppData\Local\Tempfolder\AuqeaCua\smime3.dll

C:\Users\win7\AppData\Local\Tempfolder\PokbhvAyv\libplds4.dll

C:\Users\win7\AppData\Local\Temp\nsp7E11.tmp\\1030587994

h1_17.red

C:\Users\win7\AppData\Local\Temp\nsr75A4.tmp\896022178

C:\Users\win7\AppData\Local\Temp\nsz7CC9.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\5d3e687ec77ac9bbac7baeaed99d0d59\stub.exe

C:\Users\win7\AppData\Local\Temp\7zS902B.tmp\jfjahgbhkoidecpcmlippenojpfkjijd\515f52b3b1c228.87852096.js

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\layout[1]

C:\Users\win7\AppData\Local\Temp\nsnDCF5.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Tempfolder\AuqeaCua\nssutil3.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\8KX8WHKN.txt

C:\Users\win7\AppData\Local\Temp\nss8563.tmp\NSISdl.dll

C:\Users\win7\Downloads\desktop.ini

C:\Users\win7\AppData\Local\Temp\nsfC8D1.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\tsldrl6660\puzzle.pzl

C:\Users\win7\AppData\Local\Temp\nsd6D29.tmp\\707146525

C:\WINDOWS\FONTS\MSUIGHUR.TTF

C:\Users\win7\AppData\Local\Temp\nsb9993.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nse7083.tmp\nsResize.dll

/etc/ctags.conf

C:\Users\win7\AppData\Local\Temp\nssE92A.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Tempfolder\NoicdIdhrib\KutliOomufg.exe

C:\Users\win7\AppData\Local\Temp\nsy6CBC.tmp\nsArray.dll

x1_13.red

C:\Users\win7\AppData\Local\Temp\nsc55CB.tmp\427527476

C:\Users\win7\AppData\Local\Temp\nsy7AF3.tmp

C:\Users\win7\AppData\Local\Temp\nsvA367.tmp\\744363234

C:\Users\win7\AppData\Local\Tempfolder\MiilnaFyhfoo\sqlite3.dll

C:\Users\win7\AppData\Roaming

C:\Users\win7\AppData\Local\Temp\nsxD8.tmp

C:\Users\win7\AppData\Local\Temp\nsl7363.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsaD516.tmp\1069200756

C:\Users\win7\AppData\Local\Temp\nsnCECB.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Temp\nssDC78.tmp\System.dll

C:\WINDOWS\FONTS\SHRUTI.TTF

c:\users\win7\appdata\local\temp\License.txt

C:\Users\win7\AppData\Local\Temp\nsi84C2.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Temp\nsl7A98.tmp

C:\Users\win7\AppData\Local\Temp\nsrE581.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsd838B.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsh80EB.tmp\\747155339

C:\Users\win7\AppData\Local\Temp\nsr8CF1.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsc55CB.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\EI9QY5MS.txt

C:\Users\win7\AppData\Local\Temp\nsy84A4.tmp\\121826085

C:\Users\win7\AppData\Local\Temp\nsf716F.tmp\nsWeb.dll

\\.\pipe\dd641d45_0660_497f_874f_5edfdc39d3c5

C:\Users\win7\AppData\Local\Temp\nsd83D8.tmp\NET.dll

C:\Users\win7\AppData\Local\Temp\nsl7EE7.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\\~DF4A0EF6BF3EC7D5F1.TMP

C:\Users\win7\AppData\Local\Temp\nse5E69.tmp\NET.dll

C:\ProgramData\Microsoft\Windows\Start Menu\SPASS Desktop.lnk

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_rtl.xml

C:\Users\win7\AppData\Local\Temp\nssC3B0.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Tempfolder\IlupayXio\libnspr4.dll

C:\WINDOWS\FONTS\SERIFE.FON

C:\Users\win7\AppData\Local\Temp\nsl7E4B.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nsfD6BB.tmp\NSISdl.dll

C:\WINDOWS\FONTS\APARAJI.TTF

C:\Users\win7\AppData\Local\Temp\nsfD5D0.tmp

\\?\C:\Users\win7\AppData\Roaming\Neuxpower Solutions Ltd\NXPowerLite\install\50A2E39\1043

C:\Users\win7\AppData\Local\Temp\nsmE64C.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Tempfolder\IofhopFicu\FitgaNahfu.exe

C:\Users\win7\AppData\Local\Temp\nspE051.tmp\StdUtils.dll

CONOUT$

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfjahgbhkoidecpcmlippenojpfkjijd\1\manifest.json

C:\Users\win7\AppData\Local\Tempfolder\JogoYtem\sqlite3.dll

C:\Users\win7\AppData\Local\Temp\nst6D87.tmp\536453600

C:\Users\win7\AppData\Local\Temp\7zSEEA6.tmp\elejenikcaceegblacieffpkheggoeai\content.js

C:\Users\win7\AppData\Local\Temp\\~DF353A28E2A1AC34FE.TMP

C:\Users\win7\AppData\Local\Temp\nsq7F49.tmp\DL.dll

C:\WINDOWS\FONTS\TIMESBD.TTF

c:\$Recycle.Bin\S-1-5-21-3979321414-2393373014-2172761192-1000\desktop.ini

C:\WINDOWS\FONTS\MVBOLI.TTF

C:\Users\win7\AppData\Local\Temp\nse6FE7.tmp\nsJSON.dll

C:\WINDOWS\FONTS\CANDARAB.TTF

C:\Users\win7\AppData\Local\Temp\nsmCC07.tmp

C:\Users\win7\AppData\Local\Temp\nse7035.tmp\GetPrivateInstaller_woautorun.exe

C:\Users\win7\AppData\Local\Tempfolder\BabdamVhd\libplds4.dll

C:\Users\win7\AppData\Local\Temp\nsx75CF.tmp\\367701529

C:\Users\win7\AppData\Local\Temp\nso6ABE.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsmDAD1.tmp

C:\Users\win7\AppData\Local\Temp\nsw6912.tmp\nsArray.dll

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml

C:\Users\win7\AppData\Local\Temp\nsiCF39.tmp

C:\Users\win7\AppData\Local\Temp\nsc833C.tmp\StdUtils.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini

C:\Users\win7\AppData\Local\Temp\037381ac.a

C:\Users\win7\AppData\Local\Temp\nst6EBF.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\ActSys\SSL\nss\mozcrt19.dll

C:\Users\win7\AppData\Local\Temp\nstEA14.tmp\nsResize.dll

C:\Users\win7\AppData\Local\Temp\nskD7BA.tmp\nsArray.dll

C:\WINDOWS\FONTS\UPCEL.TTF

C:\Users\win7\AppData\Local\Temp\nsj6181.tmp\NSISdl.dll

C:\WINDOWS\FONTS\LAOUIB.TTF

C:\ProgramData\DatacardService\log\AutoRun.log

C:\Users\win7\AppData\Local\Temp\aut84D1.tmp

C:\Windows\ie8_main.log

C:\Users\win7\AppData\Local\Tempfolder\QubmKhrheoa\libplds4.dll

C:\Users\win7\AppData\Local\Temp\\~DF5A5770F7A2A58484.TMP

C:\Users\win7\AppData\Local\Temp\nsmE5FE.tmp\\172696866

C:\Users\win7\AppData\Local\Temp\nsh6AD7.tmp\nsArray.dll

install41382.exe

C:\WINDOWS\FONTS\CORBELB.TTF

C:\WINDOWS\FONTS\UPCKL.TTF

C:\siw.lic

C:\Users\win7\AppData\Local\Temp\nsm8286.tmp\\713377685

C:\Users\win7\AppData\Local\Temp\7zS6BB0.tmp\dmhfdlngglhgmdlpmmdodefgadjnkcii\content.js

C:\Users\win7\AppData\Local\Tempfolder\IofhopFicu\ssl3.dll

C:\WINDOWS\FONTS\FRAMDIT.TTF

C:\Users\win7\AppData\Local\Temp\ActSys\SSL\nss\plc4.dll

wdmaud.drv

C:\Users\win7\AppData\Local\Temp\nssE840.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nskFC05.tmp

C:\Users\win7\AppData\Local\Temp\nsjDF95.tmp\nsArray.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\PCNE7H4S.txt

C:\Users\win7\AppData\Local\Temp\nssDCC5.tmp

C:\Users\win7\AppData\Local\Tempfolder\JupxonQyb\nss3.dll

C:\Users\win7\AppData\Local\Temp\nsh76EC.tmp

C:\Users\win7\AppData\Local\Temp\is-NFAB7.tmp\webctrl.dll

data.pck

C:\WINDOWS\FONTS\MSYI.TTF

C:\Users\win7\AppData\Local\Temp\nsvCCCD.tmp\System.dll

c:\users\win7\appdata\local\tempfolder\pidymomawpip\saogaabafid.dat

C:\Users\win7\AppData\Local\Temp\nsmF435.tmp

C:\Users\win7\AppData\Local\Temp\is-IIFFB.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\nsy6CBC.tmp\NSISdl.dll

Notes\Loader changelog.txt

C:\Users\win7\AppData\Local\Temp\nsx5F1E.tmp

x1_7.red

C:\WINDOWS\FONTS\ARIALI.TTF

C:\Users\win7\AppData\Local\Tempfolder\NhnimGuryoph\libnspr4.dll

C:\WINDOWS\FONTS\ANDLSO.TTF

C:\Users\win7\AppData\Local\Temp\is-NIEM2.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM2.tmp

C:\Users\win7\AppData\Local\Temp\nsp37F7.tmp\739528127

C:\Users\win7\AppData\Local\Temp\nsyDF07.tmp

C:\~adstest.tmp:ADSTest

C:\Users\win7\AppData\Local\Temp\2f2ef0d4f0b4de33eb48fcaf471d6340\volcano.exe

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad.xml

C:\Users\win7\AppData\Local\Temp\nssE9C5.tmp

C:\Users\win7\AppData\Local\Temp\nssE92A.tmp\nsExec.dll

C:\Users\win7\AppData\Local\Temp\nst6EBF.tmp\\774974234

Notes\How to restore tokens.txt

C:\ProgramData\BBroowsee2save\uninstall.exe

\\.\Scsi12:

C:\Users\win7\AppData\Local\Temp\nsr8257.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions

C:\WINDOWS\FONTS\SIMHEI.TTF

C:\Users\win7\AppData\Local\Temp\nsqF0FA.tmp\System.dll

\\?\C:\Users\win7\AppData\Roaming\Neuxpower Solutions Ltd\NXPowerLite\install\50A2E39\lcppn30i.dll

C:\Users\win7\AppData\Local\Temp\7zS902B.tmp\jfjahgbhkoidecpcmlippenojpfkjijd

c:\users\win7\appdata\local\tempfolder\jupxonqyb\rijcbier.dat

C:\WINDOWS\FONTS\TAHOMA.TTF

C:\Windows\System32\drivers\etc\services

C:\Users\win7\AppData\Local\Temp\nsv8B88.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nscDBCC.tmp\NSISdl.dll

h1_5.red

C:\Users\win7\AppData\Local\Temp\nsoDE7C.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsd85AD.tmp\\252680445

C:\Users\win7\AppData\Local\Tempfolder\FhupagTueibub\freebl3.dll

C:\Users\win7\AppData\Local\Temp\nso6CD6.tmp\nsExec.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BC2602F5489CFE3E69F81C6328A4C17C_849A9AE095E451B9FFDF6A58F3A98E26

C:\Users\win7\AppData\Local\Temp\nsb74F9.tmp\nsArray.dll

\\?\C:\Users\win7\AppData\Roaming\Neuxpower Solutions Ltd\NXPowerLite\install\50A2E39\NXPowerLite.exe

C:\Users\win7\AppData\Local\Tempfolder\PokbhvAyv\nssdbm3.dll

C:\Users\win7\AppData\Local\Temp\nsjD3CC.tmp

C:\Users\win7\AppData\Local\Temp\nstEA14.tmp\GetPrivateInstaller_woautorun.exe

h1_19.red

C:\Users\win7\AppData\Local\Tempfolder\MiilnaFyhfoo\VhdoSumf.dat

C:\Users\win7\AppData\Local\Temp\nsj791A.tmp

C:\Users\win7\AppData\Local\Temp\nsi60E3.tmp

C:\WINDOWS\FONTS\LATHA.TTF

C:\Users\win7\AppData\Local\Temp\nsk7DF2.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\is-ESACR.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nswE504.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Tempfolder\SefxohFeuoor\nss3.dll

__tmp_rar_sfx_access_check_55048218

C:\Users\win7\AppData\Local\Tempfolder\WiseshVepdomb\smime3.dll

C:\Users\win7\AppData\Local\Tempfolder\ortmp\libplds4.dll

C:\Users\win7\AppData\Local\Temp\nsiE9D6.tmp\nsExec.dll

C:\WINDOWS\FONTS\SIMPFXO.TTF

C:\Users\win7\AppData\Local\Temp\nsl679A.tmp

C:\Users\win7\AppData\Local\Temp\nsz9378.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Temp\nsg97DE.tmp\\937597295

C:\Users\win7\AppData\Local\Temp\nsp7B5D.tmp\nsArray.dll

c:\users\win7\appdata\local\tempfolder\nekgunewim\fuurrhijkoi.dat

C:\Users\win7\AppData\Local\Temp\nsgFE0A.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsi6CFA.tmp\NSISdl.dll

C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp

C:\Users\win7\AppData\Roaming\TeamViewer\TeamViewer6_Logfile2.log

C:\Users\win7\AppData\Local\Temp\nsp715F.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\\~DF5FD3DD2E565223A5.TMP

C:\Users\win7\AppData\Local\Tempfolder\ortmp\orionHelper.bit

C:\Users\win7\AppData\Local\Temp\nsyD034.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsj87A0.tmp\nsResize.dll

C:\Users\win7\AppData\Local\Temp\nsp715E.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsn8544.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsd83D8.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Temp\nsuE10C.tmp\System.dll

C:\WINDOWS\FONTS\ISKPOTAB.TTF

C:\Users\win7\AppData\Local\Temp\nsg7FB2.tmp\\565362097

\\.\Scsi11:

C:\Users\win7\AppData\Local\Temp\{DF2BFBED-3E75-420E-A0E5-765704C8D91B}\Setup.exe

C:\Users\win7\AppData\Local\Temp\nsv565A.tmp\KillProcDLL.dll

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipTsf.dll.mui

C:\Users\win7\AppData\Local\Tempfolder\AuqeaCua\UcekGio.dat

C:\WINDOWS\FONTS\UTSAAHBI.TTF

C:\Users\win7\AppData\Local\Tempfolder\PokbhvAyv\softokn3.dll

C:\Users\win7\AppData\Local\Temp\nsxCF49.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsvF07C.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\extreme[1].htm

C:\Users\win7\AppData\Local\Temp\nskEE1C.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nso7A68.tmp\1046795820

\\.\SYNTP

C:\Users\win7\AppData\Local\Temp\nsq7F49.tmp\IS.dll

C:\Users\win7\AppData\Local\Temp\nsb6895.tmp\134731055

C:\Users\win7\AppData\Local\Temp\nsl8C35.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-VDPSG.tmp\Dlg_Btn_Close.png

C:\Users\win7\AppData\Local\Tempfolder\JogoYtem\nss3.dll

C:\Users\win7\AppData\Local\Temp\nsr75A4.tmp\nsArray.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\WE3KZA8P.txt

C:\Users\win7\AppData\Local\Temp\nsk53FA.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsm8CD2.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsw6912.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsn7717.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nstEA14.tmp\GetPrivateInstaller_woautorun.exe.crypted

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_ca.xml

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\app[1].js

C:\Users\win7\AppData\Local\Temp\nsd838A.tmp

C:\Users\win7\AppData\Local\Temp\nsm7759.tmp

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfjahgbhkoidecpcmlippenojpfkjijd

C:\Users\win7\AppData\Local\Temp\462C4735-BAB0-7891-A34D-580F9211D2C5\bab307.sp_pop0.dat

C:\Users\win7\AppData\Local\Temp\nsa70BD.tmp

C:\Users\win7\AppData\Local\Temp\nsa8938.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\7zSEEA6.tmp\elejenikcaceegblacieffpkheggoeai

C:\Users\win7\AppData\Local\Temp\nsb98F6.tmp

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ja-jp.xml

C:\Users\win7\Documents\Microsoft\GamesLauncher.exe

SxBArVzWJr.dat

C:\Windows\Fonts\staticcache.dat

c:\program files\ica\html 4 & CSS 2\colours.html

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\ea.xml

C:\Users\win7\AppData\Local\Temp\nsaD516.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nss847A.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsx83B8.tmp\\976822958

C:\Users\win7\AppData\Local\Temp\nsr4BFB.tmp\System.dll

Patch.exe

C:\Users\win7\AppData\Local\Temp\nsjECE3.tmp\\115697075

C:\Users\win7\AppData\Local\Temp\nsb74F9.tmp\\674458472

C:\Users\win7\AppData\Local\Tempfolder\PyrfowTunn\LocgeuRyc.dat

C:\Users\win7\AppData\Local\Temp\nsw9012.tmp\\336409529

C:\Users\win7\AppData\Local\Tempfolder\NoicdIdhrib\ssl3.dll

C:\WINDOWS\FONTS\GEORGIAI.TTF

C:\Users\win7\AppData\Local\Temp\nsh69ED.tmp\System.dll

C:\Windows\system32\zsnesw.cfg

C:\Users\win7\AppData\Local\Temp\nsu6430.tmp\452928816

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ko-kr.xml

matong.dat

C:\Users\win7\AppData\Local\Tempfolder\BabdamVhd\sqlite3.dll

h1_15.red

C:\Windows\system32\zinput.cfg

C:\Users\win7\AppData\Local\Temp\nsu6430.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsg7FB2.tmp\565362097

C:\Users\win7\AppData\Local\Temp\nsbF30D.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsc55CB.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsaD515.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsu7B7C.tmp\nsArray.dll

C:\Users\win7\AppData

h1_20.red

C:\Users\win7\AppData\Local\Temp\nso6E52.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nszBB59.tmp\\336443579

c:\monkey.py

C:\Users\win7\AppData\Local\Temp\nsl8A61.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\dm_left_image[1].png

C:\Users\win7\AppData\Local\Temp\nsf4728.tmp\NET.dll

C:\Users\win7\AppData\Local\Temp\nsn7717.tmp\\784882799

C:\Users\win7\AppData\Local\Temp\nscF3F8.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsw6912.tmp\\1067191803

C:\Users\win7\AppData\Local\Temp\nst6E23.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Tempfolder\SefxohFeuoor\nssdbm3.dll

C:\Users\win7\AppData\Local\Temp\nsl8BE7.tmp\668499713

C:\Users\win7\AppData\Roaming\REAPER\ColorThemes\Default.ReaperTheme

C:\Users\win7\AppData\Local\Temp\7zS7E49.tmp\dddgglodbdmjddjdklmhpjpcjhekkije\515f05ce291471.94888109.js

C:\WINDOWS\FONTS\ARIALBD.TTF

C:\Users\win7\AppData\Local\Temp\nsu7A44.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\e476d6026eb8a2312ee94ba7aa477005\stub.exe

h1_24.red

C:\Users\win7\AppData\Local\Temp\nsa7C37.tmp\NSISdl.dll

C:\WINDOWS\FONTS\MOOLBOR.TTF

C:\Windows\system32\wbem\XSL-Mappings.xml

C:\Users\win7\AppData\Local\Temp\nsy853F.tmp

C:\Users\win7\AppData\Local\Temp\nsjEC46.tmp\DL.dll

C:\Users\win7\AppData\Local\Temp\nst86A6.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\605.~cx

C:\Users\win7\AppData\Local\Temp\nssDCC5.tmp\NET.dll

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_altgr.xml

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\rtutils[1]

C:\Users\win7\AppData\Local\Temp\nso6CD6.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nssF58E.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\\~DFF7070A2D73BA941A.TMP

C:\Windows\system32\en-US\erofflps.txt

C:\Users\win7\AppData\Local\Temp\nsj1F5D.tmp\1071584260

C:\Users\win7\AppData\Local\Temp\nsd83D8.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nsbE571.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Tempfolder\NhnimGuryoph\libplds4.dll

C:\Users\win7\AppData\Local\Temp\nsaD515.tmp\NSISdl.dll

C:\WINDOWS\FONTS\VANI.TTF

C:\Users\win7\AppData\Local\Temp\nse7AD0.tmp\656411943

C:\Users\win7\AppData\Local\Temp\nse7035.tmp\nsResize.dll

C:\Users\win7\AppData\Local\Temp\nsj87A0.tmp\DL.dll

C:\Users\win7\AppData\Local\Temp\nse7083.tmp\nsJSON.dll

/ctags.cnf

C:\Users\win7\AppData\Local\Temp\nsb7631.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nswF168.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nseC74A.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nsy84A4.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsn77B3.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsxE775.tmp\\725771905

C:\WINDOWS\FONTS\MEIRYOB.TTC

C:\Users\win7\AppData\Local\Temp\xns8D1E.tmp

C:\Users\win7\AppData\Local\Temp\nsl7363.tmp\\1145234528

C:\Users\win7\AppData\Local\Temp\nsn762D.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsl8A61.tmp\System.dll

C:\WINDOWS\FONTS\TIMES.TTF

C:\Users\win7\AppData\Local\Temp\7zS902B.tmp

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EB2C4AB8B68FFA4B7733A9139239A396_D76DB901EE986B889F30D8CC06229E2D

C:\Users\win7\AppData\Local\Temp\nse6FE7.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\nsw8C26.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\is-TTL1U.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\nsfC8D1.tmp\\1006923206

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Preferences

C:\Users\win7\AppData\Local\Temp\nsrB227.tmp\SimpleSC.dll

v1_546.red

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main.xml

C:\Users\win7\AppData\Local\Tempfolder\IvhfiSueamfh\sqlite3.dll

C:\Users\win7\AppData\Local\Temp\nsdF5CD.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsy9108.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nslE3DB.tmp\System.dll

C:\Users\win7\AppData\Local\Tempfolder\JogoYtem\libplc4.dll

C:\Users\win7\AppData\Local\Temp\nsh6AD7.tmp\1100016056

c:\users\win7\appdata\local\tempfolder\auqeacua\ucekgio.dat

C:\Users\win7\AppData\Local\Tempfolder\MiilnaFyhfoo\libplc4.dll

C:\Users\win7\AppData\Local\Temp\nshE62C.tmp

C:\Users\win7\AppData\Local\Tempfolder\JupxonQyb\libnspr4.dll

C:\Users\win7\AppData\Local\Temp\nse158E.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsh8E38.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsaCC01.tmp

C:\Users\win7\AppData\Local\Temp\nsf4728.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nse7A34.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\d194c315be1140b7ec59a88f07e39a46\stub.exe

C:\Users\win7\AppData\Local\Tempfolder\JogoYtem\ssl3.dll

C:\WINDOWS\FONTS\SEGOEUIZ.TTF

x1_4.red

C:\Users\win7\AppData\Local\Temp\is-NIEM2.tmp\botva2.dll

C:\Users\win7\AppData\Local\Temp\nsvA367.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkjeojoangpmoeckmdgmibinanicmghc\1\manifest.json

C:\Users\win7\AppData\Local\Temp\nsjECE3.tmp\115697075

C:\Users\win7\AppData\Local\Temp\nsxCEAD.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsdEB3D.tmp\\295004663

C:\Users\Public\desktop.ini

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\runtime[1]

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-dayi.xml

C:\Users\win7\AppData\Local\Temp\nsu7A44.tmp\nsArray.dll

C:/ProgramData/Oracle/Java/java.settings.cfg

C:\Users\win7\AppData\Local\Temp\tsldrl6660\sp.gif

C:\Users\win7\AppData\Local\Temp\nsg73DF.tmp

C:\Users\win7\AppData\Local\Temp\nsiD071.tmp

C:\Users\win7\AppData\Local\Tempfolder\ortmp\nssckbi.dll

top.red

C:\Users\win7\AppData\Roaming\REAPER\ColorThemes\track_icons\toolbar_blank.png

C:\Users\win7\AppData\Local\Temp\nstD0B1.tmp\NSISdl.dll

C:\WINDOWS\FONTS\VERDANAB.TTF

C:\Users\win7\AppData\Local\Temp\nsb7631.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\dddgglodbdmjddjdklmhpjpcjhekkije

c:\users\win7\appdata\local\tempfolder\nozulmusfi\jonqelibaoop.dat

C:\WINDOWS\FONTS\BROWAUZ.TTF

C:\Users\win7\AppData\Local\Temp\nsf65A6.tmp

C:\WINDOWS\FONTS\TIMESI.TTF

C:\WINDOWS\FONTS\TREBUCBD.TTF

C:\Users\win7\AppData\Local\Tempfolder\JogoYtem\libnspr4.dll

C:\Users\win7\AppData\Local\Temp\nssA82A.tmp\1166754163

C:\Users\win7\AppData\Local\Tempfolder\BabdamVhd\nssckbi.dll

C:\Users\win7\AppData\Local\Temp\nsrA8BA.tmp\850599405

C:\Users\win7\AppData\Local\Temp\nsr8208.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsyD208.tmp\System.dll

v1_473.red

C:\Users\win7\AppData\Local\Tempfolder\IofhopFicu\libplc4.dll

C:\Users\win7\AppData\Local\Temp\is-VDPSG.tmp\Dlg_icon.png

C:\Users\win7\AppData\Local\Temp\nsc55CB.tmp\cpSetup.exe

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C5FD5BF0CE6372B1CAFE381FD0BC969C

C:\Users\win7\AppData\Local\Temp\nsj6F1C.tmp\\511937561

C:\Users\win7\AppData\Local\Tempfolder\PyrfowTunn\libplds4.dll

C:\Users\win7\AppData\Local\Temp\nsl8C35.tmp\\571661357

C:\Users\win7\AppData\Local\Tempfolder\NhnimGuryoph\libplc4.dll

C:\Users\win7\AppData\Local\Temp\nso6985.tmp

C:\Users\win7\AppData\Local\Temp\nsgA5C7.tmp

C:\Users\win7\AppData\Local\Temp\nsb745D.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default

C:\Users\win7\AppData\Local\Temp\nso79D5.tmp

C:\Users\win7\AppData\Local\Temp\nsu7B7C.tmp\\937358944

C:\Users\win7\AppData\Local\Temp\7zS6BB0.tmp

C:\Users\win7\AppData\Local\Temp\nsn7801.tmp\713275534

C:\Users\win7\AppData\Local\Temp\nsy6CBB.tmp\nsArray.dll

\\?\C:\Users\win7\AppData\Roaming\Neuxpower Solutions Ltd\NXPowerLite\install\50A2E39\NXPLiteShell64.dll

C:\Users\win7\AppData\Local\Tempfolder\QubmKhrheoa\nssdbm3.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\skip[1].gif

C:\Users\win7\AppData\Local\Temp\nspD43B.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Tempfolder\NhnimGuryoph\nssdbm3.dll

C:\Users\win7\AppData\Roaming\REAPER\reaper-mouse.ini

Keys.ini

C:\Users\win7\AppData\Local\Temp\nsk7277.tmp

C:\tmp.exe

/usr/local/etc/ctags.conf

C:\Users\win7\AppData\Local\Temp\nsj6F1C.tmp\511937561

C:\Users\win7\AppData\Local\Tempfolder\IofhopFicu\nssdbm3.dll

c:\users\win7\appdata\local\tempfolder\teidfoagehwe\hebummamdet.dat

C:\Users\win7\AppData\Local\Temp\nsl7E4A.tmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\main[1].css

C:\Users\win7\AppData\Local\Temp\nsfD6BB.tmp\\342504489

C:\Users\win7\AppData\Local\Temp\nsp8995.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsc771B.tmp

C:\Users\win7\AppData\Local\Temp\nsl8AAF.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsy8408.tmp\System.dll

C:\Users\win7\AppData\Local\Tempfolder\NoicdIdhrib\libnspr4.dll

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\mip.exe.mui

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\TD2HVIYE.txt

C:\Users\win7\AppData\Local\Temp\7zSE540.tmp\fkjeojoangpmoeckmdgmibinanicmghc

C:\Users\win7\AppData\Local\Temp\is-L8N8I.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\nsu7BCA.tmp\SimpleSC.dll

C:\Windows\system32\upgrade.log

C:\Users\win7\AppData\Local\Temp\nstD284.tmp

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\KDV8A3UU.txt

C:\Users\win7\AppData\Local\Temp\nsg742E.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Tempfolder\NoicdIdhrib\smime3.dll

C:\Users\win7\AppData\Local\Temp\nsi6CF9.tmp

c:\users\win7\appdata\local\temp\LICENSE.TXT

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05EC48341C277FE5110E7DFAA91377DC_F4D89EB1FD4E80AFB0D09F169F9D4E2D

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\l10n[1]

C:\Users\win7\AppData\Local\Tempfolder\AuqeaCua\nss3.dll

C:\Users\win7\AppData\Local\Temp\nst8521.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsp70C3.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsb4B9C.tmp\NSISdl.dll

C:\sample.scr

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\jquery[1].js

C:\Windows\SysWOW64\dnsapi.dll

C:\Users\win7\AppData\Local\Temp\nszE040.tmp

C:\Users\win7\AppData\Local\Temp\nsqFDF9.tmp

C:\Users\win7\AppData\Local\Temp\nssDCC5.tmp\nsResize.dll

C:\Users\win7\AppData\Local\Temp\is-ESACR.tmp\Dlg_Btn.png

C:\Users\Default User

C:\Users\win7\AppData\Local\Temp\nsyAB07.tmp\NSISdl.dll

\\?\C:\Users\win7\AppData\Roaming\Neuxpower Solutions Ltd\NXPowerLite\install\50A2E39\NXPowerLite41.mst

C:\Users\win7\AppData\Local\Temp\nsrE6B8.tmp

C:\Users\win7\AppData\Local\Temp\nsv80EE.tmp

\\.\PhysicalDrive5

C:\Users\win7\AppData\Local\Temp\nsn759B.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsbFF23.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nslD68D.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsm6AA8.tmp\\233714564

C:\Users\win7\AppData\Local\Temp\nsmDA36.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsg8091.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsj6E80.tmp

C:\Users\win7\AppData\Local\Temp\nsnEA43.tmp\nsArray.dll

\\?\C:\Users\win7\AppData\Roaming\Neuxpower Solutions Ltd\NXPowerLite\install\50A2E39\1031

C:\ersfiles\Shortcuts.dat

C:\Users\win7\AppData\Local\Temp\nsa7C37.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\jquery[1].js

C:\reamote.exe

h1_22.red

C:\Users\win7\AppData\Local\Tempfolder\ortmp\ssl3.dll

C:\Users\win7\AppData\Local\Temp\nsyDE6C.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Tempfolder\NhnimGuryoph\freebl3.dll

C:\Users\win7\AppData\Roaming\WLEThjJwJFKr

C:\WINDOWS\FONTS\MODERN.FON

C:\Users\win7\AppData\Local\Temp\nsuE10C.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsxCEAD.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\6efb25bc8da8c8c2c9e8048717b44cc2\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\nst6D87.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\ActSys\SSL\nss\softokn3.dll

C:\Users\win7\AppData\Local\Tempfolder\IlupayXio\EpemOcinofu.exe

C:\Microsoft Visual C++ 2005 Redistributable.dat

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\XPXSMA49.txt

C:\Users\win7\AppData\Local\Temp\nsg8091.tmp\nsResize.dll

C:\Users\win7\AppData\Local\Temp\\~DF4A62643F38419ED0.TMP

C:\Users\win7\AppData\Local\Temp\nsjD246.tmp

C:\Users\win7\AppData\Local\Temp\nstD0B1.tmp\\757778956

C:\Users\win7\AppData\Local\Temp\is-NEG17.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Tempfolder\JogoYtem\nssdbm3.dll

C:\Users\win7\AppData\Local\Temp\nsp87C0.tmp

C:\Users\win7\AppData\Local\Temp\CH.dll

C:\Users\win7\AppData\Local\Temp\nse7083.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nsjE07F.tmp\nsArray.dll

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_jpn.xml

C:\Users\win7\AppData\Local\Tempfolder\IvhfiSueamfh\nssdbm3.dll

C:\WINDOWS\FONTS\SCRIPT.FON

C:\Users\win7\AppData\Local\Temp\nso6EEE.tmp\nsArray.dll

h1_10.red

C:\Users\win7\AppData\Local\Temp\nsqE3FA.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsx6C6C.tmp

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D92C5B2C978310455CC3BB3E4574D7A

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\host[1]

C:\Users\win7\AppData\Local\Temp\nscDBCC.tmp\892174522

C:\Users\win7\AppData\Local\Temp\d77dc95484dc6c4d4458546230aa3d47\pricepeep.exe

C:\Users\win7\AppData\Local\Temp\7zSE540.tmp\515f52b6468e9.tlb

C:\Users\win7\AppData\Local\Tempfolder\PokbhvAyv\nssckbi.dll

C:\Users\win7\AppData\Local\Temp\nsi6CFA.tmp\\1079926523

C:\Users\win7\AppData\Local\Temp\nslD68D.tmp\906237194

C:\Users\win7\AppData\Local\Tempfolder\JogoYtem\nssckbi.dll

C:\Users\win7\AppData\Local\Tempfolder\JupxonQyb\nssdbm3.dll

C:\Users\win7\AppData\Local\Temp\nsmF399.tmp

puzzle.pzl

C:\Users\win7\AppData\Local\Temp\nsmCC4B.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsvF07C.tmp

C:\Users\win7\AppData\Local\Temp\nsqF148.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsi6CAB.tmp\nsArray.dll

C:\Users

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\ZDQR1MSL.txt

C:\Users\win7\AppData\Local\Temp\is-7F2JM.tmp\sample.tmp

C:\Users\win7\AppData\Local\Tempfolder\MiilnaFyhfoo\softokn3.dll

C:\Users\win7\AppData\Local\Temp\nsoD218.tmp\\1153406541

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\3EE5MW2F.txt

C:\Users\win7\AppData\Local\Temp\nsi835C.tmp\System.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\common[1]

C:\Users\win7\AppData\Local\Temp\nsy61DE.tmp\135684457

C:\WINDOWS\FONTS\COURBD.TTF

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\3HA3PGH9.txt

C:\Users\win7\AppData\Local\Temp\nsn6D19.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsuD4A8.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsg8091.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nsy78AC.tmp

C:\Users\win7\AppData\Local\Temp\nsg8BC8.tmp\inetc.dll

C:\Users\win7\AppData\Local\Tempfolder\PokbhvAyv\XejadSibitih.exe

C:\Users\win7\AppData\Local\Tempfolder\IvhfiSueamfh\softokn3.dll

C:\Users\win7\AppData\Local\Temp\nst6D87.tmp\\536453600

C:\WINDOWS\FONTS\ISKPOTA.TTF

C:\Users\win7\AppData\Local\Temp\nsaEF15.tmp

C:\Users\win7\AppData\Local\Tempfolder\IlupayXio\freebl3.dll

C:\Users\win7\AppData\Local\Temp\nsjDF95.tmp\\264632014

C:\Users\win7\AppData\Local\Temp\nsm6AA8.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsm9984.tmp\\989046927

C:\Users\win7\AppData\Local\Temp\nscB265.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Tempfolder\MiilnaFyhfoo\nssutil3.dll

C:\Users\win7\AppData\Local\Temp\is-GN01Q.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\nsi765C.tmp\436074039

C:\Users\win7\AppData\Local\Temp\nsrA8BA.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Tempfolder\NoicdIdhrib\freebl3.dll

C:\Users\win7\AppData\Local\Temp\nsp8773.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\d77dc95484dc6c4d4458546230aa3d47\DirectDownloaderInstaller.exe

C:\Windows\VMPipe32.dll

C:\Users\win7\AppData\Local\Temp\tsldrl6660\index.htm

C:\Users\win7\AppData\Local\Temp\nswDA26.tmp\nsArray.dll

h1_9.red

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\TR_lhNAZKyck6FkOpkAAYYIxlU[1].htm

C:\Users\win7\AppData\Local\Temp\nsw4C19.tmp

C:\Users\win7\AppData\Local\Temp\261b55742615f111f03f941ce52dc4e4\volcano.exe

C:\Users\win7\AppData\LocalLow\Oracle\Java\jre1.8.0_65\jds56374875.tmp

C:\Users\win7\AppData\Local\Temp\nsbF139.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\utils[1].js

C:\Users\win7\AppData\Local\Temp\nskFC53.tmp

C:\WINDOWS\FONTS\FRAMD.TTF

C:\Users\win7\AppData\Local\Temp\nsq6808.tmp\618854733

x1_5.red

C:\Users\win7\AppData\Local\Temp\nsj6355.tmp\\1170227268

C:\Users\win7\AppData\Local\Temp\nsx83B8.tmp\NSISdl.dll

C:\WINDOWS\FONTS\BROWAUB.TTF

C:\Windows\system32\\\\wuapi.dll

C:\Users\win7\AppData\Local\Temp\nsu7B7C.tmp\937358944

C:\Users\win7\AppData\Local\Temp\nsiDC3A.tmp\1069983907

C:\Users\win7\AppData\Local\Temp\nsd85AD.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsf8909.tmp\System.dll

C:\WINDOWS\FONTS\SIMSUNB.TTF

C:\Users\win7\AppData\Local\Temp\nsf72A7.tmp\7za.exe

C:\Users\win7\AppData\Local\Temp\nsd6D28.tmp

C:\Users\win7\AppData\Local\Temp\RarSFX0\BTuuGhr.exe

C:\Users\win7\AppData\Local\Temp\nslBE13.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsrDAA3.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsx75CF.tmp\367701529

C:\Users\win7\AppData\Local\Tempfolder\IvhfiSueamfh\DyvdeCoyjt.dat

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\InputPersonalization.exe.mui

C:\vice.log

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Recent\desktop.ini

C:\Users\win7\AppData\Local\Temp\{7E56800C-E567-4872-BE53-CE340B3446E3}\Setup.INI

C:\Users\win7\AppData\Local\Microsoft\Windows

C:\Users\win7\AppData\Local\Temp\nsh6AD7.tmp\NSISdl.dll

C:\WINDOWS\FONTS\UPCKI.TTF

C:\Users\win7\AppData\Local\Temp\nstEA14.tmp\nsDialogs.dll

Notes\Arguments.txt

C:\Users\win7\AppData\Local\Temp\nswF251.tmp

C:\Users\win7\AppData\Local\Temp\nsq7F49.tmp\System.dll

C:\TV_w32.exe

C:\Users\win7\AppData\Roaming\Babylon\log_file.txt

C:\Users\win7\AppData\Local\Temp\nssF58E.tmp\\352004454

C:\Users\win7\AppData\Local\Temp\{DF2BFBED-3E75-420E-A0E5-765704C8D91B}\Setup.ico

C:\Users\win7\AppData\Local\Temp\nsp70C3.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsm8E09.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Tempfolder\WiseshVepdomb\libnspr4.dll

__tmp_rar_sfx_access_check_54493484

C:\Users\win7\AppData\Local\Temp\nsoEA91.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nshD97B.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsmE784.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsn8291.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\7zS6BB0.tmp\515f05cca2d7e.tlb

C:\ProgramData\Microsoft\Windows

\\?\C:\Users\win7\AppData\Roaming\Neuxpower Solutions Ltd\NXPowerLite\install\50A2E39\1028

\\.\PhysicalDrive7

C:\WINDOWS\FONTS\SEGOEUIL.TTF

C:\Users\win7\AppData\Local\Temp\nss78B1.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\NZXQP3B3.txt

C:\Users\win7\Desktop\Continue installation .lnk

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\dddgglodbdmjddjdklmhpjpcjhekkije\1\manifest.json

C:\Users\win7\AppData\Local\Temp\nscDA94.tmp\nsArray.dll

C:\Users\win7\AppData\Roaming\REAPER\reaper-vstplugins.ini

C:\Program Files\Internet Explorer\iexplore.exe

C:\Users\win7\AppData\Local\Temp\nse6383.tmp

C:\Users\win7\AppData\Local\Temp\nsh6822.tmp

C:\Users\win7\AppData\Local\Temp\nsr7640.tmp\NSISdl.dll

C:\WINDOWS\FONTS\SMALLE.FON

C:\Users\win7\AppData\Local\Temp\nsg6902.tmp\nsArray.dll

C:\Windows\SysWOW64\psapi.dll

C:\Users\win7\AppData\Local\Temp\nsuE10B.tmp

C:\Users\win7\AppData\Local\Tempfolder\FhupagTueibub\nssckbi.dll

C:\Users\win7\AppData\Local\Tempfolder\IvhfiSueamfh\freebl3.dll

C:\Users\win7\AppData\Local\Temp\nshD97B.tmp\nsArray.dll

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkWatson.exe.mui

C:\Users\win7\AppData\Local\Temp\7zSFBC6.tmp\Daemon.exe

C:\WINDOWS\FONTS\SEGOEPR.TTF

C:\Users\win7\AppData\Local\Temp\nsw9012.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsaEE7A.tmp\SimpleSC.dll

C:\WINDOWS\FONTS\CALIBRIB.TTF

C:\Users\win7\AppData\Local\Tempfolder\PokbhvAyv\smime3.dll

C:\Users\win7\AppData\Local\Temp\nsmE5FE.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsy6CBB.tmp\\434167236

C:\WINDOWS\FONTS\CORDIAUZ.TTF

C:\Users\win7\AppData\Local\Temp\tsldrl6660\banner.gif

C:\Users\win7\AppData\Local\Temp\nslE513.tmp\\624064391

C:\Users\win7\AppData\Local\Temp\nsx831D.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\tsldrl6660\loader.da_

C:\Users\win7\AppData\Local\Temp\nsn6D19.tmp\SimpleSC.dll

c:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\tipresx.dll.mui

C:\Users\win7\AppData\Local\Temp\nsl8AFC.tmp

C:\Users\win7\AppData\Local\Temp\tsldrl6660\pbin.dat

C:\Users\win7\AppData\Local\Temp\nsiE93A.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsn6B93.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsi752D.tmp

C:\Users\win7\AppData\Local\Temp\7zS902B.tmp\515f52b3b1e65.dll

C:\Users\win7\AppData\Local\Temp\nsl7315.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsb740F.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsgE5DE.tmp\943419854

C:\Users\win7\AppData\Local\Temp\VSD6B04.tmp\install.log

C:\Users\win7\AppData\Local\Temp\nsv8A50.tmp

C:\Users\win7\AppData\Local\Temp\nscDBCC.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsg7FB2.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsy7978.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsp37F7.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\elejenikcaceegblacieffpkheggoeai\1\manifest.json

C:\TV_x64.exe

C:\Users\win7\AppData\Local\Tempfolder\QubmKhrheoa\ImuddiLhfot.dat

C:\Users\win7\AppData\Local\Temp\nso6EEE.tmp\1178024731

C:\Users\win7\AppData\Local\Temp\nsu70E2.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nsdEB3D.tmp\nsArray.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\JYMRKNLF.txt

C:\Users\win7\AppData\Local\Temp\nslE779.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsb740F.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsv721B.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsiE89D.tmp

\\?\C:\Users\win7\AppData\Roaming\Neuxpower Solutions Ltd\NXPowerLite\install\50A2E39\1042

C:\Users\win7\AppData\Local\Temp\nshE6C9.tmp\nsWeb.dll

C:\WINDOWS\FONTS\VERDANAI.TTF

C:\Users\win7\AppData\Local\Temp\nsf7D8E.tmp

C:\Users\win7\AppData\Local\Temp\ActSys\SSL\nss\certutil.exe

crack.exe

C:\Users\win7\AppData\Local\Temp\nsi83A9.tmp

C:\Windows\mstwain32.exe

C:\Users\win7\AppData\Local\Temp\nsoEA91.tmp\nsJSON.dll

C:\WINDOWS\FONTS\LVNM.TTF

C:\Users\win7\AppData\Local\Tempfolder\MiilnaFyhfoo\nssdbm3.dll

C:\Users\win7\AppData\Local\Temp\nsiB9B2.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsjEC46.tmp\IS.dll

C:\Users\win7\AppData\Local\Temp\nsjDF95.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\TeamViewer\TeamViewer6_Logfile.log

C:\Users\win7\AppData\Local\Temp\nswF168.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsmD9E7.tmp

x1_3.red

C:\Users\win7\AppData\Local\Temp\nswE5EE.tmp\System.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\finish[1].gif

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\5U13EWZB.txt

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\libacess_js[1].htm

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\welcome[1]

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad\osknumpadbase.xml

C:\WINDOWS\FONTS\SYMBOL.TTF

C:\Users\win7\AppData\Local\Temp\\~DF92DBA146E284CC23.TMP

C:\Users\win7\AppData\Local\Temp\nsi6CAB.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Tempfolder\IofhopFicu\smime3.dll

C:\Users\win7\AppData\Local\Temp\nsj6F6A.tmp

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05C228D5A90F8E552A04359DBA3E6884

C:\Users\win7\AppData\Local\Temp\nslE38C.tmp\IS.dll

C:\Users\win7\AppData\Local\Tempfolder\JupxonQyb\RawtebOkat.exe

C:\Users\win7\AppData\Local\Temp\nsaE1C8.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\7zSFBC6.tmp\eula.rtf

C:\Users\win7\AppData\Local\Temp\tsldrl6660\bananistan.tmp

C:\Users\win7\AppData\Local\Tempfolder\BabdamVhd\GesdSayet.exe

c:\users\win7\appdata\local\tempfolder\jogoytem\yhivzepukcia.dat

C:\Users\win7\AppData\Local\Temp\03737b05.a

C:\Users\win7\AppData\Local\Tempfolder\QubmKhrheoa\libplc4.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\ext[1].js

C:\Users\win7\AppData\Local\Temp\nsm8CD2.tmp\SimpleSC.dll

C:\WINDOWS\FONTS\CORDIA.TTF

C:\Users\win7\Searches\desktop.ini

C:\Users\win7\AppData\Local\Temp\d73b989f8bebc4a4b59f91fe7c949077\OpenCL.dll

C:\Users\win7\AppData\Local\Temp\e1c1e048af3eb4f5776b5551aa16d363\volcano.exe

C:\Users\win7\AppData\Local\Temp\nsxE775.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Play65

C:\Users\win7\AppData\Local\Temp\nss847A.tmp\\999636494

c:\Users\win7\AppData\Local\Temp\sfx1\_bbg.exe

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\app[1].js

C:\Users\win7\AppData\Local\Temp\nsn762D.tmp\System.dll

C:\Users\win7\AppData\Local\Tempfolder\AuqeaCua\libnspr4.dll

C:\Users\win7\AppData\Local\Temp\nsp70C3.tmp\cpSetup.exe

C:\Users\win7\AppData\Local\Tempfolder\NhnimGuryoph\smime3.dll

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_kor.xml

C:\WINDOWS\FONTS\CONSTANB.TTF

\\.\pipe\0a98527b12fd0030

C:\Users\win7\AppData\Local\Temp\nsf4728.tmp\GetPrivateInstaller_woautorun.exe.crypted

C:\Windows\system32\\wuapi.dll

\\.\VBoxGuest

C:\Users\win7\AppData\Local\Temp\nstEB9B.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsf7BBB.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsyD034.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Tempfolder\PyrfowTunn\nssutil3.dll

C:\Users\win7\AppData\Local\Tempfolder\NhnimGuryoph\AthroMopsors.dat

alpha.red

C:\Users\win7\AppData\Local\Tempfolder\PokbhvAyv\EasimzKyijq.dat

C:\Users\win7\AppData\Local\Temp\nsp880F.tmp\nsArray.dll

C:\Windows\system32\MSHTML.tlb

C:\Users\win7\AppData\Local\Tempfolder\BabdamVhd\softokn3.dll

C:\Users\win7\AppData\Local\Temp\nsz6F7A.tmp

C:\Users\win7\AppData\Local\Temp\\~DFAEDDC707F1754C7C.TMP

C:\Users\win7\AppData\Local\Tempfolder\AuqeaCua\sqlite3.dll

C:\WINDOWS\FONTS\LUCON.TTF

C:\Users\win7\AppData\Local\Temp\nsoEC18.tmp\\1053333431

C:\Users\win7\AppData\Local\Temp\nsxE775.tmp\NSISdl.dll

\\.\C:

C:\Users\win7\AppData\Local\Tempfolder\NhnimGuryoph\HhdugAxudo.exe

C:\Users\win7\AppData\Local\Temp\19877d67a779994779e897cef475469b\pricepeep.exe

C:\Users\win7\AppData\Local\Temp\is-NFAB7.tmp\WSysInfo.dll

C:\Users\win7\AppData\Local\Temp\nst86A6.tmp\NSISdl.dll

C:\WINDOWS\FONTS\PALAB.TTF

C:\Users\win7\AppData\Local\Temp\nsp37F7.tmp\\739528127

C:\Users\win7\AppData\Local\Temp\nscDB7D.tmp

C:\Users\win7\AppData\Local\Temp\nsnC42C.tmp\NSISdl.dll

C:\ProgramData\BBroowsee2save\515f52b6468e9.tlb

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\jquery[1].js

C:\WINDOWS\FONTS\SEGUISYM.TTF

C:\WINDOWS\FONTS\BROWAI.TTF

C:\Users\win7\AppData\Local\Temp\nst6EBF.tmp\774974234

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\JVFZ3GWG.txt

C:\Users\win7\AppData\Local\Tempfolder\BabdamVhd\smime3.dll

C:\Users\win7\AppData\Local\Temp\nso6EEE.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\\~DF22430A164BC0D3B6.TMP

C:\Users\Public\Downloads\dm-63D6.tmp

C:\Users\win7\AppData\Local\Temp\nsq6808.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsu8744.tmp\\940082949

C:\Users\win7\AppData\Local\Temp\nsj1F5D.tmp\NSISdl.dll

C:\WINDOWS\FONTS\ESTRE.TTF

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EB2C4AB8B68FFA4B7733A9139239A396_D76DB901EE986B889F30D8CC06229E2D

C:\Users\win7\AppData\Local\Temp\nssE840.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-NIEM2.tmp\Ksicfg.dll

C:\Users\win7\Music\desktop.ini

C:\Users\win7\AppData\Local\Tempfolder\WiseshVepdomb\nssdbm3.dll

C:\Users\win7\AppData\Local\Tempfolder\IvhfiSueamfh\ssl3.dll

C:\Users\win7\AppData\Local\Temp\is-H5441.tmp\webctrl.dll

C:\Users\win7\AppData\Local\Temp\nsnCECB.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsi7830.tmp\\507885605

C:\Users\win7\AppData\Local\Temp\nsc55CB.tmp\\427527476

c:\program files\ica\html 4 & CSS 2\html4 and css.hlp

C:\Users\win7\AppData\Local\Temp\nsy796E.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsf7D8F.tmp\\376384293

C:\Users\win7\AppData\Local\Temp\\~DF6CE16D81015E039E.TMP

C:\Users\win7\AppData\Local\Play65\SmartDownload.exe

C:\Users\win7\AppData\Local\Tempfolder\SefxohFeuoor\FakufAovi.dat

C:\WINDOWS\FONTS\SYLFAEN.TTF

C:\Users\win7\AppData\Local\Tempfolder\AuqeaCua\nssckbi.dll

C:\Users\win7\AppData\Local\Temp\Stp7FEA_TMP.EXE

h1_7.red

C:\Users\win7\AppData\Local\Temp\nswF41C.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\is-ESACR.tmp\Dlg_icon.png

C:\Users\win7\AppData\Local\Temp\nsd8426.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Temp\nsxDC48.tmp

C:\Users\win7\AppData\Local\Temp\is-ESACR.tmp\botva2.dll

C:\Users\win7\AppData\Local\Tempfolder\IvhfiSueamfh\nssutil3.dll

C:\Users\win7\AppData\Local\Temp\nsn8F90.tmp\cpSetup.exe

C:\Users\win7\AppData\Local\Temp\nsx83B8.tmp\976822958

C:\WINDOWS\FONTS\ARIALBI.TTF

C:\Users\win7\AppData\Local\Temp\nsmDA35.tmp

C:\Users\win7\AppData\Local\Temp\nsuEF88.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsw7AD8.tmp\19d9bc56-21cf-4ea2-96f0-66125fc53ade.dll

C:\Users\win7\AppData\Local\Tempfolder\MiilnaFyhfoo\nss3.dll

C:\Users\win7\AppData\Local\Temp\7zS7E49.tmp\515f05ce29392.tlb

C:\Users\win7\Contacts\desktop.ini

C:\Users\win7\AppData\Local\Temp\462C4735-BAB0-7891-A34D-580F9211D2C5\bab327.ff_2.dat

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\310714_br[1].exe

C:\Users\win7\AppData\Local\Temp\nss847A.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsd838B.tmp\nsArray.dll

C:\WINDOWS\FONTS\TREBUCIT.TTF

C:\Users\win7\AppData\Local\Temp\nsrA8BA.tmp\\850599405

C:\WINDOWS\FONTS\SSERIFE.FON

C:\Users\win7\AppData\Local\Temp\nse864A.tmp\\104086006

C:\Windows\system32\Comctl32.ocx

C:\Users\win7\AppData\Local\Tempfolder\ortmp\nssdbm3.dll

C:\Users\win7\AppData\Local\Temp\nsjEB0E.tmp

C:\Users\win7\AppData\Local\Temp\nst6D38.tmp

C:\Users\win7\AppData\Local\Temp\nszECF3.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsk7BDA.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsjEB0F.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsp87C1.tmp\\259899056

C:\Users\win7\AppData\Local\Temp\nsoD218.tmp\nsArray.dll

h1_1.red

C:\Users\win7\AppData\Local\Temp\nsoEA91.tmp\IS.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F463A8EC6EA3A214C73FB4FC74B1B1BD

C:\Users\win7\AppData\Local\Temp\nscF3AA.tmp\SimpleSC.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows

C:\Users\win7\AppData\Local\Temp\nsb6895.tmp\\134731055

C:\Users\win7\AppData\Local\Temp\nsd77C3.tmp\\682834786

C:\Users\win7\AppData\Local\Temp\nse864A.tmp\104086006

C:\Users\win7\AppData\Local\Temp\is-NIEM2.tmp\Dlg_icon.png

C:\Users\win7\AppData\Local\Tempfolder\JupxonQyb\freebl3.dll

C:\Windows\SysWOW64\Dxtrans.dll

C:\Users\win7\AppData\Local\Temp\tsldrl6660\banner.jpg

C:\Windows\SysWOW64\dllcache\dnsapi.dll

C:\Users\win7\AppData\Local\Temp\nsq7F53.tmp

C:\WINDOWS\FONTS\BROWA.TTF

C:\WINDOWS\FONTS\LEELAWAD.TTF

c:\users\win7\appdata\local\tempfolder\pyrfowtunn\locgeuryc.dat

C:\Users\win7\AppData\Local\Temp\nss777A.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nswF41C.tmp\NSISdl.dll

C:\WINDOWS\FONTS\CALIBRI.TTF

C:\Users\win7\AppData\Local\Temp\tsldrl6660\bar.jpg

CH-Trainer-Keys.dat

C:\Users\win7\AppData\Local\Temp\3a323904ccb01666e8b97fe1f2f6f1bf\pricepeep.exe

C:\Users\win7\AppData\Local\Temp\3a323904ccb01666e8b97fe1f2f6f1bf\stub.exe

C:\Windows\system32\dekr\wivd\bok.dat

C:\Users\win7\AppData\Local\Temp\nsl7E4B.tmp\System.dll

h1_8.red

C:\WINDOWS\FONTS\BROWAB.TTF

C:\Users\win7\AppData\Local\Temp\nsh80EB.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Tempfolder\QubmKhrheoa\libnspr4.dll

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu\oskmenubase.xml

C:\Users\win7\AppData\Local\Temp\is-H5441.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Roaming\Opera\Opera\opcacrt6.datC:\Users\win7\AppData\Roaming\Opera\Opera\profile\opcacrt6.dat

C:\Users\win7\AppData\Local\Temp\nsw8C26.tmp\StdUtils.dll

h1_27.red

C:\Users\win7\AppData\Local\Temp\nsaE34E.tmp\\817809202

C:\WINDOWS\FONTS\TUNGAB.TTF

C:\Users\win7\AppData\Local\Temp\is-GN01Q.tmp\_isetup\_shfoldr.dll

C:\WINDOWS\FONTS\MSJH.TTF

C:\Users\win7\AppData\Local\Temp\nsj6181.tmp\\737382973

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini

C:\Users\win7\AppData\Local\Temp\nsk72C5.tmp

C:\Users\win7\AppData\Local\Temp\\~DFCBB6A243E657C835.TMP

C:\Users\win7\AppData\Local\Temp\is-ESACR.tmp\Dlg_Btn_OK.png

BTuuGhr.exe

C:\Users\win7\AppData\Local\Temp\nsg8BC7.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\1N7DQL00.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\CGAP65G0.txt

C:\Users\win7\AppData\Local\Tempfolder\FhupagTueibub\smime3.dll

C:\Users\win7\AppData\Local\Temp\nss7699.tmp

C:\Users\Public\Desktop\SPASS Desktop.lnk

C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp

C:\Users\win7\AppData\Local\Tempfolder\QubmKhrheoa\smime3.dll

C:\Users\win7\AppData\Local\Temp\1.jpg

C:\Users\win7\AppData\Local\Temp\7zSFBC6.tmp\ShellExt.dll

C:\Users\win7\AppData\Local\Tempfolder\PokbhvAyv\libnspr4.dll

C:\Users\win7\AppData\Local\Temp\nsf4728.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsj87A0.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Tempfolder\SefxohFeuoor\freebl3.dll

C:\WINDOWS\FONTS\MSJHBD.TTF

C:\Users\win7\AppData\Local\Temp\nsl8BE7.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nst86A6.tmp\\208040823

C:\Users\win7\AppData\Local\Temp\nscDA94.tmp\1195185958

C:\Users\win7\AppData\Local\Temp\nsm8286.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsd6C3F.tmp\\340359336

C:\Users\win7\AppData\Local\Temp\nsh69ED.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsh80EB.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Tempfolder\AuqeaCua\nssdbm3.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\index[1].htm

.

C:\WINDOWS\FONTS\MANGAL.TTF

C:\Users\win7\AppData\Local\Temp\nsv73EF.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsyD034.tmp\717361541

C:\Users\win7\AppData\Local\Temp\e1c1e048af3eb4f5776b5551aa16d363\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\SPNB3K1H.txt

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\ext[1].js

C:\Users\win7\AppData\Local\Temp\nsk722A.tmp\nsArray.dll

sfiles\lang.ini

C:\Users\win7\AppData\Local\Tempfolder\PyrfowTunn\smime3.dll

C:\Users\win7\AppData\Local\Temp\nsx831D.tmp\NSISdl.dll

C:\Windows\system32\\comsvcs.dll

C:\Users\win7\AppData\Local\Temp\nsz6F7B.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsm736E.tmp\939163597

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\reset[1].css

C:\Users\win7\AppData\Local\Temp\nsd855F.tmp\SimpleSC.dll

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Barowasse2saave\Barowasse2saave.lnk

C:\Users\win7\AppData\Local\Tempfolder\BabdamVhd\libnspr4.dll

C:\Users\win7\AppData\Local\Temp\nsn2BD.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\7zS6BB0.tmp\515f05cca2d47.exe

C:\Users\win7\AppData\Local\Temp\nsi6CAB.tmp\\876102896

C:\Users\win7\AppData\Local\Temp\{7E56800C-E567-4872-BE53-CE340B3446E3}\_ISMSIDEL.INI

c:\users\win7\appdata\local\tempfolder\iofhopficu\xatlukqaf.dat

C:\Users\win7\AppData\Local\Temp\nsmDA36.tmp\\489736925

c:\users\win7\appdata\local\temp\Licen�a.txt

C:\Users\win7\AppData\Local\Temp\nse6EAF.tmp

C:\Users\win7\AppData\Local\Temp\7zSE540.tmp\515f52b6468e9.dll

C:\Users\win7\AppData\Local\Temp\nsa66BF.tmp

C:\Users\win7\AppData\Local\Temp\528dd5088dd2bdf0b990dc6dd3376971\pricepeep.exe

C:\Users\win7\AppData\Local\Temp\nssDCC5.tmp\IS.dll

C:\Users\win7\AppData\Local\Temp\DIQ\flashplayer_151\config.dll

C:\Users\win7\AppData\Local\Temp\7zSE540.tmp\fkjeojoangpmoeckmdgmibinanicmghc\background.html

c:\users\win7\appdata\local\temp\sfx1\bbgift.puz

C:\Users\win7\AppData\Local\Tempfolder\PokbhvAyv\libplc4.dll

C:\Users\win7\AppData\Local\Temp\nsq8BB8.tmp\\506830053

C:\WINDOWS\FONTS\APARAJBI.TTF

C:\Users\win7\AppData\Local\Temp\nsnCECB.tmp\DL.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\icone_cadeado[1].gif

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D4F348B882DF3F205ECCB6243795CB3A

C:\Users\win7\AppData\Local\Temp\nsfE1E7.tmp\792918612

C:\Users\win7\AppData\Local\Temp\d194c315be1140b7ec59a88f07e39a46\OpenCL.dll

C:\Users\win7\AppData\Local\Temp\nsq7F49.tmp\NET.dll

C:\Users\win7\AppData\Local\Temp\7zS902B.tmp\jfjahgbhkoidecpcmlippenojpfkjijd\manifest.json

C:\Users\win7\AppData\Local\Tempfolder\JupxonQyb\nssutil3.dll

C:\Users\win7\AppData\Local\Temp\nso6EEE.tmp\\1178024731

C:\Users\win7\AppData\Local\Temp\nsg8091.tmp\GetPrivateInstaller_woautorun.exe

C:\Users\win7\AppData\Local\Temp\nsj78CC.tmp

C:\WINDOWS\FONTS\GABRIOLA.TTF

C:\Users\win7\AppData\Local\Temp\nsq8C06.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nswE504.tmp\NSISdl.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

C:\Users\win7\AppData\Local\Temp\7zS6BB0.tmp\515f05cca2d7e.dll

C:\Users\win7\AppData\Local\Temp\nsb6895.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Tempfolder\FhupagTueibub\ssl3.dll

C:\ProgramData\BBroowsee2save

C:\Users\win7\AppData\Local\Temp\nsx831D.tmp\485889269

C:\WINDOWS\FONTS\SHONAR.TTF

C:\Users\win7\AppData\Local\Temp\nsw9973.tmp

C:\Users\win7\AppData\Local\Temp\nsd83D8.tmp\nsResize.dll

C:\WINDOWS\FONTS\TAILEB.TTF

C:\Users\win7\AppData\Local\Temp\nsn6D18.tmp

C:\Users\win7\AppData\Local\Temp\nsd77C3.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsd77C3.tmp\682834786

C:\Users\win7\AppData\Local\Temp\is-L8N8I.tmp\WS_VersionProcess.dll

C:\Users\win7\AppData\Local\Temp\nsq7F49.tmp\nsResize.dll

C:\Users\win7\AppData\Local\Temp\nsj7CB9.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nss777A.tmp\System.dll

C:\Windows\Fonts\desktop.ini

C:\Users\win7\AppData\Local\Temp\is-VDPSG.tmp\_isetup\_shfoldr.dll

C:\WINDOWS\FONTS\CALIBRII.TTF

C:\Users\win7\AppData\Local\Temp\nsi6CFA.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsx83B8.tmp

C:\Users\win7\AppData\Local\Tempfolder\IofhopFicu\softokn3.dll

C:\WINDOWS\FONTS\MSMINCHO.TTC

C:\Users\win7\AppData\Local\Temp\nsa86D1.tmp\System.dll

C:\Users\win7\AppData\Local\Tempfolder\IvhfiSueamfh\libplds4.dll

C:\Users\win7\AppData\Local\Temp\7zSFBC6.tmp\diskpt2k.sys

C:\WINDOWS\FONTS\UPCLI.TTF

C:\ProgramData\Barowasse2saave\515f05ce29392.tlb

C:\Users\win7\AppData\Local\Tempfolder\AuqeaCua\softokn3.dll

C:\Users\win7\AppData\Local\Tempfolder\JupxonQyb\sqlite3.dll

C:\Users\win7\AppData\Local\Temp\nsaE34E.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsq8BB8.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Tempfolder\QubmKhrheoa\sqlite3.dll

C:\Users\win7\AppData\Local\Temp\nsc8E19.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nss904C.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\RarSFX0\GBchppI.exe

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A34B45DD28A5DAEFDA3E0BA2FCE7DE24_D8309B1ECA516AE8FCEB10D1DC37BE8F

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\nrVzWJrYnjU.lnk

C:\WINDOWS\FONTS\BROWAU.TTF

C:\Users\win7\AppData\Local\Tempfolder\WiseshVepdomb\sqlite3.dll

C:\WINDOWS\FONTS\GULIM.TTC

C:\Users\win7\AppData\Local\Temp\nsr8CF1.tmp\SimpleSC.dll

C:\WINDOWS\FONTS\UPCFBI.TTF

C:\Users\win7\AppData\Local\Temp\nskEFA2.tmp\SimpleSC.dll

C:\WINDOWS\FONTS\VIJAYAB.TTF

C:\Users\win7\AppData\Local\Temp\nsi765C.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nso6EA0.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsy796E.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsj8704.tmp

C:\Users\win7\AppData\Local\Temp\7zS7E49.tmp\dddgglodbdmjddjdklmhpjpcjhekkije

C:\Users\win7\AppData\Local\Temp\nsf72A7.tmp\nsExec.dll

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\elejenikcaceegblacieffpkheggoeai

C:\Users\win7\AppData\Local\Temp\nsw9012.tmp\nsArray.dll

h1_23.red

C:\Users\win7\AppData\Local\Temp\nsqE30F.tmp

C:\Users\win7\AppData\Local\Temp\nst6171.tmp\System.dll

C:\crack.exe

C:\Users\win7\AppData\Local\Temp\nsnE820.tmp

C:\WINDOWS\FONTS\KALINGA.TTF

C:\Users\win7\AppData\Local\Temp\nsbF139.tmp\System.dll

C:\WINDOWS\FONTS\SHONARB.TTF

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers\numbase.xml

C:\Users\win7\AppData\Local\Temp\7zSEEA6.tmp\elejenikcaceegblacieffpkheggoeai\manifest.json

C:\Users\win7\AppData\Local\Temp\nsa86D1.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Tempfolder\SefxohFeuoor\nssutil3.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\84AFE219AEC53B0C9251F5E19EF019BD_DBDA70FA0C7F0763826EA9179F77D209

C:\Users\win7\AppData\Local\Temp\\~DF954DBF8AD55FFD73.TMP

C:\Users\win7\AppData\Local\Temp\nsuE1A7.tmp

C:\Users\win7\AppData\Local\Temp\19877d67a779994779e897cef475469b\DirectDownloaderInstaller.exe

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\mshwLatin.dll.mui

C:\Users\win7\AppData\Local\Temp\nslD813.tmp\404032938

C:\Users\win7\AppData\Local\Temp\nsa8938.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nso6EA0.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Tempfolder\JogoYtem\smime3.dll

c:\users\win7\appdata\local\tempfolder\nhnimguryoph\athromopsors.dat

C:\WINDOWS\FONTS\TREBUC.TTF

C:\WINDOWS\FONTS\SEGOEPRB.TTF

C:\WINDOWS\FONTS\EBRIMA.TTF

C:\Users\win7\AppData\Local\Temp\nslF08C.tmp

C:\Users\win7\AppData\Local\Temp\nso7A68.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsyD034.tmp\\717361541

C:\Users\win7\AppData\Local\Temp\nsmDA84.tmp\1192053353

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\verificar_ip[1].htm

C:\Users\win7\AppData\Local\Temp\nsd7811.tmp\NSISdl.dll

keyset.cfg

C:\Users\win7\AppData\Local\Temp\nst86A6.tmp\cpSetup.exe

C:\Users\win7\AppData\Local\Temp\nsl66FF.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\dif85CB.tmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\amipb[1].js

C:\Users\win7\AppData\Local\Temp\nsp70C3.tmp\319929303

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\310714_br[1].exe

C:\Users\win7\AppData\Local\Temp\7zS7E49.tmp\dddgglodbdmjddjdklmhpjpcjhekkije\manifest.json

C:\Users\win7\AppData\Local\Temp\nsh77D7.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nse70D2.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\is-L8N8I.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\Pictures\desktop.ini

C:\Users\win7\AppData\Local\Temp\nsp8995.tmp\StdUtils.dll

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\FlickLearningWizard.exe.mui

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\mobi2[1].js

C:\Users\win7\AppData\Local\Temp\E592A50D-87A9-437F-9F9B-31AA642D3A9Bmp\\1.zip

C:\Users\win7\AppData\Local\Temp\nszE12B.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsuD544.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\19877d67a779994779e897cef475469b\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\nseED12.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsi84C2.tmp\IS.dll

C:\WINDOWS\FONTS\COURI.TTF

C:\Users\win7\AppData\Local\Temp\nskEE1C.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nst860A.tmp

C:\Users\win7\AppData\Local\Temp\is-MFLR5.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\nsa86D1.tmp\GetPrivateInstaller_woautorun.exe.crypted

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\IpsMigrationPlugin.dll.mui

C:\Users\win7\AppData\Roaming\Microsoft\Windows\SendTo\desktop.ini

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\carregando[1].gif

C:\Users\win7\AppData\Local\Temp\nsd6C8C.tmp

C:\Users\win7\AppData\Local\Temp\7zSE540.tmp

C:\Users\win7\AppData\Local\Tempfolder\AuqeaCua\CecdUfa.exe

C:\Users\win7\AppData\Local\Temp\nszEDDC.tmp

C:\Users\win7\AppData\Local\Temp\nse7AD0.tmp\\656411943

h1_14.red

C:\Users\win7\AppData\Local\Temp\is-H5441.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Tempfolder\NoicdIdhrib\libplc4.dll

C:\Users\win7\AppData\Local\Tempfolder\ortmp\libnspr4.dll

C:\Users\win7\AppData\Local\Temp\nsdDDA1.tmp\SimpleSC.dll

C:\setup.ini

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\1[1].zip

C:\Users\win7\AppData\Local\Temp\nsg97DE.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nse7035.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsf8909.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsn7801.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\f839514addcc6805918cc9f67bcd6e75\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Tempfolder\IvhfiSueamfh\smime3.dll

C:\Users\win7\AppData\Local\Temp\nso6103.tmp

C:\Users\win7\AppData\Local\Tempfolder\IvhfiSueamfh\nss3.dll

C:\Users\win7\AppData\Local\Temp\nsy77A4.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nskEF54.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsz7B9B.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\mobi2[1].js

C:\Users\win7\AppData\Local\Temp\7zS6BB0.tmp\dmhfdlngglhgmdlpmmdodefgadjnkcii\lsdb.js

C:\Users\win7\AppData\Local\Temp\nsjE07F.tmp\593146942

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu.xml

C:\Users\win7\AppData\Local\Tempfolder\FhupagTueibub\BhvhoPibsox.exe

C:\Users\win7\AppData\Local\Temp\nsj44D6.tmp\GetPrivateInstaller_woautorun.exe

C:\Users\win7\AppData\Local\Temp\nsq811E.tmp\System.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\04AFA8793E5CDC4A81C6CD4554A30707

C:\Users\win7\AppData\Local\Temp\_MSI5166._IS

C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\enterprisesec.config.cch

C:\Users\win7\AppData\Local\Temp\nsb745D.tmp\\1163417257

C:\Users\win7\AppData\Local\Temp\is-L8N8I.tmp\WS_AgentProcess.dll

C:\WINDOWS\FONTS\CONSOLAI.TTF

C:\Users\win7\AppData\Local\Temp\_ir_sf_temp_0\IRIMG3.JPG

C:\ProgramData\Microsoft

C:\Users\win7\AppData\Local\Tempfolder\ortmp\smime3.dll

C:\WINDOWS\FONTS\UPCFI.TTF

C:\Users\win7\AppData\Roaming\REAPER\REAPER.ini

C:\Windows\system32\drivers\etc\hosts

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-changjei.xml

\\?\C:\Users\win7\AppData\Roaming\Neuxpower Solutions Ltd\NXPowerLite\install\decoder.dll

C:\Users\win7\AppData\Local\Temp\is-4MFVH.tmp\_isetup\_RegDLL.tmp

c:\Program Files\Common Files\Microsoft Shared\ink\et-EE\tipresx.dll.mui

C:\Users\win7\AppData\Local\Temp\7zSEEA6.tmp\elejenikcaceegblacieffpkheggoeai\sqlite.js

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\IPSEventLogMsg.dll.mui

C:\Windows\system32\vodo\situ\afu.dat

C:\Users\win7\AppData\Local\Tempfolder\NhnimGuryoph\nssutil3.dll

C:\Users\win7\AppData\Local

C:\Users\win7\AppData\Local\Temp\nsp8773.tmp\542105910

C:\Users\win7\AppData\Local\Tempfolder\NhnimGuryoph\ssl3.dll

C:\Users\win7\AppData\Local\Temp\nss769A.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\WLEThjJwJFKr\5758.xml

C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\security.config.cch

C:\Users\win7\AppData\Local\Temp\nsi250.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsd6D29.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nsq7F49.tmp\nsDialogs.dll

C:\WINDOWS\FONTS\PALABI.TTF

C:\Users\win7\AppData\Local\Tempfolder\ortmp\freebl3.dll

C:\Users\win7\AppData\Local\Tempfolder\IlupayXio\nssdbm3.dll

C:\Users\win7\AppData\Local\Tempfolder\BabdamVhd\XefikaVafbu.dat

C:\Users\win7\AppData\Local\Temp\nsd838B.tmp\1072469561

C:\Users\win7\AppData\Local\Temp\nsx81E5.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsdE968.tmp

C:\Users\win7\AppData\Local\Temp\nsn8291.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-VDPSG.tmp\Dlg_bkg.png

C:\Users\win7\AppData\Local\Temp\nsoDF65.tmp

C:\Users\win7\AppData\Local\Temp\nsiE93A.tmp\\1203562272

C:\Users\win7\AppData\Local\Temp\nsjEC46.tmp\NET.dll

C:\Users\win7\AppData\Local\Tempfolder\IofhopFicu\XatlukQaf.dat

C:\Users\win7\AppData\Local\Temp\nsiB9B2.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\7c460ffc43d81bc155b60ff2a41f6fe9\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Local\Temp\nssE929.tmp

C:\WINDOWS\FONTS\MANGALB.TTF

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\app[1].js

C:\Users\win7\AppData\Local\Temp\nsy84A4.tmp\NSISdl.dll

C:\Users\desktop.ini

C:\Users\win7\AppData\Local\Temp\nszBB59.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nssE92A.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nscDA94.tmp\\1195185958

C:\Users\win7\AppData\Local\Temp\nss6C4D.tmp

C:\Users\win7\AppData\Local\Temp\nslE38C.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsd6D29.tmp\nsArray.dll

C:\WINDOWS\FONTS\MAJALLAB.TTF

C:\WINDOWS\FONTS\CAMBRIA.TTC

C:\WINDOWS\FONTS\CAMBRIAI.TTF

C:\Users\win7\AppData\Local\Temp\nsu7A44.tmp\\1079449823

Data\data.ssp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\libacess_js[1].htm

C:\Users\win7\AppData\Local\Tempfolder\BabdamVhd\freebl3.dll

C:\Users\win7\AppData\Local\Temp\7c460ffc43d81bc155b60ff2a41f6fe9\pricepeep.exe

C:\Users\win7\AppData\Local\Temp\nsoEC18.tmp\NSISdl.dll

C:\WINDOWS\FONTS\MINGLIU.TTC

C:\Users\win7\AppData\Local\Temp\nscE8CC.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Tempfolder\JupxonQyb\RijcBier.dat

C:\Users\win7\AppData\Local\Tempfolder\PokbhvAyv\freebl3.dll

C:\Users\win7\AppData\Local\Temp\nsf4728.tmp\IS.dll

C:\Users\win7\AppData\Local\Temp\is-VDPSG.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\7zS7E49.tmp\515f05ce29392.dll

C:\Users\win7\AppData\Local\Tempfolder\JogoYtem\libplds4.dll

C:\Users\win7\AppData\Local\Temp\nsuD544.tmp\666592910

C:\Users\win7\AppData\Local\Tempfolder\FhupagTueibub\nss3.dll

C:\Users\win7\AppData\Local\Temp\nssDC78.tmp\SimpleSC.dll

C:\SecureMyFilesRestore Libs

C:\Users\win7\AppData\Local\Temp\\~DF7AD48A063EB7AB9A.TMP

C:\Users\win7\AppData\Local\Temp\34de4613903d936aecd50d9797ec48e6\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsj9452.tmp

c:\users\win7\appdata\local\tempfolder\jonspibgh\xewrpecliu.dat

C:\Users\win7\AppData\Local\Temp\f839514addcc6805918cc9f67bcd6e75\OpenCL.dll

C:\WINDOWS\FONTS\TAILE.TTF

C:\Users\win7\AppData\Local\Tempfolder\PyrfowTunn\libnspr4.dll

C:\Users\win7\AppData\Local\Temp\nsa86D1.tmp\GetPrivateInstaller_woautorun.exe

C:\Users\win7\AppData\Local\Temp\is-L8N8I.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nsi84C2.tmp\NET.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\cancel[1].gif

C:\Users\win7\AppData\Local\Temp\nsl679B.tmp\325547562

C:\Users\win7\AppData\Local\Temp\nsz87FF.tmp\\829556471

C:\Users\win7\AppData\Local\Temp\nsp8995.tmp\\448774710

C:\WINDOWS\FONTS\CONSTANZ.TTF

C:\~adstest.tmp

C:\Users\win7\AppData\Local\Temp\nsx6BD0.tmp

C:\Users\win7\AppData\Local\Temp\261b55742615f111f03f941ce52dc4e4\pricepeep.exe

C:\Users\win7\AppData\Local\Temp\nsi84C2.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Tempfolder\IlupayXio\libplds4.dll

C:\Users\win7\AppData\Local\Temp\nsc7854.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsp6597.tmp\1129775803

C:\Users\win7\AppData\Local\Temp\nsiB70D.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsp7B5C.tmp

C:\Users\win7\AppData\Local\Temp\nsw6875.tmp

C:\WINDOWS\FONTS\PALA.TTF

C:\Users\win7\AppData\Local\Tempfolder\MiilnaFyhfoo\ssl3.dll

C:\Users\win7\AppData\Local\Tempfolder\ortmp\orion.exe

C:\Users\win7\AppData\Local\Temp\nsmE64B.tmp

C:\Users\win7\AppData\Local\Temp\nsh7F20.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Tempfolder\PyrfowTunn\softokn3.dll

C:\Users\win7\AppData\Local\Temp\nse7B6B.tmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\top-line[1].gif

C:\Users\win7\AppData\Local\Temp\nsu7D93.tmp

C:\Users\win7\AppData\Local\Temp\ActSys\SSL\nss\nss3.dll

C:\WINDOWS\FONTS\LVNMBD.TTF

C:\WINDOWS\FONTS\UPCFL.TTF

C:\Users\win7\AppData\Local\Temp\nshD9C8.tmp

C:\Users\win7\AppData\Local\Temp\DIQ\flashplayer_151\OfferBrokerage_14003.exe

C:\WINDOWS\FONTS\KAIU.TTF

\??\C:\Windows\SysWOW64\ieframe.dll

C:\Users\win7\AppData\Local\Temp\nsx210.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\\~DFD72C36E23D77405A.TMP

C:\Users\win7\AppData\Local\Temp\38f2bb0256db33a8f41436ef966638fe\OpenCL.dll

C:\Users\win7\AppData\Local\Temp\nsb7595.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\7zSE540.tmp\fkjeojoangpmoeckmdgmibinanicmghc\sqlite.js

C:\Users\win7\AppData\Local\Tempfolder\AuqeaCua\libplc4.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\cancel1[1].gif

C:\Users\win7\AppData\Local\Temp\nssDCC5.tmp\nsDialogs.dll

HAL0.log

C:\TeamViewer_Desktop.exe

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\ui[1].css

C:\Users\win7\AppData\Local\Temp\nss799B.tmp

C:\Users\win7\AppData\Local\Temp\nsg742E.tmp\NSISdl.dll

C:\SecureMyFilesRestore Libs\desktop.ini

C:\Users\win7\AppData\Local\Temp\nskEFA2.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nssDCC6.tmp\nsExec.dll

C:\Users\win7\AppData\Local\Temp\nslE38C.tmp\DL.dll

C:\Users\win7\AppData\Local\Temp\nsl8BE7.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsu7093.tmp

C:\Users\win7\AppData\Local\Temp\nsa64EC.tmp\\511188460

C:\sample:typelib

C:\Users\win7\AppData\Local\Temp\uz5qYgMMv9zSRQfaKwHcoKYkDUG\uz5qYgMMv9zSRQfaKwHcoKYkDUG_has.exe

GBchppI.exe

C:\Users\win7\AppData\Local\Temp\nsd85AD.tmp\252680445

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A34B45DD28A5DAEFDA3E0BA2FCE7DE24_87910BE1C29EBFE2C02400CF6890DE18

C:\Users\win7\AppData\Local\Temp\nse7035.tmp\GetPrivateInstaller_woautorun.exe.crypted

C:\Users\win7\AppData\Local\Temp\nsuE0BD.tmp

C:\ProgramData\Seearrchh-NewuTab\uninstall.exe

C:\Users\win7\AppData\Local\Temp\nsq741D.tmp

\\?\C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx

C:\Users\win7\AppData\Local\Temp\nsz7016.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\2UH5ZKWS.txt

C:\Users\win7\AppData\Local\Tempfolder\WiseshVepdomb\libplc4.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\ui[1].js

C:\Users\win7\AppData\Local\Temp\is-VDPSG.tmp\Dlg_Btn.png

C:\Users\win7\AppData\Local\Temp\is-NFAB7.tmp\botva2.dll

C:\Users\win7\AppData\Local\Temp\nsl7F82.tmp\\938550696

C:\Users\win7\AppData\Local\Temp\nsr908F.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nswE5EE.tmp\SimpleSC.dll

C:\Themes

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

C:\Users\Public\Documents\desktop.ini

C:\Users\win7\AppData\Local\Temp\7zS6BB0.tmp\dmhfdlngglhgmdlpmmdodefgadjnkcii\515f05cca2b922.25465113.js

C:\Users\win7\AppData\Local\Temp\nscDBCC.tmp\\892174522

C:\Users\win7\AppData\Local\Temp\nsfE1E7.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsj87A0.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nseEC28.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Tempfolder\ortmp\nssutil3.dll

C:\Users\win7\AppData\Local\Temp\nst6E23.tmp\518202771

C:\WINDOWS\FONTS\CAMBRIAB.TTF

C:\Users\win7\AppData\Local\Temp\nsu7C5B.tmp

C:\Users\win7\AppData\Local\Temp\nsw8DEF.tmp

C:\ProgramData\Microsoft\Windows\Start Menu

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B90B117906B8A74C79D1BC450C2B94B1_5B5AFCE6A6B4754F769A8C764E2C0D69

C:\WINDOWS\FONTS\GEORGIA.TTF

C:\Users\win7\AppData\Local\Temp\nseEC28.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsjECE3.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsa8B0B.tmp

C:\Users\win7\AppData\Local\Temp\nsgE541.tmp

\\?\C:\Users\win7\AppData\Roaming\Neuxpower Solutions Ltd\NXPowerLite\install\50A2E39\2070

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui

\\.\PIPE\wkssvc

C:\Users\win7\AppData\Local\Temp\is-H5441.tmp\WSysInfo.dll

C:\reaper-license.rk

C:\WINDOWS\FONTS\ANGSAUI.TTF

C:\Users\Public\Videos\desktop.ini

C:\Users\win7\AppData\Local\Temp\nsp8773.tmp\\542105910

C:\Users\win7\AppData\Local\Temp\nsq6808.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\is-Q7C3R.tmp\_isetup\_setup64.tmp

C:\WINDOWS\FONTS\GAUTAMIB.TTF

C:\Users\win7\AppData\Local\Temp\nsd7811.tmp\nsArray.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\223DE96EE265046957A660ED7C9DD9E7_5F4A6047A3FBCAF69FE9965B6C68B6B7

C:\Users\win7\AppData\Local\Temp\nsx75CF.tmp\nsArray.dll

C:\WINDOWS\FONTS\TUNGA.TTF

C:\Users\win7\AppData\Local\Temp\is-1BV3K.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\is-Q7C3R.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\nsr8C55.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nswA4A9.tmp\KillProcDLL.dll

C:\Users\win7\AppData\Local\Temp\nsl8C35.tmp\571661357

C:\Users\win7\AppData\Local\Google\Chrome\User Data

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\84AFE219AEC53B0C9251F5E19EF019BD_2C9D5E6D83DF507CBE6C15521D5D3562

C:\Users\win7\AppData\Local\Temp\7zSEEA6.tmp\515f05c882fb3.dll

C:\Users\win7\AppData\Local\Temp\nsf4728.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Temp\nsz714E.tmp

C:\Users\win7\AppData\Local\Temp\\~DF0708B0D3F7E9E598.TMP

C:\Users\win7\AppData\Local\Temp\nsp880F.tmp\\663358154

c:\Program Files\Common Files\Microsoft Shared\ink\el-GR\tipresx.dll.mui

C:\Users\win7\AppData\Local\Temp\e476d6026eb8a2312ee94ba7aa477005\downloaderSTUB.exe

C:\Users\win7\AppData\Local\Temp\nsy6CBC.tmp\872731941

C:\Users\win7\AppData\Local\Temp\e1c1e048af3eb4f5776b5551aa16d363\pricepeep.exe

\\.\PhysicalDrive6

C:\

temp.red

C:\Users\win7\AppData\Roaming\REAPER\Data\toolbar_blank.png

C:\Users\win7\AppData\Local\Temp\nshD97B.tmp\\995754788

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B69D763EB21649DA26F20618312DEE70

C:\WINDOWS\FONTS\EBRIMABD.TTF

C:\Users\win7\AppData\Local\Temp\nsuE1A8.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsr81C4.tmp

h1_12.red

C:\WINDOWS\FONTS\SEGOEUII.TTF

C:\Users\win7\AppData\Local\Temp\nsl7EE7.tmp\SimpleSC.dll

C:\Users\win7\AppData\LocalLow\Oracle\Java\JAVA_INSTALL_FLAG

C:\Users\win7\AppData\Local\Temp\ActSys\SSL\nss\nspr4.dll

C:\Users\win7\AppData\Local\Temp\nsxDB5E.tmp

C:\Users\win7\AppData\Local\Tempfolder\IlupayXio\nss3.dll

v1_374.red

C:\Users\win7\AppData\Local\Tempfolder\WiseshVepdomb\softokn3.dll

C:\WINDOWS\FONTS\UPCLBI.TTF

C:\Users\win7\AppData\Local\Tempfolder\JupxonQyb\libplc4.dll

C:\Users\win7\AppData\Local\Temp\is-VDPSG.tmp\Ksicfg.dll

h1_6.red

C:\Users\win7\AppData\Local\Tempfolder\IlupayXio\softokn3.dll

C:\Users\win7\AppData\Local\Temp\nsf4728.tmp\DL.dll

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\ShapeCollector.exe.mui

C:\Users\win7\AppData\Local\Tempfolder\PokbhvAyv\nssutil3.dll

C:\Users\win7\AppData\Local\Temp\nsu6430.tmp\\452928816

\\.\Scsi9:

C:\WINDOWS\FONTS\GEORGIAZ.TTF

C:\Users\win7\AppData\Local\Temp\nsn8F90.tmp\335864728

C:\Windows\\Outlaws\\Outlaws.dll

C:\Users\win7\AppData\Local\Temp\is-H5441.tmp\Dlg_Btn_Close.png

C:\WINDOWS\FONTS\UPCLL.TTF

C:\Users\win7\AppData\Local\Tempfolder\NoicdIdhrib\nssdbm3.dll

C:\Users\win7\AppData\Local\Temp\TsuDA2E776F.dll

C:\Users\win7\AppData\Local\Tempfolder\FhupagTueibub\libplds4.dll

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml

C:\Users\win7\AppData\Local\Temp\nslE38C.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nsy7978.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nswF41C.tmp\\901538287

c:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml

C:\Users\win7\AppData\Local\Temp\is-8B93V.tmp\sample.tmp

C:\Users\win7\Desktop\desktop.ini

C:\Users\win7\AppData\Local\Temp\nsg742E.tmp\128976596

C:\Users\win7\AppData\Local\Temp\nseDF28.tmp\System.dll

\\?\C:\Users\win7\AppData\Roaming\Neuxpower Solutions Ltd\NXPowerLite\install\50A2E39\3082

C:\Users\win7\AppData\Local\Temp\nsd78AC.tmp

C:\Users\win7\AppData\Local\Temp\528dd5088dd2bdf0b990dc6dd3376971\downloaderOFFER1.exe

\\?\C:\Users\win7\AppData\Roaming\Neuxpower Solutions Ltd\NXPowerLite\install\50A2E39\1041

C:\WINDOWS\FONTS\KHMERUIB.TTF

C:\Users\win7\AppData\Local\Temp\nsp7026.tmp

C:\Users\win7\AppData\Local\Temp\nsw8DF9.tmp\NSISdl.dll

c:\users\win7\appdata\local\tempfolder\babdamvhd\xefikavafbu.dat

C:\Users\win7\AppData\Local\Temp\is-H5441.tmp\botva2.dll

C:\Users\win7\AppData\Local\Temp\nsjECE2.tmp

x1_2.red

C:\Users\win7\AppData\Local\Temp\is-NIEM2.tmp\Dlg_Btn_OK.png

C:\Users\win7\AppData\Local\Tempfolder\JogoYtem\softokn3.dll

C:\Users\win7\AppData\Local\Temp\nsj87A1.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsaEE7A.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\528dd5088dd2bdf0b990dc6dd3376971\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Local\Temp\nsc4C88.tmp\\822440010

x1_15.red

C:\Users\win7\AppData\Local\Temp\nsl9934.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsyE997.tmp

C:\Users\win7\AppData\Local\Temp\nsy7929.tmp

C:\Users\win7\AppData\Local\Temp\nsaEEC7.tmp

C:\Users\win7\AppData\Local\Temp\nst6E22.tmp

C:\WINDOWS\FONTS\VRINDAB.TTF

C:\Users\win7

C:\Users\win7\AppData\Local\Temp\{DF2BFBED-3E75-420E-A0E5-765704C8D91B}\Custom.dll

C:\Windows\system32\rsaenh.dll

C:\Users\win7\AppData\Local\Temp\nsp7B5D.tmp\1181872387

C:\WINDOWS\FONTS\UTSAAHB.TTF

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\67F6625BC22310D5C99DDE12020DBD90

C:\Install.log

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GetPrivate\Uninstall GetPrivate.lnk

C:\WINDOWS\FONTS\UPCDL.TTF

x1_9.red

c:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui

c:\users\win7\appdata\local\tempfolder\sefxohfeuoor\fakufaovi.dat

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\49514950C94E8026A2B06312597DFF49_62B7DE2F96D8C234277F3800FC7921F7

C:\Users\win7\AppData\Local\Temp\7zS902B.tmp\settings.ini

C:\Users\Public\Music\desktop.ini

C:\Users\win7\AppData\Roaming\Opera\Opera x64\opcacrt6.dat

C:\Users\win7\AppData\Local\Temp\nsnEA43.tmp\\835923831

C:\Users\win7\AppData\Local\Temp\is-NIEM2.tmp\webctrl.dll

C:\Users\win7\AppData\Local\Temp\nsq6682.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nss8399.tmp

\\.\PhysicalDrive9

C:\WINDOWS\FONTS\KHMERUI.TTF

c:\users\win7\appdata\local\tempfolder\ilupayxio\acirqosokcaf.dat

C:\Users\win7\AppData\Local\Temp\is-ESACR.tmp\WSysInfo.dll

C:\Users\win7\AppData\Local\Temp\nsd78F0.tmp

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6EE18E7C9044AB68AF295DC6CAF43C7E_91BA75AD693AB7B7E875623F88BD0B72

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\ui[1].js

C:\Users\win7\AppData\Local\Temp\nsz7CC9.tmp\\452690466

C:\Users\win7\AppData\Local\Temp\nso6EA0.tmp\962760285

\\?\C:\Users\win7\AppData\Roaming\Neuxpower Solutions Ltd\NXPowerLite\install\50A2E39\1046

C:\Users\win7\AppData\Local\Temp\nsi84C2.tmp\nsResize.dll

C:\Users\win7\AppData\Local\Temp\nsi84C2.tmp\System.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\AW44UBRM.txt

C:\WINDOWS\FONTS\UTSAAH.TTF

C:\Users\win7\AppData\Local\Temp\nsuD4A8.tmp\System.dll

C:\WINDOWS\FONTS\CONSTAN.TTF

C:\Users\win7\AppData\Local\Tempfolder\AuqeaCua\libplds4.dll

c:\users\win7\appdata\local\tempfolder\fhupagtueibub\anoghoi.dat

C:\Users\win7\AppData\Local\Temp\nsg72FF.tmp

C:\Users\win7\AppData\Local\Temp\\~DF64A321268446095B.TMP

C:\WINDOWS\FONTS\VRINDA.TTF

\\.\Nsi

C:\Users\win7\AppData\Roaming\REAPER\reaper-menu.ini

C:\Users\win7\AppData\Local\Temp\nsiE987.tmp\UserInfo.dll

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BBroowsee2save\Uninstall.lnk

C:\Users\win7\AppData\Local\Temp\nsw765F.tmp\NSISdl.dll

C:\WINDOWS\FONTS\SEGOEUIB.TTF

C:\Users\win7\AppData\Local\Tempfolder\MiilnaFyhfoo\libnspr4.dll

C:\Users\win7\AppData\Local\Temp\7zSEEA6.tmp

C:\Users\win7\AppData\Local\Temp\is-NFAB7.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\7zS7E49.tmp\dddgglodbdmjddjdklmhpjpcjhekkije\sqlite.js

C:\Users\win7\AppData\Local\Temp\nsq8BB8.tmp\506830053

c:\users\win7\appdata\local\tempfolder\jaroilubm\namjfihvex.dat

C:\Users\win7\AppData\Local\Temp\nsb745D.tmp\NSISdl.dll

c:\users\win7\appdata\local\tempfolder\noicdidhrib\pafoarhweu.dat

C:\Users\win7\AppData\Local\Temp\nse5E69.tmp\IS.dll

C:\Users\win7\AppData\Local\Temp\nsvCCCD.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsn832C.tmp

c:\users\win7\appdata\local\tempfolder\qubmkhrheoa\imuddilhfot.dat

C:\Users\win7\AppData\Local\Temp\nsy77A4.tmp\\995448338

C:\Users\win7\AppData\Local\Temp\nsj6ECF.tmp\System.dll

C:\Users\win7\AppData\Local\GDIPFONTCACHEV1.DAT

C:\Users\win7\AppData\Local\Temp\nse5E69.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nsi935D.tmp\KillProcDLL.dll

C:\Users\win7\AppData\Local\Temp\nsb8BA9.tmp\SimpleSC.dll

C:\Users\Public\Pictures\desktop.ini

C:\Users\win7\AppData\Local\Temp\nsj87A0.tmp\nsJSON.dll

C:\WINDOWS\FONTS\TIMESBI.TTF

C:\Users\win7\AppData\Local\Temp\is-NFAB7.tmp\Dlg_Btn_Cancel.png

C:\Users\win7\AppData\Local\Temp\is-4MFVH.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\nswDA26.tmp\249513790

C:\Users\win7\AppData\Local\Temp\nsm9984.tmp\nsArray.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\YM5PYLCI.txt

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\ui[1].js

C:\Users\win7\AppData\Local\Temp\nsm8D6D.tmp

\\.\Scsi5:

C:\Users\win7\AppData\Local\Temp\nsm74F3.tmp

C:\Users\win7\AppData\Local\Temp\nsd6D29.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nssE840.tmp\\879644102

C:\Users\win7\AppData\Local\Temp\nslFCA2.tmp\KillProcDLL.dll

C:\Users\win7\AppData\Local\Temp\nsy77A4.tmp\995448338

C:\Users\win7\AppData\Local\Temp\nss7816.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsc771C.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsf8A8E.tmp

\\.\Scsi4:

C:\Users\win7\AppData\Local\Tempfolder\BabdamVhd\ssl3.dll

C:\Users\win7\AppData\Local\Tempfolder\IlupayXio\nssutil3.dll

C:\WINDOWS\FONTS\L_10646.TTF

C:\Users\win7\AppData\Local\Temp\nse5E69.tmp\nsResize.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini

C:\ProgramData\Barowasse2saave\515f05cca2d7e.tlb

C:\Windows\system32\cui\wak\esaan.dat

C:\Users\win7\AppData\Local\Temp\nsoEA91.tmp\DL.dll

C:\Users\win7\AppData\Local\Temp\nshD97B.tmp\995754788

C:\Users\win7\AppData\Local\Temp\nsy78DC.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsu8744.tmp\NSISdl.dll

\\.\PhysicalDrive13

C:\Users\win7\AppData\Local\Tempfolder\IofhopFicu\freebl3.dll

C:\Users\win7\AppData\Local\Temp\OA6j0qm2Ap5iqgiXDLlySmIaqS\OA6j0qm2Ap5iqgiXDLlySmIaqSOA6j0qm2Ap5iqgiXDLlySmIaqSOA6j0qm2Ap5iqgiXDLlySmIaqS_nj.exe

C:\Users\win7\AppData\Local\Temp\nsc7854.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nstEA14.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\5d3e687ec77ac9bbac7baeaed99d0d59\downloaderDDLR.exe

C:\Windows\system32\noc\hecf\iceb.dat

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\HSPJCFLX.txt

C:\Users\win7\AppData\Local\Temp\nsp7E11.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsu8917.tmp

C:\Users\win7\AppData\Local\Tempfolder\WiseshVepdomb\nssutil3.dll

C:\Users\win7\AppData\Local\Temp\nsjEC46.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nst6E23.tmp\NSISdl.dll

C:\WINDOWS\FONTS\CANDARAZ.TTF

C:\WINDOWS\FONTS\NTAILU.TTF

C:\Users\win7\AppData\Local\Tempfolder\NhnimGuryoph\softokn3.dll

C:\Users\win7\AppData\Local\Tempfolder\JupxonQyb\nssckbi.dll

\\?\C:\Users\win7\AppData\Roaming\Neuxpower Solutions Ltd\NXPowerLite\install\50A2E39\loadnxploeaddin.exe

C:\Users\win7\AppData\Local\Tempfolder\NoicdIdhrib\PafoaRhweu.dat

C:\Users\win7\AppData\Local\Temp\nsb74F9.tmp\674458472

C:\Windows\System32\ntoskrnl.exe

C:\Users\win7\AppData\Local\Temp\7zSEEA6.tmp\elejenikcaceegblacieffpkheggoeai\515f05c882dad9.74642360.js

C:\WINDOWS\FONTS\ARABTYPE.TTF

C:\Users\win7\AppData\Local\Tempfolder\JogoYtem\freebl3.dll

C:\Users\win7\AppData\Local\Temp\nsw730F.tmp

C:\Users\win7\AppData\Roaming\REAPER\reaper-reginfo2.dat

C:\Users\win7\AppData\Local\Temp\nsk7DF2.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\6efb25bc8da8c8c2c9e8048717b44cc2\stub.exe

C:\Users\win7\AppData\Local\Temp\nsg6902.tmp\\167419108

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Barowasse2saave\Uninstall.lnk

C:\Users\win7\AppData\Local\Temp\sfx1\_bbg.exe

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\utils[1].js

C:\Users\win7\AppData\Local\Temp\nsl8BE7.tmp\\668499713

C:\Users\win7\AppData\Local\Tempfolder\PyrfowTunn\nssdbm3.dll

C:\Users\win7\AppData\Local\Temp\nsp8773.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsdDCB6.tmp

C:\Users\win7\AppData\Local\Temp\nsjECE3.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsdEA53.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsl7F82.tmp\938550696

C:\Users\win7\AppData\Local\Temp\nssDCC5.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nse7083.tmp\NET.dll

C:\WINDOWS\FONTS\KOKILA.TTF

C:\WINDOWS\FONTS\COMIC.TTF

C:\WINDOWS\FONTS\CORDIAZ.TTF

\\?\C:\Windows\system32\mms.cfg

C:\Users\win7\AppData\Local\Tempfolder\JupxonQyb\smime3.dll

C:\Users\win7\AppData\Local\Temp\nsb6894.tmp

C:\Users\win7\AppData\Local\Temp\nsf7D8F.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Tempfolder\NoicdIdhrib\sqlite3.dll

C:\Users\win7\AppData\Local\Temp\dif2334.tmp

C:\Users\win7\AppData\Local\Temp\is-ESACR.tmp\CallbackCtrl.dll

C:\Users\win7\AppData\Local\Tempfolder\QubmKhrheoa\nssutil3.dll

C:\Windows\system32\data.cmb

C:\Users\win7\AppData\Local\Temp\sample

C:\Users\win7\AppData\Local\Temp\_ir_sf_temp_0\IRIMG2.JPG

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\UT93ZOBG.txt

C:\Users\win7\AppData\Local\Temp\nsj6F1C.tmp\NSISdl.dll

C:\WINDOWS\FONTS\ROD.TTF

\\.\PhysicalDrive1

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs

C:\Users\win7\AppData\Local\Temp\nsmDA36.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsgE5DE.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsn759B.tmp\932796237

C:\Users\win7\AppData\Local\Temp\nsbFF23.tmp\508873056

C:\Users\win7\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_blank.png

C:\Users\win7\AppData\Local\Tempfolder\PyrfowTunn\freebl3.dll

C:\Users\win7\AppData\Local\Temp\nscE6F7.tmp

C:\WINDOWS\FONTS\AHRONBD.TTF

C:\Users\win7\AppData\Roaming\REAPER\reaper-install-rev.txt

C:\Users\win7\AppData\Local\Temp\nsbCB22.tmp

C:\Users\win7\AppData\Local\Temp\56DAA429.dat

Notes\How to add support.txt

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui

C:\Users\win7\AppData\Local\Temp\nsuD544.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Tempfolder\IofhopFicu\nssutil3.dll

C:\Users\win7\AppData\Local\Temp\nsr8C55.tmp\968072094

\\?\C:\Users\win7\AppData\Roaming\Neuxpower Solutions Ltd\NXPowerLite\install\50A2E39\NXPLiteAddIn.dll

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad.xml

C:\Users\win7\AppData\Local\Temp\be65e9678dd5d48d48970c7dbd120df9\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Local\Temp\nss847A.tmp\999636494

\\?\C:\Users\win7\AppData\Roaming\Neuxpower Solutions Ltd\NXPowerLite\install\50A2E39\oecom.dll

C:\Users\win7\AppData\Local\Temp\nsg8091.tmp\GetPrivateInstaller_woautorun.exe.crypted

C:\Users\win7\AppData\Local\Temp\nslCB61.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsu7DE1.tmp

C:\Users\win7\AppData\Local\Temp\nszE12B.tmp\822916711

C:\Users\win7\AppData\Local\Temp\7zS7E49.tmp\settings.ini

C:\WINDOWS\FONTS\CORBELZ.TTF

C:\Users\win7\AppData\Local\Temp\_ir_sf_temp_0\IRIMG1.JPG

C:\Users\win7\AppData\Local\Temp\nsc82A0.tmp\875489995

C:\Users\win7\AppData\Local\Temp\is-H5441.tmp\CallbackCtrl.dll

C:\WINDOWS\FONTS\SEGOEUI.TTF

C:\Users\win7\AppData\Local\Temp\nsvA367.tmp\744363234

c:\cgvi5r6i\vgdgfd.72g

C:\Users\win7\AppData\Local\Temp\nsd6D29.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsl7363.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsn83C9.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsd838B.tmp\\1072469561

C:\Users\win7\AppData\Local\Temp\nsjEC46.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Tempfolder\QubmKhrheoa\ssl3.dll

C:\WINDOWS\FONTS\BROWAUI.TTF

C:\VT220.KYS

C:\Users\win7\AppData\Local\Temp\is-ESACR.tmp\beepdl.dll

C:\Users\win7\AppData\Local\Temp\nsw6912.tmp\1067191803

C:\WINDOWS\FONTS\CORBEL.TTF

C:\Users\win7\AppData\Local\Temp\nss769A.tmp\nsArray.dll

C:\Users\win7\.ctags

install13945.exe

C:\Users\win7\AppData\Local\Temp\nsnEA43.tmp\835923831

C:\Users\win7\AppData\Local\Temp\nsu7A44.tmp\1079449823

C:\Intel\Logs\IntelGFX.log

C:\Users\win7\AppData\Local\Temp\nsyDCE6.tmp\nsWeb.dll

CONIN$

\\.\PhysicalDrive4

C:\Users\win7\AppData\Local\Tempfolder\JogoYtem\NowyeuTumroe.exe

C:\dahotfix.ini

C:\Users\win7\AppData\Local\Temp\nstD0B1.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsoEC18.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsa64EC.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Tempfolder\JupxonQyb\softokn3.dll

C:\Users\win7\AppData\Local\Temp\nsd6D29.tmp\707146525

C:\Users\win7\AppData\Local\Temp\nsz9378.tmp\UserInfo.dll

C:\Windows\system32\raee\zok\mepo.dat

C:\Users\win7\AppData\Local\Temp\{DF2BFBED-3E75-420E-A0E5-765704C8D91B}\Readme.txt

c:\users\win7\appdata\local\tempfolder\wiseshvepdomb\liyaswfiknagp.dat

C:\Users\win7\AppData\Local\Temp\7zSEEA6.tmp\515f05c882fb3.tlb

C:\Users\win7\AppData\Local\Temp\nsj373A.tmp

C:\Users\win7\AppData\Local\Temp\nsp6597.tmp\NSISdl.dll

C:\WINDOWS\FONTS\UPCIBI.TTF

C:\Users\win7\AppData\Local\Temp\7zS7E49.tmp\dddgglodbdmjddjdklmhpjpcjhekkije\lsdb.js

C:\Users\win7\AppData\Local\Temp\nse7AD0.tmp\NSISdl.dll

x1_14.red

Notes\How to recover Windows.txt

C:\Users\win7\AppData\Local\Temp\nsj6181.tmp\737382973

C:\Users\win7\AppData\Local\Temp\7zSE540.tmp\settings.ini

C:\Users\win7\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\s9[1].gif

C:\Users\win7\AppData\Local\Temp\nsfD6BB.tmp\342504489

C:\Users\win7\AppData\Local\Temp\nsi7830.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Tempfolder\NoicdIdhrib\softokn3.dll

C:\Users\win7\AppData\Local\Temp\nse864A.tmp\nsArray.dll

\\.\PhysicalDrive0

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base.xml

C:\Users\win7\AppData\Local\Temp\nsl7315.tmp\System.dll

c:\Program Files\Common Files\Microsoft Shared\ink\es-ES\tipresx.dll.mui

C:\WINDOWS\FONTS\LEELAWDB.TTF

C:\Users\win7\AppData\Local\Temp\\~DFE52236B91A8DD3A5.TMP

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BBroowsee2save\BBroowsee2save.lnk

C:\Users\win7\AppData\Local\Temp\7zSEEA6.tmp\settings.ini

C:\Users\win7\AppData\Local\Temp\nsl679B.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Tempfolder\WiseshVepdomb\nssckbi.dll

C:\Users\win7\AppData\Local\Temp\nsz87FF.tmp\NSISdl.dll

C:\WINDOWS\FONTS\GAUTAMI.TTF

C:\Users\win7\AppData\Local\Temp\nsc833C.tmp\System.dll

C:\WINDOWS\FONTS\UPCIB.TTF

C:\Users\win7\AppData\Local\Temp\nskD7BA.tmp\449557861

C:\Users\win7\AppData\Local\Temp\nsa64EC.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\ActSys\SSL\nss\smime3.dll

C:\Users\win7\AppData\Local\Temp\03738601.a

C:\Users\win7\AppData\Local\Temp\is-U89O1.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\ActSys\SSL\nss\plds4.dll

C:\fliplist-C64.vfl

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\21215B04FEB2AF188D6B621698846539

C:\Users\win7\AppData\Local\Temp\nsl679B.tmp\NSISdl.dll

c:\users\win7\appdata\local\tempfolder\baeuriuoj\manqumeghjis.dat

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\84AFE219AEC53B0C9251F5E19EF019BD_2C9D5E6D83DF507CBE6C15521D5D3562

C:\Users\win7\AppData\Local\Temp\nsz7CC9.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nso85EB.tmp

h1_13.red

C:\Users\win7\AppData\Local\Temp\nsb8F94.tmp

C:\Users\win7\AppData\Local\Temp\nsp87C1.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsn75DE.tmp

v1_29.red

C:\Users\win7\AppData\Local\Temp\nskEF54.tmp\nsArray.dll

C:\WINDOWS\FONTS\CANDARA.TTF

C:\Users\win7\AppData\Local\Temp\nsy7978.tmp\196089254

C:\WINDOWS\FONTS\VANIB.TTF

C:\Users\win7\AppData\Local\Temp\nsp8995.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsc193.tmp

C:\Users\win7\AppData\Local\Tempfolder\BabdamVhd\nssdbm3.dll

C:\WINDOWS\FONTS\EUPHEMIA.TTF

[RANDOM_STRING].7z

C:\Users\win7\AppData\Local\Temp\nsfE1E7.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsj44D6.tmp\GetPrivateInstaller_woautorun.exe.crypted

C:\Users\win7\AppData\Local\Temp\iam.log

\\.\Scsi0:

C:\Users\win7\AppData\Local\Temp\nsy6CBB.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsq6682.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsd83D8.tmp\IS.dll

C:\Users\win7\AppData\Local\Temp\nsuE1A8.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsc4C88.tmp\nsArray.dll

c:\users\win7\appdata\local\tempfolder\miilnafyhfoo\vhdosumf.dat

C:\WINDOWS\FONTS\UPCDBI.TTF

C:\Users\win7\AppData\Local\Temp\nsfE234.tmp

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM0.tmp

C:\WINDOWS\FONTS\NYALA.TTF

C:\Users\win7\AppData\Local\Temp\nsi6D95.tmp

C:\WINDOWS\FONTS\PHAGSPAB.TTF

C:\Users\win7\AppData\Local\Temp\nsm8286.tmp\713377685

C:\WINDOWS\FONTS\UPCFB.TTF

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui

C:\Users\win7\AppData\Local\Temp\nsj6355.tmp\1170227268

C:\Users\win7\AppData\Local\Temp\is-H5441.tmp\ithttp.dll

C:\Users\win7\AppData\Local\Temp\ActSys\SSL\actssl.cer

C:\Users\win7\AppData\Local\Tempfolder\IlupayXio\AcirqoSokcaf.dat

C:\WINDOWS\FONTS\NTAILUB.TTF

C:\Users\win7\AppData\Local\Temp\nskD7BA.tmp\\449557861

C:\Users\win7\AppData\Local\Temp\nsaD516.tmp\NSISdl.dll

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\tabskb.dll.mui

C:\Users\win7\AppData\Local\Temp\nsnEA43.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsn6B93.tmp\736838172

C:\Windows\system32\wdmaud.drv

C:\Users\win7\AppData\Local\Temp\nsa86D1.tmp\nsResize.dll

C:\Users\win7\AppData\Local\Temp\is-IIFFB.tmp\_isetup\_RegDLL.tmp

C:\WINDOWS\FONTS\VIJAYA.TTF

C:\WINDOWS\FONTS\IMPACT.TTF

C:\Users\win7\AppData\Local\Temp\is-ESACR.tmp\webctrl.dll

C:\Users\win7\AppData\Local\Temp\nsz87FF.tmp\829556471

C:\Users\win7\AppData\Local\Temp\tmpsetup.exe

C:\WINDOWS\FONTS\KOKILABI.TTF

C:\Users\win7\AppData\Local\Temp\nsdEB3D.tmp\295004663

C:\WINDOWS\FONTS\SIMKAI.TTF

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\SP0HUETW.txt

C:\Users\win7\AppData\Local\Temp\nsdEB3D.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsiE93A.tmp\\515614967

C:\Users\win7\AppData\Local\Temp\nsn7801.tmp\\713275534

C:\Users\win7\AppData\Local\Temp\7zS902B.tmp\515f52b3b1e65.tlb

C:\Users\win7\AppData\Local\Tempfolder\QubmKhrheoa\nssckbi.dll

C:\Users\win7\AppData\Local\Temp\nsy6CBC.tmp\\872731941

C:\Users\win7\AppData\Local\Temp\is-NIEM2.tmp\WSysInfo.dll

C:\Users\win7\AppData\Local\Temp\nsyC381.tmp

C:\Users\win7\AppData\Local\Temp\is-NFAB7.tmp\Dlg_bkg.png

\\?\C:\Users\win7\AppData\Roaming\Neuxpower Solutions Ltd\NXPowerLite\install\50A2E39\1040

C:\Users\win7\AppData\Local\Temp\nso6ABE.tmp\SimpleSC.dll

C:\WINDOWS\FONTS\MRIAM.TTF

C:\Users\win7\AppData\Local\Temp\\~DF751B9B4051792422.TMP

C:\Users\win7\AppData\Local\Temp\nsjEBAA.tmp

C:\Users\win7\AppData\Local\Temp\nskFC54.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\is-ESACR.tmp\WListViewEx.dll

C:\Users\win7\AppData\Local\Temp\7zS902B.tmp\515f52b3b1e2c.exe

C:\Users\win7\AppData\Local\Temp\nsz7CC9.tmp\452690466

C:\Windows\system32\ofo\ebup\lynm.dat

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\mobi2[1].js

C:\Users\win7\AppData\Local\Microsoft

C:\Users\win7\AppData\Local\Temp\nsl8C35.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsx75CF.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\7c460ffc43d81bc155b60ff2a41f6fe9\volcano.exe

C:\Users\win7\AppData\Local\Temp\nsd903C.tmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\291014_nj[1].exe

C:\Users\win7\AppData\Local\Temp\nsg8B2B.tmp

C:\WINDOWS\FONTS\COURE.FON

c:\users\win7\appdata\local\tempfolder\jummpeod\etubpsegcaqj.dat

C:\Users\win7\AppData\Local\Temp\7zSFBC6.tmp\Commit.exe

C:\WINDOWS\FONTS\SEGOESCB.TTF

C:\Users\win7\AppData\Local\Tempfolder\PokbhvAyv\sqlite3.dll

\\?\C:\Users\win7\AppData\Roaming\Neuxpower Solutions Ltd\NXPowerLite\install\50A2E39\oehook.dll

C:\Users\win7\AppData\Local\Temp\is-H5441.tmp\Dlg_bkg.png

C:\Users\win7\AppData\Local\Tempfolder\BabdamVhd\nss3.dll

C:\Users\win7\AppData\Local\Temp\nssA82A.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nslE779.tmp\SimpleSC.dll

\\.\Scsi15:

\\.\NTICE

C:\Users\Public\Desktop

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml

C:\Users\win7\AppData\Local\Tempfolder\IlupayXio\ssl3.dll

C:\Users\win7\AppData\Local\Temp\nsr75A4.tmp\NSISdl.dll

C:\WINDOWS\FONTS\RAAVIB.TTF

C:\Users\Public

C:\Users\win7\AppData\Local\Temp\nss6BFF.tmp

C:\Users\win7\AppData\Local\Temp\nswDA26.tmp\\249513790

\\.\PIPE\DAV RPC SERVICE

C:\Users\win7\AppData\Local\Temp\nsyB76B.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsfE36C.tmp

C:\Users\win7\AppData\Roaming\REAPER\reaper-kb.ini

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6EE18E7C9044AB68AF295DC6CAF43C7E_1D9AC458315F4E69D67E803A5FDBCE6E

C:\Users\win7\AppData\Local\Temp\nss769A.tmp\\255915200

C:\Users\win7\AppData\Local\Temp\nsj87A0.tmp\IS.dll

C:\Users\win7\AppData\Local\Temp\nsiDC3A.tmp\NSISdl.dll

C:\WINDOWS\FONTS\APARAJ.TTF

C:\Users\win7\AppData\Local\Temp\nse7083.tmp\DL.dll

C:\Users\win7\AppData\Local\Temp\nswDA26.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-L8N8I.tmp\WS_Log.dll

C:\WINDOWS\FONTS\ANGSAZ.TTF

C:\Users\win7\AppData\Local\Temp\nsl679B.tmp\\325547562

C:\Users\win7\AppData\Local\Temp\nsh7F20.tmp\\537883703

h1_3.red

C:\Users\win7\AppData\Local\Temp\nsaF04D.tmp

C:\Users\win7\AppData\Local\Temp\nsi765C.tmp\\436074039

C:\Users\win7\AppData\Local\Temp\nsy84A4.tmp\121826085

C:\Users\win7\AppData\Local\Temp\d77dc95484dc6c4d4458546230aa3d47\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsk7BDA.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsc4C88.tmp\NSISdl.dll

C:\WINDOWS\FONTS\CORDIAU.TTF

C:\Users\win7\AppData\Local\Temp\nstAAE8.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nso863A.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsp87C1.tmp\259899056

C:\Users\win7\AppData\Local\Temp\nsiE9D6.tmp\7za.exe

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\footer_img[1].png

C:\Users\win7\AppData\Local\Temp\nsgE5DE.tmp\\943419854

C:\Users\win7\AppData\Local\Tempfolder\MiilnaFyhfoo\nssckbi.dll

C:\Users\win7\AppData\Local\Temp\nscE8CC.tmp\1209657232

C:\Users\win7\AppData\Local\Temp\d77dc95484dc6c4d4458546230aa3d47\downloaderOFFER1.exe

\??\C:\Windows\system32\EhStorShell.dll

C:\Users\win7\AppData\Local\Temp\nse7083.tmp\IS.dll

C:\Users\win7\AppData\Local\Temp\nsmE5FE.tmp\172696866

C:\Users\win7\AppData\Local\Temp\\~DFA8E7DA3190B04A52.TMP

\\?\C:\Users\win7\AppData\Roaming\Neuxpower Solutions Ltd\NXPowerLite\install\50A2E39\Office2007.cjstyles

C:\Users\win7\AppData\Local\Temp\7zSFBC6.tmp\Defender.exe

C:\Users\win7\AppData\Local\Tempfolder\SefxohFeuoor\softokn3.dll

C:\Users\win7\AppData\Local\Temp\nsg75B4.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nslD813.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsiDC3A.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsd76D8.tmp

C:\WINDOWS\FONTS\MAJALLA.TTF

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B90B117906B8A74C79D1BC450C2B94B1_4A12C75FA376263A3D1FCF0E88754DE0

C:\Users\win7\AppData\Local\Tempfolder\ortmp\softokn3.dll

C:\Users\win7\AppData\Local\Temp\nsi84C2.tmp\DL.dll

C:\Users\win7\AppData\Local\Temp\is-VDPSG.tmp\Dlg_Btn_Cancel.png

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05EC48341C277FE5110E7DFAA91377DC_F4D89EB1FD4E80AFB0D09F169F9D4E2D

C:\Users\win7\AppData\Local\Temp\nslD68D.tmp\\906237194

C:\Users\win7\AppData\Local\Temp\nsr8C55.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmhfdlngglhgmdlpmmdodefgadjnkcii

C:\Users\win7\AppData\Local\Temp\nsg7FB2.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsmDA84.tmp\NSISdl.dll

C:\Windows\System32\dllcache\dnsapi.dll

C:\Users\win7\AppData\Roaming\ortmp\uninstaller.exe

C:\WINDOWS\FONTS\SIMSUN.TTC

C:\Users\win7\AppData\Local\Temp\7zS6BB0.tmp\dmhfdlngglhgmdlpmmdodefgadjnkcii

C:\Users\win7\AppData\Local\Temp\7zSEEA6.tmp\elejenikcaceegblacieffpkheggoeai\background.html

C:\Users\win7\AppData\Local\Temp\nsf7D8F.tmp\376384293

C:\Users\win7\AppData\Local\Temp\nsj1F5D.tmp\nsArray.dll

C:\WINDOWS\FONTS\UPCJBI.TTF

C:\Users\win7\AppData\Local\Temp\nsyDE6C.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsi6CAB.tmp\876102896

C:\Users\win7\AppData\Local\Tempfolder\WiseshVepdomb\freebl3.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A34B45DD28A5DAEFDA3E0BA2FCE7DE24_87910BE1C29EBFE2C02400CF6890DE18

C:\WINDOWS\FONTS\KARTIKAB.TTF

C:\WINDOWS\FONTS\UPCLB.TTF

C:\Users\win7\AppData\Local\Temp\nsj6181.tmp\nsArray.dll

C:\winrar.lng

C:\Users\win7\AppData\Local\Tempfolder\QubmKhrheoa\freebl3.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\4E3B89F45B2DEE97195EF8860AA1F05A

C:\Users\win7\AppData\Local\Temp\nsr83DC.tmp

C:\Users\win7\AppData\Local\Temp\nsy78DC.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsb675C.tmp

C:\Users\win7\AppData\Local\Temp\nsxE8AC.tmp

C:\Windows\SysWOW64\WScript.exe

C:\WINDOWS\FONTS\ROMAN.FON

\??\C:\Windows\System32\shdocvw.dll

C:\Users\win7\AppData\Local\Temp\\~DFD0DB4FD55C91C620.TMP

C:\Users\win7\AppData\Local\Temp\7zSE540.tmp\fkjeojoangpmoeckmdgmibinanicmghc\515f52b6466b92.49035652.js

C:\Users\win7\AppData\Local\Temp\sample.log

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B90B117906B8A74C79D1BC450C2B94B1_4A12C75FA376263A3D1FCF0E88754DE0

C:\Users\win7\AppData\Local\Temp\nst6E23.tmp\\518202771

h1_16.red

C:\Users\win7\AppData\Local\Tempfolder\FhupagTueibub\nssdbm3.dll

h1_2.red

C:\Users\win7\AppData\Local\Temp\nsj44D6.tmp\System.dll

C:\SQMAPI.DLL

C:\Users\win7\AppData\Local\Temp\nsiDC3A.tmp\\1069983907

C:\Users\win7\AppData\Local\Temp\uz5qYgMMv9zSRQfaKwHcoKYkDUG\uz5qYgMMv9zSRQfaKwHcoKYkDUGuz5qYgMMv9zSRQfaKwHcoKYkDUGuz5qYgMMv9zSRQfaKwHcoKYkDUG_br.exe

C:\ProgramData\Seearrchh-NewuTab\515f52b3b1e65.tlb

C:\Users\win7\AppData\Local\Temp\is-L8N8I.tmp\WS_SaleProcess.dll

C:\WINDOWS\FONTS\BROWAZ.TTF

C:\Users\win7\AppData\Local\Temp\nsaE34E.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nswD93B.tmp

C:\WINDOWS\FONTS\DAVIDBD.TTF

C:\Users\win7\AppData\Local\Temp\nswD9D7.tmp

C:\Windows\system32\NOTEPAD.EXE

\\.\PhysicalDrive15

C:\Users\win7\AppData\Local\Temp\nst6E70.tmp

C:\WINDOWS\FONTS\MALGUNBD.TTF

C:\Users\win7\Documents\desktop.ini

C:\WINDOWS\FONTS\RAAVI.TTF

C:\Users\win7\AppData\Local\Temp\nsn7717.tmp\784882799

C:\Users\win7\AppData\Local\Temp\is-IIFFB.tmp\_isetup\_shfoldr.dll

C:\WINDOWS\FONTS\UPCDI.TTF

C:\Users\win7\AppData\Local\Temp

\\?\C:\Users\win7\AppData\Roaming\Neuxpower Solutions Ltd\NXPowerLite\install\50A2E39\NXPLiteShell.dll

C:\Users\win7\AppData\Local\Temp\7zSE540.tmp\fkjeojoangpmoeckmdgmibinanicmghc\content.js

C:\Users\win7\AppData\Local\Temp\nsbFF23.tmp\\508873056

h1_25.red

C:\Users\win7\AppData\Local\Temp\nssDCC5.tmp\nsJSON.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\nrVzWJrYnjU.lnk\desktop.ini

C:\Users\win7\AppData\Local\Temp\nspA2AA.tmp

C:\Users\win7\Videos\desktop.ini

C:\Users\win7\AppData\Local\Temp\is-NIEM2.tmp\Dlg_Btn_Cancel.png

C:\Users\win7\AppData\Local\Temp\nsv7304.tmp

C:\Users\win7\AppData\Local\Temp\is-NFAB7.tmp\CallbackCtrl.dll

C:\Users\win7\AppData\Local\Temp\nsi250.tmp\NSISdl.dll

C:\Windows\system32\sev\reag\xytq.dat

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\J6QILJBT.txt

C:\Users\win7\AppData\Local\Temp\nse7ACF.tmp

C:\Users\win7\AppData\Local\Tempfolder\FhupagTueibub\AnogHoi.dat

C:\Users\win7\AppData\Local\Temp\7zSFBC6.tmp\Setup.exe

C:\Users\win7\AppData\Local\Temp\\~DF7130D3EDC36F2AFC.TMP

C:\Users\win7\AppData\Local\Temp\nsd7811.tmp\1009068360

C:\Users\win7\AppData\Local\Temp\nsp87C1.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nse8781.tmp

\\.\Scsi10:

C:\Users\win7\AppData\Local\Temp\nsg747B.tmp

C:\Users\win7\AppData\Local\Temp\nssDBDB.tmp

C:\WINDOWS\FONTS\KALINGAB.TTF

v1_902.red

C:\Windows\system32\jiec\fuft\bug.dat

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\browser.com.url

C:\Users\win7\AppData\Local\Temp\nsn77B3.tmp\SimpleSC.dll

C:\WINDOWS\FONTS\GISHA.TTF

C:\Users\win7\AppData\Local\Temp\nsg5C4F.tmp

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94C18AA77707A64853AFFBE6D6382F75

C:\Users\win7\AppData\Local\Tempfolder\FhupagTueibub\libnspr4.dll

C:\WINDOWS\FONTS\LAOUI.TTF

CS App Support Client.log

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\accept[1].gif

C:\Users\win7\AppData\Local\Temp\nsi6CFA.tmp\1079926523

C:\Users\win7\AppData\Local\Temp\nsg8C15.tmp

C:\WINDOWS\FONTS\UPCEB.TTF

C:\Users\win7\AppData\Local\Temp\7zS902B.tmp\jfjahgbhkoidecpcmlippenojpfkjijd\sqlite.js

C:\Users\win7\AppData\Local\Temp\nso7A68.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsm736E.tmp\nsArray.dll

\\.\PhysicalDrive3

C:\Users\win7\AppData\Local\Temp\nss7779.tmp

C:\WINDOWS\FONTS\CORDIAUB.TTF

C:\Users\win7\AppData\Local\Temp\is-H5441.tmp\Dlg_Btn_Cancel.png

\\.\Scsi8:

C:\WINDOWS\FONTS\COMICBD.TTF

C:\WINDOWS\FONTS\ANGSA.TTF

C:\Users\win7\AppData\Local\Temp\nsu7A43.tmp

C:\Users\win7\AppData\Local\Temp\nsh6AD7.tmp\\1100016056

C:\Users\win7\AppData\Local\Temp\7zSFBC6.tmp\Help.chm

C:\Users\win7\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000007.db

C:\sample.config

C:\Users\win7\AppData\Local\Temp\nsy61DE.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsfEE98.tmp

C:\Users\win7\AppData\Local\Temp\nsrE532.tmp

C:\Users\win7\AppData\Local\Temp\nse7083.tmp\System.dll

C:\WINDOWS\FONTS\LATHAB.TTF

C:\Users\win7\AppData\Local\Temp\nsj87A0.tmp\NET.dll

C:\WINDOWS\FONTS\TRADO.TTF

C:\WINDOWS\FONTS\CONSOLAB.TTF

C:\Users\win7\AppData\Local\Temp\nssDCC5.tmp\DL.dll

c:\pagefile.sys

C:\Users\win7\AppData\Local\Temp\is-H5441.tmp\Dlg_Btn.png

C:\Users\win7\AppData\Local\Temp\nshCF2F.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsy84A4.tmp\nsArray.dll

C:\WINDOWS\FONTS\CALIBRIZ.TTF

C:\WINDOWS\FONTS\TREBUCBI.TTF

C:\Users\win7\AppData\Local\Temp\nseBB29.tmp

C:\Users\win7\AppData\Local\Temp\nsu6430.tmp\nsArray.dll

C:\Users\win7\AppData\Roaming\Microsoft\desktop.ini

C:\Windows\system32\KBDUS.DLL

C:\WINDOWS\FONTS\HIMALAYA.TTF

C:\Users\win7\AppData\Local\Temp\nsb745D.tmp\1163417257

C:\Users\win7\AppData\Local\Temp\nslD68D.tmp\NSISdl.dll

\\.\PhysicalDrive11

C:\Users\win7\AppData\Local\Temp\7zSEEA6.tmp\515f05c882f7a.exe

.\ctags.cnf

\\?\C:\Users\win7\AppData\Roaming\Neuxpower Solutions Ltd\NXPowerLite\install\50A2E39\NXPLiteOutlookExpress.dll

C:\Users\win7\AppData\Local\Temp\nsm5C70.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\{DF2BFBED-3E75-420E-A0E5-765704C8D91B}\_Setup.dll

C:\Windows

C:\Users\win7\AppData\Local\Temp\7zS7E49.tmp\dddgglodbdmjddjdklmhpjpcjhekkije\background.html

c:\users\win7\appdata\local\tempfolder\pokbhvayv\easimzkyijq.dat

x1_11.red

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\49514950C94E8026A2B06312597DFF49_33A0493B3756EC93EB52782457685E27

C:\Users\win7\AppData\Local\Temp\is-Q7C3R.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\WNA3S83O.txt

C:\Users\win7\AppData\Local\Temp\nsuED6F.tmp

C:\Users\win7\AppData\Local\Temp\nsh7F20.tmp\537883703

\\?\C:\Users\win7\AppData\Roaming\Neuxpower Solutions Ltd\NXPowerLite\install\50A2E39\2052

C:\Users\win7\AppData\Local\Temp\nsjE07F.tmp\NSISdl.dll

C:\WINDOWS\FONTS\CORBELI.TTF

C:\WINDOWS\FONTS\MICROSS.TTF

C:\Users\win7\AppData\Local\Temp\nsd77C3.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsoD218.tmp\1153406541

\\.\PIPE\srvsvc

C:\Users\win7\AppData\Local\Temp\nsa64EC.tmp\511188460

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BC2602F5489CFE3E69F81C6328A4C17C_ED04D8BCFC668EEC75B627867581DAC5

C:\Users\win7\AppData\Local\Temp\nsb8C44.tmp\514252965

C:\Users\win7\AppData\Local\Temp\nslE38C.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsk8A11.tmp

C:\WINDOWS\FONTS\UPCDB.TTF

C:\Users\win7\AppData\Local\Temp\7zS6BB0.tmp\dmhfdlngglhgmdlpmmdodefgadjnkcii\manifest.json

C:\Users\win7\AppData\Local\Temp\nsb74F9.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\mobi[1].js

\\?\C:\Users\win7\AppData\Roaming\Neuxpower Solutions Ltd\NXPowerLite\install\50A2E39\1036

C:\Users\win7\AppData\Local\Temp\nsj44D6.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nsi6D96.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsm9984.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsn76C8.tmp

C:\Users\win7\AppData\Local\Temp\nsb6846.tmp

C:\Users\win7\AppData\Local\Temp\down.1292.1.ini

C:\Users\win7\AppData\Local\Temp\nseDF27.tmp

C:\WINDOWS\FONTS\CONSOLA.TTF

C:\Windows\System32\mshta.exe

C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\security.config

C:\Users\win7\AppData\Local\Temp\tsldrl6660

C:\Users\win7\AppData\Local\Temp\nstD0B1.tmp\757778956

C:\WINDOWS\FONTS\WINGDING.TTF

v1_906.red

C:\Users\win7\AppData\Local\Temp\nscDA94.tmp\NSISdl.dll

C:\Windows\SysWOW64\cmd.exe

C:\WINDOWS\FONTS\SEGOESC.TTF

C:\WINDOWS\FONTS\APARAJB.TTF

C:\WINDOWS\FONTS\NRKIS.TTF

\\.\Scsi3:

C:\Users\win7\AppData\Local\Temp\is-ESACR.tmp\_isetup\_setup64.tmp

\\?\C:\Users\win7\AppData\Roaming\Neuxpower Solutions Ltd\NXPowerLite\install\50A2E39\NXPLNotesHelper.exe

C:\Users\win7\AppData\Local\Temp\nsh8222.tmp

C:\Users\win7\AppData\Local\Temp\nswE504.tmp\\639795516

C:\Users\win7\AppData\Local\Temp\nst6EBF.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsk8AA4.tmp\nsWeb.dll

C:\WINDOWS\FONTS\WEBDINGS.TTF

C:\Users\win7\AppData\Local\Temp\nsdDDA0.tmp

C:\Users\win7\AppData\Local\Temp\nsbFF23.tmp\NSISdl.dll

C:\ProgramData\Microsoft\desktop.ini

C:\Users\win7\AppData\Local\Temp\7zS7E49.tmp\dddgglodbdmjddjdklmhpjpcjhekkije\content.js

C:\Users\win7\AppData\Local\Temp\nsq8BB8.tmp\NSISdl.dll

C:\WINDOWS\FONTS\UPCJL.TTF

C:\Users\win7\AppData\Local\Temp\is-ESACR.tmp\Dlg_bkg.png

C:\Users\win7\AppData\Local\Temp\nsiE93A.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Tempfolder\PokbhvAyv\ssl3.dll

C:\Users\win7\AppData\Local\Temp\nsoEC18.tmp\1053333431

C:\Users\win7\AppData\Local\Temp\nsq6682.tmp\804495631

C:\Users\win7\AppData\Local\Temp\nsm9984.tmp\989046927

C:\Users\win7\AppData\Local\Temp\nsk96C3.tmp

C:\Users\win7\AppData\Local\Temp\nsi250.tmp\514218915

C:\Users\win7\AppData\Local\Temp\\~DFCD03AE64776C42B4.TMP

C:\Users\win7\AppData\Local\Temp\is-NIEM2.tmp\ithttp.dll

C:\Users\win7\AppData\Local\Tempfolder\SefxohFeuoor\libnspr4.dll

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkjeojoangpmoeckmdgmibinanicmghc

C:\Users\win7\AppData\Local\Temp\\~DFA47603AB0765CEBC.TMP

C:\Users\win7\AppData\Local\Temp\nsh80EB.tmp\747155339

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\223DE96EE265046957A660ED7C9DD9E7_EFF9B9BA98DEAA773F261FA85A0B1771

C:\Users\win7\AppData\Local\Temp\nsp7E11.tmp\1030587994

C:\Users\win7\AppData\Local\Temp\nsu712F.tmp

C:\Users\win7\AppData\Local\Temp\nse5E69.tmp\DL.dll

C:\Users\win7\AppData\Local\Temp\nsuD6BF.tmp

C:\Users\win7\AppData\Local\Temp\nslBE13.tmp\189585693

C:\Users\win7\AppData\Local\Temp\nsxE775.tmp\725771905

C:\Users\win7\AppData\Local\Temp\is-NIEM2.tmp\_isetup\_setup64.tmp

C:\WINDOWS\FONTS\MSYHBD.TTF

C:\WINDOWS\FONTS\GISHABD.TTF

\\.\PhysicalDrive12

C:\Users\win7\AppData\Local\Temp\nsh6B72.tmp

C:\Users\win7\AppData\Local\Tempfolder\NoicdIdhrib\nssutil3.dll

C:\Users\win7\AppData\Local\Temp\nss769A.tmp\255915200

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05EC48341C277FE5110E7DFAA91377DC_D2D2D6C5E4292CA43CB2832A63B56ABE

C:\Windows\assembly\pubpol1.dat

C:\Users\win7\AppData\Local\Temp\is-NFAB7.tmp\Dlg_Btn_Close.png

C:\Users\win7\AppData\Local\Temp\nsf8A84.tmp

C:\Users\win7\AppData\Local\Temp\7zSE540.tmp\515f52b6468b0.exe

C:\Users\win7\AppData\Local\Temp\nscCF67.tmp

C:\Users\win7\AppData\Local\Tempfolder\MiilnaFyhfoo\freebl3.dll

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

C:\Users\win7\AppData\Local\Tempfolder\FhupagTueibub\sqlite3.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6EE18E7C9044AB68AF295DC6CAF43C7E_1D9AC458315F4E69D67E803A5FDBCE6E

C:\Windows\SysWOW64\Dxtmsft.dll

C:\Users\win7\AppData\Local\Temp\nsbB042.tmp

C:\WINDOWS\FONTS\VERDANAZ.TTF

C:\Users\win7\AppData\Local\Temp\ActSys\SSL\import_root_cert.exe

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\next[1].gif

C:\Users\win7\AppData\Local\Temp\nspD43A.tmp

C:\Users\win7\AppData\Local\Temp\nst86A6.tmp\208040823

C:\Users\win7\AppData\Local\Temp\7zSFBC6.tmp\res.ini

C:\Users\win7\AppData\Roaming\REAPER\ColorThemes\toolbar_icons\toolbar_blank.png

Notes

C:\Users\win7\AppData\Local\Temp\nsg6902.tmp\167419108

C:\Windows\SysWOW64\stdole2.tlb

C:\WINDOWS\FONTS\CORDIAUI.TTF

C:\Users\win7\AppData\Local\Google\Chrome

C:\Users\win7\AppData\Local\Temp\is-H5441.tmp\Dlg_Btn_OK.png

C:\Users\win7\AppData\Local\Temp\is-H5441.tmp\Dlg_icon.png

C:\WINDOWS\FONTS\CORDIAB.TTF

\??\C:\Windows\system32\ntshrui.dll

C:\WINDOWS\FONTS\SIMPBDO.TTF

C:\Users\win7\AppData\Local\Temp\462C4735-BAB0-7891-A34D-580F9211D2C5\Babylon.dat

C:\WINDOWS\FONTS\UPCIL.TTF

C:\Users\win7\AppData\Local\Tempfolder\SefxohFeuoor\libplc4.dll

C:\Users\win7\AppData\Local\Temp\nsmA7BB.tmp

C:\Users\win7\AppData\Local\Microsoft\Windows\History\desktop.ini

C:\WINDOWS\FONTS\UPCKBI.TTF

C:\Users\win7\AppData\Local\Temp\is-VDPSG.tmp\CallbackCtrl.dll

C:\Users\win7\AppData\Local\Temp\\~DFAF7B7C5A37D0D9E4.TMP

C:\Users\win7\AppData\Local\Temp\nsm4BDB.tmp

C:\Windows\assembly\NativeImages_v2.0.50727_32\index1c2.dat

C:\Users\win7\AppData\Local\Temp\nsjDFE2.tmp

C:\Users\win7\AppData\Local\Temp\nsoEA91.tmp\NET.dll

C:\WINDOWS\FONTS\COURBI.TTF

C:\Users\win7\AppData\Local\Temp\nsh8271.tmp\nsWeb.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Network Shortcuts\desktop.ini

C:\Users\win7\AppData\Local\Temp\nsb7594.tmp

C:\Users\win7\AppData\Local\Temp\tbs10E4.tmp

C:\WINDOWS\FONTS\COUR.TTF

C:\WINDOWS\FONTS\DAVID.TTF

C:\Users\win7\AppData\Local\Temp\nse87CF.tmp

C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\enterprisesec.config

C:\Users\win7\AppData\Local\Temp\\~DF1C1D64B4553D6E9B.TMP

C:\WINDOWS\FONTS\ANGSAUB.TTF

C:\Users\win7\AppData\Local\Temp\7zSEEA6.tmp\elejenikcaceegblacieffpkheggoeai\lsdb.js

C:\Users\win7\AppData\Local\Temp\nsd6C3F.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\carregando[1].gif

C:\Users\win7\AppData\Local\Temp\nsk7BDA.tmp\933000537

C:\ProgramData\Barowasse2saave\515f05c882fb3.tlb

C:\Users\win7\AppData\Local\Temp\nsnCECB.tmp\NET.dll

C:\Users\win7\AppData\Local\Temp\nsp715E.tmp

C:\Users\win7\AppData\Local\Temp\nslE513.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-VDPSG.tmp\ithttp.dll

C:\Users\win7\AppData\Local\Temp\nsqD65D.tmp

C:\Users\win7\AppData\Local\Temp\DIQ\flashplayer_151\DomaIQ10.exe

C:\Users\win7\Links\desktop.ini

C:\ProgramData\Microsoft\Windows\Start Menu\Programs

C:\ProgramData

C:\Windows\dahotfix.log

C:\Users\win7\AppData\Local\Temp\nsy77A4.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsuDFD3.tmp

C:\Users\win7\AppData\Local\Temp\nsw748B.tmp

\\.\PhysicalDrive14

C:\WINDOWS\FONTS\MONBAITI.TTF

C:\Users\win7\AppData\Local\Temp\7zS6BB0.tmp\dmhfdlngglhgmdlpmmdodefgadjnkcii\background.html

C:\Users\win7\AppData\Local\Temp\nsb807C.tmp

C:\WINDOWS\FONTS\DOKCHAMP.TTF

C:\Users\win7\AppData\Local\Temp\nsiF54F.tmp

C:\Users\win7\AppData\Local\Temp\nsp880F.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsq7EB7.tmp

C:\WINDOWS\FONTS\CONSTANI.TTF

c:\users\win7\appdata\local\tempfolder\donijhbegsah\kavbakwuieb.dat

C:\Users\win7\AppData\Local\Temp\is-NFAB7.tmp\Dlg_Btn_OK.png

C:\Users\win7\AppData\Local\Temp\nsk722A.tmp\984109669

C:\Users\win7\AppData\Local\Temp\nsc841B.tmp

C:\WINDOWS\FONTS\PALAI.TTF

C:\Users\win7\AppData\Local\Temp\462C4735-BAB0-7891-A34D-580F9211D2C5\SetupStrings.dat

C:\Users\win7\AppData\Local\Temp\nsw8276.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\is-ESACR.tmp\Ksicfg.dll

h1_21.red

C:\Users\win7\AppData\Local\Temp\is-H5441.tmp\WListViewEx.dll

C:\Users\win7\AppData\Local\Temp\7zSFBC6.tmp\diskpt.sys

C:\Users\win7\AppData\Local\Temp\is-NFAB7.tmp\Dlg_icon.png

C:\Users\win7\AppData\Local\Temp\nsxDC96.tmp

C:\WINDOWS\FONTS\SIMPO.TTF

C:\Users\win7\AppData\Local\Temp\\~DF1FEBF5D6CC4EB064.TMP

C:\Users\win7\AppData\Local\Temp\7zSE540.tmp\fkjeojoangpmoeckmdgmibinanicmghc\lsdb.js

C:\WINDOWS\FONTS\MSYH.TTF

C:\Windows\winipcfg.exe

C:\Users\win7\AppData\Local\Temp\nsp8994.tmp

C:\Users\win7\AppData\Local\Temp\\~DF8AE27EA87F97EE44.TMP

C:\Users\win7\AppData\Local\Temp\\~DFF8DAD38286E518AA.TMP

C:\Users\win7\AppData\Roaming\WLEThjJwJFKr\wvSGxBA.exe

C:\Users\win7\AppData\Local\Temp\nst6EBF.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsg6902.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsz7A62.tmp

C:\install.cfg

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\decline[1].gif

C:\WINDOWS\FONTS\MINGLIUB.TTC

C:\Windows\system32\bas\oas\xyowk.dat

C:\Users\Public\Desktop\desktop.ini

C:\Users\win7\AppData\Local\Temp\nsb6895.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsnE9A6.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu

C:\Users\win7\AppData\Local\Temp\nscE8CC.tmp\NSISdl.dll

C:\WINDOWS\FONTS\CONSOLAZ.TTF

C:\Users\win7\AppData\Local\Temp\nsc8251.tmp

C:\Users\win7\AppData\Local\Temp\nsw9012.tmp\336409529

C:\Users\win7\AppData\Local\Temp\nsoD218.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsh74D4.tmp

C:\Users\win7\AppData\Local\Google

C:\Users\win7\AppData\Local\Temp\sample:Zone.Identifier

C:\Users\win7\AppData\Local\Temp\nsbF1D4.tmp

C:\Users\win7\AppData\Local\Temp\nsiE93A.tmp\515614967

C:\Users\win7\AppData\Local\Temp\nsp7C94.tmp

C:\Users\win7\AppData\Local\Temp\nsaBDD3.tmp

C:\Users\win7\AppData\Local\Temp\nss76E7.tmp

C:\Users\win7\AppData\Local\Temp\nss8213.tmp

C:\ProgramData\N24dft.exe

0x0000.ini

C:\WINDOWS\FONTS\MRIAMC.TTF

C:\Users\win7\AppData\Local\Temp\7zSFBC6.tmp\Uninstall.exe

C:\WINDOWS\FONTS\PLANTC.TTF

C:\Users\win7\AppData\Local\Temp\nsjDF95.tmp\264632014

C:\TV_x64.dll

C:\Windows\System32

C:\Users\win7\AppData\Local\Temp\is-VDPSG.tmp\Dlg_Btn_OK.png

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\top-line[1].gif

C:\WINDOWS\FONTS\MALGUN.TTF

C:\Users\win7\AppData\Local\Temp\is-ESACR.tmp\Dlg_Btn_Close.png

\\.\PIPE\samr

C:\Users\win7\AppData\Local\Temp\7zS7E49.tmp

C:\Users\win7\AppData\Local\Temp\nszBB59.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsa7C37.tmp\1024390884

\\.\VBoxMiniRdrDN

C:\WINDOWS\FONTS\BATANG.TTC

C:\Users\win7\AppData\Local\Temp\nszE12B.tmp\NSISdl.dll

C:\WINDOWS\FONTS\UTSAAHI.TTF

C:\Users\win7\AppData\Local\Temp\nsi7830.tmp\507885605

C:\Users\win7\AppData\Local\Temp\7zS902B.tmp\jfjahgbhkoidecpcmlippenojpfkjijd\content.js

C:\WINDOWS\FONTS\UPCKB.TTF

C:\Users\win7\AppData\Local\Temp\nsc4C88.tmp\822440010

C:\Users\win7\AppData\Local\Temp\nsj62B8.tmp

\\?\C:\Users\win7\AppData\Roaming\Neuxpower Solutions Ltd\NXPowerLite\install\50A2E39\oeapiinitcom.dll

C:\WINDOWS\FONTS\TAHOMABD.TTF

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\carregando[1].gif

C:\WINDOWS\FONTS\UPCII.TTF

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SPASS\SPASS 3.7\Uninstall.lnk

C:\Windows\System32\WScript.exe

C:\Users\win7\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch

C:\Users\win7\AppData\Local\Temp\nsn7717.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsm69BE.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsy6CBB.tmp\434167236

C:\Users\win7\AppData\Local\Temp\nsnCECB.tmp\IS.dll

C:\Users\win7\AppData\Local\Temp\nswE551.tmp

C:\WINDOWS\FONTS\SMALLF.FON

C:\WINDOWS\FONTS\MARLETT.TTF

C:\Users\win7\AppData\Local\Temp\nsu8744.tmp\940082949

C:\Users\win7\AppData\Local\Temp\nsmDA36.tmp\489736925

C:\TV_w32.dll