C:\Users\win7\AppData\Local\Temp\013c8edc16128c116f00beee1fe56d21\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\is-N9LB8.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\nsy247C.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsq1EDE.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\325f6ef1eb345d57019b1a43de33cbb2\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\nsi190A.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsw9718.tmp\SimpleSC.dll

C:\Windows\GeoOCX\WebCam\20090916\ImageGUI.dll

C:\Users\win7\AppData\Local\Temp\nsp78B3.tmp\V8._85296_20150814221218.exe

C:\Users\win7\AppData\Local\Temp\7zS77D6.tmp\515f52bb88450.exe

C:\Users\win7\AppData\Local\Temp\nsz58CB.tmp\SimpleSC.dll

C:\ProgramData\Soearcho--NewTeAb\515f05c5b9edb.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\setup.exe

C:\Users\win7\AppData\Local\Temp\is-A86TG.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\is-LJK8F.tmp\sample.tmp

C:\Windows\syswow64\oleaut32.dll

C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_50916076bcb9a742\MSVCR90.dll

C:\Users\win7\AppData\Local\Temp\nshC833.tmp\SimpleSC.dll

C:\Windows\GeoOCX\WebCam\20090916\GVMegaPixelViewer.dll

C:\Users\win7\AppData\Local\Temp\is-4KG8T.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\3b3466ef1cb588b8fa4e82447de17686\preinstaller.exe

C:\Windows\SysWOW64\Wbem\WMIC.exe

C:\Users\win7\AppData\Local\Temp\622210edd7d2b5052ce79dc1b1dcd9d6\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsgBB49.tmp\checktbexist.exe

C:\Users\win7\AppData\Local\Temp\4ae6cf3c7fbd3414df26e8400c7d510e\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\ithttp.dll

C:\Users\win7\AppData\Local\Temp\nsz8333.tmp\SimpleSC.dll

C:\Windows\SysWOW64\svchost.exe

C:\Users\win7\AppData\Local\Temp\is-OTV7R.tmp\is-NQO4R.tmp

C:\Windows\system32\d3d11.dll

C:\Users\win7\AppData\Local\Temp\nsoE348.tmp\setup_31011.exe

C:\Users\win7\AppData\Local\Tempfolder\QiiorAsikv\RoubFedeseu.exe

C:\Users\win7\AppData\Local\Temp\4e2a1aff004f49a5e8fa911f735a399c\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\nsm16E4.tmp\7za.exe

C:\Users\win7\AppData\Local\Temp\pftD7AF~tmp\Disk1\Setup.exe

C:\Users\win7\AppData\Local\Temp\pftB084.tmp\Disk1\Setup.exe

C:\Users\win7\AppData\Local\Temp\9b30ab17762cfe32075060c38291a895\preinstaller.exe

C:\Windows\system32\propsys.dll

C:\Users\win7\AppData\Local\Temp\e873621278eb045fa3d6cb0e9d983d10\preinstaller.exe

C:\Windows\syswow64\shlwapi.DLL

C:\Users\win7\AppData\Local\Temp\nsb1ECF.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-CQABJ.tmp\is-H9UQD.tmp

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp

C:\Windows\GeoOCX\WebCam\20090916\eMapView.ocx

C:\Users\win7\AppData\Local\Temp\nsoE348.tmp\V8._85296_20150814221218.exe

C:\Users\win7\AppData\Local\Temp\fefa3aaf94374590437d72a7b328196e\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Tempfolder\ZicicHhli\MexosiShmoc.exe

C:\Users\win7\AppData\Local\Temp\68fecef9577b6548cd9f9c89137e6238\preinstaller.exe

C:\Windows\syswow64\ole32.DLL

C:\Windows\syswow64\profapi.dll

C:\Users\win7\AppData\Local\Temp\is-7OHN6.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\fefa3aaf94374590437d72a7b328196e\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\is-JKHB7.tmp\sample.tmp

C:\Windows\SysWOW64\regsvr32.exe

C:\Windows\system32\ebkp.dll

C:\Users\win7\AppData\Local\Temp\nsm2FAC.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsr3019.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Tempfolder\PunepyRiyaqi\KyvtokDuq.exe

C:\Users\win7\AppData\Local\Temp\pft3E71.tmp\setup.exe

C:\Users\win7\AppData\Local\Temp\nsh2EF1.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nskCCD2.tmp\SimpleSC.dll

C:\Windows\system32\DINPUT.DLL

C:\Users\win7\AppData\Local\Temp\nss17EE.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\ac85e0056038215dc4e484ecc5b69fbe\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsz78A3.tmp\SimpleSC.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\dw20.exe

C:\Users\win7\AppData\Local\Temp\71d8cec149ec9115178e8020d4510ae0\downloaderDDLR.exe

C:\Users\win7\AppData\Local\Temp\b82b985bee9cc6a610d7c50fc7373126\preinstaller.exe

C:\Windows\syswow64\WININET.dll

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\Ksicfg.dll

C:\Users\win7\AppData\Local\Temp\is-HH893.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\7zSB2EF.tmp\515f05cb479e3.exe

C:\Windows\system32\RICHED20.dll

C:\Windows\GeoOCX\WebCam\20090916\Setup.exe

C:\Users\win7\AppData\Local\Temp\nsh223F.tmp\SimpleSC.dll

C:\Windows\winhlp32.exe

c:\2bbba39a5fce003b322b2010\update\update.exe

C:\Users\win7\AppData\Local\Temp\is-HHG9D.tmp\is-PS2RH.tmp

C:\Users\win7\AppData\Local\Temp\nsp8601.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsl7B53.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\botva2.dll

C:\Users\win7\AppData\Local\Temp\nsc30F4.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\9b30ab17762cfe32075060c38291a895\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\is-U098A.tmp\sample.tmp

C:\Users\win7\AppData\Local\Tempfolder\LiurloUwodmue\WauqJokvud.exe

C:\Windows\syswow64\CFGMGR32.dll

C:\Windows\system32\DMDSKMGR.dll

C:\Users\win7\AppData\Local\Temp\nsfC49.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\gert0.dll

C:\Windows\SysWOW64\rundll32.exe

C:\Windows\system32\msimg32.dll

C:\Users\win7\AppData\Local\Tempfolder\ImyubaWob\ReojatGegaiv.exe

C:\Users\win7\AppData\Local\Temp\nsc2358.tmp\SimpleSC.dll

C:\Windows\system32\msi.dll

C:\Users\win7\AppData\Local\Temp\nsg84CC.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\000a40c1.a

C:\Users\win7\AppData\Local\Temp\nsd70C7.tmp\SimpleSC.dll

C:\Windows\system32\winmm.dll

C:\Users\win7\AppData\Local\Temp\nsw7C2E.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-N1BG4.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\is-VLHR2.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\nsq76D2.tmp\SimpleSC.dll

C:\Windows\system32\wsock32.dll

C:\Windows\syswow64\USERENV.dll

C:\Windows\syswow64\comdlg32.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll

C:\Windows\system32\werui.dll

C:\Windows\syswow64\SETUPAPI.dll

C:\Windows\SysWOW64\cmd.exe

C:\Users\win7\AppData\Local\Temp\nsd1917.tmp\north.exe

C:\Windows\syswow64\kernel32.dll

C:\Users\win7\AppData\Local\Temp\nsd8219.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsc13AE.tmp\SimpleSC.dll

C:\Users\win7\Documents\MSDCSC\msdcsc.exe

C:\Users\win7\AppData\Local\Temp\nsl1D39.tmp\SimpleSC.dll

C:\Windows\system32\MSVBVM60.DLL

C:\Users\win7\AppData\Local\Temp\nsg206A.tmp\SkinH.DLL

C:\Users\win7\AppData\Local\Temp\nsk1DCA.tmp\cpSetup.exe

C:\Users\win7\AppData\Local\Temp\nsz9033.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\ac85e0056038215dc4e484ecc5b69fbe\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\7zS7BFD.tmp\515f05ca0c035.exe

C:\Users\win7\AppData\Local\Temp\nstF103.tmp\SimpleSC.dll

C:\Windows\system32\hhctrl.ocx

C:\Windows\GeoOCX\WebCam\20090916\GvCrypto.dll

C:\Users\win7\AppData\Local\Temp\nslAE1B.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsw399A.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsm2F5E.tmp\SimpleSC.dll

C:\ProgramData\BBroowsee2save\515f52b8125e4.dll

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\botva2.dll

C:\Users\win7\AppData\Local\Temp\f2da611710f7fa687bb7d99d2b938369\preinstaller.exe

C:\Windows\system32\mpr.dll

C:\Users\win7\AppData\Local\Temp\71d8cec149ec9115178e8020d4510ae0\downloaderOFFER1.exe

C:\Windows\system32\twext.dll

C:\Users\win7\AppData\Local\Temp\nss31EE.tmp\SimpleSC.dll

C:\Windows\GeoOCX\WebCam\20090916\LiveX_8320.ocx

C:\Windows\SysWOW64\SCHTASKS.exe

C:\Users\win7\AppData\Local\Temp\nsa1D48.tmp\SimpleSC.dll

C:\Windows\syswow64\LPK.dll

C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d\comctl32.dll

C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18834_none_72d38c5186679d48\GDIPLUS.DLL

C:\Users\win7\AppData\Local\Temp\8353107b4a7ee1912afdcc36da509643\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\Ksicfg.dll

C:\Users\win7\AppData\Local\Temp\is-KJ4HI.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\226fda2318382dfba2850343961c3116\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsrD5FC.tmp\cpSetup.exe

C:\Users\win7\AppData\Local\Tempfolder\EosolfHovha\ZicnaIjav.exe

C:\Windows\System32\msxml6.dll

C:\Users\win7\AppData\Local\Tempfolder\VeicfBubhoxn\AruundNulnio.exe

C:\Windows\SysWOW64\ntdll.dll

C:\Users\win7\AppData\Local\Temp\is-I1FLQ.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\nsa73C0.tmp\SimpleSC.dll

C:\Windows\syswow64\SHELL32.dll

C:\Users\win7\AppData\Local\Temp\nsp78B3.tmp\setup_31011.exe

C:\Windows\system32\RichEd20.dll

C:\Users\win7\AppData\Local\Temp\is-FD9AA.tmp\sample.tmp

C:\Users\win7\AppData\Local\Tempfolder\ShraHas\FakboMumvu.exe

C:\Users\win7\AppData\Local\Temp\nsa753C.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsz761B.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsc6EA4.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsh21AD.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-B8GN7.tmp\sample.tmp

C:\Windows\system32\oleacc.dll

C:\Windows\syswow64\urlmon.dll

C:\Windows\syswow64\shell32.dll

C:\Users\win7\AppData\Local\Temp\nsg2DB8.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\ZapSpot.exe

C:\Users\win7\AppData\Local\Temp\GLC744F.tmp

C:\Users\win7\AppData\Local\Temp\ffb9bc25e938db9aa79cfac8ccf48c15\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsv37BB.tmp\a97db507-fa53-474b-870e-0e4ef6b2e105.dll

C:\Users\win7\AppData\Local\Temp\nsq829A.tmp\SimpleSC.dll

C:\Windows\syswow64\USER32.dll

C:\Users\win7\AppData\Local\Temp\nsp2883.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nse1C72.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\68fecef9577b6548cd9f9c89137e6238\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\nszE55B.tmp\SimpleSC.dll

C:\ProgramData\BrouwsEe2save\515f5b4a5a364.dll

C:\Users\win7\AppData\Local\Temp\is-JR7C5.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\nsx255B.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsjB723.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsy90EA.tmp\SimpleSC.dll

C:\Windows\SYSTEM32\MSCOREE.DLL

C:\Users\win7\AppData\Local\Temp\nsb2ED1.tmp\SimpleSC.dll

C:\sample

C:\Users\win7\AppData\Local\Temp\nsw20D2.tmp\SimpleSC.dll

C:\Windows\system32\GLU32.dll

C:\Windows\GeoOCX\WebCam\20090916\GeoEditAVIDllV2.dll

C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18834_none_72d38c5186679d48\GDIPlus.DLL

C:\Users\win7\AppData\Local\Temp\GLK76A3.tmp

C:\Users\win7\AppData\Local\Temp\nsb21D1.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\7zS55DB.tmp\515f05c5b9ea2.exe

C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll

C:\Users\win7\AppData\Local\Temp\is-0SC4M.tmp\is-FTU3B.tmp

C:\Windows\SysWOW64\schtasks.exe

C:\Windows\SysWOW64\quartz.dll

C:\Windows\system32\dxgi.dll

C:\Windows\GeoOCX\WebCam\20090916\GeoDDrawV2.dll

C:\Users\win7\AppData\Local\Tempfolder\QegmaNudp\HuiagbFoopro.exe

C:\Users\win7\AppData\Local\Temp\nsj726D.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsfB523.tmp\SimpleSC.dll

C:\Windows\syswow64\DEVOBJ.dll

C:\Users\win7\AppData\Local\Tempfolder\MihkoObinza\IbolrFirbeti.exe

C:\Windows\syswow64\GDI32.dll

C:\Users\win7\AppData\Local\Temp\nsj8371.tmp\SimpleSC.dll

C:\Windows\system32\EhStorShell.dll

C:\Users\win7\AppData\Local\Tempfolder\VekaWem\YghaPigdi.exe

C:\Windows\system32\DNSAPI.dll

C:\Windows\GeoOCX\WebCam\20090916\LiveClient_8200.dll

C:\Users\win7\AppData\Local\Temp\nsq1D0A.tmp\SimpleSC.dll

C:\Windows\system32\MSFTEDIT.DLL

C:\Windows\system32\RichEd20.DLL

C:\Users\win7\AppData\Local\Temp\f2cc559679c8d17d7bf9c117baf6aa0a\preinstaller.exe

C:\ProgramData\Barowasse2saave\515f05cb47a1c.dll

C:\Users\win7\AppData\Local\Temp\nskA7A6.tmp\SimpleSC.dll

C:\Windows\syswow64\USP10.dll

C:\Users\win7\AppData\Local\Temp\nsh4855.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\b4e8c2bf475e972ff1129a25635128c5\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsp1D4D.tmp\SimpleSC.dll

C:\Windows\system32\aclui.dll

C:\Users\win7\AppData\Local\Temp\sfx1\_bbg.exe

C:\Windows\system32\crtdll.dll

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\Ksicfg.dll

C:\Users\win7\AppData\Local\Temp\fe9505b7f8b60bc6e1a74dc5c757fe1e\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\nsg2E54.tmp\SimpleSC.dll

C:\Windows\GeoOCX\WebCam\20090916\GvClient_8200.ocx

C:\Users\win7\AppData\Local\Temp\cetrainers\CETEAD5.tmp\extracted\sample

C:\Users\win7\AppData\Local\Temp\nss559E.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsj1BA7.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-J8BHU.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\nsmC906.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\d06fcbb59363a1adb6768ef5c595d7c2\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\nsj350B.tmp\4f6ea680-bfc5-40ae-80ef-f992aa74653f.dll

C:\Users\win7\AppData\Local\Temp\nsc2FBC.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nso5FD6.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsc3142.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsi70E6.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsx2EBD.tmp\SimpleSC.dll

C:\Windows\System32\msxml3.dll

C:\Users\win7\AppData\Local\Temp\nsz32B5.tmp\SimpleSC.dll

C:\Windows\SysWOW64\sechost.dll

C:\Users\win7\AppData\Local\Temp\3b3466ef1cb588b8fa4e82447de17686\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\nsr1F7B.tmp\SimpleSC.dll

C:\Windows\system32\ntshrui.dll

C:\Users\win7\AppData\Local\Temp\nsw852A.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nss8054.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsrACF5.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Tempfolder\ZoidpOsi\FaopxuWhhagpa.exe

C:\Users\win7\AppData\Local\Temp\nsr2EE1.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsu717E.tmp\SimpleSC.dll

C:\Windows\GeoOCX\WebCam\20090916\POSLiveViewX_8198.ocx

C:\Users\win7\AppData\Local\Temp\is-JVQIJ.tmp\sample.tmp

c:\2bbba39a5fce003b322b2010\upd

C:\Users\win7\AppData\Local\Temp\441cc7d4765d61e4190dc8ce3e1a74a1\downloaderOFFER1.exe

C:\Windows\system32\WINMM.dll

C:\Users\win7\AppData\Local\Tempfolder\WikaaPavnu\OdapGhy.exe

C:\Windows\syswow64\api-ms-win-downlevel-user32-l1-1-0.dll

C:\Users\win7\AppData\Local\Tempfolder\VoivvTieci\RevhGaa.exe

C:\Users\win7\AppData\Local\Temp\ginstall.dll

C:\Windows\system32\IMM32.DLL

C:\Windows\system32\DUser.dll

C:\Users\win7\AppData\Local\Temp\36a29030561d6dd54640db33f63123e2\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\FsmSetup\Install.exe

C:\Windows\system32\syncui.dll

C:\Users\win7\AppData\Local\Temp\nsa7AC6.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\c634e7f446ed0baaaffb97e9c00223b7\downloaderOFFER1.exe

C:\Windows\system32\mscoree.dll

C:\Users\win7\AppData\Local\Temp\nss7ACA.tmp\SimpleSC.dll

C:\Windows\SysWOW64\jscript9.dll

C:\Users\win7\AppData\Local\Temp\nsm225E.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\004cf942.a

C:\Users\win7\AppData\Local\Temp\5a6e0d7e7fb82588b081b16c0bd88029\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsm7EFC.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\4ae6cf3c7fbd3414df26e8400c7d510e\preinstaller.exe

C:\Windows\system32\riched20.dll

C:\Users\win7\AppData\Local\Temp\013c8edc16128c116f00beee1fe56d21\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\Creative_ALchemy_AL6_Cleanup.0001.dir.0000\~df394b.tmp

C:\sxe9812.tmp

C:\Windows\system32\DDRAW.dll

C:\Users\win7\AppData\Local\Temp\IXP000.TMP\B.exe

C:\Users\win7\AppData\Local\Temp\nsh2027.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsg6C03.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\~nsu.tmp\Au_.exe

C:\Windows\syswow64\api-ms-win-downlevel-normaliz-l1-1-0.dll

C:\Users\win7\AppData\Local\Temp\ginst0.dll

C:\Windows\system32\ODBC32.DLL

C:\Users\win7\AppData\Local\Temp\4d817503ee65560a8dcdb650fa6add61\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\nspA63F.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\7zS7336.tmp\515f52b8125c4.exe

C:\Users\win7\AppData\Local\Temp\nsy25F8.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsg1FD8.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nst703B.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\9c2704c22ceab0ebc352c74d631e8669\downloaderOFFER1.exe

C:\CFVS_HookDll.dll

c:\da8df086ca54f7fdd325c4\update\update.exe

C:\Windows\syswow64\CRYPT32.dll

C:\Users\win7\AppData\Local\Temp\7fa4afec6c5bbf4ae0e9f0a6485532ac\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\tsldrl6660\setup.exe

C:\Windows\SysWOW64\cmd.execf

C:\Windows\GeoOCX\WebCam\20090916\IA_VIDEO.dll

C:\Windows\syswow64\NSI.dll

C:\Users\win7\AppData\Local\Temp\nsn8BFD.tmp\SimpleSC.dll

C:\Windows\syswow64\KERNELBASE.dll

C:\Users\win7\AppData\Local\Temp\nse724E.tmp\SimpleSC.dll

C:\sxe19DB.tmp

C:\Users\win7\AppData\Local\Temp\nsv1EA5.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsl4DF3.tmp\SimpleSC.dll

C:\Windows\system32\winspool.drv

C:\Users\win7\AppData\Local\Tem

C:\Users\win7\AppData\Local\Temp\PB7DC5.tmp

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\ithttp.dll

C:\Users\win7\AppData\Local\Temp\nsyB022.tmp\SimpleSC.dll

C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc\MSVCR80.dll

C:\Windows\SysWOW64\cryptnet.dll

C:\Users\win7\AppData\Local\Temp\nswC408.tmp\SimpleSC.dll

C:\Windows\syswow64\api-ms-win-downlevel-advapi32-l1-1-0.dll

C:\Users\win7\AppData\Local\Temp\622210edd7d2b5052ce79dc1b1dcd9d6\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\IXP000.TMP\M.exe

C:\Windows\system32\UXTHEME.DLL

C:\Users\win7\AppData\Local\Temp\nsmC422.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\Ksicfg.dll

c:\da8df086ca54f7fdd325c4\updat

C:\Windows\system32\DSound.dll

C:\Users\win7\AppData\Local\Temp\is-HDJS0.tmp\is-9FF4K.tmp

C:\Users\win7\AppData\Local\Temp\Set7B32.tmp

C:\ProgramData\BBroowsee2save\515f52bb88489.dll

C:\Users\win7\AppData\Local\Temp\nss95B4.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsm7EAE.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsc20F2.tmp\SimpleSC.dll

C:\Windows\GeoOCX\WebCam\20090916\PtzStick_Parser.dll

C:\Users\win7\AppData\Local\Temp\7zS2C7E.tmp\515f5b4a5a32e.exe

C:\Users\win7\AppData\Local\Temp\Creative_ALchemy_AL6_Cleanup.0001

C:\Windows\syswow64\MSCTF.dll

C:\Windows\syswow64\RPCRT4.dll

C:\Windows\system32\opengl32.dll

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\botva2.dll

C:\Windows\syswow64\ADVAPI32.dll

C:\Users\win7\AppData\Local\Temp\nsaE650.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsjA6FF.tmp\SimpleSC.dll

C:\Windows\system32\LZ32.DLL

C:\Windows\SysWOW64\MSIEXEC.EXE

C:\Users\win7\AppData\Local\Temp\nsf795F.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\IML32.dll

C:\Users\win7\AppData\Local\Temp\nsi324C.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Tempfolder\FonbOmacd\NijosoBeelta.exe

C:\Users\win7\AppData\Local\Temp\nshF05B.tmp\2c373164-efdd-4a23-bcae-d359c2f35578.dll

C:\Users\win7\AppData\Local\Temp\nsw9592.tmp\SimpleSC.dll

C:\Windows\syswow64\msvcrt.dll

C:\Users\win7\AppData\Local\Temp\f2da611710f7fa687bb7d99d2b938369\downloaderOFFER1.exe

C:\Windows\svchost.exe

C:\Users\win7\AppData\Local\Temp\ef9f727098f02eb359d2c1dac93f30ee\preinstaller.exe

C:\Windows\system32\version.DLL

C:\Users\win7\AppData\Local\Temp\nsc7BA4.tmp\SimpleSC.dll

C:\Windows\GeoOCX\WebCam\20090916\RPB_8300.ocx

C:\Users\win7\AppData\Local\Temp\nsb4835.tmp\SimpleSC.dll

C:

C:\Users\win7\AppData\Local\Temp\3db95c0d2bab524b5259c84257550ed1\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsn31CF.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsw2164.tmp\SimpleSC.dll

C:\Windows\system32\RICHED20.DLL

C:\32788R22FWJFW\swreg.exe

C:\Users\win7\AppData\Local\Temp\7fa4afec6c5bbf4ae0e9f0a6485532ac\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\is-1M7DH.tmp\sample.tmp

C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18834_none_72d38c5186679d48\gdiplus.dll

C:\Users\win7\AppData\Local\Temp\ActSys\SSL\import_root_cert.exe

C:\Users\win7\AppData\Local\Temp\nsv2B09.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsg1DB6.tmp\SimpleSC.dll

C:\Windows\syswow64\OLEAUT32.dll

C:\Users\win7\AppData\Local\Temp\nsm2FF9.tmp\GetPrivateInstaller_woautorun.exe

C:\Users\win7\AppData\Local\Temp\nsu8F4C.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsa7A29.tmp\nsRandom.dll

C:\Windows\system32\DSOUND.dll

C:\Users\win7\AppData\Local\Temp\nsv7607.tmp\SimpleSC.dll

C:\Windows\system32\CRTDLL.dll

C:\Users\win7\AppData\Local\Tempfolder\DoltuJonisep\MufjCucgi.exe

C:\Users\win7\AppData\Local\Tempfolder\UlynWioaa\NyjgitAcuifz.exe

C:\Users\win7\AppData\Local\Temp\nst1AFB.tmp\SimpleSC.dll

C:\Windows\system32\olepro32.dll

C:\Windows\system32\MSHTML.DLL

C:\Users\win7\AppData\Local\Temp\nsq7C0E.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Tempfolder\MycoVifazo\LanfVydnau.exe

C:\Windows\system32\cryptnet.dll

C:\Users\win7\AppData\Local\Temp\b82b985bee9cc6a610d7c50fc7373126\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\3db95c0d2bab524b5259c84257550ed1\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\nsq4F84.tmp\setupcl.exe

C:\Users\win7\AppData\Local\Temp\nsy92DC.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\ffb9bc25e938db9aa79cfac8ccf48c15\downloaderOFFER1.exe

C:\Windows\system32\MSCOREE.DLL

C:\Users\win7\AppData\Local\Temp\nsi3082.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsa330E.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\d06fcbb59363a1adb6768ef5c595d7c2\preinstaller.exe

C:\Windows\syswow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll

C:\Users\win7\AppData\Local\Temp\nsz7EE1.tmp\SimpleSC.dll

C:\Windows\syswow64\normaliz.DLL

C:\Windows\GeoOCX\WebCam\20090916\GeoWatermark.dll

C:\Windows\syswow64\api-ms-win-downlevel-ole32-l1-1-0.dll

C:\Windows\syswow64\SspiCli.dll

C:\Users\win7\AppData\Local\Temp\nss1926.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nso26A4.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsa85A4.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\9c2704c22ceab0ebc352c74d631e8669\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\4e2a1aff004f49a5e8fa911f735a399c\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\nse73D4.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\441cc7d4765d61e4190dc8ce3e1a74a1\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsx2FEB.tmp\SimpleSC.dll

C:\Windows\GeoOCX\WebCam\20090916\DMPTZControlDLL.dll

C:\Windows\system32\ieframe.DLL

C:\Users\win7\AppData\Local\Temp\f2cc559679c8d17d7bf9c117baf6aa0a\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\64b86246e9aa3fa79b9535db49b20b8d\downloaderOFFER1.exe

C:\Windows\system32\ODBC32.dll

C:\Users\win7\AppData\Local\Temp\Trojan.exe

C:\Users\win7\AppData\Local\Temp\GLCE8F.tmp

C:\Windows\system32\SXS.DLL

C:\Users\win7\AppData\Local\Temp\nsw892E.tmp\SimpleSC.dll

C:\Windows\system32\ieframe.dll

C:\Windows\SysWOW64\DDRAW.dll

C:\Users\win7\AppData\Local\Temp\325f6ef1eb345d57019b1a43de33cbb2\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsd3015.tmp\SimpleSC.dll

C:\Windows\system32\D3D10Warp.dll

C:\Windows\system32\dwmapi.dll

C:\Windows\syswow64\WS2_32.dll

C:\Users\win7\AppData\Local\Temp\nse8250.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\000a3d85.a

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\beepdl.dll

C:\Users\win7\AppData\Local\Temp\GLKFD8.tmp

C:\Users\win7\AppData\Local\Temp\nsa41D8.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nse7338.tmp\SimpleSC.dll

C:\Windows\system32\quartz.dll

C:\Users\win7\AppData\Local\Temp\nsc230A.tmp\cpSetup.exe

C:\Users\win7\AppData\Local\Temp\nsn2607.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Tempfolder\ortmp\orion.exe

C:\Users\win7\AppData\Local\Temp\is-NAM86.tmp\sample.tmp

C:\Windows\SysWOW64\schannel.dll

C:\Users\win7\AppData\Local\Temp\ab5d4243cc93ed6bbca90dd95ca61177\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\fe9505b7f8b60bc6e1a74dc5c757fe1e\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\mss863E.tmp

C:\Users\win7\AppData\Local\Temp\nsk1DCA.tmp\nsRandom.dll

C:\Windows\system32\MSHTML.dll

C:\Windows\GeoOCX\WebCam\20090916\RPBAudio.ocx

C:\Users\win7\AppData\Local\Temp\nsi2F54.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsy4046.tmp\SimpleSC.dll

C:\Windows\syswow64\api-ms-win-downlevel-version-l1-1-0.dll

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\botva2.dll

C:\Users\win7\AppData\Local\Temp\ab5d4243cc93ed6bbca90dd95ca61177\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\beepdl.dll

C:\Users\win7\AppData\Local\Temp\nsj1BF5.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nss6E66.tmp\SimpleSC.dll

C:\Windows\system32\acppage.dll

C:\Users\win7\AppData\Local\Temp\nsx250D.tmp\SimpleSC.dll

C:\Windows\SysWOW64\mshtml.dll

C:\Windows\SysWOW64\ieframe.dll

C:\Windows\system32\DCIMAN32.dll

C:\Windows\system32\PROPSYS.dll

C:\Windows\SysWOW64\DUser.dll

C:\Windows\syswow64\iertutil.dll

C:\Users\win7\AppData\Local\Temp\c634e7f446ed0baaaffb97e9c00223b7\preinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsr2F7D.tmp\SimpleSC.dll

C:\ProgramData\Barowasse2saave\515f05ca0c06e.dll

C:\Users\win7\AppData\Local\Temp\nsa7674.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\64b86246e9aa3fa79b9535db49b20b8d\preinstaller.exe

C:\Windows\syswow64\CRYPTBASE.dll

C:\Users\win7\AppData\Local\Temp\nsm7E60.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsy1A30.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\ef9f727098f02eb359d2c1dac93f30ee\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\minidownload.exe

C:\Users\win7\AppData\Local\Temp\VSD492D.tmp\DotNetFX\dotnetchk.exe

C:\Windows\GeoOCX\WebCam\200909

C:\Windows\syswow64\crypt32.dll

C:\Users\win7\AppData\Local\Temp\nso34DC.tmp\SimpleSC.dll

C:\Windows\system32\SearchFolder.dll

C:\Windows\system32\CRTDLL.DLL

C:\Users\win7\AppData\Local\Temp\nsh7DA5.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsuA912.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsr4717.tmp\SimpleSC.dll

C:\Windows\system32\TAPI32.dll

C:\Users\win7\AppData\Local\Temp\4d817503ee65560a8dcdb650fa6add61\downloaderOFFER1.exe

C:\DLL_Loader.exe

#44#

#57#

#34#

MaxNtMajorVersionToUpdate

#42#

DllCacheFiles

#3D#

MaxNtBuildToUpdate

Archive128Bit

regsvr32 /s "C:\Windows\system32\vbscript.dll"

save.reg.for.uninstall

.cfxxe

#45#

#68#

cscript.exe

#22#

#4E#

11

#56#

#79#

#4B#

vbscript.dll

#33#

#5F#

scrobj.dll

menu_print

#3C#

assimilatedu

menu_open

#25#

#67#

https

ProductInstall.GlobalRegistryChanges.Install

sp_short_title

http

.ini

RecordFileDetails

strings.install

DiskUsageToAdd

copy.scriptfiles

picture

#4D#

REG_WSH

#2A#

disp_wsh

[-c-]

#46#

#7D#

wshcon.dll

#2E#

scrrun.dll

ProductCatalogsToInstall

#36#

#59#

SourceDisksFiles

servicefileinusedetect

Copy.WSH

signature

[-d-]

.bat

1

#2C#

#24#

WaitTimeForServiceStop

clsid_wshext

scripten.inf

.exe

#2D#

#47#

maxntservicepackversion

eventlogkeyname

menu_dosopen

#35#

.cetrainer

ForceServicesRestart

#74#

strings

Copy.Inf

#58#

#3E#

ProductInstall.CopyFilesAlways

registeractivesetup

appfileinusedetect

productinstall.globalregistrychanges.install

UpdateRegKey

Media

#48#

wscript.exe

#4F#

#69#

#53#

#39#

#38#

UseCache

#37#

diskusagetoadd

reg_uninstall

catalogfile

#6F#

.vbs

#6E#

MENU_EDIT

RebootRequired

#6D#

#6C#

#6B#

version

regsvr32 /s "c:\windows\system32\scrobj.dll"

reg_wsh

regsvr32 /s "C:\Windows\system32\wshext.dll"

[-C-]

archive128bit

RegisterActiveSetup

ample

wshext.dll

rebootrequired

#26#

CopyFiles

#49#

lang

LanguageType

#2F#

menu_conopen

#76#

reg_approve

[-D-]

#75#

jscript.dll

DESC_DOTJS

copyfiles

CustomizationDll

#66#

desc_dotwsh

copy.wsh

#62#

regsvr32 /s "C:\Windows\system32\wshom.ocx"

program

NtMajorVersionToUpdate

SourceDisksNames

#50#

addreg

DESC_DOTWS

#70#

installlogfilename

regsvr32 /s "c:\windows\system32\vbscript.dll"

AssimilateDU

Save.Reg.For.Uninstall

ebk

menu_edit

Product

#63#

#5C#

.library-ms

DeferPNPFileCopy

DirectoriesToCleanUp

minntservicepackversion

EventLogDllName

#78#

maxntminorversiontoupdate

Strings.Install

#77#

regsvr32 /s "c:\windows\system32\wshext.dll"

regsvr32 /s "C:\Windows\system32\jscript.dll"

sp_title

uninstalldirname

addreg.extensions.nt

Configuration

installationtype

.

#65#

#64#

CLSID_WSHEXT

desc_dotws

ActiveSetupRegKey

.jpg

Strings

processestorun

#72#

MENU_PRINT

PAGE1_BITMAP1

#43#

Version

#7B#

dllcachefiles

PAGE1_BITMAP2

#41#

AddReg

AddReg.Extensions.NT

desc_dotjs

forceservicesrestart

desc_wshext

copy.inf

#4C#

AddReg.WSH

MENU_OPEN

directoriestocleanup

1"

UnInstallDirName

MaxNtMinorVersionToUpdate

ebook

maxntbuildtoupdate

wscript.hlp

sourcedisksnames

restartdevice

regsvr32 /s "c:\windows\system32\wshom.ocx"

REG_UNINSTALL

PruneHotfixes

recordfiledetails

deferpnpfilecopy

SERVICE_PACK_NUMBER

productcatalogstoinstall

prunehotfixes

SP_SHORT_TITLE

#61#

res

#54#

MinNtServicePackVersion

wshom.ocx

#52#

updateregkey

#73#

sourcedisksfiles

#4A#

dispex.dll

InstallLogFileName

MENU_CONOPEN

MaxNtServicePackVersion

regsvr32 /s "c:\windows\system32\scrrun.dll"

file

#6A#

BlockOnNewIE

DESC_DOTVBS

DESC_WSHEXT

configuration

maxntmajorversiontoupdate

eventlogdllname

usecache

#30#

addreg.wsh

copy.help

media

regsvr32 /s "C:\Windows\system32\scrobj.dll"

#31#

regsvr32 /s "c:\windows\system32\wshcon.dll"

NtBuildToUpdate

NtMinorVersionToUpdate

MENU_DOSOPEN

uninstalllogfilename

UnInstallLogFileName

ServiceFileInUseDetect

ntminorversiontoupdate

activesetupregkey

#3A#

EventLogKeyName

DISP_WSH

destinationdirs

#55#

DestinationDirs

page1_bitmap2

regsvr32 /s "C:\Windows\system32\scrrun.dll"

#32#

AppFileInUseDetect

page1_bitmap1

Copy.ScriptFiles

regsvr32 /s "C:\Windows\system32\wshcon.dll"

ntmajorversiontoupdate

regsvr32 /s "c:\windows\system32\jscript.dll"

blockonnewie

waittimeforservicestop

Copy.Help

#20#

customizationdll

productinstall.copyfilesalways

DESC_DOTWSH

InstallationType

ntbuildtoupdate

desc_dotvbs

ProcessesToRun

languagetype

Lang

RestartDevice

product

CatalogFile

REG_APPROVE

service_pack_number

SP_TITLE

EnableSpdyDebugAsserts

Compatible

UseFirstAvailable

AutoConfigURL

Display Inline Videos

<NULL>

CoInternetCombineIUriCacheSize

WpadDecisionTime

SendTimeOut

DOMStorage

Plane15

ScavengeCacheFileLimit

Version

DefaultConnectionSettings

SecurityIdIUriCacheSize

SIG

IECompatVersionLow

SystemSetupInProgress

WpadDns

Plane16

DataFilePath

f.exto

Plane6

LatestIndex

WpadDecision

Plane7

Plane12

Plane8

MS Shell Dlg 2

LastModTime

WriteProtect

ILDependencies

TotalLimit

LegacyPolicyTimeStamp

Expand Alt Text

Plane5

SavedLegacySettings

Accessibility

SqmHttpStreamRandomUploadPoolSize

UserContextLockCount

ConnectRetries

DuoProtocols

Disable

MixedContentBlockImages

ConfigString

NIDependencies

NIUsageMask

InstallRoot

DisableNTLMPreAuth

Plane14

NoProtectedModeBanner

Plane10

KeepAliveTimeout

Plane2

WpadExpirationDays

Tahoma

ProxyServer

SystemProductName

WarnOnBadCertRecving

DbgManagedDebugger

FtpDefaultExpiryTimeSecs

Print_Background

WarnOnZoneCrossing

IdnEnabled

IEUIFontName

Enable AutoImageResize

System.Runtime.Serialization.Formatters.Soap

SessionMerging

UrlEncoding

System.Windows.Forms

WpadDetectedUrl

DontUseDNSLoadBalancing

DisableSecuritySettingsCheck

LoggingLevel

IEPropFontName

IsTextPlainHonored

ConfigMask

RenderingLoopMaxTime

FrameTabWindow

MS Sans Serif

950

Plane11

PreResolveLimit

CVListXMLVersionLow

Password

SecureProtocols

AdminTabProcs

XDomainRequest

ClientAuthBuiltInUI

MinimumSystemTimerResolution

VML

Plane9

Plane4

ButtonsText

WarnOnPostRedirect

NoDrives

WpadDhcp

TabProcGrowth

CreateUriCacheSize

DisplayName

SyncMode5

IESerifFontName

System.Deployment

DisableReadRange

DnsCacheEntries

MVID

EnablePrivateObjectHeap

ContextLimit

WarnAlwaysOnPost

IEFixedFontName

AutoProxyDetectType

LeashLegacyCookies

NavigationDelay

MaxSubDomains

Status

EvalationData

TRACE_CLUSTER

TRACE_TRACE

Plane13

IECompatVersionHigh

DataStreamEnabledState

Use_DlgBox_Colors

Plane3

MaxConnectionsPerProxy

Use Anchor Hover Color

ProxyHttp1.1

MaxConnectionsPer1_0Server

AutoDetect

CacheLocation

MissingDependencies

GCStressStartAtJit

CacheMode

Play_Background_Sounds

TcpAutotuning

EnableLog

AlwaysDrainOnRedirect

ScavengeCacheFileLifeTime

ReceiveTimeOut

ProxyEnable

LogFailures

WpadDecisionReason

ConnectTimeOut

D5

WpadOverride

Default_CodePage

IEFontSize

DisableBranchCache

Anchor Color

FEATURE_CLIENTAUTHCERTFILTER

System.Configuration

EnableHttp1_1

EnabledScopes

Show image placeholders

SpecialFoldersCacheSize

ProxyOverride

WarnOnPost

DnsCacheTimeout

System.Drawing

DaysToKeep

Location

IESansSerifFontName

PreConnectLimit

JScriptProfileCacheEventDelay

msg_rect

DomainLimit

Allow Programmatic Cut_Copy_Paste

ScavengeCacheLowerBound

Modules

DisableBasicOverClearChannel

System.Runtime.Remoting

RetryCnt

EnablePunycode

ProcessID

IEFontSizePrivate

CombineFalseStartData

ClientCacheSize

B29DDC7CC1E610D970F

FilterLogLevel

CVListXMLVersionHigh

Display Inline Images

ForceLog

WarnOnHTTPSToHTTPRedirect

ZoomDisabled

Anchor Color Visited

EnforceP3PValidity

CLSID

wave_new_mail_disable

Anchor Underline

Size

Name

Always Use My Font Size

Play_Animations

Move System Caret

{IA223AD2D825482AE}

No3DBorder

SmoothScroll

UseHR

ConnectionsTab

FrameMerging

BadProxyExpiresTime

Use Web Based FTP

MaxQueueCount

Microsoft.VisualBasic

CertCacheNoValidate

Content Type

DbgJITDebugLaunchSetting

ShareCredsWithWinHttp

Always Use My Font Face

DisableFalseStartBlocklist

RegisteredOrganization

ProgramFilesDir

RtfConverterFlags

AppData

System

5sT5pLzZ

NoToolbarsOnTaskbar

System.Web

AutoRecover

Default_IEFontSizePrivate

SocketSendBufferLength

Disable Diagnostics Mode

LogResourceBinds

Plane1

FromCacheTimeout

UserContextListCount

System.Management

ForceBFCacheCandidacyPass

StartupPrograms

WindowsEdition

IE

MaxHttpRedirects

CommonFilesDir

MediaSubType

VersioningLog

SeparateArc

DisableScriptDebuggerIE

0

CSS_Compat

Q300829

Cleanup HTCs

ILUsageMask

logging

IdentifierLimit

UseLegacyIdentityFormat

SocketReceiveBufferLength

ServerInfoTimeout

SendExtraCRLF

EnableNegotiate

RootDomainLimit

Latest

MiscFlags

f.view.pos

a.cmt

msglistontop

System.Xml

a.del

Disable Visited Hyperlinks

Log

sample

window position

NoClientChecks

MaxConnectionsPerServer

f.info.pos

mscorlib

LargeButtons

EnableUTF8

associate_mailto

a.exto

DownloadCacheQuotaInKB

ImmExec

RestoreFolder

HttpDefaultExpiryTimeSecs

System.Security

OnlyUseLatestCLR

DebugLogLevel

XMLHTTP

ObjectLimit

TRACE_PERFMON

Disable Script Debugger

.HLP

DnsCacheEnabled

{065CD657CFC419117}

Start

a.sfx

flash_kb

DisableCachingOfSSLPages

SystemBiosVersion

DisableConfigCache

ProcessOwners

CLRLoadLogDir

WpadSearchAllDomains

Platform

TRACE_PROXY

UseDoubleClickTimer

Segoe UI

autocompact

ProtectedModeOffForAllZones

flash_delay

DontShowUI

ShortcutBehavior

ExclNames

E4247F43E4247F43

NoGuiFromShim

Class

Taskman

NoRun

DevOverrideEnable

EnableLUA

OnTop

BkColorFullScreen

CorporateWerUseAuthentication

EnableCriticalLogger

PendingFileRenameOperations

Persistent

compact_threshold

QI

SystemResponsiveness

Move

TRACE_RESOURCE

USERNAME

CorporateWerUseSSL

DisableMSIPeek

speech_summary

UseRAR

Anchor Color Hover

index1

PreventAutoRun

DisableKeepAlive

AV

NoNetConnectDisconnect

Always Use My Colors

Detailed

ForceQueue

WizardMode

0F46FB5B2D8A9D9FCB4A

speech_enabled

FormSuggest

System.Configuration.Install

PathsNone

Microsoft.JScript

ProviderOrder

bold_header_names

APPCRASH

Band1

Install

NoRecentDocsHistory

IsMultiInstance

Priority

NoFileMenu

AddArcOnly

xxY5UAsq

cpSetup.exe

a.test

GCStressStart

ClassManagerFlags

VersionLoadedLast

Module Change

Ver_Sb1

Authentication Packages

ProductType

NoPropertiesMyDocuments

a.prot

PipelineDebugLog

f.del.pos

Method

TRACE_VSSBACKUP

newmsg_run_command

1

CSDVersion

NoManageMyComputerVerb

ProviderPath

folders_rect

sig_file

CorporateWerPortNumber

BootExecute

RegisteredOwner

AlternateShell

Recovery

ID

f.test

Startup

ArcTimeLatest

ComputerName

1AA79FE5B3F7E611EA6

colwidths

GlitchInstrumentation

username

use_auth_login

smtp_bcc

PipelineEnableTrackModules

a.lock

NoHardwareTab

auto_version_check

ProtocolName

MMax

GenerateMask

Common Desktop

resize_msg_list

NoDispScrSavPage

HeightLoadedClear

NoSimpleStartMenu

OpenShared

UninstallString

RestrictRun

NoBrowserOptions

f.lock.pos

email_address

Counter Names

DebugLogPath

TRACE_UTIL

WINDOW_MAX

LogSize

CLR20r3

BaseBoardManufacturer

PipelineEnableVEH

ReuseWindow

LR

FontItalic

ShowMissingIE4Error

f.exit

FXMemEnabled

a.view.pos

FileSort

InstallDate

Lock

Emulation

WaitToKillServiceTimeout

SecurityTab

wt_stock

EmailArcTo

apcsample

DictSizeLZ

PrivacyAdvanced

Start Page

Publisher

NoClose

lr o�S�V�b�N

UseMP3CrossFade

f.extr

Band2

Common Favorites

C:\Windows\System32\MsAudio.ocx

SaveDumpStart

Cache

Forecasts

smtp_server

server

Band0

BackColor

newmsg_run

D4

Locked Down

CurrentVersion

messageFont

show_balloon

PipelineBufferSize

D87CBA3CF103BA167330

C:\\sample.exe

folder_location

Type

LibraryPath

ExecutablesToExclude

num_last_rcpt

4nqaFdKM6TS53o0N

StoreNames

a.rep

LoggingDisabled

Joystick Id

First Time User

ThumbsHide

wt_dictionary_text

AutoSearch

IfaceHeight

ClearArc

WINDOW_LEFT

GenerateArcName

Placement

WidthChangedDisplay

Description

msglist_toolbar

wt_dictionary

Library

msglist_start_open

TRACE_UI

TRACE_GATEWAY

DefaultConsent

f.view

Stop Music

Autorun

ConnCnt

IESound

WhenNegative

f.info

a.wiz

TRACE_KTMRM

sYearMonth

CmtFile

Want Music

ArcSort

SaveStreams

SystemPartition

f0Cm5CHwj

Microsoft Sans Serif

MS Shell Dlg

ShowToolbar

Primary Only

DontSendAdditionalData

AllowUnsafeObjectPassing

a.view

PersistentCompletedType

QueuePesterInterval

auth_username

PrnFileSize

MaxCachedTiles1

sort_reversed

ProgramsTab

NoControlPanel

NoCDBurning

360Safetray

appdata

LimitLog

SP

InstallerLocation

System.Core

NoAddRemovePrograms

ShowRealFileIcons

ConnWiz Admin Lock

System.Web.Services

a.test.pos

ComForce

done

Application

HideDesc

{645FF040-5081-101B-9F08-00AA002F954E}

TRACE_TM

a.prot.pos

85FF8030E5AD53B6E236

ClassicShell

PortNumber

FormSuggest Passwords

wrap_enabled

wave_got_mail_nopath

NoDispAppearancePage

single_message_window

ProductName

f.cmt

{I65CD657CFC419117}

DisableQueue

auto_store

SingleClick

FieldChangedQuick

DisplayIcon

PathsAbs

f.add

6&E993E07&0&0000

ForceClassicControlPanel

FullRow

C:\Users\win7\AppData\Local\Temp\GLF1A5A.tmp

Multimedia

DriverVersion

NoDispSettingsPage

ArcName

Win31FileSystem

Scanning

Appinit_Dlls

TRACE_ETWTRACE

Language

BkColorWindow

RecVolNumber

NoStartMenuNetworkPlaces

show_html_mime

external_on_tray_click

ut

a.add

wrap_length

wt_weather_text

{450D8FBA-AD25-11D0-98A8-0800361B1103}

flash_msglist

TRACE_LOG

FitShrinkOnly

f.sfx

msg_list_rect

f.wiz.pos

SourcePath

ProfileImagePath

rarkey

a.info.pos

NoSMHelp

ThumbNailPrnSize

Format

SystemRoot

SFXIcon

PathsAbsDrive

filter_file

NoDesktopCleanupWizard

KeyNotifyNext

BootDir

FlagsEnabledAuto

Check_If_Default

FontEnabledInvalid

TraceFilePath

FileTimeBefore

History

IJWEntrypointCompatMode

AppTitleFull

360sd

a.lock.pos

ViewState

Microsoft.VisualC

iDmw1vv2

f.sfx.pos

TRACE_LU

Band3

OWNDC

ShowDots

ServiceDll

Default Impersonation Level

spam_url

FontUpdatedHide

Driver

LastUpdateTime

DispatcherPath

anote

Common Fonts

inhbQUcup0

a.exto.pos

sort_column

DebugOutEnabled

OsLoaderPath

LastFolder

RegTest

f.wiz

disable_tray

a.add.pos

reply_to_address

DisplayVersion

ShowTenthsPlace

Test

ConfigureArchive

Common Startup

C:\Windows\System32\wmaudioredist.exe

JITDebug

File4

DisableTaskMgr

organization

EnableOutputDebugString

D6560F8CAD52162AA

DevicePath

dumb_pop3

System.Transactions

AdvancedTab

WINDOW_TOP

NoPropertiesMyComputer

vacation_mode

DefaultOverrideBehavior

System.EnterpriseServices

skwgtdcinfo

LineUpdatedQuick

ProductId

width

f.prot.pos

PpScheds

Left

NoSharedDocuments

FileMinutes

IfaceWidth

UsePlayedNum

Common Programs

WIN7-PC

NoFindFiles

SortOrder

Desktop

charset

use_sig

FirstStart

AppTitle

DLLDirectory32

NoMDTM

TRACE_XA

NoThemesTab

CheckUpdatedStyle

ContentTab

f.exto.pos

ArcTimeOriginal

NoSecConsole

Shell

NoSecurityTab

Update

GinaDLL

FnpuLnkD

ItemCompletedMax

RD

System.DirectoryServices.Protocols

PreviewPages

ShowHiddenFolders

System.ServiceProcess

CategoryOptions

PlatformCompressedValid

show_server_name

Band4

DisplayString

RegName

f.extr.pos

Active

Execute

WaitForOther

f.prot

UseMPHeap

Debugger

a.extr.pos

SecurityProviders

SSz

MaxArchiveCount

TRACE_MTXOCI

PROCESSOR_ARCHITECTURE

midi_device_type

f.del

C:\Windows\System32\actskin4.ocx

Ret

SFXLogo

ResetWebSettings

a.info

JNHhElA

a.rep.pos

DisableArchive

COM+Enabled

FileUpdatedUse

HeightCompressedShow

Ax15TMlP3

Security Packages

System.Data.SqlXml

SwapMouseButtons

VolumeSize

4

max_message_size

IdSite32

QuickCompressedUrl

PrivacyTab

messageColor

SonyAgent

NoSaveSettings

a.sfx.pos

PackageCode

newmsg_popup

Programs

max_speak

NoChangeStartMenu

MemoryBufferSize

rarreg.key

SlideShowNoSaver

First Counter

height

a.exit

Id32

f.exit.pos

NoWindowsUpdate

{20D04FE0-3AEA-1069-A2D8-08002B30309D}

System.DirectoryServices

folders_enabled

NoNetworkConnections

Flags

Load

DriverName

ShowFeels

C:\Users\win7\AppData\Local\Temp\GLF1A7A.tmp

printerName

Common AltStartup

HomePage

DisplayLogo

InstallLanguage

PortName

full_name

Ver_Sb2

MP3CrossFadeMS

File1

EnableDebugLog

CorporateWerServer

C:\Users\win7\AppData\Local\Temp\CTOSChk.exe

wave_got_mail_disable

y9HZv1

Fonts

Copyright

NoPropertiesRecycleBin

AppSetup

mtime

f.add.pos

f.cmt.pos

OldVolNames

a.extr

PrnFileName

NoSetTaskbar

ShowGrid

PageControlWidth

SFX

Solid

HWID

PreventRun

NoDesktop

flash_always

ProcessLasso

ProductSuite

FileTimeAfter

wt_weather

ShowToolTips

auto_poll

EraseDest

DLLDirectory

verifysignatures

midi_device

GeneralTab

a.del.pos

Check

VolPause

a.exit.pos

NumberOfLogEntries

BypassDataThrottling

Disabled

a.cmt.pos

AltStartup

interval

PraQ9Mb

Favorites

f.rep

26E814982D95C3FB

f.rep.pos

PageCompletedLast

NameNotifyClear

Start Menu

Options

f.test.pos

Background

uf

f.lock

a.wiz.pos

StartMenuLogOff

TRACE_CM

����

StartLoadImage

tray_double_click

PlatformSavedValid

FileNames

DisablePersonalDirChange

CustomExt

EncryptHeaders

TRACE_CONTACT

MakeTrans

NoViewContextMenu

Ratings

??

FileTimeMode

System.Data

NoFolderOptions

i6QDZMEUD

HideMP3Explorer

Selected Module File

7C203726731316264

NetworkThrottlingIndex

AllowUppercase

InstallSuccess

external_file

NoSMMyDocs

column0

auto_download_messages

File3

SlideShowDelay

PageLocalizedInvalid

ValueLocalizedAuto

Common AppData

FileDays

flash_trayicon

SlideShowAutoRestart

VersionControl

ProfilesDirectory

SharedDir

SFXModule

CompanyName

SendEFSFiles

ProgID

TRACE_MISC

Frame4

log_comm

UpdateType

86xdyvAq8

Backedup

UserUpdatedValid

wave_new_mail_nopath

Common Start Menu

lan

AdvpackLogFile

CacheOk

filters_enabled

Font

ForceUserModeCabCollection

poll_on_startup

ForegroundUpdatedInvalid

6C6B08827FAA3C33CAD

FullLocalizedPersistent

Frame5

shownowindows

Lang

System.Web.RegularExpressions

~MHz

PrnFilePath

NoNetHood

Seed

TypeLocalizedActive

TempFolder

Init

Logon User Name

PackDetails

ShowDegree

part

InstanceType

ThumbsSave

Run

showall

Fresh

ctime

ForegroundLoadedInvalid

DisplayMode

trust_stat

IDUpdatedLocal

D122A61217FB7DC0437

NoDispCPL

Default

ValueEnabledCurrent

Timeout

NoDispBackgroundPage

tgBTnLC

GUID

StartModifiedLast

SlideShowFullScreen

SetupExecute

Reg

HelpLink

MSOGL

TypeModifiedMax

ClearSavedPlatform

ForeColor

URLInfoAbout

2

ShowSystemMenu

LogLevel

33DE92A0894D461857DB

UseProxy

CPU Priority

QuitWithEsc

password

InstallationType

002F16D78AB0E61CC

IfaceLeft

Notification Packages

EventLogLevel

HideSign

speech_flash_override

SyncFiles

xpos

wt_stock_text

AltColor

wave_got_mail

wave_new_mail

Module Path

C:\Users\win7\AppData\Local\Temp\GLF804B.tmp

msglist_retain_focus

last_redirect

AbbrevDesc

auth_password

CommentName

RegSerial

Dictionary

BgsMsndTimeToRunSecs

VuobNZqByW

ShowImageInfo

5

ActiveCompletedFlags

Enabled

TRACE_SVC

runtime

2130B6F1C237F008

ServiceControlManagerExtension

DlgHistory

UseCtxExplorer

Path

DisableRegistryTools

ImagePath

TEMP

CmtText

RSz

System.Design

My Music

use_midi

FontSize

SetVisualStyle

URLUpdateInfo

disable_filter_notify

S0InitialCommand

PrinterName

ShowUnits

TRACE_TIP

WINDOW_HEIGHT

FontBold

PipelineHostReuse

AltEncryptionColor

ShowComment

B87067DDF7D2B09BC

TrapPollTimeMilliSecs

64CC5D8392BD36B54D

link_folder_msglist

Values

DepOfLookAsideBuf

FirstRun

WINDOW_WIDTH

DictSize

nmOXMsqTYn

CmtTextData

ActivePageIndex

f.est

ThumbNailSize

Names

Userinit

FolderHeight

FileHours

3

SystemBiosDate

SkinFolder

LastPage

MediaPath

FileMappingSize

MRU-InitialDir

font

ProcessorNameString

PipelineHostTimeout

Sound

FormatForDisplayHelper

Path0

xq9QCU8W

AuthVer

UIHost

Basis

atime

NumberOfCsPools

SpoolPath

DisableCMD

CheckDate

ypos

shownomicrosoft

PanelPath0

CardLayoutIndex

MSG_CONFIRMCLEAN

PackedCatalogItem

ThumbNailPrnOffset

CleanCount

FontName

Key

HideCursorFullScreen

Random Start

debug

UpdateDays

MM

ImageEditor

238

EulaAccepted

LastAd

ArchivesFirst

DLL

DXTFilterBehavior

ul

File2

GlobalFlag

ProviderId

ListMode

Personal

HelpTelephone

LocalNotifyUrl

ImageInfoRotated

PendingCPUQueue

SoundMoniker

MachineGuid

Scrnsave.exe

UpdateInf

ExePath

Shutdown

GIF to Flash Converter

{69DC4768-446B-4F82-A6B0-63966A243064}

52-54-00-12-35-02

Software\Microsoft\Windows\CurrentVersion\Uninstall\Alexa Booster v3.2

Software\Microsoft\Windows\CurrentVersion\Internet Settings

{828D210F-81E0-4A66-AFF6-EC7105351111}

Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad

Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections

.dss

System\CurrentControlSet\Control\SecurityProviders\Schannel

1

{4DFDC3D9-D63B-4BE0-99AE-F15D9C146A42}

CLSID

sample

System\CurrentControlSet\Services\Tcpip\Parameters

VersionIndependentProgID

SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings

win32

ProxyStubClsid32

Version

SoftWare\FTPWare\CoreFTP\SSH

{7DD95802-9882-11CF-9FA9-00AA006C42C4}

CLSID\{6B7E638F-850A-101B-AFC0-4210102A8DA7}

CLSID\{8D58D690-6B71-4EE8-85AD-006DB0287BF1}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}

COMCTL.SBarCtrl

Software\WinRAR\ArcHistory

Software\Microsoft\Internet Explorer\Main

CLSID\{8B4225C9-1FC7-4474-A463-7C2B92F33F29}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}

Software\Caislabs Software\E-Book Reader

wavfile\Shell\Edit sound file\command

Software\Microsoft\EnterpriseCertificates\Disallowed

CRLs

CTLs

Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\

CurVer

Policies

Software\Classes\CLSID\{1FD44837-913F-CC4D-90E8-1D764693F0C8}\InProcServer32

SoftWare\FTPWare\CoreFTP\TextExt\.cgi

Software\pdfMachine\

Software\WinRAR\Profiles\2

movfile\Shell\Convert video file\command

wmafile\Shell\Edit sound file\command

InprocServer32

CLSID\{612A8624-0FB3-11CE-8747-524153480004}

Software\WinRAR SFX

ProgID

Software\AGG Software\Advanced Serial Port Monitor\Datetime stamp

WinRAR.ZIP\shell\open\command

{919A24EB-2CAF-4E44-BA37-697D94C9265C}

Software\WinRAR\Profiles\0

Software\NCH Software\Debut\Settings

WinRAR.REV\shell\open\command

Microsoft

Software\Microsoft\Windows

Software\Teleca\{E1252473-6306-4d5d-904D-B06AA7F38161}

mpegfile\Shell\Edit video file\command

{91814EC3-B5F0-11D2-80B9-00104B1F6CEA}

{8C3C1B15-E59D-11D2-B40B-00A024B9DDDD}

Software\DealPly

Software\Tom Grandgent\TMail

Software\WinRAR\Setup\.rar

{B4E9747B-C50D-46E4-9802-18342F77F94C}

Software\Microsoft\SystemCertificates\TrustedPeople

ISM

mohfile\shell\open\command

aufile\Shell\Convert sound file\command

Software\WinRAR\Profiles\3

aufile\Shell\Edit sound file\command

COMCTL.Toolbar.1

Software\WinRAR\Setup\.7z

SoftWare\FTPWare\CoreFTP\TextExt\.html

Programmable

Software\Microsoft\Windows\CurrentVersion

{F8740ED8-4CEF-4A56-9E98-8159CFAFB65A}

{3EE77D8B-40C1-4A2A-9B77-421907F02058}

Certificates

CLSID\{8D58D690-6B71-4EE8-85AD-006DB0287BF1}\Implemented Categories

Software\WinRAR\Setup\.arj

{54DADAB2-28A6-11D3-88BA-00C04F72F303}

{65D37452-0EBB-11D3-887B-00C04F72F303}

SoftWare\FTPWare\CoreFTP\Commands\3

Directory\shellex\DragDropHandlers\WinRAR32

Software\WinRAR\Setup\.jar

Software\Software by Design\Password Keeper for Windows 95/NT\DeskTop\Property

.mpdp

{D4FF39BB-1A05-11D3-8896-00C04F72F303}

CLSID\{DF4602CB-018E-4BBD-BC9E-16D87C2D3FB2}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}

ivrfile\shell\open\command

voxfile\Shell\Edit sound file\command

.aac

Software\WinRAR\General\Toolbar

vobfile\Shell\Edit video file\command

SOFTWARE\Microsoft\Windows\CurrentVersion\ime\IMTC70

Software\Microsoft\Windows\CurrentVersion\Explorer

spjfile\shell\open\command

SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\P3P\History

TypeLib

System

Software\AGG Software\Advanced Serial Port Monitor\Files

Software\Microsoft\Internet Explorer

Software\Microsoft

WinRAR\shell\open\command

.gsm

Software\WinRAR\Profiles\1

Software\Software by Design\Password Keeper for Windows 95/NT\Application

Software\Classes\CLSID\{7282E203-2B62-AA1F-1D85-5D65CB4DA1EC}\ProgID

CLSID\{030B4A82-1B7C-11CF-9D53-00AA003C9CB6}

ImageGenCtlGuid

{AA7E2066-CB55-11D2-8094-00104B1F9838}

{91814EC1-B5F0-11D2-80B9-00104B1F6CEA}

Software\Licenses

avifile\Shell\Edit video file\command

CLSID\{5ACBB956-5C57-11CF-8993-00AA00688B10}

Software\WinRAR\Setup

CLSID\{5ACBB958-5C57-11CF-8993-00AA00688B10}

Software\Kanusic\forms\log

Software\WinRAR\Profiles\4

SoftWare\FTPWare\CoreFTP\TextExt\.htpasswd

asffile\Shell\Edit video file\command

CLSID\{8B4225C9-1FC7-4474-A463-7C2B92F33F29}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}

SoftWare\FTPWare\CoreFTP\TextExt\.htaccess

Software\Microsoft\Fusion\GACChangeNotification\Default

SoftWare\FTPWare\CoreFTP\TextExt\.xml

SoftWare\FTPWare\CoreFTP\Coords

SOFTWARE\Microsoft\Windows\CurrentVersion

Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{03BD22A4-B7A6-CC74-A1BA-810F013ABDCD}\ShellFolder

Software

Software\WinRAR\Setup\.tar

SOFTWARE\Classes\magnet\shell\open\command

TreatAs

.nef

.bms

{AA7E2065-CB55-11D2-8094-00104B1F9838}

{3F5913F3-36BC-4902-925F-1DF63BCAEB57}

{AA7E2061-CB55-11D2-8094-00104B1F9838}

SoftWare\FTPWare\CoreFTP\TextExt\.dthml

CLSID\{026371C0-1B7C-11CF-9D53-00AA003C9CB6}

{9CFCFE67-0BB8-43E0-8425-378D0A02ACE4}

CLSID\{9C453F21-396D-11D5-9734-70E252C10127}\LocalServer32

Software\NCH Swift Sound\Switch\Registration

SoftWare\anote\data

Software\FinePrint Software\FinePrint5\IniHash

Configuration

RPBX_8300

CLSID\{0713E8A2-850A-101B-AFC0-4210102A8DA7}

{CCB8A712-4C52-4E18-A5E0-6626E1A05E72}

Software\Microsoft\EnterpriseCertificates\TrustedPeople

wavfile\Shell\Convert sound file\command

Software\Microsoft\SystemCertificates\Disallowed

{C0D1AACA-ECB9-4C90-BB54-A99A7BA16700}

Software\UselessCreations\none

Software\Classes\CLSID\{DAC309A1-B1A1-3961-6701-5C8DD8366B6B}\InProcServer32

spjfile\shell

{44D61997-B7D4-11D2-80BA-00104B1F6CEA}

{AD93A6F8-C4E1-4056-A9A7-34C28A371094}

CLSID\{C577BF34-8FBF-4419-84C9-9D2039967C12}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}

Software\Microsoft\SystemCertificates\trust

NCTImageView.ImageView.1

SoftWare\FTPWare\CoreFTP\Opts

Software\Classes\Applications\BitTorrent.exe\shell

Software\Policies\Microsoft\SystemCertificates\TrustedPeople

pwkfile

Software\Microsoft\SystemCertificates\Root

SOFTWARE\Microsoft\Windows NT\CurrentVersion\MultiMedia\SystemProfile

CLSID\{9C453F21-396D-11D5-9734-70E252C10127}\ProgID

{8C3C1B10-E59D-11D2-B40B-00A024B9DDDD}

CLSID\{1F6F8D20-1B7D-11CF-9D53-00AA003C9CB6}

NCTImageView.ImageView

.mpeg2

CLSID\{B66834C6-2E60-11CE-8748-524153480004}

SoftWare\FTPWare\CoreFTP\TextExt\.cpp

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C3F3165C-74D3-6FDB-3274-14FDA8698CFA}

{AA7E2068-CB55-11D2-8094-00104B1F9838}

NCTImageFile.ImageFile.1

CLSID\{6027C2D4-FB28-11CD-8820-08002B2F4F5A}

{F9AA043F-D7DE-43B5-9D0F-753CB71BF2FB}

MiscStatus

COMCTL.Slider.1

EMAPVIEW.eMapViewCtrl.8.1

CurrentVersion

Software\Microsoft\EnterpriseCertificates\Root

CLSID\{F748EC99-A815-4248-8829-DAA17D44BC85}

SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant

SOFTWARE\Motive\Rainier\Logger

FLAGS

Software\7-ZIP\FM

SoftWare\anote

SoftWare\FTPWare\CoreFTP\TextExt\.css

{1E411CE8-FE8B-4973-B8E0-6EA2CC3C6B06}

Software\Microsoft\SystemCertificates\My

SOFTWARE\PDFComplete\PDF Complete

Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted

{8C3C1B12-E59D-11D2-B40B-00A024B9DDDD}

{6B15A454-9067-4878-B10E-B9DFFE03049D}

Calibration

SoftWare\FTPWare\CoreFTP

Software\Microsoft\Windows\CurrentVersion\SharedDLLs

Windows

{4053B4C4-C607-4D5E-A858-9889907F069A}

vocfile\Shell\Edit sound file\command

MRU-Files-BMP&PCX

Software\anote

{348440B0-C79A-11D3-B28B-00C04F59FBE9}

Software\Microsoft\SystemCertificates\SmartCardRoot

CLSID\{0713E8A8-850A-101B-AFC0-4210102A8DA7}

InProcServer32

Software\BitTorrent\BitTorrent

{8415DDF9-1C1D-11D3-889D-00C04F72F303}

.wma

.xvid

{8C3C1B16-E59D-11D2-B40B-00A024B9DDDD}

CLSID\{58DA8D93-9D6A-101B-AFC0-4210102A8DA7}

COMCTL.ListViewCtrl

Software\DirectDownloader\OpenBitCoin2

.ogg

.wav

Software\Policies\Microsoft\SystemCertificates\trust

Software\Classes\CLSID\{1FD44837-913F-CC4D-90E8-1D764693F0C8}

CLSID\{1E216240-1B7D-11CF-9D53-00AA003C9CB6}

{AA7E2069-CB55-11D2-8094-00104B1F9838}

Software\AGG Software\Advanced Serial Port Monitor\Display

Software\Microsoft\Windows\CurrentVersion\Uninstall

divxfile\Shell\Edit video file\command

CLSID\{5ACBB955-5C57-11CF-8993-00AA00688B10}

{AA7E2084-CB55-11D2-8094-00104B1F9838}

{91814EC5-B5F0-11D2-80B9-00104B1F6CEA}

{251753FA-FB3B-11D2-8842-00C04F72F303}

CLSID\{6B7E63A3-850A-101B-AFC0-4210102A8DA7}

CLSID\{9ED94440-E5E8-101B-B9B5-444553540000}

SoftWare\FTPWare\CoreFTP\Ext\1447677125

CLSID\{8D58D690-6B71-4EE8-85AD-006DB0287BF1}

NCTImageFile.ImageFile

{0AFAAE7C-3A03-4030-9EEB-9EB52FB52328}

{BE6115A1-7DE5-48DC-AD2A-25060E00FCE2}

CLSID\{C577BF34-8FBF-4419-84C9-9D2039967C12}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}

Software\Microsoft\SystemCertificates\CA

CLSID\{58DA8D8A-9D6A-101B-AFC0-4210102A8DA7}

Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID

CurrentControlSet

1.0

CLSID\{58DA8D96-9D6A-101B-AFC0-4210102A8DA7}

CLSID\{6B7E6393-850A-101B-AFC0-4210102A8DA7}

NCTImageConvert.ImageConvert

Software\Cheat Engine

.vox

{AA7E2067-CB55-11D2-8094-00104B1F9838}

Software\Kanusic\forms\main

Software\Macromedia\Shockwave 8

CLSID\{62823C20-41A3-11CE-9E8B-0020AF039CA3}

.moh

COMCTL.TabStrip.1

Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD44837-913F-CC4D-90E8-1D764693F0C8}

WinRAR.REV\DefaultIcon

Software\Microsoft\Windows Script Host\Settings

bmsfile\shell

Software\Classes\CLSID\{725667FB-EE4E-4FC5-525E-611FF120B177}\ProgID

0

Software\WinRAR\Setup\.ace

SoftWare\FTPWare\CoreFTP\TextExt\.php

Explorern

Folder\shellex\ContextMenuHandlers\WinRAR

{CC096170-E2CB-11D2-80C8-00104B1F6CEA}

Software\WinRAR\Setup\Links

{F88703D4-8132-452C-9FF0-486649621966}

CLSID\{DF4602CB-018E-4BBD-BC9E-16D87C2D3FB2}\Implemented Categories

ComCtl2.Animation.1

Software\Microsoft\Windows\CurrentVersion\Uninstall\BitTorrent

wscsvc

Software\Microsoft\Windows\CurrentVersion\Uninstall\WMA Converter Setup

SYSTEM\CurrentControlSet\Control\StorageDevicePolicies

{2583251F-0A04-11D3-886B-00C04F72F303}

NCTImageFile.DLL

Software\VB and VBA Program Settings\CCleaner\Options

Software\Classes\CLSID\{725667FB-EE4E-4FC5-525E-611FF120B177}\InProcServer32

Software\SystemSafe\

CLSID\{0713E8D2-850A-101B-AFC0-4210102A8DA7}

Software\Policies\Microsoft\SystemCertificates\Disallowed

Software\WinRAR\Interface\Themes

SoftWare\FTPWare\CoreFTP\TextExt\.inc

wpsfile\Shell\Convert file type\command

Software\Classes\.torrent\OpenWithProgids

Software\Microsoft\RestartManager\Session0000

SoftWare\FTPWare\CoreFTP\TextExt\.h

.avi

WinRAR\shellex\ContextMenuHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}

WinRAR.ZIP\shellex\ContextMenuHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}

Software\Wow6432Node\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje

COMCTL.ImageListCtrl

SOFTWARE\Classes\dchub\Shell\Open\Command

{91814EBF-B5F0-11D2-80B9-00104B1F6CEA}

{D4FF39B9-1A05-11D3-8896-00C04F72F303}

ToolboxBitmap32

CLSID\{373FF7F0-EB8B-11CD-8820-08002B2F4F5A}

Ebkp.EbkProtocol.1

Software\WinRAR\General

exefile\shellex\PropertySheetHandlers\{B41DB860-64E4-11D2-9906-E49FADC173CA}

Services

CLSID\{9ED94444-E5E8-101B-B9B5-444553540000}

Software\Classes\CLSID\{725667FB-EE4E-4FC5-525E-611FF120B177}

software\Conduit\AppPaths\Debut.exe

{AA7E2062-CB55-11D2-8094-00104B1F9838}

Software\FreshDevices\FreshDownload\MimeType\video/x-msvideo

Software\NCH Swift Sound\Components\shndec

Software\ProcessLasso

WinRAR.ZIP\shellex\PropertySheetHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}

DeviceInstances

*\shellex\ContextMenuHandlers\WinRAR32

8.1

{1F9922A2-F026-11D2-8822-00C04F72F303}

NCTImageConvert.DLL

Software\FreshDevices\FreshDownload\MimeType\application/zip

SharedAccess

jpegfile\Shell\Create slideshow\command

SOFTWARE\PDFComplete\PDF Complete\Update

Software\Microsoft\Windows\CurrentVersion\Uninstall\Debut

{54DADAB3-28A6-11D3-88BA-00C04F72F303}

WinRAR\shellex\DropHandler

Software\NCH Software\Components\shndec

Software\Classes\CLSID\{1FD44837-913F-CC4D-90E8-1D764693F0C8}\ProgID

Software\WinRAR\Setup\.gz

CLSID\{58DA8D8F-9D6A-101B-AFC0-4210102A8DA7}

Software\Classes\CLSID\{DE2A1B0C-4390-0FED-13E7-7B3DB8C49401}

Folder\shellex\ContextMenuHandlers\WinRAR32

SoftWare\FTPWare\CoreFTP\TextExt\.log

Software\FreshDevices\FreshDownload\MimeType\application/x-gzip

Software\NCH Software\Debut

.aif

m4vfile\Shell\Convert video file\command

StandardProfile

{DAB9BF17-267D-11D3-88B6-00C04F72F303}

Software\Software by Design\Password Keeper for Windows 95/NT\DeskTop\Editor

CLSID\{8B4225C9-1FC7-4474-A463-7C2B92F33F29}

Software\GetData\RecoverMyFiles v4

{FA2FDCBD-0CE5-4A1E-9B72-91C535677B9D}

SoftWare\FTPWare\CoreFTP\Global

CLSID\{9C453F21-396D-11D5-9734-70E252C10127}

Software\Software by Design\Password Keeper for Windows 95/NT\DeskTop\Options

LiveX_v8320

{8C3C1B13-E59D-11D2-B40B-00A024B9DDDD}

flacfile\Shell\Convert sound file\command

.aiff

Folder\shellex\DragDropHandlers\WinRAR

Applications\uninstall.exe

SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Software\FreshDevices\FreshDownload\MimeType\video/quicktime

pwkfile\DefaultIcon

COMCTL.TreeCtrl

Software\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje

HELPDIR

mpgfile\Shell\Convert video file\command

CLSID\{612A8628-0FB3-11CE-8747-524153480004}

Software\Classes\CLSID\{7282E203-2B62-AA1F-1D85-5D65CB4DA1EC}\InProcServer32

{761C8359-55AF-4E7B-9C83-C1A927E0F617}

Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DAC309A1-B1A1-3961-6701-5C8DD8366B6B}

wmafile\Shell\Convert sound file\command

Software\Microsoft\GDIPlus

Software\Microsoft\EnterpriseCertificates\trust

avifile\Shell\Convert video file\command

Software\FreshDevices\FreshDownload\MimeType\audio/x-wav

WinRAR.REV

SOFTWARE\Classes\adc\DefaultIcon

Software\Software by Design\Password Keeper for Windows 95/NT\DeskTop\GetFile

System\CurrentControlSet\Control\MediaProperties\PrivateProperties\DirectInput

CLSID\{F13B38F2-4869-5605-2D00-E9E5E3AF0FA8}

CLSID\{C4C252F3-9F5D-44E0-A00F-AADB3A83AE33}

{8C3C1B14-E59D-11D2-B40B-00A024B9DDDD}

Ebkp.EbkProtocol

WinRAR.ZIP

voxfile\Shell\Convert sound file\command

Explorer

{AA7E2060-CB55-11D2-8094-00104B1F9838}

mp3file\Shell\Edit sound file\command

SoftWare\FTPWare\CoreFTP\TextExt\.cfm

Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4341CABF-2170-12FB-7613-907A36DBD8BD}

{CA3D12A7-712C-41B8-B767-1B4E67895D10}

SoftWare\FTPWare\CoreFTP\TextExt\.mak

Software\Microsoft\Windows\CurrentVersion\App Paths\SAMPLE

xvidfile\Shell\Convert video file\command

.mpeg

neffile\Shell\Create slideshow\command

Software\Gentee\Paths

Paint.Picture\Shell\Convert image file\command

Software\Microsoft\EnterpriseCertificates\CA

mpdpfile\shell\open\command

Software\Software by Design\Password Keeper for Windows 95/NT\Options

pdffile\Shell\Convert file type\command

SoftWare\FTPWare\CoreFTP\TextExt\.bash

Software\Microsoft\Windows\CurrentVersion\App Paths\WinRAR.exe

CLSID\{373FF7F4-EB8B-11CD-8820-08002B2F4F5A}

.pdf

NCTImageTransform.ImageTransform

ftp\DefaultIcon

COMCTL.TreeCtrl.1

NCTImageTransform.ImageTransform.1

mpdpfile\shell

sample.eBookNSHandler\Clsid

ivrfile\shell

.au

CLSID\{5ACBB957-5C57-11CF-8993-00AA00688B10}

<NULL>

Software\multisearchbar

SOFTWARE\GetPrivate\Components

{B721648C-A813-41DE-B74F-2660F1B0669F}

{1B1B8830-C559-11D3-B289-00C04F59FBE9}

CLSID\{DF4602CB-018E-4BBD-BC9E-16D87C2D3FB2}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}

{5E84053B-D4D2-476B-B7A8-991034836E41}

Software\Microsoft\Windows NT\CurrentVersion

.spj

.flac

Software\WinRAR\Setup\.bz2

SoftWare\FTPWare\CoreFTP\Ext\1447677126

Control

.pwk

Software\FreshDevices\FreshDownload\MimeType\video/mpeg

Software\WinRAR\General\Toolbar\Layout

Software\Microsoft\Windows Script\Settings

SOFTWARE\Classes\magnet

SOFTWARE\Classes\dchub\DefaultIcon

Software\Microsoft\Registration\NCH

ftp\shell\open\command

.vob

{33D9A762-90C8-11D0-BD43-00A0C911CE86}

Software\Microsoft\Windows\CurrentVersion\Uninstall\{E1252473-6306-4d5d-904D-B06AA7F38161}

Component Categories

Software\FreshDevices\FreshDownload\MimeType\video/msvideo

Software\Software by Design\Password Keeper for Windows 95/NT\Version

COMCTL.Slider

software\UniProductiv

.m4v

mp4file\Shell\Convert video file\command

Software\WinRAR\Setup\.uue

Software\UselessCreations\UC3D

aacfile\Shell\Convert sound file\command

Applications\anote.exe

SOFTWARE\WrapApp

Software\Software by Design\Password Keeper for Windows 95/NT\DeskTop\Setup

.doc

CLSID\{6A1CC876-E8B1-4175-B6F7-8B0A67E6FE87}

.mpg

SOFTWARE\Classes\dchub

NCTImageConvert.ImageConvert.1

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C670DCAE-E392-AA32-6F42-143C7FC4BDFD}

Software\7-ZIP

.wps

Position-Main

Security Center

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing

dssfile\shell

COMCTL.Toolbar

ComCtl2.UpDown.1

COMCTL.SBarCtrl.1

movfile\Shell\Edit video file\command

.mp3

VID_80EE&PID_0021

mp4file\Shell\Edit video file\command

Software\Microsoft\ActiveMovie\devenum

mpgfile\Shell\Edit video file\command

Software\Classes\CLSID\{4341CABF-2170-12FB-7613-907A36DBD8BD}

Software\NCH Software\Debut\Hotkey\0

Software\Policies\Microsoft\SystemCertificates\CA

Software\Classes\CLSID\{DE2A1B0C-4390-0FED-13E7-7B3DB8C49401}\InProcServer32

dctfile\shell\open\command

ComCtl2.Animation

m4vfile\Shell\Edit video file\command

SoftWare\FTPWare\CoreFTP\TextExt\.text

.rev

Software\Classes\CLSID\{4341CABF-2170-12FB-7613-907A36DBD8BD}\ProgID

WinRAR.ZIP\shellex\DropHandler

gsmfile\Shell\Convert sound file\command

CLSID\{F481F745-5C57-4f71-95B4-78546706C7A9}

Software\Microsoft\Windows\CurrentVersion\RunOnce

mp3file\Shell\Convert sound file\command

Software\captchahacker\chfbpeoplefetcher\Updates

.ivr

Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform

WinRAR\DefaultIcon

Software\Classes\BitTorrent\shell\open\command

{F6EC16D6-4CC0-4E2B-93EC-6D6686A6BCA6}

CLSID\{030B4A80-1B7C-11CF-9D53-00AA003C9CB6}

CLSID\{DF4602CB-018E-4BBD-BC9E-16D87C2D3FB2}

Software\WinRAR\Setup\.lzh

giffile\Shell\Convert image file\command

{7DD95801-9882-11CF-9FA9-00AA006C42C4}

dctfile\shell

SoftWare\FTPWare\CoreFTP\Prefs

*\shellex\ContextMenuHandlers\WinRAR

SoftWare\FTPWare\CoreFTP\Ext

SOFTWARE\Classes\adc

CLSID\{8B4225C9-1FC7-4474-A463-7C2B92F33F29}\Implemented Categories

Software\AGG Software\Advanced Serial Port Monitor\System events

Software\WinRAR\Setup\.cab

Software\Microsoft\RFC1156Agent\CurrentVersion\Parameters

vobfile\Shell\Convert video file\command

Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7282E203-2B62-AA1F-1D85-5D65CB4DA1EC}

NCTImageTransform.DLL

meofile\shell

Software\Classes\CLSID\{4341CABF-2170-12FB-7613-907A36DBD8BD}\InProcServer32

aifffile\Shell\Edit sound file\command

WinRAR\shellex\PropertySheetHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}

CLSID\{C577BF34-8FBF-4419-84C9-9D2039967C12}

Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{725667FB-EE4E-4FC5-525E-611FF120B177}

pngfile\Shell\Convert image file\command

rtffile\Shell\Convert file type\command

Drive\shellex\DragDropHandlers\WinRAR32

Software\Microsoft\DownloadManager

Software\AGG Software\Advanced Serial Port Monitor\COM

divxfile\Shell\Convert video file\command

mohfile\shell

exefile\shellex\PropertySheetHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}

Software\Software by Design\Password Keeper for Windows 95/NT\DeskTop\PutFile

docfile\Shell\Convert file type\command

sample.eBookNSHandler

WinRAR\shellex\PropertySheetHandlers\{B41DB860-64E4-11D2-9906-E49FADC173CA}

mpeg2file\Shell\Edit video file\command

sw3dbaddriverlist2

m4afile\Shell\Edit sound file\command

software\skwgt\sdata

{0BA4BA22-2EF0-11D3-88C8-00C04F72F303}

Folder\shellex\DragDropHandlers\WinRAR32

bmsfile\shell\open\command

{2AA28573-D3A4-4491-9199-5853F3C71BB7}

{39040274-3D36-11D3-88EE-00C04F72F303}

Uninstall

{8F10EDF3-5404-407E-8FB3-6D7979B8DA16}

CLSID\{C577BF34-8FBF-4419-84C9-9D2039967C12}\Implemented Categories

Software\FreshDevices\FreshDownload\MimeType\application/octet-stream

xvidfile\Shell\Edit video file\command

docxfile\Shell\Convert file type\command

dssfile\shell\open\command

oggfile\Shell\Edit sound file\command

.voc

{8415DE38-1C1D-11D3-889D-00C04F72F303}

Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

SoftWare\FTPWare\CoreFTP\TextExt\.pl

SoftWare\FTPWare\CoreFTP\Commands\2

Software\FreshDevices\FreshDownload\MimeType\audio/mpeg

.mov

{858CB9FB-21B3-4557-93E2-3C41A438E6CB}

{DED5FEEC-225A-11D3-88AA-00C04F72F303}

meofile\shell\open\command

aiffile\Shell\Edit sound file\command

SoftWare\FTPWare\CoreFTP\TextExt\.htm

SoftWare\FTPWare\CoreFTP\TextExt\.txt

{91814EB1-B5F0-11D2-80B9-00104B1F6CEA}

Software\FreshDevices\FreshDownload\MimeType\application/x-msdownload

Software\Gentee

{8C3C1B11-E59D-11D2-B40B-00A024B9DDDD}

Microsoft\VSD\DeviceEmulator

FirewallPolicy

SoftWare\FTPWare\CoreFTP\TextExt\.csv

Software\FreshDevices\FreshDownload\MimeType\application/vnd.rn-realmedia

Directory\shellex\ContextMenuHandlers\WinRAR32

mpeg2file\Shell\Convert video file\command

SOFTWARE\Microsoft\Windows NT\CurrentVersion\MultiMedia\SystemProfile\Tasks

Software\Classes\CLSID\{7282E203-2B62-AA1F-1D85-5D65CB4DA1EC}

Vallen JPegger

aacfile\Shell\Edit sound file\command

Drive\shellex\DragDropHandlers\WinRAR

SoftWare\FTPWare\CoreFTP\TextExt\.asp

{3533BF4F-4917-4B8D-9E3B-1CCA5A06CC14}

{AF57A6F0-4101-11D3-88F6-00C04F72F303}

WinRAR.ZIP\DefaultIcon

giffile\Shell\Create slideshow\command

pwkfile\Shell\Print\Command

{7BB118F1-6D5B-470E-82D0-AFB042724560}

COMCTL.ProgCtrl

Software\Software by Design\Password Keeper for Windows 95/NT\Font\Printer

Software\Microsoft\Windows\Help

SoftWare\FTPWare\CoreFTP\TextExt\.shmtl

ComCtl2.UpDown

Software\Classes\BitTorrent\shell

Software\The Silicon Realms Toolworks\Armadillo

Paint.Picture\Shell\Create slideshow\command

Software\Software by Design\Password Keeper for Windows 95/NT\DeskTop\Window

{E3DBFD93-EA9C-4FF1-A320-C6EF3A8A08EA}

SYSTEM\CurrentControlSet\Control\Session Manager\Environment

asffile\Shell\Convert video file\command

Parameters

www.program4pc.com

{C4AAC3B1-C547-11D3-B289-00C04F59FBE9}

Software\FreshDevices\FreshDownload\MimeType\application/rar

Software\Classes\CLSID\{DE2A1B0C-4390-0FED-13E7-7B3DB8C49401}\ProgID

neffile\Shell\Convert image file\command

ebk

mpegfile\Shell\Convert video file\command

Software\FreshDevices\FreshDownload\MimeType\audio/wav

pngfile\Shell\Create slideshow\command

SoftWare\FTPWare\CoreFTP\TextExt\.bat

Software\FreshDevices\FreshDownload\MimeType\application/arj

WinRAR.ZIP\shellex\ContextMenuHandlers\{B41DB860-64E4-11D2-9906-E49FADC173CA}

.divx

.vpj

{0B5D43D4-3AA6-41AF-9F65-0882CCD514BD}

Software\Classes\CLSID\{DAC309A1-B1A1-3961-6701-5C8DD8366B6B}\ProgID

Software\Microsoft\SystemCertificates\AuthRoot

.meo

COMCTL.ListViewCtrl.1

.mp4

Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing

Vallen-Systeme GmbH

{7D795704-435D-11D3-88FF-00C04F72F303}

Software\Kanusic\forms\settings

Software\Software by Design\Password Keeper for Windows 95/NT\Options\PageSetup

PROTOCOLS\Name-Space Handler\ftp\*

Directory\shellex\DragDropHandlers\WinRAR

COMCTL.ProgCtrl.1

SOFTWARE\Classes\adc\Shell\Open\Command

{AF57A6F1-4101-11D3-88F6-00C04F72F303}

Software\Classes\Applications\BitTorrent.exe\shell\open\command

Software\Microsoft\DirectInput\MostRecentApplication\

COMCTL.TabStrip

RPBAudio_v7000

WinRAR

SOFTWARE\AdwCleaner

{E1B9357F-24B9-11D3-88B2-00C04F72F303}

Software\Microsoft\Windows\CurrentVersion\App Paths\CoreFTP.exe

SYSTEM\CurrentControlSet\Services\USBSTOR

Software\FreshDevices\FreshDownload\MimeType\application/x-zip-compressed

Software\FreshDevices\FreshDownload\MimeType

Software\AGG Software\Advanced Serial Port Monitor

SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Internet Download Manager

CLSID\{8D58D690-6B71-4EE8-85AD-006DB0287BF1}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}

uicontrol

SOFTWARE\ProcessLasso\Language

Software\WinRAR\Setup\.z

SOFTWARE\Classes\magnet\DefaultIcon

Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DE2A1B0C-4390-0FED-13E7-7B3DB8C49401}

.dct

Software\Policies\Microsoft\SystemCertificates\Root

COMCTL.ImageListCtrl.1

CLSID\{0713E8D8-850A-101B-AFC0-4210102A8DA7}

.asf

Software\Classes\.torrent

Software\WinRAR\Setup\.zip

CLSID\{030B4A81-1B7C-11CF-9D53-00AA003C9CB6}

{6A10A80B-D0F7-4380-BD8D-285728A1142D}

Software\Classes\CLSID\{DAC309A1-B1A1-3961-6701-5C8DD8366B6B}

jpegfile\Shell\Convert image file\command

SYSTEM

SoftWare\FTPWare\CoreFTP\TextExt\.c

vpjfile\shell\open\command

pwkfile\Shell\Open\Command

vpjfile\shell

NCTImageView.DLL

WinRAR.ZIP\shellex\PropertySheetHandlers\{B41DB860-64E4-11D2-9906-E49FADC173CA}

Software\anote\data

sw3dbaddriverlist1

Software\FreshDevices\FreshDownload\MimeType\video/x-ms-asf

Software\NCH Software\Debut\Hotkey

{8148C439-4B4B-4057-BC5F-8F95518974C6}

SOFTWARE\GetPrivate

WinRAR\shellex\ContextMenuHandlers\{B41DB860-64E4-11D2-9906-E49FADC173CA}

Directory\shellex\ContextMenuHandlers\WinRAR

.m4a

C:\Users\win7\AppData\Local\Temp\nsa1D48.tmp\SimpleSC.dll

\\.\COM209

C:\Users\win7\AppData\Local\Temp\shndec_.cab

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Related Programs\Slideshow Creator Software.lnk

c:\users\win7\appdata\local\tempfolder\qiiorasikv\xeunbuejyades.dat

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\top-line[1].gif

\\.\J:

C:\Users\win7\AppData\Local\Temp\nst2848.tmp

C:\Data\Textures\Gui\Host_game_frame.dds

C:\Users\win7\AppData\Local\Temp\nsq9487.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\WF8Y9C1N.txt

C:\Users\win7\AppData\Local\Temp\7zS2C7E.tmp\settings.ini

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\Infobar\image\infobar_login.png

C:\Users\win7\AppData\Local\Temp\nsu717E.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsr2E93.tmp\nsArray.dll

C:\Windows\GeoOCX\WebCam\20090916\GeoCodecReg\GeoImageEnhance.dll

C:\Users\win7\AppData\Local\Temp\nsn6FCD.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsm2FF9.tmp\GetPrivateInstaller_woautorun.exe

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\G9I2KVST.txt

\\.\COM139

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\VIDO.ini

C:\Users\win7\AppData\Local\Temp\nsbAB5F.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\000a40c1.a

C:\Users\win7\AppData\Local\Temp\pftD7AF~tmp\pftw1.pkg

C:\Users\win7\AppData\Roaming\XLEThjJwJF\9124.xml

C:\Users\win7\AppData\Local\Temp\nsb4533.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\f[1].js

C:\Users\win7\AppData\Local\Temp\nsq76D2.tmp\System.dll

C:\Windows\system32\goo\neal\notc.dat

C:\Users\win7\AppData\Local\Temp\free-invoice.gif

C:\Windows\system32\PartyPoker_Installer\SmartInstaller.exe

C:\Users\win7\AppData\Local\Temp\nsw852A.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\7fa4afec6c5bbf4ae0e9f0a6485532ac\volcano.exe

C:\Users\win7\AppData\Local\Temp\nsz8067.tmp\\420921765

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Branding-UltimateN-Client-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM11.tmp

C:\sample

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/Editorb6.bmp

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/1navmenu.jpg

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat

C:\Users\win7\AppData\Local\Temp\nskA6BB.tmp

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\Infobar\image\infobar_close_hover.png

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM16.tmp

C:\Users\win7\AppData\Local\Temp\nsl7B53.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Tempfolder\DoltuJonisep\nssutil3.dll

\\.\COM120

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_No8.bmp

\\.\COM62

C:\Users\win7\AppData\Local\Temp\nst1AFB.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\b4e8c2bf475e972ff1129a25635128c5\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Local\Temp\nse28D5.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-EU83C.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\f[1].js

mchppIc.exe

C:\Users\win7\AppData\Local\Tempfolder\DoltuJonisep\freebl3.dll

C:\Users\win7\AppData\Local\Temp\nsy1945.tmp

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/Editorb2.bmp

C:\Users\win7\AppData\Local\Temp\nsi2F54.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsr2E92.tmp

C:\Users\win7\AppData\Local\Temp\is-40HMF.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-FD9AA.tmp\sample.tmp

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/section7.html

C:\Windows\GeoOCX\WebCam\20090916\IG_STable.xml

C:\Windows\GeoOCX\WebCam\20090916\alert.wav

C:\Windows\CFVS_HookDll.pdb

C:\Windows\shdocvw.dll

C:\Users\win7\AppData\Local\Temp\nsq7A88.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsr2FCB.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\d06fcbb59363a1adb6768ef5c595d7c2\pricepeep.exe

C:\Users\win7\AppData\Local\Temp\12aubfff5\license.txt

C:\Users\win7\AppData\Local\Temp\nsf2A30.tmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\dmax.dll

c:\Program Files\Alexa Booster v3.2\Proxy\google-keywords.txt

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~zh-CN~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\7zS55DB.tmp\jjhklgikohjiaahlibnfgegobedhpgmf\sqlite.js

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM67.tmp

C:\Users\win7\AppData\Local\Temp\nsp8601.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsu25A0.tmp\nsArray.dll

\\.\COM75

C:\Users\win7\AppData\Local\Temp\nsu7799.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Adobe\Updater5\AUTrans.xml_

C:\Users\win7\AppData\Local\Temp\nsm56AC.tmp\nsArray.dll

C:\symbols\dll\CFVS_HookDll.pdb

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui

C:\Windows\GeoOCX\WebCam\20090916\GeoCodecReg\GeoCodecReg.exe

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerDist-Client-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

32788R22FWJFW\setpath.cfxxe

\\.\V:

MSWINSCN.OCX

C:\Users\win7\AppData\Local\Temp\nsu8F4C.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsi190A.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsy4046.tmp\SimpleSC.dll

C:\Windows\system32\symbols\dll\wntdll.pdb

c:\download\driver\12950\Program\DIFxAPI.dll

C:\Users\win7\AppData\Local\Temp\aiw686671.bmp

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/insideout.jpg

C:\Users\win7\AppData\Local\Temp\7zS7BFD.tmp\pnadleldkhfpclgofgnnmhblfcamfhfa\background.html

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred\oskpredbase.xml

C:\Users\win7\AppData\Local\Temp\aaiw686673.bmp

C:\Users\Public\Downloads\dm-743B.tmp

C:\Users\win7\AppData\Local\Temp\is-97GVD.tmp\_isetup\_shfoldr.dll

C:\Windows\system32\COMCAT.DLL

C:\Windows\system32\l_intl.nls

C:\Users\win7\AppData\Local\Temp\nsa2BC4.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\7zS77D6.tmp

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/Editorb9.bmp

\\.\COM187

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/copy14.html

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/Code.cod

C:\Users\win7\AppData\Local\Temp\DIQ\flashplayer_151\DomaIQ.exe

C:\Users\win7\AppData\Local\Temp\nsw399A.tmp\System.dll

c:\IES_Files\Outdoor\Bollards\OSA8R-HID\OSA8R-100PSMH120-AS.IES

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Basic-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsi1A20.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsv2B09.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\QQBrowser.exe

C:\Users\win7\AppData\Local\Temp\mss863E.tmp

\\.\COM74

C:\Users\win7\AppData\Local\Tempfolder\DoltuJonisep\softokn3.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\T1CNG3WW.txt

C:\Users\win7\AppData\Local\Temp\nsp1CFF.tmp\\227176954

32788R22FWJFW\n.pif

C:\Windows\GeoOCX\WebCam\20090916\GeoCodecReg\G264.inf

32788R22FWJFW\023.dat

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/copy6.html

C:\Users\win7\AppData\Local\Temp\000a397e.a

C:\Users\win7\AppData\Local\Temp\nsx23D5.tmp\nsArray.dll

C:\Windows\GeoOCX\WebCam\20090916\GvMegaPixelViewer.xml

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\AcutVista_SSD-7971D.ini

C:\Program Files\Chameleon Clock\Sounds\Clocks\Bigben2.wav

C:\image\baritem_delete.png

C:\Program Files\Chameleon Clock\Sounds\Clocks\Bigben.wav

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-Package~31bf3856ad364e35~amd64~~8.0.7601.17514.cat

\\.\COM211

C:\Users\win7\AppData\Local\Temp\nsn9631.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nsv4429.tmp\\427697726

C:\Users\win7\AppData\Local\Temp\nst1B49.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\5a6e0d7e7fb82588b081b16c0bd88029\volcano.exe

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM83.tmp

c:\OkiDriver\OKIB2200B2400\AskOki.dll

C:\Users\win7\AppData\Local\Temp\nsm6D0E.tmp\NSISdl.dll

C:\pkey.txt

C:\Windows\GeoOCX\WebCam\20090916\GMultiCast.dll

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\copy11.html

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM77.tmp

\\.\COM237

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~nl-NL~7.1.7601.16492.cat

C:\Windows\system32\691187.tmp

C:\Users\win7\AppData\Local\Temp\nsg1FD8.tmp\SimpleSC.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\pcdSkin.ini

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\Outbox.ZDT

C:\Users\win7\AppData\Local\Temp\nsgBB49.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsg7ACE.tmp\NSISdl.dll

\\.\COM33

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/Editorb4.bmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\2V693FZO.txt

C:\sample_hosts.txt

C:\Users\win7\AppData\Local\Temp\fe9505b7f8b60bc6e1a74dc5c757fe1e\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Local\Temp\nsc1790.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsc8C0C.tmp\System.dll

\\.\Scsi7:

C:\Users\win7\AppData\Local\Temp\is-S45LH.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\nsx7139.tmp\\1035797652

C:\Windows\system32\dssenh.dll

\\.\COM88

C:\Users\win7\AppData\Local\Temp\DIQ\test-av13490_004\config.dll

C:\Users\win7\AppData\Roaming\FileZilla\filezilla.xml

32788R22FWJFW\xpreg.dat

C:\Users\win7\AppData\Local\Temp\9c2704c22ceab0ebc352c74d631e8669\volcano.exe

C:\Users\win7\AppData\Local\Temp\pft3E71.tmp\data1.cab

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\Btn_Dir.png

C:\Users\win7\AppData\Local\Temp\nst3294.tmp

C:\Users\win7\AppData\Local\Temp\nss1703.tmp

C:\Users\win7\AppData\Local\Temp\nse73D4.tmp\SimpleSC.dll

C:\ProgramData\BrouwsEe2save\uninstall.exe

c:\Program Files\Alexa Booster v3.2\Skins\scanner.jpg

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\webctrl.dll

C:\Users\win7\AppData\Local\Temp\Cleaning.ico

C:\WINDOWS\FONTS\VERDANA.TTF

32788R22FWJFW\Assoc.cmd

C:\Users\win7\AppData\Local\Temp\nsl2C9F.tmp\436686940

C:\Users\win7\Desktop

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\NW7QUT47.txt

C:\Users\win7\AppData\Local\Temp\nse2542.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nsr2F7D.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\Infobar\image\infobar_login.png

C:\Users\win7\AppData\Local\Temp\nsnB3E7.tmp\769355975

C:\Temp

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/buywordsbad.gif

C:\Users\win7\AppData\Local\Temp\nsb1F1C.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Network Shortcuts

C:\Windows\System32\DriverStore\infpub.dat

C:\Users\win7\AppData\Local\Temp\nsq76D2.tmp\SimpleSC.dll

C:\Windows\System32\dnsapi.dll

C:\Windows\SysWOW64\Wbem\textvaluelist.xsl

\\.\COM61

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\left.bmp

C:\Intel\Logs\IntelChipset.log

C:\Users\win7\AppData\Local\Temp\nst585C.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\FDM1WNVG.txt

C:\Users\win7\AppData\Local\Temp\nsiB13F.tmp

C:\Users\win7\AppData\Local\Temp\nsm56AC.tmp\NSISdl.dll

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/killerlayout.jpg

C:\Users\win7\AppData\Local\Temp\nss22D5.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsr90DC.tmp\NSISdl.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~hu-HU~7.1.7601.16492.cat

C:\useragents.txt

C:\Users\win7\AppData\Local\Microsoft\Windows\Caches\cversions.1.db

C:\Users\win7\AppData\Local\Temp\\~DFCB0D5091C0D5E805.TMP

C:\Windows\wkernel32.pdb

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\SoundTap Streaming Recorder.lnk

C:\Users\win7\AppData\Local\Temp\rd7CD8.tmp\____swmxs

C:\Users\win7\AppData\Local\Temp\nsq4F84.tmp\nsExec.dll

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\pbbkg.png

\\.\COM159

C:\Windows\System32\WMAUDI~1.EXE

C:\Users\win7\AppData\Local\Temp\nso8AB8.tmp\\494401783

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\WListViewEx.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\NH7IS26Q.txt

C:\Users\win7\AppData\Local\Temp\sample.rbt

C:\Data\Scripts\Gui\MessageBoxConnecting.gui

C:\Users\win7\AppData\Local\Temp\nsgC3AA.tmp\nsArray.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\GV_GeoPTZini.dll

\\.\COM224

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\keypadbase.xml

C:\ProgramData\Barowasse2saave

C:\Users\win7\AppData\Local\Temp\nsgC3AA.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsx250D.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsb2ED1.tmp\SimpleSC.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\EXLI65HT.txt

C:\ProgramData\SharedSettings.ccs

\\.\COM231

C:\Users\win7\AppData\Local\Temp\nsz8FE5.tmp\nsArray.dll

C:\Users\win7\AppData\Roaming\Opera\Opera\opcacrt6.datC:\Users\win7\AppData\Roaming\Opera\Opera\profile\opcacrt6.dat

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\section6.html

C:\Users\win7\AppData\Local\Temp\nsw2DA6.tmp\nsArray.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~en-US~7.1.7601.16492.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-NetworkDiagnostics-DirectAccessEntry-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsa1F60.tmp\\996606040

C:\Users\win7\AppData\Local\Temp\nsv7A59.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich6usb.inf

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\ZND28V7V.txt

C:\Users\win7\AppData\Local\Temp\nsw2E15.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM44.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\7K79YTXG.txt

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich6ide.inf

C:\Users\win7\AppData\Local\Temp\PB7DC5.tmp

C:\Windows\GeoOCX\WebCam\20090916\GeoRunTimeMergeAVI.dll

C:\Users\win7\AppData\Local\Temp\nsa4F73.tmp

C:\Users\win7\AppData\Local\Temp\nsr2E93.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nsd257B.tmp\1008489509

C:\Users\win7\AppData\Local\Temp\nso7641.tmp

C:\Users\win7\AppData\Local\Temp\nsr2F2F.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\010914i[1].htm

c:\Program Files\Common Files\Microsoft Shared\ink\hr-HR\tipresx.dll.mui

C:\Users\win7\AppData\Local\Temp\is-97GVD.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnadleldkhfpclgofgnnmhblfcamfhfa

C:\Users\win7\AppData\Local\Temp\12aubfff5\CustomerJoinPlan.txt

C:\Users\win7\AppData\Roaming\Opera\Opera\opcacrt6.dat

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/Editorb3.bmp

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/copy7.html

C:\Users\win7\AppData\Local\Temp\nsp81FD.tmp\nsArray.dll

\\.\COM20

c:\Program Files\Common Files\Microsoft Shared\ink\Content.xml

C:\Users\win7\AppData\Local\Temp\nsa7AC6.tmp\SimpleSC.dll

\\.\Scsi1:

C:\Users\win7\AppData\Local\Temp\nsf1C2F.tmp\572138058

C:\Users\win7\AppData\Local\Temp\nsl1FEC.tmp

C:\Users\win7\AppData\Local\Temp\{0654AC99-2BF5-4929-9C44-4B6872A6C4E0}\_ISMSIDEL.INI

C:\Users\win7\AppData\Local\Temp\pftD7AF~tmp\Disk1\data2.cab

C:\Users\win7\AppData\Local\Temp\f2cc559679c8d17d7bf9c117baf6aa0a\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Local\Temp\nsgBB49.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nst1AFB.tmp\SimpleSC.dll

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/section5.html

C:\Users\win7\AppData\Local\Temp\aut3056.tmp

c:\OkiDriver\OKIB2200B2400\OPPERLOC.DLL

C:\Users\win7\AppData\Local\Temp\nsr6C43.tmp\NSISdl.dll

C:\Data\Scripts\Gui\PageSingleMission.gui

c:\Program Files\Alexa Booster v3.2\Skins\step2.jpg

C:\Users\win7\AppData\Local\Temp\nsg206A.tmp\Splash_logo.bmp

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/copy10.html

C:\Users\win7\AppData\Local\Temp\64b86246e9aa3fa79b9535db49b20b8d\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsh79EE.tmp

C:\Windows\system32\ebkp.dll

c:\OkiDriver\OKIB2200B2400\opne002d.scr

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-VistaPlus-Update~31bf3856ad364e35~amd64~~11.2.9600.16428.cat

C:\Users\win7\AppData\Local\Temp\nsh6CEF.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich6id2.inf

C:\Users\win7\Desktop\symbols\dll\CFVS_HookDll.pdb

32788R22FWJFW\FKMGen.cmd

C:\Users\win7\AppData\Local\Temp\nsw6B78.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsm2F5E.tmp\SimpleSC.dll

C\sr\i7ApaaLclTm\X00TPBee

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\copy5.html

c:\download\driver\12950\SoftwareDriver\Driver\CMxPCI8.INF

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~he-IL~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nshC833.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM20.tmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZRU.bmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~bg-BG~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nst2711.tmp\NSISdl.dll

C:\Windows\GeoOCX\WebCam\20090916\IA_STable_001.xml

C:\Users\win7\AppData\Local\Temp\nsj3EBB.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\3db95c0d2bab524b5259c84257550ed1\volcano.exe

c:\Program Files\Common Files\Microsoft Shared\ink\fi-FI\tipresx.dll.mui

\\.\O:

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_14.bmp

C:\Users\win7\AppData\Local\Temp\nssD71A.tmp\Processes.dll

C:\Users\win7\AppData\Roaming\QuwoxaBATH\JQJDxakvoU.exe

C:\Users\win7\AppData\Local\Temp\nsfC49.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsgBB49.tmp\nsDialogs.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GJrYnjUOgh.lnk

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\Dlg_Btn.png

C:\Users\win7\AppData\Local\Temp\nswAEF6.tmp\\1170874219

\\.\E:

C:\Users\win7\AppData\Local\Temp\Scan.ico

C:\Data\Scripts\Gui\PageJoinGame.gui

C:\Users\win7\AppData\Local\Temp\nsn8BFD.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsj1BA7.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsw7D18.tmp\NSISdl.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\GVNVR_SDK.ini

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/section1.html

\\.\Q:

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/discounts.html

32788R22FWJFW\ERDNT.e_e

\\.\COM252

C:\Users\win7\AppData\Local\Temp\nsn3133.tmp\System.dll

C:\Windows Update\update.bat

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_11.bmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Canon_C300NA.ini

C:\Users\win7\AppData\Local\Temp\nsb5F81.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nsoE348.tmp\V8._85296_20150814221218.exe

C:\Users\win7\AppData\Local\Temp\nsb21D1.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsp2883.tmp\SimpleSC.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_4.bmp

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\asl-icn-mini-home-32x32x2.gif

C:\Python27\exe\DVRArchiveViewer.pdb

C:/Windows/system32/MSCOMCT2.OCX

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\Editorb4.bmp

C:\Users\win7\AppData\Local\Temp\\~DF7856710A8FAD5A32.TMP

\\.\COM59

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~sl-SI~7.1.7601.16492.cat

\\.\COM161

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\Btn_Dir.png

C:\Users\win7\AppData\Local\Temp\nss4B52.tmp\909029299

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\nJfxcWgTsy.lnk\desktop.ini

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\TPHUFDXJ.txt

C:\Users\win7\AppData\Local\Temp\nsr2EE1.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsp78B3.tmp\setup_31011.exe

\\.\COM174

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\ext[1].js

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\7185bdf1gw1ewyl50mtpeg20go0a5u10[1].gif

C:\Users\win7\AppData\Local\Temp\nsq7720.tmp\nsArray.dll

c:\title.jpg

C:\Users\win7\AppData\Local\Temp\nsh6D3D.tmp\NSISdl.dll

\\.\PhysicalDrive8

\\.\COM47

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\ui[1].js

C:\Users\win7\AppData\Local\Temp\nss7ACA.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\e873621278eb045fa3d6cb0e9d983d10\volcano.exe

C:\Data\Textures\Gui\EditBoxBack2.dds

C:\Users\win7\AppData\Local\Temp\nsb7BFE.tmp

C:\Users\win7\AppData\Local\Temp\nsc3141.tmp

C:\Users\win7\AppData\Local\Temp\nso71A2.tmp\1047987572

C:\Users\win7\AppData\Local\Temp\nsf34A9.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\is-C85U7.tmp\_isetup\_shfoldr.dll

\\.\COM105

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\529U1EM5.txt

\\.\pipe\pipe_console

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/outsidein.jpg

C:\Windows\system32\GLBSINST.%$D

C:\Users\win7\AppData\Local\Temp\7zS55DB.tmp\jjhklgikohjiaahlibnfgegobedhpgmf

C:\Users\win7\AppData\Local\Temp\nsh223F.tmp\System.dll

C:\ProgramData\CoffeeCup Software\SharedSettings.ccs

C:\Users\win7\AppData\Local\Temp\nsk7894.tmp\NSISdl.dll

C:\Windows\GeoOCX\WebCam\20090916\GeoEditAVIDllV2.dll

C:\Users\win7\AppData\Local\Temp\nsq7720.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\E220AutoRunLog.tmp

C:\Users\win7\AppData\Local\Temp\nsz78A3.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsr2E93.tmp\\1150307986

ReadMe.txt

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_1.bmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZLD.bmp

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM19.tmp

C:\Users\win7\AppData\Local\Temp\nsy8713.tmp\\1150069636

C:\Users\win7\AppData\Local\Temp\nskB7C0.tmp\\844504445

C:\Windows\GeoOCX\WebCam\20090916\SceneChangeDetection.xml

/dev/urandom

32788R22FWJFW\zip.cfxxe

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers.xml

C:\Users\win7\AppData\Local\FlashFXP\4\History.dat

C:\Users\win7\AppData\Local\Temp\rd7CD8.tmp\main.lzx.swf

C:\Users\win7\AppData\Local\Temp\nsp81FD.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\SharedSettings_1_0_5.ccs

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\Font Xtra.x32

32788R22FWJFW\svchost.vista.dat

C:\Users\win7\AppData\Local\Temp\nsg6866.tmp\780660593

C:\Users\win7\AppData\Local\Temp\nsl1E23.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\DIQ\flashplayer_151\routes.dll

C:\Windows\System32\WindowsPowerShell\v1.0\symbols\dll\wkernelbase.pdb

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-LanguagePack-Package-wrapper~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\9c2704c22ceab0ebc352c74d631e8669\OpenCL.dll

C:\Users\win7\AppData\Local\Temp\nsfF539.tmp\nsisdl.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\8FCTP7J9.txt

\\.\COM113

C:\Users\win7\AppData\Local\Temp\{0903A383-0598-4DEC-8D80-08B12F2C46B7}\0x0422.ini

C:\Users\win7\AppData\Local\Temp\nsc30F4.tmp\System.dll

C:\Windows\system32\ascIPNT.DLL

C:\Users\win7\AppData\Local\Temp\nsq7A88.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nss80A2.tmp\NSISdl.dll

autocad_32bit_Keygen.exe

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\iml32.dll

C:\Users\win7\AppData\Local\Temp\nss17EE.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\8353107b4a7ee1912afdcc36da509643\BitAcceleratorDDLRinstaller.exe

\\.\COM27

C:\Users\win7\AppData\Local\Temp\nsdB20B.tmp\1203085571

32788R22FWJFW\NirCmd.chm

32788R22FWJFW\md5sum00.pif

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\VBOXXHARDDISK_VB66c88d96-4b6cc820[1].htm

C:\Windows\System32\WindowsPowerShell\v1.0\wkernelbase.pdb

C:\Data\KeyboardMap.info

C:\Python27

C:\Users\win7\AppData\Local\Temp\nsz7681.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsz1AD7.tmp\\1114010628

C:\Windows\syswow64\kernel32.dll

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\CallbackCtrl.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~lv-LV~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsk86CB.tmp\NSISdl.dll

C:\Program Files\Alexa Booster v3.2\uninstall.exe

C:\Users\win7\AppData\Local\Temp\nssAD44.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Tempfolder\DoltuJonisep\PomtoKof.dat

\\.\Scsi6:

C:\Users\win7\AppData\Roaming\Opera\Opera x64\opcacrt6.dat

c:\Users\win7\AppData\Local\Temp\sfx1\BB40eng.dix

C:\Users\win7\AppData\Local\Temp\nsb1ECF.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nskB80E.tmp\\766223370

C:\Users\win7\AppData\Local\Temp\nsz32B5.tmp\System.dll

C:\Windows\SysWOW64\ieframe.dll

c:\download\driver\12950\SoftwareDriver\Driver\AUDIO3D3.DLL

C:\Users\win7\Desktop\GIF to Flash Converter.lnk

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/formula1.html

\\.\PhysicalDrive2

C:\Users\win7\AppData\Local\Temp\nsz8067.tmp\nsArray.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ImageBasedSetup-IE-Package-Base-Downlevel~31bf3856ad364e35~amd64~~6.3.9600.16428.cat

\\.\SIWDEBUG

C:\Users\win7\AppData\Local\Temp\nsr397B.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\{0903A383-0598-4DEC-8D80-08B12F2C46B7}\_ISMSIDEL.INI

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\extreme[1].htm

C:\Users\win7\AppData\Local\Temp\nsfD7E9.tmp\\169530211

C:\Users\win7\AppData\Local\Temp\nsb4835.tmp\System.dll

\\.\COM146

C:\Users\win7\AppData\Local\Temp\GdiPlus.dll

C:\Users\win7\AppData\Local\Temp\nsp78B3.tmp\V8._85296_20150814221218.exe

C:\Users\win7\AppData\Local\Temp\nsl399E.tmp\NSISdl.dll

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-phonetic.xml

c:\sample.

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\service\perfctrl.dll

\\.\COM154

C:\Users\win7\AppData\Local\Temp\nsn3132.tmp

\\.\VBoxGuest

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\Microsoft.VC90.CRT\msvcr90.dll

C:\Users\win7\AppData\Local\Temp\nso5FD6.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nso2273.tmp\NSISdl.dll

C:\Windows\GeoOCX\WebCam\20090916\RPB_8300.ocx

\\.\Scsi2:

c:\users\win7\appdata\local\temp\info.txt

C:\Users\win7\AppData\Local\Temp\is-S45LH.tmp\_isetup\_shfoldr.dll

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ja-jp-sym.xml

32788R22FWJFW\List-D.bat

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM60.tmp

C:\Users\win7\AppData\Local\Temp\nsy90EA.tmp\System.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\ZC.dll

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/1navright.jpg

C:\Data\Textures\Gui\Options_Assignments_01.dds

C:\Users\win7\AppData\Local\Temp\rd7CD8.tmp\____mmfp.ocx

c:\Program Files\Common Files\Microsoft Shared\ink\ar-SA\tipresx.dll.mui

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\botva2.dll

C:\Users\win7\AppData\Local\Temp\nsy7191.tmp

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\QQBrowserFrame.dll

C:\Users\win7\AppData\Local\Temp\nsc230A.tmp\cpSetup.exe

C:\Users\win7\AppData\Local\Temp\nsc6DB9.tmp\nsArray.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Info.ini

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\LEJB3BSY.txt

C:\Program Files\Chameleon Clock\Sounds\Clocks\wwatchalarm.wav

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\Btn_Done.png

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\GRJ0THYF.txt

C:\Users\win7\AppData\Roaming\Microsoft

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\dm_bar_up[1]

C:\Users\win7\AppData\Local\Temp\DIQ\test-av13688_004\OfferBrokerage_14003.exe

\\.\COM21

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM72.tmp

C:\Users\win7\AppData\Local\Temp\nsl7B53.tmp\System.dll

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/mixup.jpg

C:\Users\win7\AppData\Local\Temp\is-U098A.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\nsz2953.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nsg14EF.tmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\utils[1].js

c:\download\driver\12950\SoftwareDriver\Driver\CMUDAX64.CAT

c:\countdown.py

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\WSysInfo.dll

sfiles\bimage.tmp

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\pbn-1B727E14D52A42D1AF46944087C66BCB.zdt

sfiles\skin.ini

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Kalatal.ini

C:\Program Files\Chameleon Clock\Sounds\Clocks\chime.mp3

C:\Users\win7\AppData\Local\Temp\nsy25F8.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsbAB5F.tmp\\1012881966

C:\Users\win7\AppData\Local\Temp\nsfEA73.tmp\NSISdl.dll

c:\users\win7\appdata\local\tempfolder\ortmp\orionhelper.bit

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_No0.bmp

C:\Users\win7\AppData\Local\Temp\nsg1DB6.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\Dlg_Btn_Cancel.png

APLOC.dll

C:\Users\win7\AppData\Local\Temp\nspB38C.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsg6C03.tmp\SimpleSC.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\DTGBUK95.txt

C:\Users\win7\AppData\Local\Temp\nsb2DE7.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM9.tmp

C:\totalcmd.inc

C:\Users\win7\AppData\Local\Temp\nsuCBD7.tmp

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM25.tmp

C:\Windows\SysWOW64\wshom.ocx

C:\Users\win7\AppData\Local\Temp\nsr2E93.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsn7A19.tmp\\853323409

C:\Program Files\Motion-Twin\haxe\lib/std/.current

C:\Users\win7\AppData\Local\Temp\nsjFCDB.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\\~DF8AD34D8AC56E6D14.TMP

C:\Data\Textures\Gui\CreateMission_Save_03.dds

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\DZOXFMT5.txt

C:\Data\Scripts\Gui\MessageBoxConnectionFailed.gui

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZZIn.bmp

C:\winrar.lng

C:\Users\win7\AppData\Local\Temp\nsd70C7.tmp\1195322159

32788R22FWJFW\handle.cfxxe

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\Editorb9.bmp

c:\download\driver\12950\SoftwareDriver\Driver\CMxPCI2.INF

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\Editorb3.bmp

C:\Users\win7\AppData\Local\Temp\nsq1D0A.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsbC511.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nss1752.tmp\\757915156

C:\Users\win7\AppData\Local\Temp\7zS7336.tmp\515f52b8125e4.tlb

C:\Users\win7\AppData\Local\Temp\7zS77D6.tmp\hpcdeopkgienceaajfkaohfhnacpfamh\manifest.json

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\YVO36RN2.txt

C:\Users\win7\AppData\Local\Temp\nseB5CC.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\pftB084.tmp\Disk1\layout.bin

\\.\Scsi14:

32788R22FWJFW\w_sock.dll

C:\Users\win7\AppData\Local\Temp\nsu96A9.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\DIQ\test-av6941_004\OfferBrokerage_14003.exe

C:\Users\win7\AppData\Local\Temp\004cf942.a

C:\Users\win7\AppData\Local\Temp\nsp1C62.tmp

C:\Temp\installtemped

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\Z9VYN99P.txt

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~ja-JP~7.1.7601.16492.cat

C:\Settings\Recents.xml

C:\Users\win7\AppData\Local\Temp\nsaF4CC.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsr7990.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsb1F1C.tmp\\742967182

/dev/random

C:\Users\win7\AppData\Local\Temp\c634e7f446ed0baaaffb97e9c00223b7\volcano.exe

C:\Data\Textures\Gui\MPlrTeamStatsBack1.dds

C:\Users\win7\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config

C:\Users\win7\AppData\Local\Temp\nsz58CB.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsi3082.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsm6C72.tmp\Processes.dll

32788R22FWJFW\License\UnxUtilsDist.html

C:\Users\win7\AppData\Local\Temp\nsb2ED1.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsv2B09.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsh54C2.tmp\NSISdl.dll

C:\Data\Scripts\Gui\MessageBoxInvalidPilotName.gui

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GetPrivate\GetPrivate.lnk

C:\Users\win7\AppData\Roaming\rLEThjJw\lJFKrvSGxB.exe

C:\Users\win7\AppData\Local\Tempfolder\ortmp\nss3.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\H9GGFBWE.txt

C:\Users\win7\AppData\Local\Temp\nsp1D4D.tmp\System.dll

fVzWJrYnjUO.dat

\\.\COM68

C:\Users\win7\AppData\Local\Temp\nsm6D0E.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsw7C7C.tmp\\267185768

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\downloading_icon[1]

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/buywords.gif

C:\Users\win7\AppData\Local\Temp\nsa753C.tmp\System.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\223DE96EE265046957A660ED7C9DD9E7_EFF9B9BA98DEAA773F261FA85A0B1771

C:\Users\win7\AppData\Local\Temp\nsy7192.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsf7910.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\ci0-temp\logo.bmp

\\.\COM126

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\RX214D.ini

C:\Users\win7\AppData\Local\Temp\nsy2694.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsw9718.tmp\System.dll

C:\Windows\System32\schtasks.exe

C:\Users\win7\AppData\Local\Temp\nsz417F.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsi19D1.tmp

C:\Users\win7\AppData\Local\Temp\nskB80E.tmp\766223370

\\.\COM18

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\error_icon[1]

\\.\COM216

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\Bkg.bmp

C:\Users\win7\Downloads\desktop.ini

C:\Users\win7\AppData\Local\Temp\nsc3058.tmp\\711675182

C:\Users\win7\AppData\Local\Temp\nsy7596.tmp\\619467634

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\Macromedia.lok

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~th-TH~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\12aubfff5\appdata\\{6970B802-2F13-4038-B620-33B0211D26A0}

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM58.tmp

C:\Users\win7\AppData\Local\Temp\nsx16D5.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsq1D0A.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM76.tmp

C:\Users\win7\AppData\Local\Temp\aut305A.tmp

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM54.tmp

C:\Users\win7\AppData\Local\Temp\nsn2F1A.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\F6YQHU60.txt

C:\Users\win7\AppData\Local\Temp\nsgDDF8.tmp\\462088281

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\Infobar\css\base.css

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Minking.ini

C:\Users\win7\AppData\Local\Temp\nsaCE68.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nsr20B2.tmp\NSISdl.dll

32788R22FWJFW\iexplore.exe

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/formula7.html

WinRAR.chm

C:\Users\win7\AppData\Roaming\e\config.db

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/Editorb10.bmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\GB0CO6KD.txt

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpbejmkogknnkjbfcacgbckomaofefka\1\manifest.json

C:\Users\win7\AppData\Local\Temp\7fa4afec6c5bbf4ae0e9f0a6485532ac\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Local\Temp\nsx9767.tmp\nsArray.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\SonySNC_RX530.ini

C:\Users\win7\AppData\Local\Temp\nsh2027.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\4ae6cf3c7fbd3414df26e8400c7d510e\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM74.tmp

C:\image\baritem_contents.png

32788R22FWJFW\restore_pt.vbs

C:\ProgramData\FlashFXP\4\Sites.dat

\\.\COM81

C:\Users\win7\AppData\Local\Temp\7fa4afec6c5bbf4ae0e9f0a6485532ac\pricepeep.exe

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-Package~31bf3856ad364e35~amd64~en-US~11.2.9600.16428.cat

\\.\SICE

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/copy9.html

C:\Users\win7\AppData\Local\Temp\nse7338.tmp\SimpleSC.dll

C:\32788R22FWJFW\iexplore.exe

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_rtl.xml

C:\Users\win7\AppData\Local\Temp\nsg6BB5.tmp

C:\Users\win7\AppData\Local\Temp\nsg206A.tmp\AdvSplash.dll

C:\Windows\GIF to Flash Converter Uninstaller.exe

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\webctrl.dll

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkmejkdfcnncpgjajbiahlekpebhcnhl

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\asl-icn-mini-join-32x32x2.gif

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-NFS-ClientSKU-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\7zS2C7E.tmp\jkmejkdfcnncpgjajbiahlekpebhcnhl\background.html

C:\Users\win7\AppData\Local\Temp\nsc7BA4.tmp\System.dll

\\.\COM203

C:\Users\win7\AppData\Local\Temp\nsk1DCA.tmp\System.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_No3.bmp

C:\Users\win7\AppData\Local\Temp\nsz18BE.tmp\NSISdl.dll

C:\Windows\GeoOCX\WebCam\20090916\LiveX_8320.ocx

C:\Users\win7\AppData\Local\Temp\nsr1493.tmp\\1078530471

C:\Users\win7\AppData\Local\Temp\nsgBB49.tmp\WrapAppSrc

C:\Users\win7\AppData\Local\Temp\nse2888.tmp\\1146630580

C:\Users\win7\AppData\Local\Temp\nsj1BF5.tmp\SimpleSC.dll

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\JEC_D.ini

32788R22FWJFW\rogues.dat

\\.\COM5

c:\$Recycle.Bin\S-1-5-21-3979321414-2393373014-2172761192-1000\desktop.ini

\\.\COM133

C:\Users\win7\AppData\Local\Temp\YandexBarIE00000.log

C:\Users\win7\AppData\Local\Temp\nsg6E82.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\226fda2318382dfba2850343961c3116\pricepeep.exe

C:\Users\win7\AppData\Local\Temp\Creative_ALchemy_AL6_Cleanup.0001.dir.0000\~efe2.tmp

C:\Users\win7\AppData\Local\Temp\nsd81CA.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~ru-RU~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsw6B78.tmp\\127274093

C:\Users\win7\AppData\Local\Temp\nsi2F54.tmp\System.dll

C:\ProgramData\CoffeeCup Software\SharedSettings_1_0_5.ccs

C:\Users\win7\AppData\Roaming\FastStone\FSIV\FSViewer.db

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\AJN45OY1.txt

C:\uninstal.ini

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\copy2.html

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\Editorb10.bmp

C:\ProgramData\SharedSettings.sqlite

C:\Users\win7\AppData\Local\Temp\nsxA014.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\Dlg_Btn_OK.png

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\ui[1].css

C:\Users\win7\AppData\Local\Temp\nss4B52.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\8[1].htm

C:\Users\win7\AppData\Local\Temp\nsm225E.tmp\SimpleSC.dll

Uninstall.lst

C:\Data\Scripts\Gui\PageJoinGameTeams.gui

C:\Users\win7\AppData\Local\Temp\nsd31E8.tmp

C:\Users\win7\AppData\Local\Temp\nsq9488.tmp\StdUtils.dll

C:\32788R22FWJFW\Rkey.cmd

C:\Users\win7\AppData\Local\Temp\pftD7AF~tmp\Disk1\Setup.ini

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM21.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\MBGU6WFP.txt

C:\Users\win7\AppData\Local\Temp\\~DF1B290EAC90A85F43.TMP

C:\Users\win7\AppData\Local\Temp\nsv6826.tmp

C:\Users\win7\AppData\Local\Temp\nsi3D34.tmp\105448008

C:\Users\win7\AppData\Local\Temp\nsx23D5.tmp\365011575

C:\Users\win7\AppData\Local\Temp\nsu7799.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nssAD44.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\71d8cec149ec9115178e8020d4510ae0\volcano.exe

C:\Windows\GeoOCX\WebCam\20090916\Setup.exe

C:\Users\win7\AppData\Local\Temp\nsk3479.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM39.tmp

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM51.tmp

C:\Users\win7\AppData\Local\Temp\nsl2C9F.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsj1BA7.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\\Creative_ALchemy_AL6_Cleanup.0001.dir.0000\PfdRun.pfd

C:\Users\win7\AppData\Local\Temp\nsuB310.tmp\606766963

wdmaud.drv

32788R22FWJFW\FIXLSP.bat

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/section2.html

C:\Users\win7\AppData\Local\Temp\nst2675.tmp\\1002973400

C:\Users\win7\AppData\Local\CoffeeCup Software\SharedSettings.ccs

c:\download\driver\12950\SoftwareDriver\Driver\CMxPCI1.INF

C:\Users\win7\AppData\Local\Temp\nsp842D.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\e873621278eb045fa3d6cb0e9d983d10\BitAcceleratorDDLRinstaller.exe

\\.\COM153

\\.\COM95

data.pck

32788R22FWJFW\Boot.bat

C:\Windows\System32\run-time.vbs

C:\Users\win7\AppData\Local\Temp\nsj726D.tmp\SimpleSC.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Messoa.ini

C:\AdobeAUM_rootCert.cer

C:\Users\win7\AppData\Local\Temp\nsj8371.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsv1DC4.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\S0VA6ZC2.txt

C:\Users\win7\AppData\Local\Temp\nsd3015.tmp\System.dll

C:\Python27\Scripts\symbols\dll\wntdll.pdb

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/Editorb7.bmp

C:\Windows\MSCOMCTL.OCX

C:\Users\win7\AppData\Local\Temp\nsr1F7B.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nsi324C.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\WListViewEx.dll

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad.xml

http://www.raidcall.com/

null/.haxelib

C:\Users\win7\AppData\Local\Temp\nsv4429.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Downloaded Installations\{ECF6FE39-A8B0-411B-83AC-75A17875FE6F}\rserv34pl.msi

C:\Users\win7\AppData\Local\Temp\nsqF529.tmp

newtmail.exe

C:\Users\win7\AppData\Local\Temp\nskCCD2.tmp\System.dll

C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll

\\.\COM26

C:\Users\win7\AppData\Roaming\EbkReader\{B9EBB217-D189-44F1-9FA3-CE24806469F0}\favorites.dat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Wired-Network-Drivers-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/formula4.html

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\VU41QHLK.txt

32788R22FWJFW\c.bat

C:\Users\win7\AppData\Local\Temp\nsgDDF8.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkniaejinldagieikdjacfpfchffkhhi\1\manifest.json

rar.lng

C:\Users\win7\AppData\Local\Temp\nsw20D2.tmp\SimpleSC.dll

\\.\COM39

C:\Users\win7\AppData\Local\Temp\nsw7D18.tmp\\1029906993

\\.\COM119

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\Code.cod

\\.\COM118

C:\Users\win7\AppData\Local\Temp\nsr2E93.tmp\1150307986

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich5core.inf

\\.\COM140

\\.\COM141

C:\Users\win7\AppData\Local\Temp\aut1A32.tmp

Descript.ion

C:\Users\win7\AppData\Local\Temp\nsw4FAE.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\7zSB2EF.tmp\dpbejmkogknnkjbfcacgbckomaofefka\background.html

C:\Users\win7\AppData\Local\Temp\nsl4D08.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\S2S56WZ5.txt

C:\Users\win7\AppData\Local\Temp\is-40HMF.tmp\_isetup\_setup64.tmp

\\.\COM55

C:\Users\win7\AppData\Local\Temp\nso27DC.tmp\211411778

\\.\COM106

C:\Users\win7\AppData\Local\Temp\b82b985bee9cc6a610d7c50fc7373126\pricepeep.exe

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM5.tmp

C:\Users\win7\AppData\Local\Tempfolder\ortmp\libplds4.dll

C:\Users\win7\AppData\Local\Temp\nsv511F.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\PrScrn.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\CPT.ini

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\QQBrowser.exe

\\.\COM82

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hArVzWJrYn.lnk

C:\Users\win7\AppData\Local\Temp\7zS7336.tmp\lkniaejinldagieikdjacfpfchffkhhi\content.js

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp

C:\Users\win7\AppData\Local\Temp\{33A25180-3328-4EB4-9337-9DA72FD0395B}\_ISMSIDEL.INI

c:\download\driver\12950\CmSetx.dll

C:\Users\win7\AppData\Local\Temp\nsi254B.tmp

C:\Users\win7\AppData\Roaming\eLEThjJwJF\dKrvSGxBAr.exe

C:\Users\win7\AppData\Local\Temp\aut3057.tmp

C:\Users\win7\AppData\Local\Tempfolder\ortmp\orionHelper.bit

C:\Users\win7\AppData\Local\Temp\nsdB20B.tmp\\1203085571

C:\Users\win7\AppData\Local\Temp\nsr1619.tmp\\128704196

C:\Users\win7\AppData\Local\Temp\nsv37BA.tmp

C:\Users\win7\AppData\Local\Temp\nsb204B.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsy4046.tmp\System.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~tr-TR~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nso8AB8.tmp\NSISdl.dll

C:\Windows\system32\spool\DRIVERS\x64\3\STDSCHMX.GDL

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-OfflineFiles-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsb1F1C.tmp\742967182

C:\Users\win7\AppData\Local\Temp\nsr1493.tmp\NSISdl.dll

C:\Windows\ciplListBar3N.ocx

C:\Users\win7\AppData\Local\Temp\nsu8CFA.tmp\\1109788421

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~zh-HK~7.1.7601.16492.cat

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager\Internet Download Manager.lnk

\\.\Scsi11:

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\MOWTPOC2.txt

C:\Users\win7\AppData\Local\Temp\nslB5DE.tmp

C:\Users\win7\AppData\Local\Temp\nsm1695.tmp

C:\Users\win7\AppData\Local\Temp\622210edd7d2b5052ce79dc1b1dcd9d6\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsp29FE.tmp

C:\Users\win7\AppData\Local\Temp\nsu7799.tmp\\680383182

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\extreme[1].htm

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/formula3.html

C:\Users\win7\AppData\Local\Temp\nsu8CFA.tmp\nsArray.dll

32788R22FWJFW\AWF.cmd

C:\Users\win7\AppData\Local\Temp\is-U84KA.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\7zS2C7E.tmp\jkmejkdfcnncpgjajbiahlekpebhcnhl\sqlite.js

Preloader.jpg

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\GETZAPPED.GIF

C:\Users\win7\AppData\Local\Temp\nsg2D69.tmp

C:\Windows\system32\Msstkprp.dll

C:\Users\win7\AppData\Local\Temp\nsv7A59.tmp\\583544826

C:\Users\win7\AppData\Local\Temp\nsw2DC7.tmp

C:\Users\win7\AppData\Roaming\DUOghDDY\cNXdLBfEuN.exe

C:\Users\win7\AppData\Local\Temp\Elite_Xl2k\GCXL4081.PPD

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\dirapi.mch

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM81.tmp

C:\Users\win7\AppData\Local\Temp\12aubfff5\appdata\\{3E9C7A5B-D249-4C28-A451-53E1024AD354}

C:\Users\win7\AppData\Local\Temp\nsm7E60.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsp9949.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nspA63F.tmp\System.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\exit.bmp

C:\Users\win7\AppData\Local\Temp\nsl1D39.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsv1EA5.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsj1B0A.tmp

C:\ZapImages\slb-BevelEdges.gif

C:\Users\win7\AppData\Local\Temp\nsk86CC.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\Dlg_Btn_Close.png

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\ea.xml

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM28.tmp

C:\services.exe

C:\Windows\system32\Player\Lily_Player.cfg

C:\Users\win7\AppData\Local\Temp\nso723E.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\FileZilla\recentservers.xml

C:\Users\Public\Downloads\dm-BDC1.tmp

C:\Users\win7\AppData\Local\Temp\nsw399A.tmp\SimpleSC.dll

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/mixandmatch.html

C:\Users\win7\AppData\Local\Temp\nsyCBBF.tmp\NSISdl.dll

C:\Program Files\Chameleon Clock\Sounds\Clocks\clock03.wav

C:\Users\win7\AppData\Local\Temp\nsg2DB8.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-JKHB7.tmp\sample.tmp

C:\tcmdkey.zip

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\Btn_Done.png

C:\Users\win7\AppData\Local\Temp\nsk9246.tmp\NSISdl.dll

C:\Windows\system32\ffffffffffffffff

C:\Users\win7\AppData\Local\Temp\nsx3CA6.tmp

C:\Users\win7\AppData\Local\Temp\nskB31F.tmp\nsArray.dll

C:\Windows\COMCAT.DLL

32788R22FWJFW\catchme.cfxxe

\extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}\chrome.manifest

C:\Users\win7\AppData\Local\Temp\\~DF2EA58404E2934CF8.TMP

C:\Users\win7\AppData

C:\Users\win7\AppData\Local\Temp\nseBF64.tmp\\390787467

C:\Users\win7\AppData\Local\Temp\{0654AC99-2BF5-4929-9C44-4B6872A6C4E0}\Setup.INI

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/copy5.html

C:\Windows\ciplListBar.ocx

C:\Users\win7\AppData\Local\Temp\nsh2EF0.tmp

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/formula5.html

C:\Users\win7\AppData\Local\Temp\nso4E8D.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\A6JPRX2B.txt

C:\Windows\VGSCDAPI.VXD

C:\Users\win7\AppData\Local\Temp\nsmC422.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nse7385.tmp

C:\Users\win7\AppData\Local\Temp\nsb1F6A.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~de-DE~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\epc-D95220E65D4B47B19A3EEF7AD1F83832.zdt

C:\Users\win7\AppData\Local\Temp\nsr6C43.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsf79FB.tmp\nsArray.dll

C:\Users\win7\AppData\Local\GlobalSCAPE\CuteFTP\sm.dat

C:\Users\win7\AppData\Local\Temp\nsi2FE6.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\aiw686781.EXE

C:\Windows\system32\wbem\XSL-Mappings.xml

C:\Users\win7\AppData\Local\Temp\A223AD2D825482AE.TMP

C:\Windows\system32\stdole32.tlb

C:\Users\win7\AppData\Local\Temp\nsv3915.tmp\\1041041361

C:\Users\win7\AppData\Local\Temp\nsz78A3.tmp\System.dll

32788R22FWJFW\CregC.dat

C:\Users\win7\AppData\Roaming\e\e.db

C:\Users\win7\AppData\Local\Temp\7zS2C7E.tmp\jkmejkdfcnncpgjajbiahlekpebhcnhl\manifest.json

\\.\COM90

C:\Users\win7\AppData\Local\Temp\\~DF9C61883FE875624E.TMP

C:\Users\win7\AppData\Local\Temp\nswC408.tmp\System.dll

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_altgr.xml

C:\ProgramData\FlashFXP\3\Quick.dat

C:\Users\win7\AppData\Local\Temp\nsp1CFF.tmp\nsArray.dll

C:\Windows\system32\en-US\erofflps.txt

C:\Users\win7\AppData\Local\Temp\nsw2DA6.tmp\\492358780

C:\Users\win7\AppData\Local\Temp\nsp1CFF.tmp\NSISdl.dll

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/copy12.html

C:\Windows\system32\MSWINSCN.OCX

C:\Users\win7\AppData\Local\Temp\Elite_Xl2k\GCX12081.PPD

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/index.swf

C:\Users\win7\AppData\Local\Temp\nss3104.tmp\\858294717

C:\Windows\system32\bedc\miv\bijs.dat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Common-Drivers-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\home.bmp

\\.\SCSI0:

C:\Users\win7\AppData\Local\Temp\nsx16D5.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Temp\nsm217D.tmp\NSISdl.dll

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AAA WMA Converter\AAA WMA Converter Help.lnk

C:\Users\win7\AppData\Local\Temp\is-CRKNN.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\622210edd7d2b5052ce79dc1b1dcd9d6\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Local\Temp\nsc9F98.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsq829A.tmp\System.dll

\\.\SIWVID

C:\Users\win7\AppData\Local\Temp\nsy1A30.tmp\System.dll

C:\Data\Scripts\Gui\PageHostGame.gui

C:\Users\win7\AppData\Local\Temp\nsa1C10.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsx6F21.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsuB3F9.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\verificar_ip[1].htm

C:\Users\win7\AppData\Local\Temp\nsa2CAD.tmp

C:\Users\win7\AppData\Local\Temp\9c2704c22ceab0ebc352c74d631e8669\stub.exe

C:\Users\win7\AppData\Local\Temp\\~DFACE54DD3C836D5B1.TMP

C:\Users\win7\AppData\Local\Temp\nsf7910.tmp\nsJSON.dll

C:\Windows\GeoOCX\WebCam\20090916\GeoCodecReg\GAVC.inf

C:\Windows\system32\APLOC.dll

C:\Users\win7\AppData\Local\Temp\Elite_Xl2k\GCXL6081.PPD

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/formula8.html

C:\Users\win7\AppData\Local\Temp\is-OTV7R.tmp\is-NQO4R.tmp

C:\Users\win7\AppData\Local\Temp\{0903A383-0598-4DEC-8D80-08B12F2C46B7}\Setup.INI

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\Font Asset.x32

C:\Users\win7\AppData\Local\Temp\nswAEF6.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM12.tmp

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\EditorIco.ico

C:\Users\win7\AppData\Local\Temp\nsa77EF.tmp\NSISdl.dll

32788R22FWJFW\Rust.str

C:\Data\Scripts\Gui\Frontend.gui

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM43.tmp

\\.\COM54

C:\Users\win7\AppData\Local\Temp\nsm23E3.tmp

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM37.tmp

C:\Users\win7\wcx_ftp.ini

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\Q1QF8MYS.txt

C:\Users\win7\AppData\Local\Temp\nsyA321.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsw95DF.tmp

uninstall.lng

C:\Windows\RICHTX32.oca

C:\Users\win7\AppData\Local\Temp\nsj71D0.tmp

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-dayi.xml

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\EyeView T2-SA27.ini

C:\Users\win7\AppData\Local\Temp\nsw2EB1.tmp

C:\Users\win7\AppData\Local\Temp\nsyA539.tmp\ftconfig.ini

C:\Users\win7\AppData\Local\Temp\\~DF55519D3F70FD7AFB.TMP

C:\Users\win7\AppData\Local\Tempfolder\ortmp\nssckbi.dll

BackGround.bmp

C:\ProgramData\SharedSettings_1_0_5.ccs

C:\Users\win7\AppData\Local\Temp\nsa7323.tmp

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\Img1.png

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\CallbackCtrl.dll

C:\Users\win7\AppData\Local\Temp\nsy71DF.tmp

C:\Python27\Scripts\symbols\dll\wkernelbase.pdb

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~nb-NO~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsz1AD7.tmp\NSISdl.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\VCC50i.ini

C:\Users\win7\AppData\Local\Temp\nsz8333.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsl7A68.tmp

C:\Users\win7\AppData\Local\Temp\nsv82B8.tmp

C:\Users\win7\AppData\Roaming\KLEThjJwJFKr\KvSGxBArVzW.exe

C:\Users\win7\AppData\Local\Temp\~zs227B.tmpepc-D95220E65D4B47B19A3EEF7AD1F83832.zdt

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\Bkg.bmp

C:\Users\win7\AppData\Local\Temp\12aubfff5\Config.xml

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\hpcdeopkgienceaajfkaohfhnacpfamh\1\manifest.json

C:\Users\win7\AppData\Local\Adobe\Updater5\AUTrans.sig

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Pelco_P.dll

C:\ProgramData\sample.log

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\1navright.jpg

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Invoicing Software.lnk

C:\Users\win7\AppData\Local\Temp\nsa1FFC.tmp\StdUtils.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\right.bmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsw2164.tmp\System.dll

C:\Windows\GeoOCX\WebCam\20090916\GeoCodecReg\GXGM20.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C5FD5BF0CE6372B1CAFE381FD0BC969C

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM42.tmp

C:\ZapImages\epc-D95220E65D4B47B19A3EEF7AD1F83832.zdt

C:\Users\win7\AppData\Local\Temp\is-PTDNB.tmp\_isetup\_setup64.tmp

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/section4.html

C:\Users\win7\AppData\Local\Temp\nsw2DA6.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\7zS77D6.tmp\515f52bb88450.exe

C:\Users\win7\AppData\Local\Temp\nsa85A4.tmp\System.dll

C:\PROGRA~2\WMACON~1\wma.cnt

C:\Users\win7\AppData\Local\Temp\nsp8C8C.tmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_9.bmp

c:\OkiDriver\OKIB2200B2400\OKB3E002.VER

C:\Users\win7\AppData\Local\Temp\Uninst.bat

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-LocalPack-US-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsv3915.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsc13AE.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nss17EE.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsm7CD9.tmp\UserInfo.dll

c:\OkiDriver\OKIB2200B2400\OPPE_H01.HLP

C:\Users\win7\AppData\Local\Temp\7zS2C7E.tmp\jkmejkdfcnncpgjajbiahlekpebhcnhl\lsdb.js

C:\Users\win7\AppData\Local\Temp\nso27DC.tmp\NSISdl.dll

c:\download\driver\12950\SoftwareDriver\Driver\CMxPCI9.INF

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\pb.png

32788R22FWJFW\Update-CF.cmd

C:\Users\win7\AppData\Local\Temp\pft3E71.tmp\pftw1.pkg

Avira Trial Reset v2.3.exe

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Basic-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

\\.\COM46

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZLU.bmp

C:\Users\win7\AppData\Local\Temp\nss8054.tmp\System.dll

C:\Windows\wmaudioredist.exe

\\.\COM19

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\6UH9XGSM.txt

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\pbbkg.png

C:\Program Files\Chameleon Clock\Sounds\_ci_gentee_

c:\Program Files\Alexa Booster v3.2\Proxy\conf.txt

C:\Users\win7\AppData\Local\Temp\is-3IOQ3.tmp\_isetup\_setup64.tmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\HiSharp PelcoP.ini

C:\Users\win7\AppData\Local\Temp\nsg6866.tmp\\780660593

c:\download\driver\12950\SoftwareDriver\Driver\cmudax64.sys

\\.\COM204

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientExtensions-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsc13AE.tmp\System.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~es-ES~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM35.tmp

Vodelic_mode_d_emploi_video.html

C:\Users\win7\AppData\Local\Temp\nsd70C7.tmp\SimpleSC.dll

__tmp_rar_sfx_access_check_674140

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Help-Customization-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\vido.dll

C:\Users\win7\AppData\Local\Temp\nsb4533.tmp\nsArray.dll

C:\Windows\system32\RICHTX32.oca

C:\Users\win7\AppData\Local\Temp\nsvC31C.tmp

C:\WINDOWS\FONTS\SEGOEUIL.TTF

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\Q32JAK6L.txt

Msstkprp.dll

C:\branding.key

C:\Users\win7\AppData\Local\Temp\nsj8F38.tmp

C:\Windows\SysWOW64\dnsapi.dll

C:\Users\win7\AppData\Local\Temp\nsw892E.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nshF05A.tmp

C:\Users\win7\AppData\Local\Temp\nsh6D3D.tmp\\977503959

C:\Users\win7\AppData\Local\Temp\nsaAF1.tmp

C:\\image\baritem_contents.png

C:\Windows\symbols\dll\System.Windows.Forms.pdb

C:\Users\win7\AppData\Local\Temp\nsu1DB9.tmp

32788R22FWJFW\SvcDrv.vbs

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web.xml

Temp

C:\Data\Scripts\Gui\MessageBoxSwitchAssignment.gui

C:\Users\win7\AppData\Local\Temp\nskB31F.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsmC906.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\ci0-temp\install.bmp

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/copy11.html

C:\Users\win7\AppData\Local\Temp\nsc20F2.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsd6F41.tmp\\1213879438

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM68.tmp

32788R22FWJFW\md5sum.pif

C:\Users\win7\AppData\Local\Temp\rd7CD8.tmp\____swmx

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/formula9.html

C:\Users\win7\AppData\Local\Temp\nsq7BC0.tmp\\1017444673

C:\Windows\GeoOCX\WebCam\20090916\IA_VIDEO.dll

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\Btn_Inst.png

C:\Users\win7\AppData\Local\Temp\pftD7AF~tmp\Disk1\setup.inx

32788R22FWJFW\tail.cfxxe

C:\Users\win7\Desktop\dll\wntdll.pdb

C:\Users\win7\AppData\Local\Temp\000a37d8.a

C:\Windows\GeoOCX\WebCam\20090916\IPCam.dll

32788R22FWJFW\swxcacls.cfxxe

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\Ksicfg.dll

C:\Users\win7\AppData\Local\Temp\nsa7A29.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\skin\DarkStripes.gt

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\CheckBox.png

32788R22FWJFW\023v.dat

C:\Python27\DVRArchiveViewer.pdb

32788R22FWJFW\zhsvc.dat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ImageBasedSetup-IE-Package-Base-Downlevel~31bf3856ad364e35~amd64~en-US~6.3.9600.16428.cat

C:\Users\win7\AppData\Local\Temp\nsx255B.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nse8250.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM36.tmp

C:\sample.exe

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\copy8.html

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich7core.inf

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\GPLH2Q8S.txt

C:\Users\win7\AppData\Local\Temp\nsh86A0.tmp\1104102062

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_jpn.xml

C:\Windows\system32\shdocvw.dll

32788R22FWJFW\LocalService.dat

C:\ProgramData\Soearcho--NewTeAb

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM92.tmp

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM7.tmp

C:\Users\win7\AppData\Local\Temp\nsa2BC4.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsl4DF3.tmp\System.dll

RICHTX32.oca

WinRAR.exe

C:\Users\win7\AppData\Local\Temp\nsb1CB7.tmp\862653124

C:\Users\win7\AppData\Local\Temp\nsi70E6.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsy25F8.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\is-U84KA.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nskD76B.tmp

C:\Users\win7\AppData\Local\Temp\nsnADC0.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsfB926.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsx16D5.tmp\nss188B.tmp

C:\Users\win7\AppData\Local\Temp\nst2675.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsh7D56.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsc7B08.tmp\\432805234

C:\Users\win7\AppData\Local\Temp\nsv516D.tmp\NSISdl.dll

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\copy1.html

\\.\COM229

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\proj.dll

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\Editorb6.bmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\ui[1].css

C:\Users\win7\AppData\Local\Temp\nsqDF2.tmp\NSISdl.dll

C:\Windows\system32\691484.tmp

32788R22FWJFW\P.cmd

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/introduction.html

32788R22FWJFW\List-C.bat

C:\symbols\exe\DVRArchiveViewer.pdb

C:\Users\win7\AppData\Local\Temp\nsg1DB6.tmp\System.dll

ccrpprg6.ocx

C:\Windows\system32\ciel\kulm\sur.dat

C:\Users\win7\AppData\Local\Temp\nsc8C0B.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\6ZYVFKAH.txt

c:\download\driver\12950\SoftwareDriver\Driver\CMRMDRV3.DLL

C:\Users\win7\AppData\Local\Temp\nsm225E.tmp\System.dll

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/copy8.html

C:\ZapImages\GETZAPPED.GIF

C:\Users\win7\AppData\Local\Temp\nsv1C3F.tmp\\687567743

C:\Users\win7\AppData\Local\Temp\IXP000.TMP\B.exe.config

C:\Users\win7\AppData\Local\Temp\nsf2BE2.tmp

C:\Users\win7\AppData\Local\Temp\nsm2FF9.tmp\GetPrivateInstaller_woautorun.exe.crypted

C:\Users\win7\AppData\Local\Temp\nsyB022.tmp\System.dll

C:\Windows\explorer.exe.\

C:\Users\win7\AppData\Local\Temp\nsj71D1.tmp\nsWeb.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\A6IFW55H.txt

C:\Users\win7\AppData\Local\Temp\nsj8D9B.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nsb4533.tmp\449694061

\\.\COM125

C:\Users\win7\AppData\Local\Temp\nsw90AD.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM2.tmp

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\Btn_Close.png

\\.\COM67

C:\Users\win7\AppData\Local\Temp\nsn2607.tmp\813416745

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\ELMO PTC-1000.ini

C:\Users\win7\AppData\Local\Temp\nsq784D.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\ithttp.dll

C:\Users\win7\AppData\Local\Temp\nsx8072.tmp

\\.\COM48

32788R22FWJFW\swsc.cfxxe

C:\Windows\inf\oem2.inf

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/copy2.html

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\Editorb5.bmp

c:\download\driver\12950\SoftwareDriver\Driver\VMix.dll

C:\Users\win7\AppData\Local\Temp\7zS7336.tmp\lkniaejinldagieikdjacfpfchffkhhi\background.html

\\.\COM134

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM30.tmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\utils[1].js

C:\Users\win7\AppData\Local\Temp\nsn8BFD.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsm16E4.tmp\nsExec.dll

C:\Windows\system32\\\\wuapi.dll

C:\Users\win7\AppData\Local\Temp\nss23BF.tmp

C:\ProgramData\FlashFXP\3\Sites.dat

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\0DSZK3WT.txt

C:\Users\win7\AppData\Local\Temp\nsi3082.tmp\System.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Sensors-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsd6F41.tmp\1213879438

C:\Users\win7\AppData\Local\Temp\nse8C9C.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nsl7701.tmp\Processes.dll

\\.\COM70

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDMSetup2.log

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AAA WMA Converter\Uninstall.lnk

C:\Users\win7\AppData\Local\Temp\nsf1C2F.tmp\NSISdl.dll

C:\uninstall.lng

C:\Users\win7\AppData\Roaming\kp_installst.dt

c:\OkiDriver\OKIB2200B2400\OPPE_M00.DAT

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\N16RTBJZ.txt

C:\Users\win7\AppData\Local\Temp\is-U84KA.tmp\Setbum.dll

C:\Users\win7\AppData\Local\Temp\nsh8605.tmp\nsArray.dll

c:\users\win7\appdata\local\tempfolder\imyubawob\jimfididueb.dat

C:\ProgramData\Motive\critical.txt

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Printer-Drivers-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp/server.exe

C:\Users\win7\AppData\Local\Temp\nsr9E6E.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nswC408.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsf79FB.tmp\\709972679

C:\Users\win7\AppData\Local\Temp\nss79E9.tmp

C:\Users\win7\AppData\Local\Adobe\Updater5\Data\AdobeUpdater_meta.txt

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\pb.png

C:\Users\win7\AppData\Local\Microsoft\Windows

C:\Windows\system32\spool\DRIVERS\x64\3\KMPCT.exe

C:\Users\win7\AppData\Local\Temp\nsm16E4.tmp\[RANDOM_STRING].7z

C:\Users\win7\AppData\Local\Temp\nst8DF1.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsq7C0E.tmp\System.dll

C:\PROGRA~2\WMACON~1\UNWISE.EXE

C:\Users\win7\AppData\Local\Temp\nsj7ED1.tmp\Processes.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~fi-FI~7.1.7601.16492.cat

C:\Users\win7\AppData\Roaming\NLEThjJwJ\KFKrvSGxB.exe

C:\Users\win7\AppData\Local\Temp\\~DFECE1CD09F0DA26E8.TMP

\\.\COM79

WinCon.SFX

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\service\7z.exe

C:\Windows\ascIPNT.DLL

C:\Users\win7\AppData\Local\Temp\HWID

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\Dlg_bkg.png

C:\Users\win7\AppData\Local\Temp\nseA4C7.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RArVzWJrYnj.lnk\desktop.ini

C:\Users\Public\Documents\BrainsBreaker puzzles\BBrk.ini

C:\Users\win7\AppData\Local\Temp\nsp8CDB.tmp\500292442

C:\Users\win7\AppData\Roaming\CoffeeCup Software\SharedSettings_1_0_5.ccs

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Lilin.ini

C:\ProgramData\Microsoft\Windows

\\.\PhysicalDrive7

C:\Users\win7\AppData\Local\Temp\nsvB61D.tmp\\226427853

C:\Users\win7\AppData\Local\Temp\nsy71E0.tmp\nsWeb.dll

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\kor-kor.xml

\\.\COM188

C:\Users\win7\AppData\Local\Temp\is-LJK8F.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\nsy7547.tmp

C:\Program Files\Teamspeak2_RC2\uninstall.exe

C:\Users\win7\AppData\Local\Temp\7zS55DB.tmp

C:\WINDOWS\FONTS\TIMES.TTF

c:\windows\syswow64\iccvid.dll

C:\Users\win7\AppData\Local\Temp\nsrACF5.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsj8371.tmp\System.dll

C:\Windows\wkernelbase.pdb

32788R22FWJFW\toolbar.sed

C:\Users\win7\AppData\Local\Temp\nsf44AB.tmp\Processes.dll

COMCTL3N.DLL

C:\Users\win7\AppData\Local\Temp\nsf7422.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Temp\\~DFCB020680EECAE218.TMP

32788R22FWJFW\Kollect.bat

C:\Windows\System32\WindowsPowerShell\v1.0\dll\wkernel32.pdb

C:\Program Files\Alexa Booster v3.2\Alexa Booster v3.2.exe

C:\Users\win7\AppData\Local\Temp\nsrD5FC.tmp\cpSetup.exe

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/formula6.html

C:\Users\win7\AppData\Local\Temp\nst703B.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsd9210.tmp

MSCOMCT2.OCX

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\Infobar\image\infobar_offlineurl.png

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\Editorb1.bmp

C:\Users\win7\AppData\Local\Temp\nsa2C60.tmp\\1079415773

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkWatson.exe.mui

\\.\COM175

C:\Users\win7\AppData\Local\Temp\is-U84KA.tmp\isskin.dll

C:\Users\win7\AppData\Roaming\FlashFXP\3\History.dat

C:\Users\win7\AppData\Local\Temp\nsf9226.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nskD36.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\FlashFXP\4\Quick.dat

C:\Users\win7\AppData\Local\Temp\nst76AF.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsd70C7.tmp\System.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\switchOn.bmp

C:\Users\win7\AppData\Local\Temp\nsw2164.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsgD1D8.tmp\NSISdl.dll

dArVzWJrYn.dat

C:\Users\win7\AppData\Local\Temp\nsb2AE4.tmp\NSISdl.dll

C:\Windows\inf\oem0.inf

C:\Users\win7\AppData\Local\FlashFXP\3\Sites.dat

C:\Windows\system32\TABCTL3N.OCX

C:\Windows\Msstkprp.dll

C:\Users\win7\AppData\Local\Temp\nso34DC.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\Uninstall.ico

C:\image\baritem_option.png

/etc/.haxepath

\\.\COM13

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ESB2id2.inf

C:\Users\win7\AppData\Local\Temp\nsr1619.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\7zS2C7E.tmp\515f5b4a5a32e.exe

C:\Users\win7\AppData\Local\Temp\nsk1EB4.tmp\\513061213

C:\Data\Textures\Gui\Options_Assignments_03.dds

C:\Users\win7\AppData\Local\Temp\c634e7f446ed0baaaffb97e9c00223b7\DirectDownloaderInstaller.exe

C:\title.jpg

C:\Users\win7\AppData\Local\Temp\C0A52B82.TMP

C:\Users\win7\AppData\Local\Temp\nsf1D66.tmp

C:\Users\win7\AppData\Local\Temp\nsy1A30.tmp\SimpleSC.dll

C:\Users\win7\Desktop\dll\wkernelbase.pdb

C:\Users\win7\AppData\Local\Temp\nsm2FF9.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nsk1C4D.tmp

C:\Users\win7\AppData\Local\Temp\71d8cec149ec9115178e8020d4510ae0\downloaderOFFER1.exe

\\.\COM66

C:\Users\win7\AppData\Local\Temp\nsg7ACE.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\pft3E71.tmp\setup.boot

C:\Windows\GeoOCX\WebCam\20090916\POSLiveViewX_8198.ocx

C:\Users\win7\AppData\Local\Temp\nsh86A0.tmp\nsArray.dll

C:\Windows\system32\kitg\geba\uwu.dat

\\.\COM147

\\.\COM232

C:\Users\win7\AppData\Local\Temp\nsi26D2.tmp\\1131546406

C:\Users\win7\AppData\Local\Temp\nsv7607.tmp\SimpleSC.dll

C:\Users\win7\AppData\Roaming\CoffeeCup Software\SharedSettings.ccs

C:\image\baritem_open.png

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~uk-UA~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\skin\DarkStripes.gt

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM26.tmp

C:\Users\win7\AppData\Local\Temp\nskA7A6.tmp\System.dll

\\.\D:

\\.\COM112

C:\Users\win7\AppData\Local\Temp\nsu83FE.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\TridentCore.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZ_BK.bmp

32788R22FWJFW\List-B.bat

C:\\image\barbutton_right.png

C:\PROGRA~2\WMACON~1\settings.ini

C:\Users\win7\AppData\Local\Temp\nsy8F48.tmp\\1128005201

C:\Users\win7\AppData\Local\Temp\nsl7B52.tmp

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\Infobar\image\security.png

\\.\COM60

C:\Windows\GeoOCX\WebCam\20090916\RPBAudio.ocx

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IIS-WebServer-AddOn-2-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsq1EDE.tmp\System.dll

\\.\COM162

C:\ProgramData\Barowasse2saave\uninstall.exe

c:\IES_Files\Outdoor\Bollards\OSA8R-HID\OSA8R-100PSMH120-AC.IES

C:\Windows\system32\oqu\dof\aacoa.dat

32788R22FWJFW\Kill-All.cmd

C:\Users\win7\AppData\Local\Temp\{33A25180-3328-4EB4-9337-9DA72FD0395B}\rserv34pl.msi

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/section6.html

C:\Users\win7\AppData\Local\Temp\ab5d4243cc93ed6bbca90dd95ca61177\volcano.exe

C:\Users\win7\Documents\MSDCSC

C:\Users\win7\AppData\Local\Temp\nsn3133.tmp\StdUtils.dll

c:\Users\win7\AppData\Local\Temp\sfx1\_bbg.exe

ctags.cnf

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\BugReport.exe

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\copy12.html

C:\Users\win7\AppData\Local\Temp\fe9505b7f8b60bc6e1a74dc5c757fe1e\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Local\Temp\pft3E71.tmp\engine32.cab

C:\Users\win7\AppData\Local\Temp\nsf74BE.tmp

C:\Users\win7\AppData\Local\Temp\nse724E.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nssAD44.tmp\121723934

C:\Users\win7\AppData\Local\Temp\nss559E.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\4e2a1aff004f49a5e8fa911f735a399c\volcano.exe

C:\Users\win7\AppData\Local\Temp\nsv7607.tmp\System.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager\license.lnk

C:\Users\win7\AppData\Local\Temp\nsb7B62.tmp

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\pbn-D099EB9026F14E0A9F0E6CA8D757AABF.zdt

\\.\COM41

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\section3.html

C:\Windows\system32\MSHTML.tlb

C:\Users\win7\AppData\Local\Temp\nseB5CC.tmp\\150734581

C:\Users\win7\AppData\Local\Temp\nsc7F59.tmp

C:\Windows\ciplImageLis3N.ocx

32788R22FWJFW\ndis_combofix.dat

32788R22FWJFW\ND_.bat

C:\Users\win7\AppData\Local\Temp\013c8edc16128c116f00beee1fe56d21\volcano.exe

\\.\G:

C:\Windows\System32\drivers\etc\services

C:\Users\win7\AppData\Local\Temp\nsb845E.tmp

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Express Rip CD Ripper.lnk

C:\Users\win7\AppData\Local\Temp\nst41CF.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsy8F48.tmp\NSISdl.dll

TechNote.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\BL6YHMCU.txt

C:\Users\win7\AppData\Local\Temp\nsg7C6C.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsrD5FC.tmp\nsArray.dll

C:\My Documents\How To Install Presets! READ!!!.txt

C:\Users\win7\AppData\Local\Temp\nsjA6FF.tmp\SimpleSC.dll

\\.\NTICE

\\.\COM173

C:\Users\win7\AppData\Local\Temp\nss3DB5.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsh4855.tmp\System.dll

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/copy1.html

C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk

C:\Users\win7\AppData\Local\Temp\nsg84CC.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\Btn_Close.png

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_Clear.bmp

C:\WINDOWS\FONTS\SEGUISYM.TTF

C:\Python27\Scripts\CFVS_HookDll.pdb

C:\Users\win7\AppData\Local\Temp\nskE9F5.tmp

C:\Users\win7\AppData\Local\Temp\~GLH0001.TMP

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\rightUP.bmp

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\Btn_Inst.png

C:\Users\win7\AppData\Local\Temp\nsh21AD.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\Dlg_icon.png

\\.\COM4

C:\Users\win7\AppData\Local\Temp\\~DF43A97E88127BFBCB.TMP

c:\users\win7\appdata\local\tempfolder\punepyriyaqi\poebfucip.dat

C:\PROGRA~2\WMACON~1\unwise.exe

c:\download\driver\12950\Program\difxapi64.dll

C:\Users\win7\AppData\Local\Temp\nsa2C60.tmp\1079415773

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\JVC_IPCAM_PTZ.ini

C:\Users\win7\AppData\Local\Temp\nsj9023.tmp\Processes.dll

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\mixup.jpg

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Drivers-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\BP76R53L.txt

C:\Users\win7\AppData\Local\Temp\nsh7D56.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsb7C4D.tmp\1146937031

c:\OkiDriver\OKIB2200B2400\OPPE.DAT

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/Editorb1.bmp

C:\Users\win7\AppData\Local\Temp\nsh2DC2.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nszE55B.tmp\System.dll

CONIN$

File_Id.diz

C:\Users\win7\AppData\Local\Temp\nsc9F98.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsc248F.tmp

C:\Users\win7\AppData\Local\Temp\nsd8219.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsa330E.tmp\System.dll

C:\Windows\System32\Wbem\wkernelbase.pdb

C:\Windows\MSSTDFMN.DLL

C:\Users\win7\AppData\Local\Temp\nsg201B.tmp\nsArray.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\AM68VFS7.txt

C:\Users\win7\AppData\Local\Temp\nse2972.tmp\NSISdl.dll

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/outsidein.html

C:\Users\win7\AppData\Local\Temp\nsp1D4D.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsjB686.tmp

C:\Users\win7\AppData\Roaming\eLEThjJwJF\7470.xml

C:\Users\win7\AppData\Local\Temp\7zS2C7E.tmp\jkmejkdfcnncpgjajbiahlekpebhcnhl\515f5b4a5a1807.48198382.js

C:\UnzDll.dll

C:\Users\win7\AppData\Local\Temp\nsp1C6C.tmp

C:\Users\win7\AppData\Roaming\FlashFXP\4\Sites.dat

RarExt64.dll

C:\Users\win7\AppData\Local\Temp\Elite_Xl2k\ReadMe.txt

\\.\COM245

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Help-CoreClientUAPSN-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsg2E54.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsk1DCA.tmp\nsRandom.dll

C:\Users\win7\AppData\Local\Temp\E592A50D-87A9-437F-9F9B-31AA642D3A9Bmp\\tE592A50D-87A9-437.tmp

C:\Users\win7\AppData\Local\Temp\7fa4afec6c5bbf4ae0e9f0a6485532ac\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsb4533.tmp\\449694061

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ko-kr.xml

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM46.tmp

C:\Users\win7\Desktop\symbols\dll\wntdll.pdb

C:\Users\win7\AppData\Local\Temp\DIQ\test-av13490_004\DomaIQ.exe

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\Editorb2.bmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-Optional-Package~31bf3856ad364e35~amd64~en-US~11.2.9600.16428.cat

C:\Users\win7\AppData\Local\Temp\tmp_gui\tmp_0\tmp_2320_1.dat

32788R22FWJFW\pev.exe

C:\Program Files\Chameleon Clock\Sounds\Clocks\Clock3.wav

C:\Users\win7\AppData\Local\Temp\nsg6C03.tmp\System.dll

32788R22FWJFW\svc_wht.dat

C:\Users\win7\AppData\Local\Temp\nsl2B70.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsg1FD8.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsz32B5.tmp\SimpleSC.dll

C:\Users\win7\Contacts\desktop.ini

\\.\COM76

C:\Users\win7\AppData\Local\Temp\nsh21AD.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\{33A25180-3328-4EB4-9337-9DA72FD0395B}\0x0409.ini

C:\Users\win7\AppData\Local\Temp\ab5d4243cc93ed6bbca90dd95ca61177\pricepeep.exe

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Lilin820.ini

C:\Users\win7\AppData\Local\Temp\nsmE3A2.tmp\NSISdl.dll

C:\Windows\system32\ciplImageList.ocx

C:\Users\win7\AppData\Local\Temp\nslB62D.tmp\Processes.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\60E31627FDA0A46932B0E5948949F2A5

C:\Data\Scripts\Gui\PageSplashRenderware.gui

c:\da8df086ca54f7fdd325c4\update\update.inf

C:\Users\win7\AppData\Local\Temp\nsj350B.tmp\4f6ea680-bfc5-40ae-80ef-f992aa74653f.dll

C:\Users\win7\AppData\Local\Temp\nsh5474.tmp

C:\Users\win7\AppData\Local\Temp\nso26A4.tmp\SimpleSC.dll

32788R22FWJFW\netsvc.vista.dat

C:\Users\win7\AppData\Local\Temp\nsq1DA6.tmp\\160949597

C:\Data\Scripts\Gui\MessageBoxAreYouSure.gui

C:\Users\win7\AppData\Local\Temp\nss8D54.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsa7A29.tmp\LangDLL.dll

C:\Users\win7\AppData\Local\Temp\nsg7ACE.tmp\581706123

C:\Users\win7\AppData\Local\Temp\is-36CJS.tmp\_isetup\_RegDLL.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~da-DK~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsd2314.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\7zS55DB.tmp\jjhklgikohjiaahlibnfgegobedhpgmf\content.js

C:\Users\win7\AppData\Local\Temp\nss95B4.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsz7EE1.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\\~DF58C338C59A169B6B.TMP

C:\Users\win7\AppData\Local\Temp\nsc7B08.tmp\432805234

c:\Program Files\Common Files\Microsoft Shared\ink\hu-HU\tipresx.dll.mui

C:\Users\win7\AppData\Local\Temp\nsn31CF.tmp\SimpleSC.dll

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/copy3.html

32788R22FWJFW\Prep.inf

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\formula8.html

C:\Users\win7\AppData\Local\Temp\nsc6CCF.tmp

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM90.tmp

Uninstall.exe

C:\Users\win7\AppData\Local\Temp\nsn2607.tmp\\813416745

C:\symbols\dll\wntdll.pdb

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\error_icon[1]

C:\Python27\Scripts\wntdll.pdb

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~ko-KR~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\7zS2C7E.tmp\jkmejkdfcnncpgjajbiahlekpebhcnhl

C:\Windows\GeoOCX\WebCam\20090916\Logo.bmp

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\QBExtensionFramework.dll

32788R22FWJFW\Fin.dat

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\V76H33PG.txt

C:\Users\win7\AppData\Roaming\uLEThjJw

C:\Windows\SysWOW64\dllcache\dnsapi.dll

C:\Users\win7\AppData\Local\Temp\nsf8F5B.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nsd18C9.tmp\nsArray.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\VCC4.ini

C:\Settings\Certificates\client.crt

C:\Users\win7\AppData\Local\Temp\nsrEE5B.tmp\Processes.dll

C:\Settings\Favorites.xml

C:\Users\win7\AppData\Local\Temp\nsl1D39.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsc6DB9.tmp\1079041222

C:\Users\win7\AppData\Local\Temp\nsn2607.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\NYT2086A.txt

C:\Users\win7\AppData\Local\Temp\4ae6cf3c7fbd3414df26e8400c7d510e\volcano.exe

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\Text Asset.x32

C:\Users\win7\AppData\Local\Temp\\~DFDF61059ABCE401BB.TMP

C:\Windows\system32\Asycfilt.dll

C:\Users\win7\AppData\Local\Temp\cetrainers\CET1B81.tmp\CET_TRAINER.CETRAINER

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\navi.ico

C:\Users\win7\AppData\Local\Temp\nsk377C.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsx3086.tmp

C:\Users\win7\AppData\Local\Temp\nsqDF2.tmp\189585693

Rar.exe

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\Infobar\css\base.css

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ja-jp.xml

C:\Users\win7\AppData\Local\Temp\nsfC49.tmp\System.dll

C:\WINDOWS\FONTS\MSJH.TTF

C:\Windows\System32\WindowsPowerShell\v1.0\wkernel32.pdb

C:\Users\win7\AppData\Local\Temp\ci0-temp\uninstall.ico

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\MESSOA D-700 series.ini

C:\Users\win7\AppData\Local\Temp\nsp799D.tmp\1119186236

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\outsidein.html

C:\Data\Scripts\Gui\MessageBoxNoCd.gui

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\I48T2Z2V.txt

C:\Users\win7\AppData\Local\Temp\nsgBB49.tmp\RK.bmp

C:\Users\win7\AppData\Local\Temp\nsg11A0.tmp\NSISdl.dll

C:\ZapImages\asl-icn-mini-support-32x32x2.gif

C:\Users\win7\AppData\Local\Temp\nsh7DF3.tmp\nsWeb.dll

RarExt.dll

Formats\lzh.fmt

c:\windows\system32\drivers\adpahci.sys

C:\Users\win7\AppData\Local\Temp\nsb6E14.tmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_7.bmp

C:\Users\win7\AppData\Local\Temp\nsz761B.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsr6B58.tmp

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM85.tmp

c:\Program Files\Alexa Booster v3.2\Skins\2P.bmp

\\.\COM244

C:\Users\win7\AppData\Local\Temp\7zS55DB.tmp\settings.ini

C:\Users\win7\AppData\Local\Temp\nsi2683.tmp

C:\Users\win7\AppData\Local\Temp\nso28C6.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nstF018.tmp

C:\Users\win7\AppData\Local\Temp\nsz7681.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsk86CB.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\uninst.exe

C:\Users\win7\AppData\Local\Temp\12aubfff5\appdata\\thumb\https___mail.qq.com_.jpg

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\7S4IO594.txt

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\index[1].htm

C:\Users\win7\AppData\Roaming\EbkReader\{B9EBB217-D189-44F1-9FA3-CE24806469F0}\ebk.dat

C:\Users\win7\AppData\Local\Temp\nss8CB8.tmp\StdUtils.dll

C:\Windows\GeoOCX\WebCam\20090916\SSL.dll

c:\users\win7\appdata\local\tempfolder\liurlouwodmue\loegpanyu.dat

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\ZC-122.ini

32788R22FWJFW\mtee.cfxxe

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM17.tmp

\\.\COM210

32788R22FWJFW\safeboot.def.dat

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\828298824EA5549947C17DDABF6871F5_7711FB3A44D1E4EB005F46022D09BCC0

C:\Users\win7\AppData\Roaming\mLEThjJw\oJFKrvSG.exe

C:\Users\win7\AppData\Local\Temp\nsa7A29.tmp\nsisdt.dll

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\WavePad Sound Editor.lnk

C:\Windows\system32\rundll32.exe

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\A8V5DPDX.txt

C:\wkernel32.pdb

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\ani-logomain-117x84.gif

C:\ProgramData\FileZilla\filezilla.xml

32788R22FWJFW\katch.cmd

sfiles\lang.ini

C:\Users\win7\AppData\Local\Temp\ci0-temp\AlexaBooster_uninstlist.gea

C:\Users\win7\AppData\Local\Temp\nsx16D4.tmp

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/EditorIco.ico

C:\Users\win7\AppData\Local\Temp\nsn2607.tmp\SimpleSC.dll

C:\LINGO.INI

C:\Users\win7\AppData\Local\Temp\nsjFCDB.tmp\NSISdl.dll

C:\Python27\Scripts\dll\wkernel32.pdb

C:\Users\win7\AppData\Local\Temp\nso74A3.tmp

C:\Users\win7\AppData\Local\Temp\nss3104.tmp\nsArray.dll

32788R22FWJFW\FileKill.cfxxe

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\CFYRBGUR.txt

C:\Users\win7\AppData\Local\Temp\nsaAD3F.tmp

C:\Users\win7\AppData\Local\Temp\nsc2FBC.tmp\System.dll

C:/Windows/system32/VB6JP.DLL

C:\Users\win7\AppData\Local\Temp\nse8B64.tmp\\989149078

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Dynacolor2.ini

\\.\COM94

C:\Users\win7\AppData\Local\Temp\nsv751C.tmp\NSISdl.dll

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web\webbase.xml

C:\Windows\system32\dll\wkernelbase.pdb

C:\Users\win7\AppData\Local\Temp\nsr2EE1.tmp\624915643

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager\Grabber Help.lnk

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml

C:\Users\win7\AppData\Local\Temp\nsg2E54.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsn31CF.tmp\System.dll

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/copy4.html

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/1navleft.jpg

C:\Users\win7\AppData\Local\Temp\DIQ\flashplayer_151\config.dll

C:\Users\win7\AppData\Local\Temp\nsi70E6.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsa7589.tmp\NSISdl.dll

C:\sample.ini

C:\Users\win7\AppData\Local\Temp\7zS7BFD.tmp\pnadleldkhfpclgofgnnmhblfcamfhfa\lsdb.js

C:\Users\win7\AppData\Local\Temp\nss6FEC.tmp\nsArray.dll

C:\Windows\system32\wmaudioredist.exe

\\.\COM217

C:\~ZS-LocalServerTest.foo

C:\Users\win7\AppData\Local\Temp\nsr1493.tmp\1078530471

C:\ProgramData\GlobalSCAPE\CuteFTP Lite\sm.dat

C:\Users\win7\AppData\Local\Temp\nsk9246.tmp\nsArray.dll

C:\Windows\system32\MSVCRTD.DLL

C:\Users\win7\AppData\Local\Temp\nsr2EE1.tmp\SimpleSC.dll

C:\Users\win7\AppData\Roaming\SharedSettings.sqlite

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\slb-BevelEdges.gif

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\StorVision.ini

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\Dlg_Btn_Close.png

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\beepdl.dll

C:\Windows\system32\urot\vifq\gaa.dat

C:\Users\win7\AppData\Local\Temp\nsv82B9.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nstC967.tmp\nsArray.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\0O5BBSKI.txt

c:\windows\system32\drivers\adp94xx.sys

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/formula2.html

C:\Users\win7\AppData\Local\Temp\12auf94d4\appdata\\Adblock\{43789A6F-8316-54A6-96D4-87874B9CC177}

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM0.tmp

C:\Windows\COMCTL3N.DLL

C:\Users\win7\AppData\Local\Temp\IXP000.TMP\B.exe

\\.\L:

C:\Users\win7\AppData\Local\Temp\nsi2599.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nso28C6.tmp\\307909633

C:\Users\win7\AppData\Local\Temp\nss6FEC.tmp\\565464247

C:\Users\win7\AppData\Local\Temp\nsw2EB2.tmp\StdUtils.dll

c:\download\driver\12950\SoftwareDriver\Driver\CmiCnfg3.cpl

C:\Users\win7\AppData\Local\Temp\nsg206A.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nsh8C2A.tmp\NSISdl.dll

C:\cygwin\etc\setup\last-connection

Avira Registry Cleaner\View.bmp

C:\Users\win7\AppData\Local\Temp\nsk1EB4.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsk1BB2.tmp\\118216779

C:\Users\win7\AppData\Local\Temp\nsc6EA4.tmp\SimpleSC.dll

32788R22FWJFW\BootSect.dll

C:\Users\win7\AppData\Roaming\iVMhdbei\iVMhdbei.exe

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerToPeer-Full-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\1P2H0IOT.txt

C:\Users\win7\AppData\Local\Temp\nsp81FD.tmp\\480236960

C:\Users\win7\AppData\Local\Temp\4d817503ee65560a8dcdb650fa6add61\pricepeep.exe

C:\Users\win7\AppData\Local\Temp\nss1926.tmp\System.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CodecPack-Basic-Encoder-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\pftD7AF~tmp\Disk1\layout.bin

C:\Users\win7\AppData\Local\Temp\pft3E71.tmp\UnInstall.iss

32788R22FWJFW\SetEnvmt.bat

32788R22FWJFW\RCLink.dat

C:\Windows\system32\MSVBVM60.DLL

C:\Windows\system32\msvcrt.dll

c:\Program Files\Alexa Booster v3.2\Alexa Booster v3.2.exe

C:\Users\win7\AppData\Local\Temp\nsl2C9F.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\pft3E71.tmp\layout.bin

C:\Users\win7\AppData\Local\Temp\nse1C72.tmp\System.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\switch.bmp

C:\Users\win7\AppData\Local\Temp\aut3058.tmp

C:\Program Files\Alexa Booster v3.2

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\Edit.png

C:\Users\win7\AppData\Local\Temp\is-2PQ60.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\Donate.ico

C:\Users\win7\AppData\Local\Temp\nst2711.tmp\959661730

c:\OkiDriver\OKIB2200B2400\OPPE_M00.DLL

C:\Users\win7\AppData\Local\Temp\nsf1CCB.tmp\\838647836

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~cs-CZ~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsb7B63.tmp\457014823

32788R22FWJFW\NetworkService.dat

C:\Users\win7\AppData\Local\Temp\nsa73C0.tmp\System.dll

c:\download\driver\12950\CmiOemConfig.ini

C:\Users\win7\AppData\Local\Temp\nsf1C2F.tmp\\572138058

\\.\COM32

C:\Game.exe

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/copy13.html

C:\Users\win7\AppData\Local\Temp\nsi1A20.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsa41D8.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsv2C41.tmp\\617765131

C:\Users\win7\AppData\Local\Temp\nscA033.tmp\NSISdl.dll

C:\Data\Textures\Gui\AssignmentsBack.dds

C:\Users\win7\AppData\Local\Temp\nsa7A29.tmp\nsRandom.dll

C:\Users\win7\AppData\Roaming\GlobalSCAPE\CuteFTP Lite\sm.dat

\\.\COM101

C:\Users\win7\AppData\Local\Temp\nsc6EA4.tmp\System.dll

C:\Windows\system32\~GLH0004.TMP

C:\Users\win7\AppData\Local\Temp\nsw4FAE.tmp\nsArray.dll

\\.\COM100

C:\Users\win7\AppData\Local\Temp\fe9505b7f8b60bc6e1a74dc5c757fe1e\volcano.exe

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A34B45DD28A5DAEFDA3E0BA2FCE7DE24_D8309B1ECA516AE8FCEB10D1DC37BE8F

WhatsNew.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\00RFMB8T.txt

C:\Users\win7\AppData\Local\Temp\3db95c0d2bab524b5259c84257550ed1\DirectDownloaderInstaller.exe

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Pana_IPro.ini

C:\Users\win7\AppData\Local\Temp\nsz2A5F.tmp\\1115100230

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Accounting Software.lnk

C:\Users\win7\AppData\Local\Temp\nsz2A5F.tmp\nsArray.dll

bdcap32.dll

32788R22FWJFW\Catch-sub.cmd

c:\OkiDriver\OKIB2200B2400\ophcwnxt.dll

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\Btn_Close.png

C:\Users\win7\AppData\Roaming\WeatherWatcher\Skins\Forecasts\Splendid\Current.html

32788R22FWJFW\License\Zip - license.txt

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~sk-SK~7.1.7601.16492.cat

C:\Windows\GeoOCX\WebCam\20090916\GeoCodecReg\GJPG.inf

C:\Users\win7\AppData\Local\Temp\nsp2883.tmp\System.dll

C:\Python27\wkernelbase.pdb

C:\Windows\system32\COMCTL32.DLL

C:\Users\win7\AppData\Local\Temp\nsw852A.tmp\SimpleSC.dll

__tmp_rar_sfx_access_check_758859

C:\Users\win7\AppData\Local\Temp\nsc218E.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nsg84CC.tmp\System.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MSMQ-Client-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nss7FB7.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsy8713.tmp\NSISdl.dll

C:\Windows\inf\oem5.PNF

C:\Windows\GeoOCX\WebCam\20090916\OCXDebug.ini

C:\Users\win7\AppData\Local\Temp\b82b985bee9cc6a610d7c50fc7373126\volcano.exe

C:\Users\win7\AppData\Local\Temp\226fda2318382dfba2850343961c3116\BitAcceleratorDDLRinstaller.exe

ciplImageList.ocx

C:\Users\win7\AppData\Local\Temp\nsg206A.tmp\SkinH.DLL

c:\OkiDriver\OKIB2200B2400\OPHCWNXS.dll

C:\Users\win7\AppData\Local\Temp\fefa3aaf94374590437d72a7b328196e\BitAcceleratorDDLRinstaller.exe

Formats\gz.fmt

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM34.tmp

C:\Users\win7\AppData\Local\Temp\nsk1DCA.tmp\nsArray.dll

\\.\COM42

C:\Users\win7\AppData\Local\Temp\nst703B.tmp\System.dll

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers\numbase.xml

C:\Users\win7\AppData\Local\Temp\nsz58CB.tmp\SimpleSC.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\84AFE219AEC53B0C9251F5E19EF019BD_DBDA70FA0C7F0763826EA9179F77D209

C:\Users\win7\AppData\Local\Temp\nsk4343.tmp\KillProcDLL.dll

C:\Users\win7\AppData\Local\Temp\nsy7596.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsjA6FF.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsu747F.tmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PelcoSpetra3.ini

\\.\REGMON

C:\Users\win7\AppData\Local\Temp\7zS55DB.tmp\515f05c5b9edb.dll

installer.bat

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Soearcho--NewTeAb\Soearcho--NewTeAb.lnk

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich5ide.inf

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\mshwLatin.dll.mui

C:\Windows\GeoOCX\WebCam\20090916\GeoCodecReg\GEOX.inf

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\Microsoft.VC90.CRT\msvcp90.dll

C:\Users\win7\AppData\Local\Temp\nsm16E3.tmp

C:\Users\win7\AppData\Local\Temp\nsz4E31.tmp\\892719323

C:\Users\win7\AppData\Local\Temp\fefa3aaf94374590437d72a7b328196e\volcano.exe

C:\Users\win7\AppData\Local\Temp\\~DF8B16D9040D1F3FDB.TMP

C:\Users\win7\AppData\Local\Temp\3b3466ef1cb588b8fa4e82447de17686\volcano.exe

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\VHNC2NT8.txt

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\Archivo.dec

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\verificar_ip[1].htm

C:\Users\win7\AppData\Local\Temp\aut5508.tmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\dm[1]

C:\Users\win7\AppData\Local\Temp\nsyCAD5.tmp\NSISdl.dll

c:\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PCDSkin.bmp

C:\Users\win7\AppData\Roaming\QuwoxaBATH

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-BLB-Client-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\ProgramData\Soearcho--NewTeAb\uninstall.exe

C:\Users\win7\AppData\Local\Temp\nspE574.tmp

\\.\COM158

C:\Users\win7\AppData\Local\Temp\nsb21D1.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsx250D.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\anote.png

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Switch Sound File Converter.lnk

C:\Users\win7\AppData\Local\Temp\nsz2869.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nslAE1B.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsr152F.tmp\\146410224

C:\Users\win7\AppData\Local\Temp\nsb2D07.tmp\Processes.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\NKSL98BO.txt

c:\download\driver\12950\Setup.exe

C:\Users\win7\AppData\Local\Temp\nsr2F2F.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\Btn_Done.png

C:\Users\win7\AppData\Local\Temp\nsi324C.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsk1EB4.tmp\513061213

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich5usb.inf

C:\Users\win7\AppData\Local\Temp\nsd18C9.tmp\\825095914

\\.\COM14

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM61.tmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Bosch.ini

C:\Users\win7\AppData\Local\Temp\nsm56AC.tmp\428719227

C:\Users\win7\AppData\Local\Temp\nsc2358.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nss80A2.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsa36FA.tmp\StdUtils.dll

C:\Windows\GeoOCX\WebCam\20090916\GvMegaPixelSetting.ini

C:\Users\win7\AppData\Local\Temp\nsw7C2E.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsx2EBD.tmp\System.dll

C:\Data\Textures\Gui\SingleMission_DeleteMission_03.dds

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Drivers-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\Microsoft.NET\Framework\v2.0.50727\Config\machine.config

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Libraries\Documents.library-ms

C:\Users\win7\AppData\Local\Temp\nss95B4.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsd8D93.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\12aubfff5\QBInstaller.dll

ccrpprg3N.ocx

32788R22FWJFW\history.bat

C:\Windows\System32\WindowsPowerShell\v1.0\dll\wntdll.pdb

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\dm_bar_down[1]

C:\Users\win7\AppData\Local\Temp\nsa2C11.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~fr-FR~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsv4F10.tmp

C:\ZapImages\asl-icn-mini-home-32x32x2.gif

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\GKB.ini

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\IpsMigrationPlugin.dll.mui

C:\Users\win7\AppData\Local\Temp\325f6ef1eb345d57019b1a43de33cbb2\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Local\Temp\9b30ab17762cfe32075060c38291a895\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsc16F4.tmp\\365624476

C:\Program Files\Motion-Twin\haxe\lib/hxcpp/.current

C:\Users\win7\AppData\Local\Temp\nsj416E.tmp

C:\Windows\Imagination Studio.dat

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\carregando[1].gif

C:\Windows\GeoOCX\WebCam\20090916\GvCrypto.dll

C:\Windows\desktop.ini

C:\Users\win7\AppData\Local\Temp\Elite_Xl2k\GCCX8_16.INF

32788R22FWJFW\w2kreg.dat

autocad_64bit_Keygen.exe

C:\Users\win7\AppData\Local\Temp\nsv37BB.tmp\a97db507-fa53-474b-870e-0e4ef6b2e105.dll

C:\Users\win7\AppData\Local\Temp\nsh463C.tmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\index[1]

C:\Users\win7\AppData\Local\Temp\nsm8B56.tmp\StdUtils.dll

C:\ProgramData\FlashFXP\4\Quick.dat

C:\Users\win7\AppData\Local\Temp\nss6FEB.tmp

C:\Users\win7\AppData\Local\Tempfolder\ortmp\libnspr4.dll

C:\Users\win7\AppData\Local\Temp\nsg5F03.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsg1E51.tmp\NSISdl.dll

C:/Windows/system32/VB6STKIT.DLL

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\service\xperf.exe

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\Bkg.bmp

C:\Users\win7\AppData\Local\Temp\nsr4717.tmp\System.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager\Grabber Help.lnk

C:\Users\win7\AppData\Local\Temp\7zS55DB.tmp\515f05c5b9ea2.exe

c:\OkiDriver\OKIB2200B2400\ok021b3c.cap

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\HHPJH5MB.txt

C:\Users\win7\AppData\Local\Temp\nso34DC.tmp\System.dll

\\.\COM186

C:\Users\win7\AppData\Local\Temp\nsm225E.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsv516D.tmp\\725090903

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~nl-NL~7.1.7601.16492.cat

c:\download\driver\12950\OemIcon\Logo.ICO

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\TOA_cc551.ini

C:\Users\win7\AppData\Local\Temp\nsyA539.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsm6D0E.tmp\\923909173

C:\Users\win7\AppData\Local\Temp\nsk8D58.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\tsldrl6660\link.dat

C:\Data\Scripts\Gui\MessageBoxNotAllAssigned.gui

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\QRCode.dll

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu.xml

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\dot.bmp

C:\Windows\System32\WindowsPowerShell\v1.0\dll\wkernelbase.pdb

C:\Users\win7\AppData\Local\Temp\\~DF110BFAC606AB6C7A.TMP

C:\Users\win7\AppData\Local\Temp\_MSI5166._IS

C:\Users\win7\AppData\Local\Temp\nsw7C2E.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsl2C03.tmp\StdUtils.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\enterprisesec.config.cch

C:\Users\win7\AppData\Local\Temp\nsk1DCA.tmp\cpSetup.exe

C:\Users\win7\AppData\Local\Temp\nsk377C.tmp\\1153542742

C:\Users\win7\Desktop\CFVS_HookDll.pdb

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM63.tmp

MSWINSCK.OCX

C:\Users\win7\AppData\Local\Temp\nsg206A.tmp\ButtonLinker.dll

C:\ProgramData\Microsoft

__tmp_rar_sfx_access_check_750281

C:\Windows\SysWOW64

32788R22FWJFW\gsar.cfxxe

\\.\COM89

C:\Users\win7\Desktop\BitTorrent.lnk

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Dynacolor.ini

C:\Users\win7\AppData\Local\Temp\nsjC29C.tmp\NSISdl.dll

C:\Users\win7\AppData\Local

C:\Windows\system32\OLEAUT32.DLL

C:\Users\win7\AppData\Local\Temp\4e2a1aff004f49a5e8fa911f735a399c\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsx255B.tmp\SimpleSC.dll

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager\Internet Download Manager.lnk

c:\download\driver\12950\Program\CmiInstallResAll.dll

c:\download\driver\12950\SoftwareDriver\Driver\CmRmDrv64.EXE

C:\Users\win7\AppData\Local\Temp\nsr2F7D.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsg6E82.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Tempfolder\ortmp\freebl3.dll

C:\Users\win7\AppData\Local\Temp\ci0-temp\AlexaBooster.set

C:\Users\win7\AppData\Local\Temp\nsmC906.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\Btn_Dir.png

C:\Users\win7\AppData\Local\Tempfolder\DoltuJonisep\nss3.dll

\??\C:\Windows\system32\acppage.dll

C:\Users\win7\AppData\Local\Temp\nsp81AE.tmp

License.txt

C:\Users\win7\AppData\Local\Temp\nsa7674.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsz7681.tmp\\665707608

c:\Program Files\Common Files\Microsoft Shared\ink\hwrenalm.dat

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\SAE.ini

C:\Users\win7\AppData\Local\Temp\nsx16D5.tmp\nsx24C2.tmp

C:\Users\win7\AppData\Local\Temp\pftD7AF~tmp\Disk1\setup.bmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Bosch.dll

C:\Users\win7\AppData\Local\Temp\nsm7EAE.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsk1DCA.tmp\Base64.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\7U00H0GK.txt

C:\Users\win7\AppData\Local\Temp\nss8901.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\USQSW49C.txt

C:\Users\win7\AppData\Local\Temp\DIQ\test-av46804_004\DomaIQ10.exe

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\app[1].js

32788R22FWJFW\ffdefstr.dll

C:\Users\win7\AppData\Local\Temp\nsp794E.tmp\NSISdl.dll

C:\Windows\System.Windows.Forms.pdb

C:\Users\win7\AppData\Local\Temp\68fecef9577b6548cd9f9c89137e6238\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsi246C.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsw2E15.tmp\nsJSON.dll

OK

C:\Users\win7\AppData\Local\Temp\nsg1DB6.tmp\\832586926

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZFOut.bmp

\\.\COM17

C:\Windows\GeoOCX\WebCam\20090916\GeoUpdaterDll.dll

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk

C:\Users\win7\AppData\Local\Temp\nsq6A1F.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nse8B64.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nshC366.tmp

C:\Users\win7\AppData\Local\Temp\is-97GVD.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\nsi26D2.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\7zSB2EF.tmp\515f05cb47a1c.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\26M9EMBN.txt

C:\Users\win7\AppData\Local\Temp\pftA501.tmp\pftw1.pkg

C:\ZapImages\asl-btn-big-home-83x28x2.gif

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\libacess_js[1].htm

Formats\7zxa.dll

C:\Users\win7\AppData\Local\Temp\nsj350A.tmp

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\Infobar\image\infobar_close_hover.png

C:\Users\win7\AppData\Local\Temp\nsz73B5.tmp\568528752

C:\Users\win7\AppData\Local\Temp\nsa1D47.tmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\Down.bmp

C:\Users\win7\AppData\Local\Temp\nsd257B.tmp\nsArray.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\switchOff.bmp

C:\Users\win7\AppData\Local\Temp\{0654AC99-2BF5-4929-9C44-4B6872A6C4E0}\0x0809.ini

C:\Users\win7\AppData\Local\Temp\nsw3861.tmp

C:\Users\win7\AppData\Local\Temp\nsfB523.tmp\System.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Samsung.ini

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/Editorb5.bmp

\\.\AIDA64Driver

C:\Users\win7\AppData\Local\Temp\nsz84B8.tmp

C:\Users\win7\AppData\Local\Temp\nsz761B.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsz2869.tmp\\1207750429

C:\Windows\LicenseManagerV2.pdb

Formats\7z.fmt

C:\Users\win7\AppData\Local\Temp\nsa85A4.tmp\SimpleSC.dll

32788R22FWJFW\ERUNT.cfxxe

C:\Users\win7\AppData\Local\Temp\nss6E66.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\is-U84KA.tmp\gcpum.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_2.bmp

C:\Users\win7\AppData\Local\Temp\nsi5697.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Temp\nsr1F7B.tmp\System.dll

c:\Program Files\Alexa Booster v3.2\Skins\1.bmp

C:\Users\win7\AppData\Local\Temp\nszA5E1.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\pbn-F891C1AE5FD1497993CA9FFF5966CA06.zdt

C:\Users\win7\AppData\Local\Temp\nsuA912.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsa7589.tmp

C:\Users\win7\AppData\Local\Temp\nsh7DA5.tmp\System.dll

winrar.lng

C:\Users\win7\AppData\Local\Temp\is-0BDME.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\nsq79EB.tmp

\\.\COM218

C:\Users\win7\AppData\Local\Temp\nsz9033.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nss6FEC.tmp\565464247

C:\Users\win7\AppData\Local\Temp\nst3E5D.tmp\Processes.dll

32788R22FWJFW\RegScan.cmd

C:\Users\win7\AppData\Local\Temp\nsb1CB7.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\cancel[1]

C:\Users\win7\AppData\Local\Temp\pft3E71.tmp\data1.hdr

C:\Users\win7\AppData\Local\Temp\nsx2EBD.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsi246C.tmp\\709666229

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\formula5.html

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\paused_icon[1]

c:\Program Files\Common Files\Microsoft Shared\ink\he-IL\tipresx.dll.mui

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM22.tmp

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\interview.html

C:\Users\win7\AppData\Local\Temp\nsr16B4.tmp

C:\Users\win7\AppData\Local\Temp\nsoE348.tmp\setup_31011.exe

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\AdemCo.ini

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\jquery[1].js

C:\Users\win7\AppData\Local\Temp\nso26A4.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsq20F5.tmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\rightDown.bmp

C:\Python27\Scripts\symbols\dll\CFVS_HookDll.pdb

C:\Users\win7\AppData\Local\Temp\013c8edc16128c116f00beee1fe56d21\pricepeep.exe

\\?\hid#vid_80ee&pid_0021#6&e993e07&0&0000#{4d1e55b2-f16f-11cf-88cb-001111000030}

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GPwTuuGhrjxj.lnk

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM75.tmp

C:\Users\win7\AppData\Local\Temp\is-C85U7.tmp\_isetup\_setup64.tmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Dome_PelcoP.ini

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\formula2.html

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\service\7z.exe

C:\Users\win7\AppData\Local\Temp\nss7ACA.tmp\SimpleSC.dll

C:\WINDOWS\FONTS\ARIALBD.TTF

C:\Users\win7\AppData\Local\Temp\7zS7336.tmp\lkniaejinldagieikdjacfpfchffkhhi

C:\Users\win7\AppData\Local\Temp\nso282A.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsz7EE1.tmp\System.dll

C:\Users\win7\AppData\Local\Tempfolder\ortmp\orion.exe

C:\Users\win7\AppData\Local\Temp\nsm7EFC.tmp\SimpleSC.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Panasonic.ini

C:\Users\win7\AppData\Local\Temp\pftD7AF~tmp\Disk1\Setup.exe

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZ_BK_Disable.bmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\top-line[1].gif

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\s9[1].gif

C:\Users\win7\AppData\Local\Temp\nsbC511.tmp\\650521284

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_No5.bmp

C:\Users\win7\AppData\Local\Temp\nsm7CD9.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Temp\nsr3019.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsn9595.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nsc2358.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM48.tmp

C:\Users\win7\AppData\Local\Temp\DIQ\flashplayer_151\OfferBrokerage_14003.exe

\\.\COM190

C:\Users\win7\AppData\Local\Temp\nsgD1D8.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\Assistant.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~sr-LATN-CS~7.1.7601.16492.cat

C:\DVRArchiveViewer.pdb

C:\Users\win7\AppData\Local\Temp\nsv2D2A.tmp

C:\Users\win7\AppData\Local\Temp\nsu7799.tmp\680383182

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\httpErrorPagesScripts[1]

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich7id2.inf

C:\Windows\inf\oem1.PNF

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZUp.bmp

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AAA WMA Converter\AAA WMA Converter.lnk

C:\Windows\System32\Wbem\dll\CFVS_HookDll.pdb

C:\Users\win7\AppData\Local\Temp\nsu83FE.tmp\\460556029

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\8P26VWMW.txt

C:\Data\Textures\Gui\Options_Assignments_04.dds

Formats\z.fmt

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Anytime-Upgrade-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\pft3E71.tmp\data2.cab

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM40.tmp

C:\lang.dat

C:\Users\win7\AppData\Local\Temp\nsi246C.tmp\nsArray.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\COP-CD55X-PELCO_D2400.ini

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsx6F21.tmp\\760571060

\\.\COM228

C:\Windows\symbols\dll\wkernel32.pdb

C:\Users\win7\AppData\Local\Temp\7zS7BFD.tmp\515f05ca0c035.exe

C:\dll\CFVS_HookDll.pdb

C:\Users\win7\AppData\Local\Temp\nsb204B.tmp\\722400949

C:\Users\win7\AppData\Local\Temp\is-3IOQ3.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\All\E7520.inf

C:\Users\win7\AppData\Local\ExpanDrive\drives.js

C:\Users\win7\AppData\Local\Temp\nsqDF2.tmp\\189585693

C:\Users\win7\AppData\Local\Temp\nsi2635.tmp

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM84.tmp

C:\sample.scr

C:\Users\win7\AppData\Local\Temp\nss31EE.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsm2FAC.tmp\System.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\dm_bar_up[1]

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\D0ULMBFH.txt

c:\Program Files\Common Files\Microsoft Shared\ink\hwrenclm.dat

C:\Users\win7\AppData\Local\Temp\nsz66B4.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-40HMF.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\CheckBox.png

C:\Users\win7\AppData\Local\Temp\nsqDF2.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\BUDAPI.X32

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\dr.dll

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/section3.html

\\?\C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx

C:\Users\win7\AppData\Local\Temp\nse2888.tmp\nsArray.dll

32788R22FWJFW\SRestore.cmd

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\SonySNC_RZ25.ini

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\LG_Multix.ini

C:\Users\win7\AppData\Local\Temp\nsq4F84.tmp\[RANDOM_STRING].7z

WgaLogon.dll

C:\Users\win7\AppData\Local\Temp\WD7D93.tmp

C:\Users\win7\AppData\Local\Temp\nseBF15.tmp

c:\download\driver\12950\SoftwareDriver\Driver\CMxPCI6.INF

\\.\COM205

ciplImageLis3N.ocx

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\pbn-8FEF2BFB952A42E0AC59CD2A142FDC8C.zdt

32788R22FWJFW\Combobatch.bat

C:\Users\win7\AppData\Local\Temp\DIQ\test-av6941_004\DomaIQ10.exe

C:\Users\win7\AppData\Local\Temp\is-P3NFI.tmp\sample.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\Z10HJ4T8.txt

C:\Python27\wkernel32.pdb

C:\Users\win7\AppData\Local\Adobe\Updater5\Data\AdobeUpdater.aum

C:\Users\win7\AppData\Local\Tempfolder\ortmp\nssutil3.dll

C:\Users\win7\AppData\Local\Temp\nsh2EF1.tmp\System.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\ELMO PTC-200C.ini

C:\Users\win7\AppData\Local\Temp\nsc230A.tmp\nsArray.dll

C:\ProgramData\Microsoft\Windows\Start Menu

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Prism Video File Format Converter.lnk

C:\Users\win7\AppData\Local\Temp\nsk86CC.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\DIQ\Player_151\config.dll

C:\Users\win7\AppData\Local\Temp\nst41CF.tmp\nsArray.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\3X2MS59D.txt

C:\Users\win7\AppData\Local\Temp\nse7338.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsuA912.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsk86CB.tmp\\1166890363

C:\Users\win7\AppData\Local\Temp\ActSys\SSL\import.bat

32788R22FWJFW\OSid.vbs

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\s9[1].gif

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Help-Customization-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\441cc7d4765d61e4190dc8ce3e1a74a1\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Local\Temp\nsy8F48.tmp\nsArray.dll

32788R22FWJFW\region.dat

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\5SU1GT71.txt

C:\Users\win7\AppData\Local\Temp\nse8C9B.tmp\NSISdl.dll

C:\Pack.mpk

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\CDR7JU2F.txt

C:\Users\win7\Desktop\wkernel32.pdb

C:\Users\win7\AppData\Local\Temp\fe9505b7f8b60bc6e1a74dc5c757fe1e\pricepeep.exe

C:\Users\win7\AppData\Local\Temp\nsy90EA.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nse8B15.tmp

rarext.lng

C:\Users\win7\AppData\Roaming\CuteFTP\sm.dat

C:\Users\win7\AppData\Local\Temp\nsh223F.tmp\SimpleSC.dll

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/Editorb8.bmp

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM56.tmp

c:\download\driver\12950\CmUtil.dll

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\formula9.html

C:\Users\win7\AppData\Local\Temp\68fecef9577b6548cd9f9c89137e6238\volcano.exe

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\WebpDecodeFilter.dll

C:\Users\win7\AppData\Local\Temp\nsbAB5F.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\aaiw686675.bmp

C:\Users\win7\AppData\Local\Temp\GLG801B.tmp

c:\download\driver\12950\SoftwareDriver\Driver\cmudax3.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\223DE96EE265046957A660ED7C9DD9E7_5F4A6047A3FBCAF69FE9965B6C68B6B7

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\D-max.ini

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM24.tmp

C:\Users\win7\AppData\Local\Temp\nsg7C6C.tmp\\381900402

C:\Users\win7\AppData\Local\Temp\Creative_ALchemy_AL6_Cleanup.0001.dir.0000\PfdRun.pfd

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~ro-RO~7.1.7601.16492.cat

C:\Windows\GeoOCX\WebCam\20090916\GoogleMap.htm

C:\Users\win7\AppData\Local\Temp\nsg7C6C.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsc2229.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsy2694.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Google\Chrome\User Data

C:\Users\win7\AppData\Local\Temp\nsv1CDA.tmp

C:\Users\win7\AppData\Local\Temp\7zS77D6.tmp\515f52bb88489.tlb

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZ_BK_Empty.bmp

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\Btn_Dir.png

C:\Windows\system32\DVRArchiveViewer.pdb

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Wired-Network-Drivers-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

\\.\COM168

C:\Users\win7\AppData\Local\Temp\nss31EE.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsg7BCF.tmp

C:\Users\win7\AppData\Local\Temp\nsp794E.tmp\194114351

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\JM7X90OM.txt

c:\Program Files\Common Files\Microsoft Shared\ink\el-GR\tipresx.dll.mui

C:\Users\win7\AppData\Local\Temp\nsiB060.tmp\469409043

\\.\R:

C:\Windows\system32\jepz\ujyt\nhd.dat

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Panasonic_BB_BL.ini

Wincon.SFX

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM23.tmp

32788R22FWJFW\Exe.reg

\\.\PhysicalDrive6

C:\Users\win7\AppData\Local\Temp\nsz4E31.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsp8CDB.tmp\NSISdl.dll

32788R22FWJFW\netsvc.dat

C:\Users\win7\AppData\Local\Temp\nsbC511.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsw20D2.tmp\System.dll

c:\Program Files\Common Files\Microsoft Shared\ink\hwrcommonlm.dat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-Package~31bf3856ad364e35~amd64~en-US~8.0.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsa7A29.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\rd7CD8.tmp\rd7CD9.tmp

C:\Users\win7\AppData\Local\Temp\nsn6FCD.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsw9592.tmp\SimpleSC.dll

C:\Users\win7\Documents

C:\Users\win7\AppData\Roaming\FileZilla\recentservers.xml

\\.\COM132

C:\Users\win7\AppData\Local\Temp\nss8054.tmp\SimpleSC.dll

MSVBVM6N.DLL

C:\Users\win7\AppData\Local\Temp\nsrC484.tmp

C:\Users\win7\AppData\Local\Temp\nse29C0.tmp\\172628766

\\.\COM202

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Pelco_D.dll

C:\Users\win7\AppData\Local\Temp\nsv2B57.tmp\Processes.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\NewErrorPageTemplate[1]

32788R22FWJFW\CF-Script.cmd

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\paused_icon[1]

C:\Users\win7\AppData\Local\Temp\nsr9390.tmp\NSISdl.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-LanguagePack-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\ProgramData\ExpanDrive\drives.js

Avira Registry Cleaner\msvcr71.dll

\\.\COM142

C:\rar.lng

Formats\ace.fmt

C:\Users\win7\AppData\Local\Temp\nst4180.tmp

C:\image\baritem_play.png

C:\Users\win7\AppData\Local\Temp\is-CRKNN.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nsp78B3.tmp\21.tmp

\\.\COM93

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ParentalControls-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsh6D3D.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\\~DFA9E6C7F14B9A4C34.TMP

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM87.tmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_No6.bmp

c:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml

C:\Users\win7\AppData\Local\Temp\nskB31F.tmp\\253123095

C:\Users\win7\Desktop\wntdll.pdb

\\.\COM97

C:\Windows\inf\oem1.inf

C:\Users\win7\AppData\Local\Temp\nsu791F.tmp

C:\Windows\GeoOCX\WebCam\20090916\GeoWatermark.dll

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM8.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-Optional-Package~31bf3856ad364e35~amd64~~8.0.7601.17514.cat

\\.\COM40

C:\Users\win7\AppData\Local\Temp\nsc8C0C.tmp\nsisdl.dll

C:\Users\win7\AppData\Local\Temp\nsx255B.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsh6CEF.tmp\nsArray.dll

\\.\COM145

C:\Users\win7\AppData\Local\Temp\nsh3BAC.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\7zS7336.tmp\lkniaejinldagieikdjacfpfchffkhhi\lsdb.js

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\98JE9070.txt

\\.\COM152

C:\Program Files\Motion-Twin\haxe\lib/hxcpp/.dev

c:\users\win7\appdata\local\tempfolder\veicfbubhoxn\dyvimsycu.dat

C:\Users\win7\AppData\Local\Temp\nsu8CFA.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsd257B.tmp\\1008489509

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_16.bmp

c:\OkiDriver\OKIB2200B2400\OKB3E002.INF

C:\Users\win7\AppData\Local\Temp\nsm7DC3.tmp

C:\Users\win7\AppData\Local\Temp\is-S45LH.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\nsh86A0.tmp\\1104102062

C:\Users\win7\AppData\Local\Temp\nss1752.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsv1C3E.tmp

C:\Users\win7\AppData\Local\Temp\nsz3652.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\W3VPE336.txt

C:\Windows\32BitFtp.ini

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_No9.bmp

C:\Users\win7\AppData\Local\Temp\nsq829A.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsw892E.tmp\SimpleSC.dll

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\copy13.html

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\resources.pri

\\.\COM155

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\ui[1].css

\\.\COM15

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\67F6625BC22310D5C99DDE12020DBD90

c:\download\driver\12950\SoftwareDriver\Driver\CMRMDRV64.DLL

32788R22FWJFW\swreg.exe

32788R22FWJFW\DPF.str

C:\Users\win7/.sqliterc

C:\Users\win7\AppData\Local\Temp\nsw4779.tmp

C:\Users\win7\AppData\Local\Temp\nsz4E31.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hArVzWJrYn.lnk\desktop.ini

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\app[1].js

C:\Users\win7\AppData\Local\Temp\nsx255B.tmp\\317341499

C:\Windows\system32\ric\reat\comb.dat

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM93.tmp

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\copy4.html

\\.\COM84

C:\Windows\system32\blackbox-keys.txt

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-HomeBasicNEdition-wrapper~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\Imagination Studio.dll

C:\Users\win7\AppData\Local\Temp\nsh1712.tmp

C:\Users\win7\AppData\Local\Temp\nsj726D.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nst76AF.tmp\\823495562

C:\Users\win7\AppData\Local\Temp\nsmABEB.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\EHYCYTMU.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\HDFPI9N1.txt

C:\Users\win7\AppData\Local\Temp\pft3E71.tmp\setup.exe

C:\Windows\system32\dll\wkernel32.pdb

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Killbits-Package~31bf3856ad364e35~amd64~~8.0.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\BugReport.exe

C:\Users\win7\AppData\Local\Temp\nsb204B.tmp\NSISdl.dll

C:\Windows\system32\Comcat.dll

C:\Users\win7\AppData\Roaming\ZapSpot\System\etc\AppMsg.zml

C:\Users\win7\AppData\Local\Temp\nsk1BB2.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\aut306B.tmp

c:\download\driver\12950\OemIcon\Thumbs.db

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\Infobar\image\infobar_close_normal.png

C:\Windows\system32\drivers\etc\hosts

C:\Users\win7\AppData\Local\Tempfolder\DoltuJonisep\libplds4.dll

C:\Windows\system32\gunt\karx\cap.dat

C:\Users\win7\AppData\Local\Temp\IPMx2\All\945.inf

C:\Users\win7\AppData\Local\Temp\7zS2C7E.tmp

C:\Users\win7\AppData\Local\Temp\aaiw686674.bmp

C:\Users\win7\AppData\Local\Temp\nstF103.tmp\System.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\EZ.dll

C:\Users\win7\AppData\Local\Temp\nsf78C3.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsv4429.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\DIQ\test-av13688_004\routes.dll

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/interview.html

\\.\S:

C:\Users\win7\AppData\Local\Temp\nsc230A.tmp\151347482

C:\Program Files\Teamspeak2_RC2\_ci_gentee_

\\.\Nsi

C:\Users\win7\AppData\Local\Temp\nso8AB8.tmp\nsArray.dll

\\.\COM238

C:\Users\win7\AppData\Local\Temp\nsl7B04.tmp

C:\Users\win7\AppData\Local\Adobe\Updater5\aum.log

C:\Users\win7\AppData\Local\Temp\nshF05B.tmp\2c373164-efdd-4a23-bcae-d359c2f35578.dll

32788R22FWJFW\LocalSystemNetworkRestricted.dat

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\VOJH2NYR.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\7OC8IN9Z.txt

wntdll.pdb

C:\Users\win7\AppData\Local\Temp\nsm7EAE.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsu25A0.tmp\\684128688

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\analytics[1].js

C:\Users\win7\AppData\Local\Temp\nsy247C.tmp\SimpleSC.dll

C:\Windows\system32\gaq\ofe\esuud.dat

C:\Users\win7\AppData\Local\Temp\nsf795F.tmp\System.dll

C:\Windows\GeoOCX\WebCam\20090916\PCDStable_8320.xml

C:\Users\win7\AppData\Local\Temp\IPMx2\All\915M.inf

C:\Users\win7\AppData\Local\Temp\Trojan.exe

\\.\COM199

C:\Users\win7\AppData\Local\Temp\nsr152F.tmp\NSISdl.dll

C:\Windows\System32\Wbem\symbols\dll\wntdll.pdb

C:\Users\win7\AppData\Local\Temp\nso282A.tmp\NSISdl.dll

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-changjei.xml

C:\Users\win7\AppData\Local\Temp\nsm8B56.tmp\System.dll

C:\Windows\svchost.exe

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\index.html

C:\Users\win7\AppData\Local\GDIPFONTCACHEV1.DAT

32788R22FWJFW\embedded.sed

\\.\COM6

32788R22FWJFW\Boot-Rk.cmd

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Classic FTP Software.lnk

MyMusicTube.swf

C:\Users\win7\AppData\Local\Temp\nsg1DB6.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\EventTracing.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\P280NA27.txt

\\.\Scsi5:

C:\Users\win7\AppData\Local\Temp\aut3059.tmp

C:\sample\1

C:\Users\win7\AppData\Local\Temp\nst1B49.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nst41CF.tmp\\1201008518

\\.\COM165

32788R22FWJFW\FIND3M.bat

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\pbn-AB85E39971104D748D9F1EA42F6BD65F.zdt

32788R22FWJFW\w2k_sock.dll

C:\Users\win7\AppData\Local\Temp\nsm225E.tmp\NSISdl.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZRD.bmp

c:\Program Files\Alexa Booster v3.2\uninstall.exe

C:\Users\win7\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\GIF to Flash Converter\Help.lnk

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Branding-ProfessionalN-Client-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsgEBAB.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjhklgikohjiaahlibnfgegobedhpgmf

C:\Users\win7\AppData\Local\Temp\pftD7AF~tmp\Disk1\Setup.bmp

MSSTDFMT.DLL

C:\Users\win7\AppData\Local\Temp\rd7CD8.tmp\rd7CDA.tmp

C:\Windows\symbols\dll\wntdll.pdb

C:\Users\win7\AppData\Local\Temp\nsz8FE5.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nss4B52.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\\~DFD97DC53F41BEB22D.TMP

MSSTDFMN.DLL

C:\Windows\MSCOMCTL32.OCX

C:\Users\win7\AppData\Local\Temp\441cc7d4765d61e4190dc8ce3e1a74a1\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsa1F60.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsx12F2.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Anytime-Upgrade-Results-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

\\.\PhysicalDrive13

C:\Users\win7\AppData\Roaming\uLEThjJw\GJFKrvSGxB.exe

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerToPeer-Full-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.pdb

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\WDDV2886.txt

C:\Users\win7\AppData\Local\Temp\nsc7BA4.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsm42D.tmp

C:\Windows\system32\actskin4.ocx

\\.\COM215

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM32.tmp

C:\Users\win7\AppData\Local\Temp\WER745F.tmp.WERInternalMetadata.xml

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Doxillion Document Converter.lnk

SmartInstaller.exe

C:\Users\win7\AppData\Local\Temp\nsk7579.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-LocalPack-CA-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\GeoOCX\WebCam\20090916\POSLiveViewX_STable_8100.xml

C:\Users\win7\AppData\Local\Temp\nsm6C24.tmp\1210133932

C:\Users\win7\AppData\Local\Temp\ef9f727098f02eb359d2c1dac93f30ee\pricepeep.exe

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\HS1GGZ3H.txt

\\.\COM80

C:\Users\win7\AppData\Local\Temp\_switch_rl

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\??????? WinRAR.lnk

C:\Users\win7\AppData\Local\Temp\d06fcbb59363a1adb6768ef5c595d7c2\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Local\Temp\nse1AEB.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~en-GB~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\line[1]

C:\Users\win7\AppData\Local\Temp\7zS7336.tmp\lkniaejinldagieikdjacfpfchffkhhi\manifest.json

C:\Python27\Scripts\dll\CFVS_HookDll.pdb

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM78.tmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\wrapper[1]

C:\Users\win7\AppData\Local\Temp\nsc3058.tmp\711675182

C:\Users\win7\AppData\Local\Temp\7zS2C7E.tmp\515f5b4a5a364.dll

\\.\Scsi4:

C:\Users\win7\AppData\Local\Temp\nsi3C4A.tmp\Processes.dll

c:\windows\system32\drivers\aliide.sys

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\MouseGesture.dll

C:\Users\win7\AppData\Local\Temp\nsm86C0.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsa7A29.tmp\ioSpecial.ini

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Barowasse2saave\Uninstall.lnk

C:\Users\win7\AppData\Local\Temp\sfx1\_bbg.exe

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\navi.ico

C:\Users\win7\AppData\Roaming\SharedSettings.ccs

32788R22FWJFW\appinit.bad

C:\Windows\System32\Wbem\exe\DVRArchiveViewer.pdb

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\pbn-BC0E2BBD502F41D7BC8CF7D74B35293B.zdt

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM18.tmp

32788R22FWJFW\hidec.exe

C:\Users\win7\AppData\Local\Temp\nsr2DF6.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\WPCUG73F.txt

C:\Users\win7\AppData\Local\Temp\nsp85B2.tmp

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred.xml

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-Optional-Package~31bf3856ad364e35~amd64~~11.2.9600.16428.cat

C:\Users\win7\AppData\Local\Temp\nsk1EB4.tmp\nsArray.dll

C:\Users\win7\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch

C:\Windows\system32\ccrpprg3N.ocx

C:\Users\win7\AppData\Local\Temp\nsg2C80.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\08DG606B.txt

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~es-ES~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsn2607.tmp\System.dll

C:\Windows\dll\wkernel32.pdb

\\.\PhysicalDrive9

C:\Users\win7\AppData\Local\Temp\nsd7114.tmp\NSISdl.dll

\\.\COM45

C:\Users\win7\AppData\Local\Temp\fefa3aaf94374590437d72a7b328196e\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Local\Tempfolder\DoltuJonisep\ssl3.dll

C:\Users\win7\AppData\Local\Temp\nsm7EFC.tmp\System.dll

\\.\COM246

C:\Users\win7\AppData\Local\Temp\nss23B5.tmp

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Golden Records LP Converter.lnk

\\.\COM212

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZIRISin.bmp

C:\Users\win7\AppData\Local\Temp\is-EU83C.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\nsc182B.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Branding-UltimateN-Client-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsd257B.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsl1E23.tmp\120566233

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\GetMes700.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\E8SJBJ2R.txt

C:\Users\win7\AppData\Local\Temp\nsl2172.tmp

C:\Users\win7\AppData\Local\Temp\nsi6F11.tmp

C:\Users\win7\AppData\Local\Temp\nse724E.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\is-CQABJ.tmp\is-H9UQD.tmp

C:\Users\win7\AppData\Local\Temp\nsr2EE1.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsf1DAA.tmp

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\CheckBox.png

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\IOMBTIH2.txt

C:\Users\win7\AppData\Local\Temp\nsl79B4.tmp

C:\Data\Textures\Gui\CreateMission_Save_02.dds

\\.\COM189

C:\Users\win7\AppData\Local\Temp\nsn4A48.tmp

C:\Users\win7\AppData\Local\Tempfolder\DoltuJonisep\nssckbi.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\normal_bg[1]

C:\Users\win7\AppData\Local\Temp\nsu1BEF.tmp

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad.xml

C:\Users\win7\AppData\Local\Temp\nsr6C43.tmp\915532859

C:\Users\win7\AppData\Local\Temp\nsp3498.tmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\language[1]

C:/Program Files/TSK/sound.pat

C:\Users\win7\AppData\Local\Temp\nsgDDF8.tmp\462088281

\\.\H:

c:\OkiDriver\OKIB2200B2400\OPPE_S00.DAT

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\formula7.html

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\msvcrt.dll

__tmp_rar_sfx_access_check_755796

C:\Windows\System32\WindowsPowerShell\v1.0\symbols\dll\wkernel32.pdb

C:\Data\Strings.info

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\X1STFDHL.txt

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM31.tmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\ui[1].js

ini.dat

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\Microsoft.VC90.CRT\msvcp90.dll

c:\cgvi5r6i\vgdgfd.72g

C:\Users\win7\AppData\Local\Temp\nsc7B08.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsz2904.tmp

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Preferences

C:\Users\win7\AppData\Local\Temp\nsp8CDB.tmp\\500292442

C:\WeatherWatcher.log

C:\Users\win7\AppData\Local\Temp\nspB916.tmp\NSISdl.dll

\\.\COM87

C:\Users\win7\AppData\Local\Temp\nskF4BB.tmp

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\Infobar\image\infobar_close_active.png

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM79.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\RDT2MBDV.txt

C:\Users\win7\AppData\Local\Temp\nsq7BC0.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsiB060.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsg7ACE.tmp\\581706123

c:\windows\system32\vboxtray.exe

C:\ProgramData\FlashFXP\3\History.dat

c:\users\win7\appdata\local\temp\sfx1\bbgift.puz

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\pbn-CB1CD343FA4F4C8DB7C935D5D4D1C01E.zdt

C:\Users\win7\AppData\Roaming\FlashFXP\3\Sites.dat

C:\Users\win7\AppData\Local\Temp\nshC833.tmp\SimpleSC.dll

32788R22FWJFW\dosdev.exe

C:\Users\win7\AppData\Local\Temp\ac85e0056038215dc4e484ecc5b69fbe\DirectDownloaderInstaller.exe

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~~7.1.7601.16492.cat

\\.\COM121

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\dnserrordiagoff[1]

C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll

c:\Program Files\FontLab\FontLab\mpw32.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Panasonic_BB381_481.ini

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM33.tmp

C:\Users\win7\AppData\Local\Temp\b82b985bee9cc6a610d7c50fc7373126\BitAcceleratorDDLRinstaller.exe

\\.\COM1

\\.\COM176

c:\Program Files\Alexa Booster v3.2\Proxy\agents.txt

C:\Users\win7\AppData\Local\Temp\AdwCleaner.jpg

C:\Users\win7\AppData\Local\Temp\\~DFDA1C1CD56ED870BD.TMP

C:\Users\win7\AppData\Local\Temp\nsc79CF.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsw1FE7.tmp

C:\Windows\inf\ntprint.PNF

c:\download\driver\12950\SoftwareDriver\Driver\CMxPCI7.INF

\\.\COM222

C:\Users\win7\AppData\Local\Temp\is-VLONM.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\e873621278eb045fa3d6cb0e9d983d10\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Local\Temp\nst2711.tmp\nsArray.dll

D:\ChamClock\Logo by Granin\install-addons.bmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\WR14WSMU.txt

\\.\COM236

C:\Users\win7\AppData\Local\Temp\nsa85A4.tmp\nsExec.dll

C:\Users\win7\AppData\Local\Temp\\~DFAD1269649A08007E.TMP

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\Edit.png

C:\Users\win7\AppData\Local\Temp\nsfDB2.tmp

C:\Users\win7\AppData\Local\Temp\nstE5EE.tmp\NSISdl.dll

C:\Windows\system32\cee\inua\lixd.dat

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\OO0LK6TB.txt

C:\Users\win7\AppData\Local\Temp\nst1B49.tmp\\935077591

C:\Windows\system32\COMCTL3N.OCX

C:\Users\win7\AppData\Local\Temp\nsq7720.tmp\\558552086

C:\Users\win7\AppData\Local\Temp\nsnB3E7.tmp\nsArray.dll

C:\Windows\system32\wntdll.pdb

C:\Windows\system32\691765.tmp

C:\Windows\GeoOCX\WebCam\20090916\GeoCodecReg\GXAVC.dll

ASLOC.dll

C:\Users\win7\AppData\Local\Temp\nst76AF.tmp\NSISdl.dll

C:\Windows\System32\WindowsPowerShell\v1.0\wntdll.pdb

C:\Users\win7\AppData\Local\Temp\is-Q8QEV.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\7W01F2NA7U737xD7AC6G3Zh81k

C:\Users\win7\AppData\Local\Temp\nso1A8D.tmp

C:\Users\win7\AppData\Local\Temp\nsk9246.tmp\1181702137

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\OMVW2P30.txt

C:\Users\win7\AppData\Local\Adobe\Updater5\AdobeUpdaterPrefs.dat

C:\Users\win7\AppData\Local\Temp\nsw9592.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsq2059.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CodecPack-Basic-Package-wrapper~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich8smb.inf

C:\Users\win7\AppData\Local\Temp\nsx9767.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nscAE6B.tmp

C:\Users\win7\AppData\Local\Temp\nsw7C7C.tmp\267185768

C:\ZapImages\ani-logomain-117x84.gif

32788R22FWJFW\REGDACL.sed

C:\Users\win7\AppData\Local\Temp\nse9189.tmp

C:\Users\win7\AppData\Local\Temp\nsdA642.tmp

C:\Users\win7\AppData\Local\Temp\is-PTDNB.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\GLKFD8.tmp

C:\Users\win7\AppData\Local\Temp\9c2704c22ceab0ebc352c74d631e8669\downloaderOFFER1.exe

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\kxBArVzWJrYn.lnk

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich7usb.inf

C:\Windows\system32\MSSTDFMT.DLL

\\.\PhysicalDrive0

C:\Users\win7\AppData\Local\Temp\nsj8EEA.tmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\EverFocus.ini

c:\Program Files\Common Files\Microsoft Shared\ink\es-ES\tipresx.dll.mui

C:\Users\win7\AppData\Local\Temp\nskCCD2.tmp\SimpleSC.dll

C:\Python27\symbols\dll\CFVS_HookDll.pdb

32788R22FWJFW\Auto-RC.cmd

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Axis_PTZ.ini

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\D3UFP1ST.txt

C:\Users\win7\AppData\Local\Temp\nss8D53.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nszA5E1.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsx16D5.tmp\lxdl.dll

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\WSysInfo.dll

C:\Users\win7\AppData\Local\Temp\nsg6E82.tmp\\570537705

C:\Python27\dll\wkernel32.pdb

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\RRCV0DH3.txt

C:\Users\win7\AppData\Local\Temp\nse8B64.tmp\989149078

C:\Python27\symbols\dll\wkernel32.pdb

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientExtensions-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

c:\OkiDriver\OKIB2200B2400\OPPESLOC.DLL

C:\Users\win7\AppData\Local\Temp\nse2946.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM14.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\YB7U3PB5.txt

C:\Users\win7\AppData\Local\Temp\nse28D5.tmp

C:\Users\win7\AppData\Local\Temp\nsv1D77.tmp\nsWeb.dll

C:\Windows\system32\olepro32.dll

32788R22FWJFW\vistareg.dat

C:\Users\win7\AppData\Local\Temp\DIQ\test-av13490_004\OfferBrokerage_14003.exe

C:\Windows\RICHTX32.OCX

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkmejkdfcnncpgjajbiahlekpebhcnhl\1\manifest.json

C:\Users\win7\AppData\Local\Temp\nsp1E37.tmp\\539484055

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk

\\.\COM235

C:\Users\win7\AppData\Local\Temp\nsr2F2F.tmp\315094195

C:\ProgramData\CoffeeCup Software\SharedSettings.sqlite

C:\Users\win7\AppData\Local\Temp\nsa395F.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-VLONM.tmp\_isetup\_isdecmp.dll

C:\Users\win7\AppData\Local\Temp\b82b985bee9cc6a610d7c50fc7373126\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Local\Temp\nsv8842.tmp

c:\users\win7\appdata\local\tempfolder\qegmanudp\lijufamoah.dat

C:\Windows\system32\symbols\exe\DVRArchiveViewer.pdb

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\Editorb7.bmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZZOut.bmp

C:\Users

\\.\PHYSICALDRIVE0

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\Microsoft.VC90.CRT\msvcr90.dll

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\Ksicfg.dll

C:\Users\win7\AppData\Local\Temp\nsiCBAF.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nstC967.tmp\NSISdl.dll

C:\KyoRm.ini

C:\Windows\system32\Msflxgrd.ocx

Formats\UNACEV2.DLL

C:/Windows/system32/CMDLGJP.DLL

C:\Users\win7\AppData\Local\Temp\nsu2A1E.tmp\System.dll

C:\Windows\Imagination Studio.scr

C:\My Documents\mega-pack

\\.\COM223

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\killerlayout.jpg

C:\Users\win7\AppData\Local\Temp\nsf1C2F.tmp\565191847

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\nJfxcWgTsy.lnk

C:\Users\win7\AppData\Local\Temp\nsk7894.tmp\nsArray.dll

32788R22FWJFW\Creg.dat

C:\Users\win7\AppData\Local\Temp\nsd257A.tmp

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM55.tmp

WgaTray.exe

C:\Windows\dll\wntdll.pdb

c:\apilog.txt

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich7ide.inf

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM10.tmp

C:\Users\win7\AppData\Local\Temp\nsgBB49.tmp\NSISdl.dll

C:\myapp.exe

C:\Users\win7\AppData\Local\Temp\{0654AC99-2BF5-4929-9C44-4B6872A6C4E0}\0x0409.ini

C:\Users\win7\AppData\Local\Temp\is-4KG8T.tmp\sample.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\UJ1TO3Y2.txt

C:\Users\win7\AppData\Local\Temp\nsq1EDE.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nszA5E1.tmp\\340359336

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\tabskb.dll.mui

32788R22FWJFW\License\mtee.txt.txt

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\ZapSpot\System\Core.zdt

C:\Users\win7\AppData\Local\Temp\nsx23D5.tmp\\365011575

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM70.tmp

C:\Users\win7\AppData\Local\Temp\nsh7A8A.tmp

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM27.tmp

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\insideout.html

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\Btn_Done.png

c:\python27\dlls\py.ico

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RArVzWJrYnj.lnk

C:\Users\win7\AppData\Local\Temp\nsm225E.tmp\\442134949

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\DX8C2WAM.txt

C:\Users\win7\AppData\Local\Temp\nsmE3A2.tmp\\384317956

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\WListViewEx.dll

32788R22FWJFW\netsvc.xp.dat

C:\Users\win7\AppData\Local\Temp\nsn326B.tmp\\858941668

\\.\PhysicalDrive10

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\section1.html

C:\Users\win7\Desktop\dll\CFVS_HookDll.pdb

C:\Users\win7\AppData\Local\Temp\nsn326B.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\VLKMTUFC.txt

C:\Users\win7\AppData\Local\Temp\nsgD1D8.tmp\\1099403155

C:\Users\win7\AppData\Local\Temp\nsf1CCB.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsp1E37.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsd70C7.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsk7894.tmp\\936337443

C:\Users\win7\AppData\Local\Temp\nss55EB.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nseA5B1.tmp

C:\Users\win7\AppData\Local\Temp\nsh223E.tmp

C:\Users\win7\AppData\Local\Temp\nsr2DF7.tmp\nsWeb.dll

C:\Data\Textures\Gui\Options_Assignments_02.dds

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\resume[1]

C:\Users\win7\AppData\Roaming\SharedSettings_1_0_5.ccs

\\.\COM239

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/insideout.html

RarExtLoader.exe

C:\Users\win7\AppData\Local\Temp\nsa330E.tmp\SimpleSC.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~pt-PT~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsnB3E7.tmp\\769355975

\\.\COM71

C:\Windows\system32\kuui\wij\maks.dat

C:\Users\win7\AppData\Local\Temp\nshBEA4.tmp

C:\Users\win7\AppData\Local\Temp\nsq1D0A.tmp\System.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\JEC_P.ini

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\CallbackCtrl.dll

\\.\COM34

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\Editorb8.bmp

\\.\COM28

C:\Users\win7\AppData\Local\Temp\\~DF3751328F33314E67.TMP

C:\Users\win7\AppData\Local\Temp\nsd8219.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsc3142.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsh8605.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\VSD492D.tmp\DotNetFX\dotnetchk.exe

C:\Users\win7\AppData\Local\Temp\nsx2FEB.tmp\SimpleSC.dll

32788R22FWJFW\Combo-Fix.sys

C:\Users\win7\AppData\Local\Temp\nsv1EA5.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsz1AD7.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsw9718.tmp\SimpleSC.dll

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Soearcho--NewTeAb\Uninstall.lnk

C:\Users\win7\AppData\Local\Microsoft

C:\Users\win7\AppData\Local\Temp\4d817503ee65560a8dcdb650fa6add61\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsuB310.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsk1BB2.tmp\NSISdl.dll

\\.\COM11

C:\Users\win7\AppData\Local\Temp\IPMx2\All\855.inf

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8A574ED5927B3CEC9626151D220C7448

C:\Users\win7\AppData\Local\Temp\nsy8F48.tmp\1128005201

C:\Users\win7\AppData\Local\Temp\nsjB282.tmp

C:\Users\win7\Documents\blackbox-keys.txt

C:\Windows\system32\symbols\dll\wkernelbase.pdb

C:\Users\win7\AppData\Local\Temp\nsxACC6.tmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\cancel[1]

\\.\Y:

C:\Users\win7\AppData\Local\Temp\nsk1C9B.tmp

C:\Users\win7\AppData\Local\Temp\~GLH0000.TMP

C:\Users\win7\AppData\Local\Temp\nsq1D0A.tmp\\379891449

C:\Users\win7\AppData\Local\Temp\nsm2EC2.tmp\nsWeb.dll

ascbalo3N.dll

C:\Users\win7\AppData\Local\Temp\DIQ\test-av13688_004\config.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\ui[1].css

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_Enter.bmp

C:\Users\win7\AppData\Local\CoffeeCup Software\SharedSettings.sqlite

C:\Users\win7\AppData\Local\Temp\68fecef9577b6548cd9f9c89137e6238\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Local\Temp\nsl2DD6.tmp

C:\Program Files\desktop.ini

C:\wc32to16.exe

C:\Users\win7\AppData\Local\Temp\nsh6CEF.tmp\\1008523559

C:\Users\win7\AppData\Local\Temp\nsi6F5F.tmp

C:\Users\win7\AppData\Local\Temp\nsi3D34.tmp\\105448008

c:\Program Files\Alexa Booster v3.2\Skins\3.bmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Sony.ini

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\section5.html

C:\Users\Public\Desktop

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\COMCTL32.DLL

C:\Users\win7\AppData\Local\Temp\nso8E41.tmp

\\.\PIPE\DAV RPC SERVICE

C:\Users\win7\AppData\Local\Temp\nsu25A0.tmp\684128688

C:\Users\win7\AppData\Local\Temp\nsy7192.tmp\\427833926

C:\Users\win7\AppData\Local\Temp\nsb156C.tmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\104[1]

32788R22FWJFW\SnapShot.cmd

c:\download\driver\12950\SoftwareDriver\INI\cmudax3.ini

C:\Users\win7\AppData\Local\Temp\nsb1CB7.tmp\\862653124

32788R22FWJFW\CSet.cmd

C:\Users\win7\AppData\Local\Temp\7zS2C7E.tmp\515f5b4a5a364.tlb

C:\Users\win7\AppData\Local\Temp\\~DF354D6BA716BA062F.TMP

C:\Users\win7\AppData\Roaming\WIN7-PC.FKG

C:\Users\win7\AppData\Local\Temp\nsg2069.tmp

C:\Users\win7\AppData\Local\Temp\nso27DC.tmp\\211411778

C:\Windows\OLEAUT3N.DLL

32788R22FWJFW\av.cmd

C:\Users\win7\AppData\Local\Temp\nsm2FF9.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsz73B5.tmp\\568528752

\\.\COM58

\??\C:\Windows\system32\syncui.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\vVzWJrYnj.lnk

C:\Users\win7\AppData\Local\Temp\nsy8713.tmp\nsArray.dll

C:\Windows\inf\oem0.PNF

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~zh-CN~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\7zS7336.tmp\settings.ini

C:\Users\win7\AppData\Local\Temp\nsmE3A2.tmp\384317956

C:\Users\win7\AppData\Local\Temp\nsc94BA.tmp\NSISdl.dll

c:\OkiDriver\OKIB2200B2400\OPB240N.dat

C:\Users\win7\AppData\Local\Temp\nsh8605.tmp\568188251

C:\Skins\1.skn

C:\sample.gui

C:\Users\win7\AppData\Local\Temp\nsl5ED4.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsc16F4.tmp\nsArray.dll

C:\Windows\system32\wkernelbase.pdb

\\.\COM63

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Gadget-Platform-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\Btn_Inst.png

CONOUT$

C:\Users\win7\AppData\Local\GlobalSCAPE\CuteFTP Pro\sm.dat

C:\Users\win7\AppData\Local\Temp\nsm6C24.tmp\nsArray.dll

C:\Windows\System32\MsAudio.ocx

C:\ProgramData\FileZilla\sitemanager.xml

C:\Users\win7\AppData\Local\Temp\nsl1E23.tmp\\120566233

C:\Users\win7\AppData\Local\Temp\ab5d4243cc93ed6bbca90dd95ca61177\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\6N4F6AIC.txt

C:\Users\win7\AppData\Local\Temp\nsx7FD6.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsh21FA.tmp\NSISdl.dll

C:\Windows\system32\ASYCFILT.DLL

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\Ksicfg.dll

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\Infobar\inforBar.html

C:/Program Files/TSK/tsksound.dll

C:\Users\win7\AppData\Local\Temp\nsp842D.tmp\608912117

C:\Users\win7\AppData\Local\Temp\nsw4FAE.tmp\\861052772

C:\Users\win7\AppData\Local\Temp\nsq7599.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\8HRY3KCY.txt

\\.\COM122

C:\image\barbutton_right.png

C:\Users\win7\AppData\Local\Temp\nsp8CDB.tmp\nsArray.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Common-Modem-Drivers-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich5id2.inf

C:\Users\win7\AppData\Local\Temp\nsx16D5.tmp\inetc.dll

C:\Users\win7\AppData\Local\Temp\RarSFX0\mchppIc.exe

C:\Users\win7\AppData\Roaming\GlobalSCAPE\CuteFTP\sm.dat

\??\C:\Windows\system32\EhStorShell.dll

C:\Users\win7\AppData\Local\Temp\nsr475A.tmp

C:\Users\win7\AppData\Local\Temp\nstDAFD.tmp\931263985

C:\Users\win7\AppData\Local\Temp\nsx8B46.tmp

C:\Users\win7\AppData\Local\Temp\nsp78B3.tmp\ZipDLL.dll

\\.\COM200

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PhotoBasicPackage~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\GlobalSCAPE\CuteFTP Lite\sm.dat

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\ZapSpot.exe

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nso28C6.tmp\307909633

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\ithttp.dll

C:\Users\win7\AppData\Local\Temp\is-MEJF8.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\000a3d85.a

C:\Users\win7\AppData\Local\Temp\nsa2C60.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsp794E.tmp\\194114351

C:\ProgramData\GHISLER\wcx_ftp.ini

C:\Users\win7\AppData\Local\Temp\nsr5EA6.tmp\NSISdl.dll

C:\image\barbutton_left.png

C:\Users\win7\AppData\Local\Tempfolder\ortmp\softokn3.dll

C:\Users\win7\AppData\Local\Temp\nsi16F1.tmp

C:\Users\win7\AppData\Local\Temp\nsy92DC.tmp\System.dll

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/index.html

C:\Users\win7\AppData\Local\Temp\nsz8067.tmp\NSISdl.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~pt-BR~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsz1AD7.tmp\1114010628

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D7B4E43171BB9E412497B0377F4343E7

C:\Users\win7\AppData\Local\Temp\nsx2FEB.tmp\System.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\YSSWAERZ.txt

C:\Windows\system32\ciplImageLis3N.ocx

\\.\COM25

C:\Users\win7\AppData\Local\Temp\DIQ\Player_151\routes.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\mobi2[1].js

\\.\COM248

C:\Users\win7\AppData\Local\Temp\nss1752.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsoB080.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM64.tmp

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\uninst.exe

C:\Users\win7\AppData\Local\Tempfolder\DoltuJonisep\libplc4.dll

\\.\N:

C:\Windows\System32\dllcache\dnsapi.dll

C:\Users\win7\AppData\Local\Temp\nsr1493.tmp\nsArray.dll

C:\Windows\wntdll.pdb

C:\Users\win7\AppData\Roaming\CoffeeCup Software\SharedSettings.sqlite

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\Downloader.dll

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\asl-icn-mini-games-32x32x2.gif

C:\Users\win7\AppData\Local\Temp\{0903A383-0598-4DEC-8D80-08B12F2C46B7}\0x0419.ini

C:\Users\win7\AppData\Local\Temp\\~DF1F964BFD8192D358.TMP

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\ext[1].js

C:\Users\win7\AppData\Local\Temp\nsq5CD1.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nss6E17.tmp

C:\Windows\GeoOCX\WebCam\20090916\ImageGUI.dll

C:\Users\win7\AppData\Local\Temp\nsd6F41.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\desktop.ini

C:\Users\win7\AppData\Local\Temp\nsi3EB0.tmp\splash.bmp

__tmp_rar_sfx_access_check_1825656

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A34B45DD28A5DAEFDA3E0BA2FCE7DE24_87910BE1C29EBFE2C02400CF6890DE18

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\JYXL1SXV.txt

C:\Users\win7\AppData\Local\Temp\f2da611710f7fa687bb7d99d2b938369\volcano.exe

C:\Users\win7\AppData\Local\Temp\nsoFCAB.tmp

C:\Users\win7\AppData\Local\Temp\nse73D4.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\\~DFAE72EFF6687B264C.TMP

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\buywords.gif

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_84FF9D6F15EF7AC15278E8CA625D6354

C:\Users\win7\AppData\Local\Temp\7zS77D6.tmp\hpcdeopkgienceaajfkaohfhnacpfamh\lsdb.js

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\botva2.dll

C:\ProgramData\FlashFXP\4\History.dat

C:\Users\win7\AppData\Local\CoffeeCup Software\SharedSettings_1_0_5.ccs

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Related Programs\VideoPad Video Editor.lnk

C:\Users\win7\AppData\Local\Temp\nsf865E.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\SharedSettings_1_0_5.sqlite

C:\Users\win7\AppData\Local\Temp\7zS7BFD.tmp\settings.ini

C:\Users\win7\AppData\Local\Temp\nsg2EA1.tmp

C:\Users\win7\AppData\Local\Temp\nsk797D.tmp

c:\users\win7\appdata\local\tempfolder\wikaapavnu\lohutaaho.dat

C:\Users\win7\AppData\Local\Temp\is-280BG.tmp\_isetup\_setup64.tmp

\\.\COM144

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\nsd18C9.tmp\825095914

32788R22FWJFW\srizbi.md5

C:\Users\win7\AppData\Local\Temp\nsf75F6.tmp

C:\Users\win7\AppData\Local\Temp\nsk7894.tmp\936337443

C:\Users\win7\AppData\Local\Temp\DIQ\flashplayer_154\OfferBrokerage_14003.exe

c:\Program Files\FontLab\FontLab\MPWizard.CFG

\\.\COM12

\\.\COM51

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\resume[1]

C:\Users\win7\AppData\Local\Temp\nsm2FF9.tmp\nsResize.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\GetPosSen.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Tempfolder\DoltuJonisep\sqlite3.dll

C:\Users\win7\AppData\Local\Temp\nsb1F1C.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsa7626.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsd8B0A.tmp\NSISdl.dll

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus\McAfee Security Scan Plus.lnk

C:\Python27\symbols\dll\wntdll.pdb

C:\Windows\GeoOCX\WebCam\20090916\GeoCodecReg

C:\Users\win7\AppData\Local\Temp\12aubfff5\appdata\\Adblock\{43789A6F-8316-54A6-96D4-87874B9CC177}

C:\Users\win7\AppData\Local\Temp\nsi5ECB.tmp

C:\Users\win7\AppData\Local\Temp\nstC967.tmp\269705472

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\MixPad MultiTrack Mixer.lnk

c:\OkiDriver\OKIB2200B2400\OPPE_H00.HLP

\\.\SIWVIDSTART

1.zip

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Editions-ClientN-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nss567D.tmp

C:\Windows\COMCTL3N.OCX

\\.\PhysicalDrive15

C:\Users\win7\AppData\Local\Temp\nsdB35A.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Printer-Drivers-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

\\.\Scsi12:

C:\Users\win7\AppData\Local\Temp\SPI38FC.tmp\setup.lic

\\.\PhysicalDrive4

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\YAAN.ini

C:\Users\win7\AppData\Local\Temp\nsk1DCA.tmp\1.zip

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\Dlg_Btn_Cancel.png

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\utils[1].js

c:\IES_Files\Outdoor\Bollards\OSA8R-HID\OSA8R-100PSMH120-CG.IES

MsAudio.ocx

C:\ZapImages\asl-btn-big-support-83x28x2.gif

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM69.tmp

C:\Users\win7\AppData\Local\Temp\nstE5A0.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsy247C.tmp\System.dll

32788R22FWJFW\List.bat

C:\Users\win7\AppData\Local\Temp\nsw2DA6.tmp\492358780

C:\Users\win7\Videos\desktop.ini

32788R22FWJFW\Lang.bat

C:\Users\win7\AppData\Local\Temp\nsr152F.tmp\nsArray.dll

C:\Windows\RICHTX32.DEP

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\mobi2[1].js

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\copy6.html

__tmp_rar_sfx_access_check_1093156

C:\\image\baritem_option.png

C:\Users\win7\AppData\Local\Temp\nse8B64.tmp\nsArray.dll

c:\OkiDriver\OKIB2200B2400\OPPE_F01.dll

C:\Users\win7\AppData\Local\Temp\nsc3057.tmp

C:\Windows\wcx_ftp.ini

C:\image\baritem_new.png

C:\Users\win7\AppData\Local\Temp\Elite_Xl2k\GCXL8081.PPD

C:\Users\win7\AppData\Local\Temp\nsn7A19.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\{0903A383-0598-4DEC-8D80-08B12F2C46B7}\0x0409.ini

C:\Users\win7\AppData\Local\Temp\nsq94D5.tmp

\\.\COM29

C:\Windows\system32\MsAudio.ocx

c:\Program Files\Alexa Booster v3.2\Proxy\referers.txt

C:\Users\win7\AppData\Local\Temp\nsr2EE1.tmp\NSISdl.dll

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base.xml

C:\\image\baritem_open.png

c:\download\driver\12950\SoftwareDriver\Driver\CMxPCI4.INF

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\HXXI3S48.txt

C:\Users\win7\AppData\Local\Temp\12auf94d4\license.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\XR0RXMP2.txt

C:\Users\win7\AppData\Local\Temp\nsiB060.tmp\NSISdl.dll

\\.\COM38

C:\Python27\dll\wntdll.pdb

\\.\Scsi10:

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\1navleft.jpg

\\.\COM86

C:\Users\win7\AppData\Local\Temp\Elite_Xl2k\GCX12S1.PPD

C:\Windows\inf\oem4.inf

C:\Users\win7\AppData\Local\Temp\nsv3915.tmp\NSISdl.dll

c:\Program Files\Alexa Booster v3.2\Proxy\proxy.txt

C:\Python27\dll\wkernelbase.pdb

C:\Users\win7\AppData\Local\Temp\nsg206A.tmp\SkinH.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94C18AA77707A64853AFFBE6D6382F75

C:\Windows\Msflxgrd.ocx

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~ar-SA~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\4ae6cf3c7fbd3414df26e8400c7d510e\pricepeep.exe

C:\Settings\Queue.xml

C:\Users\win7\AppData\Local\Temp\nsa7AC6.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nslAE1B.tmp\SimpleSC.dll

\\.\COM83

C:\Users\win7\AppData\Local\Temp\nsk9246.tmp\\1181702137

C:\Users\win7\AppData\Local\Temp\5a6e0d7e7fb82588b081b16c0bd88029\DirectDownloaderInstaller.exe

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\SamSung.dll

\\.\Scsi8:

C:\WINDOWS\FONTS\COMICBD.TTF

C:\Users\win7\AppData\Local\Temp\nsc94BA.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsgC3AA.tmp\\978525460

C:\Windows\dll\System.Windows.Forms.pdb

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\ShapeCollector.exe.mui

C:\sample.config

C:\Users\win7\AppData\Local\Temp\nsgF973.tmp

c:\download\driver\12950\SoftwareDriver\Driver\CMUDAX3.CAT

C:\Users\win7\AppData\Roaming\FlashFXP\4\Quick.dat

C:\Files

C:\Users\win7\AppData\Local\Temp\nst58AB.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM57.tmp

C:\Users\win7\AppData\Local\Temp\nse29C0.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-MEJF8.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\nsoE348.tmp\ZipDLL.dll

C:\Users\win7\AppData\Local\Temp\nss8054.tmp\StdUtils.dll

c:\pagefile.sys

C:\Users\win7\AppData\Local\Temp\nsg94E6.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nst76AF.tmp\823495562

C:\Users\win7\AppData\Local\Temp\nsx16D5.tmp\nsm22AE.tmp

C:\Windows\GeoOCX\WebCam\20090916\GVMegaPixelViewer.dll

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM45.tmp

C:\Users\win7\AppData\Local\Temp\is-EU83C.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Roaming\Microsoft\desktop.ini

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\formula4.html

C:\Users\win7\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\GIF to Flash Converter\GIF to Flash Converter.lnk

C:\Users\win7\AppData\Local\Temp\nse29C0.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\\~DF9C3570AC0EDC4241.TMP

C:\Users\win7\AppData\Local\Temp\nsu8CFA.tmp\1109788421

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml

C:\Users\win7\AppData\Local\Temp\nse29C0.tmp\172628766

C:\Windows\Picture-SK\main.jpg

C:\Users\win7\AppData\Local\Temp\nsr3019.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nst7172.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsv2C41.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\pb.png

C:\Users\win7\AppData\Local\Temp\nsx320C.tmp

C:\Users\win7\Documents\MSDCSC\msdcsc.exe

Formats\cab.fmt

C:\Windows\GeoOCX\WebCam\20090916\ssleay32.dll

C:\Users\win7\AppData\Local\Temp\nsp799D.tmp\NSISdl.dll

\\.\PhysicalDrive11

C:\Users\win7\AppData\Local\Temp\DIQ\flashplayer_154\config.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich8usb.inf

C:\Users\win7\AppData\Roaming\eLEThjJwJF

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager\TUTORIALS.lnk

\\.\COM249

zlib.dll

C:\Windows\system32\spool\DRIVERS\x64\3\STDDTYPE.GDL

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\Infobar\image\security.png

\\.\COM131

C:\Users\win7\AppData\Local\Temp\nsaC56C.tmp\Processes.dll

C:\Data\Scripts\Gui\MessageBoxRestartNeeded.gui

C:\Users\win7\AppData\Local\Temp\\~DFCB608224964CE9C8.TMP

32788R22FWJFW\netsvc.bad.dat

C:\Users\win7\AppData\Local\Temp\tsldrl6660\index.scr

C:\Users\win7\AppData\Local\Temp\nsb7C4D.tmp\\1146937031

C:\Users\win7\AppData\Local\Temp\nsp799D.tmp\\1119186236

C:\Settings\Certificates\client.key

C:\miniie.exe

C:\WINDOWS\FONTS\MICROSS.TTF

\\.\COM156

C:\Users\win7\AppData\Local\Temp\nsq7BC0.tmp\1017444673

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZRight.bmp

\\.\PIPE\srvsvc

\\.\COM35

32788R22FWJFW\License\streamtools.zip

C:\Users\win7\AppData\Local\Temp\nsz8333.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\DIQ\flashplayer_154\DomaIQ.exe

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\1I6GVVXF.txt

C:\Users\win7\AppData\Local\Temp\DIQ\test-av46804_004\OfferBrokerage_14003.exe

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GJrYnjUOgh.lnk\desktop.ini

/etc/ctags.conf

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\NSCOREOE.txt

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Disk-Diagnosis-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\Dlg_Btn_OK.png

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\mobi[1].js

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\JVC_Vn_series.ini

C:\Users\win7\AppData\Local\Temp\nsj276E.tmp

C:\Users\win7\AppData\Local\Temp\nsg11A0.tmp\nsArray.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~et-EE~7.1.7601.16492.cat

\\.\COM213

C:/Windows/system32/imagehlp.dll

Formats

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\H2ON21OP.txt

C:\library.dat

c:\OkiDriver\OKIB2200B2400\OPPE_UI.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~sv-SE~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nse1AA7.tmp

C:\Users\win7\AppData\Local\Temp\nsj2942.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\7zS7336.tmp\515f52b8125c4.exe

C:\Users\win7\AppData\Local\Temp\nsbC511.tmp\650521284

C:\Users\win7\AppData\Local\Temp\nsv6907.tmp\Processes.dll

C:\Windows\RICHED32.DLL

C:\Data\Scripts\Gui\MessageBoxInvalidGameName.gui

\\.\COM167

C:\Data\Scripts\Gui\PageOptions.gui

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\OBW9LKDS.txt

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\pbbkg.png

C:\Windows\GeoOCX\WebCam\20090916\PTZ\SmartTable.xml

Lily_Music.cfg

C:\Users\win7\AppData\Local\Temp\nsx7139.tmp\1035797652

COMCTL32.OCX

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\Btn_Close.png

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\Resource.dll

C:\Users\win7\AppData\Local\Temp\nsuB3F9.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\nsx1770.tmp

\\.\Scsi3:

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~pl-PL~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsx7139.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\analytics[1].js

C:\Users\win7\AppData\Local\Temp\nsk1DCA.tmp\nso28C7.tmp

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\QQBrowserSecurityCenter.exe

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\tssafeedit.dat

C:\Users\win7\AppData\Local\Temp\nsvB61D.tmp\NSISdl.dll

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB/EditorLogo.bmp

\\.\BCMDMCCP

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\pbbkg.png

C:\Users\win7\AppData\Local\Temp\nsh8B40.tmp

C:\ProgramData\SharedSettings_1_0_5.sqlite

C:\Users\win7\AppData\Local\Temp\nsj1BF5.tmp\System.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Sensors-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\ProgramData\Microsoft\desktop.ini

c:\Program Files\FontLab\FontLab\FLCompo.exe

\\.\COM166

C:\Users\win7\AppData\Local\Temp\is-N9LB8.tmp\sample.tmp

\\.\COM214

C:\Users\win7\AppData\Local\Temp\7zSB2EF.tmp\dpbejmkogknnkjbfcacgbckomaofefka\content.js

C:\Users\win7\AppData\Local\Temp\nsc6D6B.tmp

C:\Users\win7\AppData\Local\Temp\622210edd7d2b5052ce79dc1b1dcd9d6\pricepeep.exe

C:\Users\win7\AppData\Local\Temp\nsy8AF5.tmp\NSISdl.dll

C:\Settings\HashIndex.xml

C:\Python27\Scripts\dll\wkernelbase.pdb

C:\Users\win7\AppData\Local\Temp\is-HHG9D.tmp\is-PS2RH.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~hr-HR~7.1.7601.16492.cat

\\.\COM226

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\mip.exe.mui

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\YYVZKWCY.txt

C:\Users\win7\AppData\Local\Temp\nsx858.tmp

C:/Windows/system32/MSCC2JP.DLL

C:/Program Files/TSK/Readme_s.txt

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM52.tmp

C:\Windows\symbols\LicenseManagerV2.pdb

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\TextXtra.x32

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IE-Troubleshooters-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

Avira Registry Cleaner\msvcp71.dll

32788R22FWJFW\av.vbs

C:\Users\win7\AppData\Local\Temp\nsr152F.tmp\146410224

C:\Users\win7\AppData\Local\Temp\nsnDA8E.tmp

C:\Users\win7\AppData\Local\Temp\7zS7BFD.tmp\pnadleldkhfpclgofgnnmhblfcamfhfa\content.js

32788R22FWJFW\License\pv_5_2_2.zip

Formats\tar.fmt

C:\Users\win7\AppData\Local\CoffeeCup Software\SharedSettings_1_0_5.sqlite

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\5Z41773A.txt

C:\Users\win7\AppData\Local\Temp\nsi24FD.tmp

c:\download\driver\12950\SoftwareDriver\Driver\CMRMDRV3.EXE

C:\Users\win7\AppData\Local\Temp\nsr44D.tmp\nsWeb.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\223DE96EE265046957A660ED7C9DD9E7_EFF9B9BA98DEAA773F261FA85A0B1771

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\pb.png

\\.\PhysicalDrive1

C:\Data\Scripts\Gui\Game.gui

C:\Windows\System32\DriverStore\infstrng.dat

C:\Users\win7\AppData\Local\Temp\nsaE650.tmp\System.dll

32788R22FWJFW\MoveIt.bat

\\.\PhysicalDrive12

C:\Users\win7\AppData\Roaming\WeatherWatcher\WeatherWatcher.log

32788R22FWJFW\asp.str

Formats\uue.fmt

C:\Users\win7\AppData\Local\Temp\nss80A2.tmp\841337790

C:\dll\wkernelbase.pdb

\\.\COM179

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IE-Hyphenation-Package-English~31bf3856ad364e35~amd64~~6.3.9412.0.cat

C:\Windows\assembly\pubpol1.dat

32788R22FWJFW\svchost.dat

c:\download\driver\12950\SoftwareDriver\Driver\CMxPCI5.INF

c:\OkiDriver\OKIB2200B2400\Opdmn054.dll

C:\Users\win7\AppData\Local\Temp\nsg21A1.tmp

C:\Users\win7\AppData\Local\Temp\nsv3915.tmp\1041041361

C:\Users\win7\AppData\Local\Temp\is-0SC4M.tmp\is-FTU3B.tmp

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\CheckBox.png

C:\Users\win7\AppData\Local\Temp\nsi3D34.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\64b86246e9aa3fa79b9535db49b20b8d\DirectDownloaderInstaller.exe

TABCTL3N.OCX

C:\Windows\System32\WindowsPowerShell\v1.0\symbols\dll\CFVS_HookDll.pdb

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6EE18E7C9044AB68AF295DC6CAF43C7E_1D9AC458315F4E69D67E803A5FDBCE6E

C:\Windows\SysWOW64\Dxtmsft.dll

C:\Users\win7\AppData\Local\Temp\nsk377C.tmp\1153542742

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\dm_bar_down[1]

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM15.tmp

C:\Windows\Temp

C:\Users\win7\AppData\Local\Temp\nse1C72.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsi5697.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\7zS77D6.tmp\515f52bb88489.dll

C:\Windows\system32\emaz\nha\govc.dat

\\.\COM50

C:\Users\win7\AppData\Local\Temp\nsy2694.tmp\1127153949

c:\svn_1.7.5_stable\DVR\_Bin\Release Trace\DVRArchiveViewer.pdb

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\WZGD1SQ3.txt

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Indexing-Service-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\MSVCRTD.DLL

C:\Users\win7\AppData\Local\Temp\4e2a1aff004f49a5e8fa911f735a399c\pricepeep.exe

C:\Users\win7\AppData\Local\Temp\aaiw686672.bmp

C:\Windows\System32\WindowsPowerShell\v1.0\symbols\dll\wntdll.pdb

C:\Windows\system32\lao\bad\zifov.dat

C:\Users\win7\AppData\Local\Temp\nsm1FA9.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\EK68PDTE.txt

C:\Users\win7\AppData\Local\Temp\nsp1E37.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Tempfolder\DoltuJonisep\nssdbm3.dll

32788R22FWJFW\grep.cfxxe

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_5.bmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~nb-NO~7.1.7601.16492.cat

c:\users\win7\appdata\local\tempfolder\doltujonisep\pomtokof.dat

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\Dlg_Btn_OK.png

C:\Users\win7\AppData\Local\Temp\nsu83FE.tmp\460556029

C:\Users\win7\AppData\Local\Google\Chrome

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\18ROWH02.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\NHC34GVH.txt

COMDLG32.OCX

C:\Users\win7\AppData\Local\Temp\nss180F.tmp

UnrarSrc.txt

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu\oskmenubase.xml

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6EE18E7C9044AB68AF295DC6CAF43C7E_1D9AC458315F4E69D67E803A5FDBCE6E

\\.\COM37

C:\Users\win7\AppData\Local\Temp\nsjB723.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsc878.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsa1D48.tmp\System.dll

\??\C:\Windows\system32\ntshrui.dll

C:\Users\win7\AppData\Local\Temp\nskA7A6.tmp\SimpleSC.dll

C:\Data\Textures\Gui\SingleMission_DeleteMission_02.dds

C:\Users\win7\AppData\Local\Temp\nse1C71.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\QuwoxaBATH\6472.xml

C:\Users\win7\AppData\Local\Temp\nstC9B5.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM4.tmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\dm_bar_right[1]

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\Edit.png

C:\Users\win7\AppData\Local\Temp\808275445.xml

C:\Windows\system32\spool\DRIVERS\x64\3\unidrv.hlp

C:\Windows\system32\saiv\oab\udou.dat

C:\Users\win7\AppData\Local\Temp\aut7C8D.tmp

32788R22FWJFW\CregC.cmd

C:\Users\win7\AppData\Local\Temp\\~DFC22C0477C3B6FA33.TMP

install62953.exe

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_Text.bmp

C:\Users\win7\AppData\Local\Temp\nsj775A.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\8CQFR4QQ.txt

MSCOMCT3N.OCX

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\verificar_ip[1].htm

C:\Windows\assembly\NativeImages_v2.0.50727_32\index1c2.dat

C:\Users\win7\AppData\Local\Temp\nsq1D0A.tmp\379891449

ascIP95.DLL

C:\\image\barbutton_middle.png

C:\Users\win7\AppData\Local\Temp\nsm1732.tmp\nsWeb.dll

C:\Python27\Scripts\symbols\dll\wkernel32.pdb

C:\Users\win7\AppData\Local\Temp\\~DF4C33D0B6CBC41A30.TMP

32788R22FWJFW\Create.cmd

C:\fLog.tx

C:\Users\win7\AppData\Local\Temp\3b3466ef1cb588b8fa4e82447de17686\BitAcceleratorDDLRinstaller.exe

32788R22FWJFW\GetHive.cmd

C:\Users\win7\AppData\Local\Temp\nsd18C9.tmp\NSISdl.dll

\\.\COM178

C:\Users\win7\AppData\Local\Temp\IPMx2\All\E7220.inf

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~it-IT~7.1.7601.16492.cat

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

C:\Users\win7\AppData\Local\Temp\nst899E.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsa7A29.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nsg1EED.tmp

C:\Users\win7\AppData\Local\Temp\nsz2952.tmp\NSISdl.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZOption.bmp

C:\Users\win7\AppData\Local\Temp\nsq1CBB.tmp

C:\Users\win7\AppData\Local\Temp\Creative_ALchemy_AL6_Cleanup.0001.dir.0000\~de2314.tmp

C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\machine.config

C:\Users\win7\AppData\Local\Temp\nsj17C4.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsxAE9B.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\A223AD2D.RREF

C:\Users\win7\AppData\Local\Temp\\~DF8AA20E884959FDB4.TMP

C:\Users\win7\AppData\Local\Temp\nst27FA.tmp

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkniaejinldagieikdjacfpfchffkhhi

C:\Users\win7\AppData\Local\Temp\difE5FD.tmp

C:\\AppsBlackList_user.xml

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTU.ini

C:\Users\win7\AppData\Local\Temp\nsn7A19.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-HDJS0.tmp\is-9FF4K.tmp

32788R22FWJFW\extract.cfxxe

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\B3ZQEJST.txt

32788R22FWJFW\lnkread.vbs

\\.\COM225

C:\Users\win7\AppData\Local\Temp\nsc6E55.tmp

C:\Python27\symbols\exe\DVRArchiveViewer.pdb

C:\Windows\GeoOCX\WebCam\20090916\eMapView.ocx

C:\Users\win7\AppData\Roaming\FlashFXP\4\History.dat

\\.\COM24

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich8ide.inf

C:\Users\win7\AppData\Local\Temp\nsp1E37.tmp\539484055

C:\Users\win7\AppData\Local\Temp\nst8DF1.tmp\\328237516

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\Dlg_bkg.png

\\.\COM85

C:\Users\win7\AppData\Local\Temp\nsi246C.tmp\709666229

C:\ProgramData\Microsoft\Windows\Start Menu\Programs

C:\Users\win7\AppData\Local\Temp\nsn6F7E.tmp

C:\Users\win7\AppData\Local\FlashFXP\3\History.dat

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\ELMO PTC-400C.ini

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\ext[1].js

C:\Users\win7\AppData\Local\Temp\nsm7CD9.tmp

C:\Support\bin\setup.exe

C:\ProgramData

C:\Users\win7\AppData\Local\Temp\nsx6F21.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsh7D56.tmp\924249673

C:\Users\win7\AppData\Local\Temp\nsy8AA7.tmp

C:\Users\win7\AppData\Local\Temp\nsi3D34.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nszA5E1.tmp\340359336

C:\Users\win7\AppData\Local\Temp\7zS55DB.tmp\jjhklgikohjiaahlibnfgegobedhpgmf\manifest.json

C:\Program Files\Chameleon Clock\Sounds\Clocks\Clock4.wav

C:\Users\win7\AppData\Local\Temp\nsm7E60.tmp\System.dll

c:\download\driver\12950\SoftwareDriver\Driver\cmudax3.sys

C:\Users\win7\AppData\Local\Temp\nse8250.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM59.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~de-DE~7.1.7601.16492.cat

\\.\PhysicalDrive3

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-NetFx3-OC-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsz8FE5.tmp\\105175608

\\.\T:

C:\Windows\GeoOCX\WebCam\20090916\SceneChangeDetection.dll

\\.\PhysicalDrive14

C:\Users\win7\AppData\Local\Temp\nsb2DE7.tmp\\545374715

C:\Users\win7\AppData\Local\Temp\nsz2A5F.tmp\NSISdl.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Dome_PelcoD.ini

32788R22FWJFW\clsid.c

C:\Program Files\Chameleon Clock\Sounds\Clocks\Churchbell.wav

c:\Program Files\FontLab\FontLab\mpwizard.hlp

C:\Users\win7\AppData\Local\Temp\nsf1CCB.tmp\nsArray.dll

C:\Windows\system32\juk\oje\agibj.dat

C:\Users\win7\AppData\Local\Temp\is-0BDME.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\nskB80E.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsc7DD3.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\BBWOATXL.txt

C:\Data\Textures\Gui\Join_Game_frame.dds

C:\Users\win7\AppData\Local\Temp\nsc3C6D.tmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\dm_bar_left[1]

C:\Users\win7\AppData\Local\Temp\nsu83FE.tmp\NSISdl.dll

\\.\COM143

C:\Users\win7\AppData\Local\Temp\7zS55DB.tmp\jjhklgikohjiaahlibnfgegobedhpgmf\background.html

C:\Users\win7\AppData\Local\Temp\nsb8410.tmp\NSISdl.dll

\\.\COM91

32788R22FWJFW\ForceLibrary.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\5LRLXUN0.txt

c:\Program Files\Alexa Booster v3.2\Skins\step3.jpg

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~ko-KR~7.1.7601.16492.cat

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_8.bmp

C:\Users\win7\AppData\Local\Temp\nst8DF1.tmp\NSISdl.dll

C:\ProgramData\GlobalSCAPE\CuteFTP Pro\sm.dat

C:\Windows\system32\wma-share2.exe

C:\Users\win7\AppData\Local\Temp\nskB80E.tmp\NSISdl.dll

C:\32788R22FWJFW\hidec.exe

C:\Users\win7\AppData\Local\Temp\nsu8175.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\4NH6ZTGT.txt

C:\Data\Scripts\Gui\MessageBoxOverwrite.gui

C:\Users\win7\AppData\Roaming\FlashFXP\3\Quick.dat

C:\Users\win7\AppData\Local\Temp\nsfD7E9.tmp\NSISdl.dll

C:\ZapImages\asl-btn-big-games-83x28x2.gif

C:\Users\win7\AppData\Local\Temp\nsu2769.tmp

C:\Users\win7\AppData\Local\Temp\12auf94d4\appdata\\{6970B802-2F13-4038-B620-33B0211D26A0}

C:\Users\win7\AppData\Local\Temp\nsb1F1C.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\DITBW7MB.txt

C:\Program Files\Teamspeak2_RC2\uninstall.ini

C:\Users\win7\AppData\Local\Temp\7zS55DB.tmp\jjhklgikohjiaahlibnfgegobedhpgmf\lsdb.js

\\.\COM96

C:\Users\win7\AppData\Local\Temp\nsc6DB9.tmp\\1079041222

C:\Users\win7\AppData\Local\Temp\nsn326B.tmp\nsArray.dll

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\??????????? ?? ?????????? ?????? RAR.lnk

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\OUY825MA.txt

C:\Users\win7\AppData\Local\Temp\nsd6F41.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsw92C5.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsy8921.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsx23D5.tmp\NSISdl.dll

\\.\Scsi0:

C:\Users\win7\AppData\Local\Temp\2748-0.jpg

C:\Users\win7\AppData\Local\Temp\nst3410.tmp

C:\Users\win7\AppData\Local\Temp\nsf795F.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsv516D.tmp\nsArray.dll

C:\Program Files\Chameleon Clock\Sounds\Clocks\alarm_soff.wav

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM47.tmp

C:\Users\win7\AppData\Local\Temp\IPMx2\All\852.inf

c:\OkiDriver\OKIB2200B2400\OPPEPP3.dll

C:\Users\win7\AppData\Local\Temp\Trojan.exe.config

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\EditorLogo.bmp

Formats\iso.fmt

C:\Users\win7\AppData\Local\Tempfolder\DoltuJonisep\libnspr4.dll

C:\Windows\inf\oem3.PNF

C:\Users\win7\AppData\Local\Temp\nsc3058.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\8G8UYRVM.txt

C:\Program Files\Chameleon Clock\Sounds\Clocks\clock04.wav

C:\Windows\GeoOCX\WebCam

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu

C:\Users\win7\AppData\Local\Temp\DIQ\test-av13490_004\routes.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PhotoBasicPackage~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\formula6.html

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager\Uninstall IDM.lnk

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~cs-CZ~7.1.7601.16492.cat

C:\Users\win7\AppData\Roaming\KLEThjJwJFKr\4917.xml

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\6A97463M.txt

C:\Users\win7\Documents\My Videos\desktop.ini

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\VCC3.ini

\\.\COM201

LegitCheckControl.DLL

C:\Users\win7\AppData\Local\Temp\nsv7A59.tmp\nsArray.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nseBF64.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\Img1.png

C:\Windows\GeoOCX\WebCam\20090916\GeoCodecReg\GeoCodec_ReadOnly.dll

C:\Users\win7\AppData\Local\Temp\nsn2607.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\All\965m.inf

C:\Users\win7\AppData\Local\Google

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~lv-LV~7.1.7601.16492.cat

\\.\Kbd

C:\Users\win7\AppData\Local\Temp\nsy7C6F.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsx16D5.tmp\nsr2FCF.tmp

puzzle.pzl

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\kxBArVzWJrYn.lnk\desktop.ini

C:/Windows/system32/wshom.ocx

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

C:\Users\win7\AppData\Local\Temp\nsm6C24.tmp\NSISdl.dll

\\.\pipe\3806ea06455358ae64

C:\Users\win7\Documents\MSDCSC\desktop.ini

C:\Settings\ADLSearch.xml

C:\Users\win7\AppData\Local\Temp\nsx30D4.tmp

C:\Users\win7\AppData\Local\Temp\nsjB638.tmp

C:\Users\win7\AppData\Local\Temp\nsr6C43.tmp\\915532859

__tmp_rar_sfx_access_check_1031843

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\Bkg.bmp

C:\Users\win7\AppData\Local\Temp\pftD7AF~tmp\Disk1\ikernel.ex_

\\.\COM73

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\copy14.html

C:\ProgramData\GlobalSCAPE\CuteFTP\sm.dat

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\copy3.html

c:\windows\scripten_i.log

C:\Users\win7\AppData\Local\Temp\12auf94d4\nsis_skin.gt

C:\Windows\GeoOCX\WebCam\20090916\GeoCodecReg\GXAMP4.dll

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\asl-btn-big-support-83x28x2.gif

\\.\PIPE\samr

Temp/installtemped

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Geovision_VISCA.ini

C:\Windows\system32\kibi\buq\caig.dat

\\.\Scsi9:

32788R22FWJFW\Rkey.cmd

C:\Users\win7\AppData\Local\Temp\nsi1A20.tmp\1098075203

C:\Users\win7\AppData\Local\Temp\nsq1F21.tmp

C:\Users\win7\AppData\Local\Temp\nsgC3AA.tmp\978525460

C:\Users\win7\AppData\Local\Temp\Creative_ALchemy_AL6_Cleanup.0001.dir.0000\~df394b.tmp

\\.\X:

\\.\COM3

C:\Users\win7\AppData\Local\Temp\nsq7720.tmp\558552086

c:\Program Files\FontLab\FontLab\FLCompo.cnt

c:\OkiDriver\OKIB2200B2400\opjobinf.dll

C:\Users\win7\AppData\Local\Temp\nswD479.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\f2cc559679c8d17d7bf9c117baf6aa0a\BitAcceleratorDDLRinstaller.exe

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~11.2.9412.0.cat

C:\Users\win7\AppData\Local\Temp\nsnBEC5.tmp\nsWeb.dll

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\index.swf

C:\Users\win7\AppData\Local\Temp\nso8AB8.tmp\494401783

C:\Users\win7\AppData\Local\Temp\9c2704c22ceab0ebc352c74d631e8669\pricepeep.exe

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM88.tmp

C:\Windows\system32\CFVS_HookDll.pdb

\\.\SuperBPMDev0

C:\Users\win7\AppData\Local\Temp\ffb9bc25e938db9aa79cfac8ccf48c15\BitAcceleratorDDLRinstaller.exe

C:\Data\Scripts\Gui\PageSplashAlienware.gui

C:\Users\win7\Documents\splash.ini

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Personalization-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Indexing-Service-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\Microsoft.VC90.CRT\msvcm90.dll

C:\Users\win7\AppData\Local\Temp\nsa29F9.tmp\NSISdl.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZDown.bmp

C:\Windows\System32\WScript.exe

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\dirapi.dll

C:\Users\win7\AppData\Local\Temp\nsn5530.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\extreme[1].htm

C:\Users\win7\AppData\Local\Temp\DIQ\test-av6941_004\routes.dll

C:\Users\win7\AppData\Local\Temp\nsfF539.tmp\System.dll

C:\Users\win7\Desktop\20141204163206964.pdf

C:\Users\win7\AppData\Local\Temp\nsd8A78.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsg201B.tmp\NSISdl.dll

C:\Windows\GeoOCX\WebCam\20090916\libeay32.dll

ascbalon.dll

C:\Settings\Queue.xml.tmp

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp

C:\Users\win7\AppData\Local\Temp\nsc6DB9.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\KLEThjJwJFKr

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\formula3.html

C:\Users\win7\AppData\Local\Temp\nsa2A47.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\d06fcbb59363a1adb6768ef5c595d7c2\BitAcceleratorDDLRinstaller.exe

C:\Windows\SysWOW64\atl.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DB87D2AB058205E5452E4516D5631B

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM66.tmp

C:\Users\win7\AppData\Local\Temp\nsy7192.tmp\427833926

C:\Users\win7\AppData\Local\Temp\013c8edc16128c116f00beee1fe56d21\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Local\Temp\nse2972.tmp\nsArray.dll

32788R22FWJFW\VInfo

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\asl-btn-big-about-83x28x2.gif

C:\Users\win7\Desktop\exe\DVRArchiveViewer.pdb

C:\Users\win7\AppData\Local\Temp\nsc230A.tmp\NSISdl.dll

\\.\PhysicalDrive5

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZFIn.bmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager\TUTORIALS.lnk

c:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\tipresx.dll.mui

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\skin\LightStripes.gt

C:\Windows\dll\Microsoft.VisualBasic.pdb

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\DynaHawk_Zh701.ini

C:\Users\win7\AppData\Local\Temp\nsg206A.tmp\skinh.she

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\img-main-800x572.gif

C:\Users\win7\AppData\Roaming\mLEThjJw\4140.xml

C:\Windows\GeoOCX\WebCam\20090916\GeoCodecReg\GeoCodec.dll

C:\Users\win7\AppData\Local\Temp\nsd1917.tmp\north.exe

\\.\COM2

C:\Windows\symbols\exe\DVRArchiveViewer.pdb

C:\Users\win7\AppData\Local\Temp\12auf94d4\appdata\\{3E9C7A5B-D249-4C28-A451-53E1024AD354}

C:\Users\win7\AppData\Local\Temp\nsd70C7.tmp\\1195322159

OLEAUT3N.DLL

C:\Users\win7\AppData\Local\SharedSettings.ccs

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\formula1.html

\\.\COM177

C:\Windows\System32\DriverStore\en-US\ntprint.inf_loc

C:\Users\win7\AppData\Local\Temp\nsa2C60.tmp\NSISdl.dll

C:\Windows\DVRArchiveViewer.pdb

C:\Users\win7\AppData\Local\Temp\nsj77A8.tmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_15.bmp

\\.\COM247

C:\Users\win7\AppData\Local\Temp\nsq1DA6.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\asl-btn-big-join-83x28x2.gif

C:\Users\win7\AppData\Local\Temp\nsr84BC.tmp

C:\Windows\inf\oem3.inf

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\5POET2SJ.txt

C:\Users\win7\AppData\Local\SharedSettings.sqlite

C:\Users\win7\AppData\Local\Temp\IPMx2\All\945GM.inf

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\KamKo.ini

Avira Registry Cleaner\MFC71.dll

\\.\COM49

C:\Data\Scripts\Gui\PageSplashFirst.gui

C:\Users\win7\AppData\Local\Tempfolder\ortmp\sqlite3.dll

\\.\COM171

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\4EGCHNX4.txt

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager\IDM Help.lnk

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich9ide.inf

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\beepdl.dll

C:\Users\win7\Favorites\desktop.ini

C:\Users\win7\AppData\Local\Temp\nsc30F3.tmp

C:\Windows\system32\osuj\rak\narl.dat

C:\Users\win7\AppData\Local\Temp\nsz1B24.tmp

C:\Users\win7\AppData\Local\Temp\nsh2D48.tmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\background[1]

C:\Windows\Imagination Studio.exe

C:\Windows\system32\~GLH0008.TMP

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\Infobar\image\infobar_offlineurl.png

\\.\COM110

C:\Users\win7\AppData\Local\Temp\nsmC422.tmp\SimpleSC.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\ELBEX.ini

C:\Windows\msvcrt.dll

C:\Users\win7\AppData\Local\Temp\GLJ749F.tmp

C:\Windows\GeoOCX\WebCam\20090916\GvClient_8200.ocx

32788R22FWJFW\dd.cfxxe

C:\Windows\system32\Oleaut32.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-EnterpriseNEdition-wrapper~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nso8A69.tmp

C:\Users\win7\AppData\Local\Temp\ab5d4243cc93ed6bbca90dd95ca61177\DirectDownloaderInstaller.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Related Programs\Video Streaming Server.lnk

C:\ProgramData\CuteFTP\sm.dat

C:\Windows\system32\dll\CFVS_HookDll.pdb

C:\Users\win7\AppData\Local\Tempfolder\DoltuJonisep\MufjCucgi.exe

C:\Users\win7\AppData\Local\Temp\nst71C0.tmp

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\MouseGesture.dll

C:\Users\win7\AppData\Local\Temp\nsv2B08.tmp

C:\Users\win7\AppData\Local\Temp\DIQ\flashplayer_154\routes.dll

\\?\C:\Windows\system32\Macromed\Flash\mms.cfg

C:\Users\win7\AppData\Local\Temp\Creative_ALchemy_AL6_Cleanup.0001

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\TYQ8F4Q6.txt

C:\ProgramData\BrouwsEe2save

C:\Users\win7\AppData\Local\Temp\nss559E.tmp\System.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CodecPack-Basic-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\rar.ini

C:\Windows\system32\jaks\xaa\meei.dat

C:\Users\win7\AppData\Local\Temp\nsg2D1B.tmp

C:\Users\win7\AppData\Local\Temp\nsn7A19.tmp\853323409

\\.\COM221

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\KZC.ini

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsp8601.tmp\SimpleSC.dll

\\.\COM36

C:\Windows\system32\RICHTX32.OCX

C:\Windows\olepro32.dll

C:\Windows\symbols\dll\Microsoft.VisualBasic.pdb

C:\Users\win7\AppData\Local\GHISLER\wcx_ftp.ini

C:\Users\win7\AppData\Local\Temp\is-36CJS.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nsg6866.tmp\NSISdl.dll

C:\Windows\ascbalon.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Pishion 22X.ini

C:\Windows\INF\ntprint.inf

C:\Users\win7\AppData\Local\Temp\nsl4DF3.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\\~DFBBC422E467B290EE.TMP

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Express Dictate Recorder.lnk

C:/Windows/system32/MSCMCJP.DLL

C:\Users\win7\AppData\Local\Temp\nsq4F84.tmp\7za.exe

C:\Windows\system32\RICHED32.DLL

C:\Users\win7\AppData\Local\Temp\7zSB2EF.tmp\dpbejmkogknnkjbfcacgbckomaofefka\lsdb.js

C:\Windows\GeoOCX\WebCam\20090916\GeoCodecReg\GM20.inf

\\.\Z:

C:\Users\win7\AppData\Local\Temp\325f6ef1eb345d57019b1a43de33cbb2\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\hpcdeopkgienceaajfkaohfhnacpfamh

C:\Users\win7\AppData\Local\Temp\nsg6B67.tmp

C:\Windows\system32\STDOLE2.TLB

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\3BOL5VFW.txt

C:\Users\win7\AppData\Local\Temp\nsr7CAA.tmp

C:\Windows\GeoOCX\WebCam\20090916\GeoCodecReg\GMP4.inf

\\.\COM184

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM49.tmp

C:\Users\win7\AppData\Local\Temp\nsrD5FC.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsq370A.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nsoE348.tmp\21.tmp

\\.\COM23

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich9usb.inf

C:\Users\win7\AppData\Local\FlashFXP\4\Sites.dat

C:\Users\win7\AppData\Local\Temp\c634e7f446ed0baaaffb97e9c00223b7\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsc2FBC.tmp\SimpleSC.dll

C:\Rar.txt

C:\WINDOWS\FONTS\SEGOEUI.TTF

\\.\COM234

\\.\COM227

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BC2602F5489CFE3E69F81C6328A4C17C_849A9AE095E451B9FFDF6A58F3A98E26

C:\image\baritem_pause.png

32788R22FWJFW\NT-OS.cmd

C:\Data\Scripts\Gui\PageCreateMission.gui

C:\Windows\MSVBVM60.DLL

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\copy9.html

C:\Users\win7\AppData\Local\Temp\7zS7BFD.tmp\pnadleldkhfpclgofgnnmhblfcamfhfa\515f05ca0be412.41361429.js

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnadleldkhfpclgofgnnmhblfcamfhfa\1\manifest.json

c:\users\win7\appdata\local\tempfolder\zicichhli\aquxrdae.dat

\\.\COM197

C:\Windows\MSSTDFMT.DLL

C:\Users\win7\AppData\Local\Temp\nsu717E.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsc30F4.tmp\SimpleSC.dll

C:\Windows\inf\oem4.PNF

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\extreme[1].htm

C:\Users\win7\AppData\Local\Temp\~GLH0002.TMP

C:\Users\win7\AppData\Local\Temp\DIQ\Player_151\OfferBrokerage_14003.exe

C:\Users\win7\AppData\Local\Temp\nsc94BA.tmp\\1067021553

C:\Users\win7\AppData\Local\Temp\aut54E8.tmp

C:\Users\win7\AppData\Local\Temp\is-3IOQ3.tmp\_isetup\_RegDLL.tmp

C:\WinRAR.exe

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-NetFx3-OC-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM91.tmp

C:\Users\win7\AppData\Local\Temp\\~DF6B382F0FE4BB6EB5.TMP

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_No7.bmp

Default.SFX

C:\Users\win7\AppData\Local\Temp\nswAEA7.tmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\utils[1].js

\\.\COM72

C:\Users\win7\AppData\Local\Temp\nstDAFD.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\EventTracing.dll

32788R22FWJFW\DelClsid.bat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Refresh-LanguagePack-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\12aubfff5\appdata\\thumb\http___browser.qq.com_new_wechat1.0.html_type=1.jpg

C:\Users\win7\AppData\Local\Temp\Report.ico

C:\Users\win7\AppData\Local\Temp\nsu25A0.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\Microsoft\Internet Explorer

C:\Windows\STDOLE2.TLB

C:\Windows\ASLOC.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-LocalPack-GB-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\System32\Wbem\symbols\exe\DVRArchiveViewer.pdb

C:\jenkins\workspace\cfvs-CamasHookDll-Devel\Dynamic\CAMAS\CamasNative\CFVS_HookDll\Release\CFVS_HookDll.pdb

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Help-CoreClientUAPSN-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

\\.\COM206

C:\Users\win7\AppData\Local\Temp\5a6e0d7e7fb82588b081b16c0bd88029\BitAcceleratorDDLRinstaller.exe

\\.\COM130

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipBand.dll.mui

C:\Users\win7\Desktop\symbols\exe\DVRArchiveViewer.pdb

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\ext[1].js

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad.xml

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Semsonmatic.ini

C:\Windows\GeoOCX\WebCam\20090916\PTZ\VISCA.dll

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\_isetup\_shfoldr.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\SonySNC_P5.ini

C:\ProgramData\FileZilla\recentservers.xml

C:\Windows\System32\Wbem\dll\wkernel32.pdb

smi2txt_error.log

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_No4.bmp

C:\Users\win7\AppData\Local\Temp\nstDAFD.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsk377C.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\f2da611710f7fa687bb7d99d2b938369\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Local\Temp\t1cc01b.exe

C:\Users\win7\AppData\Local\Temp\nssAF17.tmp

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\asl-sysbuttons-16x14x4.gif

C:\Windows\System32\notepad.exe

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\7Y2UKU8B.txt

C:\WINDOWS\FONTS\WINGDING.TTF

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Help-CoreClientUAUEN-Package-Lang~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\N8528SDE.txt

C:\Data\Textures\Gui\MPlrTeamStatsBack2.dds

32788R22FWJFW\files.pif

C:\Users\win7\AppData\Local\Temp\nsw7C7C.tmp\nsArray.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\Y037OOKE.txt

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EB2C4AB8B68FFA4B7733A9139239A396_AD876BD6070522D4EE8560FE72EBB41A

C:\Users\All Users

C:\Users\win7\AppData\Local\Temp\is-2PQ60.tmp\_isetup\_setup64.tmp

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\introduction.html

32788R22FWJFW\ERDNTDOS.LOC

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\mobi[1].js

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\GWP6ISIP.txt

C:\Users\win7\AppData\Local\Temp\nsn251C.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Backup-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Data\Textures\Gui\CreateMission_Save_04.dds

C:\ZapImages\asl-icn-mini-games-32x32x2.gif

C:\Users\win7\AppData\Local\Temp\pft3E71.tmp\setup.inx

C:\Users\win7\AppData\Local\Temp\nsd8D93.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\is-C85U7.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\errorPageStrings[1]

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM53.tmp

C:\Windows\system32\whg\lyr\ohaem.dat

C:\Windows\system32\dll\wntdll.pdb

C:\Users\win7\AppData\Local\Temp\is-36CJS.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\nsgBB49.tmp\modern-header.bmp

C:\Windows\system32\691062.tmp

C:\Users\win7\AppData\Local\Temp\nsvB61D.tmp\nsArray.dll

\\.\COM10

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\JVC_TK.ini

C:\Users\win7\AppData\Local\Temp\nsz8FE5.tmp\105175608

C:\Users\win7\AppData\Local\Temp\nsq7C0E.tmp\SimpleSC.dll

C:/Windows/system32/CMCTLJP.DLL

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\dm_bar_right[1]

C:\Users\win7\AppData\Local\Temp\IXP000.TMP\B.ex_

C:\Users\win7\AppData\Local\Temp\nsy8247.tmp

C:\Users\win7\AppData\Local\Temp\nsz31D4.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\E64T6U1O.txt

c:\download\driver\12950\SoftwareDriver\Driver\CMxPCI3.INF

C:\Users\win7\AppData\Local\Temp\nsp78B2.tmp

C:\Users\win7\AppData\Local\Temp\nse4E01.tmp

C:\Users\win7\AppData\Local\Temp\DIQ\test-av6941_004\DomaIQ.exe

RICHTX32.OCX

\\.\IDMWFP

C:\sample.msg

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\KR4G5JT8.txt

C:\Users\win7\AppData\Local\Temp\nsk1DCA.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\ELVU302C.txt

C:\Users\win7\AppData\Local\Temp\000a3a58.a

C:\Users\win7\AppData\Local\Temp\nsz70B2.tmp

C:\Users\win7\AppData\Local\Temp\nsc7B08.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsnB3E7.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\\~DF28484836B65F8E27.TMP

c:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\67F6625BC22310D5C99DDE12020DBD90

C:\Users\win7\AppData\Local\Temp\nsq7BC0.tmp\NSISdl.dll

c:\Users\win7\AppData\Local\Temp\sfx1\tex_def.jpg

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~pt-PT~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsrD5FC.tmp\234055065

C:\Windows\system32\ascIP95.DLL

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\skin\LightStripes.gt

C:/Windows/system32/COMDLG32.OCX

C:\Users\win7\AppData\Local\Temp\nsjF08F.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\DIQ\test-av6941_004\config.dll

C:\Users\win7\AppData\Local\Temp\nso71A2.tmp\nsArray.dll

C:\image\barbutton_middle.png

C:\Users\win7\Saved Games\desktop.ini

\\.\Scsi13:

C:\Windows\System32\WindowsPowerShell\v1.0\dll\CFVS_HookDll.pdb

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\ACTi_IPCam.ini

C:\Users\win7\AppData\Local\Temp\7zS7336.tmp\lkniaejinldagieikdjacfpfchffkhhi\sqlite.js

C:\Windows\system32\kee\luma\sokb.dat

C:\Users\win7\AppData\Roaming\XLEThjJwJF

C:\\image\baritem_pause.png

C:\Users\win7\AppData\Local\Temp\nsg7C6C.tmp\381900402

\\.\COM136

\\.\COM164

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\reset[1].css

\\.\COM129

C:\32788R22FWJFW\n.pif

C:\Windows\GeoOCX\WebCam\20090916

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\GO20KNQT.txt

C:\symbols\dll\wkernel32.pdb

C:\Users\win7\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3979321414-2393373014-2172761192-1000\58b8aea4ae7184a912187a66498d9b0c_c4b6765a-c53d-4b48-b576-0e1db4e9f3bc

C:\Users\win7\AppData\Local\Temp\nstC967.tmp\\269705472

C:\Users\win7\AppData\Local\Temp\nsi3C49.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\resume[1]

C:\32788R22FWJFW\P.cmd

C:\Users\win7\AppData\Local\Temp\nsm16E4.tmp\7za.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Video Capture Software.lnk

\\.\COM8

\\.\COM78

C:\Users\win7\AppData\Local\Temp\nsf825A.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsc23A5.tmp

C:\Users\win7\AppData\Local\Temp\nsv2D2A.tmp\moperDOCIM_eng.ini

C:\Users\win7\AppData\Local\Temp\7zS77D6.tmp\hpcdeopkgienceaajfkaohfhnacpfamh\sqlite.js

\\.\P:

C:\ProgramData\sample.rbt

C:\Windows\GeoOCX\WebCam\20090916\MiniDump.dll

C:\Users\win7\AppData\Local\Temp\nsh2027.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Tempfolder\ortmp\libplc4.dll

\\.\COM123

C:/Windows/system32/MSCOMCTL.OCX

C:\Users\win7\AppData\Local\Temp\nst1B96.tmp

C:\Users\win7\AppData\Local\Temp\nsg1DB6.tmp\nsArray.dll

32788R22FWJFW\RegDo.sed

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\828298824EA5549947C17DDABF6871F5_D1BCEE7E304F0D5FB8AA811D9B2D0835

C:/Windows/system32/shfolder.dll

C:\Users\win7\AppData\Local\Temp\nsrACF5.tmp\SimpleSC.dll

Avira Registry Cleaner\README.TXT

C:\ProgramData\CoffeeCup Software\SharedSettings_1_0_5.sqlite

\\.\F:

\\.\COM43

C:\Users\win7\AppData\Local\Temp\nsf5072.tmp

C:\Users\win7\AppData\Local\Temp\nsy2694.tmp\\1127153949

/ctags.cnf

C:\Windows\GeoOCX\WebCam\20090916\GeoCodecReg\GeoImageEnhance.xml

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\07CO8OBD.txt

Formats\bz2.fmt

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\DomeName.ini

C:\Users\win7\AppData\Local\Temp\4d817503ee65560a8dcdb650fa6add61\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Local\Temp\temp.lnk

C:\Users\win7\AppData\Local\Temp\nsf79FB.tmp\NSISdl.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\HiSharp PelcoD.ini

C:\Users\win7\AppData\Local\Temp\nsp8112.tmp

wkernelbase.pdb

C:\Users\win7\AppData\Local\Temp\nsb4835.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\Elite_Xl2k\GCXL6161.PPD

\\.\COM169

C:\Users\win7\AppData\Local\Temp\f2da611710f7fa687bb7d99d2b938369\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\pause[1]

C:\Users\win7\AppData\Local\Temp\nsdC908.tmp

C:\Users\win7\AppData\Local\Temp\nsz73B5.tmp\nsArray.dll

\\.\COM242

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\SonySNC_RX570.ini

C:\Users\win7\AppData\Local\Temp\pftD7AF~tmp\Disk1\data1.hdr

C:\Windows\TABCTL32.OCX

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\PrScrn.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\HP9XG5DE.txt

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\Resource.dll

C:\Users\win7\AppData\Local\Temp\nsc9F98.tmp\150530281

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\service\PerfTraceService.exe

C:\Users\win7\AppData\Local\Temp\9b30ab17762cfe32075060c38291a895\volcano.exe

C:\Users\win7\AppData\Local\Temp\nst8360.tmp

C:\Users\win7\AppData\Roaming

C:\Users\win7\AppData\Local\Temp\\~DF912131F89FBEC97E.TMP

MSVCRTD.DLL

C:\ProgramData\BBroowsee2save\515f52b8125e4.tlb

\\.\COM31

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\TOA.dll

C:\Users\win7\AppData\Local\Temp\nss6FEC.tmp\NSISdl.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_10.bmp

c:\Program Files\Alexa Booster v3.2\Proxy\dedicated_sites.dat

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\Skin.ini

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM82.tmp

C:\Windows\system32\juqo\wih\revl.dat

C:\Users\win7\AppData\Local\Temp\nsl1DD4.tmp

C:\Users\win7\AppData\Local\Temp\12aubfff5\nsis_skin.gt

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\error_icon[1]

\\.\COM44

C:\Windows\system32\~GLH000d.TMP

C:\Users\win7\AppData\Local\Temp\nsg2C80.tmp\489770976

c:\download\driver\12950\SoftwareDriver\Driver\UDAPROP3.DLL

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager\IDM Help.lnk

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\copy10.html

C:\ntdetect.com

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZHome.bmp

C:\Users\win7\AppData\Roaming\DUOghDDY

\\.\COM157

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\BULSS9KP.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\5HMT0074.txt

C:/Windows/system32/shlwapi.dll

c:\OkiDriver\OKIB2200B2400\OPB2400.dat

C:\Windows\system32\bova\kye\teji.dat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

\\.\COM255

32788R22FWJFW\run2.sed

__tmp_rar_sfx_access_check_754828

C:\Windows\GeoOCX\WebCam\20090916\PTZStick.dll

\\.\COM102

C:\Users\win7\AppData\Local\Temp\nsm2F5E.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsv2C41.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsqC34B.tmp

C:\Users\win7\AppData\Local\FlashFXP\3\Quick.dat

C:\Users\win7\AppData\Local\Temp\nsl4486.tmp

C:\Users\win7\AppData\Local\Temp\nsp799D.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\Set7B32.tmp

C:\Users\win7\AppData\Local\Temp\nsfEA73.tmp\nsArray.dll

C:\WINDOWS\FONTS\TIMESBD.TTF

C:\exe\DVRArchiveViewer.pdb

C:\Users\win7\AppData\Local\Temp\nsg83E1.tmp

\\.\COM98

C:\Windows\system32\fyb\xegk\wajm.dat

C:\Users\win7\AppData\Local\Temp\nso71A2.tmp\NSISdl.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\DongYang.ini

C:\Users\win7\AppData\Local\Temp\nssAD44.tmp\\121723934

C:\ProgramData\BBroowsee2save\uninstall.exe

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions

\\.\COM52

C:\WINDOWS\FONTS\TAHOMA.TTF

C:\Users\win7\AppData\Local\Temp\f2cc559679c8d17d7bf9c117baf6aa0a\pricepeep.exe

C:\Users\win7\AppData\Local\Temp\\~DF6C75C582383C95DD.TMP

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\RCS9XLWO.txt

VjxjVBc.exe

C:\Users\win7\Desktop\DVRArchiveViewer.pdb

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~el-GR~7.1.7601.16492.cat

32788R22FWJFW\image001.gif

\\.\COM92

C:\Users\win7\Favorites\NCH Software Download Site.lnk

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BC2602F5489CFE3E69F81C6328A4C17C_849A9AE095E451B9FFDF6A58F3A98E26

C:\Users\win7\AppData\Local\Temp\7zS77D6.tmp\hpcdeopkgienceaajfkaohfhnacpfamh

C:\Users\win7\AppData\Local\Temp\65CD657CFC419117.TMP

\??\C:\Windows\system32\twext.dll

C:\Users\win7\AppData\Local\Temp\ci0-temp\uninstall.bmp

\\?\C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\OGGB4BWP\localhost\sample\SW3_197042.sol

\\.\W:

C:\Users\win7\AppData\Local\Temp\nsc3142.tmp\SimpleSC.dll

ciplListBar3N.ocx

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IE-Spelling-Package-English~31bf3856ad364e35~amd64~~6.3.9412.0.cat

C:\Users\win7\AppData\Local\Temp\\~DFB77520E5931B8BFB.TMP

C:\Windows\system32\spool\DRIVERS\x64\3\STDSCHEM.GDL

C:\Windows\system32\doox\aeu\vhbi.dat

Default.lst

\\.\COM69

C:\Users\win7\AppData\Local\Temp\\~DFE384BE79BD2D6F20.TMP

C:\Users\win7\AppData\Local\Temp\nseBF64.tmp\390787467

C:\Users\win7\Documents\My Pictures\desktop.ini

C:\Users\win7\AppData\Local\Tempfolder\DoltuJonisep\smime3.dll

C:\Users\win7\AppData\Local\Temp\nsx6F21.tmp\760571060

c:\download\driver\12950\Program\CmeAuVist64.exe

\\.\COM149

C:\Users\win7\AppData\Local\Temp\nsk1BB2.tmp\118216779

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RWJrYnjUOg.lnk\desktop.ini

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\H3J8CMLL.txt

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_No1.bmp

C:\Users\win7\AppData\Local\Temp\nsk86CC.tmp\891391371

C:\Users\win7\AppData\Local\Temp\ac85e0056038215dc4e484ecc5b69fbe\BitAcceleratorDDLRinstaller.exe

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipTsf.dll.mui

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\webctrl.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\resume[1]

C:\Users\win7\AppData\Local\Temp\\~DF452F27A5AD537304.TMP

C:\Users\win7\AppData\Local\Temp\nsq1D0A.tmp\SimpleSC.dll

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\outsidein.jpg

\\.\COM103

\??\C:\Windows\system32\NetworkExplorer.dll

C:\Users\win7\AppData\Local\Temp\nsh86A0.tmp\NSISdl.dll

25.tmp

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_ca.xml

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\app[1].js

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZ_BK_enable.bmp

C:\Users\win7\AppData\Local\Temp\nsuB310.tmp\NSISdl.dll

C:\ZapImages\asl-icn-mini-about-32x32x2.gif

C:\Users\win7\AppData\Local\Temp\64b86246e9aa3fa79b9535db49b20b8d\pricepeep.exe

\\.\K:

C:\Users\win7\AppData\Local\Temp\nst1B49.tmp\935077591

C:\Users\win7\AppData\Local\Temp\nsv2B12.tmp

C:\Users\win7\AppData\Local\FileZilla\sitemanager.xml

C:\Windows\Fonts\staticcache.dat

C:\WINDOWS\FONTS\SIMSUN.TTC

C:\Users\win7\AppData\Local\Temp\004cf069.a

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~en-GB~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsd7162.tmp

\\.\I:

32788R22FWJFW

C:\sample.fav

C:\Users\win7\AppData\Local\Temp\nsiB060.tmp\\469409043

C:\Users\win7\AppData\Local\Temp\is-280BG.tmp\_isetup\_shfoldr.dll

C:\Windows\GeoOCX\WebCam\20090916\GeoCodecReg\GeoADPCM.acm

C:\Users\win7\AppData\Local\Temp\nsa2AD9.tmp

C:\Users\win7\AppData\Local\Temp\nsw6B78.tmp\nsArray.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~ro-RO~7.1.7601.16492.cat

matong.dat

C:\Windows\system32\OLEAUT3N.DLL

C:\Users\win7\AppData\Roaming\ExpanDrive\drives.js

C:\Users\win7\AppData\Local\Temp\is-VLONM.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\nss80A2.tmp\\841337790

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BrouwsEe2save\Uninstall.lnk

c:\monkey.py

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\Infobar\inforBar.html

C:\Users\win7\AppData\Local\Temp\nsfD7E9.tmp\169530211

C:\Users\win7\AppData\Local\Temp\nsn94AA.tmp

c:\users\win7\appdata\local\tempfolder\mihkoobinza\jahlogivfepu.dat

C:\Users\win7\AppData\Local\Temp\nse2888.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\\~DF8A255E8E04466F9F.TMP

C:\Users\win7\AppData\Local\Temp\8353107b4a7ee1912afdcc36da509643\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\BitTorrent.lnk

C:\Users\win7\AppData\Local\Temp\nsv1C3F.tmp\NSISdl.dll

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\section7.html

C:\Users\win7\AppData\Local\Temp\nsc96E9.tmp

C:\Users\win7\AppData\Local\Temp\7zSB2EF.tmp

C:\Windows\GeoOCX

C:\Users\win7\AppData\Local\Temp\nsg6E82.tmp\570537705

\\.\COM77

C:\Users\win7\AppData\Local\Temp\nst7124.tmp

C:\Users\win7\AppData\Local\Temp\nsw7C7C.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsq7C0D.tmp

\\.\COM219

C:\Python27\Scripts\DVRArchiveViewer.pdb

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\Infobar\image\infobar_close_active.png

C:\Settings\DCPlusPlus.xml.tmp

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EB2C4AB8B68FFA4B7733A9139239A396_D76DB901EE986B889F30D8CC06229E2D

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\FRTJ2TAQ.txt

\\.\COM30

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\QBUtils.dll

c:\Program Files\Alexa Booster v3.2\Skins\step1.jpg

\\.\COM191

C:\Users\win7\AppData\Local\Temp\nsr2F2F.tmp\\315094195

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main.xml

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM6.tmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZIRISout.bmp

\\.\VGSCDAPI.VXD

C:\Users\win7\AppData\Local\Temp\DIQ\test-av46804_004\DomaIQ.exe

C:\Program Files\Motion-Twin\haxe\lib/std/.dev

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\section2.html

C:\Users\Public\Documents\My Videos\desktop.ini

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\YA2NHNK3.txt

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjhklgikohjiaahlibnfgegobedhpgmf\1\manifest.json

C:\Windows\system32\mahg\bhca\epi.dat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~zh-TW~7.1.7601.16492.cat

C:\Windows\ASYCFILT.DLL

C:\Users\win7\AppData\Local\Temp\nsv8354.tmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZLeft.bmp

C:\Users\win7\AppData\Local\Temp\DIQ\test-av13688_004\DomaIQ.exe

C:\Windows\GeoOCX\WebCam\20090916\GvCodecLib.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\QF9KU4G1.txt

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\leftDown.bmp

C:\Data\Scripts\Gui\OptionsControls.gui

C:\Users\win7\AppData\Local\Temp\nsn6FCD.tmp\\1143838476

32788R22FWJFW\ERUNT.LOC

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\mixandmatch.html

C:\PROGRA~2\WMACON~1\wma-share2.exe

C:\Users\win7\AppData\Local\Temp\nsg206A.tmp\modern-header.bmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-BusinessScanning-Feature-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

wmaudioredist.exe

C:\Users\win7\AppData\Local\Temp\nso72D9.tmp

C:\Users\Public\Documents\My Music\desktop.ini

C:\tmp.exe

C:\Users\win7\AppData\Local\Temp\\~DF85FB992E336DBEB1.TMP

C:\Users\win7\AppData\Local\Temp\004cf347.a

\\?\C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\OGGB4BWP\localhost\sample\SW3_197042.sxx

C:\Users\win7\AppData\Local\Temp\is-N1BG4.tmp\sample.tmp

C:\Python27\wntdll.pdb

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Common-Drivers-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\\image\baritem_delete.png

C:\Users\win7\AppData\Local\Temp\7zS7336.tmp\515f52b8125e4.dll

c:\download\driver\12950\SoftwareDriver\Driver\CMiDS3D3.DLL

C:\Users\win7\AppData\Local\Temp\nsb204B.tmp\722400949

C:\Python27\Scripts\dll\wntdll.pdb

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\UB0FM1VY.txt

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\connecting_icon[1]

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\Infobar\image\icon.png

C:\Users\win7\AppData\Local\Temp\nsf1CCB.tmp\838647836

C:\Users\win7\AppData\Local\Temp\nsaE650.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich9id2.inf

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZReadIni.dll

C:\Users\win7\AppData\Local\Temp\nst2675.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsz2869.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\jquery[1].js

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\section4.html

C:\wkernelbase.pdb

\\.\COM192

C:\Users\win7\AppData\Local\Temp\nsh6CEF.tmp\1008523559

C:\ZapImages\asl-btn-big-join-83x28x2.gif

C:\Users\Default User

C:\drivers\modem\setup.exe

C:\Users\win7\AppData\Local\Temp\nsb2D4B.tmp\nsWeb.dll

\\.\COM254

C:\WinRAR.hlp

C:\Users\win7\AppData\Local\Temp\nsg206A.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\ef9f727098f02eb359d2c1dac93f30ee\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsy7596.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nspA63F.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Tempfolder\ortmp\ssl3.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Gadget-Platform-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

\\.\COM99

C:\Users\win7\AppData\Local\Temp\12aubfff5\appdata\\{CAA4306F-826C-4c1b-8FC6-571F84949DB4}

C:\Users\win7\AppData\Local\Temp\nsb2DE7.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\{33A25180-3328-4EB4-9337-9DA72FD0395B}\1033.MST

C:\Users\win7\AppData\Local\Temp\nsm2FAC.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsa73C0.tmp\SimpleSC.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\Large_switch.bmp

C:\Users\win7\AppData\Local\Temp\nskB7C0.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\7zS55DB.tmp\515f05c5b9edb.tlb

C:\Windows\system32\ohi\keia\losn.dat

C:\Users\win7\AppData\Local\Temp\nsa3897.tmp

C:\Users\win7\AppData\Local\Temp\nsjF08F.tmp\\198268457

C:\Users\win7\AppData\Local\Temp\nsx944C.tmp

C:\Windows\Picture-SK\SK.jpg

C:\Program Files\Chameleon Clock\Sounds\Clocks\Cuckoo.wav

C:\Users\win7\AppData\Local\Temp\CTOSChk.exe

C:\Users\win7\AppData\Local\Temp\is-B8GN7.tmp\sample.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-DesktopWindowManager-uDWM-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsd2E98.tmp

C:\Users\win7\AppData\Local\Temp\7zS77D6.tmp\hpcdeopkgienceaajfkaohfhnacpfamh\515f52bb882504.94475068.js

C:\Users\win7\AppData\Local\Temp\is-VLONM.tmp\_isetup\_RegDLL.tmp

http://www.program4pc.com/

C:\symbols\dll\wkernelbase.pdb

C:\PROGRA~3\Mozilla\enmgqym.exe

c:\OkiDriver\OKIB2200B2400\okb3e002.cat

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\NanWang.ini

C:\Users\win7\AppData\Local\Temp\12auf94d4\appdata\\{3349050F-829E-4bb2-AACF-03E3A6B68677}

\\.\COM163

C:\Python27\dll\CFVS_HookDll.pdb

\\.\COM57

c:\Program Files\Alexa Booster v3.2\Skins\1P.bmp

C:\Users\win7\AppData\Local\Temp\nse2972.tmp\\1184494241

C:\Data\Scripts\Gui\PageSplashIAVision.gui

C:\Users\win7\AppData\Local\Temp\nse6637.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-PTDNB.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\nsi184B.tmp

C:\desktop.ini

C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.pdb

C:\Users\win7\AppData\Local\Temp\SPI38FC.tmp\setup.bmp

C:\Users\win7\AppData\Local\Temp\nsi1A20.tmp\\1098075203

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\QQBrowserLiveup.exe

C:\Users\win7\AppData\Local\Temp\nsw4FAE.tmp\861052772

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\InputPersonalization.exe.mui

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Recent\desktop.ini

32788R22FWJFW\badclsid.c

\\.\COM150

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM71.tmp

C:\Users\win7\AppData\Roaming\NLEThjJwJ\7914.xml

C:\Users\win7\Documents\My Music\desktop.ini

C:\Windows\system32\woru\sewo\heo.dat

C:\Users\win7\AppData\Local\Temp\441cc7d4765d61e4190dc8ce3e1a74a1\pricepeep.exe

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\X11WQCY3.txt

C:\\image\baritem_new.png

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Roaming\ZapSpot\System\Core.zdt

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\23B523C9E7746F715D33C6527C18EB9D

C:\Users\win7\AppData\Local\Temp\DIQ\Player_151\DomaIQ10.exe

C:\Users\win7\AppData\Local\Temp\nsc3058.tmp\nsArray.dll

\\.\COM109

C:\Users\win7\AppData\Local\Temp\nss6E66.tmp\SimpleSC.dll

C:\Windows\System32\Wbem\symbols\dll\wkernel32.pdb

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\f[1].js

C:\Users\win7\AppData\Local\Temp\nsy6FBD.tmp

C:\Users\win7\AppData\Local\Temp\DIQ\test-av13490_004\DomaIQ10.exe

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM29.tmp

C:\Users\win7\AppData\Local\Temp\12auf94d4\Config.xml

C:\Users\win7\AppData\Local\Temp\nszE470.tmp

\\.\COM185

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\insideout.jpg

C:\Users\win7\AppData\Local\Temp\IPMx2\All\g33q35.inf

c:\download\driver\12950\SoftwareDriver\Driver\CmiCnfg64.cpl

c:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\tipresx.dll.mui

C:\Users\win7\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\GIF to Flash Converter\Uninstall.lnk

\\.\COM16

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\Edit.png

Avira Registry Cleaner\RegCleaner.exe

C:\Users\win7\AppData\Local\Temp\nseBF64.tmp\nsArray.dll

\\.\COM198

Formats\arj.fmt

C:\Windows\system32\qed\jak\aojiy.dat

C:\Users\win7\AppData\Local\Temp\7zSB2EF.tmp\515f05cb479e3.exe

C:\Users\win7\AppData\Local\Temp\DIQ\test-av13688_004\DomaIQ10.exe

\\.\COM207

C:\Users\win7\AppData\Local\Temp\nsg397F.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\022UXOQH.txt

C:\Users\win7\AppData\Local\Temp\is-Q8QEV.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\DIQ\test-av46804_004\config.dll

\\.\COM22

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_545CE018AB81BDC22528678FE2EFB798

C:\Users\win7\AppData\Local\Temp\nsq7C0E.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\\~DF4E75D53405899D54.TMP

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\libacess_js[1].htm

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad\osknumpadbase.xml

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IE-Troubleshooters-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\dll\wkernelbase.pdb

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05C228D5A90F8E552A04359DBA3E6884

C:\Users\win7\AppData\Local\Temp\nso278D.tmp

C:\Users\win7\AppData\Roaming\mLEThjJw

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~zh-TW~7.1.7601.16492.cat

C:\Users\win7\Searches\desktop.ini

C:\Users\win7\AppData\Local\Temp\nsjB723.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsdB20B.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsl29EA.tmp\NSISdl.dll

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\RecordPad Sound Recorder.lnk

C:\Users\win7\AppData\Local\Temp\nsw229C.tmp\nsWeb.dll

32788R22FWJFW\pv.com

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\app[1].js

c:\OkiDriver\OKIB2200B2400\OPB220N.dat

C:\Users\win7\AppData\Local\Temp\nsr1619.tmp\128704196

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alexa Booster 3.2\Uninstall.lnk

C:\Users\win7\AppData\Local\Temp\nsf7422.tmp\UserInfo.dll

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_kor.xml

c:\download\driver\12950\SoftwareDriver\Driver\CmiFltr.dll

C:\Windows\system32\\wuapi.dll

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\Dlg_Btn_Close.png

C:\Users\win7\AppData\Local\Temp\nsx9767.tmp\\1167639464

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-BusinessScanning-Feature-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsc20F2.tmp\SimpleSC.dll

c:\da8df086ca54f7fdd325c4\update\update.exe

C:\Users\win7\AppData\Local\Temp\nsg2E05.tmp

C:\dll\wntdll.pdb

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZConfigTable.xml

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich6core.inf

C:\Users\win7\AppData\Local\Temp\nsd1917.tmp\north.exe.config

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Express Talk Softphone.lnk

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\jquery[1].js

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich9smb.inf

\\?\C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\H4F9GZHW\localhost\sample\cardgamesolitaire.com.sxx

Zip.SFX

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Graphics File Converter.lnk

C:\Users\win7\AppData\Local\Temp\nsg6866.tmp\nsArray.dll

C:\Windows\System32\WindowsPowerShell\v1.0\CFVS_HookDll.pdb

C:\ZapImages\p-img-GameLogo.gif

C:\Users\win7\AppData\Local\Temp\7zS7BFD.tmp\pnadleldkhfpclgofgnnmhblfcamfhfa

C:\Users\win7\AppData\Roaming\CoffeeCup Software\SharedSettings_1_0_5.sqlite

ADLOC.dll

C:\Users\win7\AppData\Local\Temp\nsb7C4D.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsgBB49.tmp\licdata.rtf

\\.\U:

C:\Windows\ccrpprg3N.ocx

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EB2C4AB8B68FFA4B7733A9139239A396_D76DB901EE986B889F30D8CC06229E2D

C:\Users\win7\AppData\Local\Temp\nsx7139.tmp\nsArray.dll

\\.\COM137

C:\Users\win7\AppData\Local\Temp\nsq1DA6.tmp\nsArray.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\HHDUXP1M.txt

C:\Windows\system32\wbem\wbemdisp.TLB

\\.\COM148

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\7WHUJJ7D.txt

\\.\COM111

c:\windows\system32\vboxmrxnp.dll

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\symbase.xml

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\vArVzWJ.lnk

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_13.bmp

C:\Users\win7\AppData\Local\Temp\nsk1DCA.tmp\498079189

32788R22FWJFW\Install-RC.cmd

C:\Windows\system32\COMCTL32.OCX

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\S3VXHR2Q.txt

C:\Users\win7\AppData\Local\Temp\nsb7B63.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsv2C41.tmp\617765131

32788R22FWJFW\SuppScan.cmd

C:\Users\win7\AppData\Local\Temp\nso71A2.tmp\\1047987572

C:\sample.web

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM73.tmp

\\.\COM220

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\WWKWOIGC.txt

C:\Windows\GeoOCX\WebCam\20090916\RegOCX.INI

__tmp_rar_sfx_access_check_5054234

C:\Users\win7\AppData\Local\Temp\pftB084.tmp\Disk1\Setup.inx

C:\Users\win7\AppData\Local\Tempfolder\ortmp\nssdbm3.dll

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\service\PerfTraceService.exe

C:\Users\win7\AppData\Local\Temp\nsp842D.tmp\\608912117

C:\Data\Scripts\Gui\MessageBoxInvalidPlayerName.gui

C:\Users\win7\AppData\Local\Temp\nsa41D8.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\4ae6cf3c7fbd3414df26e8400c7d510e\DirectDownloaderInstaller.exe

32788R22FWJFW\NirCmd.cfxxe

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F463A8EC6EA3A214C73FB4FC74B1B1BD

c:\Program Files\FontLab\FontLab\FLCompo.hlp

C:\Users\win7\AppData\Roaming\Microsoft\Windows

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\dm_bar_left[1]

C:\Windows\system32\wkernel32.pdb

c:\Program Files\Alexa Booster v3.2\Skins\2.bmp

C:\Users\win7\AppData\Local\Temp\nsc16F4.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\OIO6OU74.txt

C:\Windows\SysWOW64\Dxtrans.dll

C:\Windows\MSCOMCT2.OCX

Avira Registry Cleaner

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM80.tmp

C:\Users\win7\AppData\Local\Temp\\~DFF9E89BA68850C9C6.TMP

C:\Users\win7\AppData\Local\Temp\nsd8CF6.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GPwTuuGhrjxj.lnk\desktop.ini

C:\Windows\System32\actskin4.ocx

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\YL0M2DIV.txt

C:\ProgramData\Barowasse2saave\515f05ca0c06e.tlb

\\.\COM64

C:\Windows\system32\exe\DVRArchiveViewer.pdb

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich8id2.inf

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\_isetup\_setup64.tmp

TABCTL32.OCX

C:\Windows\System32\Wbem\dll\wntdll.pdb

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\CallbackCtrl.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PtzConfig.dll

C:\Users\win7\AppData\Local\Temp\nsp1CFF.tmp\227176954

C:\share_nt.exe

C:\Users\win7\AppData\Local\Temp\nse1CBF.tmp

C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp

C:\Users\win7\AppData\Local\Adobe\Updater5\AUTrans.xml

C:\Users\win7\AppData\Local\Temp\nst2711.tmp\\959661730

C:\Users\win7\Desktop\dll\wkernel32.pdb

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\PBTQTH6H.txt

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\service\qqtrack.xml

C:\Users\win7\AppData\Local\Temp\nsh8605.tmp\\568188251

C:\Users\win7\AppData\Local\Temp\nsm39A9.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsz73B5.tmp\NSISdl.dll

32788R22FWJFW\AspackDie.cfxxe

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM38.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-LocalPack-AU-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nst58AB.tmp\NSISdl.dll

C:\Windows\system32\ascbalo3N.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\All\915.inf

C:\Users\win7\AppData\Local\Temp\nsuB7AF.tmp

C:\Users\win7\AppData\Local\Temp\nsx255B.tmp\nsArray.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-TopLevel~31bf3856ad364e35~amd64~~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsa1F60.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsz2869.tmp\1207750429

C:\Users\win7\AppData\Local\Temp\WER95F6.tmp.WERInternalMetadata.xml

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\desktop.ini

\\.\COM108

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\paused_icon[1]

C:\Users\win7\AppData\Local\Temp\7zS77D6.tmp\settings.ini

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\reset[1].css

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Barowasse2saave\Barowasse2saave.lnk

C:\Users\win7\AppData\Local\Temp\7zS77D6.tmp\hpcdeopkgienceaajfkaohfhnacpfamh\background.html

\\.\COM107

actskin4.ocx

C:\Users\win7\AppData\Local\Temp\nsmA33E.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsu40CD.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~hi-IN~7.1.7601.16492.cat

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\copy7.html

C:\Users\win7\AppData\Local\Temp\b4e8c2bf475e972ff1129a25635128c5\BitAcceleratorDDLRinstaller.exe

C:\Windows\System32\Wbem\wntdll.pdb

\\.\COM56

C:\Users\win7\AppData\Local\Temp\nskB31F.tmp\253123095

C:\Windows\MSVBVM6N.DLL

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~lt-LT~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsg201B.tmp\153662886

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Sensormatic.dll

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\pbn-1730F5A724224F9D91D18EC1FDCA52A5.zdt

C:\Users\win7\AppData\Local\Temp\nsg2DB8.tmp\System.dll

C:\Data\Textures\Gui\SingleMission_DeleteMission_04.dds

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\icone_cadeado[1].gif

C:\Users\win7\AppData\Local\Temp\IPMx2\All\965g.inf

C:\Users\win7\AppData\Local\Temp\SPI38FC.tmp\setup.dat

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\QQBrowserFrame.dll

\\.\COM151

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\asl-icn-mini-about-32x32x2.gif

C:\Users\win7\AppData\Local\Temp\nsxAE9B.tmp\NSISdl.dll

C:\Python27\Scripts\wkernelbase.pdb

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\analytics[1].js

C:\Users\win7\AppData\Local\Temp\nsx86B0.tmp

C:\Users\win7\AppData\Local\Temp\nso27DC.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsc16F4.tmp\365624476

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\TridentCore.dll

C:\ProgramData\BBroowsee2save

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Canon_C50i.ini

C:\Users\win7\AppData\Local\Temp\nsfD7E9.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsj1C90.tmp

C:\Users\win7\AppData\Local\Temp\nsjF08F.tmp\NSISdl.dll

c:\programdata\microsoft\windows\start menu\programs\startup\desktop.ini

C:\ZapImages\asl-icn-mini-join-32x32x2.gif

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RWJrYnjUOg.lnk

C:\Users\win7\AppData\Roaming\XLEThjJwJF\yKrvSGxBArVz.exe

C:\Users\win7\AppData\Local\Temp\VSDFA5.tmp\install.log

C:\Users\win7\AppData\Local\Temp\DIQ\Player_151\DomaIQ.exe

C:\Users\win7\AppData\Local\Temp\226fda2318382dfba2850343961c3116\DirectDownloaderInstaller.exe

C:\Windows\symbols\dll\wkernelbase.pdb

C:\Users\Public\Documents\My Pictures\desktop.ini

C:\Windows\Fonts\desktop.ini

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~pl-PL~7.1.7601.16492.cat

C:\Windows\System32\Wbem\wkernel32.pdb

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\1navmenu.jpg

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\resources.pri

C:\Users\win7\AppData\Local\Temp\nsn2654.tmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\UP.bmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\Y99GVE3X.txt

C:\Users\win7\AppData\Local\Temp\7zSB2EF.tmp\515f05cb47a1c.tlb

C:\Users\win7\AppData\Local\Temp\nsl2D3A.tmp

\\.\PIPE\wkssvc

C:\Settings\files.xml.bz2

C:\Users\win7\AppData\Local\Temp\nsa7674.tmp\System.dll

C:\Windows\GeoOCX\WebCam\20090916\msvcr71.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\GV_AccessIni_Memory.dll

\\.\COM135

C:\Users\win7\AppData\Local\Temp\pft3E71.tmp\setup.ini

C:\Windows\exe\DVRArchiveViewer.pdb

C:\Users\win7\AppData\Local\Temp\nst70D6.tmp

C:\Windows\system32\MSCOMCTL32.OCX

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Hyper-V-Guest-Integration-Drivers-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsh7D56.tmp

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM13.tmp

C:\Users\win7\AppData\Local\Temp\nsg7C6C.tmp\369335932

C:\Windows\system32\ciplListBar.ocx

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\Dlg_Btn_OK.png

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest

Rar.txt

C:\Users\win7\AppData\Local\Temp\IPMx2\All\E7230.inf

C:\Users\win7\AppData\Local\Temp\IPMx2\Vista\5000XZVP.inf

C:\Windows\System32\Wbem\symbols\dll\wkernelbase.pdb

ConfigParams.ini

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\Btn_Inst.png

C:\Windows\MSWINSCK.OCX

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\QBExtensionFramework.dll

C:\Windows\System32\DriverStore\infstor.dat

C:\Users\win7\AppData\Local\Temp\nsl1122.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~ar-SA~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\7zSB2EF.tmp\dpbejmkogknnkjbfcacgbckomaofefka\manifest.json

C:\Windows\system32\ascbalon.dll

C:\Users\win7\AppData\Local\Temp\nslD1A8.tmp

C:\Users\win7\AppData\Local\Temp\\~DFDECBA2749F49C22F.TMP

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\YAAN.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\Skin_Heb.ini

C:\Users\win7\AppData\Local\Temp\nsg2C80.tmp\\489770976

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~tr-TR~7.1.7601.16492.cat

c:\users\win7\appdata\local\tempfolder\voivvtieci\kubwoocan.dat

wma-share2.exe

C:\Users\win7\AppData\Local\Temp\nsz4E31.tmp\892719323

C:\Windows\system32\RICHTX32.DEP

C:\Data\Textures\Gui\SingleMission_DeleteMission_01.dds

C:\Users\win7\AppData\Local\Temp\nspB8C8.tmp\NSISdl.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_84FF9D6F15EF7AC15278E8CA625D6354

c:\Program Files\Alexa Booster v3.2\Proxy\PROXYs.txt

C:\Users\win7\AppData\Local\Temp\7zS7BFD.tmp

C:\Users\win7\AppData\Local\Temp\226fda2318382dfba2850343961c3116\volcano.exe

C:\Users\win7\AppData\Local\Temp\ext6414.tmp

C:\Users\win7\AppData\Local\Temp\7zSB2EF.tmp\dpbejmkogknnkjbfcacgbckomaofefka\sqlite.js

/usr/local/etc/ctags.conf

\\.\COM233

C:\Windows\system32\MSCOMCT3N.OCX

C:\Users\win7\AppData\Local\Temp\7zS7336.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\FLRWD44E.txt

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\FlickLearningWizard.exe.mui

C:\Users\win7\AppData\Local\Temp\nss1926.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\7zS7BFD.tmp\pnadleldkhfpclgofgnnmhblfcamfhfa\sqlite.js

C:\Users\win7\AppData\Local\Temp\nse2972.tmp\1184494241

C:\Users\win7\AppData\Local\Temp\nsuB447.tmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZRUI.dll

\\.\M:

C:\Users\win7\AppData\Roaming\GHISLER\wcx_ftp.ini

C:\Users\win7\AppData\Local\Temp\nsg7B33.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\SendTo\desktop.ini

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\botva2.dll

32788R22FWJFW\Purity.dat

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\pause[1]

C:\Users\win7\AppData\Local\Temp\3db95c0d2bab524b5259c84257550ed1\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\asl-icn-mini-support-32x32x2.gif

C:\Windows\GeoOCX\WebCam\20090916\GeoCodecReg\GeoADPCM.inf

C:\Users\win7\AppData\Local\Temp\nsn326B.tmp\858941668

C:\Users\win7\AppData\Local\Temp\nsg2C80.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\ffb9bc25e938db9aa79cfac8ccf48c15\volcano.exe

C:\Windows\system32\Stdole2.tlb

C:\ZapImages\img-main-800x572.gif

C:\Users\win7\AppData\Local\Temp\nsb1ECF.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\service\qqtrack.xml

C:\Users\win7\AppData\Local\Temp\71d8cec149ec9115178e8020d4510ae0\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Local\Temp\is-Q8QEV.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM89.tmp

C:\Users\win7\AppData\Local\Temp\nsm6C24.tmp\\1210133932

\\.\COM65

C:\Windows\GeoOCX\WebCam\20090916\LiveClient_8200.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\8VDNTORI.txt

C:\Users\win7\AppData\Local\Temp\nsd8F82.tmp

C:\Users\win7\AppData\Local\Temp\is-I1FLQ.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\nsr1619.tmp\nsArray.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\JxIni.dll

\\.\COM53

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-OfflineFiles-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\COMDLG32.OCX

C:\Users\win7\AppData\Local\Temp\nsh2EFA.tmp

C:\Users\win7\AppData\Local\Temp\nsv82B9.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nss1752.tmp\757915156

C:\Users\win7\AppData\Local\Temp\nsg206A.tmp\System.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\GIJ2FWNF.txt

C:\Users\win7\AppData\Local\Temp/hassnae.jpg

C:\Users\win7\AppData\Local\Temp\nsm2093.tmp

C:\Users\win7\AppData\Local\Tempfolder\ortmp\smime3.dll

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\Dlg_icon.png

c:\Program Files\Common Files\Microsoft Shared\ink\et-EE\tipresx.dll.mui

C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll

C:\Windows\actskin4.ocx

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\IPSEventLogMsg.dll.mui

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\askInstallChecker[1].htm

C:\Users\win7\AppData\Local\Temp\nsj32A5.tmp\nsWeb.dll

C:\ZapImages\asl-sysbuttons-16x14x4.gif

C:\Users\win7\AppData\Local\Temp\nsk1DCA.tmp\2.jpg

C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\security.config.cch

C:\Users\win7\AppData\Local\Temp\pft3E71.tmp\setup.iss

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\temp0000

C:\Windows\ccrpprg6.ocx

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\SonySNC_RZ50.ini

C:\Users\win7\AppData\Local\Temp\\{6740F9E3-1353-47DD-9765-BA49FC4C3479}\YandexBarIE.msi

\\.\COM7

c:\download\driver\12950\SoftwareDriver\Driver\CMxPCI0.INF

C:\Users\win7\AppData\Local\Temp\nso282A.tmp\\333821725

C:\Users\desktop.ini

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\GRMZTO7E.txt

C:\Users\win7\AppData\Local\Temp\68fecef9577b6548cd9f9c89137e6238\pricepeep.exe

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\SonySNC_RX550.ini

C:\Users\win7\AppData\Local\Temp\36a29030561d6dd54640db33f63123e2\BitAcceleratorDDLRinstaller.exe

C:\Users\win7\AppData\Local\Temp\nsl2C02.tmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_No2.bmp

C:\Windows\dll\CFVS_HookDll.pdb

C:\Users\win7\AppData\Local\Temp\pftD7AF~tmp\Disk1\data1.cab

C:\Users\win7\AppData\Local\Temp\d06fcbb59363a1adb6768ef5c595d7c2\volcano.exe

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-Package-TopLevel~31bf3856ad364e35~amd64~~11.2.9600.16428.cat

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\828298824EA5549947C17DDABF6871F5_D1BCEE7E304F0D5FB8AA811D9B2D0835

C:\Users\win7\AppData\Local\Temp\nsv4429.tmp\427697726

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-LocalPack-ZA-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\PROGRA~2\WMACON~1\temp.000

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-HomePremiumNEdition-wrapper~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Anytime-Upgrade-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

c:\users\win7\appdata\local\tempfolder\eosolfhovha\lespupufpopp.dat

C:\Windows\ascIP95.DLL

C:\Users\win7\AppData\Local\CuteFTP\sm.dat

C:\logo.swf

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-SideShow-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_12.bmp

32788R22FWJFW\Wmi_rem.vbs

C:\Users\win7\AppData\Local\Temp\GLK76A3.tmp

C:\Windows\GeoOCX\WebCam\20090916\STable_8200.xml

C:\ProgramData\BBroowsee2save\515f52bb88489.tlb

C:\Data\Textures\Gui\EditBoxShortBack.dds

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\asl-btn-big-home-83x28x2.gif

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\QEY85EX2.txt

C:\Users\win7\AppData\Local\Temp\nsa2BC4.tmp\\1127085849

C:\Users\win7\AppData\Local\Temp\nsm9F39.tmp

C:\LicenseManagerV2.pdb

C:\Users\win7\AppData\Roaming\FileZilla\sitemanager.xml

C:\Users\win7\AppData\Local\Temp\nst7124.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsmE3A2.tmp\nsArray.dll

32788R22FWJFW\NirCmdC.cfxxe

\\.\COM124

\??\C:\Windows\SysWOW64\ieframe.dll

Keygen32.exe

C:\Users\win7\AppData\Local\Temp\nsc9F98.tmp\\150530281

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\DIQ\test-av46804_004\routes.dll

32788R22FWJFW\safeboot.def.vista.dat

C:\Users\win7\AppData\Local\Temp\nsk1DCA.tmp\Inetc.dll

C:\Users\win7\AppData\Local\Temp\nsv1C3F.tmp\687567743

C:\Users\win7\AppData\Local\Temp\nstDAFD.tmp\\931263985

C:\Users\win7\Desktop\symbols\dll\wkernel32.pdb

\\.\COM230

C:\Windows\system32\caoe\iso\goka.dat

C:\Windows\system32\foc\suvb\wurk.dat

C:\Users\win7\AppData\Local\Temp\nsi3EB0.tmp\splash.wav.WAV

C:\Users\win7\AppData\Local\Temp\nsq7BBF.tmp

C:\Users\win7\AppData\Local\Temp\is-U84KA.tmp\InoDll.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A34B45DD28A5DAEFDA3E0BA2FCE7DE24_87910BE1C29EBFE2C02400CF6890DE18

32788R22FWJFW\ERDNTWIN.LOC

C:\Settings\Profiles.xml

C:\Users\win7\AppData\Local\Temp\nsxAE9B.tmp\\639931717

C:\Users\win7\AppData\Local\Temp\nsa8374.tmp\nsWeb.dll

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Related Programs\Video Tape to DVD Converter.lnk

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\ui[1].js

C:\Users\win7\AppData\Local\Temp\nsdB20B.tmp\NSISdl.dll

C:\Windows\system32\ore\keet\voxk.dat

C:\Windows\system32\nae\bug\tawbe.dat

C:\Users\win7\AppData\Local\Temp\nsgBB49.tmp\checktbexist.exe

C:\Users\win7\AppData\Local\Temp\nsk792F.tmp

C:\Windows\system32\aid\usy\fuouf.dat

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\GetPelcoD.dll

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup

\\.\COM196

\\.\COM9

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Branding-ProfessionalN-Client-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Lilin7625.ini

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-Package~31bf3856ad364e35~amd64~~11.2.9600.16428.cat

c:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui

C:\Users\Public\Desktop\Debut Video Capture Software.lnk

C:\PROGRA~2\WMACON~1\wma.hlp

\\.\COM183

C:\Program Files\Chameleon Clock\Sounds\Clocks\Doorbell.wav

C:\Users\win7\AppData\Local\Temp\nsp1CFE.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-7OHN6.tmp\sample.tmp

C:\Windows\system32\MSCOMCTL.OCX

C:\Windows\system32\MSVBVM6N.DLL

C:\Data\Textures\Gui\CreateMission_Save_01.dds

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~it-IT~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsn8D34.tmp

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\service\QQTrace.ini

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\84AFE219AEC53B0C9251F5E19EF019BD_2C9D5E6D83DF507CBE6C15521D5D3562

C:\Windows\GeoOCX\WebCam\20090916\DMPTZControlDLL.dll

32788R22FWJFW\Policies.dat

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ea-sym.xml

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\Dlg_Btn_Cancel.png

C:\

C:\Users\win7\AppData\Local\Temp\nsb7B63.tmp\\457014823

C:\Users\win7\AppData\Local\Temp\nss3104.tmp\858294717

32788R22FWJFW\LocalServiceNetworkRestricted.dat

C:\Users\win7\AppData\Local\Temp\\~DF9053D80C70BE666B.TMP

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\api[1].htm

\\.\COM170

\\.\COM104

C:\Users\win7\AppData\Local\Temp\nsl1E23.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\\~DFF21EFAC20EA8D99F.TMP

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM3.tmp

C:\Users\win7\AppData\Local\Temp\WER60CC.tmp.WERInternalMetadata.xml

C:\Users\win7\AppData\Local\Temp\nsb7B63.tmp\nsArray.dll

C:\Windows\system32\MSSTDFMN.DLL

C:\Users\win7\AppData\Local\Temp\nseB5CC.tmp\150734581

C:\Windows\system32\symbols\dll\wkernel32.pdb

C:\Users\win7\AppData\Local\Temp\nsm23E4.tmp\nsWeb.dll

\\.\COM193

C:\Users\win7\AppData\Local\Temp\ffb9bc25e938db9aa79cfac8ccf48c15\DirectDownloaderInstaller.exe

C:\Users\win7\AppData\Local\Temp\nsx255B.tmp\317341499

C:\Users\win7\AppData\Local\Temp\nsb7C4D.tmp\NSISdl.dll

C:\Windows\system32\Olepro32.dll

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\SamSung_Tech.dll

\\.\COM127

C:\Users\win7\AppData\Local\Temp\7zS77D6.tmp\hpcdeopkgienceaajfkaohfhnacpfamh\content.js

C:\Windows\system32\MSWINSCK.OCX

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\Pelco_SpectraIV-IP.ini

C:\Users\win7\AppData\Local\Temp\nsw6B78.tmp\127274093

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\Dlg_bkg.png

C:\Windows\MsAudio.ocx

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BrouwsEe2save\BrouwsEe2save.lnk

C:\PROGRA~2\WMACON~1\readme.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\vVzWJrYnj.lnk\desktop.ini

C:\Users\win7\AppData\Local\Temp\IPMx2\All\5000XZVP.inf

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\Dlg_Btn.png

C:\Users\win7\AppData\Local\Temp\nsg201B.tmp\\153662886

C:\Users\win7\AppData\Local\Temp\nswA32D.tmp

C:\Windows\GeoOCX\WebCam\20090916\GeoCodecReg\GX264.dll

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\tssafeedit.dat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~en-US~7.1.7601.16492.cat

ciplListBar.ocx

C:\Users\win7\AppData\Local\Temp\nsh4855.tmp\SimpleSC.dll

C:\Windows\GeoOCX\WebCam\20090916\GeoCodecReg\GXJPG.dll

C:\Windows\system32\cikp\geft\ahy.dat

C:\Windows\system32\spool\DRIVERS\x64\3\mxdwdui.gpd

\\.\COM114

C:\Users\win7

C:\Users\win7\AppData\Local\Temp\7zSB2EF.tmp\dpbejmkogknnkjbfcacgbckomaofefka

\\.\COM180

C:\Users\win7\AppData\Local\Temp\is-CRKNN.tmp\_isetup\_RegDLL.tmp

C:\Windows\system32\hoh\soc\ueror.dat

C:\Windows\system32\rsaenh.dll

C:\Users\win7\AppData\Local\Temp\nsv1C3F.tmp\nsArray.dll

c:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui

C:\Settings\DCPlusPlus.xml

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\WebpDecodeFilter.dll

C:\Users\win7\AppData\Local\Temp\nsr227C.tmp

C:\Users\win7\AppData\Local\Temp\nskB7C0.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsa7626.tmp\\614836826

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~ru-RU~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\Dlg_bkg.png

c:\OkiDriver\OKIB2200B2400\OPB2200.dat

c:\Program Files\Alexa Booster v3.2\Proxy\URLs.txt

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6EE18E7C9044AB68AF295DC6CAF43C7E_91BA75AD693AB7B7E875623F88BD0B72

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM65.tmp

C:\Users\win7\AppData\Local\Temp\nskB7C0.tmp\844504445

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alexa Booster 3.2\Alexa Booster v3.2.lnk

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\ui[1].js

C:\Users\win7\AppData\Local\Temp\nst41CF.tmp\1201008518

C:\Users\win7\AppData\Roaming\InfraRecorder\Settings.xml

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\QQBrowserSecurityCenter.exe

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\ZATVLFKK.txt

C:\Users\win7\AppData\Local\Temp\nsm3095.tmp

C:\Users\win7\AppData\Local\Temp\nsr4717.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\webctrl.dll

C:\Windows\system32\kiat\hak\ladi.dat

\\.\COM117

c:\Program Files\Alexa Booster v3.2\_ci_gentee_

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\Downloader.dll

\\.\COM240

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-Package-MiniLP~31bf3856ad364e35~amd64~en-US~11.2.9600.16428.cat

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BBroowsee2save\Uninstall.lnk

C:\Users\win7\AppData\Local\Temp\nst8EDA.tmp

C:\Users\win7\AppData\Local\Temp\nsp2936.tmp

C:\Users\win7\AppData\Roaming\WeatherWatcher

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new

C:\Users\win7\AppData\Local\Temp\nsvB61D.tmp\226427853

C:\Users\win7\AppData\Local\Temp\nsb6C32.tmp

\\.\COM243

C:\Users\win7\AppData\Local\Temp\nsz9033.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nss3104.tmp\NSISdl.dll

C:\ProgramData\Soearcho--NewTeAb\515f05c5b9edb.tlb

C:\Users\win7\AppData\Local\Temp\nswAEF6.tmp\nsArray.dll

32788R22FWJFW\zDomain.dat

C:\Users\win7\AppData\Local\Temp\nsh7DA5.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsg11A0.tmp\\801601376

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM86.tmp

C:\Users\win7\AppData\Local\Temp\nss4B52.tmp\\909029299

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\WJJJP8NB.txt

C:\Users\win7\AppData\Local\Temp\nsa7626.tmp\614836826

c:\Program Files\Alexa Booster v3.2\Skins\4.bmp

32788R22FWJFW\safeboot.dat

C:\Users\win7\AppData\Local\Temp\nsfB523.tmp\SimpleSC.dll

C:/Windows/system32/run-time.vbs

Temp/installtemped/3CD70020C3649FEB78B2719BF70420DD17CB

C:\Windows\GeoOCX\WebCam\20090916\PTZ

C:\Users\win7\AppData\Local\Temp\nsg206A.tmp\Splash_logo.wav.WAV

c:\users\win7\appdata\local\tempfolder\fonbomacd\iiuzemecuhh.dat

C:\Windows\System32\cmd.exe

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\WSysInfo.dll

C:\Program Files\Internet Explorer\iexplore.exe

C:\Users\win7\AppData\Local\Temp\\~DF891BE321E240E3D9.TMP

C:\Users\win7\AppData\Local\Temp\nseB5CC.tmp\NSISdl.dll

Order.htm

C:\Users\win7\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000008.db

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\vArVzWJ.lnk\desktop.ini

wkernel32.pdb

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\NetWork.dll

C:\Users\win7\AppData\Local\Temp\nsbE314.tmp

C:\Users\win7\AppData\Local\Temp\nsk86CC.tmp\\891391371

C:\PerfLogs

C:\Users\win7\AppData\Local\Temp\nsw2EB2.tmp\System.dll

C:\Windows\INF\ntprint.PNF

C:\Users\win7\AppData\Local\Temp\nsa7626.tmp\nsArray.dll

C:\Windows\system32\cib\ila\pyedp.dat

32788R22FWJFW\system_ini.dat

C:\WINDOWS\FONTS\COMIC.TTF

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\leftUP.bmp

C:\Program Files

\\?\C:\Windows\system32\mms.cfg

ascIPNT.DLL

\\?\C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#local\settings.sxx

C:\Windows\System32\WindowsPowerShell\v1.0\symbols\exe\DVRArchiveViewer.pdb

C:\Users\win7\AppData\Local\Temp\nsh7D56.tmp\\924249673

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager\Uninstall IDM.lnk

\\.\COM253

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs

C:\Users\win7\AppData\Local\Temp\64b86246e9aa3fa79b9535db49b20b8d\volcano.exe

C:\Users\win7\AppData\Local\Temp\nso28C6.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsr1F7B.tmp\SimpleSC.dll

__tmp_rar_sfx_access_check_675078

C:\Users\win7\AppData\Local\Temp\nsd75B4.tmp

c:\users\win7\appdata\local\tempfolder\shrahas\iolartook.dat

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\VideoPad Video Editor.lnk

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~hu-HU~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nse8037.tmp

\??\C:\Windows\system32\explorerframe.dll

C:\Users\win7\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\GIF to Flash Converter\Visit Home Page.lnk

C:\Windows\system32\ASLOC.dll

C:\Users\win7\AppData\Local\Temp\nstF103.tmp\SimpleSC.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-SideShow-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\12aubfff5\appdata\\homepage\0\website\bgsearch_day.jpg

C:\Users\win7\AppData\Local\Temp\nsa2BC4.tmp\1127085849

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Related Programs\Video Capture Software.lnk

C:\Python27\symbols\dll\wkernelbase.pdb

C:/Windows/system32/msvbvm60.dll

ascii.txt

32788R22FWJFW\ncmd.cfxxe

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\trans[1]

C:/Windows/system32/COMCTL32.OCX

C:\Windows\symbols\dll\CFVS_HookDll.pdb

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~11.2.9412.0.cat

c:\download\driver\12950\Program\CmeAuVist.exe

\\.\COM160

UnRAR.exe

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\RUI.ini

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~sv-SE~7.1.7601.16492.cat

RarFiles.lst

C:\Users\win7\AppData\Local\Temp\nsfEA73.tmp\352379005

C:\ProgramData\iml.xml

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\Infobar\image\icon.png

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\Dlg_Btn_Cancel.png

C:\ProgramData\Barowasse2saave\515f05cb47a1c.tlb

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\Dlg_Btn.png

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsc94BA.tmp\1067021553

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~bg-BG~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\s9[1].gif

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_6.bmp

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res\PTZPreset_3.bmp

C:\Users\win7\AppData\Local\Temp\nsg7C6C.tmp\\369335932

C:\Settings\GeoIpCountryWhois.csv

C:\Users\win7\AppData\Local\Temp\\~DF3F0B45D34D96C665.TMP

\\.\COM250

C:\Windows\system32\temp.000

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BBroowsee2save\BBroowsee2save.lnk

C:\Users\win7\AppData\Local\Temp\nsgD1D8.tmp\1099403155

C:\Windows\system32\dfrgui.exe

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\QQBrowserLiveup.exe

C:\Users\win7\AppData\Roaming\GlobalSCAPE\CuteFTP Pro\sm.dat

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\Microsoft.VC90.CRT\msvcm90.dll

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\QBUtils.dll

C:\Users\Public\Documents

C:\Windows\GeoOCX\WebCam\20090916\GeoDDrawV2.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\21215B04FEB2AF188D6B621698846539

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM41.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-NFS-ClientSKU-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\NanWangV4.ini

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\84AFE219AEC53B0C9251F5E19EF019BD_2C9D5E6D83DF507CBE6C15521D5D3562

C:\Windows\GeoOCX\WebCam\20090916\PtzStick_Parser.dll

C:\Users\win7\AppData\Local\Temp\nst58AB.tmp\\806879135

C:\Users\win7\AppData\Local\Temp\IPMx2\install.cfg

C:\Users\win7\AppData\Local\Temp\nsuB310.tmp\\606766963

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MSMQ-Client-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsm56AC.tmp\\428719227

C:\Users\win7\AppData\Local\Temp\7zS7BFD.tmp\pnadleldkhfpclgofgnnmhblfcamfhfa\manifest.json

C:\Users\win7\AppData\Local\Temp\nsjFCDB.tmp\\710108879

[RANDOM_STRING].7z

C:\Python27\Scripts\symbols\exe\DVRArchiveViewer.pdb

\\.\COM208

C:\Users\win7\AppData\Local\Temp\nsz2486.tmp

C:\Users\win7\AppData\Local\Temp\nswF984.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\IconCache.db

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~pt-BR~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsfEA73.tmp\\352379005

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\Dlg_Btn.png

C:\Users\win7\AppData\Local\Temp\nsb2DE7.tmp\545374715

C:\Windows\system32\691703.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~hr-HR~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsf42E0.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Disk-Diagnosis-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\Dlg_Btn_Close.png

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\service\xperf.exe

C:\Windows\system32\ogh\aobi\sicp.dat

C:\Users\win7\AppData\Roaming\BitTorrent\bittorrent.lng

C:\Windows\inf\oem2.PNF

C:\Users\win7\AppData\Local\Temp\IPMx2\All\E8500.inf

MSCOMCTL.OCX

C:\Windows\wma-share2.exe

C:\Users\win7\AppData\Local\Temp\nszE55B.tmp\SimpleSC.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IIS-WebServer-AddOn-2-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\ruta.txt

C:\Windows\system32\wdmaud.drv

c:\users\win7\appdata\local\temp\fon.bmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Backup-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols.xml

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\service\QQTrace.ini

C:\Users\win7\AppData\Local\Temp\nsg11A0.tmp\801601376

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nsgDDF8.tmp\nsArray.dll

\\.\FILEMON

C:\\image\barbutton_left.png

C:\Users\win7\AppData\Roaming\uLEThjJw\9022.xml

C:\Users\win7\AppData\Roaming\rLEThjJw\3118.xml

C:\Windows\SysWOW64\scrrun.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~th-TH~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\325f6ef1eb345d57019b1a43de33cbb2\pricepeep.exe

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Desktop_Shell-GettingStarted-NoWindowsLive-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsz2A5F.tmp\1115100230

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\WSysInfo.dll

C:\Users\win7\AppData\Local\Temp\nsp794E.tmp\nsArray.dll

C:\Windows\MSWINSCN.OCX

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~et-EE~7.1.7601.16492.cat

C:\Windows\system32\spool\DRIVERS\x64\3\STDNAMES.GPD

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\Assistant.dll

C:\WINDOWS\FONTS\VERDANAB.TTF

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~he-IL~7.1.7601.16492.cat

\\.\Scsi15:

C:\Users\win7\AppData\Local\Temp\nsl2C9F.tmp\\436686940

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ichXdev.inf

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\ACTi_6510.ini

C:\Users\win7\AppData\Local\Temp\000a3528.a

C:\Users\win7\AppData\Local\Temp\325f6ef1eb345d57019b1a43de33cbb2\volcano.exe

C:\Users\win7\AppData\Local\Temp\nsd3015.tmp\SimpleSC.dll

C:\Windows\System32\Wbem\dll\wkernelbase.pdb

C:\Windows\System32\WindowsPowerShell\v1.0\DVRArchiveViewer.pdb

C:\Windows\System32\Wbem\symbols\dll\CFVS_HookDll.pdb

C:\Users\Public

C:\Users\win7\AppData\Local\Temp\nst58AB.tmp\806879135

\\.\COM138

c:\users\win7\appdata\local\tempfolder\vekawem\lojodiuoenue.dat

C:\Users\win7\AppData\Local\Temp\nsd70C7.tmp\NSISdl.dll

\\.\COM172

C:\WINDOWS\FONTS\MARLETT.TTF

C:\Users\win7\AppData\Local\SharedSettings_1_0_5.sqlite

C:\Users\win7\AppData\Local\Temp\nsh2EF1.tmp\SimpleSC.dll

C:\Windows\inf\oem5.inf

C:\Users\win7\AppData\Local\Temp\nsl2C9E.tmp

C:\Users\win7\AppData\Local\Temp\nsi26D2.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsh6D3D.tmp\977503959

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~sl-SI~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsg1DB6.tmp\832586926

C:\Users\win7\AppData\Local\Temp\nse2888.tmp\1146630580

C:\Users\win7\AppData\Local\Temp\nsu8F4C.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsv94A7.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsd8D93.tmp\\783248397

C:\Users\win7\AppData\Local\Temp\aut306C.tmp

C:\Users\win7\AppData\Local\Temp\nsi190A.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsg7AE5.tmp

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\Infobar\js\base.js

C:\Program Files\Teamspeak2_RC2\TeamSpeak.RU

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ParentalControls-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Anytime-Upgrade-Results-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~ja-JP~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsyB022.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsoF05F.tmp

C:\CFVS_HookDll.pdb

C:\Users\win7\AppData\Local\Temp\nsb1CB7.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nse1A59.tmp

C:\Windows\system32\MFC42.DLL

c:\everex\powernow\setup.exe

C:\Users\win7\AppData\Local\Temp\nsw7D18.tmp\1029906993

C:\Users\win7\AppData\Local\Temp\nsr2EE1.tmp\\624915643

C:\Users\win7\AppData\Local\Temp\nsn243C.tmp

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3151BAC9462B3E2DEE2326609B77DE7E

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\Infobar\image\infobar_fav.png

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CodecPack-Basic-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nsd8D93.tmp\783248397

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpbejmkogknnkjbfcacgbckomaofefka

C:\Users\win7\AppData\Roaming\ortmp\uninstaller.exe

C:\\image\baritem_play.png

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\INAL43JH.txt

\\.\COM195

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\buywordsbad.gif

c:\users\win7\appdata\roaming\microsoft\windows\start menu\programs\startup\desktop.ini

C:\Users\win7\AppData\Local\Temp\nsj721E.tmp

C:\ProgramData\BrouwsEe2save\515f5b4a5a364.tlb

C:\Users\win7\AppData\Local\Temp\\~DF49075A3A72F4D2CD.TMP

C:\Users\win7\AppData\Local\Temp\nsp81FD.tmp\480236960

C:\Windows\system32\oub\aon\ixorm.dat

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Related Programs\Video File Format Converter.lnk

C:\Users\win7\AppData\Local\FileZilla\filezilla.xml

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~el-GR~7.1.7601.16492.cat

\??\C:\Windows\System32\shdocvw.dll

C:\Settings\HashData.dat

C:\Users\win7\AppData\Local\Temp\aut7C9D.tmp

C:\Users\win7\AppData\Local\Temp\nsy92DC.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsn6FCD.tmp\1143838476

C:\Windows\MFC42.DLL

C:\dcppboot.xml

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\Infobar\image\infobar_fav.png

C:\Users\win7\AppData\Local\Temp\is-MEJF8.tmp\_isetup\_shfoldr.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~fr-FR~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\\~DFF1752384A2D24888.TMP

\\.\COM115

C:\Program Files\Chameleon Clock\Sounds\Clocks\Cuckoo1.wav

C:\Users\win7\AppData\Local\Temp\nsy7192.tmp\NSISdl.dll

C:\Users\win7\AppData\Roaming\DUOghDDY\2464.xml

C:\Windows\MSCOMCT3N.OCX

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~hi-IN~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\Infobar\js\base.js

C:\Users\win7\AppData\Local\Temp\nsw7D18.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nst8DF1.tmp\328237516

32788R22FWJFW\ComboFix-Download.cfxxe

C:\Windows\System32\WindowsPowerShell\v1.0\exe\DVRArchiveViewer.pdb

C:\Users\win7\AppData\Local\Temp\nsyB55D.tmp

C:\Users\win7\AppData\Local\Temp\nsg206A.tmp\ioSpecial.ini

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\Core.ZDT

C:\Windows\system32\ADLOC.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ICM-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

\\.\COM251

C:\dll\wkernel32.pdb

C:\Users\win7\AppData\Local\Temp\Quarantine.exe

C:\Users\win7\AppData\Local\Temp\is-2PQ60.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\nsw2EB2.tmp\nsWeb.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~sk-SK~7.1.7601.16492.cat

\\.\COM182

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~zh-HK~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM50.tmp

C:\Windows\system32\TABCTL32.OCX

C:\Users\win7\AppData\Local\Temp\nsv7A59.tmp\583544826

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager\license.lnk

C:\Users\win7\AppData\Local\Temp\nsu83AF.tmp

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\Ksicfg.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~sr-LATN-CS~7.1.7601.16492.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Help-CoreClientUAUEN-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\nso5FD6.tmp\SimpleSC.dll

C:\wntdll.pdb

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\downloading_icon[1]

C:\Users\win7\AppData\Local\Temp\12aubfff5\appdata\\{B00DFF21-511E-4249-BCB9-EECC370D796B}

c:\2bbba39a5fce003b322b2010\update\branches.inf

C:\Users\win7\AppData\Local\Temp\nsbAB5F.tmp\1012881966

C:\Users\win7\AppData\Local\Temp\{6740F9E3-1353-47DD-9765-BA49FC4C3479}\YandexBarIE.msi

C:\Users\win7\AppData\Local\Temp\nsk86CB.tmp\1166890363

C:\Users\win7\AppData\Local\Temp\nsb1C68.tmp

Language.ini

c:\users\win7\appdata\local\tempfolder\ulynwioaa\afhgajpem.dat

C:\Windows\COMCTL32.OCX

C:\Users\win7\AppData\Local\Temp\nsd26B2.tmp

C:\Users\win7\AppData\Local\Temp\\~DFCA8CDC735C1A2BC1.TMP

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\service\perfctrl.dll

C:\Windows

c:\users\win7\appdata\local\tempfolder\zoidposi\wuelkmuhfine.dat

C:\Windows\system32\symbols\dll\CFVS_HookDll.pdb

\\.\COM128

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM62.tmp

C:\Users\win7\AppData\Local\Temp\7zS7BFD.tmp\515f05ca0c06e.tlb

C:\Data\Scripts\Gui\OptionsAssignments.gui

C:\Users\win7\AppData\Local\Temp\nsw2F00.tmp\nsWeb.dll

C:\Windows\ciplImageList.ocx

Avira Registry Cleaner\RegCleaner.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BC2602F5489CFE3E69F81C6328A4C17C_ED04D8BCFC668EEC75B627867581DAC5

C:\Users\win7\AppData\Local\Temp\nso282A.tmp\333821725

32788R22FWJFW\dumphive.cfxxe

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\asl-btn-big-games-83x28x2.gif

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\trans[1]

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich8core.inf

C:\Users\win7\AppData\Local\Temp\is-0BDME.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\NetWork.dll

C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\OGGB4BWP\localhost\sample\SW3_197042.sol

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\skin\ThirdParty.gt

C:\Users\win7\AppData\Local\Temp\DIQ\flashplayer_154\DomaIQ10.exe

\\.\COM181

C:\ZapImages\asl-btn-big-about-83x28x2.gif

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\skin\ThirdParty.gt

COMCTL3N.OCX

C:\Windows\System32\mshta.exe

C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\security.config

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Libraries

C:\Users\win7\AppData\Local\Temp\nsx2FEA.tmp

C:\Users\win7\AppData\Local\Temp\7zS7336.tmp\lkniaejinldagieikdjacfpfchffkhhi\515f52b8123be9.82403050.js

C:\Users\win7\AppData\Local\Temp\\~DFC0AEC537FA8A340B.TMP

C:\Users\win7\AppData\Local\Temp\7zSB2EF.tmp\settings.ini

C:\Users\win7\AppData\Local\Temp\nsa753C.tmp\SimpleSC.dll

C:\Users\win7\Desktop\wkernelbase.pdb

C:\Users\win7\AppData\Local\Temp\nsv516D.tmp\725090903

C:\Users\win7\AppData\Local\Temp\nsq1DA5.tmp

C:\Users\win7\AppData\Local\Temp\nsp842D.tmp\NSISdl.dll

C:\Windows\ascbalo3N.dll

C:\Users\win7\AppData\Local\Temp\nsm6D0E.tmp\923909173

C:\Users\win7\AppData\Local\Temp\nsdAF56.tmp

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\dr.dll

32788R22FWJFW\License

C:\Users\win7\AppData\Local\Temp\Setup Log 2015-11-16 #001.txt

C:\Users\win7\AppData\Local\Temp\IPMx2\All\865.inf

C:\Users\win7\AppData\Local\CSIDL_

C:\Program Files\Motion-Twin\haxe\lib/./nme/.dev

C:\Windows\system32\MSCOMCT2.OCX

C:\Users\win7\AppData\Local\Temp\nsn8C4A.tmp

C:\Program Files\Chameleon Clock\Sounds\Clocks\doorbell.mp3

C:\Users\win7\AppData\Local\Temp\nsf79FB.tmp\709972679

C:\Users\win7\AppData\Local\Temp\nsa798D.tmp

C:\Windows\POSLiveViewX_STable_8100.xml

C:\Users\win7\AppData\Local\Temp\nsf1C2F.tmp\\565191847

C:\WINDOWS\FONTS\ARIALBI.TTF

C:\Users\win7\AppData\Local\Temp\nsz1B72.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-Optional-Package~31bf3856ad364e35~amd64~en-US~8.0.7601.17514.cat

Msflxgrd.ocx

C:\PROGRA~2\WMACON~1\WMA-SH~1.EXE

C:\Users\win7\AppData\Local\Temp\nsa1F60.tmp\996606040

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\95R8KV3C.txt

C:\Windows\System32\Wbem\DVRArchiveViewer.pdb

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\BitTorrent.lnk

C:\Users\win7\AppData\Local\Temp\nsf1D5C.tmp

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Common-Modem-Drivers-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\ciplListBar3N.ocx

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ESB2ide.inf

C:\Windows\system32\spool\DRIVERS\x64\3\mxdwdui.ini

C:\Windows\ADLOC.dll

C:\Users\win7\AppData\Local\Temp\\~DFAD4807C81535F7F0.TMP

C:\Users\win7\AppData\Local\Temp\IPMx2\Vista\945.inf

C:\Users\win7\AppData\Local\Temp\nsq1DA6.tmp\160949597

C:\Users\win7\AppData\Local\Temp\nsq1443.tmp

C:\Users\win7\AppData\Local\Temp\7zS2C7E.tmp\jkmejkdfcnncpgjajbiahlekpebhcnhl\content.js

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ICM-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\WListViewEx.dll

F:\temp\files\Silverlight-prob.wmv

C:\Users\win7\AppData\Local\Temp\nsjFCDB.tmp\710108879

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ESB2usb.inf

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~fi-FI~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsz7681.tmp\665707608

C:\Users\win7\AppData\Local\Temp\IPMx2\All\dmi_pci.inf

\\.\COM241

C:\Windows\SysWOW64\stdole2.tlb

32788R22FWJFW\FD-SV.cmd

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-BLB-Client-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~da-DK~7.1.7601.16492.cat

C:\Windows\APLOC.dll

C:\Users\win7\AppData\Local\Temp\nsjF08F.tmp\198268457

MSCOMCTL32.OCX

C:\Users\win7\AppData\Local\Temp\7zSB2EF.tmp\dpbejmkogknnkjbfcacgbckomaofefka\515f05cb477e45.02549708.js

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\_isetup\_shfoldr.dll

C:\Windows\system32\ieframe.dll

C:\WINDOWS\FONTS\TRADBDO.TTF

C:\Users\win7\AppData\Local\Temp\12auf94d4\CustomerJoinPlan.txt

\\.\COM194

C:\Users\win7\AppData\Local\Temp\nsy7596.tmp\619467634

C:\Users\win7\AppData\Local\Microsoft\Windows\History\desktop.ini

C:\Windows\System32\drivers

C:\Users\win7\AppData\Local\Temp\nsn1711.tmp\nsWeb.dll

C:\Windows\OLEAUT32.DLL

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\Infobar\image\infobar_close_normal.png

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Network Shortcuts\desktop.ini

C:\Users\win7\Desktop\symbols\dll\wkernelbase.pdb

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Hyper-V-Common-Drivers-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\12aubfff5\appdata\\{B00D20E2-207A-431A-9712-E1279792681B}

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Debut Video Capture Software.lnk

C:\Windows\TABCTL3N.OCX

C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\enterprisesec.config

C:\Users\win7\AppData\Local\Temp\IPMx2\All\ich9core.inf

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\Dlg_icon.png

C:\WINDOWS\FONTS\ARIAL.TTF

C:\Users\win7\AppData\Local\Temp\nswAEF6.tmp\1170874219

\\.\COM116

C:\Users\win7\AppData\Local\Temp\DIQ\flashplayer_151\DomaIQ10.exe

C:\Users\win7\Links\desktop.ini

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Program Files\Motion-Twin\haxe\lib/./nme/.current

C:\Windows\System32\Wbem\CFVS_HookDll.pdb

C:\Users\win7\AppData\Local\Temp\nsg21EF.tmp

C:\Users\win7\AppData\Local\Temp\nsm225E.tmp\442134949

C:\Users\win7\AppData\Local\Temp\12aubfff5\appdata\\{3349050F-829E-4bb2-AACF-03E3A6B68677}

C:\Users\win7\AppData\Local\Temp\nsf1C2F.tmp\nsArray.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerDist-Client-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Users\win7\AppData\Local\Temp\scratch.bat

C:\Users\win7\AppData\Local\Temp\nsp1A98.tmp

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\botva2.dll

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~uk-UA~7.1.7601.16492.cat

C:\Temp\installtemped\3CD70020C3649FEB78B2719BF70420DD17CB\discounts.html

C:\Users\win7\AppData\Local\Temp\12auf94d4\QBInstaller.dll

C:\Windows\Microsoft.VisualBasic.pdb

C:\Python27\Scripts\exe\DVRArchiveViewer.pdb

C:\Users\win7\AppData\Local\Temp\\~DFFBE2752571DD86F3.TMP

C:\Users\win7\AppData\Local\Temp\\~DF3CC91CC72C2C9439.TMP

RICHTX32.DEP

C:\Users\win7\AppData\Local\Temp\nsz8067.tmp\420921765

C:\Users\win7\AppData\Local\Temp\nsx9767.tmp\1167639464

C:\WINDOWS\FONTS\MSYH.TTF

32788R22FWJFW\mynul.dat

C:\Users\win7\AppData\Local\Temp\nsbAB10.tmp

C:\Users\win7\AppData\Local\Temp\7zS55DB.tmp\jjhklgikohjiaahlibnfgegobedhpgmf\515f05c5b9ccb7.51093443.js

c:\windows\system32\drivers\adpu320.sys

C:\Users\win7\AppData\Local\Temp\nsgDDA9.tmp

C:\Python27\Scripts\wkernel32.pdb

C:\Users\win7\AppData\Local\Temp\nsi26D2.tmp\1131546406

C:\Users\win7\AppData\Local\Temp\nsy8713.tmp\1150069636

C:\Users\win7\AppData\Local\Temp\nsxAE9B.tmp\639931717

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\Dialogs.dll

C:\Users\win7\AppData\Roaming\NLEThjJwJ

C:\Data\Textures\Gui\EditBoxBack4.dds

C:\Users\win7\AppData\Local\Temp\\~DFC9E396967BA2E7D3.TMP

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\Dlg_icon.png

32788R22FWJFW\ddsDo.sed

C:\Python27\CFVS_HookDll.pdb

C:\Windows\system32\ccrpprg6.ocx

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package~31bf3856ad364e35~amd64~lt-LT~7.1.7601.16492.cat

C:\Windows\GeoOCX\WebCam\20090916\PTZ\PTZSetup_new\PTZ_Res

C:\Windows\System32

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\23B523C9E7746F715D33C6527C18EB9D

C:\Users\win7\AppData\Local\Temp\12aubfff5\appdata\\thumb\http___qzone.qq.com_.jpg

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\top-line[1].gif

C:\WINDOWS\FONTS\MALGUN.TTF

C:\Users\win7\AppData\Local\Temp\nsh703E.tmp

c:\OkiDriver\OKIB2200B2400\OPPE_UM.dll

C:\Users\win7\AppData\Local\Temp\nsl7BEE.tmp

\\.\VBoxMiniRdrDN

C:\Users\win7\AppData\Local\Temp\12aubfff5\bin\\Dialogs.dll

C:\Users\win7\AppData\Roaming\rLEThjJw

C:\Users\win7\AppData\Local\Temp\7zS7BFD.tmp\515f05ca0c06e.dll

32788R22FWJFW\sed.cfxxe

C:\Windows\COMDLG32.OCX

C:\Windows\system32\COMCTL3N.DLL

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\_isetup\_setup64.tmp

C:\WINDOWS\FONTS\TAHOMABD.TTF

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\carregando[1].gif

c:\users\win7\appdata\local\tempfolder\mycovifazo\omiouspofs.dat

C:\Users\win7\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch

C:\Users\win7\AppData\Local\Temp\RarSFX0\VjxjVBc.exe

C:\Users\win7\AppData\Local\Temp\12auf94d4\bin\\QRCode.dll

C:\Users\win7\AppData\Local\Temp\nst2675.tmp\1002973400