SHFOLDER

ole32.dll

comctl32.dll

ADVAPI32.dll

SHELL32.dll

propsys.dll

ntmarta.dll

API-MS-Win-Core-LocalRegistry-L1-1-0.dll

C:\Windows\system32\ole32.dll

RichEd20

UxTheme.dll

C:\Windows\syswow64\MSCTF.dll

OLEAUT32.DLL

IMM32.dll

C:\Windows\system32\shell32.dll

C:\Users\win7\AppData\Local\Temp\nsw70DF.tmp\System.dll

USER32.dll

ntshrui.dll

srvcli.dll

cscapi.dll

slc.dll

SHLWAPI.dll

API-MS-Win-Security-LSALookup-L1-1-0.dll

COMCTL32

KERNEL32

msi.dll

imm32.dll

C:\Windows\system32\DSOUND.dll

KERNEL32.dll

kernel32.dll

psapi.dll

advapi32.dll

dbghelp.dll

version.dll

user32.dll

C:\sample

OLEACCRC.DLL

SspiCli.dll

dsound.dll

C:\Windows\system32\dsound.dll

SETUPAPI.dll

MMDEVAPI.DLL

CFGMGR32.dll

AUDIOSES.DLL

Advapi32.dll

uxtheme.dll

d3d9.dll

VBoxDisp.dll

Wtsapi32.dll

WINSTA.dll

RPCRT4.dll

CRYPTBASE.dll

gdi32.dll

msimg32.dll

Secur32.dll

api-ms-win-downlevel-advapi32-l2-1-0.dll

api-ms-win-downlevel-ole32-l1-1-0.dll

WS2_32.dll

winhttp.dll

IPHLPAPI.DLL

api-ms-win-downlevel-shlwapi-l2-1-0.dll

DNSAPI.dll

OLEAUT32.dll

urlmon.dll

dhcpcsvc.DLL

Comctl32.dll

C:\Windows\system32\ws2_32

bcrypt.dll

C:\Windows\SysWOW64\bcryptprimitives.dll

SXS.DLL

WININET.dll

MSHTML.dll

MLANG.dll

PROPSYS.dll

shell32.dll

mshtml.dll

IEFRAME.dll

CRYPTSP.dll

d2d1.dll

DWrite.dll

dxgi.dll

C:\DXGIDebug.dll

C:\Windows\system32\DXGIDebug.dll

setupapi.dll

WINTRUST.dll

d3d11.dll

D3D10Warp.dll

C:\Windows\system32\D3D10Warp.dll

C:\Windows\SysWOW64\urlmon.dll

msls31.dll

WindowsCodecs.dll

C:\Windows\system32\ntshrui.dll

API-MS-Win-Security-SDDL-L1-1-0.dll

netutils.dll

C:\Users\win7\AppData\Local\Temp\nso793.tmp\System.dll

api-ms-win-core-synch-l1-2-0

kernel32

api-ms-win-core-fibers-l1-1-1

advapi32

api-ms-win-core-localization-l1-2-1

api-ms-win-appmodel-runtime-l1-1-1

ext-ms-win-kernel32-package-current-l1-1-0

VERSION.dll

C:\Windows\system32\ntoskrnl.exe

UTILDLL.dll

C:\Windows\System32\wininit.exe

C:\Windows\System32\svchost.exe

C:\Windows\System32\SearchIndexer.exe

C:\Windows\explorer.exe

C:\Windows\System32\cmd.exe

C:\Python27\python.exe

C:\Windows\System32\dllhost.exe

C:\CFVS_Injector.exe

C:\Windows\System32\taskkill.exe

C:\Windows\SysWOW64\TSAPPCMP.DLL

Ntdll.dll

C:\Windows\SysWOW64\SHLWAPI.DLL

C:\Windows\SysWOW64\OLE32.DLL

C:\Windows\SysWOW64\KERNEL32.DLL

MsiMsg.dll

C:\Windows\SysWOW64\SHELL32.DLL

C:\Windows\SysWOW64\NETAPI32.DLL

C:\Windows\SysWOW64\ADVAPI32.DLL

C:\Windows\SysWOW64\APPHELP.DLL

C:\Windows\SysWOW64\VERSION.DLL

C:\Windows\SysWOW64\sxs.DLL

C:\Windows\SysWOW64\MSCOREE.DLL

C:\Windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll

C:\Windows\SysWOW64\NTDLL.DLL

MsiHnd.dll

DWMAPI

USER32

RICHED20.DLL

USP10.dll

Msi.DLL

CABINET

SHFolder.dll

CRYPT32.dll

USERENV.dll

secur32.dll

ncrypt.dll

cryptnet.dll

C:\Windows\system32\cryptnet.dll

SensApi.dll

WINHTTP.dll

ntdll.dll

NSI.dll

API-MS-WIN-Service-Management-L1-1-0.dll

API-MS-WIN-Service-Management-L2-1-0.dll

API-MS-WIN-Service-winsvc-L1-1-0.dll

profapi.dll

Cabinet.dll

DEVRTL.dll

C:\Windows\System32\shdocvw.dll

DCIMAN32.DLL

C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18834_none_72d38c5186679d48\gdiplus.dll

KERNEL32.DLL

WSOCK32.DLL

rasapi32.dll

imageres.dll

Kernel32.dll

wininet.dll

User32.dll

COMCTL32.dll

comdlg32.dll

GDI32.dll

NETAPI32.dll

oledlg.dll

WINMM.dll

WINSPOOL.DRV

C:\Windows\system32\UXTHEME.dll

C:\Windows\system32\USERENV.dll

C:\Windows\system32\SETUPAPI.dll

C:\Windows\system32\SHFOLDER.dll

C:\Users\win7\AppData\Local\Temp\is-6PKQL.tmp\_isetup\_shfoldr.dll

shfolder.dll

C:\Windows\system32\imageres.dll

FaultRep.dll

gdiplus.dll

security.dll

C:\\libcef.dll

WS2_32.DLL

Fwpuclnt.dll

IdnDL.dll

Normaliz.dll

iphlpapi.dll

libeay32.dll

libcef.dll

C:\Windows\system32\propsys.dll

C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d\comctl32.dll

C:\Windows\System32\wship6.dll

C:\Windows\system32\rasadhlp.dll

C:\Windows\System32\wshtcpip.dll

C:\Windows\system32\mswsock.dll

C:\Windows\system32\WINNSI.DLL

C:\Windows\system32\iphlpapi.dll

C:\Windows\system32\IdnDL.dll

C:\Windows\system32\Fwpuclnt.dll

C:\Windows\system32\SECUR32.DLL

C:\Windows\system32\security.dll

C:\Windows\system32\ntmarta.dll

C:\Windows\system32\FaultRep.dll

C:\Windows\system32\dwmapi.dll

C:\Windows\system32\d3d8thk.dll

C:\Windows\system32\d3d9.dll

C:\Windows\system32\winspool.drv

C:\Windows\system32\winmm.dll

C:\Windows\system32\wsock32.dll

C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_ec86b8d6858ec0bc\comctl32.dll

C:\Windows\system32\DNSAPI.dll

C:\Windows\system32\version.DLL

C:\CFVS_HookDll.dll

C:\Windows\syswow64\CRYPTBASE.dll

C:\Windows\syswow64\SspiCli.dll

C:\Windows\syswow64\CFGMGR32.dll

C:\Windows\syswow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll

C:\Windows\syswow64\iertutil.dll

C:\Windows\SysWOW64\sechost.dll

C:\Windows\syswow64\msvcrt.dll

C:\Windows\syswow64\api-ms-win-downlevel-ole32-l1-1-0.dll

C:\Windows\syswow64\ADVAPI32.dll

C:\Windows\syswow64\ole32.DLL

C:\Windows\syswow64\SETUPAPI.dll

C:\Windows\syswow64\shell32.dll

C:\Windows\syswow64\kernel32.dll

C:\Windows\syswow64\api-ms-win-downlevel-version-l1-1-0.dll

C:\Windows\syswow64\USER32.dll

C:\Windows\syswow64\profapi.dll

C:\Windows\syswow64\api-ms-win-downlevel-advapi32-l1-1-0.dll

C:\Windows\syswow64\NSI.dll

C:\Windows\syswow64\GDI32.dll

C:\Windows\syswow64\MSASN1.dll

C:\Windows\syswow64\USERENV.dll

C:\Windows\syswow64\CLBCatQ.DLL

C:\Windows\system32\IMM32.DLL

C:\Windows\syswow64\oleaut32.dll

C:\Windows\syswow64\urlmon.dll

C:\Windows\syswow64\KERNELBASE.dll

C:\Windows\syswow64\normaliz.DLL

C:\Windows\syswow64\api-ms-win-downlevel-user32-l1-1-0.dll

C:\Windows\syswow64\api-ms-win-downlevel-normaliz-l1-1-0.dll

C:\Windows\syswow64\comdlg32.dll

C:\Windows\syswow64\WININET.dll

C:\Windows\syswow64\shlwapi.DLL

C:\Windows\syswow64\DEVOBJ.dll

C:\Windows\syswow64\WS2_32.dll

C:\Windows\syswow64\Crypt32.dll

C:\Windows\syswow64\USP10.dll

C:\Windows\syswow64\RPCRT4.dll

C:\Windows\syswow64\WLDAP32.dll

C:\Windows\syswow64\LPK.dll

C:\Windows\SysWOW64\ntdll.dll

API-MS-WIN-DOWNLEVEL-SHLWAPI-L1-1-0.DLL

C:\Windows\system32\ntdll.dll

MSIMG32.dll

PSAPI.DLL

Msftedit.dll

C:\Windows\SysWOW64\ieframe.dll

iertutil.dll

DUser.dll

C:\Windows\system32\DUser.dll

dwmapi.dll

C:\Windows\system32\xmllite.dll

C:\Windows\syswow64\CRYPT32.dll

WINTRUST.DLL

imagehlp.dll

C:\Users\win7\AppData\Local\Temp\is-MCBQP.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-MCBQP.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-H50UK.tmp\_isetup\_shfoldr.dll

Rstrtmgr.dll

C:\Users\win7\AppData\Local\Temp\is-H50UK.tmp\idp.dll

C:\Users\win7\AppData\Local\Temp\is-H50UK.tmp\innocallback.dll

C:\Users\win7\AppData\Local\Temp\is-H50UK.tmp\innocallback.ENU

C:\Users\win7\AppData\Local\Temp\is-H50UK.tmp\innocallback.EN

C:\Users\win7\AppData\Local\Temp\is-H50UK.tmp\isslideshow.dll

user32

C:\Users\win7\AppData\Local\Temp\is-H50UK.tmp\isslideshow.ENU

C:\Users\win7\AppData\Local\Temp\is-H50UK.tmp\isslideshow.EN

olepro32.dll

RICHED32.DLL

C:\Users\win7\AppData\Local\Temp\is-H50UK.tmp\ISDone.dll

COMDLG32.dll

ws2_32.dll

inetmib1.dll

snmpapi.dll

rpcrt4.dll

C:\sampleENU.dll

C:\sampleLOC.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll

mscoree.dll

ntdll

C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll

RichEd20.dll

mscorsec.dll

C:\Users\win7\AppData\Local\Temp\nsd8044.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\is-PJKDI.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-PJKDI.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-8QD8J.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-8QD8J.tmp\CallbackCtrl.dll

C:\Users\win7\AppData\Local\Temp\is-8QD8J.tmp\isslideshow.dll

C:\Users\win7\AppData\Local\Temp\is-8QD8J.tmp\isslideshow.ENU

C:\Users\win7\AppData\Local\Temp\is-8QD8J.tmp\isslideshow.EN

C:\Users\win7\AppData\Local\Temp\is-8QD8J.tmp\ISDone.dll

C:\Users\win7\AppData\Local\Temp\is-JI6CP.tmp\_isetup\_shfoldr.dll

ieframe.dll

mscms.dll

icm32.dll

api-ms-win-core-winrt-l1-1-0.dll

C:\Windows\System32\msxml3r.dll

C:\Users\win7\AppData\Local\Temp\is-J6RCU.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-J6RCU.tmp\ISDone.dll

C:\Windows\system32\shlwapi.dll

C:\Users\win7\AppData\Local\Temp\is-J6RCU.tmp\b2p.dll

C:\Users\win7\AppData\Local\Temp\is-J6RCU.tmp\botva2.dll

GDIPlus

C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18834_none_72d38c5186679d48\GDIPlus.DLL

C:\Users\win7\AppData\Local\Temp\apm458A.tmp

C:\Users\win7\AppData\Local\Temp\is-E83SQ.tmp\_isetup\_shfoldr.dll

MSISIP.DLL

crypt32.dll

C:\Windows\SysWOW64\cryptnet.dll

C:\Windows\system32\VB6JP.DLL

VERSION.DLL

POWRPROF.DLL

PowrProf.dll

Msctf.dll

wtsapi32.dll

C:\Windows\system32\MSI.DLL

C:\Windows\system32\kernel32.dll

C:\Windows\system32\wbem\xml\wmi2xml.dll

C:\Windows\system32\EhStorShell.dll

c:\windows\system32\imageres.dll

C:\Windows\system32\VBoxMRXNP.dll

C:\Windows\System32\imageres.dll

C:\Windows\System32\drprov.dll

C:\Windows\System32\ntlanman.dll

C:\Windows\System32\davclnt.dll

C:\Users\win7\AppData\Local\Temp\nsk49CF.tmp\services.dll

C:\Users\win7\AppData\Local\Temp\nsk49CF.tmp\LangDLL.dll

C:\Users\win7\AppData\Local\Temp\nsk49CF.tmp\InstallOptions.dll

C:\Windows\system32\DBGHELP.DLL

C:\Windows\system32\odbcint.dll

MSVCRT.DLL

BrLogAPI.dll

BrDbgOut.dll

BrDbgOtW.dll

C:\Users\win7\AppData\Local\Temp\is-G7HL1.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-PBGS6.tmp\_isetup\_shfoldr.dll

wsock32.dll

C:\Users\win7\AppData\Local\Temp\nsdB316.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsdB316.tmp\UAC.dll

AdvAPI32

SECUR32

C:\Users\win7\AppData\Local\Temp\nsdB316.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nsdB316.tmp\ServicesHelper.dll

C:\Users\win7\AppData\Local\Temp\is-KFOOK.tmp\_isetup\_shfoldr.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\ole32.dll

AdvApi32.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System\908ba9e296e92b4e14bdc2437edac603\System.ni.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\716ee14dc9aafde2b5f7f387d842661d\System.ServiceProcess.ni.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5a401fd2a7689ff13fb54182953f9c40\System.Drawing.ni.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\6949c4470a81970ec3de0a575d93babc\System.Windows.Forms.ni.dll

C:\Users\win7\AppData\Local\Temp\is-TIHN7.tmp\_isetup\_shfoldr.dll

cmdhtml.dll

d3d10_1.dll

shcore.dll

uiautomationcore.dll

UIAutomationCore.dll

dwrite.dll

UXTHEME.DLL

C:\Users\win7\AppData\Local\Temp\comodocss_temp_setup\DXGIDebug.dll

MMDevAPI.DLL

wdmaud.drv

msacm32.drv

midimap.dll

dSound.dll

C:\Windows\system32\dSound.dll

C:\Windows\system32\sfc.dll

C:\Users\win7\AppData\Local\Temp\VideoPad-2932-1\ffmpeg19.exe

C:\Windows\System32\ShellStyle.dll

explorerframe.dll

MsftEdit.dll

C:\Windows\system32\IconCodecService.dll

C:\Windows\system32\mssvp.dll

C:\msfte.dll

C:\msTracer.dll

C:\Windows\system32\networkexplorer.dll

COMCTL32.DLL

shlwapi.dll

avrt.dll

C:\Users\win7\AppData\Local\Temp\27E45Q0I\unpack.dll

C:\Windows\system32\CRTDLL.DLL

SetupApi.DLL

wintrust.dll

newdev.dll

kernel32.DLL

Advapi32.DLL

Clusapi.DLL

gdi32.DLL

C:\Users\win7\AppData\Local\Temp\is-40VU3.tmp\_isetup\_shfoldr.dll

ddraw.dll

C:\Windows\SysWOW64\DDRAW.dll

C:\Windows\System32\msxml6r.dll

C:\Windows\system32\Msimtf.dll

C:\Users\win7\AppData\Local\Temp\nsj3E28.tmp\nsExec.dll

C:\Users\win7\AppData\Local\Temp\nsr389A.tmp\nsExec.dll

ADVAPI32.DLL

C:\Users\win7\AppData\Local\Temp\nshBA53.tmp\TvGetVersion.dll

C:\Users\win7\AppData\Local\Temp\nshBA53.tmp\UserInfo.dll

C:\Windows\system32\RichEd20.dll

C:\Users\win7\AppData\Local\Temp\nshBA53.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nshBA53.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nshBA53.tmp\linker.dll

Msimg32.dll

C:\Users\win7\AppData\Local\Temp\AIRDE3A.tmp\\Adobe AIR\Versions\1.0\Adobe AIR.dll

Versions\1.0\Adobe AIR.dll

C:\Users\win7\AppData\Local\Temp\AIRDE3A.tmp\Adobe AIR\Versions\1.0\Resources\WebKit.dll

msimg32

C:\Users\win7\AppData\Local\Temp\AIRDE3A.tmp\Adobe AIR Installer.exe

C:\Windows\SysWOW64\SAGE.DLL

Msi.dll

d3dxof.dll

C:\rarlng.dll

riched32.dll

riched20.dll

C:\Users\win7\AppData\Local\Temp\ins.exe

ImgUtil.dll

OLEACC.DLL

C:\Windows\system32\Oleacc.dll

ws2_32

C:\Users\win7\AppData\Local\Temp\5895\5895.exe

C:\Users\win7\AppData\Local\Temp\is-EQ9N3.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-EQ9N3.tmp\sample.EN

oleaut32.dll

winmm.dll

C:\Users\win7\AppData\Local\Temp\nsi56B9.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsi56B9.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nsi56B9.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nsi56B9.tmp\InetBgDL.dll

C:\Users\win7\AppData\Local\Temp\nsj4F0A.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsj4F0A.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nsj4F0A.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nsj4F0A.tmp\InetBgDL.dll

COMDLG32.DLL

IMM32.DLL

msvcrt.dll

OLE32.dll

SHELL32.DLL

C:/Users/win7/AppData/Local/Temp/BRE72E.tmp

C:/Users/win7/AppData/Local/Temp/BRE7BB.tmp

C:/Users/win7/AppData/Local/Temp/BRE914.tmp

C:/Users/win7/AppData/Local/Temp/BRE944.tmp

C:/Users/win7/AppData/Local/Temp/BRE964.tmp

C:/Users/win7/AppData/Local/Temp/BREADC.tmp

C:/Users/win7/AppData/Local/Temp/BREE19.tmp

C:/Users/win7/AppData/Local/Temp/BREEA7.tmp

C:/Users/win7/AppData/Local/Temp/BREEB8.tmp

C:/Users/win7/AppData/Local/Temp/BREF45.tmp

winmm

uxtheme

wintab32

wintab32.dll

version

secur32

userenv

usp10

shell32

C:\Windows\System32\AdapterTroubleshooter.exe

C:\Windows\System32\ARP.EXE

C:\Windows\System32\at.exe

C:\Windows\System32\AtBroker.exe

C:\Windows\System32\attrib.exe

C:\Windows\System32\auditpol.exe

C:\Windows\System32\autochk.exe

C:\Windows\System32\autoconv.exe

C:\Windows\System32\autofmt.exe

C:\Windows\system32\mmcshext.dll

C:\Windows\System32\bitsadmin.exe

C:\Windows\System32\bootcfg.exe

C:\Windows\System32\bthudtask.exe

C:\Windows\System32\Bubbles.scr

C:\Windows\System32\cacls.exe

C:\Windows\System32\calc.exe

C:\Windows\System32\CertEnrollCtrl.exe

C:\Windows\System32\certreq.exe

C:\Windows\System32\certutil.exe

C:\Windows\System32\charmap.exe

C:\Windows\System32\chkdsk.exe

C:\Windows\System32\chkntfs.exe

C:\Windows\System32\choice.exe

C:\Windows\System32\cipher.exe

C:\Windows\System32\cleanmgr.exe

C:\Windows\System32\cliconfg.exe

C:\Windows\System32\clip.exe

C:\Windows\System32\cmdkey.exe

C:\Windows\System32\cmdl32.exe

C:\Windows\System32\cmmon32.exe

C:\Windows\System32\cmstp.exe

C:\Windows\System32\colorcpl.exe

C:\Windows\System32\comp.exe

C:\Windows\System32\compact.exe

C:\Windows\System32\ComputerDefaults.exe

C:\Windows\System32\control.exe

C:\Windows\System32\convert.exe

C:\Windows\System32\credwiz.exe

C:\Windows\system32\psapi.dll

werui.dll

DUI70.dll

C:\Windows\SysWOW64\DUser.dll

C:\Windows\system32\RICHED20.DLL

api-ms-win-core-sysinfo-l1-2-1

atlthunk.dll

C:\Windows\system32\KERNEL32.DLL

C:\Windows\system32\NTDLL.DLL

C:\Windows\system32\ADVAPI32.DLL

C:\Users\win7\AppData\Local\Temp\is-PH7AV.tmp\_isetup\_shfoldr.dll

credui.dll

C:\Users\win7\AppData\Local\Temp\is-SGETF.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-SGETF.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-V9HJD.tmp\_isetup\_shfoldr.dll

NTDLL.DLL

mpr.dll

winspool.drv

oleacc.dll

GDI32.DLL

usp10.dll

netapi32.dll

Avrt.dll

HHCtrl.OCX

C:\SQLite3.dll

C:\Users\win7\AppData\Local\Temp\nssA12D.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nssA12D.tmp\newadvsplash.dll

C:\Windows\system32\urlmon.dll

C:\Windows\system32\asycfilt.dll

C:\Windows\system32\WINMM.dll

Riched20.dll

C:\Windows\SysWOW64\msls31.dll

DDRAW.dll

DSOUND.dll

DINPUT8.dll

C:\Users\win7\AppData\Local\Temp\mdmB1E5.tmp

DINPUT.DLL

HID.DLL

SETUPAPI.DLL

USER32.DLL

URLMON.DLL

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\ar-SA\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\cs-CZ\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\da-DK\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\de-DE\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\el-GR\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\en-US\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\es-ES\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\fi-FI\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\fr-FR\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\he-IL\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\hu-HU\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\it-IT\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\ja-JP\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\ko-KR\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\nb-NO\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\nl-NL\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\pl-PL\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\pt-BR\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\pt-PT\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\ru-RU\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\sk-SK\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\sv-SE\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\th-TH\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\tr-TR\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\zh-CN\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\zh-TW\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\en-US\resource.dll.mui

C:\Windows\system32\MSFTEDIT.dll

C:\Windows\system32\msi.dll

Kernel32

C:\Program Files\Internet Explorer\IEXPLORE.EXE

powrprof.dll

IMGUTIL.DLL

C:\Users\win7\AppData\Local\Temp\is-C5AAO.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-C5AAO.tmp\sample.EN

msvcr71.dll

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\msvcr71.dll

msvcp71.dll

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\msvcp71.dll

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\proj.dll

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\INetURL.x32

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\NetFile.x32

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\NetLingo.x32

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\SWADCmpr.x32

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\MacroMix.x32

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\DirectSound.x32

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\Sound Control.x32

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\Text Asset.x32

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\TextXtra.x32

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\Font Xtra.x32

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\Flash Asset.x32

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\Shockwave 3D Asset.x32

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\Font Asset.x32

C:\winampa.lng

C:\Users\win7\AppData\Local\Temp\nsy5EE6.tmp\System.dll

C:\en-US.dll

C:\en.dll

C:\Users\win7\AppData\Local\Temp\is-LNMB3.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nssC7E0.tmp\DotNetChecker.dll

C:\Users\win7\AppData\Local\Temp\nssC7E0.tmp\nsSCM.dll

C:\Users\win7\AppData\Local\Temp\nsuEEF5.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsuEEF5.tmp\ImageEdPlug

C:\Users\win7\AppData\Local\Temp\nsuEEF5.tmp\KillProcDLL.dll

C:\Users\win7\AppData\Local\Temp\nskBBA2.tmp\System.dll

revolt.dll

MSWSOCK.dll

C:\Windows\SysWOW64\occache.dll

C:\Windows\SysWOW64\gameux.dll

C:\Windows\SysWOW64\inetcpl.cpl

C:\Windows\System32\DATACLEN.DLL

C:\Windows\system32\setupcln.dll

C:\Windows\system32\wer.dll

C:\Windows\system32\riched20.dll

C:\Windows\system32\dfshim.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\dfdll.dll

fltlib.dll

MSVCRT.dll

DnsApi.dll

urlmon

Iphlpapi.dll

ICMP.DLL

mtxoci.dll

oci.dll

C:\Windows\system32\comsvcs.dll

C:\Users\win7\AppData\Local\Temp\nsu78B0.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nsu78B0.tmp\newadvsplash.dll

C:\Users\win7\AppData\Local\Temp\nsu78B0.tmp\LangDLL.dll

C:\Users\win7\AppData\Local\Temp\nsu78B0.tmp\System.dll

News.dll

C:\Users\win7\AppData\Local\Temp\hyaF94D.tmp

MPR.DLL

OLE32.DLL

C:\Users\win7\AppData\Local\Temp\hyaF94D.ENU

C:\Users\win7\AppData\Local\Temp\hyaF94D.EN

C:\Users\win7\AppData\Local\Temp\nsw995C.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\nsw995C.tmp\UtilsPlugin.dll

C:\Users\win7\AppData\Local\Temp\nsw995C.tmp\System.dll

UnityWebPluginAX.ocx

C:\Users\win7\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx

C:\Users\win7\AppData\Local\Temp\nsw995C.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nsw995C.tmp\UAC.dll

Shell32.dll

C:\Users\win7\AppData\Local\Temp\nsu131F.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsu131F.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nsu131F.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nsu131F.tmp\ServicesHelper.dll

POWRPROF.dll

C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\DXGIDebug.dll

NTDLL.dll

C:\Users\win7\AppData\Local\Temp\is-SDH7C.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-SDH7C.tmp\_isetup\_isdecmp.dll

C:\Windows\system32\VB6ES.DLL

C:\Users\win7\AppData\Local\Temp\nspC5EB.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nspC5EB.tmp\System.dll

C:\Imagine.dll

C:\Windows\system32\AdvApi32.dll

C:\Windows\system32\Msi.dll

feclient.dll

C:\Users\win7\AppData\Local\Temp\{e3931098-f44a-4c70-bf9c-f48d24bdd066}\.ba1\wixstdba.dll

C:\Windows\system32\wups.dll

C:\Windows\system32\wu.upgrade.ps.dll

C:\Users\win7\AppData\Local\Temp\is-L3OM5.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-NEDQ1.tmp\_isetup\_shfoldr.dll

C:\Program Files\Internet Explorer\iexplore.exe

C:\Windows\system32\mspaint.exe

C:\Windows\System32\mspaint.exe

C:\Windows\system32\NOTEPAD.EXE

C:\Windows\System32\notepad.exe

c:\windows\system32\mspaint.exe

c:\windows\system32\notepad.exe

c:\program files\internet explorer\iexplore.exe

kernel.dll

C:\1033\certintl.dll

C:\Users\win7\AppData\Local\Temp\is-5AD42.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nsx974E.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsx974E.tmp\CityHash.dll

C:\Users\win7\AppData\Local\Temp\is-4CMSU.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-4CMSU.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-9HECS.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-QH5H5.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-QH5H5.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-PAI7L.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-PAI7L.tmp\isxdl.dll

MSFTEDIT.DLL

C:\Users\win7\AppData\Local\Temp\GUM5ED3.tmp\goopdate.dll

C:\Users\win7\AppData\Local\Temp\GUM5ED3.tmp\goopdateres_en.dll

comctl32

C:\Users\win7\AppData\Local\Temp\nso5009.tmp\nsDialogs.dll

C:\Windows\system32\kernel32

C:\Windows\system32\ntdll

msimsg.dll

C:\Windows\system32\shell32

C:\Windows\system32\user32

C:\Windows\System32\mstscax.dll

C:\Windows\SYSWOW64\mstscax.dll

C:\Users\win7\AppData\Local\Temp\is-5LULK.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-5LULK.tmp\sample.EN

wiatrace.dll

MSVCR90.dll

C:\zlib.pyd

NETAPI32.DLL

advpack

C:\Windows\SysWOW64\SETUPAPI.DLL

SPINF.dll

SPFILEQ.dll

C:\Users\win7\AppData\Local\Temp\nsg5682.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsg5682.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\is-77QBU.tmp\_isetup\_shfoldr.dll

cfgmgr32.dll

C:\InstallRes.dll

WinTrust.dll

MPR.dll

WSOCK32.dll

NTDLL

SSPICLI

C:\Users\win7\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Program Files\Microsoft Silverlight\sllauncher.exe

C:\Windows\SysWOW64\jscript9.dll

C:\Windows\SysWOW64\SFC.DLL

C:\Windows\SysWOW64\mfcm120u.dll

C:\Windows\SysWOW64\mfcm120.dll

C:\Windows\SysWOW64\mfc120u.dll

C:\Windows\SysWOW64\mfc120.dll

C:\Windows\SysWOW64\vccorlib120.dll

C:\Windows\SysWOW64\msvcp120.dll

C:\Windows\SysWOW64\msvcr120.dll

C:\Users\win7\AppData\Local\Temp\is-6EV4U.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-6EV4U.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-7SMID.tmp\_isetup\_shfoldr.dll

C:\Windows\system32\msxml6.dll

Shlwapi

Msimg32

c:\python27\dlls\py.ico

C:\DLL_Loader.exe

C:\Procmon.exe

C:\Users\win7\AppData\Local\Temp\is-RILC4.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-RILC4.tmp\bass.dll

C:\Users\win7\AppData\Local\Temp\is-RILC4.tmp\ISDone.dll

C:\Users\win7\AppData\Local\Temp\is-RILC4.tmp\isskin.dll

C:\Users\win7\AppData\Local\Temp\is-FNL14.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\is-RILC4.tmp\skin.cjstyles

dsound

C:\Windows\system32\dsound.DLL

C:\Users\win7\AppData\Local\Temp\is-RILC4.tmp\isgsg.dll

C:\Users\win7\AppData\Local\Temp\is-PJ97L.tmp\_isetup\_shfoldr.dll

D3D9.DLL

DXGI.DLL

C:\DBGHELP.DLL

C:\USERS\WIN7\APPDATA\LOCAL\.#\MBX@250@28F7E0.###

C:\USERS\WIN7\APPDATA\LOCAL\.#\MBX@250@28F610.###

C:\USERS\WIN7\APPDATA\LOCAL\.#\MBX@250@28E540.###

C:\USERS\WIN7\APPDATA\LOCAL\.#\MBX@250@28E550.###

mss32.dll

MSCOREE.DLL

C:\Windows\SysWOW64\msi.dll

C:\Users\win7\AppData\Local\Temp\nsu5948.tmp\nsExec.dll

C:\Users\win7\AppData\Local\Temp\nsu5948.tmp\System.dll

alvtnvw.dll

C:\Users\win7\AppData\Local\Temp\is-NOOGQ.tmp\_isetup\_shfoldr.dll

cryptui.dll

C:\Users\win7\AppData\Local\Temp\gtapi.dll

DWMAPI.DLL

C:\t8res.dll

C:\sares.dll

C:\Windows\system32\User.exe

C:\Users\win7\AppData\Local\Temp\is-9EF2J.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-9EF2J.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-HO0LB.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-HO0LB.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-KPCK7.tmp\_isetup\_shfoldr.dll

XmlLite.dll

C:\Users\win7\AppData\Local\Temp\is-BFDFO.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\{e6171278-8759-449d-9e0b-c1825debc2ad}\.ba1\wixstdba.dll

C:\Users\win7\AppData\Local\Temp\{e6171278-8759-449d-9e0b-c1825debc2ad}\.ba1\bafunctions.dll

OLEACC.dll

C:\Users\win7\AppData\Local\Temp\is-DDN2T.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nsmFDE6.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\is-J114P.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-SO3SR.tmp\_isetup\_shfoldr.dll

C:\AICommand.bat

mswsock.dll

C:\msvcr120.dll

C:\msvcp120.dll

iefdmdm.dll

iefdm2.dll

C:\Users\win7\AppData\Local\Temp\E1DA.tmp\hale.cmd

C:\Users\win7\AppData\Local\Temp\nso3DF0.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nso3DF0.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nso3DF0.tmp\StartMenu.dll

shdocvw

riched20

C:\Windows\system32\uxtheme.dll

C:\Windows\system32\wintab32.dll

C:\Windows\system32\user32.dll

C:\Windows\system32\advapi32.dll

C:\Windows\system32\userenv.dll

C:\Windows\system32\gdi32.dll

C:\Users\win7\AppData\Local\Temp\nsy3962.tmp\registry.dll

C:\Users\win7\AppData\Local\Temp\nsy3962.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nsy3962.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nsy3962.tmp\KillProcDLL.dll

C:\Users\win7\AppData\Local\Temp\nsaAA69.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsh3CDB.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsl4625.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\nsl4625.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsl4625.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\Cabinet.dll

C:\Windows\system32\version.dll

C:\Windows\system32\atl.dll

C:\Windows\system32\powrprof.dll

C:\Windows\system32\mscms.dll

C:\Windows\system32\profapi.dll

C:\Windows\system32\ieframe.dll

C:\Windows\system32\oleacc.dll

C:\Windows\system32\oleaccrc.dll

C:\Windows\system32\dbghelp.dll

C:\Windows\system32\Shell32.dll

C:\Users\win7\AppData\Local\Temp\{419280CA-C520-425D-AC0A-E5BC4EFBF810}\fpb.tmp

C:\Users\win7\AppData\Local\Temp\{751F51AF-F47E-49A8-B05E-0D0463F62F92}\fpb.tmp

C:\Windows\system32\Advapi32.dll

C:\Windows\system32\Msimg32.dll

atl.dll

C:\Users\win7\AppData\Local\Temp\is-F1N54.tmp\OCSetupHlp.dll

C:\Users\win7\AppData\Local\Temp\is-F1N54.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\JPEG Agent.x32

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\Mix Services.x32

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\Photoshop 3.0 Import.x32

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\ActiveX.x32

msctf.dll

C:\helper.gui

C:\Users\win7\AppData\Local\Temp\is-FOINK.tmp\_isetup\_shfoldr.dll

shlwapi.dll

C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\uxtheme.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\007fc007edc388d9806dff94ee04f129\System.Configuration.ni.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\d49908aa93a23c84847b1f8b1b667860\System.Xml.ni.dll

C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\ws2_32.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\63e9d5c341d64a753cde97f5a3d65c71\System.Core.ni.dll

C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\bcrypt.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\culture.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\en-US\mscorrc.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\en\mscorrc.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll

C:\Users\win7\AppData\Local\Temp\nsq143A.tmp\NSISdl.dll

api-ms-win-core-string-l1-1-0

api-ms-win-core-datetime-l1-1-1

api-ms-win-core-localization-obsolete-l1-2-0

C:\Users\win7\AppData\Local\Temp\genteert.dll

C:\Users\win7\AppData\Local\Temp\gentee86\guig.dll

C:\Users\win7\AppData\Local\Temp\nsz5F83.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\is-L7PI0.tmp\_isetup\_shfoldr.dll

C:\Windows\system32\zipfldr.dll

GDIPLUS.DLL

install.res.dll

C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18834_none_72d38c5186679d48\GDIPLUS.DLL

C:\Users\win7\AppData\Local\Temp\nsyE67.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsyE67.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nsyE67.tmp\InstallOptions.dll

C:\ProgramData\Soda PDF 8\Installation\Statistics.dll

API-MS-Win-Security-Base-L1-1-0.dll

C:\Users\win7\AppData\Local\Temp\nscB34F.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nscB34F.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nscB34F.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nscB34F.tmp\ServicesHelper.dll

Crypt32.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\Gdiplus.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\12dc10e5c0e8d176cf21a16a6fc5fc3b\Microsoft.VisualBasic.ni.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\0967cf5c31691f38d013263304d2dacb\System.Runtime.Remoting.ni.dll

oleaut32

C:\Windows\Microsoft.NET\Framework\v2.0.50727\OLEAUT32.dll

C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\comctl32.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\2804664decc8bc37bdc172b35a5bdd46\System.Web.Services.ni.dll

C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\ntdll.dll

C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\rasapi32.dll

RASMAN.DLL

rtutils.dll

C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\winhttp.dll

C:\Users\win7\AppData\Local\Google\Update\1.3.29.5\goopdate.dll

C:\Users\win7\AppData\Local\Google\Update\GoogleUpdate.exe

C:\Users\win7\AppData\Local\Google\Update\1.3.29.5\psuser.dll

C:\Users\win7\AppData\Local\Temp\is-UCPO7.tmp\_isetup\_shfoldr.dll

Kernel32.DLL

Shell32.DLL

SHFolder.DLL

WinUsb.DLL

C:\Windows\system32\MSI.dll

C:\b00a44eecea30da754\Setup.exe

SetupUi.dll

C:\b00a44eecea30da754\1033\SetupResources.DLL

C:\Windows\System32\RstrtMgr.dll

C:\Users\win7\AppData\Local\Temp\nse70A5.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nse70A5.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nse70A5.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nse70A5.tmp\ServicesHelper.dll

C:\Users\win7\AppData\Local\Temp\RarSFX0\Stub.exe

C:\Users\win7\AppData\Local\Temp\7zS098D14EB\avgmfarx.dll

C:\Users\win7\AppData\Local\Temp\nsj5CEA.tmp\LangDLL.dll

C:\Users\win7\AppData\Local\Temp\nsj5CEA.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nsj5CEA.tmp\PassDialog.dll

C:\Users\win7\AppData\Local\Temp\gentee9B\guig.dll

Oleaut32.dll

Ole32.dll

winsta

C:\Windows\system32\shfolder.dll

C:\Users\win7\AppData\Local\Temp\is-KNR6K.tmp\_isetup\_isdecmp.dll

C:\Windows\system32\Rstrtmgr.dll

C:\Users\win7\AppData\Local\Temp\nso8A6A.tmp\InstallOptions.dll

wininet

MSACM32.dll

OLEPRO32.DLL

DDRAW.DLL

C:\Windows\System32\DSOUND.dll

D3D8.DLL

dpnhpast.dll

C:\Users\win7\AppData\Local\Temp\GLC7E05.tmp

C:\Windows\twain_32\A8P\Admin.exe

C:\Windows\twain_32\A8P\remove.exe

C:\875a5c9f8218429c1ed3bb3003a0a1a3\microsoft_defaults.exe

C:\sample\..\DirectoryWatcher.dll

C:\Users\win7\AppData\Local\Temp\is-92J6B.tmp\_isetup\_shfoldr.dll

ATL.DLL

C:\Users\win7\AppData\Local\Temp\nse78B8.tmp\UAC.dll

ADVAPI32

ShlWAPI

C:\Users\win7\AppData\Local\Temp\nse78B8.tmp\LangDLL.dll

C:\Users\win7\AppData\Local\Temp\nse78B8.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nse78B8.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nse78B8.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nshA1CF.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nshA1CF.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\GUME42D.tmp\goopdate.dll

C:\Users\win7\AppData\Local\Temp\GUME42D.tmp\goopdateres_en.dll

SetupAPI.dll

lsm.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\drivers\pacer.sys

fwpuclnt.dll

pnrpsvc.dll

C:\Windows\system32\pnrpsvc.dll

AzRoles.dll

fxsresm.dll

cscsvc.dll

C:\Windows\system32\cscsvc.dll

C:\Windows\system32\iphlpsvc.dll

C:\Windows\system32\umpo.dll

HTTPAPI.DLL

NetLogon.dll

drt.dll

C:\Windows\system32\drivers\ndis.sys

PeerDistSvc.dll

C:\Windows\system32\PeerDistSvc.dll

WsmRes.dll

tbssvc.dll

C:\Windows\system32\tbssvc.dll

C:\Windows\system32\symsrv.dll

C:\opera.dll

AVICAP32.dll

avifil32.dll

RASAPI32.DLL

RASDLG.DLL

GSM_codec.dll

msftedit.dll

C:\Users\win7\AppData\Local\Temp\{7C5A5A01-BA31-4712-8E81-703787A937A1}\_Setup.dll

C:\Temp\NVIDIA\3DVision\ISSetup.dll

C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D0-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\ISRT.dll

C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D0-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\_isres.dll

C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D0-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\_isuser.dll

C:\Windows\system32\AppHelp.dll

C:\Temp\NVIDIA\3DVision\data1.hdr

C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D0-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\NVINSTNT.DLL

C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D0-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\_ISRes.dll

msuser.dll

C:\Users\win7\AppData\Local\Temp\OfficeSetup.exe

C:\msvcr71.dll

C:\msvcp71.dll

C:\proj.dll

Ntdll

C:\Users\win7\AppData\Local\Temp\dfs37B9.tmp

sxs.dll

C:\Users\win7\AppData\Local\Temp\shell32.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\99cdfef98595ed91f14936cf52a49c54\System.Management.ni.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\\wminet_utils.dll

C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\shell32.dll

C:\Users\win7\AppData\Local\Temp\nsyF4FA.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nsyF4FA.tmp\StartMenu.dll

C:\Users\win7\AppData\Local\Temp\nswFE9D.tmp\LangDLL.dll

C:\Users\win7\AppData\Local\Temp\nswFE9D.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nswFE9D.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsp6AA7.tmp\System.dll

hhctrl.ocx

C:\Users\win7\AppData\Local\Temp\is-STTCD.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-STTCD.tmp\sample.EN

RichEd20.DLL

C:\Windows\system32\RichEd20.DLL

C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\shell32.dll

C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\psapi.dll

C:\setupapi

setupapi

C:\Windows\system32\APPHELP.dll

C:\Windows\system32\PROPSYS.dll

C:\Windows\system32\DWMAPI.dll

C:\Windows\system32\CRYPTBASE.dll

C:\Windows\system32\OLEACC.dll

C:\Windows\system32\CLBCATQ.dll

C:\Users\win7\AppData\Local\Temp\nseC55E.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nseC55E.tmp\portable.dll

C:\Users\win7\AppData\Local\Temp\nseC55E.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\is-72FFF.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-OGN9O.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-OGN9O.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-HTCEN.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-HTCEN.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\nsrF268.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsrF268.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nsrF268.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nsrF268.tmp\ServicesHelper.dll

C:\CFVS_I~1.EXE

C:\DLL_LO~1.EXE

C:\PROGRA~2\COMMON~1\MICROS~1\ink\mip.exe

C:\PROGRA~2\COMMON~1\MICROS~1\MSInfo\msinfo32.exe

C:\PROGRA~2\INTERN~1\ieinstal.exe

C:\PROGRA~2\INTERN~1\ielowutil.exe

C:\PROGRA~2\INTERN~1\iexplore.exe

C:\PROGRA~2\WINDOW~1\wab.exe

C:\PROGRA~2\WINDOW~1\wabmig.exe

C:\PROGRA~2\WINDOW~1\WinMail.exe

C:\PROGRA~2\WINDOW~2\ACCESS~1\wordpad.exe

C:\PROGRA~2\WINDOW~4\ImagingDevices.exe

C:\PROGRA~2\WI4223~1\sidebar.exe

C:\PROGRA~3\PACKAG~1\{050D4~1\VCREDI~1.EXE

C:\PROGRA~3\PACKAG~1\{F65DB~1\VCREDI~1.EXE

C:\Python27\Lib\DISTUT~1\command\WININS~1.EXE

C:\Python27\Lib\DISTUT~1\command\WININS~2.EXE

C:\Python27\Lib\DISTUT~1\command\WININS~3.EXE

C:\Python27\Lib\DISTUT~1\command\WININS~4.EXE

C:\Python27\Lib\DISTUT~1\command\WI02EA~1.EXE

C:\Python27\Lib\SITE-P~1\pip\_vendor\distlib\t32.exe

C:\Python27\Lib\SITE-P~1\pip\_vendor\distlib\t64.exe

C:\Python27\Lib\SITE-P~1\pip\_vendor\distlib\w32.exe

C:\Python27\Lib\SITE-P~1\pip\_vendor\distlib\w64.exe

C:\Python27\Lib\SITE-P~1\SETUPT~1\cli-32.exe

C:\Python27\Lib\SITE-P~1\SETUPT~1\cli-64.exe

C:\Python27\Lib\SITE-P~1\SETUPT~1\CLI-AR~1.EXE

C:\Python27\Lib\SITE-P~1\SETUPT~1\cli.exe

C:\Python27\Lib\SITE-P~1\SETUPT~1\gui-32.exe

C:\Python27\Lib\SITE-P~1\SETUPT~1\gui-64.exe

C:\Python27\Lib\SITE-P~1\SETUPT~1\GUI-AR~1.EXE

C:\Python27\Lib\SITE-P~1\SETUPT~1\gui.exe

C:\Python27\Scripts\EASY_I~2.EXE

C:\Python27\Scripts\EASY_I~1.EXE

C:\Python27\Scripts\pip.exe

C:\Python27\Scripts\PIP27~1.EXE

C:\Python27\Scripts\pip2.exe

C:\Users\win7\AppData\Local\Temp\is-R7F8Q.tmp\_isetup\_shfoldr.dll

NETMSG

sample

C:\Users\win7\AppData\Local\Temp\is-939C4.tmp\OCSetupHlp.dll

C:\Users\win7\AppData\Local\Temp\is-939C4.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\kvncviewer.exe

C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\iphlpapi.dll

C:\Users\win7\AppData\Local\Temp\nsf85A0.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsf85A0.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nsf85A0.tmp\InstallOptions.dll

advpack.dll

dsetup.dll

C:\Windows\SysWOW64\mshtml.dll

jscript9.dll

C:\Users\win7\AppData\Local\Temp\HYD96EA.tmp.1460138451\HTA\images\main_utorrent.ico

C:\Windows\SysWOW64\DXGIDebug.dll

C:\Windows\SysWOW64\D3D10Warp.dll

MFPlat.DLL

C:\WBDJA44I.DLL

C:\Users\win7\AppData\Local\Temp\is-0CU53.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-0CU53.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-H2L21.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nsu454C.tmp\System.dll

InstallCheck

t "InstallCheck.dll"

InstallCheck.dll

InstallUtility

C:\Users\win7\AppData\Local\Temp\nsu454C.tmp\log.dll

C:\Users\win7\AppData\Local\Temp\nsu454C.tmp\BHips.dll

C:\Users\win7\AppData\Local\Temp\nsz38B8.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\nsz38B8.tmp\System.dll

WLDAP32.dll

C:\Users\win7\AppData\Local\Temp\pJoNehMzo5.tmp\htmlayout.dll

HTMLayout.dll

C:\Users\win7\AppData\Local\Temp\DXGIDebug.dll

C:\Users\win7\AppData\Local\Temp\nsc13F1.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\is-0EM52.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\~vis0000\vise32ex.dll

C:\Windows\system32\user.exe

C:\Users\win7\AppData\Local\Temp\~vis0000\QTExtCode.dll

C:\QuickTime.qts

C:\Windows\system32\QuickTime.qts

C:\sample.dll

V64

MSVBVM60.DLL

C:\Users\win7\AppData\Local\Temp\is-VRB63.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-VRB63.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-D74U0.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nsaEEAF.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\is-48I6D.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-48I6D.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-Q744A.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-Q744A.tmp\VclStylesInno.dll

C:\Users\win7\AppData\Local\Temp\is-Q744A.tmp\ISDone.dll

C:\Users\win7\AppData\Local\Temp\is-Q744A.tmp\BASS.dll

C:\Users\win7\AppData\Local\Temp\is-Q744A.tmp\bp.dll

C:\Users\win7\AppData\Local\Temp\is-Q744A.tmp\bp.ENU

C:\Users\win7\AppData\Local\Temp\is-Q744A.tmp\bp.EN

msvfw32.dll

Gdi32.dll

Avicap32.dll

quartz.dll

Magnification.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\4fddb3cf84aed83214f65fbe791348e5\Microsoft.PowerShell.ConsoleHost.ni.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management.A#\24f3f84b0793777ae7337796ef5551a5\System.Management.Automation.ni.dll

C:\Windows\assembly\GAC_MSIL\System.Management.Automation\1.0.0.0__31bf3856ad364e35\System.Management.Automation.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\1a6d99549254a6a0dbac7b728f3e010b\Microsoft.PowerShell.Commands.Diagnostics.ni.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\30280e5e7d89ffe702df50de4d339fc7\System.Configuration.Install.ni.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Man#\34420c5bbb60572350b8af1a12d94451\Microsoft.WSMan.Management.ni.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\f45bc0251cceb599622f55cc1c7f4aba\System.Transactions.ni.dll

C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\7fcb194ae385dc872688067fb024bd55\Microsoft.PowerShell.Commands.Utility.ni.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\61bdc0f0c598b66a5af21dc10f824141\Microsoft.PowerShell.Commands.Management.ni.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\2b0a3b04b44b8d8e3cd4d489220d8c35\Microsoft.PowerShell.Security.ni.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\cbe531dae622018576dbf7b1fca5ce47\System.DirectoryServices.ni.dll

C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\secur32.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\4b335bfaa07fc54f2d72213d33f53e97\System.Data.ni.dll

C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll

dnsapi.dll

C:\Windows\system32\ExplorerFrame.dll

OLEAUT32

C:\Users\win7\AppData\Local\Temp\{6502eaff-6343-46f3-9c22-6ccca6ee1f86}\.ba1\wixstdba.dll

C:\Windows\system32\Riched20.dll

C:\Users\win7\AppData\Local\Temp\nsrA251.tmp\nsExec.dll

C:\Users\win7\AppData\Local\Temp\nsxBE45.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsxBE45.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsxBE45.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsxBE45.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\{fa356f34-eef9-4655-aa8e-0eea851f3102}\.ba1\wixstdba.dll

jscript.dll

C:\Users\win7\AppData\Local\Temp\PB1BEA.tmp

C:\Users\win7\AppData\Local\Temp\PB1BEA.ENU

C:\Users\win7\AppData\Local\Temp\PB1BEA.EN

C:\Users\win7\AppData\Local\Temp\Citrix\GoToAssist Remote Support Customer\948\g2aA30B.tmp\dbghelp.dll

C:\Windows\system32\comctl32.dll

g2ax_customer_resource_win32_x86_en_US.dll

C:\Windows\system32\wintrust.dll

C:\Users\win7\Documents\DCSCMIN\IMDCSC.ENU

C:\Users\win7\Documents\DCSCMIN\IMDCSC.EN

MSVBVM60.DLL

msftedit

lz32

C:\Users\win7\AppData\Local\Temp\jkiC855.tmp

C:\Users\win7\AppData\Local\Temp\nssCBC2.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nssCBC2.tmp\nsis7z.dll

C:\Users\win7\AppData\Local\Temp\is-215M3.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-215M3.tmp\sample.EN

C:\Windows\system32\CRYPTNET.dll

C:\Users\win7\qEWT\iixRg.exe

C:\Users\win7\AppData\Local\Temp\is-3U04L.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-3U04L.tmp\sample.EN

msdmo.dll

msrle32.dll

msvidc32.dll

msyuv.dll

iyuv_32.dll

tsbyuv.dll

iccvid.dll

msacm32.dll

imaadp32.acm

msg711.acm

msgsm32.acm

msadp32.acm

C:\Users\win7\AppData\Local\Temp\dfs843C.tmp

MSDART.dll

odbc32.dll

WTSAPI32.dll

C:\Users\win7\AppData\Local\Temp\is-HTBJ6.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\tf00294823.dll

IPHLPAPI.dll

URLMON.dll

C:\Users\win7\AppData\Local\Temp\vpa9BD6.tmp

C:\Users\win7\AppData\Local\Temp\vpa9BD6.ENU

C:\Users\win7\AppData\Local\Temp\vpa9BD6.EN

C:\Users\win7\AppData\Local\Temp\Windows\Windows.exe

C:\Users\win7\AppData\Local\Temp\HWSignature.dll

MSVCP60.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\21f876e85bfaa433a999a410eda373bc\System.Web.ni.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\abecd46ce0b212dad31a9e8f9adf073f\System.EnterpriseServices.ni.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\abecd46ce0b212dad31a9e8f9adf073f\System.EnterpriseServices.Wrapper.dll

C:\Windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\19777cd74173fbe2e9931095cc8e057b\Microsoft.Vsa.ni.dll

C:\Users\win7\AppData\Local\Temp\deldll.bat

C:\Windows\System32\esrb.rs

samcli.dll

C:\Users\win7\AppData\Local\Temp\jkiFFC0.tmp

C:\Users\win7\AppData\Local\Temp\nskB924.tmp\System.dll

appwiz.cpl

C:\Users\win7\AppData\Local\Temp\nsj699D.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsj699D.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nsj699D.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\nsj699D.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\TsuD33EACE3.dll

C:\Windows\system32\sxs.dll

C:\Windows\system32\mscoree.dll

rstrtmgr.dll

userenv.dll

C:\Users\win7\AppData\Local\Temp\{B6F8261D-62CA-4E7E-AC95-2AE86D1B04EB}\_Setup.dll

C:\Users\win7\AppData\Local\Temp\{B6F8261D-62CA-4E7E-AC95-2AE86D1B04EB}\Custom.dll

aclui.dll

RASAPI32.dll

networkexplorer.DLL

NlsData000c.DLL

NetProjW.DLL

Ghofr.DLL

C:\Windows\system32\KMSPico 10.0.9.exe

C:\Windows\system32\twext.dll

C:\Windows\system32\acppage.dll

C:\Users\win7\AppData\Local\Temp\is-GCKOB.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-GCKOB.tmp\sample.EN

nvapi.dll

C:\Users\win7\AppData\Local\Temp\nstC3E6.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nstC3E6.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nstC3E6.tmp\xID.dll

C:\Users\win7\AppData\Local\Temp\is-UJCR5.tmp\_isetup\_shfoldr.dll

CommonsDll.dll

opengl32.dll

glu32.dll

Psapi.dll

lua5.1-32.dll

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\\win32\dbghelp.dll

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\win32\symsrv.dll

C:\Users\win7\AppData\Local\Temp\is-OEA34.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-OEA34.tmp\sample.EN

rasdlg.dll

C:\Users\win7\AppData\Local\Temp\RarSFX0\Office2016Trial.exe

C:\Users\win7\AppData\Local\Temp\dfsB714.tmp

C:\Users\win7\AppData\Local\Temp\is-N8BHQ.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nsfEECF.tmp\lxdl.dll

C:\Users\win7\AppData\Local\Temp\nsfEECF.tmp\inetc.dll

C:\Users\win7\AppData\Local\Temp\nsfEECF.tmp\nsJSON.dll

C:\Windows\system32\WININET.dll

C:\VistaLib64.dll

C:\Users\win7\AppData\Local\Temp\RarSFX0\win2016kms__2827_il150568_26.exe

adsldpc.dll

adsldpc

C:\Users\win7\AppData\Local\Temp\nso5CBB.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nso5CBB.tmp\UAC.dll

C:\Windows\system32\VB6DE.DLL

C:\Users\win7\AppData\Local\Temp\nsy80ED.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\.ba1\WixStdBA.dll

Avira.OE.Setup.InstallationCore.dll

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\.ba1\Avira.OE.Setup.InstallationCore.dll

C:\Users\win7\AppData\Local\Temp\is-QJ066.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-OVKH7.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-ER970.tmp\_isetup\_shfoldr.dll

UXTHEME

C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\oleaut32.dll

C:\Users\win7\AppData\Local\Temp\is-AQFQB.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-40J5L.tmp\OCSetupHlp.dll

C:\Users\win7\AppData\Local\Temp\is-40J5L.tmp\GCountry.dll

C:\Users\win7\AppData\Local\Temp\is-UK70N.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nsq143A.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsgA212.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\is-E6ASI.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-E6ASI.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-GLSLC.tmp\_isetup\_shfoldr.dll

C:\Windows\SysWOW64\schtasks.exe

C:\ntdll.dll

C:\Users\win7\AppData\Local\Temp\is-FVER2.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-FVER2.tmp\ISLogo.dll

C:\Users\win7\AppData\Local\Temp\is-FVER2.tmp\isexec.dll

lua5.1.dll

C:\Windows\system32\msvbvm60.dll

UserEnv.dll

C:\ProgramData\Battle.net\Setup\diablo3_enus\Diablo III Setup.exe

WININET.DLL

Riched20

inetcpl.cpl

C:\Users\win7\AppData\Local\Temp\nsw4992.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\stub.exe

Installer.exe

additional.dll

lang\en-US.dll

C:\Users\win7\AppData\Local\Temp\nss7DCC.tmp\System.dll

C:\Windows\system32\ws2_32.dll

C:\Users\win7\AppData\Local\Temp\is-46GEG.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nsb8FF.tmp\LangDLL.dll

C:\Users\win7\AppData\Local\Temp\nsb8FF.tmp\System.dll

netapi32

C:\Users\win7\AppData\Local\Temp\nsb8FF.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nsb8FF.tmp\GraphicalInstaller.dll

C:\Users\win7\AppData\Local\Temp\nsb8FF.tmp\Math.dll

C:\Users\win7\AppData\Local\Temp\nsb8FF.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\is-KOL0K.tmp\_isetup\_shfoldr.dll

QUSEREX.DLL

C:\Users\win7\AppData\Local\Temp\is-FPLKB.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-FPLKB.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-L0AAM.tmp\_isetup\_shfoldr.dll

http

.exe

program

file

ample

res

.library-ms

44

69

55

70

50

72

4f

75

53

6f

43

52

54

49

56

45

4e

51

58

41

4c

65

4d

73

61

42

63

79

64

68

6e

47

34

48

5f

59

46

6c

74

57

4b

67

body

p

h1

h2

h3

h4

h5

h6

pre

code

a:link

a:hover

sub

sup

big

small

.cpp-comment

.

.txt

document

#43#

#6F#

#6E#

#74#

#65#

#2D#

#79#

#70#

#52#

#66#

#72#

#41#

#63#

#45#

#64#

#69#

#67#

#61#

#6C#

#75#

#54#

#44#

#53#

#76#

#58#

#50#

#77#

#42#

#4C#

#68#

c:\

C:\Windows\

c:\windows\

_none_

_NONE_

Search result:

search result:

c:

C:\Program Files

c:\program files

C:\Users

c:\users

txt

com

bat

exe

LNK

lnk

pif

C:\Windows\system32\imageres.dll

c:\windows\system32\imageres.dll

dll

imageres.dll

C:\CFVS_Injector.exe

c:\cfvs_injector.exe

py

C:\Python27\DLLs\py.ico

c:\python27\dlls\py.ico

C:\DLL_Loader.exe

c:\dll_loader.exe

C:\Procmon.exe

c:\procmon.exe

uue

xxe

b64

mim

sfv

md5

sha

.bat

.cmd

a

C:\sample

c:\sample

{62F80510-D845-4E48-B1C7-B38883EDB68D}

{62f80510-d845-4e48-b1c7-b38883edb68d}

{CC92D909-705F-4D5C-AE34-8BBB7D8157AF}

{cc92d909-705f-4d5c-ae34-8bbb7d8157af}

{C57D6783-7C07-49D6-A277-C58B3A9B2E80}

{c57d6783-7c07-49d6-a277-c58b3a9b2e80}

{4E49D097-5908-425C-AA17-9CB4DC22ABFF}

{4e49d097-5908-425c-aa17-9cb4dc22abff}

cf

theme

stock

<NULL>

#78#

#2E#

.htm

#3A#

#2F#

#62#

#30#

#34#

#33#

#37#

#35#

#55#

#73#

.pdf

.HTM

{91CDACCD-A399-4924-BCD4-89576EAD42A8}

{91cdaccd-a399-4924-bcd4-89576ead42a8}

{2D113355-CF7D-4398-878D-B7A9676B7353}

{2d113355-cf7d-4398-878d-b7a9676b7353}

{80052348-613D-46B4-80A5-CEEFF9EC7C30}

{80052348-613d-46b4-80a5-ceeff9ec7c30}

.air

.msi

.lnk

link

ProgramFilesDir

CurrentVersion

Disable

DataFilePath

Plane1

Plane2

Plane3

Plane4

Plane5

Plane6

Plane7

Plane8

Plane9

Plane10

Plane11

Plane12

Plane13

Plane14

Plane15

Plane16

Win31FileSystem

Common AppData

SyncMode5

FEATURE_CLIENTAUTHCERTFILTER

FromCacheTimeout

SecureProtocols

DisableKeepAlive

IdnEnabled

PreConnectLimit

PreResolveLimit

SqmHttpStreamRandomUploadPoolSize

CacheMode

EnableHttp1_1

ProxyHttp1.1

EnableNegotiate

DisableBasicOverClearChannel

ClientAuthBuiltInUI

DisableReadRange

SocketSendBufferLength

SocketReceiveBufferLength

KeepAliveTimeout

MaxHttpRedirects

MaxConnectionsPerServer

MaxConnectionsPer1_0Server

MaxConnectionsPerProxy

ServerInfoTimeout

ConnectTimeOut

ConnectRetries

SendTimeOut

ReceiveTimeOut

DisableNTLMPreAuth

ScavengeCacheLowerBound

CertCacheNoValidate

ScavengeCacheFileLifeTime

ScavengeCacheFileLimit

HttpDefaultExpiryTimeSecs

FtpDefaultExpiryTimeSecs

LeashLegacyCookies

SendExtraCRLF

WpadSearchAllDomains

DontUseDNSLoadBalancing

ShareCredsWithWinHttp

DnsCacheEnabled

DnsCacheEntries

DnsCacheTimeout

WarnOnPost

WarnAlwaysOnPost

WarnOnZoneCrossing

WarnOnBadCertRecving

WarnOnPostRedirect

AlwaysDrainOnRedirect

WarnOnHTTPSToHTTPRedirect

TcpAutotuning

BadProxyExpiresTime

FrameTabWindow

FrameMerging

SessionMerging

AdminTabProcs

TabProcGrowth

AutoProxyDetectType

WpadOverride

DisableBranchCache

UseFirstAvailable

CombineFalseStartData

DisableFalseStartBlocklist

EnforceP3PValidity

DuoProtocols

EnableSpdyDebugAsserts

DefaultConnectionSettings

SystemSetupInProgress

ProxyEnable

ProxyServer

ProxyOverride

AutoConfigURL

AutoDetect

SavedLegacySettings

WpadDecision

WpadDecisionTime

WpadExpirationDays

DisableSecuritySettingsCheck

CreateUriCacheSize

EnablePunycode

WpadDecisionReason

WpadDhcp

WpadDns

WpadDetectedUrl

EnableLUA

NavigationDelay

UrlEncoding

No3DBorder

<NULL>

Compatible

Version

Platform

EnableUTF8

sample

TotalLimit

DomainLimit

RootDomainLimit

MaxSubDomains

IsTextPlainHonored

ZoomDisabled

MinimumSystemTimerResolution

RenderingLoopMaxTime

DaysToKeep

RtfConverterFlags

Use_DlgBox_Colors

Anchor Underline

CSS_Compat

Expand Alt Text

Display Inline Images

Display Inline Videos

Play_Background_Sounds

Play_Animations

Print_Background

SmoothScroll

XMLHTTP

Show image placeholders

Disable Script Debugger

DisableScriptDebuggerIE

Disable Diagnostics Mode

Move System Caret

Enable AutoImageResize

UseHR

Q300829

Cleanup HTCs

XDomainRequest

DOMStorage

JScriptProfileCacheEventDelay

Default_CodePage

Default_IEFontSizePrivate

Anchor Color

Anchor Color Visited

Anchor Color Hover

Always Use My Colors

Always Use My Font Size

Always Use My Font Face

Disable Visited Hyperlinks

Use Anchor Hover Color

MiscFlags

Allow Programmatic Cut_Copy_Paste

DisableCachingOfSSLPages

950

IEFontSize

IEFontSizePrivate

IEPropFontName

IEFixedFontName

IESerifFontName

IESansSerifFontName

IEUIFontName

VML

IE

WindowsEdition

CLSID

NoProtectedModeBanner

ProtectedModeOffForAllZones

CVListXMLVersionLow

CVListXMLVersionHigh

IECompatVersionLow

IECompatVersionHigh

CoInternetCombineIUriCacheSize

SecurityIdIUriCacheSize

ClientCacheSize

Size

Name

PrivacyAdvanced

Use Web Based FTP

CurrentMajorVersionNumber

pv

opv

cmd

ap

brand

UninstallString

UninstallArguments

usagestats

oeminstall

eulaaccepted

msi

lang

InstallerResult

InstallerError

InstallerResultUIString

UsrColumnSettings

Preferences

Debugger

PackageCode

InstanceType

NoDrives

InstallRoot

CLRLoadLogDir

OnlyUseLatestCLR

PendingFileRenameOperations

CommonFilesDir

RegisteredOwner

RegisteredOrganization

UserContextLockCount

UserContextListCount

StorageLocation

Active

ServerURL

CobwebInterval

RecentlySeen

PartialDownload

ContentCheckDelay

EnableAutodial

MachineGuid

ProcessID

EnablePrivateObjectHeap

ContextLimit

ObjectLimit

IdentifierLimit

NoRun

RestrictRun

NoNetConnectDisconnect

NoRecentDocsHistory

NoClose

MS Shell Dlg 2

Install

ProcessorNameString

UseDoubleClickTimer

Tahoma

MS Shell Dlg

SpecialFoldersCacheSize

Last Stable Install Path

Last install path

ProgId

ShortcutBehavior

WaitToKillServiceTimeout

UserUUID

TrapPollTimeMilliSecs

SystemBiosVersion

SystemBiosDate

{K7C0DB872A3F777C0}

{0A6E38D5E1DD80701}

sjmuplhn

{IA6E38D5E1DD80701}

GCStressStart

GCStressStartAtJit

DisableConfigCache

CacheLocation

DownloadCacheQuotaInKB

EnableLog

LoggingLevel

ForceLog

LogFailures

VersioningLog

LogResourceBinds

UseLegacyIdentityFormat

DisableMSIPeek

NoClientChecks

DevOverrideEnable

LatestIndex

NIUsageMask

ILUsageMask

DisplayName

ConfigMask

ConfigString

MVID

EvalationData

Status

ILDependencies

NIDependencies

MissingDependencies

Modules

SIG

LastModTime

mscorlib

Config.SetISM

Content Type

AutoRecover

LogErrorCount

ForceBFCacheCandidacyPass

DataStreamEnabledState

EnabledScopes

eos_proxy_addr

eos_proxy_port

eos_proxy_username

eos_proxy_enabled

eos_proxy_password_enc

NoGuiFromShim

Logging

Logging Directory

Log File Max Size

UID

MAC

IMEI

Kochen_Test

Latest

index1

LegacyPolicyTimeStamp

System.ServiceProcess

System

System.Xml

System.Configuration

System.Drawing

System.Windows.Forms

System.Configuration.Install

System.Deployment

System.Runtime.Serialization.Formatters.Soap

Accessibility

System.Security

MaxSize

AutoBackupLogFiles

EventMessageFile

AVI_DirectShow_WaveFileFormatPath

AVI_DV_Type

AVI_DV_Samplerate

AVI_DV_Channels

EditOutput_Resize

EditOutput_ChangeFramerate

EditOutput_ForceFixedFramerate

EditOutput_ResizeType

EditOutput_Width

EditOutput_Height

EditOutput_ResizeKeepRatio

EditOutput_Framerate

MP4_PSPMuxer

MP4_iPodMuxer

MP4_VideoCodec

MP4_CustomBitrate

MP4_AverageBitrate

MP4_MaximumBitrate

MP4_AudioBitrate

MP4_CRF

FLV_VideoCodec

FLV_CustomBitrate

FLV_AverageBitrate

FLV_MaximumBitrate

FLV_AudioBitrate

FLV_CRF

SWF_CustomBitrate

SWF_AverageBitrate

SWF_MaximumBitrate

SWF_AudioBitrate

GIF_LoopTimes

AVI_Type

AVI_FFMPEG_Type

AVI_FFMPEG_CustomBitrate

AVI_FFMPEG_AverageBitrate

AVI_FFMPEG_MaximumBitrate

AVI_FFMPEG_AudioBitrate

AVI_FFMPEG_Samplerate

AVI_FFMPEG_Channels

AVI_FFMPEG_CRF

AVI_DirectShow_EncoderMoniker

3GP_VideoCodec

3GP_CustomBitrate

3GP_AverageBitrate

3GP_MaximumBitrate

3GP_Width

3GP_Height

3GP_SoundCodec

3GP_AudioBitrate

RD

UC

Col1

Col2

Col3

Col4

Col5

Col6

Col7

Col8

Col9

ColumnDate

ColumnNotes

MenuHide

Path

StoryboardMode

Maximized

Width

Height

X

Y

LeftMoveBar

RightMoveBar

TopMoveBar

BottomMoveBar

ID

Key

PreventIndexingOfflineFiles

FormatForDisplayHelper

BootDir

AppData

LogLevel

DropLocation

svcVersion

MaxScriptStatements

DXTFilterBehavior

OWNDC

DisableAntiSpyware

DisableAntiVirus

ScheduleDay

DisableRealtimeMonitoring

DisableIOAVProtection

DisableOnAccessProtection

config_ext

exe_path

log_dir

priority

log_append

MainTaskName

Installing

DefaultAP

PlugAndPlay

~MHz

ScreenSaverIsSecure

RegCode

VersionStr

AffiliateWebsite

Affiliate

AffiliateBuy

AffEx

AllScreensSame

StartWindowed

MouseExit

AlwaysOnTop

DisplayTitlebar

ShowCrystal

AutoPan

BubbleSound

Music

RandomMusic

RandomLogo

ShowSecondHand

CycleFishSets

BubbleColumn

Vsync

AutoBackgroundColors

EtchedDigiClock

LimitFrameRate

PanSpeed

ScrollPosition

BackgroundColors

BGColorsets

BGColorDuration

WindowPositionTop

WindowPositionLeft

WindowSizeY

WindowSizeX

NumFishSets

CurrentFishSet

CurrentBackgroundSet

CurrentSong

CurrentLogo

DigiClockColor

DigiClockFont

AnalogFont

MaxFrameRate

EtchedAnalog

Volume

MusicVolume

StarfishPosition

FishSetList

rarkey

Priority

rarreg.key

SMP

OnTop

RestoreFolder

LastFolder

AltColor

AltEncryptionColor

ExportedSettings

DlgHistory

CustomExt

Sound

WizardMode

CacheOk

ins.exe

0

SwapMouseButtons

LocaleName

EditionID

Identifier

Bias

StandardBias

DaylightBias

StandardStart

DaylightStart

ProductId

locale

DontSendAdditionalData

Disabled

DefaultConsent

DefaultOverrideBehavior

APPCRASH

LoggingDisabled

DontShowUI

DisableArchive

ConfigureArchive

DisableQueue

MaxQueueCount

MaxArchiveCount

ForceQueue

QueuePesterInterval

SendEFSFiles

BypassDataThrottling

ForceUserModeCabCollection

CorporateWerServer

CorporateWerUseSSL

CorporateWerPortNumber

CorporateWerUseAuthentication

IDD

Gateway

ProgramW6432Dir

ProductName

2EA8A01938E089E6

Shell

a

MRUList

Domain

InstallSuccess

COM+Enabled

JITDebug

Emulation

GUID

6&E993E07&0&0000

Joystick Id

SystemManufacturer

SystemProductName

Speaker Configuration

Build

Default

ArcName

FileNames

ExclNames

StoreNames

UseRAR

SFXModule

SFX

SFXIcon

SFXLogo

CmtFile

CmtTextData

VolumeSize

VolPause

OldVolNames

RecVolNumber

Update

Fresh

SyncFiles

Move

Solid

AV

Test

Recovery

EraseDest

AddArcOnly

ClearArc

Lock

Method

DictSizeLZ

Password

EncryptHeaders

OpenShared

ProcessOwners

SaveStreams

Background

WaitForOther

Shutdown

GenerateArcName

VersionControl

GenerateMask

FileTimeMode

FileDays

FileHours

FileMinutes

ArcTimeOriginal

ArcTimeLatest

mtime

ctime

atime

PathsAbs

PathsNone

PathsAbsDrive

ImmExec

SeparateArc

EmailArcTo

PackDetails

Persistent

SP

PropertyBag

display

Description

StateFlags

IconPath

AdvancedButtonText

SetupDirectories

SetupPrevInst

ValidIfUpgrade

SRSBasedType

CloseSRS

Local AppData

TRACE_MISC

TRACE_CM

TRACE_TRACE

TRACE_SVC

TRACE_GATEWAY

TRACE_UI

TRACE_CONTACT

TRACE_UTIL

TRACE_CLUSTER

TRACE_RESOURCE

TRACE_TIP

TRACE_XA

TRACE_LOG

TRACE_MTXOCI

TRACE_ETWTRACE

TRACE_PROXY

TRACE_KTMRM

TRACE_VSSBACKUP

TRACE_PERFMON

TRACE_TM

TRACE_LU

TraceFilePath

MemoryBufferSize

DebugOutEnabled

OracleXaLib

OracleSqlLib

OracleOciLib

MTxOciCPTimeout

OracleTraceFilePath

InstallationType

PINF

SFXElevate

Overwrite

ArcRecBin

ArcWipe

DisplayVersion

Publisher

InstallDate

QuietUninstallString

InstallLocation

SystemComponent

.HLP

GlobalFlags

Columns

Level

Flags

LogDir

LogFile

FirstRun

LastIndex

BundleUpgradeCode

BundleAddonCode

BundlePatchCode

BundleDetectCode

IdLocalMachine

IdCurrentUser

Sequence

RegFiles0000

RegSvcs0000

RegProcs0000

JSCount

ESCount

RRCount

CLR20r3

InstallerXmlURL

CodePointToFontMap

metricsid

Security Packages

SecurityProviders

AdvpackLogFile

IDM trial reset

MachineGUID

DigitalProductId

DigitalProductId4

PnpInstanceID

{b0bc68f9-b760-468d-9fa6-de07dffb370b}

Buzzing Dhol

22BEFC8F7E2A1793E9ADB411DEFE1C58

21EE4A31AE32173319EEFE3BD6FDFFE3

ProgID

Application

Arial

InstallerLocation

ComputerName

Seed

GlitchInstrumentation

SkypeSetup

Enable Browser Extensions

test

Skype Technologies S.A.

pl

updatehost

firstRun

haswbe

hasoff

hasogc

hasfte

hassdb

installid

NoSSL

d1

un

freq

n1

evtsum

st1

MID

SusClientId

RulesXmlDir

AllowConsecutiveSlashesInUrlPathComponent

SendCustomerData

AppUserIdleTimerInterval

AppUserIdleResetInterval

VersionToReport

CDNBaseUrl

ClientVersionToReport

ClientFolder

recoverydata

ULSCategoriesSeverities

ULSAllCategories

WindowsInstaller

PendingFileRenameOperations2

CLSM_File

CLFM_File

CustSite

CIEOP

VersionNumber

CSDVersion

googletalk

AppPath

UpdateURL

AvailableURL

AvailableDescription

AvailableAboutURL

LaunchAction

LaunchTarget

LaunchParameter

PackagePath

Signature

WantProductRestart

WantSystemRestart

NextUpdate

InstalledVersion

AvailableVersion

DownloadedVersion

SystemProxyMode

SystemProxy

SystemBypass

ReplaceSystemProxy

DisableSystemProxy

TasksFolder

NotifyOnTaskMiss

ViewHiddenTasks

MS Sans Serif

Programs

Fonts

lfPitchndFamily

lfPitchndFamily3

Smad-Lock

AutoScan

Smad-Turbo

WinPos

WinTop

WinLeft

Language

LanguageSet

sYearMonth

System.Data.SqlXml

Library

IsMultiInstance

First Counter

CategoryOptions

FileMappingSize

Counter Names

My Video

System.Core

TurnOffWiFi

Port

LastError3

LastError4

AmazonPath

PhotoPath

VideoPath

AmazonPlaylist

Toast

LastIP

AutoLaunch

AutoSync

ActiveSettingsPage

LaunchCount

DetectDuplDialog

Common Programs

Desktop

Common Desktop

Startup

Common Startup

Start Menu

Common Start Menu

Common Fonts

SkinFolder

Enable

MaxFileSize

IOAVMaxSize

PRODUCTNAME

AuthVer

CommentName

Menu

Settings

CmtText

f.add

f.add.pos

a.add

a.add.pos

f.exto

f.exto.pos

a.exto

a.exto.pos

f.test

f.test.pos

a.test

a.test.pos

f.view

f.view.pos

a.view

a.view.pos

f.del

f.del.pos

a.del

a.del.pos

f.find

f.find.pos

a.find

a.find.pos

f.wiz

f.wiz.pos

a.wiz

a.wiz.pos

f.cvt

f.cvt.pos

a.cvt

a.cvt.pos

f.info

f.info.pos

a.info

a.info.pos

f.exit

f.exit.pos

a.exit

a.exit.pos

f.rep

f.rep.pos

a.rep

a.rep.pos

f.extr

f.extr.pos

a.extr

a.extr.pos

f.cmt

f.cmt.pos

a.cmt

a.cmt.pos

f.prot

f.prot.pos

a.prot

a.prot.pos

f.lock

f.lock.pos

a.lock

a.lock.pos

f.sfx

f.sfx.pos

a.sfx

a.sfx.pos

Band0

ViewMain

LargeButtons

ButtonsText

ViewSmall

ViewAddress

Detailed

FullRow

ShowGrid

SingleClick

Frame7

Font

FlatView

name

size

type

AllowUppercase

FileSort

ArchivesFirst

Placement

TempFolder

History

Log

LimitLog

LogSize

ReuseWindow

ShowComment

Band1

Band2

ClientID

DbgJITDebugLaunchSetting

DbgManagedDebugger

Microsoft.VisualBasic

System.Web

System.Management

System.Runtime.Remoting

System.DirectoryServices

System.Web.Services

System.Data

System.Design

System.EnterpriseServices

LegacyWPADSupport

CEIPEnable

MachineId

CSDReleaseType

PerfLab

Common Documents

VideoBoothunstall

DefaultToMsKernelSynth

DisableHWAcceleration

DisableMMX

SharedDir

CurrentBuildNumber

C:\Windows\twain_32\A8P\Admin.exe

C:\Windows\twain_32\A8P\Message.ini

C:\Windows\twain_32\A8P\Msg.ini

C:\Windows\twain_32\A8P\remove.exe

1

2

3

4

lastupdate

bannerShowInterval

serverRefreshInterval

maxDailyBanner

timesync

lastshow

applastactive

Today

UID3

RandKey

UID3UPDATETIME

UID3TIMESTAMP

UID3LOCKTIME

EnableSwingBoxNotify

showcount

InstallLanguage

Counter 009

baseurl

version

platform

disabled

tx

reinstallversion

culture

Class

Microsoft.JScript

NetworkDeviceCount

C:\Windows\system32\msvcr71.dll

1001

1002

1004

2001

2002

2003

2004

2005

2010

1007

1008

8001

7003

7013

1019

2108

2120

2107

2106

2114

2008

2007

2009

2015

2130

2016

4019

2024

1018

2109

2110

4001

4002

4012

4003

2112

4008

4023

4028

2111

2113

2115

4020

4021

7007

7012

7001

7005

7006

7004

7011

2122

6001

6012

6013

6002

6003

6004

6005

6016

6011

6006

6007

ShowCommandBar

ShowCommandBarLeft

AutoArrangeWindows

OCDLMgr

AcceptClipboard

FullColor

LowColorLevel

LowColourLevel

ColourLevel

passwd

SendClipboard

AutoSelect

FullColour

FullScreen

SendKeyEvents

SendPointerEvents

Tag

PNP_TDI

DEPOff

mshta.exe

APPLICATION

AutoSearch

Counter

ImageState

Default Impersonation Level

Default Namespace

InstallChannel

befcieifed.exe

KeyCode

WinUninstall

ProductID

DVD_Region

DevicePath

OtherDevicePath

MediaPath

ConfigPath

WallPaperDir

SearchList

QuickTime.qts folder

FolderPath

ShowWarningDialogs

ShowRegistrationDialogs

InstallDir

DoNotLoadFromBuildResults

LoadFromBuildResults

SourcesDrive

BaseBoardProduct

Xml

PowerShellVersion

RuntimeVersion

ConsoleHostAssemblyName

Microsoft.PowerShell.ConsoleHost

System.Management.Automation

System.Transactions

ApplicationBase

Microsoft.PowerShell.Commands.Diagnostics

Microsoft.WSMan.Management

Microsoft.WSMan.Runtime

IJWEntrypointCompatMode

Microsoft.PowerShell.Commands.Utility

Microsoft.PowerShell.Commands.Management

Microsoft.PowerShell.Security

PSMODULEPATH

path

StackVersion

Microsoft.VisualC

PipelineMaxStackSizeMB

befbbjjhdg.exe

EnableVirtualization

EnableInstallerDetection

{3d3783a0-703a-11de-8c7a-806e6f6e6963-3370601488}

befcjhajed.exe

InterfaceLanguage

HideCaptionMenu

HideNavigation

ControlState

DefaultVideoFrame

KeepAspectRatio

CompMonDeskARDiff

Balance

Mute

LoopNum

Loop

Rewind

Zoom

DSVidRen

RMVidRen

QTVidRen

APSurfaceUsage

DX9Resizer

VMR9MixerMode

VMRMixerYUV

VMRAlternateVSync

VMRVSyncOffset

VMRVSyncAccurate2

VMRFullscreenGUISupport

EVRHighColorRes

EVRForceInputHighColorRes

EVREnableFrameTimeCorrection

VMRVSync

VMRDisableDesktopComposition

VMRFullFloatingPointProcessing

VMRColorManagementEnable

VMRColorManagementInput

VMRColorManagementAmbientLight

VMRColorManagementIntent

EVROutputRange

VMRFlushGPUBeforeVSync

VMRFlushGPUAfterPresent

VMRFlushGPUWait

SynchronizeClock

SynchronizeDisplay

SynchronizeNearest

LineDelta

ColumnDelta

CycleDelta

TargetSyncOffset

ControlLimit

ResetDevice

SPCSize

SPCMaxRes

SPCPow2Tex

SPCAllowAnimationWhenBuffering

EVRBuffers

D3D9RenderDevice

AudioRendererType

AutoloadAudio

AutoloadSubtitles

SubtitlesLanguageOrder

AudiosLanguageOrder

BlockVSFilter

EnableWorkerThreadForOpening

ReportFailedPins

AllowMultipleInstances

TitleBarTextStyle

TitleBarTextTitle

TrayIcon

AutoZoom

FullScreenCtrls

FullScreenCtrlsTimeOut

FullScreenMonitor

PreventMinimize

UseWin7TaskBar

ExitAfterPlayBack

SearchInDirAfterPlayBack

DontUseSearchInFolder

OSD_Size

OSD_Font

AssociatedWithIcon

LastOpenDir

FullscreenRes

ExitFullscreenAtTheEnd

RestoreResAfterExit

RememberWindowPos

RememberWindowSize

SnapToDesktopEdges

AspectRatioX

AspectRatioY

KeepHistory

LastWindowRect

LastWindowType

DVDPath

UseDVDPath

MenuLang

AudioLang

SubtitlesLang

AutoSpeakerConf

SPDefaultStyle

SPOverridePlacement

SPHorPos

SPVerPos

SubDelayInterval

EnableSubtitles

PrioritizeExternalSubtitles

DisableInternalSubtitles

SubtitlePaths

UseDefaultsubtitlesStyle

EnableAudioSwitcher

EnableAudioTimeShift

AudioTimeShift

DownSampleTo441

CustomChannelMapping

SpeakerToChannelMapping

AudioNormalize

AudioNormalizeRecover

AudioBoost

SpeakerChannels

Enabled

SourceType

IntRealMedia

Preset0

CommandMod0

WinLircAddr

UseWinLirc

UICEAddr

UseUICE

UseGlobalMedia

DisableXPToolbars

UseWMASFReader

JumpDistS

JumpDistM

JumpDistL

LimitWindowProportions

NotifyMSN2

NotifyGTSdll

RtspHandler

RtspFileExtFirst

Video file

Matroska Media file

WebM video file

Windows Media file

MPEG Media file

VCD file

DVD file

Ogg Media file

DVD2AVI Project file

MPEG4 file

Flash Video file

FLIC file

Indeo Video file

Smacker/Bink Media file

RatDVD file

RoQ Media file

Dirac Video file

DirectShow Media file

MP3 audio file

Windows Media Audio file

Audio file

MPEG Audio file

DVD Audio file

Ogg Vorbis Audio file

Matroska Audio file

CD audio track

MPEG4 Audio file

Musepack file

FLAC audio file

WavPack audio file

ALAC audio file

OptimFrog audio file

Monkey's Audio file

True audio file

AMR audio file

AIFF audio file

AU audio file

MIDI file

Shockwave Flash file

Real Media file

Real Audio file

Real Script file

QuickTime file

Playlist file

Blu-ray playlist file

Other

SRC_CDDA

SRC_CDXA

SRC_VTS

SRC_D2V

SRC_DTSAC3

SRC_MATROSKA

SRC_SHOUTCAST

SRC_REALMEDIA

SRC_AVI

SRC_ROQ

SRC_OGG

SRC_MPEG

SRC_MPA

SRC_DSM

SRC_SUBS

SRC_MP4

SRC_FLV

TRA_MPEG2

TRA_RV

TRA_RA

TRA_PS2AUD

TRA_PCM

TRA_DXVA_H264

TRA_DXVA_VC1

LogoFile

LogoID2

LogoExt

HideCDROMsSubMenu

LaunchFullScreen

EnableWebServer

WebServerPort

WebServerPrintDebugIfo

WebServerUseCompression

WebServerLocalhostOnly

WebRoot

WebDefIndex

WebServerCGI

My Pictures

SnapShotPath

SnapShotExt

ThumbRows

ThumbCols

ThumbWidth

ISDb

LastUsedPage

D3DFullScreen

MonitorAutoRefreshRate

Color Brightness

Color Contrast

Color Hue

Color Saturation

Shaders List

ShaderListScreenSpace

ToggleShader

ToggleShaderScreenSpace

Show OSD

EnableEDLEditor

DefaultCapture

VidDispName

AudDispName

Country

BDANetworkProvider

BDATuner

BDAReceiver

BDAScanFreqStart

BDAScanFreqEnd

BDABandWidth

BDAUseOffset

BDAOffset

BDAIgnoreEncryptedChannels

LastChannel

Remember DVD Pos

DVD Position 0

DVD Position 1

DVD Position 2

DVD Position 3

DVD Position 4

DVD Position 5

DVD Position 6

DVD Position 7

DVD Position 8

DVD Position 9

DVD Position 10

DVD Position 11

DVD Position 12

DVD Position 13

DVD Position 14

DVD Position 15

DVD Position 16

DVD Position 17

DVD Position 18

DVD Position 19

Remember File Pos

File Name 0

File Position 0

File Name 1

File Position 1

File Name 2

File Position 2

File Name 3

File Position 3

File Name 4

File Position 4

File Name 5

File Position 5

File Name 6

File Position 6

File Name 7

File Position 7

File Name 8

File Position 8

File Name 9

File Position 9

File Name 10

File Position 10

File Name 11

File Position 11

File Name 12

File Position 12

File Name 13

File Position 13

File Name 14

File Position 14

File Name 15

File Position 15

File Name 16

File Position 16

File Name 17

File Position 17

File Name 18

File Position 18

File Name 19

File Position 19

LastFullScreen

Combine

CombineScreenSpace

DockState

Visible

sizeHorzCX

sizeHorzCY

sizeVertCX

sizeVertCY

sizeFloatCX

sizeFloatCY

File1

File2

File3

File4

File5

File6

File7

File8

File9

File10

File11

File12

File13

File14

File15

File16

File17

File18

File19

File20

vidc.mrle

vidc.msvc

vidc.uyvy

vidc.yuy2

vidc.yvyu

vidc.iyuv

vidc.i420

vidc.yvu9

vidc.cvid

ClassManagerFlags

FriendlyName

NoPCMConverter

Priority1

VidBuffers

AudBuffers

VidOutput

AudOutput

VidPreview

AudPreview

FileFormat

FileName

SepAudio

DockPosX

DockPosY

UseMPHeap

DepOfLookAsideBuf

NumberOfCsPools

FXMemEnabled

Queue Size

Holders

MaxResLifeTime

Always Test Connection

OLEDB_SERVICES

SPTimeOut

AppInit_DLLs

befbbbdddg.exe

System.Web.RegularExpressions

System.DirectoryServices.Protocols

Microsoft.Vsa

Microsoft Toolkit 2.5.4__9465_il552969.exe

TestVerifyAccess

0409

{768BD93D-63BE-46A9-8994-0B53C4B5248F}

1806

TSAppCompat

ailiao.exe

UpdateVer

sptime

SetupID

Interval

ToolTips

MeterMode

BaseMode

di

befchjibed.exe

Save window positions

360sd

360Safetray

InstallICC

USERNAME

sett_autoRun

F

DefaultScope

Personal

My Music

GPEditDebugLevel

SOFTWARE\FTPWare\Server

SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings

Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections

Software\Microsoft\Windows\CurrentVersion\Internet Settings

Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad

{69DC4768-446B-4F82-A6B0-63966A243064}

52-54-00-12-35-02

Software\Microsoft\Internet Explorer\Main

SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\P3P\History

Software\Yandex\YandexBrowser

Software

Software\Yandex

System\CurrentControlSet\Control\SecurityProviders\Schannel

SYSTEM\CurrentControlSet\Services\hapiTemp

Software\Opera Software

Software\Microsoft\RestartManager\Session0000

Software\Blizzard Entertainment\Blizzard Error

Software\Microsoft\RFC1156Agent\CurrentVersion\Parameters

Software\Licenses

CLSID\{17E26FBC-9526-0F6D-85C8-CF2CE2E12581}

InprocServer32

Software\Microsoft\Fusion\GACChangeNotification\Default

SOFTWARE\Carbonite\CarboniteSetup

Software\ESET\OnlineScanner

Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing

Software\Microsoft\SystemCertificates\My

Software\Microsoft\SystemCertificates\CA

Certificates

CRLs

CTLs

Software\Policies\Microsoft\SystemCertificates\CA

Software\Microsoft\EnterpriseCertificates\CA

Software\Microsoft\SystemCertificates\Disallowed

Software\Policies\Microsoft\SystemCertificates\Disallowed

Software\Microsoft\EnterpriseCertificates\Disallowed

Software\Microsoft\SystemCertificates\Root

Software\Microsoft\SystemCertificates\AuthRoot

Software\Policies\Microsoft\SystemCertificates\Root

Software\Microsoft\EnterpriseCertificates\Root

Software\Microsoft\SystemCertificates\SmartCardRoot

Software\Microsoft\SystemCertificates\TrustedPeople

Software\Policies\Microsoft\SystemCertificates\TrustedPeople

Software\Microsoft\EnterpriseCertificates\TrustedPeople

Software\Microsoft\SystemCertificates\trust

Software\Policies\Microsoft\SystemCertificates\trust

Software\Microsoft\EnterpriseCertificates\trust

System\CurrentControlSet\Services\Tcpip\Parameters

Software\Andy

Software\Microsoft\Windows\CurrentVersion\Uninstall\I8kfanGUI

HP DS Service

Software\NCH Software\Components\ffmpeg19

Software\NCH Swift Sound\Components\ffmpeg19

Software\NCH Software\VideoPad\VideoOutput

Software\NCH Software\VideoPad\Registration

Software\NCH Software\VideoPad\UsageStats

Software\NCH Software\VideoPad\UsageStatsChoice

Software\NCH Software\VideoPad\EffectPresets\1\Default Preset

Software\NCH Software\VideoPad\EffectPresets\2\Default Preset

Software\NCH Software\VideoPad\EffectPresets\3\Default Preset

Software\NCH Software\VideoPad\EffectPresets\4\Default Preset

Software\NCH Software\VideoPad\EffectPresets\5\Default Preset

Software\NCH Software\VideoPad\EffectPresets\6\Default Preset

Software\NCH Software\VideoPad\EffectPresets\7\Default Preset

Software\NCH Software\VideoPad\EffectPresets\8\Default Preset

Software\NCH Software\VideoPad\EffectPresets\9\Default Preset

Software\NCH Software\VideoPad\EffectPresets\10\Default Preset

Software\NCH Software\VideoPad\EffectPresets\11\Default Preset

Software\NCH Software\VideoPad\EffectPresets\14\Default Preset

Software\NCH Software\VideoPad\EffectPresets\15\Default Preset

Software\NCH Software\VideoPad\EffectPresets\16\Default Preset

Software\NCH Software\VideoPad\EffectPresets\17\Default Preset

Software\NCH Software\VideoPad\EffectPresets\24\Default Preset

Software\NCH Software\VideoPad\EffectPresets\25\Default Preset

Software\NCH Software\VideoPad\EffectPresets\26\Default Preset

Software\NCH Software\VideoPad\EffectPresets\28\Default Preset

Software\NCH Software\VideoPad\EffectPresets\29\Default Preset

Software\NCH Software\VideoPad\EffectPresets\30\Default Preset

Software\NCH Software\VideoPad\EffectPresets\31\Default Preset

Software\NCH Software\VideoPad\EffectPresets\32\Default Preset

Software\NCH Software\VideoPad\EffectPresets\33\Default Preset

Software\NCH Software\VideoPad\EffectPresets\34\Default Preset

Software\NCH Software\VideoPad\EffectPresets\35\Default Preset

Software\NCH Software\VideoPad\EffectPresets\36\Default Preset

Software\NCH Software\VideoPad\EffectPresets\37\Default Preset

Software\NCH Software\VideoPad\EffectPresets\38\Default Preset

Software\NCH Software\VideoPad\EffectPresets\39\Default Preset

Software\NCH Software\VideoPad\EffectPresets\40\Default Preset

Software\NCH Software\VideoPad\EffectPresets\41\Default Preset

Software\NCH Software\VideoPad\EffectPresets\42\Default Preset

Software\NCH Software\VideoPad\EffectPresets\43\Default Preset

Software\NCH Software\VideoPad\EffectPresets\44\Default Preset

Software\NCH Software\VideoPad\EffectPresets\45\Default Preset

Software\NCH Software\VideoPad\EffectPresets\46\Default Preset

Software\NCH Software\VideoPad\EffectPresets\47\Default Preset

Software\NCH Software\VideoPad\EffectPresets\48\Default Preset

Software\NCH Software\VideoPad\EffectPresets\49\Default Preset

Software\NCH Software\VideoPad\EffectPresets\50\Default Preset

Software\NCH Software\VideoPad\EffectPresets\51\Default Preset

Software\NCH Software\VideoPad\EffectPresets\52\Default Preset

Software\NCH Software\VideoPad\EffectPresets\53\Default Preset

Software\NCH Software\VideoPad\EffectPresets\1000\Default Preset

Software\NCH Software\VideoPad\EffectPresets\1001\Default Preset

Software\NCH Software\VideoPad\EffectPresets\1002\Default Preset

Software\NCH Software\VideoPad\EffectPresets\1003\Default Preset

Software\NCH Software\VideoPad\EffectPresets\1004\Default Preset

Software\NCH Software\VideoPad\EffectPresets\1005\Default Preset

Software\NCH Software\VideoPad\EffectPresets\1006\Default Preset

Software\NCH Software\VideoPad\EffectPresets\1007\Default Preset

Software\NCH Software\VideoPad\EffectPresets\1008\Default Preset

Software\NCH Software\VideoPad\EffectPresets\1009\Default Preset

Software\NCH Software\VideoPad\EffectPresets\6\Dark

Software\NCH Software\VideoPad\EffectPresets\6\Bright

Software\NCH Software\VideoPad\EffectPresets\9\Small Brush

Software\NCH Software\VideoPad\EffectPresets\9\Medium Brush

Software\NCH Software\VideoPad\EffectPresets\9\Large Brush

Software\NCH Software\VideoPad\EffectPresets\15\Minor Pixelation

Software\NCH Software\VideoPad\EffectPresets\15\Moderate Pixelation

Software\NCH Software\VideoPad\EffectPresets\15\Major Pixelation

Software\NCH Software\VideoPad\EffectPresets\16\Smooth

Software\NCH Software\VideoPad\EffectPresets\16\Smoother

Software\NCH Software\VideoPad\EffectPresets\16\Smoothest

Software\NCH Software\VideoPad\EffectPresets\16\Sharp

Software\NCH Software\VideoPad\EffectPresets\16\Sharper

Software\NCH Software\VideoPad\EffectPresets\16\Sharpest

Software\NCH Software\VideoPad\EffectPresets\24\Completely Unsaturated

Software\NCH Software\VideoPad\EffectPresets\24\Less Saturated

Software\NCH Software\VideoPad\EffectPresets\24\Saturated

Software\NCH Software\VideoPad\EffectPresets\24\More Saturated

Software\NCH Software\VideoPad\EffectPresets\24\Completely Saturated

Software\NCH Software\VideoPad\EffectPresets\25\Normal

Software\NCH Software\VideoPad\EffectPresets\25\Half Way

Software\NCH Software\VideoPad\EffectPresets\25\Cycle

Software\NCH Software\VideoPad\EffectPresets\26\Cool

Software\NCH Software\VideoPad\EffectPresets\26\Cooler

Software\NCH Software\VideoPad\EffectPresets\26\Coolest

Software\NCH Software\VideoPad\EffectPresets\26\Normal

Software\NCH Software\VideoPad\EffectPresets\26\Warm

Software\NCH Software\VideoPad\EffectPresets\26\Warmer

Software\NCH Software\VideoPad\EffectPresets\26\Warmest

Software\NCH Software\VideoPad\EffectPresets\28\Fade In

Software\NCH Software\VideoPad\EffectPresets\28\Fade Out

Software\NCH Software\VideoPad\EffectPresets\28\Fade In and Out

Software\NCH Software\VideoPad\EffectPresets\28\Fade Out and In

Software\NCH Software\VideoPad\EffectPresets\30\Spin Clockwise

Software\NCH Software\VideoPad\EffectPresets\30\Spin Counter-clockwise

Software\NCH Software\VideoPad\EffectPresets\33\Spin Left

Software\NCH Software\VideoPad\EffectPresets\33\Spin Right

Software\NCH Software\VideoPad\EffectPresets\33\Spin Up

Software\NCH Software\VideoPad\EffectPresets\33\Spin Down

Software\NCH Software\VideoPad\EffectPresets\33\Spin Clockwise

Software\NCH Software\VideoPad\EffectPresets\33\Spin Counter-clockwise

Software\NCH Software\VideoPad\EffectPresets\33\Rotate 90 Degrees

Software\NCH Software\VideoPad\EffectPresets\33\Rotate 180 Degrees

Software\NCH Software\VideoPad\EffectPresets\33\Rotate 270 Degrees

Software\NCH Software\VideoPad\EffectPresets\34\16:9 to 4:3 Horizontal

Software\NCH Software\VideoPad\EffectPresets\34\4:3 to 16:9 Horizontal

Software\NCH Software\VideoPad\EffectPresets\34\Quarter Screen

Software\NCH Software\VideoPad\EffectPresets\35\Slide Up

Software\NCH Software\VideoPad\EffectPresets\35\Slide Down

Software\NCH Software\VideoPad\EffectPresets\35\Slide Left

Software\NCH Software\VideoPad\EffectPresets\35\Slide Right

Software\NCH Software\VideoPad\EffectPresets\35\Slide Up Left

Software\NCH Software\VideoPad\EffectPresets\35\Slide Up Right

Software\NCH Software\VideoPad\EffectPresets\35\Slide Down Left

Software\NCH Software\VideoPad\EffectPresets\35\Slide Down Right

Software\NCH Software\VideoPad\EffectPresets\1001\Fade In

Software\NCH Software\VideoPad\EffectPresets\1001\Fade In and Out

Software\NCH Software\VideoPad\EffectPresets\1001\Fade Out

Software\NCH Software\VideoPad\EffectPresets\1001\Fade Out and In

Software\NCH Software\VideoPad\EffectPresets\1001\Maximum

Software\NCH Software\VideoPad\EffectPresets\1001\Minimum

Software\NCH Software\VideoPad\EffectPresets\1009\75% Left

Software\NCH Software\VideoPad\EffectPresets\1009\75% Right

Software\NCH Software\VideoPad\EffectPresets\1009\Center

Software\NCH Software\VideoPad\EffectPresets\1009\Center to Left

Software\NCH Software\VideoPad\EffectPresets\1009\Center to Right

Software\NCH Software\VideoPad\EffectPresets\1009\100% Left

Software\NCH Software\VideoPad\EffectPresets\1009\Left to Right

Software\NCH Software\VideoPad\EffectPresets\1009\100% Right

Software\NCH Software\VideoPad\EffectPresets\1009\Right to Left

Software\NCH Software\VideoPad\MainWindow

Software\NCH Software\VideoPad\FootageListCols

Software\NCH Software\VideoPad\Conversions

Software\NCH Software\VideoPad\MainWindow_Tabs

Software\NCH Software\VideoPad\MainWindow_HomeTab

Software\NCH Software\VideoPad\MainWindow_ClipsTab

Software\NCH Software\VideoPad\MainWindow_SequenceTab

Software\NCH Software\VideoPad\MainWindow_AudioTab

Software\NCH Software\VideoPad\MainWindow_CustomTab

SOFTWARE\Canon\PowerShot\PSLL

601

supportSize

Large

Small

thumbFrame

602

401

603

402

Middle

403

604Y

604P

604U

114

404

105

104Y

104P

104U

106

108

SOFTWARE\Canon\PowerShot\PSL2STI

SERIAL

SOFTWARE\Microsoft\MpSigStub

SOFTWARE\HLDS

Software\\Microsoft\\Internet Explorer\\Styles

SOFTWARE\TAP-Windows

Software\Microsoft\Windows\CurrentVersion\Uninstall\TAP-Windows

SOFTWARE\OpenVPN

Software\Microsoft\Office\10.0\Setup\ChainedInstalls

SOFTWARE\AVerMedia TECHNOLOGIES

Software\SereneScreen\MarineAquarium3

SYSTEM\CurrentControlSet\Services\EventLog\Application\nginx

Software\WinRAR\Profiles\0

Software\WinRAR\Profiles\1

Software\WinRAR\Profiles\2

Software\WinRAR\Profiles\3

Software\WinRAR\Profiles\4

Software\WinRAR\General

Software\WinRAR\Interface\Themes

Software\WinRAR\Setup\.rar

Software\WinRAR\Setup\.zip

Software\WinRAR\Setup\.cab

Software\WinRAR\Setup\.arj

Software\WinRAR\Setup\.lzh

Software\WinRAR\Setup\.ace

Software\WinRAR\Setup\.7z

Software\WinRAR\Setup\.tar

Software\WinRAR\Setup\.gz

Software\WinRAR\Setup\.uue

Software\WinRAR\Setup\.bz2

Software\WinRAR\Setup\.jar

Software\WinRAR\Setup\.iso

Software\WinRAR\Setup\.z

Software\WinRAR\Setup\.xz

Software\WinRAR\Setup\Links

Software\WinRAR\Setup

Software\Microsoft\Windows\CurrentVersion\App Paths\WinRAR.exe

Software\WinRAR

WinRAR\shellex\ContextMenuHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}

WinRAR\shellex\PropertySheetHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}

WinRAR.ZIP\shellex\ContextMenuHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}

WinRAR.ZIP\shellex\PropertySheetHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}

exefile\shellex\PropertySheetHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}

WinRAR\shellex\DropHandler

WinRAR.ZIP\shellex\DropHandler

*\shellex\ContextMenuHandlers\WinRAR32

Folder\shellex\ContextMenuHandlers\WinRAR32

Folder\shellex\DragDropHandlers\WinRAR32

Drive\shellex\DragDropHandlers\WinRAR32

Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

WinRAR\shellex\ContextMenuHandlers\{B41DB860-64E4-11D2-9906-E49FADC173CA}

WinRAR\shellex\PropertySheetHandlers\{B41DB860-64E4-11D2-9906-E49FADC173CA}

WinRAR.ZIP\shellex\ContextMenuHandlers\{B41DB860-64E4-11D2-9906-E49FADC173CA}

WinRAR.ZIP\shellex\PropertySheetHandlers\{B41DB860-64E4-11D2-9906-E49FADC173CA}

exefile\shellex\PropertySheetHandlers\{B41DB860-64E4-11D2-9906-E49FADC173CA}

*\shellex\ContextMenuHandlers\WinRAR

Folder\shellex\ContextMenuHandlers\WinRAR

Folder\shellex\DragDropHandlers\WinRAR

Drive\shellex\DragDropHandlers\WinRAR

Software\RegisteredApplications

Software\WinRAR\Capabilities

Software\WinRAR\Capabilities\FileAssociations

WinRAR

WinRAR\shell\open\command

WinRAR\DefaultIcon

WinRAR.ZIP

WinRAR.ZIP\shell\open\command

WinRAR.ZIP\DefaultIcon

.rev

WinRAR.REV

WinRAR.REV\shell\open\command

WinRAR.REV\DefaultIcon

{6D4506CE-F855-4657-AA38-DB6B1F733982}

Programmable

LocalServer32

TypeLib

Version

Software\Microsoft\DownloadManager

SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System

Software\Mozilla

SYSTEM\CurrentControlSet\Control\Session Manager\Environment

SOFTWARE\MetaQuotes Software

Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\

Software\Microsoft\Windows Script\Settings

System\CurrentControlSet\Control\MediaProperties\PrivateProperties\DirectInput

VID_80EE&PID_0021

Calibration

0

DeviceInstances

Software\Microsoft\DirectInput\MostRecentApplication\

Software\AppDataLow\Software\Adobe\Shockwave 11

uicontrol

sw3dbaddriverlist1

sw3dbaddriverlist2

Software\IvoSoft\ClassicShell

SOFTWARE\Hewlett-Packard\HP Quick Print\Launcher

Software\Microsoft\Windows\CurrentVersion\Explorer

Software\ImageEd

SOFTWARE\ImageEd\Components

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ImageCropResize

SOFTWARE\Microsoft\DirectX

Software\Microsoft\Windows\CurrentVersion\Uninstall\Usbfix

Software\Microsoft\Windows\CurrentVersion\Uninstall\UsbFix

SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce

Software\Microsoft\Windows Script Host\Settings

Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted

Software\ProcessLasso\Language

Software\Bitsum

SOFTWARE\ProcessLasso

Software\Microsoft\Windows\CurrentVersion\Uninstall\ProcessLasso

Software\Unity\WebPlayer

Software\AppDataLow\Software\Unity\WebPlayer

Software\MozillaPlugins\@unity3d.com/UnityPlayer

Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{444785F1-DE89-4295-863A-D46C3A781394}

Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{444785F1-DE89-4295-863A-D46C3A781394}\iexplore\AllowedDomains\*

Software\Classes

AppID

{F008CD3D-7044-4CD4-BE14-BF3FCCF144F9}

UnityWebPluginAX.ocx

UnityWebPlayer.UnityWebPlayer.1

CLSID

UnityWebPlayer.UnityWebPlayer

CurVer

{444785F1-DE89-4295-863A-D46C3A781394}

ProgID

VersionIndependentProgID

Control

ToolboxBitmap32

MiscStatus

1

Software\Microsoft\Windows\CurrentVersion\Uninstall\UnityWebPlayer

SYSTEM\CurrentControlSet\Services\VSS\Diag

SystemRestore

SOFTWARE\ACCA\ServiziWeb\

Software\Microsoft\Windows\CurrentVersion\Run

Software\Mozilla\Thunderbird\TaskBarIDs

Software\DropboxUpdate\Update\network

secure

Interface\{0000000c-0000-0000-C000-000000000046}

Interface\{0000000c-0000-0000-C000-000000000046}\NumMethods

Interface\{0000000c-0000-0000-C000-000000000046}\ProxyStubClsid32

SOFTWARE\JavaSoft\

Software\Vivaldi

Software\Microsoft\Terminal Server Client

SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services

SYSTEM\CurrentControlSet\Control\Terminal Server

SYSTEM\ControlSet001\Control\Terminal Server

SOFTWARE\NVIDIA Corporation\NvBackend

Software\Cal3DExp

Software\Microsoft\Windows\CurrentVersion\Uninstall\Cal3DExp

replunge.monist.1

replunge.monist

{dbfa7cab-2711-45ce-b7a5-b1643afbba6c}

Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{03bd22a4-b7a6-cc74-a1ba-810f013abdcd}\ShellFolder

SOFTWARE\Google\Google Toolbar

SOFTWARE\Google\No Toolbar Offer Until

Software\Starfield\Online File Folder\Settings

Software\Starfield\com.starfield.install\Settings

Software\Starfield\wben\Settings

Software\Starfield\outsync\Settings

Software\Starfield\com.starfield.desktop\Settings

Software\Microsoft\Office\Common

Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata

SOFTWARE\Microsoft\Office\Common

SOFTWARE\Wow6432Node\Microsoft\Office\Common

Software\Microsoft\Office\16.0\Registration\WIN7-PC

Software\Microsoft\Office\ClickToRun\Configuration

RulesLastModified

RulesMetadata\sample

sample\ULSMonitor

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{e6171278-8759-449d-9e0b-c1825debc2ad}

Software\Classes\Installer\Dependencies\{e6171278-8759-449d-9e0b-c1825debc2ad}

Dependents\{e6171278-8759-449d-9e0b-c1825debc2ad}

FreeDownloadManager.ORG

Free Download Manager

Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform

Software\Google\Google Talk\Autoupdate

Software\Uniken\RelId\Proxy

Software\Microsoft\Windows\CurrentVersion\Uninstall\85b4347d6f12f4e6

Software\Macromedia\Shockwave 10

SOFTWARE\abgx360

Software\Microsoft\Windows\CurrentVersion\Uninstall\abgx360

Software\JRT Studio\iSyncrWiFi

CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}

MSWinsock.Winsock

MSWinsock.Winsock.1

CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\Implemented Categories

CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\Programmable

CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\Implemented Categories\{40FC6ED5-2438-11CF-A3DB-080036F12502}

CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\Control

CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\Implemented Categories\{40FC6ED4-2438-11CF-A3DB-080036F12502}

CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\Implemented Categories\{0DE86A57-2BAA-11CF-A229-00AA003D7352}

CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\Implemented Categories\{0DE86A53-2BAA-11CF-A229-00AA003D7352}

CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\Implemented Categories\{0DE86A52-2BAA-11CF-A229-00AA003D7352}

CLSID\{248DD897-BB45-11CF-9ABC-0080C7E7B78D}

{248DD890-BB45-11CF-9ABC-0080C7E7B78D}

1.0

FLAGS

win32

HELPDIR

{248DD892-BB45-11CF-9ABC-0080C7E7B78D}

ProxyStubClsid32

{248DD893-BB45-11CF-9ABC-0080C7E7B78D}

Software\Google

Software\Google\Update

Software\Google\Update\ClientState

Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}

Software\WinRAR\General\Toolbar

Software\WinRAR\General\Toolbar\Layout

{53A998CB-A5C7-467E-BC47-30BCABB50766}

{AB6D2735-3392-47E1-83D6-6ED93BD71D54}

{AF152690-A6BF-4BAA-8E76-D52954B21275}

SOFTWARE\Classes\AppID\{AAA9A07E-68FF-4215-84F2-96115976F786}

{E72F452B-0034-4DCB-8648-91697629961B}

{A47BD9D5-25E5-46F9-A3C2-120BE6CA31E4}

{A37C2155-D129-4489-BB43-AF7B51CEA603}

{ADFA580A-3B17-4614-876C-8A425AAF60DD}

{75F3F7EC-B2ED-4851-ABF1-9F1F29D1818E}

{AF8259A6-AB6D-46E1-AF8D-9CD2AC821AC4}

{A007937E-38DE-45E3-BF37-D03862DA4CDB}

{A3FC8865-E5C6-492D-8044-CBF135C63F61}

{AB1DBBC8-CAF8-4FEE-BF54-60E249E3395A}

{AD0796F7-CC0A-4353-A385-628CEAB598EB}

{AE9FDA25-5E40-466B-81E2-53D1C1979BBE}

{A0B68DDE-4F2A-4DE3-9A7C-162CD7E487B2}

{AB361CC1-078C-4A1C-924E-DD496D209681}

{A1FCE31A-4DE7-4573-92EF-33AD14E3EECB}

{A42EEE33-7FBE-4BE8-8FC0-CC3F81A5B676}

{A1A543A6-CF28-4749-8714-2095FA6D179F}

{A0DC0864-A07F-4BFB-9FA5-54B76764CB4F}

{AD03845A-7BF4-426B-A04B-0498B94425FF}

{A6535B95-1431-47D2-B13B-3964849AC007}

{A8916339-B029-4718-A51B-A1B37714CA35}

{0662B660-9A85-4399-8D97-06B4748158F9}

{0003DEA4-A4E0-40CB-B0FB-D1492CA1149F}

{AC0BAD05-E77D-4A9C-B8B0-CF57D6B55E07}

{6A655F7B-EBCE-4572-A6AF-F3E8C63C592E}

{151CD23A-3A30-4238-A15C-69CA34E0BE67}

{A6D99FA6-1383-4686-87A5-32DB9FBA1CA0}

{ADF45922-0441-417C-A481-6A67897BB38A}

{ADC2246C-D09B-4F9F-8D09-053946196570}

{F328FDEE-246C-4CCC-AC45-928A8C74A4EB}

{ACDD6F49-B973-40B1-B94E-BAB29DC29AEA}

{A24E4B6F-2708-4DFC-8061-BF051D21A774}

Software\Auslogics\Google Analytics Package\1.x\Settings\

{8F8A6364-843F-4F23-8A53-9A9920A58C21}

InprocHandler32

{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}

Software\Google\Update\

GoogleUpdate.Update3COMClassUser

{022105BD-948A-40C9-AB42-A3300DDF097F}

GoogleUpdate.Update3WebUser.1.0

GoogleUpdate.Update3WebUser

{22181302-A8A6-4F84-A541-E5CBFC70CC43}

GoogleUpdate.OnDemandCOMClassUser.1.0

GoogleUpdate.OnDemandCOMClassUser

{2F0E2680-9FF5-43C0-B76E-114A56E93598}

GoogleUpdate.CredentialDialogUser.1.0

GoogleUpdate.CredentialDialogUser

{E67BE843-BBBE-4484-95FB-05271AE86750}

Google.OneClickProcessLauncherUser.1.0

Google.OneClickProcessLauncherUser

{51F9E8EF-59D7-475B-A106-C7EA6F30C119}

Low Rights

ElevationPolicy

SOFTWARE\Anti-Valve Software\Cracked Steam

System\CurrentControlSet\Services\Eventlog\Application\VSSetup

Software\Microsoft\SQMClient

Software\sample

Software\ASRock\ExePath

SOFTWARE\Mustek Systems\Remove

Software\SwingBrowser\Extends\SwingBox

Software\ESTsoft\ALToolBar

Software\zum

Software\Microsoft\Windows\CurrentVersion\Uninstall\TRWSL

TRWSL

TRWSL\DefaultIcon

TRWSL\shell

TRWSL\shell\open

TRWSL\shell\open\command

SGPPCINFO

SGPPCINFO\DefaultIcon

SGPPCINFO\shell

SGPPCINFO\shell\open

SGPPCINFO\shell\open\command

Software\Lifescape Solutions Inc.\Picasa\Runtime

Software\Microsoft\Office\15.0\ClickToRun

Software\Microsoft\Office\15.0\ClickToRun\scenario

Software\Microsoft\Office\15.0\ClickToRun\propertyBag

SOFTWARE\Policies\Hewlett-Packard\HP Software Framework

{41290DB4-0C21-46ad-9A12-C40FD90E1B0B}

Software\Policies\Hewlett-Packard\hpDrvMntSvc

Software\LUXONIX\LFX-1310

Software\Microsoft\Windows\CurrentVersion\SharedDLLs

Software\Microsoft\Windows\CurrentVersion\Uninstall\LUXONIX_LFX-1310

Software\REAPER

Software\Microsoft\Windows\CurrentVersion\Uninstall\REAPER

.reapeaks

.reapindex

Reaper.Peaks

Reaper.Peaks\DefaultIcon

Software\NCH Software\WavePad\Software

Software\NCH Software\WavePad\Registration

Software\NCH Software\WavePad\CustomCommand

Software\NCH Software\WavePad\Settings

Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached

RealVNC

VNCViewer4

Software\Policies\RealVNC\VNCViewer4

Software\RealVNC\VNCViewer4

SOFTWARE\RealVNC\VNCViewer4

Software\Microsoft\DirectX

Insertable

OCComSDK.ComSDK

{B9D64D3B-BE75-4FA2-B94A-C4AE772A0146}

fumer.repeater.1

fumer.repeater

{d2ff3e0b-6963-4fe0-945d-cf123e55a31b}

Software\WinRAR SFX

SOFTWARE\Baidu Security\PC Faster

Software\Addictive Software\sample

SOFTWARE\Apple Computer

Software\Apple Computer

JScript

OLEScript

LiveScript

JavaScript

JavaScript1.1

JavaScript1.2

JavaScript1.3

ECMAScript

{f414c260-6ac0-11cf-b6d1-00aa00bbbb58}

JScript Author

JScript.Compact Author

LiveScript Author

JavaScript Author

JavaScript1.1 Author

JavaScript1.2 AuthorJavaScript1.3 Author

ECMAScript Author

{f414c261-6ac0-11cf-b6d1-00aa00bbbb58}

JScript.Encode

{f414c262-6ac0-11cf-b6d1-00aa00bbbb58}

JScript.Compact

{cc5bbec3-db4a-4bed-828d-08d78ee3e1ed}

Software\Citrix\GoToAssist Express Customer\948

SYSTEM\CurrentControlSet\Control\Session Manager

DC3_FEXEC

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\TeamSpeak3 3.34.0

coolly.lianas.1

coolly.lianas

{28aad8e7-3a38-4a48-a8b8-a0ee4cdccfbe}

Gabest

Media Player Classic

Settings

Filters\0000

Settings\PnSPresets

Commands2

FileFormats

Internal Filters

Shaders

Capture

DVB configuration

Software\Gabest\Media Player Classic

ToolBars\Subresync

ToolBars\Subresync\State-SCBar-823

ToolBars\Playlist

ToolBars\Playlist\State-SCBar-824

Recent File List

ToolBars\Edit List Editor

ToolBars\Edit List Editor\State-SCBar-846

Software\Microsoft\ActiveMovie\devenum

{33D9A760-90C8-11D0-BD43-00A0C911CE86}

Software\Microsoft\ActiveMovie\devenum\{33D9A760-90C8-11D0-BD43-00A0C911CE86}\mrle

Software\Microsoft\ActiveMovie\devenum\{33D9A760-90C8-11D0-BD43-00A0C911CE86}\msvc

Software\Microsoft\ActiveMovie\devenum\{33D9A760-90C8-11D0-BD43-00A0C911CE86}\uyvy

Software\Microsoft\ActiveMovie\devenum\{33D9A760-90C8-11D0-BD43-00A0C911CE86}\yuy2

Software\Microsoft\ActiveMovie\devenum\{33D9A760-90C8-11D0-BD43-00A0C911CE86}\yvyu

Software\Microsoft\ActiveMovie\devenum\{33D9A760-90C8-11D0-BD43-00A0C911CE86}\iyuv

Software\Microsoft\ActiveMovie\devenum\{33D9A760-90C8-11D0-BD43-00A0C911CE86}\i420

Software\Microsoft\ActiveMovie\devenum\{33D9A760-90C8-11D0-BD43-00A0C911CE86}\yvu9

Software\Microsoft\ActiveMovie\devenum\{33D9A760-90C8-11D0-BD43-00A0C911CE86}\cvid

Capture\{33D9A760-90C8-11D0-BD43-00A0C911CE86}

Software\Microsoft\Multimedia\Audio Compression Manager\

MSACM

Priority v4.00

{33D9A761-90C8-11D0-BD43-00A0C911CE86}

Software\Microsoft\ActiveMovie\devenum\{33D9A761-90C8-11D0-BD43-00A0C911CE86}\1PCM

Software\Microsoft\ActiveMovie\devenum\{33D9A761-90C8-11D0-BD43-00A0C911CE86}\17IMA ADPCM

Software\Microsoft\ActiveMovie\devenum\{33D9A761-90C8-11D0-BD43-00A0C911CE86}\6CCITT A-Law

Software\Microsoft\ActiveMovie\devenum\{33D9A761-90C8-11D0-BD43-00A0C911CE86}\7CCITT u-Law

Software\Microsoft\ActiveMovie\devenum\{33D9A761-90C8-11D0-BD43-00A0C911CE86}\49GSM 6.10

Software\Microsoft\ActiveMovie\devenum\{33D9A761-90C8-11D0-BD43-00A0C911CE86}\2Microsoft ADPCM

Capture\{33D9A761-90C8-11D0-BD43-00A0C911CE86}

ToolBars\Capture Settings

ToolBars\Capture Settings\State-SCBar-825

ToolBars\Navigation bar

ToolBars\Navigation bar\State-SCBar-33415

ToolBars\Shader Editor

ToolBars\Shader Editor\State-SCBar-826

chowchow.bauhinia.1

chowchow.bauhinia

{792e6b4d-94e8-4f66-acff-2840196f9af9}

SOFTWARE\Native Instruments\Molekular

Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\

aldol.regrew.1

aldol.regrew

{fd26a2f3-c5c8-4f33-86c6-faf9fe8dedbc}

Directory\shellex\ContextMenuHandlers\WinRAR

Directory\shellex\DragDropHandlers\WinRAR

SOFTWARE\AiLiao

Software\AiLiao

Software\Microsoft\Windows\CurrentVersion\App Paths\ailiao

Software\Microsoft\Windows\CurrentVersion\Uninstall\

SOFTWARE\ailiao

Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband

Software\Microsoft\Windows\CurrentVersion\App Paths\Y73Server.exe

Software\Microsoft\Windows\CurrentVersion\Uninstall\Y73

Software\AskToolbar\Update

Software\Cheat Engine\Window Positions

Software\Microsoft\MediaPlayer\Services

Software\Microsoft\MediaPlayer\Preferences

Software\Intel\ICCInst

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{315dd168-0794-4cf1-8355-f195cde642fc}

Software\Classes\Installer\Dependencies\{315dd168-0794-4cf1-8355-f195cde642fc}

Dependents\{315dd168-0794-4cf1-8355-f195cde642fc}

Software\InstalledBrowserExtensions\21636

Software\InstalledBrowserExtensions\21636\Status

Software\The First Path Technologies\GameLoaderAndPatcher\games\Vesteris\

Software\Microsoft\Windows\CurrentVersion\Settings\ProphecyMaster

Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{97937BFE-5F33-426A-9C72-F21F4A2A208E}User

Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{97937BFE-5F33-426A-9C72-F21F4A2A208E}Machine

Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Software\DriverRestore

SOFTWARE\DriverRestore

quaggas.pallial.1

quaggas.pallial

{0470fb84-3e8e-43f9-a5dc-150168dae9c8}

C:\

C:\Windows

C:\Users\win7\AppData\Local\Microsoft\Windows\Caches\cversions.1.db

C:\Users\win7\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000008.db

C:\sample

C:\Windows\Fonts\staticcache.dat

C:\Program Files\CoreFTPServer\corecert.dll

C:\Program Files\CoreFTPServer\csrv.exe

C:\Program Files\CoreFTPServer\coredb.dll

C:\Program Files\CoreFTPServer\db.mdb

C:\Program Files\CoreFTPServer\readme.txt

C:\Program Files\CoreFTPServer\moduli.dat

C:\Program Files\CoreFTPServer\uninstall.exe

C:\Program Files\desktop.ini

C:\Program Files

C:\Program Files\CoreFTPServer

C:\Program Files\CoreFTPServer\coresrvr.exe

C:\Users\win7\AppData\Local\Temp\nsw70DF.tmp\System.dll

\\.\PIPE\srvsvc

C:\Users\win7\AppData\Local\Temp\_MSI5166._IS

C:\Setup.INI

C:\0x0000.ini

C:\ProgramData/boost_interprocess/F367B190848ED101/TigerPlayer.MessageQueue.{B7659DE8-F213-414a-909F-AEA23E2E0858}

C:\Windows\system32\rsaenh.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat

\\.\Nsi

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\YXCY2N06.htm

C:\Windows\SysWOW64\ieframe.dll

C:\Windows\SysWOW64\stdole2.tlb

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\usage-stats[1].htm

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\ga[1].js

C:\WINDOWS\FONTS\TIMES.TTF

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\5FXT74E6.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\2BFA0O0F.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\T4RKBB0Q.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\FHM1R6KT.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\DT020FG3.txt

C:\Users\win7\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT

C:\Users\win7\AppData\Local\Temp\yandex_browser_installer.log

C:\Users\desktop.ini

C:\Users

C:\Users\win7

C:\Users\win7\AppData

C:\Users\win7\AppData\Local

C:\Users\win7\AppData\Local\Yandex

C:\Users\win7\AppData\Local\Yandex\YandexBrowser

C:\Users\win7\AppData\Local\Yandex\YandexBrowser\Temp

C:\Users\win7\AppData\Local\Yandex\YandexBrowser\Temp\source2556_18695

\??\C:\Windows\system32\ntshrui.dll

C:\Users\win7\AppData\Local\Temp\nso793.tmp\System.dll

C:\Python27

C:\Windows\Downloaded Installations\{FDC2F6D1-FE32-4AFC-8347-BE3B2D701180}\Network Camera View 4S.msi

C:\Users\win7\AppData\Local\Temp\_isA7F5\1033.MST

\\.\PIPE\wkssvc

C:\Windows\SysWOW64\MSIEXEC.EXE.config

C:\Windows\SysWOW64\MSIEXEC.EXE

C:\Users\win7\AppData\Local\Temp\_isA7F5\Network Camera View 4S.msi

C:\Users\win7\AppData\Local\Temp

C:\Users\win7\Searches\desktop.ini

C:\Users\win7\Videos\desktop.ini

C:\Users\win7\Contacts\desktop.ini

C:\Users\win7\Favorites\desktop.ini

C:\Users\win7\Downloads\desktop.ini

C:\Users\win7\Links\desktop.ini

C:\Users\win7\Saved Games\desktop.ini

C:\Windows\syswow64\kernel32.dll

C:\Windows\syswow64\KERNELBASE.dll

C:\Windows\SysWOW64\ntdll.dll

C:\Users\win7\AppData\Local\Temp\wrapped.sandboxed\cis_temp_98437.exe

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\win7\AppData\Local\Temp\Cab930C.tmp

C:\Users\win7\AppData\Local\Temp\Tar930D.tmp

C:\Users\win7\AppData\Local\Temp\wrapped.sandboxed\D05FA426B8066855DBA5FDB116C58080.dll

C:\Users\win7\AppData\Local\Temp\wrapped.sandboxed\F06FA53C5EE2822C92F22ABA8D8C6867.dll

C:\Users\win7\AppData\LocalLow

C:\Users\win7\AppData\LocalLow\VTRoot

\??\C:\Windows\System32\shdocvw.dll

C:\Users\win7\AppData\Local\GDIPFONTCACHEV1.DAT

C:\WINDOWS\FONTS\TAHOMA.TTF

C:\WINDOWS\FONTS\TAHOMABD.TTF

C:\WINDOWS\FONTS\MICROSS.TTF

C:\WINDOWS\FONTS\MSJH.TTF

C:\WINDOWS\FONTS\MSYH.TTF

C:\WINDOWS\FONTS\MALGUN.TTF

C:\WINDOWS\FONTS\SEGOEUI.TTF

C:\WINDOWS\FONTS\MSGOTHIC.TTC

heading

C:\ProgramData\6cd7b088-ad43-47a9-9f65-96d8797bb92b\temp

C:\Users\win7\AppData\Local\Temp\~nsuA.tmp\Au_.exe

C:\Users\win7\AppData\Local\Temp\nst9EBA.tmp

C:\Users\win7\AppData\Local\Temp\is-Q70NF.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\is-6PKQL.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-6PKQL.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-6PKQL.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Roaming

C:\Users\win7\AppData\Roaming\Microsoft\desktop.ini

C:\Users\win7\AppData\Roaming\Microsoft

C:\Users\win7\AppData\Roaming\Microsoft\Windows

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu

C:\\logs\LSI-Log 04-04-2016 21-40-38-817.txt

C:\\games_new.db

C:\\login_screens.db

C:\Windows\SysWOW64\ntdll.jdbg

C:\Windows\syswow64\kernel32.jdbg

C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18834_none_72d38c5186679d48\gdiplus.jdbg

C:\CFVS_HookDll.jdbg

C:\Windows\syswow64\USER32.jdbg

C:\Windows\syswow64\KERNELBASE.jdbg

C:\Documents and Settings

C:\Users\win7\AppData\Local\Temp\sample.madExcept\bugreport.txt

C:\\settings.ini

\\.\PhysicalDrive0

\\.\Scsi0:

\\.\Scsi1:

\\.\Scsi2:

\\.\Scsi3:

\\.\Scsi4:

\\.\Scsi5:

\\.\Scsi6:

\\.\Scsi7:

\\.\Scsi8:

\\.\Scsi9:

\\.\Scsi10:

\\.\Scsi11:

\\.\Scsi12:

\\.\Scsi13:

\\.\Scsi14:

\\.\Scsi15:

C:\Users\win7\AppData\Local\Temp\setup.exe

\\.\pipe\OperaCrashReporter1724

C:\installer_prefs.json

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160404223549.log

\\.\C:

\\.\D:

C:\Users\win7\AppData\Local\Temp\Opera Installer\installer.lck

\??\C:\Windows\SysWOW64\ieframe.dll

http://www.opera.com/download/get/?partner=www&opsys=Windows

C:\Program Files\Internet Explorer\iexplore.exe

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EDC238BFF48A31D55A97E1E93892934B_A7467B47637944C1E4B4025C763E391F

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\0270780F846F08BEFE0DD8112D932FEF

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E4F76C0C82655FD6506668127FA0ACD1_F6AB1C86FB0C74897AC7F2CB403CFB96

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E4F76C0C82655FD6506668127FA0ACD1_CDD1BCAFC964EE6D17D60D9802FE2583

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D0EAFE99DD0474CD3DF1720DC4B3759

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C911EABD82D65947049C32F9037AA0E0

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E4F76C0C82655FD6506668127FA0ACD1_F6AB1C86FB0C74897AC7F2CB403CFB96

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160404223548.exe

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\Opera_36.0.2130.59_Setup[1].exe

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8890A77645B73478F5B1DED18ACBF795_C090A8C88B266C6FF99A97210E92B44D

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8890A77645B73478F5B1DED18ACBF795_3F584A3392BB586FC541F0F81FC9D443

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2659C1A560AB92C9C29D4B2B25815AE8

C:\Users\win7\AppData\Local\Temp\is-H50UK.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-H50UK.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-H50UK.tmp\idp.dll

C:\Users\win7\AppData\Local\Temp\is-H50UK.tmp\innocallback.dll

C:\Users\win7\AppData\Local\Temp\is-H50UK.tmp\isslideshow.dll

C:\Users\win7\AppData\Local\Temp\is-H50UK.tmp\ISDone.dll

C:\ProgramData\Battle.net\Setup\wow\Logs\battle.net-setup-20160404T200611.272500.log

C:\ProgramData\TEMP\RAIDTest

\\.\PHYSICALDRIVE0

C:\Users\win7\AppData\Local\Temp\7D148547.TMP

C:\Users\win7\AppData\Local\Temp\A6E38D5E1DD80701.TMP

\\.\SIce

\\.\NTICE

\\.\SIWDEBUG

\\.\SIWVID

C:\Users\win7\AppData\Local\Temp\wbxtra_04042016_233145.wbt

C:\setup.ini

0x0000.ini

C:\sample.config

C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\machine.config

C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\security.config

C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\security.config.cch

C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\enterprisesec.config

C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\enterprisesec.config.cch

C:\Users\win7\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config

C:\Users\win7\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch

C:\Windows\assembly\NativeImages_v2.0.50727_32\index1c2.dat

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\696F3DE637E6DE85B458996D49D759AD

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\696F3DE637E6DE85B458996D49D759AD

C:\Users\win7\AppData\Local\Temp\nsd8044.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\is-8QD8J.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-8QD8J.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-8QD8J.tmp\CallbackCtrl.dll

C:\Users\win7\AppData\Local\Temp\is-8QD8J.tmp\isslideshow.dll

C:\Users\win7\AppData\Local\Temp\is-8QD8J.tmp\ISDone.dll

C:\Users\win7\AppData\Local\Temp\is-8QD8J.tmp\isgsg.dll

C:\Users\win7\AppData\Local\Temp\is-NPA5Q.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\is-JI6CP.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-JI6CP.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-JI6CP.tmp\_isetup\_shfoldr.dll

C:\Users\Public\Desktop\CarboniteSetup.log

C:\Users\win7\AppData\Local\Temp\CrbD7ED.tmp

.\

C:\Windows\system32\ieframe.dll

css\kermit\images\ui-bg_flat_0_aaaaaa_40x100.png

css\kermit\images\ui-bg_flat_100_000000_40x100.png

css\kermit\images\ui-bg_flat_75_ffffff_40x100.png

css\kermit\images\ui-bg_flat_95_fef1ec_40x100.png

css\kermit\images\ui-bg_glass_50_708f11_1x400.png

css\kermit\images\ui-bg_glass_50_829a39_1x400.png

css\kermit\images\ui-bg_glass_55_fff9d7_1x400.png

css\kermit\images\ui-bg_highlight-hard_100_b8bea7_1x100.png

css\kermit\images\ui-bg_inset-hard_65_b8bcae_1x100.png

css\kermit\images\ui-icons_222222_256x240.png

css\kermit\images\ui-icons_2e83ff_256x240.png

css\kermit\images\ui-icons_333333_256x240.png

css\kermit\images\ui-icons_cd0a0a_256x240.png

css\kermit\images\ui-icons_ffffff_256x240.png

css\kermit\jquery-ui-1.8.13.custom.css

css\PIE.htc

css\smoothness\images\ui-bg_flat_0_aaaaaa_40x100.png

css\smoothness\images\ui-bg_flat_75_ffffff_40x100.png

css\smoothness\images\ui-bg_glass_55_fbf9ee_1x400.png

css\smoothness\images\ui-bg_glass_65_ffffff_1x400.png

css\smoothness\images\ui-bg_glass_75_dadada_1x400.png

css\smoothness\images\ui-bg_glass_75_e6e6e6_1x400.png

css\smoothness\images\ui-bg_glass_95_fef1ec_1x400.png

css\smoothness\images\ui-bg_highlight-soft_75_cccccc_1x100.png

css\smoothness\images\ui-icons_222222_256x240.png

css\smoothness\images\ui-icons_2e83ff_256x240.png

css\smoothness\images\ui-icons_454545_256x240.png

css\smoothness\images\ui-icons_888888_256x240.png

css\smoothness\images\ui-icons_cd0a0a_256x240.png

css\smoothness\jquery-ui-1.8.12.custom.css

fonts\carbonite-webfont.eot

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\unknownprotocol[1]

fonts\carbonite_bold-webfont.eot

fonts\carbonite_light-webfont.eot

html\dynamic\MarketingPanel.html

html\dynamic\mobileaccess-sm.png

html\dynamic\NoMirrorImage.html

i\access.png

i\arrow-less.png

i\arrow-more.png

i\backup-manual-new-german.png

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\ErrorPageTemplate[1]

i\backup-manual-new.png

i\bullet-green.png

i\button-backs.png

i\buttonFade30.png

i\cancelX.png

i\carboniteTargetDrivePlug.png

i\carb_logo_large.png

i\checkmark.gif

i\clouds.png

i\cross.png

i\deleted-files.png

i\dots-donut-folder-win.png

i\dots-grn.png

i\dots-none-file-win.png

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\errorPageStrings[1]

i\dots-ylw-file.png

i\dots.png

i\download_icon.png

i\ehd_icon.png

i\ethernet.png

i\firewall.png

i\icon-alert.png

i\icon-autobackup.png

i\icon-check-lg.png

i\icon-check-sm.png

i\icon-computer-type.png

i\icon-continuous.png

i\icon-encryption.png

i\icon-NO-ehd.png

i\icon-NO-exe.png

i\icon-NO-largefile.png

i\icon-NO-video.png

i\icon-nobackup.png

i\icon-pushpin.png

i\icon-redx-lg.png

i\icon-redx-sm.png

i\icon-schedule.png

i\icon-YES-documents.png

i\icon-YES-email.png

i\icon-YES-music.png

i\icon-YES-photos.png

i\icon-YES-video.png

i\info16x16.png

i\installerTopGradient.png

i\leftnavBg.png

i\lid.png

i\logo.png

i\mobileaccess-sm-new.png

i\mobileaccess-sm.png

i\online-settings-icons.png

i\pbar-ani-green.gif

i\pbar-ani.gif

i\pbar-full.png

i\pendingfiles.png

i\plug.png

C:\Windows\SysWOW64\mshtml.tlb

i\programs.png

i\question16x16.png

i\red_x.png

i\restore-browse.png

i\restore-cancel.png

i\restore-cancelled.png

i\restore-complete-error.png

i\restore-complete-success.png

i\restore-files-lg.png

i\restore-full-lg.png

i\restore-full.png

i\restore-migrate.png

i\restore-power.png

i\restore-priority-add.png

i\restore-priority-added.png

i\restore-priority.png

i\restore-review-files.png

i\restore-review-time.png

i\restore-review-useraccounts.png

i\restore-search.png

i\restore-severe.png

i\restore-sleep.png

i\restore-step-background.png

i\restore-success.png

i\restore-warning.png

i\right-click-explorer-german.png

i\right-click-explorer.png

i\setup-automatic.png

i\setup-custom.png

i\sleep.png

i\spinner_16.gif

i\sprite-client.png

i\sprite-restore.png

i\ss-icon.png

i\support_getting-started.png

i\support_how-to-guides.png

i\support_troubleshooting.png

i\support_video-tutorials.png

i\type-computer.png

i\type-laptop.png

i\type-server.png

i\users.gif

i\versions.png

i\vRule_ccdc9c.png

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\httpErrorPagesScripts[1]

i\warning24x24.png

i\windows-icon.png

images\addfile.png

images\alert.png

images\alert_titlebar.jpg

images\Backgrounds\background_header.jpg

images\Backgrounds\table_header.png

images\backup-sets.png

images\BackupDrive\BackupPending.ico

images\BackupDrive\BackupRoot.ico

images\BackupDrive\bar_logo.jpg

images\BackupDrive\bar_tile.jpg

images\BackupDrive\context-menu.ico

images\BackupDrive\overlay-green.ico

images\BackupDrive\overlay-partial.ico

images\BackupDrive\overlay-yellow.ico

images\BackupDrive\prop-gray.bmp

images\BackupDrive\prop-green.bmp

images\BackupDrive\prop-multi.bmp

images\BackupDrive\prop-partial.bmp

images\BackupDrive\prop-yellow.bmp

images\BackupDrive\region_backup.jpg

images\BackupDrive\region_help.jpg

images\BackupDrive\region_status.jpg

images\BackupDrive\RestoreComplete.ico

images\BackupDrive\RestoreError.ico

images\BackupDrive\RestorePending.ico

images\BackupDrive\RestoreRoot.ico

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\info_48[1]

images\BackupDrive\Root.ico

images\BackupDrive\watermark.png

images\bg_innercontent_sidepanel.png

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\bullet[1]

images\breadcrumb-selected.gif

images\breadcrumb.gif

images\buttons\gray-button.png

images\buttons\large-gray-button.png

images\buttons\primary-button.png

images\buttons\remove.gif

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\background_gradient[1]

images\buttons\secondary-button.png

images\buttons\upgrade.gif

images\buttons\video.gif

images\checkmark.gif

images\context-menu.png

images\dots.png

images\ehd-sample.jpg

images\FileSelector\basic-hover.png

images\FileSelector\basic-tab.png

images\FileSelector\excluded-hover.png

images\FileSelector\excluded-tab.png

images\FileSelector\folder-hover.png

images\FileSelector\folder-tab.png

images\FileSelector\tab-selected.png

images\FileSelector\tab-unselected.png

images\folder.png

images\forbidden.png

images\green_donut.png

images\gr_arrow_bull.png

images\Headers\carb_logo_large.png

images\Headers\carb_logo_small.png

images\Headers\closebox_default.png

images\Headers\closebox_hover.png

images\Headers\closebox_onclick.png

images\Headers\header_bg_large.png

images\Headers\header_bg_med.png

images\Headers\header_bg_small.png

images\help.png

images\icon_chat.jpg

images\InfoCenter\application.ico

images\InfoCenter\BackingUp.png

images\InfoCenter\Complete.png

images\InfoCenter\Error.png

C:\WINDOWS\FONTS\WINGDING.TTF

images\InfoCenter\PausedOrDisabled.png

images\InfoCenter\Restoring.png

images\InfoCenter\Search.png

images\InfoCenter\spinner_16.gif

images\InfoCenter\ssl_lock.ico

images\InfoCenter\Waiting.png

images\InfoCenter\Warning.png

images\information.png

images\install-video-bg.png

images\Machines\blue-box-b-border.png

images\Machines\blue-box-l-border.png

images\Machines\blue-box-lbcorner.png

images\Machines\blue-box-ltcorner.png

images\Machines\blue-box-r-border.png

images\Machines\blue-box-rbcorner.png

images\Machines\blue-box-rtcorner.png

images\Machines\blue-box-t-border.png

images\Machines\blue-box.png

images\Machines\desktop.jpg

images\Machines\desktop_small.png

images\Machines\green-box-b-border.png

images\Machines\green-box-l-border.png

images\Machines\green-box-lbcorner.png

images\Machines\green-box-ltcorner.png

images\Machines\green-box-r-border.png

images\Machines\green-box-rbcorner.png

images\Machines\green-box-rtcorner.png

images\Machines\green-box-t-border.png

images\Machines\green-box.png

images\Machines\laptop.jpg

images\Machines\laptop_small.png

images\Machines\mac.png

images\Machines\mac_small.png

images\Machines\server.jpg

images\Machines\server_small.png

images\Machines\white-box-b-border.png

images\Machines\white-box-l-border.png

images\Machines\white-box-lbcorner.png

images\Machines\white-box-ltcorner.png

images\Machines\white-box-r-border.png

images\Machines\white-box-rbcorner.png

images\Machines\white-box-rtcorner.png

images\Machines\white-box-t-border.png

images\Machines\white-box.png

images\no_dot.png

images\pb_inner_left.png

images\pb_inner_mid.png

images\pb_inner_right.png

images\pb_outer_left.png

images\pb_outer_mid.png

images\pb_outer_right.png

images\red_x.png

images\Restore\checkmark.png

images\Restore\chunkback.JPG

images\Restore\date.gif

images\Restore\drive.gif

images\Restore\OtherFiles.gif

images\Restore\restore-mgr-4steps-bg.png

images\Restore\restore-mgr-help-bg.png

images\Restore\restore-tabs-body-bg.png

images\Restore\RestoreCompleteSuccess.png

images\Restore\RestoredPriorityFiles.png

images\Restore\RestoreReport.png

images\Restore\step-center.gif

images\Restore\step-mid.gif

images\Restore\triangle_down.gif

images\Restore\triangle_rt.gif

images\Restore\triangle_up.gif

images\Restore\users.gif

images\Restore\users_small.gif

images\Restore\user_large.png

images\Restore\user_medium.png

images\Restore\user_small.png

images\Restore\version.png

images\Restore\wait.gif

images\Restore\wait16.gif

images\Restore\Warning.png

images\right-click-explorer.png

images\Setup\application.ico

images\Sidebar\sidebar_about.jpg

images\Sidebar\sidebar_about_down.jpg

images\Sidebar\sidebar_about_over.jpg

images\Sidebar\sidebar_backup.jpg

images\Sidebar\sidebar_backup_down.jpg

images\Sidebar\sidebar_backup_over.jpg

images\Sidebar\sidebar_buynow.jpg

images\Sidebar\sidebar_options.jpg

images\Sidebar\sidebar_options_down.jpg

images\Sidebar\sidebar_options_over.jpg

images\Sidebar\sidebar_restore.jpg

images\Sidebar\sidebar_restore_down.jpg

images\Sidebar\sidebar_restore_over.jpg

images\Sidebar\sidebar_support.jpg

images\Sidebar\sidebar_support_down.jpg

images\Sidebar\sidebar_support_over.jpg

images\Sidebar\sidebar_tile.png

images\Sidebar\sidebar_tile_top.png

images\solid_gr_dot.png

images\switch\slider_arrow_left.png

images\switch\slider_arrow_right.png

images\switch\slide_base_left.png

images\switch\slide_base_right.png

images\tabs\tab_active.gif

images\tabs\tab_inactive.jpg

images\titlebar_slice.jpg

images\tooltiparrow.gif

images\trashCan.png

images\tray-yellow.gif

images\Tree\cb_checked.jpg

images\Tree\cb_clear.jpg

images\Tree\cb_mixed.jpg

images\Tree\collapsed.jpg

images\Tree\expanded.jpg

images\Tree\fl_collapsed.jpg

images\Tree\fl_expanded.jpg

images\Tree\folder.jpg

images\Tree\MacFolder.png

images\Tree\MacFolderORG.png

images\Tree\selfolder.jpg

images\Tree\sel_collapsed.jpg

images\Tree\sel_expanded.jpg

images\Tree\tris_checked.jpg

images\Tree\tris_checkedmixed.jpg

images\Tree\tris_unchecked.jpg

images\Tree\tris_uncheckedmixed.jpg

images\yellow_dot.png

js\account.js

js\alert.js

js\backup.js

js\badge.js

js\buyFeature.js

js\chatFeature.js

js\config.js

js\displayinfo.js

js\email.js

js\functions.js

js\help.js

js\index.js

js\jquery-1.6.1.min.js

js\jquery-ui-1.8.13.custom.min.js

js\jquery.calendrical.js

js\jquery.json-2.2.min.js

js\jquery.placeholder.min.js

js\jquery.tooltip.min.js

js\jquery.ui.tooltip.js

js\localbackup.js

js\navigation.js

js\OnOffSwitch.Class.js

js\options.js

js\restore.js

js\restorepriority.js

js\restorestatus.js

js\restoreusers.js

js\schedule.js

js\setupmirrorimage.js

js\swfobject.js

js\uitests.js

js\wait.js

scripts\alert-account-disabled.js

scripts\alert-backup-failed.js

scripts\alert-backup-folders-discovered.js

scripts\alert-backup-overdue.js

scripts\alert-backup-overquota.js

scripts\alert-general.js

scripts\alert-mirror-image.js

scripts\alert-missing-files.js

scripts\alert-missing-networkdrive.js

scripts\alert-missing-volumes.js

scripts\alert-no-files-selected.js

scripts\alert-offline.js

scripts\alert-ops-message.js

scripts\alert-paused.js

scripts\alert-recover-mode-reminder.js

scripts\alert-recover-mode.js

scripts\alert-restore-file-deleted.js

scripts\alert-service-disabled.js

scripts\alert-sub-expired.js

scripts\alert-upgrade-available.js

scripts\BackupSearcher.class.js

scripts\BaseSearcher.Class.js

scripts\Box.Class.js

scripts\ButtonFocusColor.js

scripts\Buttons.js

scripts\Calendar.js

scripts\CarboniteDrive.js

scripts\CarboniteSetup.js

scripts\ColumnInfo.Class.js

scripts\CommonFunctions.js

scripts\ComputerDescription.js

scripts\ConfirmEraseVolume.js

scripts\Dictionary.Class.js

scripts\DomHelper.js

scripts\DragAndDrop.js

scripts\DragInfo.Class.js

scripts\DragRow.Class.js

scripts\flash\AC_OETags.js

scripts\flowplayer\flowplayer-3.1.4.min.js

scripts\flowplayer\flowplayer.controls-3.1.5.swf

scripts\flowplayer\flowplayer.unlimited-3.1.5.swf

scripts\Flyout.Class.js

scripts\InfoCenter-Email.js

scripts\InfoCenter-Log.js

scripts\InfoCenter-Shutdown.js

scripts\InfoCenter-tooltips.js

scripts\Installation.js

scripts\LeafCollection.Class.js

scripts\lightbox.js

scripts\LocalBackup.Classes.js

scripts\localbackup.js

scripts\Logging.js

scripts\MachineRecord.Class.js

scripts\MessageBox.js

scripts\MissingFileList.js_

scripts\NotReady.js

scripts\NumberFormat.js

scripts\objectJSON.js

scripts\OnOffSwitch.js

scripts\popup-backup-within-quota.js

scripts\PrivateKey.js

scripts\ProgressMeter.Class.js

scripts\prototype.js

scripts\registration-backedup.js

scripts\Registration-Pages.js

scripts\registration-recovery.js

scripts\Restore.js

scripts\RestoreCore.js

scripts\RestoreFiles.js

scripts\RestoreSearchSupport.js

scripts\RestoreStatus.js

scripts\RestoreWizard-ChooseUsers.js

scripts\RestoreWizard-PriorityFiles.js

scripts\RestoreWizard-PriorityQuestion.js

scripts\RestoreWizard-Review.js

scripts\RestoreWizard-Welcome.js

scripts\RowDataAccess.Class.js

scripts\Schedule.Class.js

scripts\scriptaculous\builder.js

scripts\scriptaculous\controls.js

scripts\scriptaculous\dragdrop.js

scripts\scriptaculous\effects.js

scripts\scriptaculous\prototype.js

scripts\scriptaculous\scriptaculous.js

scripts\scriptaculous\slider.js

scripts\scriptaculous\unittest.js

scripts\SearchOptions.Class.js

scripts\ServiceInterconnect.Class.js

scripts\ServiceInterconnect.js

scripts\Slider.Class.js

scripts\Sorting.js

scripts\String.Class.js

scripts\support-offline.js

scripts\Support.js

scripts\Table.Class.js

scripts\tests\CommonFunctions-Tests.js

scripts\tests\localbackup-Tests.js

scripts\tests\ProgressMeter.Class-Tests.js

scripts\tests\Testing.htm

scripts\tests\Testing.js

scripts\tests\Tests.js

scripts\Tooltips.js

scripts\trapError.js

scripts\TreeControl.js

scripts\TreeNode.Class.js

scripts\TreeNodeStyle.Class.js

scripts\vars.js

scripts\VersionGetter.Class.js_

scripts\__About__.js

scripts\__Accordian.Class__.js

scripts\__CarboniteInfo__.js

scripts\__FileSelector__.js

scripts\__InfoCenter-Alerts__.js

scripts\__InfoCenter-Nav__.js

scripts\__InfoCenter-Options__.js

scripts\__InfoCenter-Status__.js

scripts\__Options__.js

scripts\__Schedule__.js

scripts\__Status__.js

scripts\__Wait__.js

ScriptTests.txt

ShowAll.txt

tray-icons\ellipsis.ico

tray-icons\green-low.ico

tray-icons\green.ico

tray-icons\paused.ico

tray-icons\red.ico

tray-icons\restoring.ico

CarboniteNSE.strings

CarboniteService.strings

CarboniteSetup.strings

CarboniteUI.strings

css\adtile.css

css\backup.css

css\buttons.css

css\calendrical.css

css\eula.css

css\fileselector.css

css\help.css

css\IE10lteSpecified.css

css\InfoCenter.css

css\install.css

css\Installation.css

css\lightbox.css

css\OnOffSwitch.css

css\restore.css

css\restoreManager.css

css\RoundedBox.css

css\Setup.css

css\style.css

css\TreeStyles.css

html\account.html

html\add-remove-files-popup.htmi

html\alert-account-disabled-by-plan-change.htm

html\alert-account-disabled.htm

html\alert-backup-failed.htm

html\alert-backup-folders-discovered.htm

html\alert-backup-overdue.htm

html\alert-backup-overquota.htm

html\alert-mirror-image-db-repair-failed.htm

html\alert-missing-files.htm

html\alert-missing-networkdrive.htm

html\alert-missing-volumes.htm

html\alert-multiple-rollbacks.htm

html\alert-no-files-selected.htm

html\alert-no-mirror-image-snapshot.htm

html\alert-ops-message.htm

html\alert-paused.htm

html\alert-recover-mode-exit-reminder.htm

html\alert-recover-mode.htm

html\alert-restore-file-deleted.htm

html\alert-restore-resumed.htm

html\alert-rollback-success.htm

html\alert-service-disabled.htm

html\alert-sub-expired.htm

html\alert-unfreeze-popup.htm

html\alert-unfreeze.htm

html\alert-upgrade-available.htm

html\AlertHeader.htmi

html\autobackup.htmi

html\backup-settings-popup.htmi

html\backup.html

html\Carbonite-EULA.htm

html\Carbonite-Setup.htm

html\CarboniteDrive-BackupPending.htm

html\CarboniteDrive-BackupRoot.htm

html\CarboniteDrive-Root.htm

html\CreateMachineDescription.htmi

html\DateFilter.htmi

html\designPatterns.html

html\encryptauto.htmi

html\FileSelector-Exclusions.htmi_

html\frozen-descr-and-tooltip.htmi

html\help.html

html\index.html

html\InfoCenter-CompatibleSW.htm

html\InfoCenter-Log.htm

html\install-phase-25.htmi

html\install-phase-35.htmi

html\install-phase-encryption.htmi

html\install-phase-manualbackup.htmi

html\install-phase-review.htmi

html\install-phase-scanned.htmi

html\install-phase-scanning.htmi

html\install-phase-schedule.htmi

html\install-phase-scope-auto.htmi

html\install-phase-scope-custom.htmi

html\install-phase-scope.htmi

html\install-phase-what.htmi

html\Installation.htm

html\localbackup.html

html\MachineListTemplate.htmi

html\MessageBox.htm

html\MessageBox2.htm

html\mm-no-files-selected.htm

html\mm-sub-expired.htm

html\NameFilter.htmi

html\NotReady.htm

html\OnOffSwitch.htmi

html\PopupHeader.htmi

html\recommendations.htmi

html\registration-backedup.htm

html\restore.html

html\restoreComplete.html

html\RestoreFilesBottom.htmi

html\RestoreFilesTop.htmi

html\RestoreMessages.htmi

html\RestoreReportStatic.htm

html\restoresearch.html

html\RWiz-AllFiles.html

html\Rwiz-Footer.htmi

html\RWiz-PriorityQuestion.html

html\RWiz-PrioritySelect.html

html\RWiz-RestoreStatus.html

html\RWiz-Review.html

html\RWiz-SelectUserAccounts.html

html\RWiz-Welcome.html

html\schedulewidgets.htmi

html\settings.html

html\setUpMirrorImage.html

html\snapshotHistory.html

html\uitests.html

html\unfreeze-and-tooltip.htmi

html\vars.htm

skin.settings

C:\Users\win7\AppData\Local\Temp\CrbD7ED\CarboniteSetup.strings

C:\Users\win7\AppData\Local\Temp\CrbD7ED\skin.settings

C:\Users\Public

C:\Users\Public\Desktop

C:\Users\Public\Desktop\Carbonite Setup.log

C:\Users\win7\AppData\Local\Temp\CrbD7ED

C:\Users\win7\AppData\Local\Temp\CrbD7ED\html

C:\Users\win7\AppData\Local\Temp\CrbD7ED\html\Carbonite-Setup.htm

C:\Users\win7\AppData\Local\Temp\CrbD7ED\css\kermit\jquery-ui-1.8.13.custom.css

C:\Users\win7\AppData\Local\Temp\CrbD7ED\css\style.css

C:\Users\win7\AppData\Local\Temp\CrbD7ED\css\install.css

C:\Users\win7\AppData\Local\Temp\CrbD7ED\js\jquery-1.6.1.min.js

C:\Users\win7\AppData\Local\Temp\CrbD7ED\scripts\ProgressMeter.Class.js

C:\Users\win7\AppData\Local\Temp\CrbD7ED\scripts\CarboniteSetup.js

C:\Users\win7\AppData\Local\Temp\CrbD7ED\scripts\CommonFunctions.js

C:\Users\win7\AppData\Local\Temp\CrbD7ED\scripts\DomHelper.js

C:\Users\win7\AppData\Local\Temp\CrbD7ED\scripts\ServiceInterconnect.Class.js

C:\Users\win7\AppData\Local\Temp\CrbD7ED\js\navigation.js

C:\Users\win7\AppData\Local\Temp\CrbD7ED\js\jquery-ui-1.8.13.custom.min.js

C:\Users\win7\AppData\Local\Temp\CrbD7ED\js\displayinfo.js

C:\Users\win7\AppData\Local\Temp\CrbD7ED\js\chatFeature.js

C:\Users\win7\AppData\Local\Temp\CrbD7ED\i\carb_logo_large.png

C:\Users\win7\AppData\Local\Temp\CrbD7ED\i\clouds.png

C:\Users\win7\AppData\Local\Temp\CrbD7ED\i\access.png

C:\Windows\system32\spool\drivers\color\sRGB Color Space Profile.icm

C:\WINDOWS\FONTS\ARIAL.TTF

C:\Windows\System32\msxml3.dll\1

C:\Windows\System32\msxml3.dll

C:\WINDOWS\FONTS\ARIALBD.TTF

C:\Users\win7\AppData\Local\Microsoft

C:\Users\win7\AppData\Local\Microsoft\Windows

C:\Users\win7\AppData\Local\Microsoft\Windows\History\desktop.ini

C:\Users\win7\AppData\Local\Temp\is-J6RCU.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-J6RCU.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-J6RCU.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-J6RCU.tmp\ISDone.dll

C:\Users\win7\AppData\Local\Temp\is-J6RCU.tmp\b2p.dll

C:\Users\win7\AppData\Local\Temp\is-J6RCU.tmp\botva2.dll

C:\Users\win7\AppData\Local\Temp\apm458A.tmp

C:\Users\win7\AppData\Local\Temp\is-83ER6.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\is-E83SQ.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-E83SQ.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-E83SQ.tmp\_isetup\_shfoldr.dll

C:\ProgramData\78a595fd-df95-40de-93ec-d80a00f25811\temp

C:\Users\win7\AppData\Local\Temp\{751F51AF-F47E-49A8-B05E-0D0463F62F92}\iDisplaySetupX64.msi

C:\Users\win7\AppData\Local\Temp\\~DF1101E0F9975274AF.TMP

\\.\ATKACPI

C:\ProgramData\HPConfiguration.xml

C:\ProgramData\GEN3BrightnessLevel.INI

C:\Windows\inf\oem0.inf

C:\Windows\inf\oem1.inf

C:\Windows\inf\oem2.inf

C:\Windows\inf\oem3.inf

C:\Windows\inf\oem4.inf

C:\Windows\inf\oem5.inf

C:\Users\win7\AppData\Local\Temp\\rap1107234\RapportSetup-Full.msi.cmp

C:\Users\win7\AppData\Local\Temp\\rap1107234\RapportSetup-Full.msi

C:\Windows\system32\wbem\XSL-Mappings.xml

CONIN$

C:\Windows\system32\wbem\\texttable.xsl

C:\Windows\system32\wbem\texttable.xsl

C:\Users\win7\AppData\Local\Temp\wmicosget.andy.txt

C:\Users\win7\AppData\Local\Temp\osbuild.andy.txt

\??\C:\Windows\system32\EhStorShell.dll

C:\Users\win7\Desktop

\\.\PIPE\samr

C:\desktop.ini

\\.\VBoxGuest

\\.\VBoxMiniRdrDN

\\.\PIPE\DAV RPC SERVICE

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Network Shortcuts\desktop.ini

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Network Shortcuts

C:\PerfLogs

C:\Users\win7\AppData\Roaming\Andy\HandyAndy\HandyAndy.ini

C:\ProgramData\c00fd789-4044-4a32-8a4f-7d731dbdc0d1\temp

C:\Users\win7\AppData\Local\Temp\GLCCD9A.tmp

C:\Users\win7\AppData\Local\Temp\nsk49CF.tmp\services.dll

C:\Users\win7\AppData\Local\Temp\nsk49CF.tmp\LangDLL.dll

C:\Users\win7\AppData\Local\Temp\nsk49CF.tmp\ioSpecial.ini

C:\Users\win7\AppData\Local\Temp\nsk49CF.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nsk49CF.tmp\InstallOptions.dll

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\I8kfanGUI\Uninstall.lnk

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\I8kfanGUI\I8kfanGUI.lnk

C:\Users\win7\Desktop\I8kfanGUI.lnk

C:\ProgramData\NortonInstaller\Logs\2016-04-05-06h10m09s\NortonInstall-2016-04-05-06h10m09s.log

C:\Users\win7\AppData\Local\Temp\is-G7HL1.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-G7HL1.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-G7HL1.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-PBGS6.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-PBGS6.tmp\_isetup\_shfoldr.dll

C:\ProgramData\343be488-3453-44cf-82ec-f9b6522a0729\temp

C:\Users\win7\AppData\Local\Temp\nsdB316.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsdB316.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nsdB316.tmp\options.ini

C:\Users\win7\AppData\Local\Temp\nsdB316.tmp\shortcuts.ini

C:\Users\win7\AppData\Local\Temp\nsdB316.tmp\components.ini

C:\Users\win7\AppData\Local\Temp\nsdB316.tmp\summary.ini

C:\Users\win7\AppData\Local\Temp\nsdB316.tmp\ioSpecial.ini

C:\Users\win7\AppData\Local\Temp\nsdB316.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nsdB316.tmp\modern-header.bmp

C:\Users\win7\AppData\Local\Temp\nsdB316.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nsdB316.tmp\ServicesHelper.dll

C:\Users\win7\AppData\Local\Temp\is-KFOOK.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-KFOOK.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-KFOOK.tmp\_isetup\_shfoldr.dll

C:\Windows\system32\l_intl.nls

C:\Windows\assembly\pubpol1.dat

C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp

C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp

C:\Users\win7\AppData\Local\Temp\is-GRLC0.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\is-TIHN7.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-TIHN7.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-TIHN7.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\comodocss_temp_setup\cssstart.exe

C:\WINDOWS\FONTS\SEGOEUIB.TTF

C:\Users\win7\AppData\Local\Temp\comodocss_temp_setup\css_installer.msi

C:\Users\win7\AppData\Local\Temp\comodocss_temp_setup\cmdhtml.dll

C:\Users\win7\AppData\Local\Temp\comodocss_temp_setup

C:\Users\win7\AppData\Local\Temp\C328.tmp

C:\Users\win7\AppData\Local\Temp\C3F4.tmp

C:\Users\win7\AppData\Local\Temp\C404.tmp

C:\Users\win7\AppData\Local\Temp\C425.tmp

C:\Users\win7\AppData\Local\Temp\C435.tmp

C:\Users\win7\AppData\Local\Temp\C436.tmp

C:\Users\win7\AppData\Local\Temp\VideoPadCounts.txt

C:\Users\win7\AppData\Local\Temp\VideoPadCache\b74__wt

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\BlurayDataDiscPresets\YouTube%20480p.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\BlurayDataDiscPresets\YouTube%20720p.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\BlurayDataDiscPresets\YouTube%201080p.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\BlurayDataDiscPresets\YouTube%201440p%20%282K%29.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\BlurayDataDiscPresets\YouTube%202160p%20%284K%29.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\BlurayDataDiscPresets\Internet%20Video.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\BlurayDataDiscPresets\Animated%20GIF.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\BlurayDataDiscPresets\TV%20NTSC.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\BlurayDataDiscPresets\TV%20PAL.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\BlurayDataDiscPresets\Widescreen%20TV.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\BlurayDataDiscPresets\HD%20720p.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\BlurayDataDiscPresets\HD%201080p.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\BlurayDataDiscPresets\HD%201440p%20%282K%29.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\BlurayDataDiscPresets\HD%202160p%20%284K%29.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\BlurayDataDiscPresets\PS3%20HD%20720.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\BlurayDataDiscPresets\PS3%20HD%201080.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DVDDataDiscPresets\YouTube%20480p.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DVDDataDiscPresets\YouTube%20720p.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DVDDataDiscPresets\YouTube%201080p.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DVDDataDiscPresets\YouTube%201440p%20%282K%29.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DVDDataDiscPresets\YouTube%202160p%20%284K%29.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DVDDataDiscPresets\Internet%20Video.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DVDDataDiscPresets\Animated%20GIF.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DVDDataDiscPresets\TV%20NTSC.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DVDDataDiscPresets\TV%20PAL.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DVDDataDiscPresets\Widescreen%20TV.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DVDDataDiscPresets\HD%20720p.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DVDDataDiscPresets\HD%201080p.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DVDDataDiscPresets\HD%201440p%20%282K%29.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DVDDataDiscPresets\HD%202160p%20%284K%29.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DVDDataDiscPresets\PS3%20HD%20720.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DVDDataDiscPresets\PS3%20HD%201080.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\YouTube%20480p.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\YouTube%20720p.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\YouTube%201080p.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\YouTube%201440p%20%282K%29.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\YouTube%202160p%20%284K%29.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\Internet%20Video.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\Animated%20GIF.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\TV%20NTSC.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\TV%20PAL.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\Widescreen%20TV.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\HD%20720p.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\HD%201080p.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\HD%201440p%20%282K%29.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\HD%202160p%20%284K%29.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\PS3%20HD%20720.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\PS3%20HD%201080.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DropboxPresets\YouTube%20480p.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DropboxPresets\YouTube%20720p.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DropboxPresets\YouTube%201080p.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DropboxPresets\YouTube%201440p%20%282K%29.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DropboxPresets\YouTube%202160p%20%284K%29.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DropboxPresets\Internet%20Video.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DropboxPresets\Animated%20GIF.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DropboxPresets\TV%20NTSC.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DropboxPresets\TV%20PAL.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DropboxPresets\Widescreen%20TV.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DropboxPresets\HD%20720p.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DropboxPresets\HD%201080p.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DropboxPresets\HD%201440p%20%282K%29.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DropboxPresets\HD%202160p%20%284K%29.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DropboxPresets\PS3%20HD%20720.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\DropboxPresets\PS3%20HD%201080.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\YouTube%20480p.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\YouTube%20720p.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\YouTube%201080p.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\YouTube%201440p%20%282K%29.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\YouTube%202160p%20%284K%29.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\Internet%20Video.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\Animated%20GIF.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\TV%20NTSC.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\TV%20PAL.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\Widescreen%20TV.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\HD%20720p.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\HD%201080p.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\HD%201440p%20%282K%29.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\HD%202160p%20%284K%29.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\PS3%20HD%20720.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\PS3%20HD%201080.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\StereoscopicPresets\YouTube%20480p.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\StereoscopicPresets\YouTube%20720p.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\StereoscopicPresets\YouTube%201080p.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\StereoscopicPresets\YouTube%201440p%20%282K%29.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\StereoscopicPresets\YouTube%202160p%20%284K%29.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\StereoscopicPresets\Internet%20Video.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\StereoscopicPresets\Animated%20GIF.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\StereoscopicPresets\TV%20NTSC.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\StereoscopicPresets\TV%20PAL.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\StereoscopicPresets\Widescreen%20TV.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\StereoscopicPresets\HD%20720p.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\StereoscopicPresets\HD%201080p.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\StereoscopicPresets\HD%201440p%20%282K%29.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\StereoscopicPresets\HD%202160p%20%284K%29.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\StereoscopicPresets\PS3%20HD%20720.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\StereoscopicPresets\PS3%20HD%201080.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\PortablePresets\iPod%20Classic.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\PortablePresets\iPhone%20%2F%20iPod%20Touch.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\PortablePresets\iPhone%204%20%2F%20iPad.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\PortablePresets\PSP.dat

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\PortablePresets\Mobile%20Phone.dat

C:\Users\win7\AppData\Local\Temp\_videopad_rl_win7

C:\Users\win7\AppData\Roaming\NCH Software\VideoPad\filters.dat

wdmaud.drv

C:\Users\win7\AppData\Local\Temp\VideoPad-2932-1\ffmpeg19.exe

C:\WINDOWS\FONTS\ARIALI.TTF

C:\WINDOWS\FONTS\ARIALBI.TTF

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Libraries

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Libraries\Videos.library-ms

C:\Users\Public\Videos\desktop.ini

\??\C:\Windows\system32\mssvp.dll

C:\Users\Public\Videos

C:\Users\win7\Links

C:\Users\win7\Videos

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Libraries\Music.library-ms

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Libraries\Documents.library-ms

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Libraries\Pictures.library-ms

C:\Users\win7\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db

C:\Users\win7\AppData\Local\Microsoft\Windows\Explorer\thumbcache_96.db

C:\Users\win7\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db

C:\Users\win7\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1024.db

C:\Users\win7\AppData\Local\Microsoft\Windows\Explorer\thumbcache_sr.db

C:\Users\win7\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db

\??\C:\Windows\system32\NetworkExplorer.dll

C:\Users\win7\Links\Desktop.lnk

C:\Users\win7\Links\Downloads.lnk

C:\Users\win7\Links\RecentPlaces.lnk

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Recent\desktop.ini

C:\Setup.ini

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_E9915110418DBDEA47BB3BFCDB24CFF1

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8DFDF057024880D7A081AFBF6D26B92F

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_355DF12EAABE3F04A4C1AF592920E175

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_DA672CDE91C4CF0E03116314F8D92CC8

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\62B5AF9BE9ADC1085C3C56EC07A82BF6

CONOUT$

C:\Users\win7\AppData\Local\Temp\27E45Q0I\License.txt

C:\Users\win7\AppData\Local\Temp\27E45Q0I\Gins.ini

C:\Users\win7\AppData\Local\Temp\27E45Q0I\App.ins

C:\Users\win7\AppData\Local\Temp\27E45Q0I\Readme.txt

C:\Users\win7\AppData\Local\Temp\27E45Q0I\UnGins.exe

C:\Users\win7\AppData\Local\Temp\27E45Q0I\regsvr32.exe

C:\Users\win7\AppData\Local\Temp\27E45Q0I\Gins.bmp

C:\Users\win7\AppData\Local\Temp\27E45Q0I\Enu.lng

C:\USERS\WIN7\APPDATA\LOCAL\TEMP\27E45Q0I\GINS.INI

C:\Users\win7\AppData\Local\Temp\27E45Q0I\

C:\Windows\Fonts\desktop.ini

C:\Users\win7\AppData\Roaming\Microsoft\Windows\SendTo\desktop.ini

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs

C:\ProgramData

C:\ProgramData\Microsoft\desktop.ini

C:\ProgramData\Microsoft

C:\ProgramData\Microsoft\Windows

C:\ProgramData\Microsoft\Windows\Start Menu

C:\ProgramData\Microsoft\Windows\Start Menu\Programs

C:\USERS\WIN7\APPDATA\LOCAL\TEMP\27E45Q0I\ENU.LNG

C:\USERS\WIN7\APPDATA\LOCAL\TEMP\27E45Q0I\APP.INS

1.217.513.0_TO_1.217.613.0_MPASDLTA.VDM._P

1.217.513.0_TO_1.217.613.0_MPAVDLTA.VDM._P

C:\Users\win7\AppData\Local\Temp\is-40VU3.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-40VU3.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\~nsu.tmp\Au_.exe

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\Welcome.zip

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\Spigot29.zip

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Spigot29/index.html

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Spigot29/script.js

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Spigot29/styles.css

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Spigot29/img/bottomleft.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Spigot29/img/bottomright.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Spigot29/img/check-icon.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Spigot29/img/download-logo.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Spigot29/img/green-btn.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Spigot29/img/grey-btn.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Spigot29/img/installer-bg.jpg

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Spigot29/img/topleft.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Spigot29/img/topright.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Spigot29/img/windows-32x32.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Welcome/img/bottomleft.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Welcome/img/bottomright.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Welcome/img/check-icon.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Welcome/img/download-logo.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Welcome/img/green-btn.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Welcome/img/grey-btn.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Welcome/img/installer-bg.jpg

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Welcome/img/topleft.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Welcome/img/topright.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Welcome/img/windows-32x32.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Welcome/index.html

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Welcome/script.js

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Welcome/styles.css

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Common/jquery.min.js

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Common/json3.min.js

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Common/stats.js

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\MalwareProtection.zip

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\Installation.zip

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Installation/index.html

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Installation/script.js

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Installation/styles.css

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Installation/img/bottomleft.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Installation/img/bottomright.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Installation/img/download-logo.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Installation/img/green-btn.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Installation/img/grey-btn.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Installation/img/installer-bg.jpg

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Installation/img/pause-button.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Installation/img/progressbar-left.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Installation/img/progressbar-right.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Installation/img/progressfilled-left.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Installation/img/progressfilled-right.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Installation/img/resume-button.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Installation/img/stop-button.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Installation/img/topleft.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Installation/img/topright.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Installation/img/windows-32x32.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\MalwareProtection/index.html

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\MalwareProtection/script.js

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\MalwareProtection/styles.css

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\MalwareProtection/img/bottomleft.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\MalwareProtection/img/bottomright.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\MalwareProtection/img/check-icon.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\MalwareProtection/img/download-logo.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\MalwareProtection/img/green-btn.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\MalwareProtection/img/grey-btn.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\MalwareProtection/img/installer-bg.jpg

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\MalwareProtection/img/topleft.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\MalwareProtection/img/topright.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\MalwareProtection/img/windows-32x32.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\Finish.zip

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Finish/index.html

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Finish/script.js

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Finish/styles.css

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Finish/img/bottomleft.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Finish/img/bottomright.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Finish/img/download-logo.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Finish/img/green-btn.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Finish/img/grey-btn.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Finish/img/installer-bg.jpg

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Finish/img/topleft.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Finish/img/topright.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\\Finish/img/windows-32x32.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\Welcome

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\Welcome\index.html

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\Welcome\styles.css

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\Common\jquery.min.js

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\Common\json3.min.js

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\Common\stats.js

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\Welcome\script.js

C:\Windows\SysWOW64\Dxtmsft.dll

C:\Windows\SysWOW64\Dxtrans.dll

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\Welcome\img\installer-bg.jpg

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\Welcome\img\green-btn.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\Welcome\img\grey-btn.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\Welcome\img\download-logo.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\Welcome\img\topleft.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\Welcome\img\topright.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\Welcome\img\bottomleft.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\Welcome\img\bottomright.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\Welcome\img\check-icon.png

C:\Users\win7\AppData\Local\Temp\9CC48D36-B2C1-4F53-9C82-B2E88AF889C2\Welcome\img\windows-32x32.png

C:\ProgramData\Battle.net\Setup\battle.net\Logs\battle.net-setup-20160405T120939.159539.log

C:\ProgramData\48ed1695-d484-472b-bd42-582714ef1368\temp

C:\ProgramData\d8986107-dff3-4565-a17b-637d7c3968d3\temp

C:\Users\win7\AppData\Local\Temp\nsj3E28.tmp\System.dll

C:\Program Files\TAP-Windows\bin\tapinstall.exe

C:\Program Files\TAP-Windows\driver\OemVista.inf

C:\Program Files\TAP-Windows\driver\tap0901.cat

C:\Program Files\TAP-Windows\driver\tap0901.sys

C:\Program Files\TAP-Windows\license.txt

C:\Program Files\TAP-Windows\icon.ico

C:\Users\win7\AppData\Local\Temp\nsj3E28.tmp\nsExec.dll

C:\Program Files\TAP-Windows\Uninstall.exe

C:\Users\win7\AppData\Local\Temp\nsr389A.tmp\nsExec.dll

C:\ProgramData\ZenVPN\config\zenvpn.json

C:\ProgramData\ZenVPN\config\list-zones.json

C:\Users\win7\AppData\Local\Temp\Setup Log File.log

C:\Windows\Temp\ljp1100inst.log

C:\properties.ini

C:\Users\win7\AppData\Local\Temp\TeamViewer\TeamViewer_.exe

C:\Users\win7\AppData\Local\Temp\nscBA33.tmp

C:\Users\win7\AppData\Local\Temp\nshBA53.tmp\TvGetVersion.dll

C:\Users\win7\AppData\Local\Temp\nshBA53.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\nshBA53.tmp\ioSpecial.ini

C:\Users\win7\AppData\Local\Temp\nshBA53.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nshBA53.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nshBA53.tmp\Lizenz_TeamViewer_EN_unicode.txt

C:\Users\win7\AppData\Local\Temp\nshBA53.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nshBA53.tmp\start_unicode.ini

C:\Users\win7\AppData\Local\Temp\nshBA53.tmp\advanced_unicode.ini

C:\Users\win7\AppData\Local\Temp\nshBA53.tmp\linker.dll

\\?\C:\Windows\system32\Macromed\Flash\ss.sgn

\\?\C:\Windows\system32\Macromed\Flash\ss.cfg

\\?\C:\Windows\system32\Macromed\Flash\mms.cfg

\\?\C:\Windows\system32\mms.cfg

\\?\C:\Windows\system32\Macromed\Flash\oem.cfg

\\?\C:\Windows\system32\oem.cfg

\\?\C:\Users\win7\AppData\Roaming\Adobe\Flash Player\AssetCache

\\?\C:\Users\win7\AppData\Roaming\Adobe\Flash Player

\\?\C:\Users\win7\AppData\Roaming\Adobe\Flash Player\AssetCache\CW3HZUHH

\\?\C:\Users\win7\.telemetry.cfg

\\?\C:\Users\win7\telemetry.cfg

C:\Users\win7\AppData\Local\Adobe\AIR\logs\Install.log

\\?\c:\users\win7\appdata\local\temp\airde3a.tmp\.airinstall.cfg

\\?\C:\Users\win7\AppData\Local\Temp\AIRDE3A.tmp\setup.swf

\\?\C:\Users\win7\AppData\Roaming\Adobe\AIR\eulaAccepted

\\?\C:\ProgramData\Adobe\AIR\eulaAccepted

\\?\C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\#Security\FlashPlayerTrust\air.1.0.trust.cfg

\\?\C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\#Security\FlashPlayerTrust

\\?\C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\#Security

\\?\C:\Users\win7\AppData\Roaming\Macromedia\Flash Player

\\?\C:\Users\win7\AppData\Roaming\Macromedia

\\?\C:\Users\win7\AppData\Roaming

\\?\C:\Users\win7\AppData\Local\Temp\flaF9B1.tmp

C:\Users\win7\AppData\Roaming\Macromedia

C:\Users\win7\AppData\Roaming\Macromedia\Flash Player

C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\#Security

\\?\C:\Windows\system32\Macromed\Flash\FlashAuthor.cfg

\\?\C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\#Security\FlashAuthor.cfg

\\?\C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\#SharedObjects

\\?\C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\NKW6YNQT

\\?\C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\NKW6YNQT\macromedia.com\support\flashplayer\sys\settings.sol

\\?\C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol

\\?\C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys

\\?\C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer

\\?\C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support

\\?\C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\macromedia.com

\\?\C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx

C:\Users\win7\AppData\Local\Temp\AIRDE3A.tmp\Adobe AIR Installer.exe

C:\Users\win7\AppData\Local\Temp\{391B75D5-6713-4AEF-ABD7-8FA8B896C1E9}\A4tech USB Mouse Quality Testing Program V6.0.msi

C:\Users\win7\AppData\Local\Temp\{391B75D5-6713-4AEF-ABD7-8FA8B896C1E9}\0x0409.ini

C:\Users\win7\AppData\Local\Temp\{391B75D5-6713-4AEF-ABD7-8FA8B896C1E9}\_ISMSIDEL.INI

./logs/error.log

C:\winrar.lng

\\?\C:\winrar.lng

C:\Users\win7\AppData\Roaming\WinRAR\version.dat

C:\Windows\System32

rarext.dll

\\?\C:\Windows\system32\rarext.dll

C:\Users\win7\AppData\Local\Temp\obhhelper.txt

C:\Users\win7\AppData\Local\Temp\ins.exe

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\DynamicOfferScreen[1].htm

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\jquery-ui[1].css

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\jquery.min[1].js

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\jquery-ui-1.8.19.custom[1].css

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\jquery-ui.min[1].js

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\Setup_product_9525[1].exe

C:\Users\win7\AppData\Local\Temp\6_Offer_7.exe

C:\Users\win7\AppData\Local\Temp\aut2F61.tmp

C:\Users\win7\AppData\Local\Temp\sipaord

C:\Users\win7\AppData\Local\Temp\aut3A00.tmp

C:\Users\win7\AppData\Local\Temp\5895\5895.exe

C:\Users\c\AppData\Local\Temp\wrar531.exe

C:\Users\win7\AppData\Local\Temp\5895

C:\Users\win7\AppData\Local\Temp\7zS54D4.tmp\setup-stub.exe

C:\Users\win7\AppData\Local\Temp\nsi56B9.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsi56B9.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nsi56B9.tmp\bgintro.bmp

C:\Users\win7\AppData\Local\Temp\nsi56B9.tmp\appname.bmp

C:\Users\win7\AppData\Local\Temp\nsi56B9.tmp\clock.bmp

C:\Users\win7\AppData\Local\Temp\nsi56B9.tmp\particles.bmp

C:\Users\win7\AppData\Local\Temp\nsi56B9.tmp\pencil.bmp

C:\Users\win7\AppData\Local\Temp\nsi56B9.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nsi56B9.tmp\InetBgDL.dll

C:\Users\win7\AppData\Local\Temp\nsi56B9.tmp\download.exe

C:\Users\win7\AppData\Local\Temp\7zS4C5A.tmp\setup-stub.exe

C:\Users\win7\AppData\Local\Temp\nsj4F0A.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsj4F0A.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nsj4F0A.tmp\bgintro.bmp

C:\Users\win7\AppData\Local\Temp\nsj4F0A.tmp\appname.bmp

C:\Users\win7\AppData\Local\Temp\nsj4F0A.tmp\clock.bmp

C:\Users\win7\AppData\Local\Temp\nsj4F0A.tmp\particles.bmp

C:\Users\win7\AppData\Local\Temp\nsj4F0A.tmp\pencil.bmp

C:\Users\win7\AppData\Local\Temp\nsj4F0A.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nsj4F0A.tmp\InetBgDL.dll

C:\Users\win7\AppData\Local\Temp\nsj4F0A.tmp\download.exe

C:/lib/tcl8.5/encoding

C:/sample

C:/Users/win7/AppData/Local/Temp/BRE72E.tmp

C:/Users/win7/AppData/Local/Temp

C:/

C:/Users

C:/Users/win7

C:/Users/win7/AppData

C:/Users/win7/AppData/Local

C:/Users/win7/AppData/Local/Temp/be29e7f1-71ae-4703-50cb-1d52be512f51

C:/Users/win7/AppData/Local/Temp/be29e7f1-71ae-4703-50cb-1d52be512f51/msvcp60.dll

C:/Users/win7/AppData/Local/Temp/BRE7BB.tmp

C:/Users/win7/AppData/Local/Temp/BRE914.tmp

C:/Users/win7/AppData/Local/Temp/BRE944.tmp

C:/Users/win7/AppData/Local/Temp/BRE964.tmp

C:/Users/win7/AppData/Local/Temp/BREADC.tmp

C:/Users/win7/AppData/Local/Temp/bitrock_installer.log

/usr/share/zoneinfo

/usr/share/lib/zoneinfo

/usr/lib/zoneinfo

/usr/local/etc/zoneinfo

C:/Users/win7/AppData/Local/Temp/BREE19.tmp

C:/Users/win7/AppData/Local/Temp/BREEA7.tmp

C:/Users/win7/AppData/Local/Temp/BREEB8.tmp

C:/Users/win7/AppData/Local/Temp/BREF45.tmp

C:/Users/win7/AppData/Local/Temp/.bitrock

C:/Users/win7/AppData/Local/Temp/.bitrock/.tmp_1168_4195585

C:/Users/win7/AppData/Local/Temp/.bitrock/.tmp_1168_4195585/file-16px.png

C:/Users/win7/AppData/Local/Temp/.bitrock/.tmp_1168_4195585/folder-16px.png

C:/Users/win7/AppData/Local/Temp/.bitrock/.tmp_1168_4195585/leftImage.png

C:/Users/win7/AppData/Local/Temp/.bitrock/.tmp_1168_4195585/logoImage.png

C:/Users/win7/AppData/Local/Temp/.bitrock/.tmp_1168_4195585/msgbox-error.png

C:/Users/win7/AppData/Local/Temp/.bitrock/.tmp_1168_4195585/msgbox-info.png

C:/Users/win7/AppData/Local/Temp/.bitrock/.tmp_1168_4195585/msgbox-question.png

C:/Users/win7/AppData/Local/Temp/.bitrock/.tmp_1168_4195585/msgbox-warning.png

C:/Users/win7/AppData/Local/Temp/.bitrock/.tmp_1168_4195585/open_directory-16px.png

C:/Users/win7/AppData/Local/Temp/.bitrock/.tmp_1168_4195585/open_directory-16px_disabled.png

C:/Users/win7/AppData/Local/Temp/.bitrock/.tmp_1168_4195585/open_directory-16px_selected.png

C:/Users/win7/AppData/Local/Temp/.bitrock/.tmp_1168_4195585/open_project-16px.png

C:/Users/win7/AppData/Local/Temp/.bitrock/.tmp_1168_4195585/open_project-16px_disabled.png

C:/Users/win7/AppData/Local/Temp/.bitrock/.tmp_1168_4195585/open_project-16px_selected.png

C:/Users/win7/AppData/Local/Temp/.bitrock/.tmp_1168_4195585/splashImage.png

C:/Users/win7/AppData/Local/Temp/.bitrock/.tmp_1168_4195585/updir.png

C:/Users/win7/AppData/Local/Temp/.bitrock/.tmp_1168_4195585/wmImage.png

C:/Users/win7/AppData/Local/Temp/.bitrock/.tmp_1168_4195585/x01image_small.png

\\?\C:\Users\win7\AppData\Local\Temp\.bitrock\.tmp_1168_4195585\wmImage.png

\\?\C:\Users\win7\AppData\Local\Temp\.bitrock\.tmp_1168_4195585\logoImage.png

\\?\C:\Users\win7\AppData\Local\Temp\.bitrock\.tmp_1168_4195585\leftImage.png

\\?\C:\Users\win7\AppData\Local\Temp\.bitrock\.tmp_1168_4195585\splashImage.png

\\?\C:\Users\win7\AppData\Local\Temp\.bitrock\.tmp_1168_4195585\open_directory-16px.png

\??\C:\Windows\system32\mmcshext.dll

C:\Windows\system32\en-US\erofflps.txt

C:\Users\win7\AppData\Local\Temp\WER6F34.tmp.WERInternalMetadata.xml

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DB87D2AB058205E5452E4516D5631B

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3151BAC9462B3E2DEE2326609B77DE7E

https://www.mql5.com/?utm_campaign=WebInstaller&utm_medium=special&utm_source=installer

SolScore.bin

ClubList.BIN

C:\Users\win7\AppData\Local\Temp\toolbar_log.txt

1.217.565.0_TO_1.217.666.0_MPASDLTA.VDM._P

1.217.565.0_TO_1.217.666.0_MPAVDLTA.VDM._P

C:\Windows\System32\msiexec.exe

C:\Users\win7\AppData\Local\Temp\is-BUEVH.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\is-PH7AV.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-PH7AV.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-PH7AV.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\Autodesk-WebInstall3StubGUI-execution.log

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C46E7B0F942663A1EDC8D9D6D7869173_DF4CA81DC775CDA9B3214BDB5B55900E

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\40C68D5626484A90937F0752C8B950AB

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\955CAB6FF6A24D5820D50B5BA1CF79C7_CC1689C2A9A5CB35265F3C2516751959

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8EDCF682921FE94F4A02A43CD1A28E6B

C:\Users\win7\AppData\Local\Temp\is-V9HJD.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-V9HJD.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-V9HJD.tmp\bassmusic.dll

C:\ProgramData\MPK\S0000

C:\key.bin

C:\ProgramData\MPK\M0000.

C:\Users\win7\AppData\Local\Temp\nssA12D.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nssA12D.tmp\splash.jpg

C:\Users\win7\AppData\Local\Temp\nssA12D.tmp\newadvsplash.dll

C:\Users\win7\AppData\Local\Temp\\~DF1FADEE34CDD79095.TMP

C:\sample\install.cfg

C:\Intel\Logs\IntelAMT.log

C:\Users\win7\AppData\Local\Temp\mdmB1E5.tmp

\\?\hid#vid_80ee&pid_0021#6&e993e07&0&0000#{4d1e55b2-f16f-11cf-88cb-001111000030}

\\?\C:\Users\win7\AppData\Roaming\Adobe\Flash Player\AssetCache\B2MG66M2

C:\Users\win7\AppData\Local\Temp\FAPB30F.tmp

\\?\C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\ZN534222

\\?\C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\ZN534222\macromedia.com\support\flashplayer\sys\settings.sol

C:\Users\win7\Intel\Logs\IntelRST.log

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\Resource.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\ar-SA\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\ar-SA\License.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\ar-SA\removdrv.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\ar-SA\resource.dll.mui

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\cs-CZ\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\cs-CZ\License.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\cs-CZ\removdrv.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\cs-CZ\resource.dll.mui

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\da-DK\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\da-DK\License.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\da-DK\removdrv.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\da-DK\resource.dll.mui

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\de-DE\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\de-DE\License.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\de-DE\removdrv.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\de-DE\resource.dll.mui

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\el-GR\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\el-GR\License.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\el-GR\removdrv.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\el-GR\resource.dll.mui

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\en-US\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\en-US\License.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\en-US\removdrv.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\en-US\Resource.dll.mui

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\es-ES\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\es-ES\License.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\es-ES\removdrv.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\es-ES\resource.dll.mui

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\fi-FI\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\fi-FI\License.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\fi-FI\removdrv.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\fi-FI\resource.dll.mui

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\fr-FR\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\fr-FR\License.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\fr-FR\removdrv.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\fr-FR\resource.dll.mui

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\he-IL\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\he-IL\License.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\he-IL\removdrv.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\he-IL\resource.dll.mui

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\hu-HU\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\hu-HU\License.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\hu-HU\removdrv.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\hu-HU\resource.dll.mui

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\it-IT\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\it-IT\License.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\it-IT\removdrv.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\it-IT\resource.dll.mui

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\ja-JP\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\ja-JP\License.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\ja-JP\removdrv.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\ja-JP\resource.dll.mui

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\ko-KR\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\ko-KR\License.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\ko-KR\removdrv.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\ko-KR\resource.dll.mui

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\nb-NO\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\nb-NO\License.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\nb-NO\removdrv.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\nb-NO\resource.dll.mui

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\nl-NL\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\nl-NL\License.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\nl-NL\removdrv.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\nl-NL\resource.dll.mui

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\pl-PL\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\pl-PL\License.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\pl-PL\removdrv.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\pl-PL\resource.dll.mui

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\pt-BR\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\pt-BR\License.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\pt-BR\removdrv.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\pt-BR\resource.dll.mui

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\pt-PT\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\pt-PT\License.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\pt-PT\removdrv.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\pt-PT\resource.dll.mui

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\ru-RU\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\ru-RU\License.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\ru-RU\removdrv.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\ru-RU\resource.dll.mui

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\sk-SK\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\sk-SK\License.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\sk-SK\removdrv.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\sk-SK\resource.dll.mui

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\sv-SE\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\sv-SE\License.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\sv-SE\removdrv.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\sv-SE\resource.dll.mui

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\th-TH\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\th-TH\License.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\th-TH\removdrv.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\th-TH\resource.dll.mui

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\tr-TR\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\tr-TR\License.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\tr-TR\removdrv.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\tr-TR\resource.dll.mui

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\zh-CN\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\zh-CN\License.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\zh-CN\removdrv.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\zh-CN\resource.dll.mui

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\zh-TW\IntelCommon.dll

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\zh-TW\License.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\zh-TW\removdrv.txt

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\zh-TW\resource.dll.mui

C:\Users\win7\AppData\Local\Temp\IIF2961.tmp\en-US\license.txt

C:\Users\win7\AppData\Local\Temp\000B1DF2.log

C:\Users\win7\AppData\Local\Temp\INH728~1\css\ie6_main.css

C:\Users\win7\AppData\Local\Temp\INH728~1\css\main.css

C:\Users\win7\AppData\Local\Temp\INH728~1\css\sdk-ui\browse.css

C:\Users\win7\AppData\Local\Temp\INH728~1\css\sdk-ui\button.css

C:\Users\win7\AppData\Local\Temp\INH728~1\css\sdk-ui\checkbox.css

C:\Users\win7\AppData\Local\Temp\INH728~1\css\sdk-ui\images\button-bg.png

C:\Users\win7\AppData\Local\Temp\INH728~1\css\sdk-ui\images\progress-bg-corner.png

C:\Users\win7\AppData\Local\Temp\INH728~1\css\sdk-ui\images\progress-bg.png

C:\Users\win7\AppData\Local\Temp\INH728~1\css\sdk-ui\images\progress-bg2.png

C:\Users\win7\AppData\Local\Temp\INH728~1\css\sdk-ui\progress-bar.css

C:\Users\win7\AppData\Local\Temp\INH728~1\csshover3.htc

C:\Users\win7\AppData\Local\Temp\INH728~1\form.bmp.Mask

C:\Users\win7\AppData\Local\Temp\INH728~1\images\BG.jpg

C:\Users\win7\AppData\Local\Temp\INH728~1\images\Close.png

C:\Users\win7\AppData\Local\Temp\INH728~1\images\Color_Button.png

C:\Users\win7\AppData\Local\Temp\INH728~1\images\Color_Button_Hover.png

C:\Users\win7\AppData\Local\Temp\INH728~1\images\Grey_Button.png

C:\Users\win7\AppData\Local\Temp\INH728~1\images\Grey_Button_Hover.png

C:\Users\win7\AppData\Local\Temp\INH728~1\images\Loader.gif

C:\Users\win7\AppData\Local\Temp\INH728~1\images\Pause_Button.png

C:\Users\win7\AppData\Local\Temp\INH728~1\images\Progress.png

C:\Users\win7\AppData\Local\Temp\INH728~1\images\ProgressBar.png

C:\Users\win7\AppData\Local\Temp\INH728~1\images\Quick_Specs.png

C:\Users\win7\AppData\Local\Temp\INH728~1\images\Resume_Button.png

C:\Users\win7\AppData\Local\Temp\INH728~1\images\sponsored.png

C:\Users\win7\AppData\Local\Temp\INH728~1\locale\DE.locale

C:\Users\win7\AppData\Local\Temp\INH728~1\locale\EN.locale

C:\Users\win7\AppData\Local\Temp\INH728~1\locale\ES.locale

C:\Users\win7\AppData\Local\Temp\INH728~1\locale\FR.locale

C:\Users\win7\AppData\Local\Temp\INH728~1\locale\JA.locale

C:\Users\win7\AppData\Local\Temp\INH728~1\locale\PT.locale

\\.\pipe\0S1P1R2Y1C1P1Q0D1F2W1G1I1F1T1Q1V1G1P2W

\\.\pipe\0S1P1R2Y1C1P1Q0D1F2W1G1I1F1T1Q1V1G1P2W_TEST

C:\Users\win7\AppData\Local\Temp\000B1E40.log

C:\Users\win7\AppData\Local\Temp\in1C2ACCFB\2F207485.tmp

C:\Users\win7\AppData\Local\Temp\000B1E50.log

C:\Users\win7\AppData\Local\Temp\inH72857863982\bootstrap_54270.html

C:\Users\win7\AppData\Local\Temp\inH72857863982

C:\Users\win7\AppData\Local\Temp\inH72857863982\css\sdk-ui\progress-bar.css

C:\Users\win7\AppData\Local\Temp\inH72857863982\css\main.css

C:\Users\win7\AppData\Local\Temp\inH72857863982\images\default_tb.png

C:\Users\win7\AppData\Local\Temp\inH72857863982\images\default_wi.png

C:\Users\win7\AppData\Local\Temp\inH72857863982\locale\EN.locale

C:\Users\win7\AppData\Local\Temp\inH72857863982\images\Close_Hover.png

C:\Users\win7\AppData\Local\Temp\inH72857863982\images\Grey_Button_Hover.png

C:\Users\win7\AppData\Local\Temp\inH72857863982\images\Color_Button_Hover.png

C:\Users\win7\AppData\Local\Temp\in1C2ACCFB\690110D4_stp.EXE

C:\Users\win7\AppData\Local\Temp\IN1C2A~1\690110~1.EXE

C:\Users\win7\AppData\Local\Temp\inH72857863982\images\BG.jpg

C:\Users\win7\AppData\Local\Temp\inH72857863982\images\Quick_Specs.png

C:\Users\win7\AppData\Local\Temp\inH72857863982\images\sponsored.png

C:\Users\win7\AppData\Local\Temp\inH72857863982\images\Close.png

C:\Users\win7\AppData\Local\Temp\inH72857863982\images\Loader.gif

C:\Users\win7\AppData\Local\Temp\inH72857863982\images\ProgressBar.png

C:\Users\win7\AppData\Local\Temp\inH72857863982\images\Progress.png

C:\Users\win7\AppData\Local\Temp\inH72857863982\images\Pause_Button.png

C:\Users\win7\AppData\Local\Temp\inH72857863982\images\Resume_Button.png

C:\Users\win7\AppData\Local\Temp\inH72857863982\images\Grey_Button.png

C:\Users\win7\AppData\Local\Temp\inH72857863982\images\Color_Button.png

C:\Users\win7\AppData\Local\Temp\in1C2ACCFB\690110D4_stp.EXE.part

C:\Users\win7\AppData\Local\Temp\IN1C2A~1\690110~1.PAR

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\Adobe.lok

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\proj.dll

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\dirapi.dll

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\iml32.dll

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\msvcr71.dll

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\msvcp71.dll

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\dirapi.mch

C:\LINGO.INI

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\temp0000

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\INetURL.x32

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\NetFile.x32

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\NetLingo.x32

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\SWADCmpr.x32

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\MacroMix.x32

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\DirectSound.x32

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\Sound Control.x32

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\Text Asset.x32

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\TextXtra.x32

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\Font Xtra.x32

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\Flash Asset.x32

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\Shockwave 3D Asset.x32

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\Font Asset.x32

C:\Users\win7\AppData\Local\Temp\AAX3152.tmp

C:\Users\win7\AppData\Local\Temp\tmp1613D.FOT

C:\Users\win7\AppData\Local\Temp\AAX3173.tmp

C:\Users\win7\AppData\Local\Temp\tmp0813D.FOT

C:\Users\win7\AppData\Local\Temp\nso5EA7.tmp

C:\Users\win7\AppData\Local\Temp\nsy5EE6.tmp\System.dll

C:\ProgramData\ClassicShellSetup64_3_6_5.msi

C:\Windows\SysWOW64\msiexec.exe.config

C:\Windows\SysWOW64\msiexec.exe

C:\Windows\system32\hpqgptmu.cab

C:\Windows\INF\setupapi.app.log

C:\Users\win7\AppData\Local\Temp\is-9SM03.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\is-LNMB3.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-LNMB3.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-LNMB3.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-LNMB3.tmp\logo.bmp

C:\Users\win7\AppData\Local\Temp\is-LNMB3.tmp\Arc.exe

__tmp_rar_sfx_access_check_742312

Launch_XP_VMs.cmd

libcds.dll

libcurl.dll

libeay32.dll

liblber.dll

libldap.dll

libldap_r.dll

libxml2.dll

open_source_licenses.txt

sigc-2.0.dll

ssleay32.dll

sysimgbase.dll

vixdiskmountapi.dll

vmappsdk.dll

vmapputil.dll

vmclientcore.dll

vmdbcom.dll

vmplayer-service.exe

vmwarebase.dll

vmwarecui.dll

vmwareRemoteConsole.dll

vmware-remotemks.exe

vmwarestring.dll

vmware-vmrc.exe

vmwarewui.dll

vnetlib.dll

xmlparse.dll

xmlrpc.dll

xmltok.dll

zlib1.dll

dbghelp.dll

glib-2.0.dll

glibmm-2.4.dll

gmodule-2.0.dll

gobject-2.0.dll

gthread-2.0.dll

gvmomi.dll

iconv.dll

intl.dll

C:\Users\win7\Desktop\Launch_XP_VMs.lnk

C:\WinRAR.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk

C:\WinRAR.hlp

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Pomoc WinRAR-a.lnk

C:\Rar.txt

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Podrecznik RAR-a dla konsoli.lnk

C:\ProgramData\653ac11b-b606-42c5-b357-bca0fd28d1cd\temp

C:\Users\win7\AppData\Local\Temp\nshC704.tmp

C:\Users\win7\AppData\Local\Temp\nssC7E0.tmp\DotNetChecker.dll

C:\Users\win7\AppData\Local\Temp\nssC7E0.tmp\nsSCM.dll

C:\Windows\nvgffx_ss_01.exe.scr

C:\Windows\nvgffx_ss_01.exe.dll

C:\Windows\nvgffx_ss_01.exe.dat

C:\Windows\nvgffx_ss_01.exe.exe

C:\Users\win7\AppData\Local\Temp\nsuEEF5.tmp\ImageEdPlug.dll

C:\Users\win7\AppData\Local\Temp\nsuEEF5.tmp\System.dll

C:\Users\win7\AppData\Roaming\ImageCropResize\ImageCropResize.exe

C:\Users\win7\AppData\Local\Temp\nsuEEF5.tmp\KillProcDLL.dll

C:\Users\win7\AppData\Roaming\ImageCropResize\ImageEd\ImageEd.exe

C:\Users\win7\AppData\Roaming\ImageCropResize

C:\Users\win7\Desktop\ImageCropResize.lnk

C:\Users\win7\AppData\Roaming\ImageCropResize\uninstaller.exe

C:\Users\win7\AppData\Local\Temp\nspBB72.tmp

C:\Users\win7\AppData\Local\Temp\nskBBA2.tmp\System.dll

\\.\pipe\OperaCrashReporter2648

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160406010644.log

C:\Users\win7\AppData\Local\TebeInteresno\Log\TebeInteresno-2568.log

C:\Windows\System32\drivers\etc\services

C:\$RECYCLE.BIN\S-1-5-21-3979321414-2393373014-2172761192-1000\desktop.ini

\\.\pipe\PIPE_SRM_0

C:\Users\win7\AppData\Local\Temp\VSD5EB4.tmp\install.log

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\NetworkDetective[1].application

.config

C:\Windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe.config

C:\Windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe

C:\Program Files\Internet Explorer

http://networkdetective.s3-website-us-east-1.amazonaws.com/Application/Release/NetworkDetective.application

C:\Users\win7\AppData\Local\Microsoft\Windows\Burn

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\desktop.ini

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\desktop.ini

\\?\ide#diskvbox_harddisk___________________________1.0_____#5&33d1638a&0&0.0.0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}

C:\UsbFix\UsbFix.exe

C:\UsbFix\Res\Account-Over.png

C:\UsbFix\Res\Account.png

C:\UsbFix\Res\Angle-149.png

C:\UsbFix\Res\Angle.png

C:\UsbFix\Res\Angle2.png

C:\UsbFix\Res\Apply.jpg

C:\UsbFix\Res\Apply2.jpg

C:\UsbFix\Res\ApplyOver.jpg

C:\UsbFix\Res\AutoClean.png

C:\UsbFix\Res\AutoVaccine.png

C:\UsbFix\Res\BRNGScan.png

C:\UsbFix\Res\Bug.png

C:\UsbFix\Res\Center Direction-50.png

C:\UsbFix\Res\Center Direction-64.png

C:\UsbFix\Res\Checked-40.png

C:\UsbFix\Res\Checkout-64.png

C:\UsbFix\Res\Computer-64.png

C:\UsbFix\Res\Detected.ico

C:\UsbFix\Res\Domain-50.png

C:\UsbFix\Res\EULA-en.txt

C:\UsbFix\Res\EULA-es.txt

C:\UsbFix\Res\EULA-fr.txt

C:\UsbFix\Res\EULA-it.txt

C:\UsbFix\Res\EULA-po.txt

C:\UsbFix\Res\EULA.txt

C:\UsbFix\Res\Exit-64.png

C:\UsbFix\Res\FastScan.png

C:\UsbFix\Res\Folder.ico

C:\UsbFix\Res\Folder.png

C:\UsbFix\Res\Get-Premium-120.png

C:\UsbFix\Res\HDDetected.png

C:\UsbFix\Res\HDFolder.png

C:\UsbFix\Res\HDHidden.png

C:\UsbFix\Res\HDKey.png

C:\UsbFix\Res\HDValue.png

C:\UsbFix\Res\Happy-50.png

C:\UsbFix\Res\Happy.png

C:\UsbFix\Res\Help-40.png

C:\UsbFix\Res\Hidden.ico

C:\UsbFix\Res\Initizialize.ico

C:\UsbFix\Res\Key.ico

C:\UsbFix\Res\ListPlus.png

C:\UsbFix\Res\LogoSetting.jpg

C:\UsbFix\Res\Monster-149.png

C:\UsbFix\Res\Quarantine_left.png

C:\UsbFix\Res\Rocket-64-Green.png

C:\UsbFix\Res\Rocket-64.png

C:\UsbFix\Res\Rocket.png

C:\UsbFix\Res\Sad-50.png

C:\UsbFix\Res\ScanNow-Over.png

C:\UsbFix\Res\ScanNow.png

C:\UsbFix\Res\Settings.png

C:\UsbFix\Res\Shield.png

C:\UsbFix\Res\Speed.png

C:\UsbFix\Res\Support-SosVirus.png

C:\UsbFix\Res\Tools.png

C:\UsbFix\Res\Trashes.png

C:\UsbFix\Res\UsbFix.ico

C:\UsbFix\Res\User-Shield.png

C:\UsbFix\Res\Viseur.png

C:\UsbFix\Res\Windows.png

C:\UsbFix\Res\arrow_left.png

C:\UsbFix\Res\bg-buton.png

C:\UsbFix\Res\bg-footer-768x70.png

C:\UsbFix\Res\bitdefender-2015.png

C:\UsbFix\Res\bitdefender-en-1.jpg

C:\UsbFix\Res\bitdefender-en-3.jpg

C:\UsbFix\Res\bitdefender-fr-1.jpg

C:\UsbFix\Res\bitdefender-fr-2.jpg

C:\UsbFix\Res\bitdefender-texte.png

C:\UsbFix\Res\bitdefender-texte_en.png

C:\UsbFix\Res\donate.jpg

C:\UsbFix\Res\donateover.jpg

C:\UsbFix\Res\encart-bitdefender-en.jpg

C:\UsbFix\Res\encart-bitdefender-en.png

C:\UsbFix\Res\encart-bitdefender-fr.png

C:\UsbFix\Res\facebook.jpg

C:\UsbFix\Res\facebookover.jpg

C:\UsbFix\Res\forum.jpg

C:\UsbFix\Res\forumover.jpg

C:\UsbFix\Res\listing.jpg

C:\UsbFix\Res\listingover.jpg

C:\UsbFix\Res\logo-2-300x86.png

C:\UsbFix\Res\logo-box.jpg

C:\UsbFix\Res\logo-sosvirus.png

C:\UsbFix\Res\logo.jpg

C:\UsbFix\Res\logo_listing.png

C:\UsbFix\Res\monstre110.png

C:\UsbFix\Res\monstre130.png

C:\UsbFix\Res\monstre80.png

C:\UsbFix\Res\msgbox3.jpg

C:\UsbFix\Res\msgbox4.jpg

C:\UsbFix\Res\off.png

C:\UsbFix\Res\on.png

C:\UsbFix\Res\options.jpg

C:\UsbFix\Res\optionsover.jpg

C:\UsbFix\Res\picto-bouclier-120.png

C:\UsbFix\Res\picto-bouclier-slide.png

C:\UsbFix\Res\picto-check - Copie.png

C:\UsbFix\Res\picto-check.png

C:\UsbFix\Res\picto-check1 - Copie.png

C:\UsbFix\Res\picto-check1.png

C:\UsbFix\Res\picto-diag.png

C:\UsbFix\Res\picto-outil.png

C:\UsbFix\Res\picto-virus.png

C:\UsbFix\Res\picto-virus1.png

C:\UsbFix\Res\quitter.jpg

C:\UsbFix\Res\quitterover.jpg

C:\UsbFix\Res\scan.jpg

C:\UsbFix\Res\scanover.jpg

C:\UsbFix\Res\scanoverusbdetect.jpg

C:\UsbFix\Res\scanoverusbdetectover.jpg

C:\UsbFix\Res\settings.ico

C:\UsbFix\Res\splash.png

C:\UsbFix\Res\suppr.jpg

C:\UsbFix\Res\supprover.jpg

C:\UsbFix\Res\twitter.jpg

C:\UsbFix\Res\twitterover.jpg

C:\UsbFix\Res\usbfix-logo-128.png

C:\UsbFix\Res\usbfix-upgrade.png

C:\UsbFix\Res\vaccin.jpg

C:\UsbFix\Res\vaccinover.jpg

C:\UsbFix\Res\Ico\Autograph-50.png

C:\UsbFix\Res\Ico\Checked-50.png

C:\UsbFix\Res\Ico\Computer-64.png

C:\UsbFix\Res\Ico\Computer-blue-64.png

C:\UsbFix\Res\Ico\HDD-50-White.png

C:\UsbFix\Res\Ico\HDD-64-White.png

C:\UsbFix\Res\Ico\HDD-64.png

C:\UsbFix\Res\Ico\HDD-blue-64.png

C:\UsbFix\Res\Ico\Network-50.png

C:\UsbFix\Res\Ico\Scanner-64.png

C:\UsbFix\Res\Ico\Search-64.png

C:\UsbFix\Res\Ico\Settings-50.png

C:\UsbFix\Res\Ico\USB-DOG-500.png

C:\UsbFix\Res\Ico\Unchecked-50.png

C:\UsbFix\Res\Ico\VT-Result-64.png

C:\UsbFix\Res\Ico\VTScan-64.png

C:\UsbFix\Res\Ico\Voice-50.png

C:\UsbFix\Res\Ico\bg-50x50.png

C:\UsbFix\Tools\swreg.com

C:\UsbFix\Un-UsbFix.exe

C:\Users\win7\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3979321414-2393373014-2172761192-1000\58b8aea4ae7184a912187a66498d9b0c_c4b6765a-c53d-4b48-b576-0e1db4e9f3bc

C:\Users\win7\AppData\Roaming\uTorrent\settings.dat.new

C:\Users\win7\AppData\Roaming\uTorrent\utorrent.lng

C:\sample.lang.txt

C:\Users\win7\AppData\Roaming\uTorrent\current.btskin

C:\Users\win7\AppData\Local\Temp\uttB510.tmp.new

C:\Users\win7\AppData\Local\Temp\nsz7880.tmp

C:\Users\win7\AppData\Local\Temp\nsu78B0.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\plspltmp.gif

C:\Users\win7\AppData\Local\Temp\nsu78B0.tmp\newadvsplash.dll

C:\Users\win7\AppData\Local\Temp\\~DF7CBDF2CFDE0AF69C.TMP

C:\Users\win7\AppData\Local\Temp\nsu78B0.tmp\LangDLL.dll

C:\Users\win7\AppData\Local\Temp\nsu78B0.tmp\System.dll

C:\Program Files\Process Lasso\InstallHelper.exe

C:\Program Files\Process Lasso\pl_rsrc_english.dll

C:\Program Files\Process Lasso\srvstub.exe

C:\Program Files\Process Lasso\bitsumms.exe

C:\Program Files\Process Lasso\ProcessLasso.exe

C:\Program Files\Process Lasso\ProcessGovernor.exe

C:\Program Files\Process Lasso\TweakScheduler.exe

C:\Program Files\Process Lasso\vistammsc.exe

C:\Program Files\Process Lasso\ProcessLassoLauncher.exe

C:\Program Files\Process Lasso\QuickUpgrade.exe

C:\Program Files\Process Lasso\pkctrl.exe

C:\Program Files\Process Lasso\CPUEater.exe

C:\Program Files\Process Lasso\TestLasso.exe

C:\Program Files\Process Lasso\ThreadRacer.exe

C:\Program Files\Process Lasso\LogViewer.exe

C:\Program Files\Process Lasso\LassoInsights.exe

C:\Program Files\Process Lasso\pl_rsrc_finnish.dll

C:\Program Files\Process Lasso\pl_rsrc_japanese.dll

C:\Program Files\Process Lasso\pl_rsrc_german.dll

C:\Program Files\Process Lasso\pl_rsrc_chinese.dll

C:\Program Files\Process Lasso\pl_rsrc_chinese_traditional.dll

C:\Program Files\Process Lasso\pl_rsrc_italian.dll

C:\Program Files\Process Lasso\pl_rsrc_french.dll

C:\Program Files\Process Lasso\pl_rsrc_polish.dll

C:\Program Files\Process Lasso\pl_rsrc_ptbr.dll

C:\Program Files\Process Lasso\pl_rsrc_spanish.dll

C:\Program Files\Process Lasso\pl_rsrc_russian2.dll

C:\Program Files\Process Lasso\start-governor.bat

C:\Program Files\Process Lasso\stop-governor.bat

C:\Program Files\Process Lasso\pl.cmd

C:\Program Files\Process Lasso\plActivate.exe

C:\Program Files\Process Lasso\.docs_fmt0

C:\Program Files\Process Lasso\uninstall.exe

C:\Program Files\Process Lasso\.logtype9

C:\Users\win7\AppData\Local\Temp\hyaF94D.tmp

C:\Themes

C:\Users\win7\AppData\Local\Temp\nsh994C.tmp

C:\Users\win7\AppData\Local\Temp\nsw995C.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\nsw995C.tmp\UtilsPlugin.dll

C:\Users\win7\AppData\Local\Temp\nsw995C.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsw995C.tmp\ioSpecial.ini

C:\Users\win7\AppData\Local\Temp\nsw995C.tmp\modern-wizard.bmp

C:\Users\win7\AppData\LocalLow\Unity\WebPlayer\UnityBugReporter.exe

C:\Users\win7\AppData\LocalLow\Unity\WebPlayer\UnityWebPlayerUpdate.exe

C:\Users\win7\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPlayerNP.map

C:\Users\win7\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx

C:\Users\win7\AppData\LocalLow\Unity\WebPlayer\loader\info.plist

C:\Users\win7\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll

C:\Users\win7\AppData\Local\Unity\WebPlayer\Uninstall.exe

C:\Users\win7\AppData\Local\Temp\nsw995C.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nsw995C.tmp\UAC.dll

C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\temp

C:\Users\win7\AppData\Local\Temp\nsu131F.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsu131F.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nsu131F.tmp\options.ini

C:\Users\win7\AppData\Local\Temp\nsu131F.tmp\shortcuts.ini

C:\Users\win7\AppData\Local\Temp\nsu131F.tmp\components.ini

C:\Users\win7\AppData\Local\Temp\nsu131F.tmp\summary.ini

C:\Users\win7\AppData\Local\Temp\nsu131F.tmp\ioSpecial.ini

C:\Users\win7\AppData\Local\Temp\nsu131F.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nsu131F.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nsu131F.tmp\modern-header.bmp

C:\Users\win7\AppData\Local\Temp\nsu131F.tmp\ServicesHelper.dll

C:\Users\win7\AppData\Local\Temp\is-IADTB.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\ccavusage.sdb

C:\Users\win7\AppData\Local\Temp\ccavusage.sdb-journal

C:\Users\win7\AppData\Local\Temp\ccavusage.sdb-wal

C:\Users\win7\AppData\Local\Temp\ccavusage.sdb-shm

C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\translations2\ccavstart.arabic.xml

C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\translations2\ccavstart.brazilian.xml

C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\translations2\ccavstart.bulgarian.xml

C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\translations2\ccavstart.chinese.xml

C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\translations2\ccavstart.chinesetraditional.xml

C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\translations2\ccavstart.czech.xml

C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\translations2\ccavstart.english.xml

C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\translations2\ccavstart.french.xml

C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\translations2\ccavstart.hungarian.xml

C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\translations2\ccavstart.polish.xml

C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\translations2\ccavstart.portuguese.xml

C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\translations2\ccavstart.romanian.xml

C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\translations2\ccavstart.russian.xml

C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\translations2\ccavstart.swedish.xml

C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\translations2\ccavstart.turkish.xml

C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\translations2\ccavstart.ukrainian.xml

C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\MsiDetector.xml

C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\ccavstart.exe

C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\ccav_installer.msi

C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\Translations2\ccavstart.arabic.xml

C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\Translations2\ccavstart.brazilian.xml

C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\Translations2\ccavstart.bulgarian.xml

C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\Translations2\ccavstart.chinese.xml

C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\Translations2\ccavstart.chinesetraditional.xml

C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\Translations2\ccavstart.czech.xml

C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\Translations2\ccavstart.english.xml

C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\Translations2\ccavstart.french.xml

C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\Translations2\ccavstart.hungarian.xml

C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\Translations2\ccavstart.polish.xml

C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\Translations2\ccavstart.portuguese.xml

C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\Translations2\ccavstart.romanian.xml

C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\Translations2\ccavstart.russian.xml

C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\Translations2\ccavstart.swedish.xml

C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\Translations2\ccavstart.turkish.xml

C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\Translations2\ccavstart.ukrainian.xml

C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup\cmdhtml.dll

C:\Users\win7\AppData\Local\Temp\comodoccav_temp_setup

C:\Intel\Logs\IntelGFX.log

\\.\SICE

C:\Users\win7\AppData\Local\Temp\is-SDH7C.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-SDH7C.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-SDH7C.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-SDH7C.tmp\_isetup\_isdecmp.dll

C:\Users\win7\AppData\Local\Temp\\~DF5D6B0EDA798CF7CF.TMP

C:\Users\win7\AppData\Local\Temp\nsuC5BB.tmp

C:\Users\win7\AppData\Local\Temp\nspC5EB.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nspC5EB.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nspC5EB.tmp\System.dll

x

C:\Users\win7\AppData\Local\Temp\nsk5C63.tmp

C:\Users\win7\AppData\Local\Temp\{e3931098-f44a-4c70-bf9c-f48d24bdd066}\.ba1\wixstdba.dll

C:\Users\win7\AppData\Local\Temp\{e3931098-f44a-4c70-bf9c-f48d24bdd066}\.ba1\thm.xml

C:\Users\win7\AppData\Local\Temp\{e3931098-f44a-4c70-bf9c-f48d24bdd066}\.ba1\thm.wxl

C:\Users\win7\AppData\Local\Temp\{e3931098-f44a-4c70-bf9c-f48d24bdd066}\.ba1\logo.png

C:\Users\win7\AppData\Local\Temp\{e3931098-f44a-4c70-bf9c-f48d24bdd066}\.ba1\license.rtf

C:\Users\win7\AppData\Local\Temp\{e3931098-f44a-4c70-bf9c-f48d24bdd066}\.ba1\1046\thm.wxl

C:\Users\win7\AppData\Local\Temp\{e3931098-f44a-4c70-bf9c-f48d24bdd066}\.ba1\2052\thm.wxl

C:\Users\win7\AppData\Local\Temp\{e3931098-f44a-4c70-bf9c-f48d24bdd066}\.ba1\1046\thm.xml

C:\Users\win7\AppData\Local\Temp\{e3931098-f44a-4c70-bf9c-f48d24bdd066}\.ba1\2052\thm.xml

C:\Users\win7\AppData\Local\Temp\{e3931098-f44a-4c70-bf9c-f48d24bdd066}\.ba1\1046\license.rtf

C:\Users\win7\AppData\Local\Temp\{e3931098-f44a-4c70-bf9c-f48d24bdd066}\.ba1\2052\license.rtf

C:\Users\win7\AppData\Local\Temp\{e3931098-f44a-4c70-bf9c-f48d24bdd066}\.ba1\BootstrapperApplicationData.xml

C:\Users\win7\AppData\Local\Temp\Intel_Extreme_Tuning_Utility_20160406101824.log

C:\Windows\WindowsUpdate.log

C:\Users\win7\AppData\Local\Temp\{e3931098-f44a-4c70-bf9c-f48d24bdd066}\.be\xtu-setup-exe.exe

C:\Users\win7\AppData\Local\Temp\is-L3OM5.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-L3OM5.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-L3OM5.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-NEDQ1.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-NEDQ1.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-NEDQ1.tmp\Atlantica-img.bmp

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\60E31627FDA0A46932B0E5948949F2A5

C:\Windows\SysWOW64\rundll32.exe

C:\Users\win7\AppData\Roaming\Microsoft\Internet Explorer

C:\Users\win7\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch

C:\Users\win7\AppData\Local\Temp\~ACCAStore\sample_0_5116\sample

C:\Users\win7\AppData\Local\Temp\~ACCAStoreLog\CerTus-LdL.aclog

C:\Users\win7\AppData\Local\Temp\~ACCAStore\sample_0_5116\SvnLib

C:\Users\win7\AppData\Local\Temp\~ACCAStore\sample_0_5116\intl3_svn.dll

C:\Users\win7\AppData\Local\Temp\ETDInst.log

C:\Users\win7\AppData\Local\Temp\Setup Log 2016-04-06 #001.txt

C:\Users\win7\AppData\Local\Temp\is-5AD42.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-5AD42.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D47DBD2F9E3365FBBE008D71FB06716F_BBB35F3D100606CE5776FB7E4248C8F3

C:\Users\win7\AppData\Local\Temp\nsx974E.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsx974E.tmp\CityHash.dll

\\.\pipe\OperaCrashReporter2776

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160406123743.log

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160406123742.exe

C:\Users\win7\AppData\Local\Temp\is-9HECS.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-9HECS.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-PAI7L.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-PAI7L.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-PAI7L.tmp\isxdl.dll

C:\Users\win7\AppData\Local\Temp\GUM5ED3.tmp\goopdate.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C86BD7751D53F10F65AAAD66BBDF33C7

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EE44ECA143B76F2B9F2A5AA75B5D1EC6_847118BE2683F0C241D1D702F3A3F5F9

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EE44ECA143B76F2B9F2A5AA75B5D1EC6_48BC6893316669491F73A0AFA6B78DC9

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\616AD1AB067CFD351D6C0EF6F3E12F40

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\782D7E2BFB036A849A99FFA65C652D39

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CA4458E7366E94A3C3A9C1FE548B6D21_03701DFFBB0DB68C6FEF44A923FC306A

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CA4458E7366E94A3C3A9C1FE548B6D21_11890B83A662A94DAA54032730C974C0

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7BD5521448F9309F5CEB0C75890FFABC

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\76A6104AD5D7661815E18299392B9F65

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BAEBE581FCB73249406FC21094EA252E_BC0CE803EF41A748738619ED7838EEFC

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BAEBE581FCB73249406FC21094EA252E_FD361CE5A85478C5EE18C8A08F5CE82E

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C3E814D1CB223AFCD58214D14C3B7EAB

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D84E548583BE1EE7DB5A935821009D26_5B98B6CD6E69202676965CF5B0E2A7A7

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D84E548583BE1EE7DB5A935821009D26_1070D8A1DE1737B040B2F83EA6FA69E1

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8BD11C4A2318EC8E5A82462092971DEA

C:\ProgramData\Dropbox\Update\Log\DropboxUpdate.log-2016-04-06-10-04-35-282-572

C:\Users\win7\AppData\Local\Temp\sample

C:\Windows\system32\rundll32.exe

C:\Users\win7\AppData\Local\Temp\WER9E34.tmp.WERInternalMetadata.xml

C:\Users\win7\AppData\Local\Temp\nso5009.tmp\nsDialogs.dll

C:\rar.lng

C:\rar.ini

1.217.613.0_TO_1.217.756.0_MPASDLTA.VDM._P

1.217.613.0_TO_1.217.756.0_MPAVDLTA.VDM._P

C:\Users\win7\AppData\Local\Temp\jusched.log

C:/ProgramData/Oracle/Java/java.settings.cfg

C:\Users\win7\AppData\LocalLow\Oracle\Java\JAVA_INSTALL_FLAG

C:\Users\win7\AppData\Local\Temp\Cab7161.tmp

C:\Users\win7\AppData\Local\Temp\Tar7162.tmp

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\49514950C94E8026A2B06312597DFF49_33A0493B3756EC93EB52782457685E27

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\49514950C94E8026A2B06312597DFF49_62B7DE2F96D8C234277F3800FC7921F7

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D4F348B882DF3F205ECCB6243795CB3A

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\49514950C94E8026A2B06312597DFF49_33A0493B3756EC93EB52782457685E27

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05EC48341C277FE5110E7DFAA91377DC_F4D89EB1FD4E80AFB0D09F169F9D4E2D

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05EC48341C277FE5110E7DFAA91377DC_D2D2D6C5E4292CA43CB2832A63B56ABE

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\04AFA8793E5CDC4A81C6CD4554A30707

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05EC48341C277FE5110E7DFAA91377DC_F4D89EB1FD4E80AFB0D09F169F9D4E2D

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\welcome[1]

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\runtime[1]

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\host[1]

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\l10n[1]

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\layout[1]

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\rtutils[1]

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\common[1]

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\masthead_left[1]

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\masthead_fill[1]

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\welcome_en[1]

C:\WINDOWS\FONTS\SEGUISYM.TTF

C:\Users\win7\AppData\LocalLow\Oracle\Java\jre1.8.0_60\jds752062.tmp

C:\Users\win7\AppData\LocalLow\Oracle\Java\jre1.8.0_60\jds752968.tmp

C:\Users\win7\AppData\LocalLow\Oracle\Java\jre1.8.0_60\jds753343.tmp

C:\Users\win7\AppData\Local\Temp\vivaldi_installer.log

C:\Users\win7\AppData\Local\Temp\copydtax.

C:\Users\win7\AppData\Local\Temp\aut67D1.tmp

C:\\TsCredentials.exe

1.217.550.0_TO_1.217.756.0_MPASDLTA.VDM._P

1.217.550.0_TO_1.217.756.0_MPAVDLTA.VDM._P

C:\Windows\Debug\WIA\wiatrace.log

C:\Users\win7\AppData\Local\NVIDIA\NvBackend\backend.log

C:\Users\win7\AppData\Local\NVIDIA\NvBackend\journalBS.jour.dat

C:\Users\win7\AppData\Local\NVIDIA\NvBackend\journalBS.main.xml

C:\Python26\lib\site-packages\py2exe\boot_common.py

C:\Windows\system32\sample\boot_common.py

<install zipextimporter>

C:\Windows\system32\sample\<install zipextimporter>

main.py

C:\Windows\system32\sample\main.py

C:\Users\win7\AppData\Local\csdi_monetize_120160406\csdi_monetize_120160406\1.10\cnf.cyl

C:\Users\win7\AppData\Local\Temp\gch35C8.tmp

C:\Windows\System32\DriverStore\infpub.dat

C:\Windows\inf\Shockwav.inf

C:\Windows\system32\Adobe\AUTHORWA\AWSHKWV.INI

C:\Windows\system32\Adobe\AUTHORWA\awswax.ocx

C:\Windows\system32\Adobe\AUTHORWA\np32asw.dll

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\a7qt32.xmo

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\a7vfw32.xmo

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\a7wmp32.xmo

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\awiml32.dll

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\dvd.dll

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\ftp.u32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\js32.dll

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\msvcrt.dll

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\mvoice.vwp

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\vct32161.dll

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\webplr.exe

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\a3sread.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\activex.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\aiffread.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\animgif.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\awmp3.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\bmpview.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\coverin.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\coverout.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\crossin.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\dirtrans.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\emfview.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\fileio.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\flashast.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\gifimp.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\ima4dcmp.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\ineturl.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\jpegimp.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\lrgimp.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\macedcmp.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\mix32.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\mixview.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\moafile2.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\netfile.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\Netlingo.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\pcmread.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\pictview.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\pngimp.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\ps3imp.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\pwint.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\qtasset.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\secure.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\speech.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\swadcmpr.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\swaread.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\targaimp.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\tiffimp.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\viewsvc.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\voxdcmp.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\voxread.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\wavread.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\wmfview.x32

C:\Windows\system32\Adobe\AUTHORWA\NP32ASW\webplr08\XTRAS\xmlparse.x32

C:\Windows\system32\Adobe\Director\M5drvr32.exe

C:\Windows\system32\Adobe\Director\M5if32.dll

C:\Windows\system32\Adobe\Director\np32dsw_1224184.dll

C:\Windows\system32\Adobe\Director\SwDir_1224184.dll

C:\Windows\system32\Adobe\Director\SWDNLD.EXE

C:\Windows\system32\Adobe\mini.inf

C:\Windows\system32\Adobe\Shockwav.inf

C:\Windows\system32\Adobe\Shockwave 12\Control.dll

C:\Windows\system32\Adobe\Shockwave 12\dirapi.dll

C:\Windows\system32\Adobe\Shockwave 12\DynaPlayer.dll

C:\Windows\system32\Adobe\Shockwave 12\iml32.dll

C:\Windows\system32\Adobe\Shockwave 12\Plugin.dll

C:\Windows\system32\Adobe\Shockwave 12\Proj.dll

C:\Windows\system32\Adobe\Shockwave 12\shockwave_Projector_Loader.dcr

C:\Windows\system32\Adobe\Shockwave 12\SwHelper_1224194.exe

C:\Windows\system32\Adobe\Shockwave 12\SwInit.exe

C:\Windows\system32\Adobe\Shockwave 12\SwLogo.bmp

C:\Windows\system32\Adobe\Shockwave 12\SwMenu.dll

C:\Windows\system32\Adobe\Shockwave 12\Xtras\Animated GIF Asset.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\AudioFilters.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\AudioMixer.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\BitmapFilters.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\CBrowser.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\Cursor Asset.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\DirectSound.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\DVD Asset.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\Dynamiks.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\Dynamiks_320.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\F4VAsset.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\Flash Asset.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\FLVAsset.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\Font Asset.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\Font Xtra.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\Havok.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\INetURL.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\MacroMix.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\Mix Services.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\MP4Asset.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\MPEG 3 Import Export.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\Multiusr.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\Netfile.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\Netlingo.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\PNG Import Export.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\QT6Asset.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\RealMedia Asset.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\Shockwave 3d Asset.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\Sound Control.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\Sound Import Export.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\Speech.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\Sun AU Import Export.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\SWA Import Export.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\Swadcmpr.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\Swastrm.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\Targa Import Export.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\Text Asset.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\TextXtra.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\Tiff Import Export.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\Windows Media Asset.x32

C:\Windows\system32\Adobe\Shockwave 12\Xtras\XMLParser.x32

C:\Windows\System32\xcopy.exe

C:\Windows\System32\cmd.exe

C:\Windows\System32\rundll32.exe

C:\Windows\System32\reg.exe

C:\Users\win7\AppData\Local\Temp\nsr5672.tmp

C:\Users\win7\AppData\Local\Temp\nsg5682.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsg5682.tmp\ioSpecial.ini

C:\Users\win7\AppData\Local\Temp\nsg5682.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nsg5682.tmp\InstallOptions.dll

C:\Windows\system32\NOTEPAD.EXE

C:\Users\win7\AppData\Local\Temp\is-QGU0N.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\is-77QBU.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-77QBU.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-77QBU.tmp\_isetup\_shfoldr.dll

C:\ProgramData\HP\Installer\Temp\sample000.log

C:\Windows\system32\lopts

C:\Users\win7\AppData\Local\Temp\nsk4E2B.tmp

C:\ProgramData\Panda Security\PSLogs\sample.log

C:\Users\win7\AppData\Local\Temp\aut985C.tmp

C:\Users\win7\AppData\Local\Temp\idm_reset.reg

C:\Users\win7\AppData\Local\Temp\aut985D.tmp

C:\Users\win7\AppData\Local\Temp\idm_trial.reg

C:\Users\win7\AppData\Local\Temp\aut985E.tmp

C:\Users\win7\AppData\Local\Temp\idm_reg.reg

C:\Users\win7\AppData\Local\Temp\aut986E.tmp

C:\Users\win7\AppData\Local\Temp\SetACLx32.exe

C:\Users\win7\AppData\Local\Temp\aut987F.tmp

C:\Users\win7\AppData\Local\Temp\SetACLx64.exe

C:\sample:typelib

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\index[1].htm

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\amipb[1].js

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\main[1].css

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\footer_img[1].png

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\cancel1[1].gif

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\cancel[1].gif

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\skip[1].gif

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\decline[1].gif

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\next[1].gif

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\accept[1].gif

C:\Users\win7\Desktop\Continue installation .lnk

C:\Users\win7\AppData\Local\Temp\sample:Zone.Identifier

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\finish[1].gif

C:\WINDOWS\FONTS\VERDANA.TTF

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\dm_left_image[1].png

C:\WINDOWS\FONTS\MARLETT.TTF

C:\Users\win7\AppData\Local\Temp\{3BAC4DC0-38BD-486E-94F5-543341DAD65B}\VC12X86Redist.msi

C:\Windows\SysWOW64\msvcr120.dll

C:\Windows\SysWOW64\msvcp120.dll

C:\Windows\SysWOW64\vccorlib120.dll

C:\Windows\SysWOW64\mfc120.dll

C:\Windows\SysWOW64\mfc120u.dll

C:\Windows\SysWOW64\mfcm120.dll

C:\Windows\SysWOW64\mfcm120u.dll

C:\Users\win7\AppData\Local\Temp\is-7SMID.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-7SMID.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Roaming\Steganos

C:\Users\win7\AppData\Roaming\Steganos\UninstallWindow.exe.log

C:\Users\win7\AppData\Local\Temp\sample_20160306_175521.log

C:\Users\win7\AppData\Roaming\GHISLER\WINCMD.INI

C:\Users\win7\AppData\Roaming\GHISLER\tcmdkey.zip

C:\Users\win7\AppData\Roaming\GHISLER\wcx_ftp.ini

C:\totalcmd.inc

c:\python27\dlls\py.ico

C:\Users\win7\AppData\Local\Temp\is-RILC4.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-RILC4.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-RILC4.tmp\bass.dll

C:\Users\win7\AppData\Local\Temp\is-RILC4.tmp\ISDone.dll

C:\Users\win7\AppData\Local\Temp\is-RILC4.tmp\isgsg.dll

C:\Users\win7\AppData\Local\Temp\is-RILC4.tmp\isskin.dll

C:\Users\win7\AppData\Local\Temp\is-RILC4.tmp\skin.cjstyles

C:\Users\win7\AppData\Local\Temp\is-RILC4.tmp\music.mp3

C:\Users\win7\AppData\Local\Temp\is-FNL14.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\is-RILC4.tmp\logo.bmp

C:\Users\win7\AppData\Local\Temp\is-RILC4.tmp\Splash.png

C:\x64\setup.exe

C:\CFVS_Injector.exe:Zone.Identifier

C:\DLL_Loader.exe:Zone.Identifier

C:\Procmon.exe:Zone.Identifier

C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe:Zone.Identifier

C:\Program Files\Common Files\Microsoft Shared\ink\FlickLearningWizard.exe:Zone.Identifier

C:\Program Files\Common Files\Microsoft Shared\ink\InkWatson.exe:Zone.Identifier

C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe:Zone.Identifier

C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe:Zone.Identifier

C:\Program Files\Common Files\Microsoft Shared\ink\ShapeCollector.exe:Zone.Identifier

C:\Program Files\Common Files\Microsoft Shared\ink\TabTip.exe:Zone.Identifier

C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe:Zone.Identifier

C:\Program Files\Internet Explorer\iediagcmd.exe:Zone.Identifier

C:\Program Files\Internet Explorer\ieinstal.exe:Zone.Identifier

C:\Program Files\Internet Explorer\ielowutil.exe:Zone.Identifier

C:\Program Files\Internet Explorer\iexplore.exe:Zone.Identifier

C:\Program Files\Oracle\VirtualBox Guest Additions\uninst.exe:Zone.Identifier

C:\Program Files\Oracle\VirtualBox Guest Additions\VBoxControl.exe:Zone.Identifier

C:\Program Files\Oracle\VirtualBox Guest Additions\VBoxDrvInst.exe:Zone.Identifier

C:\Program Files\Oracle\VirtualBox Guest Additions\VBoxTray.exe:Zone.Identifier

C:\Program Files\Oracle\VirtualBox Guest Additions\VBoxWHQLFake.exe:Zone.Identifier

C:\Program Files\Windows Defender\MpCmdRun.exe:Zone.Identifier

C:\Program Files\Windows Defender\MSASCui.exe:Zone.Identifier

C:\Program Files\Windows Journal\Journal.exe:Zone.Identifier

C:\Program Files\Windows Journal\PDIALOG.exe:Zone.Identifier

C:\Program Files\Windows Mail\wab.exe:Zone.Identifier

C:\Program Files\Windows Mail\wabmig.exe:Zone.Identifier

C:\Program Files\Windows Mail\WinMail.exe:Zone.Identifier

C:\Program Files\Windows NT\Accessories\wordpad.exe:Zone.Identifier

C:\Program Files\Windows Photo Viewer\ImagingDevices.exe:Zone.Identifier

C:\Program Files\Windows Sidebar\sidebar.exe:Zone.Identifier

C:\ProgramData\Package Cache\{050d4fc8-5d48-4b8f-8972-47c82c46020f}\vcredist_x64.exe:Zone.Identifier

C:\ProgramData\Package Cache\{f65db027-aff3-4070-886a-0d87064aabb1}\vcredist_x86.exe:Zone.Identifier

C:\Python27\Lib\distutils\command\wininst-6.0.exe:Zone.Identifier

C:\Python27\Lib\distutils\command\wininst-7.1.exe:Zone.Identifier

C:\Python27\Lib\distutils\command\wininst-8.0.exe:Zone.Identifier

C:\Python27\Lib\distutils\command\wininst-9.0-amd64.exe:Zone.Identifier

C:\Python27\Lib\distutils\command\wininst-9.0.exe:Zone.Identifier

C:\Python27\Lib\site-packages\pip\_vendor\distlib\t32.exe:Zone.Identifier

C:\Python27\Lib\site-packages\pip\_vendor\distlib\t64.exe:Zone.Identifier

C:\Python27\Lib\site-packages\pip\_vendor\distlib\w32.exe:Zone.Identifier

C:\Python27\Lib\site-packages\pip\_vendor\distlib\w64.exe:Zone.Identifier

C:\Python27\Lib\site-packages\setuptools\cli-32.exe:Zone.Identifier

C:\Python27\Lib\site-packages\setuptools\cli-64.exe:Zone.Identifier

C:\Python27\Lib\site-packages\setuptools\cli-arm-32.exe:Zone.Identifier

C:\Python27\Lib\site-packages\setuptools\cli.exe:Zone.Identifier

C:\Python27\Lib\site-packages\setuptools\gui-32.exe:Zone.Identifier

C:\Python27\Lib\site-packages\setuptools\gui-64.exe:Zone.Identifier

C:\Python27\Lib\site-packages\setuptools\gui-arm-32.exe:Zone.Identifier

C:\Python27\Lib\site-packages\setuptools\gui.exe:Zone.Identifier

C:\Python27\python.exe:Zone.Identifier

C:\Python27\pythonw.exe:Zone.Identifier

C:\Python27\Scripts\easy_install-2.7.exe:Zone.Identifier

C:\Python27\Scripts\easy_install.exe:Zone.Identifier

C:\Python27\Scripts\pip.exe:Zone.Identifier

C:\Python27\Scripts\pip2.7.exe:Zone.Identifier

C:\Python27\Scripts\pip2.exe:Zone.Identifier

C:\Users\All Users\Package Cache\{050d4fc8-5d48-4b8f-8972-47c82c46020f}\vcredist_x64.exe:Zone.Identifier

C:\Users\All Users\Package Cache\{f65db027-aff3-4070-886a-0d87064aabb1}\vcredist_x86.exe:Zone.Identifier

C:\Windows\assembly\GAC_32\MSBuild\3.5.0.0__b03f5f7f11d50a3a\MSBuild.exe:Zone.Identifier

C:\Windows\assembly\GAC_64\MSBuild\3.5.0.0__b03f5f7f11d50a3a\MSBuild.exe:Zone.Identifier

C:\Windows\assembly\GAC_MSIL\ComSvcConfig\3.0.0.0__b03f5f7f11d50a3a\ComSvcConfig.exe:Zone.Identifier

C:\Windows\assembly\GAC_MSIL\dfsvc\2.0.0.0__b03f5f7f11d50a3a\dfsvc.exe:Zone.Identifier

C:\Windows\assembly\GAC_MSIL\Narrator\6.1.0.0__31bf3856ad364e35\Narrator.exe:Zone.Identifier

C:\Windows\assembly\GAC_MSIL\PresentationFontCache\3.0.0.0__31bf3856ad364e35\PresentationFontCache.exe:Zone.Identifier

C:\Windows\assembly\GAC_MSIL\SMSvcHost\3.0.0.0__b03f5f7f11d50a3a\SMSvcHost.exe:Zone.Identifier

C:\Windows\assembly\GAC_MSIL\WsatConfig\3.0.0.0__b03f5f7f11d50a3a\WsatConfig.exe:Zone.Identifier

C:\Windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\ebfd3668fbeaf03b957f923c6c492536\ComSvcConfig.ni.exe:Zone.Identifier

C:\Windows\assembly\NativeImages_v2.0.50727_32\dfsvc\3083446ee4545b55c9b2db06c82c6bd0\dfsvc.ni.exe:Zone.Identifier

C:\Windows\assembly\NativeImages_v2.0.50727_32\MSBuild\cced629cddcf299ec6b0d07200950e2f\MSBuild.ni.exe:Zone.Identifier

C:\Windows\assembly\NativeImages_v2.0.50727_32\Narrator\959e8656d926412e1468da6e9232ee42\Narrator.ni.exe:Zone.Identifier

C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\4ac9fdaf938cc2207defbf1a60257147\PresentationFontCache.ni.exe:Zone.Identifier

C:\Windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\cf4438b38e356a7f3ea3de38b59c37e4\SMSvcHost.ni.exe:Zone.Identifier

C:\Windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\3c2cc8250996b5fc7eda8f062eebc5eb\WsatConfig.ni.exe:Zone.Identifier

C:\Windows\assembly\NativeImages_v2.0.50727_64\ComSvcConfig\ce9be38988431b7e9f2ec21d3a8137b5\ComSvcConfig.ni.exe:Zone.Identifier

C:\Windows\assembly\NativeImages_v2.0.50727_64\dfsvc\4eb04d393ca80898d740b4827b24e90d\dfsvc.ni.exe:Zone.Identifier

C:\Windows\assembly\NativeImages_v2.0.50727_64\MSBuild\fc3d7872c2e56d6ba920676436e17ec0\MSBuild.ni.exe:Zone.Identifier

C:\Windows\assembly\NativeImages_v2.0.50727_64\Narrator\4bb34b5ce39e6517390ece46c99f4682\Narrator.ni.exe:Zone.Identifier

C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationFontCac#\d3678cb6b069bb7aa83232b10afea4a1\PresentationFontCache.ni.exe:Zone.Identifier

C:\Windows\assembly\NativeImages_v2.0.50727_64\SMSvcHost\7380ee94439a583f084b6fd9acdd1bc0\SMSvcHost.ni.exe:Zone.Identifier

C:\Windows\assembly\NativeImages_v2.0.50727_64\WsatConfig\795767ca559a4e83bb3769f77e2017d4\WsatConfig.ni.exe:Zone.Identifier

C:\Windows\bfsvc.exe:Zone.Identifier

C:\Windows\Boot\PCAT\memtest.exe:Zone.Identifier

C:\Windows\explorer.exe:Zone.Identifier

C:\Windows\fveupdate.exe:Zone.Identifier

C:\Windows\HelpPane.exe:Zone.Identifier

C:\Windows\hh.exe:Zone.Identifier

C:\Windows\Installer\{E2B51919-207A-43EB-AE78-733F9C6797C3}\python_icon.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework\NETFXSBS10.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework\v2.0.50727\csc.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework\v2.0.50727\dw20.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ComSvcConfig.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelReg.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMConfigInstaller.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\WsatConfig.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework\v3.0\WPF\XamlViewer\XamlViewer_v0300.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework\v3.5\AddInProcess.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework\v3.5\AddInProcess32.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework\v3.5\AddInUtil.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework\v3.5\csc.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework\v3.5\DataSvcUtil.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework\v3.5\EdmGen.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework\v3.5\MSBuild.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework\v3.5\vbc.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework\v3.5\WFServicesReg.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\AppLaunch.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\aspnet_compiler.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\aspnet_regbrowsers.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\aspnet_regiis.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\aspnet_regsql.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\aspnet_state.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\aspnet_wp.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\CasPol.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\csc.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\cvtres.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\dfsvc.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\dw20.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\IEExec.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ilasm.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallUtil.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\jsc.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\Ldr64.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\MSBuild.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ngen.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\RegAsm.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\RegSvcs.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v2.0.50727\vbc.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\ComSvcConfig.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\ServiceModelReg.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMConfigInstaller.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\WsatConfig.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\XamlViewer\XamlViewer_v0300.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v3.5\AddInProcess.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v3.5\AddInProcess32.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v3.5\AddInUtil.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v3.5\csc.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v3.5\DataSvcUtil.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v3.5\EdmGen.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v3.5\MSBuild.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v3.5\vbc.exe:Zone.Identifier

C:\Windows\Microsoft.NET\Framework64\v3.5\WFServicesReg.exe:Zone.Identifier

C:\Windows\notepad.exe:Zone.Identifier

C:\Windows\regedit.exe:Zone.Identifier

C:\Windows\servicing\GC64\tzupd.exe:Zone.Identifier

C:\Windows\servicing\TrustedInstaller.exe:Zone.Identifier

C:\Windows\SoftwareDistribution\Download\d15ded8bfcbfdb16b91c1ef257f53514\amd64_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.1.7601.17750_none_519c57f2346c64dd\aspnet_wp.exe:Zone.Identifier

C:\Windows\SoftwareDistribution\Download\d15ded8bfcbfdb16b91c1ef257f53514\amd64_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.1.7601.21884_none_3ad156f04e11776c\aspnet_wp.exe:Zone.Identifier

C:\Windows\SoftwareDistribution\Download\d15ded8bfcbfdb16b91c1ef257f53514\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.1.7601.17750_none_99498ec948e88de3\aspnet_wp.exe:Zone.Identifier

C:\Windows\SoftwareDistribution\Download\d15ded8bfcbfdb16b91c1ef257f53514\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.1.7601.21884_none_827e8dc7628da072\aspnet_wp.exe:Zone.Identifier

C:\Windows\SoftwareDistribution\SelfUpdate\Handler\WuSetupV.exe:Zone.Identifier

C:\Windows\Speech\Common\sapisvr.exe:Zone.Identifier

C:\Windows\splwow64.exe:Zone.Identifier

C:\Windows\System32\AdapterTroubleshooter.exe:Zone.Identifier

C:\Windows\System32\ARP.EXE:Zone.Identifier

C:\Windows\System32\at.exe:Zone.Identifier

C:\Windows\System32\AtBroker.exe:Zone.Identifier

C:\Windows\System32\attrib.exe:Zone.Identifier

C:\Windows\System32\auditpol.exe:Zone.Identifier

C:\Windows\System32\autochk.exe:Zone.Identifier

C:\Windows\System32\autoconv.exe:Zone.Identifier

C:\Windows\System32\autofmt.exe:Zone.Identifier

C:\Windows\System32\bitsadmin.exe:Zone.Identifier

C:\Windows\System32\bootcfg.exe:Zone.Identifier

C:\Windows\System32\bthudtask.exe:Zone.Identifier

C:\Windows\System32\cacls.exe:Zone.Identifier

C:\Windows\System32\calc.exe:Zone.Identifier

C:\Windows\System32\CertEnrollCtrl.exe:Zone.Identifier

C:\Windows\System32\certreq.exe:Zone.Identifier

C:\Windows\System32\certutil.exe:Zone.Identifier

C:\Windows\System32\charmap.exe:Zone.Identifier

C:\Windows\System32\chkdsk.exe:Zone.Identifier

C:\Windows\System32\chkntfs.exe:Zone.Identifier

C:\Windows\System32\choice.exe:Zone.Identifier

C:\Windows\System32\cipher.exe:Zone.Identifier

C:\Windows\System32\cleanmgr.exe:Zone.Identifier

C:\Windows\System32\cliconfg.exe:Zone.Identifier

C:\Windows\System32\clip.exe:Zone.Identifier

C:\Windows\System32\cmd.exe:Zone.Identifier

C:\Windows\System32\cmdkey.exe:Zone.Identifier

C:\Windows\System32\cmdl32.exe:Zone.Identifier

C:\Windows\System32\cmmon32.exe:Zone.Identifier

C:\Windows\System32\cmstp.exe:Zone.Identifier

C:\Windows\System32\colorcpl.exe:Zone.Identifier

C:\Windows\System32\com\comrepl.exe:Zone.Identifier

C:\Windows\System32\com\MigRegDB.exe:Zone.Identifier

C:\Windows\System32\comp.exe:Zone.Identifier

C:\Windows\System32\compact.exe:Zone.Identifier

C:\Windows\System32\ComputerDefaults.exe:Zone.Identifier

C:\Windows\System32\control.exe:Zone.Identifier

C:\Windows\System32\convert.exe:Zone.Identifier

C:\Windows\System32\credwiz.exe:Zone.Identifier

C:\Windows\System32\cscript.exe:Zone.Identifier

C:\Windows\System32\ctfmon.exe:Zone.Identifier

C:\Windows\System32\cttune.exe:Zone.Identifier

C:\Windows\System32\cttunesvr.exe:Zone.Identifier

C:\Windows\System32\dccw.exe:Zone.Identifier

C:\Windows\System32\dcomcnfg.exe:Zone.Identifier

C:\Windows\System32\ddodiag.exe:Zone.Identifier

C:\Windows\System32\DevicePairingWizard.exe:Zone.Identifier

C:\Windows\System32\DeviceProperties.exe:Zone.Identifier

C:\Windows\System32\dfrgui.exe:Zone.Identifier

C:\Windows\System32\dialer.exe:Zone.Identifier

C:\Windows\System32\diantz.exe:Zone.Identifier

C:\Windows\System32\diskpart.exe:Zone.Identifier

C:\Windows\System32\diskperf.exe:Zone.Identifier

C:\Windows\System32\diskraid.exe:Zone.Identifier

C:\Windows\System32\Dism\DismHost.exe:Zone.Identifier

C:\Windows\System32\Dism.exe:Zone.Identifier

C:\Windows\System32\DisplaySwitch.exe:Zone.Identifier

C:\Windows\System32\dllhost.exe:Zone.Identifier

C:\Windows\System32\dllhst3g.exe:Zone.Identifier

C:\Windows\System32\dnscacheugc.exe:Zone.Identifier

C:\Windows\System32\doskey.exe:Zone.Identifier

C:\Windows\System32\dpapimig.exe:Zone.Identifier

C:\Windows\System32\DpiScaling.exe:Zone.Identifier

C:\Windows\System32\dplaysvr.exe:Zone.Identifier

C:\Windows\System32\dpnsvr.exe:Zone.Identifier

C:\Windows\System32\driverquery.exe:Zone.Identifier

C:\Windows\System32\DriverStore\FileRepository\brmfcmf.inf_amd64_neutral_67b5984f8e8ff717\BrmfRsmg.exe:Zone.Identifier

C:\Windows\System32\DriverStore\FileRepository\brmfcwia.inf_amd64_neutral_817b8835aed3d6b7\BrmfRsmg.exe:Zone.Identifier

C:\Windows\System32\DriverStore\FileRepository\bth.inf_amd64_neutral_e54666f6a3e5af91\fsquirt.exe:Zone.Identifier

C:\Windows\System32\DriverStore\FileRepository\divacx64.inf_amd64_neutral_fa0f82f024789743\ditrace.exe:Zone.Identifier

C:\Windows\System32\DriverStore\FileRepository\divacx64.inf_amd64_neutral_fa0f82f024789743\xlog.exe:Zone.Identifier

C:\Windows\System32\DriverStore\FileRepository\vboxguest.inf_amd64_neutral_4280cb4491b02ea9\VBoxControl.exe:Zone.Identifier

C:\Windows\System32\DriverStore\FileRepository\vboxguest.inf_amd64_neutral_4280cb4491b02ea9\VBoxTray.exe:Zone.Identifier

C:\Windows\System32\DriverStore\FileRepository\vboxguest.inf_amd64_neutral_8cb556e13a1ba124\VBoxControl.exe:Zone.Identifier

C:\Windows\System32\DriverStore\FileRepository\vboxguest.inf_amd64_neutral_8cb556e13a1ba124\VBoxTray.exe:Zone.Identifier

C:\Windows\System32\DriverStore\FileRepository\wvmic.inf_amd64_neutral_b94eb92e8150fa35\vmicsvc.exe:Zone.Identifier

C:\Windows\System32\drvinst.exe:Zone.Identifier

C:\Windows\System32\dvdplay.exe:Zone.Identifier

C:\Windows\System32\dvdupgrd.exe:Zone.Identifier

C:\Windows\System32\DWWIN.EXE:Zone.Identifier

C:\Windows\System32\dxdiag.exe:Zone.Identifier

C:\Windows\System32\efsui.exe:Zone.Identifier

C:\Windows\System32\EhStorAuthn.exe:Zone.Identifier

C:\Windows\System32\esentutl.exe:Zone.Identifier

C:\Windows\System32\eudcedit.exe:Zone.Identifier

C:\Windows\System32\eventcreate.exe:Zone.Identifier

C:\Windows\System32\eventvwr.exe:Zone.Identifier

C:\Windows\System32\expand.exe:Zone.Identifier

C:\Windows\System32\explorer.exe:Zone.Identifier

C:\Windows\System32\extrac32.exe:Zone.Identifier

C:\Windows\System32\fc.exe:Zone.Identifier

C:\Windows\System32\find.exe:Zone.Identifier

C:\Windows\System32\findstr.exe:Zone.Identifier

C:\Windows\System32\finger.exe:Zone.Identifier

C:\Windows\System32\fixmapi.exe:Zone.Identifier

C:\Windows\System32\fltMC.exe:Zone.Identifier

C:\Windows\System32\fontview.exe:Zone.Identifier

C:\Windows\System32\forfiles.exe:Zone.Identifier

C:\Windows\System32\fsutil.exe:Zone.Identifier

C:\Windows\System32\ftp.exe:Zone.Identifier

C:\Windows\System32\getmac.exe:Zone.Identifier

C:\Windows\System32\gpresult.exe:Zone.Identifier

C:\Windows\System32\gpscript.exe:Zone.Identifier

C:\Windows\System32\gpupdate.exe:Zone.Identifier

C:\Windows\System32\grpconv.exe:Zone.Identifier

C:\Windows\System32\hdwwiz.exe:Zone.Identifier

C:\Windows\System32\help.exe:Zone.Identifier

C:\Windows\System32\hh.exe:Zone.Identifier

C:\Windows\System32\HOSTNAME.EXE:Zone.Identifier

C:\Windows\System32\icacls.exe:Zone.Identifier

C:\Windows\System32\icardagt.exe:Zone.Identifier

C:\Windows\System32\icsunattend.exe:Zone.Identifier

C:\Windows\System32\ieUnatt.exe:Zone.Identifier

C:\Windows\System32\iexpress.exe:Zone.Identifier

C:\Windows\System32\IME\IMEJP10\IMJPDADM.EXE:Zone.Identifier

C:\Windows\System32\IME\IMEJP10\IMJPDCT.EXE:Zone.Identifier

C:\Windows\System32\IME\IMEJP10\IMJPDSVR.EXE:Zone.Identifier

C:\Windows\System32\IME\IMEJP10\IMJPMGR.EXE:Zone.Identifier

C:\Windows\System32\IME\IMEJP10\imjppdmg.exe:Zone.Identifier

C:\Windows\System32\IME\IMEJP10\IMJPUEX.EXE:Zone.Identifier

C:\Windows\System32\IME\IMEJP10\imjpuexc.exe:Zone.Identifier

C:\Windows\System32\IME\IMESC5\IMSCPROP.exe:Zone.Identifier

C:\Windows\System32\IME\IMETC10\IMTCPROP.exe:Zone.Identifier

C:\Windows\System32\IME\shared\IMCCPHR.exe:Zone.Identifier

C:\Windows\System32\IME\shared\IMEPADSV.EXE:Zone.Identifier

C:\Windows\System32\InfDefaultInstall.exe:Zone.Identifier

C:\Windows\System32\InstallShield\setup.exe:Zone.Identifier

C:\Windows\System32\InstallShield\_isdel.exe:Zone.Identifier

C:\Windows\System32\instnm.exe:Zone.Identifier

C:\Windows\System32\ipconfig.exe:Zone.Identifier

C:\Windows\System32\iscsicli.exe:Zone.Identifier

C:\Windows\System32\iscsicpl.exe:Zone.Identifier

C:\Windows\System32\isoburn.exe:Zone.Identifier

C:\Windows\System32\ktmutil.exe:Zone.Identifier

C:\Windows\System32\label.exe:Zone.Identifier

C:\Windows\System32\LocationNotifications.exe:Zone.Identifier

C:\Windows\System32\lodctr.exe:Zone.Identifier

C:\Windows\System32\logman.exe:Zone.Identifier

C:\Windows\System32\Magnify.exe:Zone.Identifier

C:\Windows\System32\makecab.exe:Zone.Identifier

C:\Windows\System32\mcbuilder.exe:Zone.Identifier

C:\Windows\System32\MigAutoPlay.exe:Zone.Identifier

C:\Windows\System32\migwiz\mighost.exe:Zone.Identifier

C:\Windows\System32\migwiz\MigSetup.exe:Zone.Identifier

C:\Windows\System32\migwiz\migwiz.exe:Zone.Identifier

C:\Windows\System32\migwiz\PostMig.exe:Zone.Identifier

C:\Windows\System32\mmc.exe:Zone.Identifier

C:\Windows\System32\mobsync.exe:Zone.Identifier

C:\Windows\System32\mountvol.exe:Zone.Identifier

C:\Windows\System32\MRINFO.EXE:Zone.Identifier

C:\Windows\System32\msdt.exe:Zone.Identifier

C:\Windows\System32\msfeedssync.exe:Zone.Identifier

C:\Windows\System32\mshta.exe:Zone.Identifier

C:\Windows\System32\msiexec.exe:Zone.Identifier

C:\Windows\System32\msinfo32.exe:Zone.Identifier

C:\Windows\System32\mspaint.exe:Zone.Identifier

C:\Windows\System32\msra.exe:Zone.Identifier

C:\Windows\System32\mstsc.exe:Zone.Identifier

C:\Windows\System32\mtstocom.exe:Zone.Identifier

C:\Windows\System32\MuiUnattend.exe:Zone.Identifier

C:\Windows\System32\NAPSTAT.EXE:Zone.Identifier

C:\Windows\System32\ndadmin.exe:Zone.Identifier

C:\Windows\System32\net.exe:Zone.Identifier

C:\Windows\System32\net1.exe:Zone.Identifier

C:\Windows\System32\netbtugc.exe:Zone.Identifier

C:\Windows\System32\netiougc.exe:Zone.Identifier

C:\Windows\System32\Netplwiz.exe:Zone.Identifier

C:\Windows\System32\netsh.exe:Zone.Identifier

C:\Windows\System32\NETSTAT.EXE:Zone.Identifier

C:\Windows\System32\newdev.exe:Zone.Identifier

C:\Windows\System32\notepad.exe:Zone.Identifier

C:\Windows\System32\nslookup.exe:Zone.Identifier

C:\Windows\System32\ntkrnlpa.exe:Zone.Identifier

C:\Windows\System32\ntoskrnl.exe:Zone.Identifier

C:\Windows\System32\ntprint.exe:Zone.Identifier

C:\Windows\System32\ocsetup.exe:Zone.Identifier

C:\Windows\System32\odbcad32.exe:Zone.Identifier

C:\Windows\System32\odbcconf.exe:Zone.Identifier

C:\Windows\System32\openfiles.exe:Zone.Identifier

C:\Windows\System32\OptionalFeatures.exe:Zone.Identifier

C:\Windows\System32\osk.exe:Zone.Identifier

C:\Windows\System32\PATHPING.EXE:Zone.Identifier

C:\Windows\System32\pcaui.exe:Zone.Identifier

C:\Windows\System32\perfhost.exe:Zone.Identifier

C:\Windows\System32\perfmon.exe:Zone.Identifier

C:\Windows\System32\PING.EXE:Zone.Identifier

C:\Windows\System32\PkgMgr.exe:Zone.Identifier

C:\Windows\System32\poqexec.exe:Zone.Identifier

C:\Windows\System32\powercfg.exe:Zone.Identifier

C:\Windows\System32\PresentationHost.exe:Zone.Identifier

C:\Windows\System32\prevhost.exe:Zone.Identifier

C:\Windows\System32\print.exe:Zone.Identifier

C:\Windows\System32\printui.exe:Zone.Identifier

C:\Windows\System32\proquota.exe:Zone.Identifier

C:\Windows\System32\psr.exe:Zone.Identifier

C:\Windows\System32\PushPrinterConnections.exe:Zone.Identifier

C:\Windows\System32\rasautou.exe:Zone.Identifier

C:\Windows\System32\rasdial.exe:Zone.Identifier

C:\Windows\System32\raserver.exe:Zone.Identifier

C:\Windows\System32\rasphone.exe:Zone.Identifier

C:\Windows\System32\rdrleakdiag.exe:Zone.Identifier

C:\Windows\System32\ReAgentc.exe:Zone.Identifier

C:\Windows\System32\recover.exe:Zone.Identifier

C:\Windows\System32\reg.exe:Zone.Identifier

C:\Windows\System32\regedit.exe:Zone.Identifier

C:\Windows\System32\regedt32.exe:Zone.Identifier

C:\Windows\System32\regini.exe:Zone.Identifier

C:\Windows\System32\RegisterIEPKEYs.exe:Zone.Identifier

C:\Windows\System32\regsvr32.exe:Zone.Identifier

C:\Windows\System32\rekeywiz.exe:Zone.Identifier

C:\Windows\System32\relog.exe:Zone.Identifier

C:\Windows\System32\replace.exe:Zone.Identifier

C:\Windows\System32\resmon.exe:Zone.Identifier

C:\Windows\System32\RMActivate.exe:Zone.Identifier

C:\Windows\System32\RMActivate_isv.exe:Zone.Identifier

C:\Windows\System32\RMActivate_ssp.exe:Zone.Identifier

C:\Windows\System32\RMActivate_ssp_isv.exe:Zone.Identifier

C:\Windows\System32\RmClient.exe:Zone.Identifier

C:\Windows\System32\Robocopy.exe:Zone.Identifier

C:\Windows\System32\ROUTE.EXE:Zone.Identifier

C:\Windows\System32\RpcPing.exe:Zone.Identifier

C:\Windows\System32\runas.exe:Zone.Identifier

C:\Windows\System32\rundll32.exe:Zone.Identifier

C:\Windows\System32\RunLegacyCPLElevated.exe:Zone.Identifier

C:\Windows\System32\runonce.exe:Zone.Identifier

C:\Windows\System32\sbunattend.exe:Zone.Identifier

C:\Windows\System32\sc.exe:Zone.Identifier

C:\Windows\System32\schtasks.exe:Zone.Identifier

C:\Windows\System32\sdbinst.exe:Zone.Identifier

C:\Windows\System32\sdchange.exe:Zone.Identifier

C:\Windows\System32\sdiagnhost.exe:Zone.Identifier

C:\Windows\System32\SearchFilterHost.exe:Zone.Identifier

C:\Windows\System32\SearchIndexer.exe:Zone.Identifier

C:\Windows\System32\SearchProtocolHost.exe:Zone.Identifier

C:\Windows\System32\SecEdit.exe:Zone.Identifier

C:\Windows\System32\secinit.exe:Zone.Identifier

C:\Windows\System32\sethc.exe:Zone.Identifier

C:\Windows\System32\SetIEInstalledDate.exe:Zone.Identifier

C:\Windows\System32\setup16.exe:Zone.Identifier

C:\Windows\System32\setupSNK.exe:Zone.Identifier

C:\Windows\System32\setupugc.exe:Zone.Identifier

C:\Windows\System32\setx.exe:Zone.Identifier

C:\Windows\System32\sfc.exe:Zone.Identifier

C:\Windows\System32\shrpubw.exe:Zone.Identifier

C:\Windows\System32\shutdown.exe:Zone.Identifier

C:\Windows\System32\SndVol.exe:Zone.Identifier

C:\Windows\System32\sort.exe:Zone.Identifier

C:\Windows\System32\srdelayed.exe:Zone.Identifier

C:\Windows\System32\subst.exe:Zone.Identifier

C:\Windows\System32\svchost.exe:Zone.Identifier

C:\Windows\System32\sxstrace.exe:Zone.Identifier

C:\Windows\System32\SyncHost.exe:Zone.Identifier

C:\Windows\System32\syskey.exe:Zone.Identifier

C:\Windows\System32\systeminfo.exe:Zone.Identifier

C:\Windows\System32\SystemPropertiesAdvanced.exe:Zone.Identifier

C:\Windows\System32\SystemPropertiesComputerName.exe:Zone.Identifier

C:\Windows\System32\SystemPropertiesDataExecutionPrevention.exe:Zone.Identifier

C:\Windows\System32\SystemPropertiesHardware.exe:Zone.Identifier

C:\Windows\System32\SystemPropertiesPerformance.exe:Zone.Identifier

C:\Windows\System32\SystemPropertiesProtection.exe:Zone.Identifier

C:\Windows\System32\SystemPropertiesRemote.exe:Zone.Identifier

C:\Windows\System32\systray.exe:Zone.Identifier

C:\Windows\System32\takeown.exe:Zone.Identifier

C:\Windows\System32\TapiUnattend.exe:Zone.Identifier

C:\Windows\System32\taskeng.exe:Zone.Identifier

C:\Windows\System32\taskkill.exe:Zone.Identifier

C:\Windows\System32\tasklist.exe:Zone.Identifier

C:\Windows\System32\taskmgr.exe:Zone.Identifier

C:\Windows\System32\tcmsetup.exe:Zone.Identifier

C:\Windows\System32\TCPSVCS.EXE:Zone.Identifier

C:\Windows\System32\timeout.exe:Zone.Identifier

C:\Windows\System32\TpmInit.exe:Zone.Identifier

C:\Windows\System32\tracerpt.exe:Zone.Identifier

C:\Windows\System32\TRACERT.EXE:Zone.Identifier

C:\Windows\System32\TSTheme.exe:Zone.Identifier

C:\Windows\System32\TsWpfWrp.exe:Zone.Identifier

C:\Windows\System32\typeperf.exe:Zone.Identifier

C:\Windows\System32\tzutil.exe:Zone.Identifier

C:\Windows\System32\unlodctr.exe:Zone.Identifier

C:\Windows\System32\upnpcont.exe:Zone.Identifier

C:\Windows\System32\user.exe:Zone.Identifier

C:\Windows\System32\UserAccountControlSettings.exe:Zone.Identifier

C:\Windows\System32\userinit.exe:Zone.Identifier

C:\Windows\System32\Utilman.exe:Zone.Identifier

C:\Windows\System32\verclsid.exe:Zone.Identifier

C:\Windows\System32\verifier.exe:Zone.Identifier

C:\Windows\System32\vssadmin.exe:Zone.Identifier

C:\Windows\System32\w32tm.exe:Zone.Identifier

C:\Windows\System32\waitfor.exe:Zone.Identifier

C:\Windows\System32\wbem\mofcomp.exe:Zone.Identifier

C:\Windows\System32\wbem\WinMgmt.exe:Zone.Identifier

C:\Windows\System32\wbem\WMIADAP.exe:Zone.Identifier

C:\Windows\System32\wbem\WMIC.exe:Zone.Identifier

C:\Windows\System32\wbem\WmiPrvSE.exe:Zone.Identifier

C:\Windows\System32\wecutil.exe:Zone.Identifier

C:\Windows\System32\WerFault.exe:Zone.Identifier

C:\Windows\System32\WerFaultSecure.exe:Zone.Identifier

C:\Windows\System32\wermgr.exe:Zone.Identifier

C:\Windows\System32\wevtutil.exe:Zone.Identifier

C:\Windows\System32\wextract.exe:Zone.Identifier

C:\Windows\System32\where.exe:Zone.Identifier

C:\Windows\System32\whoami.exe:Zone.Identifier

C:\Windows\System32\wiaacmgr.exe:Zone.Identifier

C:\Windows\System32\wimserv.exe:Zone.Identifier

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe:Zone.Identifier

C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe:Zone.Identifier

C:\Windows\System32\wininit.exe:Zone.Identifier

C:\Windows\System32\winrs.exe:Zone.Identifier

C:\Windows\System32\winrshost.exe:Zone.Identifier

C:\Windows\System32\winver.exe:Zone.Identifier

C:\Windows\System32\wlanext.exe:Zone.Identifier

C:\Windows\System32\wowreg32.exe:Zone.Identifier

C:\Windows\System32\write.exe:Zone.Identifier

C:\Windows\System32\wscript.exe:Zone.Identifier

C:\Windows\System32\WSManHTTPConfig.exe:Zone.Identifier

C:\Windows\System32\wsmprovhost.exe:Zone.Identifier

C:\Windows\System32\wuapp.exe:Zone.Identifier

C:\Windows\System32\wusa.exe:Zone.Identifier

C:\Windows\System32\xcopy.exe:Zone.Identifier

C:\Windows\System32\xpsrchvw.exe:Zone.Identifier

C:\Windows\System32\xwizard.exe:Zone.Identifier

C:\Windows\SysWOW64\AdapterTroubleshooter.exe:Zone.Identifier

C:\Windows\SysWOW64\ARP.EXE:Zone.Identifier

C:\Windows\SysWOW64\at.exe:Zone.Identifier

C:\Windows\SysWOW64\AtBroker.exe:Zone.Identifier

C:\Windows\SysWOW64\attrib.exe:Zone.Identifier

C:\Windows\SysWOW64\auditpol.exe:Zone.Identifier

C:\Windows\SysWOW64\autochk.exe:Zone.Identifier

C:\Windows\SysWOW64\autoconv.exe:Zone.Identifier

C:\Windows\SysWOW64\autofmt.exe:Zone.Identifier

C:\Windows\SysWOW64\bitsadmin.exe:Zone.Identifier

C:\Windows\SysWOW64\bootcfg.exe:Zone.Identifier

C:\Windows\SysWOW64\bthudtask.exe:Zone.Identifier

C:\Windows\SysWOW64\cacls.exe:Zone.Identifier

C:\Windows\SysWOW64\calc.exe:Zone.Identifier

C:\Windows\SysWOW64\CertEnrollCtrl.exe:Zone.Identifier

C:\Windows\SysWOW64\certreq.exe:Zone.Identifier

C:\Windows\SysWOW64\certutil.exe:Zone.Identifier

C:\Windows\SysWOW64\charmap.exe:Zone.Identifier

C:\Windows\SysWOW64\chkdsk.exe:Zone.Identifier

C:\Windows\SysWOW64\chkntfs.exe:Zone.Identifier

C:\Windows\SysWOW64\choice.exe:Zone.Identifier

C:\Windows\SysWOW64\cipher.exe:Zone.Identifier

C:\Windows\SysWOW64\cleanmgr.exe:Zone.Identifier

C:\Windows\SysWOW64\cliconfg.exe:Zone.Identifier

C:\Windows\SysWOW64\clip.exe:Zone.Identifier

C:\Windows\SysWOW64\cmd.exe:Zone.Identifier

C:\Windows\SysWOW64\cmdkey.exe:Zone.Identifier

C:\Windows\SysWOW64\cmdl32.exe:Zone.Identifier

C:\Windows\SysWOW64\cmmon32.exe:Zone.Identifier

C:\Windows\SysWOW64\cmstp.exe:Zone.Identifier

C:\Windows\SysWOW64\colorcpl.exe:Zone.Identifier

C:\Windows\SysWOW64\com\comrepl.exe:Zone.Identifier

C:\Windows\SysWOW64\com\MigRegDB.exe:Zone.Identifier

C:\Windows\SysWOW64\comp.exe:Zone.Identifier

C:\Windows\SysWOW64\compact.exe:Zone.Identifier

C:\Windows\SysWOW64\ComputerDefaults.exe:Zone.Identifier

C:\Windows\SysWOW64\control.exe:Zone.Identifier

C:\Windows\SysWOW64\convert.exe:Zone.Identifier

C:\Windows\SysWOW64\credwiz.exe:Zone.Identifier

C:\Windows\SysWOW64\cscript.exe:Zone.Identifier

C:\Windows\SysWOW64\ctfmon.exe:Zone.Identifier

C:\Windows\SysWOW64\cttune.exe:Zone.Identifier

C:\Windows\SysWOW64\cttunesvr.exe:Zone.Identifier

C:\Windows\SysWOW64\dccw.exe:Zone.Identifier

C:\Windows\SysWOW64\dcomcnfg.exe:Zone.Identifier

C:\Windows\SysWOW64\ddodiag.exe:Zone.Identifier

C:\Windows\SysWOW64\DevicePairingWizard.exe:Zone.Identifier

C:\Windows\SysWOW64\DeviceProperties.exe:Zone.Identifier

C:\Windows\SysWOW64\dfrgui.exe:Zone.Identifier

C:\Windows\SysWOW64\dialer.exe:Zone.Identifier

C:\Windows\SysWOW64\diantz.exe:Zone.Identifier

C:\Windows\SysWOW64\diskpart.exe:Zone.Identifier

C:\Windows\SysWOW64\diskperf.exe:Zone.Identifier

C:\Windows\SysWOW64\diskraid.exe:Zone.Identifier

C:\Windows\SysWOW64\Dism\DismHost.exe:Zone.Identifier

C:\Windows\SysWOW64\Dism.exe:Zone.Identifier

C:\Windows\SysWOW64\DisplaySwitch.exe:Zone.Identifier

C:\Windows\SysWOW64\dllhost.exe:Zone.Identifier

C:\Windows\SysWOW64\dllhst3g.exe:Zone.Identifier

C:\Windows\SysWOW64\dnscacheugc.exe:Zone.Identifier

C:\Windows\SysWOW64\doskey.exe:Zone.Identifier

C:\Windows\SysWOW64\dpapimig.exe:Zone.Identifier

C:\Windows\SysWOW64\DpiScaling.exe:Zone.Identifier

C:\Windows\SysWOW64\dplaysvr.exe:Zone.Identifier

C:\Windows\SysWOW64\dpnsvr.exe:Zone.Identifier

C:\Windows\SysWOW64\driverquery.exe:Zone.Identifier

C:\Windows\SysWOW64\drvinst.exe:Zone.Identifier

C:\Windows\SysWOW64\dvdplay.exe:Zone.Identifier

C:\Windows\SysWOW64\dvdupgrd.exe:Zone.Identifier

C:\Windows\SysWOW64\DWWIN.EXE:Zone.Identifier

C:\Windows\SysWOW64\dxdiag.exe:Zone.Identifier

C:\Windows\SysWOW64\efsui.exe:Zone.Identifier

C:\Windows\SysWOW64\EhStorAuthn.exe:Zone.Identifier

C:\Windows\SysWOW64\esentutl.exe:Zone.Identifier

C:\Windows\SysWOW64\eudcedit.exe:Zone.Identifier

C:\Windows\SysWOW64\eventcreate.exe:Zone.Identifier

C:\Windows\SysWOW64\eventvwr.exe:Zone.Identifier

C:\Windows\SysWOW64\expand.exe:Zone.Identifier

C:\Windows\SysWOW64\explorer.exe:Zone.Identifier

C:\Windows\SysWOW64\extrac32.exe:Zone.Identifier

C:\Windows\SysWOW64\fc.exe:Zone.Identifier

C:\Windows\SysWOW64\find.exe:Zone.Identifier

C:\Windows\SysWOW64\findstr.exe:Zone.Identifier

C:\Windows\SysWOW64\finger.exe:Zone.Identifier

C:\Windows\SysWOW64\fixmapi.exe:Zone.Identifier

C:\Windows\SysWOW64\fltMC.exe:Zone.Identifier

C:\Windows\SysWOW64\fontview.exe:Zone.Identifier

C:\Windows\SysWOW64\forfiles.exe:Zone.Identifier

C:\Windows\SysWOW64\fsutil.exe:Zone.Identifier

C:\Windows\SysWOW64\ftp.exe:Zone.Identifier

C:\Windows\SysWOW64\getmac.exe:Zone.Identifier

C:\Windows\SysWOW64\gpresult.exe:Zone.Identifier

C:\Windows\SysWOW64\gpscript.exe:Zone.Identifier

C:\Windows\SysWOW64\gpupdate.exe:Zone.Identifier

C:\Windows\SysWOW64\grpconv.exe:Zone.Identifier

C:\Windows\SysWOW64\hdwwiz.exe:Zone.Identifier

C:\Windows\SysWOW64\help.exe:Zone.Identifier

C:\Windows\SysWOW64\hh.exe:Zone.Identifier

C:\Windows\SysWOW64\HOSTNAME.EXE:Zone.Identifier

C:\Windows\SysWOW64\icacls.exe:Zone.Identifier

C:\Windows\SysWOW64\icardagt.exe:Zone.Identifier

C:\Windows\SysWOW64\icsunattend.exe:Zone.Identifier

C:\Windows\SysWOW64\ieUnatt.exe:Zone.Identifier

C:\Windows\SysWOW64\iexpress.exe:Zone.Identifier

C:\Windows\SysWOW64\IME\IMEJP10\IMJPDADM.EXE:Zone.Identifier

C:\Windows\SysWOW64\IME\IMEJP10\IMJPDCT.EXE:Zone.Identifier

C:\Windows\SysWOW64\IME\IMEJP10\IMJPDSVR.EXE:Zone.Identifier

C:\Windows\SysWOW64\IME\IMEJP10\IMJPMGR.EXE:Zone.Identifier

C:\Windows\SysWOW64\IME\IMEJP10\imjppdmg.exe:Zone.Identifier

C:\Windows\SysWOW64\IME\IMEJP10\IMJPUEX.EXE:Zone.Identifier

C:\Windows\SysWOW64\IME\IMEJP10\imjpuexc.exe:Zone.Identifier

C:\Windows\SysWOW64\IME\IMESC5\IMSCPROP.exe:Zone.Identifier

C:\Windows\SysWOW64\IME\IMETC10\IMTCPROP.exe:Zone.Identifier

C:\Windows\SysWOW64\IME\shared\IMCCPHR.exe:Zone.Identifier

C:\Windows\SysWOW64\IME\shared\IMEPADSV.EXE:Zone.Identifier

C:\Windows\SysWOW64\InfDefaultInstall.exe:Zone.Identifier

C:\Windows\SysWOW64\InstallShield\setup.exe:Zone.Identifier

C:\Windows\SysWOW64\InstallShield\_isdel.exe:Zone.Identifier

C:\Windows\SysWOW64\instnm.exe:Zone.Identifier

C:\Windows\SysWOW64\ipconfig.exe:Zone.Identifier

C:\Windows\SysWOW64\iscsicli.exe:Zone.Identifier

C:\Windows\SysWOW64\iscsicpl.exe:Zone.Identifier

C:\Windows\SysWOW64\isoburn.exe:Zone.Identifier

C:\Windows\SysWOW64\ktmutil.exe:Zone.Identifier

C:\Windows\SysWOW64\label.exe:Zone.Identifier

C:\Windows\SysWOW64\LocationNotifications.exe:Zone.Identifier

C:\Windows\SysWOW64\lodctr.exe:Zone.Identifier

C:\Windows\SysWOW64\logman.exe:Zone.Identifier

C:\Windows\SysWOW64\Magnify.exe:Zone.Identifier

C:\Windows\SysWOW64\makecab.exe:Zone.Identifier

C:\Windows\SysWOW64\mcbuilder.exe:Zone.Identifier

C:\Windows\SysWOW64\MigAutoPlay.exe:Zone.Identifier

C:\Windows\SysWOW64\migwiz\mighost.exe:Zone.Identifier

C:\Windows\SysWOW64\migwiz\MigSetup.exe:Zone.Identifier

C:\Windows\SysWOW64\migwiz\migwiz.exe:Zone.Identifier

C:\Windows\SysWOW64\migwiz\PostMig.exe:Zone.Identifier

C:\Windows\SysWOW64\mmc.exe:Zone.Identifier

C:\Windows\SysWOW64\mobsync.exe:Zone.Identifier

C:\Windows\SysWOW64\mountvol.exe:Zone.Identifier

C:\Windows\SysWOW64\MRINFO.EXE:Zone.Identifier

C:\Windows\SysWOW64\msdt.exe:Zone.Identifier

C:\Windows\SysWOW64\msfeedssync.exe:Zone.Identifier

C:\Windows\SysWOW64\mshta.exe:Zone.Identifier

C:\Windows\SysWOW64\msiexec.exe:Zone.Identifier

C:\Windows\SysWOW64\msinfo32.exe:Zone.Identifier

C:\Windows\SysWOW64\mspaint.exe:Zone.Identifier

C:\Windows\SysWOW64\msra.exe:Zone.Identifier

C:\Windows\SysWOW64\mstsc.exe:Zone.Identifier

C:\Windows\SysWOW64\mtstocom.exe:Zone.Identifier

C:\Windows\SysWOW64\MuiUnattend.exe:Zone.Identifier

C:\Windows\SysWOW64\NAPSTAT.EXE:Zone.Identifier

C:\Windows\SysWOW64\ndadmin.exe:Zone.Identifier

C:\Windows\SysWOW64\net.exe:Zone.Identifier

C:\Windows\SysWOW64\net1.exe:Zone.Identifier

C:\Windows\SysWOW64\netbtugc.exe:Zone.Identifier

C:\Windows\SysWOW64\netiougc.exe:Zone.Identifier

C:\Windows\SysWOW64\Netplwiz.exe:Zone.Identifier

C:\Windows\SysWOW64\netsh.exe:Zone.Identifier

C:\Windows\SysWOW64\NETSTAT.EXE:Zone.Identifier

C:\Windows\SysWOW64\newdev.exe:Zone.Identifier

C:\Windows\SysWOW64\notepad.exe:Zone.Identifier

C:\Windows\SysWOW64\nslookup.exe:Zone.Identifier

C:\Windows\SysWOW64\ntkrnlpa.exe:Zone.Identifier

C:\Windows\SysWOW64\ntoskrnl.exe:Zone.Identifier

C:\Windows\SysWOW64\ntprint.exe:Zone.Identifier

C:\Windows\SysWOW64\ocsetup.exe:Zone.Identifier

C:\Windows\SysWOW64\odbcad32.exe:Zone.Identifier

C:\Windows\SysWOW64\odbcconf.exe:Zone.Identifier

C:\Windows\SysWOW64\openfiles.exe:Zone.Identifier

C:\Windows\SysWOW64\OptionalFeatures.exe:Zone.Identifier

C:\Windows\SysWOW64\osk.exe:Zone.Identifier

C:\Windows\SysWOW64\PATHPING.EXE:Zone.Identifier

C:\Windows\SysWOW64\pcaui.exe:Zone.Identifier

C:\Windows\SysWOW64\perfhost.exe:Zone.Identifier

C:\Windows\SysWOW64\perfmon.exe:Zone.Identifier

C:\Windows\SysWOW64\PING.EXE:Zone.Identifier

C:\Windows\SysWOW64\PkgMgr.exe:Zone.Identifier

C:\Windows\SysWOW64\poqexec.exe:Zone.Identifier

C:\Windows\SysWOW64\powercfg.exe:Zone.Identifier

C:\Windows\SysWOW64\PresentationHost.exe:Zone.Identifier

C:\Windows\SysWOW64\prevhost.exe:Zone.Identifier

C:\Windows\SysWOW64\print.exe:Zone.Identifier

C:\Windows\SysWOW64\printui.exe:Zone.Identifier

C:\Windows\SysWOW64\proquota.exe:Zone.Identifier

C:\Windows\SysWOW64\psr.exe:Zone.Identifier

C:\Windows\SysWOW64\PushPrinterConnections.exe:Zone.Identifier

C:\Windows\SysWOW64\rasautou.exe:Zone.Identifier

C:\Windows\SysWOW64\rasdial.exe:Zone.Identifier

C:\Windows\SysWOW64\raserver.exe:Zone.Identifier

C:\Windows\SysWOW64\rasphone.exe:Zone.Identifier

C:\Windows\SysWOW64\rdrleakdiag.exe:Zone.Identifier

C:\Windows\SysWOW64\ReAgentc.exe:Zone.Identifier

C:\Windows\SysWOW64\recover.exe:Zone.Identifier

C:\Windows\SysWOW64\reg.exe:Zone.Identifier

C:\Windows\SysWOW64\regedit.exe:Zone.Identifier

C:\Windows\SysWOW64\regedt32.exe:Zone.Identifier

C:\Windows\SysWOW64\regini.exe:Zone.Identifier

C:\Windows\SysWOW64\RegisterIEPKEYs.exe:Zone.Identifier

C:\Windows\SysWOW64\regsvr32.exe:Zone.Identifier

C:\Windows\SysWOW64\rekeywiz.exe:Zone.Identifier

C:\Windows\SysWOW64\relog.exe:Zone.Identifier

C:\Windows\SysWOW64\replace.exe:Zone.Identifier

C:\Windows\SysWOW64\resmon.exe:Zone.Identifier

C:\Windows\SysWOW64\RMActivate.exe:Zone.Identifier

C:\Windows\SysWOW64\RMActivate_isv.exe:Zone.Identifier

C:\Windows\SysWOW64\RMActivate_ssp.exe:Zone.Identifier

C:\Windows\SysWOW64\RMActivate_ssp_isv.exe:Zone.Identifier

C:\Windows\SysWOW64\RmClient.exe:Zone.Identifier

C:\Windows\SysWOW64\Robocopy.exe:Zone.Identifier

C:\Windows\SysWOW64\ROUTE.EXE:Zone.Identifier

C:\Windows\SysWOW64\RpcPing.exe:Zone.Identifier

C:\Windows\SysWOW64\runas.exe:Zone.Identifier

C:\Windows\SysWOW64\rundll32.exe:Zone.Identifier

C:\Windows\SysWOW64\RunLegacyCPLElevated.exe:Zone.Identifier

C:\Windows\SysWOW64\runonce.exe:Zone.Identifier

C:\Windows\SysWOW64\sbunattend.exe:Zone.Identifier

C:\Windows\SysWOW64\sc.exe:Zone.Identifier

C:\Windows\SysWOW64\schtasks.exe:Zone.Identifier

C:\Windows\SysWOW64\sdbinst.exe:Zone.Identifier

C:\Windows\SysWOW64\sdchange.exe:Zone.Identifier

C:\Windows\SysWOW64\sdiagnhost.exe:Zone.Identifier

C:\Windows\SysWOW64\SearchFilterHost.exe:Zone.Identifier

C:\Windows\SysWOW64\SearchIndexer.exe:Zone.Identifier

C:\Windows\SysWOW64\SearchProtocolHost.exe:Zone.Identifier

C:\Windows\SysWOW64\SecEdit.exe:Zone.Identifier

C:\Windows\SysWOW64\secinit.exe:Zone.Identifier

C:\Windows\SysWOW64\sethc.exe:Zone.Identifier

C:\Windows\SysWOW64\SetIEInstalledDate.exe:Zone.Identifier

C:\Windows\SysWOW64\setup16.exe:Zone.Identifier

C:\Windows\SysWOW64\setupSNK.exe:Zone.Identifier

C:\Windows\SysWOW64\setupugc.exe:Zone.Identifier

C:\Windows\SysWOW64\setx.exe:Zone.Identifier

C:\Windows\SysWOW64\sfc.exe:Zone.Identifier

C:\Windows\SysWOW64\shrpubw.exe:Zone.Identifier

C:\Windows\SysWOW64\shutdown.exe:Zone.Identifier

C:\Windows\SysWOW64\SndVol.exe:Zone.Identifier

C:\Windows\SysWOW64\sort.exe:Zone.Identifier

C:\Windows\SysWOW64\srdelayed.exe:Zone.Identifier

C:\Windows\SysWOW64\subst.exe:Zone.Identifier

C:\Windows\SysWOW64\svchost.exe:Zone.Identifier

C:\Windows\SysWOW64\sxstrace.exe:Zone.Identifier

C:\Windows\SysWOW64\SyncHost.exe:Zone.Identifier

C:\Windows\SysWOW64\syskey.exe:Zone.Identifier

C:\Windows\SysWOW64\systeminfo.exe:Zone.Identifier

C:\Windows\SysWOW64\SystemPropertiesAdvanced.exe:Zone.Identifier

C:\Windows\SysWOW64\SystemPropertiesComputerName.exe:Zone.Identifier

C:\Windows\SysWOW64\SystemPropertiesDataExecutionPrevention.exe:Zone.Identifier

C:\Windows\SysWOW64\SystemPropertiesHardware.exe:Zone.Identifier

C:\Windows\SysWOW64\SystemPropertiesPerformance.exe:Zone.Identifier

C:\Windows\SysWOW64\SystemPropertiesProtection.exe:Zone.Identifier

C:\Windows\SysWOW64\SystemPropertiesRemote.exe:Zone.Identifier

C:\Windows\SysWOW64\systray.exe:Zone.Identifier

C:\Windows\SysWOW64\takeown.exe:Zone.Identifier

C:\Windows\SysWOW64\TapiUnattend.exe:Zone.Identifier

C:\Windows\SysWOW64\taskeng.exe:Zone.Identifier

C:\Windows\SysWOW64\taskkill.exe:Zone.Identifier

C:\Windows\SysWOW64\tasklist.exe:Zone.Identifier

C:\Windows\SysWOW64\taskmgr.exe:Zone.Identifier

C:\Windows\SysWOW64\tcmsetup.exe:Zone.Identifier

C:\Windows\SysWOW64\TCPSVCS.EXE:Zone.Identifier

C:\Windows\SysWOW64\timeout.exe:Zone.Identifier

C:\Windows\SysWOW64\TpmInit.exe:Zone.Identifier

C:\Windows\SysWOW64\tracerpt.exe:Zone.Identifier

C:\Windows\SysWOW64\TRACERT.EXE:Zone.Identifier

C:\Windows\SysWOW64\TSTheme.exe:Zone.Identifier

C:\Windows\SysWOW64\TsWpfWrp.exe:Zone.Identifier

C:\Windows\SysWOW64\typeperf.exe:Zone.Identifier

C:\Windows\SysWOW64\tzutil.exe:Zone.Identifier

C:\Windows\SysWOW64\unlodctr.exe:Zone.Identifier

C:\Windows\SysWOW64\upnpcont.exe:Zone.Identifier

C:\Windows\SysWOW64\user.exe:Zone.Identifier

C:\Windows\SysWOW64\UserAccountControlSettings.exe:Zone.Identifier

C:\Windows\SysWOW64\userinit.exe:Zone.Identifier

C:\Windows\SysWOW64\Utilman.exe:Zone.Identifier

C:\Windows\SysWOW64\verclsid.exe:Zone.Identifier

C:\Windows\SysWOW64\verifier.exe:Zone.Identifier

C:\Windows\SysWOW64\vssadmin.exe:Zone.Identifier

C:\Windows\SysWOW64\w32tm.exe:Zone.Identifier

C:\Windows\SysWOW64\waitfor.exe:Zone.Identifier

C:\Windows\SysWOW64\wbem\mofcomp.exe:Zone.Identifier

C:\Windows\SysWOW64\wbem\WinMgmt.exe:Zone.Identifier

C:\Windows\SysWOW64\wbem\WMIADAP.exe:Zone.Identifier

C:\Windows\SysWOW64\wbem\WMIC.exe:Zone.Identifier

C:\Windows\SysWOW64\wbem\WmiPrvSE.exe:Zone.Identifier

C:\Windows\SysWOW64\wecutil.exe:Zone.Identifier

C:\Windows\SysWOW64\WerFault.exe:Zone.Identifier

C:\Windows\SysWOW64\WerFaultSecure.exe:Zone.Identifier

C:\Windows\SysWOW64\wermgr.exe:Zone.Identifier

C:\Windows\SysWOW64\wevtutil.exe:Zone.Identifier

C:\Windows\SysWOW64\wextract.exe:Zone.Identifier

C:\Windows\SysWOW64\where.exe:Zone.Identifier

C:\Windows\SysWOW64\whoami.exe:Zone.Identifier

C:\Windows\SysWOW64\wiaacmgr.exe:Zone.Identifier

C:\Windows\SysWOW64\wimserv.exe:Zone.Identifier

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe:Zone.Identifier

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe:Zone.Identifier

C:\Windows\SysWOW64\wininit.exe:Zone.Identifier

C:\Windows\SysWOW64\winrs.exe:Zone.Identifier

C:\Windows\SysWOW64\winrshost.exe:Zone.Identifier

C:\Windows\SysWOW64\winver.exe:Zone.Identifier

C:\Windows\SysWOW64\wlanext.exe:Zone.Identifier

C:\Windows\SysWOW64\wowreg32.exe:Zone.Identifier

C:\Windows\SysWOW64\write.exe:Zone.Identifier

C:\Windows\SysWOW64\wscript.exe:Zone.Identifier

C:\Windows\SysWOW64\WSManHTTPConfig.exe:Zone.Identifier

C:\Windows\SysWOW64\wsmprovhost.exe:Zone.Identifier

C:\Windows\SysWOW64\wuapp.exe:Zone.Identifier

C:\Windows\SysWOW64\wusa.exe:Zone.Identifier

C:\Windows\SysWOW64\xcopy.exe:Zone.Identifier

C:\Windows\SysWOW64\xpsrchvw.exe:Zone.Identifier

C:\Windows\SysWOW64\xwizard.exe:Zone.Identifier

C:\Windows\twunk_16.exe:Zone.Identifier

C:\Windows\twunk_32.exe:Zone.Identifier

C:\Windows\winhlp32.exe:Zone.Identifier

C:\Windows\winsxs\amd64_addinprocess32_b77a5c561934e089_6.1.7601.17514_none_df35b5ac03866e22\AddInProcess32.exe:Zone.Identifier

C:\Windows\winsxs\amd64_aspnet_compiler_b03f5f7f11d50a3a_6.1.7600.16385_none_a5a135380060b978\aspnet_compiler.exe:Zone.Identifier

C:\Windows\winsxs\amd64_aspnet_compiler_b03f5f7f11d50a3a_6.1.7601.18410_none_a5769fe600b79680\aspnet_compiler.exe:Zone.Identifier

C:\Windows\winsxs\amd64_aspnet_compiler_b03f5f7f11d50a3a_6.1.7601.22617_none_8ea8598a1a5faa3e\aspnet_compiler.exe:Zone.Identifier

C:\Windows\winsxs\amd64_aspnet_regbrowsers_b03f5f7f11d50a3a_6.1.7600.16385_none_96421d40c0e2903e\aspnet_regbrowsers.exe:Zone.Identifier

C:\Windows\winsxs\amd64_aspnet_regbrowsers_b03f5f7f11d50a3a_6.1.7601.18410_none_961787eec1396d46\aspnet_regbrowsers.exe:Zone.Identifier

C:\Windows\winsxs\amd64_aspnet_regbrowsers_b03f5f7f11d50a3a_6.1.7601.22617_none_7f494192dae18104\aspnet_regbrowsers.exe:Zone.Identifier

C:\Windows\winsxs\amd64_aspnet_regsql_b03f5f7f11d50a3a_6.1.7600.16385_none_dcb42ec76404494f\aspnet_regsql.exe:Zone.Identifier

C:\Windows\winsxs\amd64_aspnet_regsql_b03f5f7f11d50a3a_6.1.7601.18410_none_dc899975645b2657\aspnet_regsql.exe:Zone.Identifier

C:\Windows\winsxs\amd64_aspnet_regsql_b03f5f7f11d50a3a_6.1.7601.22617_none_c5bb53197e033a15\aspnet_regsql.exe:Zone.Identifier

C:\Windows\winsxs\amd64_brmfcmf.inf_31bf3856ad364e35_6.1.7600.16385_none_6f8740b92fea8e01\BrmfRsmg.exe:Zone.Identifier

C:\Windows\winsxs\amd64_brmfcwia.inf_31bf3856ad364e35_6.1.7600.16385_none_11493a3982b640b7\BrmfRsmg.exe:Zone.Identifier

C:\Windows\winsxs\amd64_bth.inf_31bf3856ad364e35_6.1.7601.17514_none_d06ac9aad230c1d6\fsquirt.exe:Zone.Identifier

C:\Windows\winsxs\amd64_caspol_b03f5f7f11d50a3a_6.1.7601.17514_none_f885d1129806720d\CasPol.exe:Zone.Identifier

C:\Windows\winsxs\amd64_caspol_b03f5f7f11d50a3a_6.1.7601.18523_none_f886ea0a98056eea\CasPol.exe:Zone.Identifier

C:\Windows\winsxs\amd64_caspol_b03f5f7f11d50a3a_6.1.7601.22733_none_e1ba4370b1abe898\CasPol.exe:Zone.Identifier

C:\Windows\winsxs\amd64_divacx64.inf_31bf3856ad364e35_6.1.7600.16385_none_cf37cc4c5bc25dc7\ditrace.exe:Zone.Identifier

C:\Windows\winsxs\amd64_divacx64.inf_31bf3856ad364e35_6.1.7600.16385_none_cf37cc4c5bc25dc7\xlog.exe:Zone.Identifier

C:\Windows\winsxs\amd64_eventviewersettings_31bf3856ad364e35_6.1.7600.16385_none_50ecc9ae1d642aa9\eventvwr.exe:Zone.Identifier

C:\Windows\winsxs\amd64_infocard_b77a5c561934e089_6.1.7601.17514_none_583a8c60c0b305a1\infocard.exe:Zone.Identifier

C:\Windows\winsxs\amd64_infocard_b77a5c561934e089_6.1.7601.18523_none_583ba558c0b2027e\infocard.exe:Zone.Identifier

C:\Windows\winsxs\amd64_infocard_b77a5c561934e089_6.1.7601.22733_none_416efebeda587c2c\infocard.exe:Zone.Identifier

C:\Windows\winsxs\amd64_installutil_b03f5f7f11d50a3a_6.1.7601.17514_none_0826be6cc9481df4\InstallUtil.exe:Zone.Identifier

C:\Windows\winsxs\amd64_installutil_b03f5f7f11d50a3a_6.1.7601.18523_none_0827d764c9471ad1\InstallUtil.exe:Zone.Identifier

C:\Windows\winsxs\amd64_installutil_b03f5f7f11d50a3a_6.1.7601.22733_none_f15b30cae2ed947f\InstallUtil.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.1.7600.16385_none_ddf6cb6d7a745cbf\pcaui.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-a..atibility-assistant_31bf3856ad364e35_6.1.7600.16385_none_8fbb77bb3cd808d1\pcalua.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-a..atibility-assistant_31bf3856ad364e35_6.1.7600.16385_none_8fbb77bb3cd808d1\pcawrk.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-a..atibility-assistant_31bf3856ad364e35_6.1.7601.18741_none_91c907e539e1a828\pcalua.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-a..atibility-assistant_31bf3856ad364e35_6.1.7601.18741_none_91c907e539e1a828\pcawrk.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-a..atibility-assistant_31bf3856ad364e35_6.1.7601.22948_none_9259a89c52f8f67a\pcalua.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-a..atibility-assistant_31bf3856ad364e35_6.1.7601.22948_none_9259a89c52f8f67a\pcawrk.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-a..ce-useractionrecord_31bf3856ad364e35_6.1.7600.16385_none_8ee34c400d95f0ab\psr.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-a..ence-infrastructure_31bf3856ad364e35_6.1.7601.17514_none_3337092d63596104\sdbinst.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-a..ime-upgrade-results_31bf3856ad364e35_6.1.7601.17514_none_21de7e134213566a\WindowsAnytimeUpgradeResults.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-a..ion-telemetry-agent_31bf3856ad364e35_6.1.7601.17514_none_3092574c7d41010b\aitagent.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-acluifilefoldercomtool_31bf3856ad364e35_6.1.7600.16385_none_b444164f1eecd3f2\cacls.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-adaptertroubleshooter_31bf3856ad364e35_6.1.7600.16385_none_2df6395b9cf7e9a5\AdapterTroubleshooter.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-alg_31bf3856ad364e35_6.1.7600.16385_none_04de43c774cf8fe3\alg.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-anytime-upgradeui_31bf3856ad364e35_6.1.7600.16385_none_4aadf3be188c056d\WindowsAnytimeUpgradeui.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-anytime-upgrade_31bf3856ad364e35_6.1.7600.16385_none_fb591b6cf023ade3\WindowsAnytimeUpgrade.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.17514_none_b57215bac8c6d647\appidcertstorecheck.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.17514_none_b57215bac8c6d647\appidpolicyconverter.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.18741_none_b54e921cc8e1f204\appidcertstorecheck.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.18741_none_b54e921cc8e1f204\appidpolicyconverter.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22436_none_b5e7f8ade1f2fff4\appidcertstorecheck.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22436_none_b5e7f8ade1f2fff4\appidpolicyconverter.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22653_none_b5cf5bc3e205e61f\appidcertstorecheck.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22653_none_b5cf5bc3e205e61f\appidpolicyconverter.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22921_none_b5edd0a5e1ef5713\appidcertstorecheck.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22921_none_b5edd0a5e1ef5713\appidpolicyconverter.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22923_none_b5efd139e1ed89c1\appidcertstorecheck.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22923_none_b5efd139e1ed89c1\appidpolicyconverter.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22948_none_b5df32d3e1f94056\appidcertstorecheck.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22948_none_b5df32d3e1f94056\appidpolicyconverter.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.23002_none_b60448e9e1de6bca\appidcertstorecheck.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.23002_none_b60448e9e1de6bca\appidpolicyconverter.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-atbroker_31bf3856ad364e35_6.1.7600.16385_none_2b95a17838063e9b\AtBroker.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-at_31bf3856ad364e35_6.1.7600.16385_none_a8f696109d958c5c\at.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-audio-audiocore_31bf3856ad364e35_6.1.7601.17514_none_d4c5c995fb3f4a1b\audiodg.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-audio-audiocore_31bf3856ad364e35_6.1.7601.18619_none_d4cab625fb3adf96\audiodg.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-audio-audiocore_31bf3856ad364e35_6.1.7601.18741_none_d4a245f7fb5a65d8\audiodg.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-audio-audiocore_31bf3856ad364e35_6.1.7601.22826_none_d546840d14634c73\audiodg.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-audio-audiocore_31bf3856ad364e35_6.1.7601.22948_none_d532e6af1471b42a\audiodg.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-audio-volumecontrol_31bf3856ad364e35_6.1.7601.17514_none_244e76d61e1989e5\SndVol.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-authentication-logonui_31bf3856ad364e35_6.1.7601.17514_none_c3b917fd89d834f3\LogonUI.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-autochkconfigurator_31bf3856ad364e35_6.1.7600.16385_none_74b76d3fa1757c6f\chkntfs.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_4019f2b8d860ad30\autochk.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-autofmt_31bf3856ad364e35_6.1.7601.17514_none_441a424cd5cda219\autofmt.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-axinstallservice_31bf3856ad364e35_6.1.7601.17514_none_352b5454878cd498\AxInstUI.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.17514_none_c75e9c99a36a285a\winload.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.17514_none_c75e9c99a36a285a\winresume.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.17556_none_c7355d7da388cacc\winload.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.17556_none_c7355d7da388cacc\winresume.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.18741_none_c73b18fba3854417\winload.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.18741_none_c73b18fba3854417\winresume.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.21655_none_c7bdf9febca7513f\winload.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.21655_none_c7bdf9febca7513f\winresume.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.22921_none_c7da5784bc92a926\winload.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.22921_none_c7da5784bc92a926\winresume.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.22923_none_c7dc5818bc90dbd4\winload.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.22923_none_c7dc5818bc90dbd4\winresume.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.22948_none_c7cbb9b2bc9c9269\winload.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.22948_none_c7cbb9b2bc9c9269\winresume.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.23002_none_c7f0cfc8bc81bddd\winload.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.1.7601.23002_none_c7f0cfc8bc81bddd\winresume.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-b..iondata-cmdlinetool_31bf3856ad364e35_6.1.7601.17514_none_e6510234bbcb2a8c\bcdedit.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_b94cbfa183466a89\winload.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_b94cbfa183466a89\winresume.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb\winload.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb\winresume.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.18741_none_b9293c0383618646\winload.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.18741_none_b9293c0383618646\winresume.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.21655_none_b9ac1d069c83936e\winload.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.21655_none_b9ac1d069c83936e\winresume.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22921_none_b9c87a8c9c6eeb55\winload.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22921_none_b9c87a8c9c6eeb55\winresume.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22923_none_b9ca7b209c6d1e03\winload.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22923_none_b9ca7b209c6d1e03\winresume.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22948_none_b9b9dcba9c78d498\winload.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22948_none_b9b9dcba9c78d498\winresume.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23002_none_b9def2d09c5e000c\winload.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23002_none_b9def2d09c5e000c\winresume.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-b..vironment-servicing_31bf3856ad364e35_6.1.7601.17514_none_843a86a1bc33fcd1\bfsvc.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-basic-misc-tools_31bf3856ad364e35_6.1.7600.16385_none_7351a917d91c961e\expand.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-bcdboot-cmdlinetool_31bf3856ad364e35_6.1.7601.17514_none_bf7bea0454c3f0cf\bcdboot.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-bits-bitsadmin_31bf3856ad364e35_6.1.7601.17514_none_ab379671230b963f\bitsadmin.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-blb-cli-main_31bf3856ad364e35_6.1.7600.16385_none_a749cec7a8b6bf08\wbadmin.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-blb-engine-main_31bf3856ad364e35_6.1.7601.17514_none_4207fb67165f731a\wbengine.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-bootconfig_31bf3856ad364e35_6.1.7600.16385_none_680b6eb133f91b1b\bootcfg.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-bth-user_31bf3856ad364e35_6.1.7601.17514_none_c33f455aebcd9dbb\bthudtask.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-c..mplus-admin-comrepl_31bf3856ad364e35_6.1.7600.16385_none_45fe6fe8a9201e55\comrepl.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-c..plus-setup-migregdb_31bf3856ad364e35_6.1.7600.16385_none_8945930a7d61b9f0\MigRegDB.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-c..utermanagerlauncher_31bf3856ad364e35_6.1.7600.16385_none_ea0a643b0e032c19\CompMgmtLauncher.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-calc_31bf3856ad364e35_6.1.7600.16385_none_05b2f2e2346cfea4\calc.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-certificaterequesttool_31bf3856ad364e35_6.1.7600.16385_none_c405852b31194b0b\certreq.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-certutil_31bf3856ad364e35_6.1.7600.16385_none_1179f9944d0d9973\certutil.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-certutil_31bf3856ad364e35_6.1.7601.18151_none_137cae6e4a1f65d1\certutil.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-certutil_31bf3856ad364e35_6.1.7601.22322_none_1427bd2d6323c846\certutil.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-charmap_31bf3856ad364e35_6.1.7600.16385_none_4e4eaf05be0c2d8f\charmap.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-chkdsk_31bf3856ad364e35_6.1.7600.16385_none_1ddb4b87a6618437\chkdsk.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-choice_31bf3856ad364e35_6.1.7601.17514_none_218cf07ba262766c\choice.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-cipher_31bf3856ad364e35_6.1.7600.16385_none_090b7101bec9a9e2\cipher.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-cleanmgr_31bf3856ad364e35_6.1.7600.16385_none_c9392808773cd7da\cleanmgr.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-clip_31bf3856ad364e35_6.1.7600.16385_none_03d0d3c435b27637\clip.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-com-complus-setup_31bf3856ad364e35_6.1.7600.16385_none_459ccaf008ff34f6\mtstocom.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-com-complus-ui_31bf3856ad364e35_6.1.7600.16385_none_0c9cb55c61e99805\dcomcnfg.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-com-dtc-runtime_31bf3856ad364e35_6.1.7600.16385_none_7547f48c79b40229\msdtc.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-com-surrogate_31bf3856ad364e35_6.1.7600.16385_none_a018e05d0d33081d\dllhost.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-com-surrogate_31bf3856ad364e35_6.1.7600.16385_none_a018e05d0d33081d\dllhst3g.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-commandlinehelp_31bf3856ad364e35_6.1.7600.16385_none_3020274b22e8a90f\help.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-commandprompt_31bf3856ad364e35_6.1.7601.17514_none_e932cc2c30fc13b0\cmd.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-compact_31bf3856ad364e35_6.1.7600.16385_none_55ea2c71cf438ffc\compact.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-computerdefaults_31bf3856ad364e35_6.1.7600.16385_none_626b9352dcfa715c\ComputerDefaults.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.17514_none_d281ccc018b94ff4\conhost.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.17625_none_d277ff0418c08263\conhost.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.17932_none_d26a33ec18cb49c4\conhost.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.17965_none_d24cc50618e0e99c\conhost.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.18015_none_d282acc418b89129\conhost.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.18229_none_d27be1cc18bd0cc4\conhost.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.18798_none_d22f3b8c18f6a8c7\conhost.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.18847_none_d2644cc418cf00e2\conhost.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.21738_none_d2f9ccc131e38a23\conhost.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.22091_none_d2b1c721321aadf8\conhost.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.22125_none_d30179a331de4ce4\conhost.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.22436_none_d2f7afb331e579a1\conhost.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.22653_none_d2df12c931f85fcc\conhost.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.23002_none_d313ffef31d0e577\conhost.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.23049_none_d2efc24531eb069c\conhost.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-control_31bf3856ad364e35_6.1.7600.16385_none_f560eae4c42edb14\control.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-convert_31bf3856ad364e35_6.1.7601.17514_none_fafb502abef1be40\autoconv.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-convert_31bf3856ad364e35_6.1.7601.17514_none_fafb502abef1be40\convert.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.1.7601.17514_none_d527b0a5438b8346\drvinst.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.1.7601.17621_none_d519e1c143965059\drvinst.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.1.7601.21733_none_d59aaf345cba3ec2\drvinst.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-corruptedfilerecovery_31bf3856ad364e35_6.1.7600.16385_none_e3aea9874278550c\cofire.exe:Zone.Identifier

C:\Windows\winsxs\amd64_microsoft-windows-credwiz_31bf3856ad364e35_6.1.7600.16385_none_fbcfa2528586252f\credwiz.exe:Zone.Identifier

C:\Users\win7\AppData\Local\Temp\is-PJ97L.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-PJ97L.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-PJ97L.tmp\_isetup\_shfoldr.dll

\\?\C:\Users\win7\AppData\Local\SlimWare Utilities Inc\SlimCleaner Plus\Logs\Debugging.log

C:\Users\win7\AppData\Local\SlimWare Utilities Inc\SlimCleaner Plus\Logs\CEF-Debugging.log

C:\Windows\system32\icudt46l.dat

C:\SAMPLE

C:\USERS\WIN7\APPDATA\LOCAL\.#\MBX@250@28F7E0.###

C:\USERS\WIN7\APPDATA\LOCAL\.#\MBX@250@28F610.###

C:\USERS\WIN7\APPDATA\LOCAL\.#\MBX@250@28E540.###

C:\USERS\WIN7\APPDATA\LOCAL\.#\MBX@250@28E550.###

C:\sample-up.txt

C:\Users\win7\AppData\Local\Temp\VSD7F1.tmp\dotnetfx\dotnetchk.exe.config

C:\Users\win7\AppData\Local\Temp\CR_7EA0A.tmp\CHROME_PATCH.PACKED.7Z

C:\Users\win7\AppData\Local\Temp\CR_7EA0A.tmp\SETUP_PATCH.PACKED.7Z

C:\Users\win7\AppData\Local\Temp\nss55EB.tmp

C:\Users\win7\AppData\Local\Temp\nsu5948.tmp\nsExec.dll

C:\Users\win7\AppData\Local\Temp\nsu5948.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\ADDH11-RePack\Acronis\DiskDirector\autopart.exe

C:\Users\win7\AppData\Local\Temp\ADDH11-RePack

C:\Users\win7\AppData\Local\Temp\ADDH11-RePack\ADDH.msi

C:\ProgramData\65ad47d7-2e27-4a5c-b238-26643fdaeb98\temp

C:\Users\win7\AppData\Local\Temp\Cab6C9F.tmp

C:\Users\win7\AppData\Local\Temp\Tar6CA0.tmp

C:\Windows\Performance\WinSAT\winsat.log

C:\Users\win7\AppData\Local\Temp\is-NOOGQ.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-NOOGQ.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\gtapi.dll

C:\sample:Zone.Identifier

C:\Users\win7\Documents\Workspace Logs\sample.log

C:\Users\win7\AppData\Local\Temp\ca6NZ.cir

C:\Users\win7\AppData\Local\offsync\pairs4a.dat

C:\Users\win7\AppData\Local\Temp\Cab9D7.tmp

C:\Users\win7\AppData\Local\Temp\Tar9D8.tmp

C:\Users\win7\AppData\Local\Temp\nsaADB9.tmp

C:\Users\win7\AppData\Local\Temp\is-KPCK7.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-KPCK7.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\WIN7-PC-20160406-2306.log

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\BN4ZCNYC.txt

C:\Users\win7\AppData\Local\Microsoft\Office\16.0\sample_Rules.xml

C:\Users\win7\AppData\Local\Temp\OfficeC2R6299A33E-1B9A-4EE1-98BC-7DB5099D2A1C\v32.cab

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7396C420A8E1BC1DA97F1AF0D10BAD21

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7396C420A8E1BC1DA97F1AF0D10BAD21

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F90F18257CBB4D84216AC1E1F3BB2C76

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F90F18257CBB4D84216AC1E1F3BB2C76

C:\Users\win7\AppData\Local\Temp\OFFICE~1\v32.cab

C:\Users\win7\AppData\Local\Temp\OfficeC2R6299A33E-1B9A-4EE1-98BC-7DB5099D2A1COfficeC2R882E4F08-3E52-4A10-BA55-0584395D52FE\v32.hash

C:\Users\win7\AppData\Local\Temp\OfficeC2R6299A33E-1B9A-4EE1-98BC-7DB5099D2A1COfficeC2R882E4F08-3E52-4A10-BA55-0584395D52FE\VersionDescriptor.xml

C:\Users\win7\AppData\Local\Temp\OfficeC2R6299A33E-1B9A-4EE1-98BC-7DB5099D2A1C\VersionDescriptor.xml

C:\Users\win7\AppData\Local\Temp\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\.ba1\wixstdba.dll

C:\Users\win7\AppData\Local\Temp\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\.ba1\1028\license.rtf

C:\Users\win7\AppData\Local\Temp\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\.ba1\1029\license.rtf

C:\Users\win7\AppData\Local\Temp\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\.ba1\1031\license.rtf

C:\Users\win7\AppData\Local\Temp\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\.ba1\1036\license.rtf

C:\Users\win7\AppData\Local\Temp\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\.ba1\1040\license.rtf

C:\Users\win7\AppData\Local\Temp\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\.ba1\1041\license.rtf

C:\Users\win7\AppData\Local\Temp\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\.ba1\1042\license.rtf

C:\Users\win7\AppData\Local\Temp\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\.ba1\1045\license.rtf

C:\Users\win7\AppData\Local\Temp\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\.ba1\1046\license.rtf

C:\Users\win7\AppData\Local\Temp\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\.ba1\1049\license.rtf

C:\Users\win7\AppData\Local\Temp\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\.ba1\1055\license.rtf

C:\Users\win7\AppData\Local\Temp\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\.ba1\2052\license.rtf

C:\Users\win7\AppData\Local\Temp\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\.ba1\3082\license.rtf

C:\Users\win7\AppData\Local\Temp\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\.ba1\thm.xml

C:\Users\win7\AppData\Local\Temp\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\.ba1\thm.wxl

C:\Users\win7\AppData\Local\Temp\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\.ba1\logo.png

C:\Users\win7\AppData\Local\Temp\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\.ba1\license.rtf

C:\Users\win7\AppData\Local\Temp\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\.ba1\1028\thm.wxl

C:\Users\win7\AppData\Local\Temp\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\.ba1\1029\thm.wxl

C:\Users\win7\AppData\Local\Temp\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\.ba1\1031\thm.wxl

C:\Users\win7\AppData\Local\Temp\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\.ba1\1036\thm.wxl

C:\Users\win7\AppData\Local\Temp\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\.ba1\1040\thm.wxl

C:\Users\win7\AppData\Local\Temp\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\.ba1\1041\thm.wxl

C:\Users\win7\AppData\Local\Temp\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\.ba1\1042\thm.wxl

C:\Users\win7\AppData\Local\Temp\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\.ba1\1045\thm.wxl

C:\Users\win7\AppData\Local\Temp\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\.ba1\1046\thm.wxl

C:\Users\win7\AppData\Local\Temp\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\.ba1\1049\thm.wxl

C:\Users\win7\AppData\Local\Temp\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\.ba1\1055\thm.wxl

C:\Users\win7\AppData\Local\Temp\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\.ba1\2052\thm.wxl

C:\Users\win7\AppData\Local\Temp\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\.ba1\3082\thm.wxl

C:\Users\win7\AppData\Local\Temp\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\.ba1\BootstrapperApplicationData.xml

C:\Users\win7\AppData\Local\Temp\dd_vcredist_x86_20160406232437.log

\\.\pipe\BurnPipe.{390383CD-9143-4AF7-93C1-CCA8B896C1E9}

C:\Users\win7\AppData\Local\Temp\Setup_20160406232437_Failed.txt

C:\Users\win7\AppData\Roaming\IsMyHdOK\IsMyHdOK.ini

C:\Users\win7\AppData\Local\Temp\is-BFDFO.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-BFDFO.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\{e6171278-8759-449d-9e0b-c1825debc2ad}\.ba1\wixstdba.dll

C:\Users\win7\AppData\Local\Temp\{e6171278-8759-449d-9e0b-c1825debc2ad}\.ba1\thm.xml

C:\Users\win7\AppData\Local\Temp\{e6171278-8759-449d-9e0b-c1825debc2ad}\.ba1\thm.wxl

C:\Users\win7\AppData\Local\Temp\{e6171278-8759-449d-9e0b-c1825debc2ad}\.ba1\logo.png

C:\Users\win7\AppData\Local\Temp\{e6171278-8759-449d-9e0b-c1825debc2ad}\.ba1\license.rtf

C:\Users\win7\AppData\Local\Temp\{e6171278-8759-449d-9e0b-c1825debc2ad}\.ba1\BootstrapperApplicationData.xml

C:\Users\win7\AppData\Local\Temp\RealDownloader_20160407000228.log

C:\ProgramData\Package Cache\{e6171278-8759-449d-9e0b-c1825debc2ad}\state.rsm

C:\ProgramData\Package Cache\{AAECF7BA-E83B-4A10-87EA-DE0B333F8734}v10.0\Microsoft.VC100.CRT.x86.msi

C:\ProgramData\Package Cache\.unverified\Microsoft.VC100.CRT.x86.msi

C:\ProgramData\Package Cache\{FBEFDC9E-F8FB-4B66-A78B-09B7B380D59D}v17.0.15.7\RealDownloader2.msi

C:\ProgramData\Package Cache\.unverified\RealDownloader2.msi

C:\Users\win7\AppData\Local\Temp\{e6171278-8759-449d-9e0b-c1825debc2ad}\.be\Setup.exe

C:\Users\win7\AppData\Local\Temp\{e6171278-8759-449d-9e0b-c1825debc2ad}\Microsoft.VC100.CRT.x86.msi

C:\Users\win7\AppData\Local\Temp\{e6171278-8759-449d-9e0b-c1825debc2ad}\RealDownloader2.msi

C:\Users\win7\AppData\Local\Temp\{e6171278-8759-449d-9e0b-c1825debc2ad}\VideoDownloader.msi

C:\Users\win7\AppData\Local\Temp\is-DDN2T.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-DDN2T.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-DDN2T.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nsbFD58.tmp

C:\Users\win7\AppData\Local\Temp\nsmFDE6.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\is-J114P.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-J114P.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-J114P.tmp\_isetup\_shfoldr.dll

\\.\PhysicalDrive1

\\.\PhysicalDrive2

\\.\PhysicalDrive3

\\.\PhysicalDrive4

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\dnserrordiagoff[1]

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\NewErrorPageTemplate[1]

C:\WINDOWS\FONTS\SEGOEUIL.TTF

C:\ProgramData\ashampoo\drivers\driverdatabase.xml

C:\Users\win7\AppData\Local\ashampoo\drivers\driverdatabase.xml

C:\Users\win7\AppData\Local\Temp\is-SO3SR.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-SO3SR.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-SO3SR.tmp\is-5T8A7.tmp

C:\Users\win7\AppData\Local\Temp\is-SO3SR.tmp\is-S3LT7.tmp

C:\Users\win7\AppData\Local\Temp\is-SO3SR.tmp\is-0RNDG.tmp

C:\Users\win7\AppData\Local\Temp\is-SO3SR.tmp\is-84QL8.tmp

C:\Users\win7\AppData\Local\Temp\is-SO3SR.tmp\is-G4TB4.tmp

C:\Users\win7\AppData\Local\Temp\is-SO3SR.tmp\is-VPF4O.tmp

C:\Users\win7\AppData\Local\Temp\is-SO3SR.tmp\is-8P628.tmp

C:\Users\win7\AppData\Local\Temp\is-SO3SR.tmp\is-APM7S.tmp

C:\Users\win7\AppData\Local\Temp\is-SO3SR.tmp\is-I02VB.tmp

C:\Users\win7\AppData\Local\Temp\is-SO3SR.tmp\is-IMLSU.tmp

C:\ProgramData\9a4b8b26-f4e0-4529-a5b4-93ec828f7e42\temp

\AICommand.bat

C:\AICommand.bat

C:\Data\settings.dat

C:\Firefox\Extension\install.rdf

C:\sample.tlb

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Default\Preferences

C:\ProgramData\219d5106-5a99-41fd-b942-db6b503b0178\temp

C:\Users\win7\AppData\Local\Temp\E1DA.tmp\hale.cmd

godo.cmd

hash.cmd

icsm.dll

intv.cmd

lhed.cmd

mtmp.cmd

ownc.cmd

pendx.cmd

plat.cmd

plog.cmd

postw.cmd

radd.cmd

setv.cmd

tick.cmd

town.cmd

tran.cmd

undo.cmd

wac32.dll

wac64.dll

wiv32.dll

wiv64.dll

wla32.dll

wla64.dll

wslmt.dll

arch.cmd

bump.exe

crc32.exe

flick.exe

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\140B4CDED8ED877CDC65B54BA965BD39

C:\config\product.ini

C:\Users\win7\AppData\Local\Temp\install.log

C:\Config\NLS\LangConv.ini

C:\Config\NLS\en.nls

C:\Config\NLS\Common.nls

C:\Config\NLS\OEM.nls

C:\Users\win7\AppData\Local\Temp\nsy3DDF.tmp

C:\Users\win7\AppData\Local\Temp\nso3DF0.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nso3DF0.tmp\ioSpecial.ini

C:\Users\win7\AppData\Local\Temp\nso3DF0.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nso3DF0.tmp\modern-header.bmp

C:\Users\win7\AppData\Local\Temp\nso3DF0.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nso3DF0.tmp\StartMenu.dll

C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\GVP00001\www.orkut.com\gtalksettings.sol

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\win7@google[1].txt

\\?\C:\Users\win7\AppData\Local\Google\Google Talk\avatars\avatars.txt

\\?\C:\.ini

C://Logs/.log

\\?\C:\res

C:\Users\win7\AppData\Local\Temp\nsy3962.tmp\registry.dll

C:\Users\win7\AppData\Local\Temp\nsy3962.tmp\customPage002.ini

C:\Users\win7\AppData\Local\Temp\nsy3962.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nsy3962.tmp\ioSpecial.ini

C:\Users\win7\AppData\Local\Temp\nsy3962.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nsy3962.tmp\modern-header.bmp

C:\Users\win7\AppData\Local\Temp\nsy3962.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nsy3962.tmp\KillProcDLL.dll

C:\Users\win7\AppData\Local\Temp\nsaAA69.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsr3C2E.tmp

C:\Users\win7\AppData\Local\Temp\nsh3CDB.tmp\System.dll

c:\sample.dat

c:\sample

C:\ProgramData\{484f1976-e99b-ae5b-484f-f1976e9965db}\sample

C:\ProgramData\{484f1976-e99b-ae5b-484f-f1976e9965db}\sample.dat

C:\Windows\Tasks\NeonGlow.job

C:\Users\win7\AppData\Local\Temp\nsv4614.tmp

C:\Users\win7\AppData\Local\Temp\nsl4625.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\nsl4625.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsl4625.tmp\modern-header.bmp

C:\Users\win7\AppData\Local\Temp\nsl4625.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nsl4625.tmp\nsDialogs.dll

C:\Windows\TIMIDITY.CFG

C:\TIMIDITY.CFG

C:\Users\win7\AppData\Local\Temp\CABINET.DLL

C:\Users\win7\AppData\Local\Temp\Cab94C3.tmp

C:\Users\win7\AppData\Local\Temp\Tar94C4.tmp

C:\Users\win7\AppData\Local\Temp\{419280CA-C520-425D-AC0A-E5BC4EFBF810}\fpb.tmp

C:\Users\win7\AppData\Local\Temp\{751F51AF-F47E-49A8-B05E-0D0463F62F92}\fpb.tmp

C:\Windows\SysWOW64\Macromed\Flash\mms.cfg

C:\Windows\SysWOW64\mms.cfg

C:\Users\win7\AppData\Roaming\Garmin\Map Update\NETInstall.txt

C:\Windows\system32\logo.png

logo.png

C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll

nul

C:\uninstall.lng

Uninstall.lst

C:\Users\win7\AppData\Local\Temp\is-F1N54.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-F1N54.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-F1N54.tmp\OCSetupHlp.dll

C\aped

C:\Users\win7\AppData\Local\Temp\WIN7-PC-20160407-1421.log

C:\Users\win7\AppData\Local\Temp\OfficeC2R0F488821-BA41-4F18-9D81-99A4773C22EF\v32.cab

C:\Users\win7\AppData\Local\Temp\OfficeC2R0F488821-BA41-4F18-9D81-99A4773C22EFOfficeC2R65F089D7-5AA4-480B-AEAE-CC2E50469B93\v32.hash

C:\Users\win7\AppData\Local\Temp\OfficeC2R0F488821-BA41-4F18-9D81-99A4773C22EFOfficeC2R65F089D7-5AA4-480B-AEAE-CC2E50469B93\VersionDescriptor.xml

C:\Users\win7\AppData\Local\Temp\OfficeC2R0F488821-BA41-4F18-9D81-99A4773C22EF\VersionDescriptor.xml

\\.\pipe\OperaCrashReporter3024

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160407143534.log

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160407143532.exe

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\Macromedia.lok

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\msvcrt.dll

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\JPEG Agent.x32

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\Mix Services.x32

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\Photoshop 3.0 Import.x32

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\ActiveX.x32

ScriptSource.cxt.lnk

C:\Windows\ScriptSource.cxt.lnk\desktop.ini

ScriptSource.cst.lnk

C:\Windows\ScriptSource.cst.lnk\desktop.ini

\\localhost\C$

C:\ScriptSource.cst

C:\helper.msg

\\.\WGUARDNT

\\.\Global\WGUARDNT

mfeaaca.dll

C:\Users\win7\AppData\Local\Temp\is-FOINK.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-FOINK.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-FOINK.tmp\is-OQIFH.tmp

C:\Users\win7\AppData\Local\Temp\is-FOINK.tmp\is-LCOLB.tmp

C:\Users\win7\AppData\Local\Temp\is-FOINK.tmp\is-A74PL.tmp

C:\Users\win7\AppData\Local\Temp\is-FOINK.tmp\is-ONBJE.tmp

C:\Users\win7\AppData\Local\Temp\is-FOINK.tmp\is-JI89L.tmp

C:\Users\win7\AppData\Local\Temp\is-FOINK.tmp\is-P7531.tmp

C:\Users\win7\AppData\Local\Temp\is-FOINK.tmp\is-E9VL1.tmp

C:\Users\win7\AppData\Local\Temp\is-FOINK.tmp\is-5N1FD.tmp

C:\Users\win7\AppData\Local\Temp\is-FOINK.tmp\is-1R3KG.tmp

C:\Users\win7\AppData\Local\Temp\is-FOINK.tmp\is-06JK7.tmp

C:\Users\win7\AppData\Local\Temp\WER1D7F.tmp.WERInternalMetadata.xml

C:\Users\win7\AppData\Local\Temp\PDApp.log

C:\Users\win7\AppData\Local\Temp\{D784F89B-0A13-439A-AE3F-E9C3DD215D62}\stringTable.zdct

C:\Users\win7\AppData\Local\Adobe\OOBE\temp_lbs_wid

\\.\pipe\OperaCrashReporter2596

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160407162837.log

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160407162835.exe

C:\Windows\system32\abgx360.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\abgx360\Uninstall.lnk

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\abgx360\abgx360 GUI.lnk

cc.bin

UPDATE.WIZ

update.inf

C:\Windows\Microsoft.NET\Framework\v2.0.50727\Config\machine.config

C:\Users\win7\Documents\JRT Studio\iSyncr.log

C:\iSyncr.pdb

C:\Windows\symbols\iSyncr.pdb

C:\Windows\iSyncr.pdb

\\.\aswSP_Handler

\\.\ASWSP_Open

\\.\ASWSP

C:\ProgramData\AVAST Software\Persistent Data\Avast\Logs\Setup.log

\\.\aswSP

C:\ProgramData\3c022f79-33eb-49e6-81b8-ddaa369645b1\temp

C:\Users\win7\AppData\Local\Temp\nsa13DB.tmp

C:\Users\win7\AppData\Local\Temp\nsq143A.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\install.txt

C:\Users\Public\Desktop\AAGroup Products.lnk

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Crashpad\metadata

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Crashpad\reports\deba7a66-099d-4905-9747-0afb216b4bfd.dmp

C:\Users\win7\AppData\Local\Temp\genteert.dll

C:\Users\win7\AppData\Local\Temp\gentee86.tmp

C:\Users\win7\AppData\Local\Temp\gentee86\guig.dll

C:\Users\win7\AppData\Local\Temp\gentee86\setup_temp.gea

C:\Users\win7\AppData\Local\Temp\nso5EF5.tmp

C:\Users\win7\AppData\Local\Temp\nsz5F83.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\mbahost.dll

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\NitroBA.dll

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\test.de-DE.html

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\StringResources.fi-FI.xaml

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\test.fi-FI.html

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\test.nb-NO.html

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\StringResources.pt-BR.xaml

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\test.sk-SK.html

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\edit-icon.png

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\Close.png

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\CloseWindow.png

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\BootstrapperCore.dll

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\mbapreq.dll

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\mbapreq.thm

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\mbapreq.png

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\1028\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\1029\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\1030\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\1031\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\1032\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\1035\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\1036\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\1038\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\1040\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\1041\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\1042\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\1043\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\1060\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\BootstrapperCore.config

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\PageTransitions.dll

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\GalaSoft.MvvmLight.WPF4.dll

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\StringResources.de-DE.xaml

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\test.es-ES.html

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\StringResources.ja-JP.xaml

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\test.ja-JP.html

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\StringResources.nb-NO.xaml

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\StringResources.nl-NL.xaml

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\test.pt-BR.html

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\sign-icon.png

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\Nitro.bmp

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\Cancel.png

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\Background.png

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\1044\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\1045\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\1046\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\1049\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\1051\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\1053\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\1055\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\2052\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\Setup_20160407191801_Failed.txt

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\StringResources.it-IT.xaml

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\test.it-IT.html

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\test.nl-NL.html

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\StringResources.ru-RU.xaml

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\test.ru-RU.html

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\StringResources.sv-SE.xaml

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\test.sv-SE.html

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\StringResources.zh-CN.xaml

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\test.zh-CN.html

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\StringResources.sk-SK.xaml

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\create-icon.png

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\cloud-icon.png

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\collab-icon.png

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\convert-icon.png

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\AcceptandInstall.png

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\ProgressBar.png

C:\Users\win7\AppData\Local\Temp\{34d271a4-0d4b-4b0a-8fb4-76c3ce02b8cd}\.ba1\BootstrapperApplicationData.xml

C:\Users\win7\AppData\Local\Temp\Nitro_Pro_10_20160407191802.log

C:\Users\win7\AppData\Local\Temp\is-PETB0.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\is-L7PI0.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-L7PI0.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-L7PI0.tmp\_isetup\_shfoldr.dll

Xbox Image Browser.exe

C:\Users\win7\AppData\Local\Temp\978B141.tmp

C:\Users\win7\AppData\Local\Temp\9784402.tmp

C:\Users\win7\AppData\Local\Temp\978B143.tmp

C:\Users\win7\AppData\Local\Temp\itorrent.zip

\??\C:\Windows\system32\zipfldr.dll

C:\Users\win7\AppData\Local\Temp\desktop.ini

C:\Users\win7\AppData\Local\Temp\itorrent-application.exe

C:\Users\win7\AppData\Local\Temp\978B204.tmp

C:\Users\win7\AppData\Local\Temp\Prototype-3-2015.rar

C:\Users\win7\AppData\Local\Temp\978B145.tmp

\\.\pipe\OperaCrashReporter2820

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160407205728.log

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160407205727.exe

lmi_rescue.exe

lmi_rescue.exe.manifest

rahook.dll

RescueWinRTLib.dll

ra64app.exe

params.txt

logo.bmp

rescue.ico

C:\Users\win7\AppData\Local\Temp\SilverlightMSI.log

C:\Users\win7\AppData\Local\Temp\nsyE67.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsyE67.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nsyE67.tmp\options.ini

C:\Users\win7\AppData\Local\Temp\nsyE67.tmp\shortcuts.ini

C:\Users\win7\AppData\Local\Temp\nsyE67.tmp\components.ini

C:\Users\win7\AppData\Local\Temp\nsyE67.tmp\summary.ini

C:\Users\win7\AppData\Local\Temp\nsyE67.tmp\ioSpecial.ini

C:\Users\win7\AppData\Local\Temp\nsyE67.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nsyE67.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nsyE67.tmp\modern-header.bmp

C:\ProgramData\Soda PDF 8\Installation\statistic.xml

/dev/urandom

C:\ProgramData\Soda PDF 8\Installation\Statistics.dll

\\.\pipe\OperaCrashReporter1500

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160407224542.log

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160407224541.exe

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\FB788E090BC1F3AA2FBC9E8FB2859601

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\40E450F7CE13419A2CCC2A5445035A0A_97482851B9CF8FBB790FA8AEAB0C772D

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\40E450F7CE13419A2CCC2A5445035A0A_2CFCD3B0E185E4A8F87A94EFDCF71017

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1DAF2884EC4DFA96BA4A58D4DBC9C406

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\12B9DB160AD5C40A43865B2B20626F11_7CD36D95F614F1D58B4CC62A49249FE8

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\12B9DB160AD5C40A43865B2B20626F11_938863A7DE88CECCFD6A0C129F1C8556

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D0466EA99B1687E7F2254A079EC72DD2

C:\minst.idb

C:\Users\win7\AppData\Local\Temp\nscB34F.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nscB34F.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nscB34F.tmp\options.ini

C:\Users\win7\AppData\Local\Temp\nscB34F.tmp\shortcuts.ini

C:\Users\win7\AppData\Local\Temp\nscB34F.tmp\components.ini

C:\Users\win7\AppData\Local\Temp\nscB34F.tmp\summary.ini

C:\Users\win7\AppData\Local\Temp\nscB34F.tmp\ioSpecial.ini

C:\Users\win7\AppData\Local\Temp\nscB34F.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nscB34F.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nscB34F.tmp\modern-header.bmp

C:\Users\win7\AppData\Local\Temp\nscB34F.tmp\ServicesHelper.dll

C:\Users\win7\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3979321414-2393373014-2172761192-1000\ea7d98b67203979fe2cf085282291e43_c4b6765a-c53d-4b48-b576-0e1db4e9f3bc

C:\Users\win7\AppData\Local\Temp\{7C029741-4E9A-470A-92DA-703787A937A1}\setup.ini

C:\WINDOWS\FONTS\SEGOEUII.TTF

C:\WINDOWS\FONTS\SEGOEUIZ.TTF

\\.\pipe\GoogleCrashServices\S-1-5-21-3979321414-2393373014-2172761192-1000

1.217.829.0_TO_1.217.882.0_MPASDLTA.VDM._P

1.217.829.0_TO_1.217.882.0_MPAVDLTA.VDM._P

C:\Users\win7\AppData\Local\Temp\is-UCPO7.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-UCPO7.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-UCPO7.tmp\setupproblems_english.htm

\\.\FNETHYRAMAS

\\.\ide#diskvbox_harddisk___________________________1.0_____#5&33d1638a&0&0.0.0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}

\\.\pci#ven_106b&dev_003f&subsys_00000000&rev_00#3&267a616a&0&30#{3abf6f2d-71c4-462a-8a92-1e6861e6af27}

\\.\HCD0

\\.\HCD1

\\.\HCD2

\\.\HCD3

\\.\HCD4

\\.\HCD5

\\.\HCD6

\\.\HCD7

\\.\HCD8

\\.\HCD9

\\.\HCD10

\\.\HCD11

\\.\HCD12

\\.\HCD13

\\.\HCD14

\\.\HCD15

\\.\HCD16

\\.\HCD17

\\.\HCD18

\\.\HCD19

\\.\HCD20

\\.\HCD21

\\.\HCD22

\\.\HCD23

\\.\HCD24

\\.\HCD25

\\.\HCD26

\\.\HCD27

\\.\HCD28

\\.\HCD29

\\.\HCD30

\\.\HCD31

\\.\usb#root_hub#4&24d6eb65&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8}

\\.\usb#vid_80ee&pid_0021#5&18f54cb7&0&1#{a5dcbf10-6530-11d2-901f-00c04fb951ed}

\\.\IDE#DISKVBOX_HARDDISK___________________________1.0_____#5&33D1638A&0&0.0.0#{53F56307-B6BF-11D0-94F2-00A0C91EFB8B}

C:\Users\win7\AppData\Local\Temp\HFI8236.tmp.html

C:\Users\win7\AppData\Local\Temp\Setup_20160408_033313717.html

C:\b00a44eecea30da754\UiInfo.xml

C:\b00a44eecea30da754\ParameterInfo.xml

C:\b00a44eecea30da754\SplashScreen.bmp

C:\b00a44eecea30da754\1033\LocalizedData.xml

C:\b00a44eecea30da754\1025\LocalizedData.xml

C:\b00a44eecea30da754\1028\LocalizedData.xml

C:\b00a44eecea30da754\1029\LocalizedData.xml

C:\b00a44eecea30da754\1030\LocalizedData.xml

C:\b00a44eecea30da754\1031\LocalizedData.xml

C:\b00a44eecea30da754\1032\LocalizedData.xml

C:\b00a44eecea30da754\1035\LocalizedData.xml

C:\b00a44eecea30da754\1036\LocalizedData.xml

C:\b00a44eecea30da754\1037\LocalizedData.xml

C:\b00a44eecea30da754\1038\LocalizedData.xml

C:\b00a44eecea30da754\1040\LocalizedData.xml

C:\b00a44eecea30da754\1041\LocalizedData.xml

C:\b00a44eecea30da754\1042\LocalizedData.xml

C:\b00a44eecea30da754\1043\LocalizedData.xml

C:\b00a44eecea30da754\1044\LocalizedData.xml

C:\b00a44eecea30da754\1045\LocalizedData.xml

C:\b00a44eecea30da754\1046\LocalizedData.xml

C:\b00a44eecea30da754\1049\LocalizedData.xml

C:\b00a44eecea30da754\1053\LocalizedData.xml

C:\b00a44eecea30da754\1055\LocalizedData.xml

C:\b00a44eecea30da754\2052\LocalizedData.xml

C:\b00a44eecea30da754\2070\LocalizedData.xml

C:\b00a44eecea30da754\3082\LocalizedData.xml

C:\Users\win7\AppData\Local\Temp\KB3074554_20160408_033315311.html

C:\b00a44eecea30da754\SetupUi.xsd

C:\b00a44eecea30da754\Strings.xml

C:\Users\win7\AppData\Local\Temp\HFI89FB.tmp.html

C:\b00a44eecea30da754\graphics\print.ico

C:\b00a44eecea30da754\graphics\save.ico

C:\b00a44eecea30da754\graphics\setup.ico

C:\b00a44eecea30da754\header.bmp

C:\b00a44eecea30da754\1033\EULA.rtf

C:\b00a44eecea30da754\graphics\SysReqMet.ico

C:\b00a44eecea30da754\graphics\SysReqNotMet.ico

C:\b00a44eecea30da754\graphics\Rotate1.ico

C:\b00a44eecea30da754\graphics\Rotate2.ico

C:\b00a44eecea30da754\graphics\Rotate3.ico

C:\b00a44eecea30da754\graphics\Rotate4.ico

C:\b00a44eecea30da754\graphics\Rotate5.ico

C:\b00a44eecea30da754\graphics\Rotate6.ico

C:\b00a44eecea30da754\graphics\Rotate7.ico

C:\b00a44eecea30da754\graphics\Rotate8.ico

C:\b00a44eecea30da754\graphics\Rotate9.ico

C:\b00a44eecea30da754\graphics\Rotate10.ico

C:\Users\win7\AppData\Local\Temp\nse70A5.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nse70A5.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nse70A5.tmp\options.ini

C:\Users\win7\AppData\Local\Temp\nse70A5.tmp\shortcuts.ini

C:\Users\win7\AppData\Local\Temp\nse70A5.tmp\components.ini

C:\Users\win7\AppData\Local\Temp\nse70A5.tmp\summary.ini

C:\Users\win7\AppData\Local\Temp\nse70A5.tmp\ioSpecial.ini

C:\Users\win7\AppData\Local\Temp\nse70A5.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nse70A5.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nse70A5.tmp\modern-header.bmp

C:\Users\win7\AppData\Local\Temp\nse70A5.tmp\ServicesHelper.dll

__tmp_rar_sfx_access_check_1573265

Stubinstaller.ini

PSINanoRun.exe

Stub.exe

InstallRes.dll

Logs Azure\putczip.dll

\\?\C:\Users\win7\AppData\Local\Temp\RarSFX0\Logs Azure\putczip.dll

Splash.dll

avDetect.dat

StubInstaller.dat

res\StubInstaller.ico

\\?\C:\Users\win7\AppData\Local\Temp\RarSFX0\res\StubInstaller.ico

res\atras.png

res\background.png

res\cancel.png

res\final_img.png

res\ico_ven_cancel.png

res\img_product1.png

res\img_product2.png

recorte_cloud.png

Logs Azure

res

C:\Users\win7\AppData\Local\Temp\RarSFX0\Stub.exe

C:\Users\win7\AppData\Local\Temp\HFI6F22.tmp.html

C:\Users\win7\AppData\Local\Temp\HFI6F24.tmp.txt

\\.\pipe\BurnPipe.{9856810D-D889-4C3D-89A5-AA2C8DC31989}

C:\Users\win7\AppData\Local\Temp\Setup_20160408070824_Failed.txt

C:\Users\win7\AppData\Local\Temp\nsj5CEA.tmp\LangDLL.dll

C:\Users\win7\AppData\Local\Temp\nsj5CEA.tmp\ioSpecial.ini

C:\Users\win7\AppData\Local\Temp\nsj5CEA.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nsj5CEA.tmp\modern-header.bmp

C:\Users\win7\AppData\Local\Temp\nsj5CEA.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nsj5CEA.tmp\PassDialog.dll

C:\Users\win7\AppData\Local\Temp\DLGA454.tmp

C:\Users\win7\AppData\Local\Temp\DLG\initWindow\css\style.css

C:\Users\win7\AppData\Local\Temp\DLG\initWindow\noconnection.html

C:\Users\win7\AppData\Local\Temp\DLG\initWindow\progress.html

C:\Users\win7\AppData\Local\Temp\DLG\loadingImage\loadingImage.bmp

C:\Users\win7\AppData\Local\Temp\DLG\ui\common\base\base.zip.part

C:\Users\win7\AppData\Local\Temp\DLG\ui\offers\7fe97ec50ca64604e0220718c8f8697a\uifile.zip.part

C:\Users\win7\AppData\Local\Temp\DLG\ui\offers\5d6efd56e20e691f36aea9ae87d8351b\uifile.zip.part

C:\Users\win7\AppData\Local\Temp\DLG\ui\offers\7fe97ec50ca64604e0220718c8f8697a\uifile.zip

C:\Users\win7\AppData\Local\Temp\DLG\ui\offers\7fe97ec50ca64604e0220718c8f8697a\index.html

C:\Users\win7\AppData\Local\Temp\DLG\ui\offers\7fe97ec50ca64604e0220718c8f8697a\css\style.css

C:\Users\win7\AppData\Local\Temp\DLG\ui\offers\7fe97ec50ca64604e0220718c8f8697a\img\img1.png

C:\Users\win7\AppData\Local\Temp\DLG\ui\offers\7fe97ec50ca64604e0220718c8f8697a\img\progress-bar.png

C:\Users\win7\AppData\Local\Temp\DLG\ui\offers\7fe97ec50ca64604e0220718c8f8697a\img\progress.png

C:\Users\win7\AppData\Local\Temp\DLG\ui\offers\7fe97ec50ca64604e0220718c8f8697a\js\jquery-1.10.2.min.js

C:\Users\win7\AppData\Local\Temp\DLG\ui\common\progress\progress.zip.part

C:\Users\win7\AppData\Local\Temp\DLG\ui\common\base\base.zip

C:\Users\win7\AppData\Local\Temp\DLG\ui\common\base\index.html

C:\Users\win7\AppData\Local\Temp\DLG\ui\common\base\css\style.css

C:\Users\win7\AppData\Local\Temp\DLG\ui\common\base\js\jquery-1.10.2.min.js

C:\Users\win7\AppData\Local\Temp\DLG\ui\offers\5cf7e495a423a0cd1ab7b20bc5cf0d94\uifile.zip.part

C:\Users\win7\AppData\Local\Temp\DLG\ui\common\last\last.zip.part

C:\Users\win7\AppData\Local\Temp\DLG\ui\offers\5d6efd56e20e691f36aea9ae87d8351b\uifile.zip

C:\Users\win7\AppData\Local\Temp\DLG\ui\offers\5d6efd56e20e691f36aea9ae87d8351b\index.html

C:\Users\win7\AppData\Local\Temp\DLG\ui\offers\5d6efd56e20e691f36aea9ae87d8351b\css\style.css

C:\Users\win7\AppData\Local\Temp\DLG\ui\offers\5d6efd56e20e691f36aea9ae87d8351b\img\img1.png

C:\Users\win7\AppData\Local\Temp\DLG\ui\offers\5d6efd56e20e691f36aea9ae87d8351b\js\jquery-1.10.2.min.js

C:\Users\win7\AppData\Local\Temp\DLG\ui\common\progress\progress.zip

C:\Users\win7\AppData\Local\Temp\DLG\ui\common\progress\index.html

C:\Users\win7\AppData\Local\Temp\DLG\ui\common\progress\css\style.css

C:\Users\win7\AppData\Local\Temp\DLG\ui\common\progress\img\151.gif

C:\Users\win7\AppData\Local\Temp\DLG\ui\common\progress\img\bar-bg.png

C:\Users\win7\AppData\Local\Temp\DLG\ui\common\progress\img\bar-lb.png

C:\Users\win7\AppData\Local\Temp\DLG\ui\common\progress\img\bar-rb.png

C:\Users\win7\AppData\Local\Temp\DLG\ui\common\progress\img\br-b.png

C:\Users\win7\AppData\Local\Temp\DLG\ui\common\progress\img\br-bg.png

C:\Users\win7\AppData\Local\Temp\DLG\ui\common\progress\img\br-lb.png

C:\Users\win7\AppData\Local\Temp\DLG\ui\common\progress\img\br-rb.png

C:\Users\win7\AppData\Local\Temp\DLG\ui\common\progress\img\icon.png

C:\Users\win7\AppData\Local\Temp\DLG\ui\common\progress\img\img1.png

C:\Users\win7\AppData\Local\Temp\DLG\ui\common\progress\img\progress-bar.png

C:\Users\win7\AppData\Local\Temp\DLG\ui\common\progress\img\progress.png

C:\Users\win7\AppData\Local\Temp\DLG\ui\common\progress\js\jquery-1.10.2.min.js

C:\Users\win7\AppData\Local\Temp\DLG\ui\common\last\last.zip

C:\Users\win7\AppData\Local\Temp\DLG\ui\common\last\index.html

C:\Users\win7\AppData\Local\Temp\DLG\ui\common\last\css\style.css

C:\Users\win7\AppData\Local\Temp\DLG\ui\common\last\img\img1.png

C:\Users\win7\AppData\Local\Temp\DLG\ui\common\last\js\jquery-1.10.2.min.js

C:\Users\win7\AppData\Local\Temp\DLG\ui\offers\5cf7e495a423a0cd1ab7b20bc5cf0d94\uifile.zip

C:\Users\win7\AppData\Local\Temp\DLG\ui\offers\5cf7e495a423a0cd1ab7b20bc5cf0d94\index.html

C:\Users\win7\AppData\Local\Temp\DLG\ui\offers\5cf7e495a423a0cd1ab7b20bc5cf0d94\css\style.css

C:\Users\win7\AppData\Local\Temp\DLG\ui\offers\5cf7e495a423a0cd1ab7b20bc5cf0d94\img\img1.png

C:\Users\win7\AppData\Local\Temp\DLG\ui\offers\5cf7e495a423a0cd1ab7b20bc5cf0d94\js\jquery-1.10.2.min.js

C:\Windows\SysWOW64\atl.dll

C:\Users\win7\AppData\Local\Temp\DLG

C:\Users\win7\AppData\Local\Temp\DLG\ui

C:\Users\win7\AppData\Local\Temp\DLG\ui\common

C:\Users\win7\AppData\Local\Temp\DLG\ui\common\base

\\.\pipe\OperaCrashReporter1684

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160408074842.log

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160408074841.exe

C:\Users\win7\AppData\Local\Temp\gentee9B.tmp

C:\Users\win7\AppData\Local\Temp\gentee9B\guig.dll

C:\Users\win7\AppData\Local\Temp\gentee12\setup_temp.gea

C:\Users\win7\AppData\Local\Temp\appun-1.exe

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\client[1].htm

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\sq.core[1].js

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\sq.login[1].js

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\sq.tab[1].js

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\sq.statis[1].js

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\16193928h6OrS[1].jpg

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\game1[1].js

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\game1[1].css

C:\WINDOWS\FONTS\MSYHBD.TTF

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\sq.clientclass2[1].js

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\log_blk[1].jpg

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\bg[1].jpg

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\logo[1].png

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\sprite[1].png

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\GFZFITHL.txt

C:\Windows\SysWOW64\Drivers\AsrCDDrv.sys

\\.\AsrCDDrv

C:\Users\win7\AppData\Local\Temp\is-KNR6K.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-KNR6K.tmp\_isetup\_isdecmp.dll

C:\Users\win7\AppData\Local\Temp\nso897F.tmp

C:\Users\win7\AppData\Local\Temp\nso8A6A.tmp\ioSpecial.ini

C:\Users\win7\AppData\Local\Temp\nso8A6A.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nso8A6A.tmp\modern-header.bmp

C:\Users\win7\AppData\Local\Temp\nso8A6A.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Google\Chrome\User Data\Local State

C:\Users\win7\AppData\Local\Temp\BTD3FAE.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\2QJTRDNL.txt

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\user-id[1].htm

C:\Users\win7\AppData\Local\Temp\\~DFE345F6E589BC7C9D.TMP

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\update-smadav[1].txt

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\smadav1051[1].upd

C:\ProgramData\1a0254e4-d458-47fa-82a0-6940ee729f6c\temp

\\?\hdaudio#func_01&ven_8384&dev_7680&subsys_83847680&rev_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\ecdintopo

\\?\hdaudio#func_01&ven_8384&dev_7680&subsys_83847680&rev_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\ecdinwave

\\?\hdaudio#func_01&ven_8384&dev_7680&subsys_83847680&rev_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\eheadphonetopo

\\?\hdaudio#func_01&ven_8384&dev_7680&subsys_83847680&rev_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\eheadphonewave

\\?\hdaudio#func_01&ven_8384&dev_7680&subsys_83847680&rev_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\emicintopo

\\?\hdaudio#func_01&ven_8384&dev_7680&subsys_83847680&rev_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\emicinwave

\\?\hdaudio#func_01&ven_8384&dev_7680&subsys_83847680&rev_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\espeakertopo

\\?\hdaudio#func_01&ven_8384&dev_7680&subsys_83847680&rev_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\espeakerwave

C:/Users/win7/AppData/Local/Temp/ocr9BC7.tmp/src/sslsmartgui.rb

C:/Users/win7/AppData/Local/Temp/ocr9BC7.tmp/lib/ruby/site_ruby/1.8/ubygems.rb

C:/Users/win7/AppData/Local/Temp/ocr9BC7.tmp/lib/ruby/site_ruby/1.8/rubygems.rb

C:/Users/win7/AppData/Local/Temp/ocr9BC7.tmp/lib/ruby/site_ruby/1.8/rubygems/defaults.rb

C:/Users/win7/AppData/Local/Temp/ocr9BC7.tmp/lib/ruby/1.8/i386-mswin32/rbconfig.rb

C:\Users\win7\AppData\Local\Temp\ocr9BC7.tmp

C:\Users\win7\AppData\Local\Temp\ocr9BC7.tmp\bin

C:\Users\win7\AppData\Local\Temp\ocr9BC7.tmp\lib

C:\Users\win7\AppData\Local\Temp\ocr9BC7.tmp\lib\ruby

C:\Users\win7\AppData\Local\Temp\ocr9BC7.tmp\lib\ruby\1.8

C:\Users\win7\AppData\Local\Temp\ocr9BC7.tmp\lib\ruby\1.8\date

C:\Users\win7\AppData\Local\Temp\ocr9BC7.tmp\lib\ruby\1.8\i386-mswin32

C:\Users\win7\AppData\Local\Temp\ocr9BC7.tmp\lib\ruby\1.8\net

C:\Users\win7\AppData\Local\Temp\ocr9BC7.tmp\lib\ruby\1.8\openssl

C:\Users\win7\AppData\Local\Temp\ocr9BC7.tmp\lib\ruby\1.8\uri

C:\Users\win7\AppData\Local\Temp\ocr9BC7.tmp\lib\ruby\1.8\yaml

C:\Users\win7\AppData\Local\Temp\ocr9BC7.tmp\lib\ruby\gems

C:\Users\win7\AppData\Local\Temp\ocr9BC7.tmp\lib\ruby\gems\1.8

C:\Users\win7\AppData\Local\Temp\ocr9BC7.tmp\lib\ruby\gems\1.8\gems

C:\Users\win7\AppData\Local\Temp\ocr9BC7.tmp\lib\ruby\gems\1.8\gems\builder-2.1.2

C:\Users\win7\AppData\Local\Temp\ocr9BC7.tmp\lib\ruby\gems\1.8\gems\builder-2.1.2\lib

C:\Users\win7\AppData\Local\Temp\ocr9BC7.tmp\lib\ruby\gems\1.8\gems\builder-2.1.2\lib\builder

C:\Users\win7\AppData\Local\Temp\ocr9BC7.tmp\lib\ruby\gems\1.8\gems\wxruby-2.0.0-x86-mswin32-60

C:\Users\win7\AppData\Local\Temp\ocr9BC7.tmp\lib\ruby\gems\1.8\gems\wxruby-2.0.0-x86-mswin32-60\lib

C:\Users\win7\AppData\Local\Temp\ocr9BC7.tmp\lib\ruby\gems\1.8\gems\wxruby-2.0.0-x86-mswin32-60\lib\wx

C:\Users\win7\AppData\Local\Temp\ocr9BC7.tmp\lib\ruby\gems\1.8\gems\wxruby-2.0.0-x86-mswin32-60\lib\wx\classes

C:\Users\win7\AppData\Local\Temp\ocr9BC7.tmp\lib\ruby\gems\1.8\specifications

C:\Users\win7\AppData\Local\Temp\ocr9BC7.tmp\lib\ruby\site_ruby

C:\Users\win7\AppData\Local\Temp\ocr9BC7.tmp\lib\ruby\site_ruby\1.8

C:\Users\win7\AppData\Local\Temp\ocr9BC7.tmp\lib\ruby\site_ruby\1.8\i386-msvcrt

C:\Users\win7\AppData\Local\Temp\ocr9BC7.tmp\lib\ruby\site_ruby\1.8\rubygems

C:\Users\win7\AppData\Local\Temp\ocr9BC7.tmp\lib\ruby\site_ruby\1.8\rubygems\package

C:\Users\win7\AppData\Local\Temp\ocr9BC7.tmp\lib\ruby\site_ruby\1.8\rubygems\package\tar_reader

C:\Users\win7\AppData\Local\Temp\ocr9BC7.tmp\src

Nul

C:\Windows\TWAIN_32\A8P\~GLH0000.TMP

C:\Windows\TWAIN_32\A8P\~GLH0001.TMP

C:\Windows\TWAIN_32\A8P\~GLH0002.TMP

C:\Windows\twain_32\A8P\Admin.exe

C:\Windows\TWAIN_32\A8P\~GLH0003.TMP

C:\Windows\twain_32\A8P\remove.exe

C:\875a5c9f8218429c1ed3bb3003a0a1a3

C:\875a5c9f8218429c1ed3bb3003a0a1a3\microsoft_defaults.exe

C:\Users\win7\AppData\Local\AO DMS\server.db

C:\Users\win7\AppData\Local\AO DMS\server.db-journal

C:\Users\win7\AppData\Local\SwingBrowser\User Data\Default\Scheduled Web Surfing

C:\Users\win7\AppData\LocalLow\SwingBrowser\SwingBox\Log\20160408.log

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\378B079587A9184B2E2AB859CB263F40_2B618FC6CF84AEF3C14E129161BF18D9

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\378B079587A9184B2E2AB859CB263F40_197DFA069EB2C1F78E8B5A54666FCA53

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C987C966D19B79B9D9F35B962FCC8FA

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\378B079587A9184B2E2AB859CB263F40_2B618FC6CF84AEF3C14E129161BF18D9

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C9E3282A673263848AB7F0C007FD3AF1_DE83E718D41E52FA19A6EFC31C862243

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C9E3282A673263848AB7F0C007FD3AF1_853CE73860860CE22B80F6E6ACE81EA4

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B06FC0C94A5D113109C15E5A5EE1C21E

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C9E3282A673263848AB7F0C007FD3AF1_DE83E718D41E52FA19A6EFC31C862243

\swing.exe

\\swing.dll

\\swingie.exe

C:\Users\win7\AppData\Local\Temp\is-92J6B.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-92J6B.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-92J6B.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-92J6B.tmp\isgsg.dll

C:\Windows\SysWOW64\scrrun.dll

<NULL>

C:\Users\win7\AppData\Local\Temp\nsz7898.tmp

C:\Users\win7\AppData\Local\Temp\nse78B8.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nse78B8.tmp\LangDLL.dll

C:\Users\win7\AppData\Local\Temp\nse78B8.tmp\ioSpecial.ini

C:\Users\win7\AppData\Local\Temp\nse78B8.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nse78B8.tmp\modern-header.bmp

C:\Users\win7\AppData\Local\Temp\nse78B8.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nse78B8.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nse78B8.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nsm9589.tmp

C:\Users\win7\AppData\Local\Temp\RU-Installation-Instructions.pdf

C:\Users\win7\AppData\Local\Temp\nshA1CF.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nshA1CF.tmp\ioSpecial.ini

C:\Users\win7\AppData\Local\Temp\nshA1CF.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nshA1CF.tmp\modern-header.bmp

C:\Users\win7\AppData\Local\Temp\nshA1CF.tmp\InstallOptions.dll

1.217.908.0_TO_1.217.915.0_MPASDLTA.VDM._P

1.217.908.0_TO_1.217.915.0_MPAVDLTA.VDM._P

C:\Users\win7\AppData\Local\Temp\GUME42D.tmp\goopdate.dll

C:\ProgramData\Dropbox\Update\Log\DropboxUpdate.log-2016-04-08-10-13-20-837-2080

C:\Users\win7\AppData\Local\Temp\DMR\dmr_72.exe

C:\Users\win7\AppData\Local\F-Secure

C:\Users\win7\AppData\Local\F-Secure\fs1025937.tmp

C:\Users\win7\AppData\Local\F-Secure\fs1025937.tmp\sample

.\BootEnvSetup.pdb

.\exe\BootEnvSetup.pdb

.\symbols\exe\BootEnvSetup.pdb

C:\BootEnvSetup.pdb

d:\BuildsForRelease\Norton_Ghost_15.0.1\ws\RecoveryShell\Dev\BootEnvSetup\win32_release\BootEnvSetup.pdb

C:\opera.dll

C:\install.cfg

C:\setup\Setup.exe

\\?\C:

\\?\D:

\\.\PhysicalDrive5

\\.\PhysicalDrive6

\\.\PhysicalDrive7

\\.\PhysicalDrive8

\\.\PhysicalDrive9

\\.\PhysicalDrive10

\\.\PhysicalDrive11

\\.\PhysicalDrive12

\\.\PhysicalDrive13

\\.\PhysicalDrive14

\\.\PhysicalDrive15

\\.\PhysicalDrive16

\\.\PhysicalDrive17

\\.\PhysicalDrive18

\\.\PhysicalDrive19

\\.\PhysicalDrive20

\\.\PhysicalDrive21

\\.\PhysicalDrive22

\\.\PhysicalDrive23

\\.\PhysicalDrive24

\\.\PhysicalDrive25

\\.\PhysicalDrive26

\\.\PhysicalDrive27

\\.\PhysicalDrive28

\\.\PhysicalDrive29

\\.\PhysicalDrive30

\\.\PhysicalDrive31

C:\ProgramData\SmileGate\TRWSL\ChromeSetting.exe

C:\ProgramData\SmileGate\TRWSL\PCInfo.exe

C:\ProgramData\SmileGate\TRWSL\TRWSL.exe

C:\ProgramData\SmileGate\TRWSL\uninstall.exe

C:\Temp\NVIDIA\3DVision\setup.exe

C:\Temp\NVIDIA\3DVision\_Setup.dll

C:\Users\win7\AppData\Local\Temp\{7C5A5A01-BA31-4712-8E81-703787A937A1}\_Setup.dll

C:\Temp\NVIDIA\3DVision\setup.ini

C:\Users\win7\AppData\Local\Temp\{7C5A5A01-BA31-4712-8E81-703787A937A1}\setup.ini

C:\Temp\NVIDIA\3DVision\ISSetup.dll

C:\Temp\NVIDIA\3DVision\setup.isn

C:\Users\win7\AppData\Local\Temp\{7C5A5A01-BA31-4712-8E81-703787A937A1}\setup.isn

C:\Users\win7\AppData\Local\Temp\skinc8be.rra

C:\Temp\NVIDIA\3DVision\setupdir\0009\setup.gif

C:\Temp\NVIDIA\3DVision\setup.gif

C:\Temp\NVIDIA\3DVision\data1.hdr

C:\Temp\NVIDIA\3DVision\layout.bin

C:\Temp\NVIDIA\3DVision\data1.cab

C:\Temp\NVIDIA\3DVision\_setup.dll

C:\Temp\NVIDIA\3DVision\setup.inx

C:\Users\win7\AppData\Local\Temp\c9b8.rra

C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D0-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\setucb5d.rra

C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D0-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\IsBkcb6d.rra

C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D0-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\NvIncb6d.rra

C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D0-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\_ISUcb8c.rra

C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D0-8E3F-E9C3DC215D62}\corecb9c.rra

C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D0-8E3F-E9C3DC215D62}\dotncb9c.rra

C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D0-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\Fontcbac.rra

C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D0-8E3F-E9C3DC215D62}\ISBEcbac.rra

C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D0-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\Stricbbb.rra

C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D0-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\isrtcbbb.rra

C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D0-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\defacbbb.rra

C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D0-8E3F-E9C3DC215D62}\{13c5d420-cae2-11d4-b34d-00105a1c23dd}\_IsRcbcb.rra

C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D0-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\setup.inx

C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D0-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\ISRT.dll

C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D0-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\_isres.dll

C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D0-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\_isuser.dll

C:\Users\win7\AppData\Local\Temp\isprcd32.rra

C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D0-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\skincd32.rra

C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D0-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\StringTable-0009-English.ips

C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D0-8E3F-E9C3DC215D62}\corecomp.ini

\??\C:\Temp\NVIDIA\3DVision\data1.hdr

C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D0-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\default.pal

C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D0-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\NVINSTNT.DLL

C:\Users\win7\AppData\Local\Temp\{D7840700-AB5E-44D0-8E3F-E9C3DC215D62}\{13C5D420-CAE2-11D4-B34D-00105A1C23DD}\ISBKGD.BMP

C:\Users\win7\AppData\Local\Temp\OfficeSetup.exe

\\.\pipe\OperaCrashReporter1824

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160408162820.log

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160408162819.exe

C:\Users\win7\AppData\Local\Temp\dfs37B9.tmp

C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll

C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll

C:\Users\win7\AppData\Local\Temp\97937bfe-5f33-426a-9c72-f21f4a2a208e\bin.dmc

C:\Users\win7\AppData\Local\Temp\97937bfe-5f33-426a-9c72-f21f4a2a208e\bin\bin.html

C:\Windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll

C:\Users\win7\AppData\Local\Temp\\~DF5B3B98B66DEF5B44.TMP

C:\Windows\System32\desktop.ini

C:\Users\win7/.sqliterc

C:\sample:ZONE.identifier

C:\Users\win7\AppData\Local\win_en_77\win_en_77\1.20\cnf.cyl

C:\Users\win7\AppData\Local\Temp\gch22E1.tmp

C:\Users\win7\AppData\Local\Temp\81460124000.txt

C:\Users\win7\AppData\Local\Temp\nsdF4CA.tmp

C:\Users\win7\AppData\Local\Temp\nsyF4FA.tmp\ioSpecial.ini

C:\Users\win7\AppData\Local\Temp\nsyF4FA.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nsyF4FA.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nsyF4FA.tmp\StartMenu.dll

C:\Users\win7\AppData\Local\Temp\nswFE9D.tmp\LangDLL.dll

C:\Users\win7\AppData\Local\Temp\nswFE9D.tmp\ioSpecial.ini

C:\Users\win7\AppData\Local\Temp\nswFE9D.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nswFE9D.tmp\modern-header.bmp

C:\Users\win7\AppData\Local\Temp\nswFE9D.tmp\InstallOptions.dll

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LUXONIX\LFX-1310\LFX-1310 Manual.lnk

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LUXONIX\LUXONIX.com Website.lnk

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LUXONIX\LFX-1310\Uninstall LFX-1310.lnk

C:\Users\win7\AppData\Local\Temp\nswFE9D.tmp\System.dll

C:\Windows\system32\msvcr71.dll

C:\Users\win7\AppData\Local\Temp\nsz69FA.tmp

C:\Users\win7\AppData\Local\Temp\nsp6AA7.tmp\System.dll

setup.cfg

C:\Users\win7\AppData\Local\Temp\nshC09A.tmp

C:\Users\win7\AppData\Local\Temp\nseC55E.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nseC55E.tmp\portable.dll

C:\Users\win7\AppData\Local\Temp\nseC55E.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\is-72FFF.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-72FFF.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\\~DF817EA47B98FE4407.TMP

C:\Users\win7\AppData\Local\Temp\WavePadCounts.txt

C:\Users\win7\AppData\Roaming\NCH Software\WavePad\keys.dat

C:\Users\win7\AppData\Local\Temp\nsrF268.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsrF268.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nsrF268.tmp\options.ini

C:\Users\win7\AppData\Local\Temp\nsrF268.tmp\shortcuts.ini

C:\Users\win7\AppData\Local\Temp\nsrF268.tmp\components.ini

C:\Users\win7\AppData\Local\Temp\nsrF268.tmp\summary.ini

C:\Users\win7\AppData\Local\Temp\nsrF268.tmp\ioSpecial.ini

C:\Users\win7\AppData\Local\Temp\nsrF268.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nsrF268.tmp\modern-header.bmp

C:\Users\win7\AppData\Local\Temp\nsrF268.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nsrF268.tmp\ServicesHelper.dll

C:\Users\win7\AppData\Local\Temp\3582-490\sample

C:\Windows\svchost.com

C:\Users\win7\AppData\Local\Temp\tmp5023.tmp

C:\CFVS_I~1.EXE

C:\DLL_LO~1.EXE

C:\Procmon.exe

C:\PROGRA~2\COMMON~1\MICROS~1\ink\mip.exe

C:\PROGRA~2\COMMON~1\MICROS~1\MSInfo\msinfo32.exe

C:\PROGRA~2\INTERN~1\ieinstal.exe

C:\PROGRA~2\INTERN~1\ielowutil.exe

C:\PROGRA~2\INTERN~1\iexplore.exe

C:\PROGRA~2\WINDOW~1\wab.exe

C:\PROGRA~2\WINDOW~1\wabmig.exe

C:\PROGRA~2\WINDOW~1\WinMail.exe

C:\PROGRA~2\WINDOW~2\ACCESS~1\wordpad.exe

C:\PROGRA~2\WINDOW~4\ImagingDevices.exe

C:\PROGRA~2\WI4223~1\sidebar.exe

C:\PROGRA~3\PACKAG~1\{050D4~1\VCREDI~1.EXE

C:\PROGRA~3\PACKAG~1\{F65DB~1\VCREDI~1.EXE

C:\Python27\Lib\DISTUT~1\command\WININS~1.EXE

C:\Python27\Lib\DISTUT~1\command\WININS~2.EXE

C:\Python27\Lib\DISTUT~1\command\WININS~3.EXE

C:\Python27\Lib\DISTUT~1\command\WININS~4.EXE

C:\Python27\Lib\DISTUT~1\command\WI02EA~1.EXE

C:\Python27\Lib\SITE-P~1\pip\_vendor\distlib\t32.exe

C:\Python27\Lib\SITE-P~1\pip\_vendor\distlib\t64.exe

C:\Python27\Lib\SITE-P~1\pip\_vendor\distlib\w32.exe

C:\Python27\Lib\SITE-P~1\pip\_vendor\distlib\w64.exe

C:\Python27\Lib\SITE-P~1\SETUPT~1\cli-32.exe

C:\Python27\Lib\SITE-P~1\SETUPT~1\cli-64.exe

C:\Python27\Lib\SITE-P~1\SETUPT~1\CLI-AR~1.EXE

C:\Python27\Lib\SITE-P~1\SETUPT~1\cli.exe

C:\Python27\Lib\SITE-P~1\SETUPT~1\gui-32.exe

C:\Python27\Lib\SITE-P~1\SETUPT~1\gui-64.exe

C:\Python27\Lib\SITE-P~1\SETUPT~1\GUI-AR~1.EXE

C:\Python27\Lib\SITE-P~1\SETUPT~1\gui.exe

C:\Python27\Scripts\EASY_I~2.EXE

C:\Python27\Scripts\EASY_I~1.EXE

C:\Python27\Scripts\pip.exe

C:\Python27\Scripts\PIP27~1.EXE

C:\Python27\Scripts\pip2.exe

C:\Users\ALLUSE~1\PACKAG~1\{050D4~1\VCREDI~1.EXE

C:\Users\ALLUSE~1\PACKAG~1\{F65DB~1\VCREDI~1.EXE

C:\Users\win7\AppData\Local\Temp\is-EGITK.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\is-R7F8Q.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-R7F8Q.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-R7F8Q.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Roaming\Charles.exe

C:\Users\win7\AppData\Local\Temp\evbFC4B.tmp

C:\CFVS_Injector.exe

C:\Users\win7\AppData\Local\ArcadeGiant\agnt.config

1.217.869.0_TO_1.217.954.0_MPASDLTA.VDM._P

1.217.869.0_TO_1.217.954.0_MPAVDLTA.VDM._P

C:\Users\win7\AppData\Local\Temp\extD2A.tmp

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D237426009EE0F53ADECD7FCEBA7288C_97325C0F99E0D4A128C98C1EE254C1B7

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D237426009EE0F53ADECD7FCEBA7288C_97325C0F99E0D4A128C98C1EE254C1B7

C:\Users\win7\AppData\Local\Temp\9b90d7ee-fda9-11e5-9e88-08002763e612\target.exe_9b90d7f1-fda9-11e5-9e88-08002763e612

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\49514950C94E8026A2B06312597DFF49_F4692EBD578D04048E176E82BB8369BB

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\49514950C94E8026A2B06312597DFF49_5C747AF723CAFB63F2E5D43C4489EFE2

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\49514950C94E8026A2B06312597DFF49_F4692EBD578D04048E176E82BB8369BB

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\0D6ED27B76F0582A8D2120DF24D1E180_7B011182263149A63230BFA6B295F3D3

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\0D6ED27B76F0582A8D2120DF24D1E180_FB2F4FA9E9C6B6CBBC4B069A9FDAAE62

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CC61097B94A0A007D678F95504798376

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\0D6ED27B76F0582A8D2120DF24D1E180_7B011182263149A63230BFA6B295F3D3

C:\Users\win7\AppData\Local\Temp\d1a16081-fda9-11e5-9e88-08002763e612\target.exe_d1a16082-fda9-11e5-9e88-08002763e612

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C46E7B0F942663A1EDC8D9D6D7869173_3D832D38D7E8341EFA84BC8364F5617D

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873

C:\Windows\System32\regedit.exe

C:\Users\win7\AppData\Local\Temp\RarSFX0

C:\Windows\Media\desktop.ini

C:\Windows\Media

C:\Windows\Media\Schemes

C:\Windows\Media\Schemes\Glass

C:\Windows\Media\Schemes\Glass\desktop.ini

C:\Users\win7\AppData\Local\Temp\is-VGN2V.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\is-939C4.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-939C4.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-939C4.tmp\OCSetupHlp.dll

C:\Users\win7\AppData\Local\Temp\WERD692.tmp.WERInternalMetadata.xml

C:\Users\win7\AppData\Local\Temp\kvncviewer.exe

C:\Users\win7\AppData\Local\Temp\/libkacm.dgst

C:\Users\win7\AppData\Local\Temp\/libkacm.dll

C:\Users\win7\AppData\Local\Temp\\KRlyCCon.log

\\.\CtrlSM

C:\0

C:\Users\win7\Desktop\.lnk

C:\Users\win7\AppData\Roaming\.minecraft\java.zip

C:\Users\win7\AppData\Local\Temp\nsf85A0.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsf85A0.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nsf85A0.tmp\options.ini

C:\Users\win7\AppData\Local\Temp\nsf85A0.tmp\shortcuts.ini

C:\Users\win7\AppData\Local\Temp\nsf85A0.tmp\components.ini

C:\Users\win7\AppData\Local\Temp\nsf85A0.tmp\summary.ini

C:\Users\win7\AppData\Local\Temp\nsf85A0.tmp\ioSpecial.ini

C:\Users\win7\AppData\Local\Temp\nsf85A0.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nsf85A0.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nsf85A0.tmp\modern-header.bmp

C:\Windows\DXError.log

C:\Windows\DirectX.log

\\.\pipe\OperaCrashReporter2724

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160408205348.log

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160408205346.exe

C:\Users\win7\AppData\Local\Temp\HYD96EA.tmp.1460138451\HTA\index.hta

C:\Users\win7\AppData\Local\Temp\HYD96EA.tmp.1460138451\HTA\scripts\initialize.js

C:\Users\win7\AppData\Local\Temp\HYD96EA.tmp.1460138451\HTA\styles\common.css

C:\Users\win7\AppData\Local\Temp\HYD96EA.tmp.1460138451\HTA\scripts\common.js

C:\Users\win7\AppData\Local\Temp\HYD96EA.tmp.1460138451\HTA\scripts\install.js

C:\Users\win7\AppData\Local\Temp\HYD96EA.tmp.1460138451\HTA\images\main_utorrent.ico

C:\Windows\SysWOW64\mshta.exe

C:\Users\win7\AppData\Local\Temp\HYD96EA.tmp.1460138451\HTA\images\loading.gif

C:\Windows\SysWOW64\wshom.ocx

C:\Windows\System32\cscript.exe

C:\Users\win7\AppData\Local\Temp\HYD96EA.tmp.1460138451\HTA\3rdparty\OCComSDK.dll

C:\Users\win7\AppData\Local\Temp\amipixel.cfg

File_Id.diz

Descript.ion

License.txt

Rar.txt

ReadMe.txt

TechNote.txt

UnrarSrc.txt

WhatsNew.txt

Order.htm

RarFiles.lst

WinRAR.hlp

Rar.exe

Uninstall.exe

UnRAR.exe

WinRAR.exe

Formats\7za.dll

RarExt.dll

Formats\UNACEV2.DLL

Formats

WinRAR.cnt

Formats\7z.fmt

Formats\ace.fmt

Formats\arj.fmt

Formats\bz2.fmt

Formats\cab.fmt

Formats\gz.fmt

Formats\iso.fmt

Formats\lzh.fmt

Formats\tar.fmt

Formats\uue.fmt

Formats\z.fmt

Rarreg.key

Default.SFX

Dos.SFX

WinCon.SFX

Zip.SFX

C:\Users\win7\AppData\Roaming/win75221.rar

C:\WBDJA44I.DLL

C:\Windows\system32\wbem\wbemdisp.TLB

C:\Users\win7\AppData\Local\Temp\is-H2L21.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-H2L21.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nsu454C.tmp\InstallCheck.dll

C:\Users\win7\AppData\Local\Temp\nsu454C.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsu454C.tmp\string.ini

C:\Users\win7\AppData\Local\Temp\nsu454C.tmp\NewFeatures.txt

C:\Users\win7\AppData\Local\Temp\nsu454C.tmp\InstallUtility.dll

C:\Users\win7\AppData\Local\Temp\nsu454C.tmp\log.dll

C:\Users\win7\AppData\Local\Temp\nsu454C.tmp\log2.dll

C:\Users\win7\AppData\Local\Temp\nsu454C.tmp\url.ini

C:\Users\win7\AppData\Local\Temp\nsu454C.tmp\config.ini

C:\Users\win7\AppData\Local\Temp\nsu454C.tmp\sysconfig.ini

C:\Users\win7\AppData\Local\Temp\nsu454C.tmp\Communication.dll

C:\Users\win7\AppData\Local\Temp\nsu454C.tmp\BHips.dll

C:\Users\win7\AppData\Local\Temp\nsu454C.tmp\LogReporter.exe

C:\Users\win7\AppData\Local\Temp\nsu454C.tmp\DataReport.dll

C:\Users\win7\AppData\Local\Temp\nsu454C.tmp\InstallUtility.log

\\.\SysPrjEx

C:\Windows\system32\sc.exe

\\.\pipe\OperaCrashReporter1772

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160408221856.log

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160408221854.exe

http://www.java.com/pt_BR/

C:\Users\win7\AppData\Local\Temp\nsz38B8.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\nsz38B8.tmp\System.dll

C:\Program Files\Reimage\Reimage Repair\Reimage.exe

C:\Users\win7\AppData\Local\Temp\pJoNehMzo5.tmp

C:\Users\win7\AppData\Local\Temp\pJoNehMzo5.tmp\htmlayout.dll

C:\Users\win7\AppData\Local\Temp\DLGF4C4.tmp

C:\Users\win7\AppData\Local\Temp\DLG\ui\offers\25bdba5b2b551505dddeee133f62dd88\uifile.zip.part

C:\Users\win7\AppData\Local\Temp\DLG\ui\offers\25bdba5b2b551505dddeee133f62dd88\uifile.zip

C:\Users\win7\AppData\Local\Temp\DLG\ui\offers\25bdba5b2b551505dddeee133f62dd88\index.html

C:\Users\win7\AppData\Local\Temp\DLG\ui\offers\25bdba5b2b551505dddeee133f62dd88\css\style.css

C:\Users\win7\AppData\Local\Temp\DLG\ui\offers\25bdba5b2b551505dddeee133f62dd88\img\img1.png

C:\Users\win7\AppData\Local\Temp\DLG\ui\offers\25bdba5b2b551505dddeee133f62dd88\img\progress-bar.png

C:\Users\win7\AppData\Local\Temp\DLG\ui\offers\25bdba5b2b551505dddeee133f62dd88\img\progress.png

C:\Users\win7\AppData\Local\Temp\DLG\ui\offers\25bdba5b2b551505dddeee133f62dd88\js\jquery-1.10.2.min.js

C:\Users\win7\AppData\Local\Temp\81460145490.txt

C:\Users\win7\AppData\Local\Temp\befcieifed.exe

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\O98Z4CN1.txt

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\bodyImg[1].png

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\dc[1].js

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\button_over[1].png

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\button[1].png

C:\Users\win7\AppData\Local\Temp\nsc13F1.tmp\System.dll

C:\iTunesCategories

C:\MimeTypes

C:\settings

C:\LanguageCodes

C:\Dictionaries\win7.adu

C:\win7_sp.adl

C:\Users\win7\AppData\Local\Temp\is-0EM52.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-0EM52.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\\QTInstallerLauncher.log

C:\ProgramData\QuickTime\QuickTime.qtp

C:\Windows\system32\QuickTime.qtp

C:\Windows\system32\QuickTimeFavorites.qtr

C:\Windows\system32\QuickTime\QuickTimeChannels.qtr

C:\Windows\system32\mlang.dll

C:\Users\win7\AppData\Local\Temp\is-D74U0.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-D74U0.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-D74U0.tmp\AsrLib.dll

C:\Users\win7\AppData\Local\Temp\{10923B2E-A2E3-4561-85A6-3A0CC4EFB5DC}\Visual C++ 2008 SP1 Redistributable\vcredist_x86.exe.part

C:\Users\win7\AppData\Local\Temp\{10923B2E-A2E3-4561-85A6-3A0CC4EFB5DC}\Visual C++ 2010 SP1 Redistributable x86\vcredist_x86.exe.part

C:\Users\win7\AppData\Local\Temp\nsaEEAF.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\aut1B6B.tmp

C:\Users\win7\AppData\Local\Temp\background.jpg

C:\Users\win7\AppData\Local\Temp\aut1B6C.tmp

C:\Users\win7\AppData\Local\Temp\zagraj.bmp

C:\Users\win7\AppData\Local\Temp\aut1B7D.tmp

C:\Users\win7\AppData\Local\Temp\ustawienia.bmp

C:\Users\win7\AppData\Local\Temp\aut1B7E.tmp

C:\Users\win7\AppData\Local\Temp\strona.bmp

C:\Users\win7\AppData\Local\Temp\aut1B7F.tmp

C:\Users\win7\AppData\Local\Temp\odinstaluj.bmp

C:\Users\win7\AppData\Local\Temp\aut1B80.tmp

C:\Users\win7\AppData\Local\Temp\wyjdz.bmp

C:\\patcher.ini

C:\Users\win7\AppData\Local\Temp\\~DF97AD6014BF636E9F.TMP

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\navcancl[1]

C:\Users\win7\AppData\Local\Temp\file_list.txt

C:\Users\win7\AppData\Local\Temp\is-Q744A.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-Q744A.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-Q744A.tmp\VclStylesInno.dll

C:\Users\win7\AppData\Local\Temp\is-Q744A.tmp\ISDone.dll

C:\Users\win7\AppData\Local\Temp\is-Q744A.tmp\BASS.dll

C:\Users\win7\AppData\Local\Temp\is-Q744A.tmp\bp.dll

C:\Users\win7\AppData\Local\Temp\is-Q744A.tmp\wintb.dll

C:\Users\win7\AppData\Roaming\TeamViewer\TeamViewer11_Logfile.log

C:\Users\win7\AppData\Local\Temp\aut45A8.tmp

C:\Windows\Picture-SK\SK.jpg

C:\Users\win7\AppData\Local\Temp\aut45A9.tmp

C:\Windows\Picture-SK\main.jpg

C:\Users\win7\AppData\Local\Temp\is-0LO32.tmp\ex.bat

C:\Users\win7\AppData\Local\Temp\is-0LO32.tmp\av.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d93f411851d7c929.customDestinations-ms

%ProgramData%\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk

C:\Windows\%ProgramData%\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk\desktop.ini

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk

C:\Windows\System32\WindowsPowerShell

C:\Windows\System32\WindowsPowerShell\v1.0

C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe

C:\Windows\hh.exe

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\O76KGWX72NJVGIM808H1.temp

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe.config

C:\Windows\assembly\GAC_MSIL\System.Management.Automation\1.0.0.0__31bf3856ad364e35\System.Management.Automation.dll

C:\Windows\assembly\GAC_MSIL\Microsoft.WSMan.Runtime\1.0.0.0__31bf3856ad364e35\Microsoft.WSMan.Runtime.dll

C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\GetEvent.types.ps1xml

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\types.ps1xml

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Diagnostics.Format.ps1xml

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\WSMan.format.ps1xml

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Certificate.format.ps1xml

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\DotNetTypes.format.ps1xml

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\FileSystem.format.ps1xml

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Help.format.ps1xml

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\PowerShellCore.format.ps1xml

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\PowerShellTrace.format.ps1xml

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Registry.format.ps1xml

C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll

C:\Windows\WindowsUpdata\.temp.fortest

C:\WINDOWS\WINDOWSUPDATA\XED.EXE

C:\Windows\WindowsUpdata\xed.exe

\??\C:\Windows\system32\explorerframe.dll

C:\Users\win7\AppData\Local\Temp\{6502eaff-6343-46f3-9c22-6ccca6ee1f86}\.ba1\wixstdba.dll

C:\Users\win7\AppData\Local\Temp\{6502eaff-6343-46f3-9c22-6ccca6ee1f86}\.ba1\thm.xml

C:\Users\win7\AppData\Local\Temp\{6502eaff-6343-46f3-9c22-6ccca6ee1f86}\.ba1\thm.wxl

C:\Users\win7\AppData\Local\Temp\{6502eaff-6343-46f3-9c22-6ccca6ee1f86}\.ba1\logo.png

C:\Users\win7\AppData\Local\Temp\{6502eaff-6343-46f3-9c22-6ccca6ee1f86}\.ba1\license.rtf

C:\Users\win7\AppData\Local\Temp\{6502eaff-6343-46f3-9c22-6ccca6ee1f86}\.ba1\BootstrapperApplicationData.xml

C:\Users\win7\AppData\Local\Temp\Female_Voices_for_MorphVOX_20160409010835.log

C:\Users\win7\AppData\Local\Temp\{6502eaff-6343-46f3-9c22-6ccca6ee1f86}\.be\VP-Female_Install.exe

C:\\.install4j\pref_jre.cfg

C:\\.install4j\inst_jre.cfg

[RANDOM_STRING].7z

install39290.exe

C:\Windows\SysWOW64\Wbem\textvaluelist.xsl

C:\Users\win7\AppData\Local\Temp\nsbA240.tmp

C:\Users\win7\AppData\Local\Temp\nsrA251.tmp\nsExec.dll

C:\Users\win7\AppData\Local\Temp\nsrA251.tmp\[RANDOM_STRING].7z

C:\Users\win7\AppData\Local\Temp\nsrA251.tmp\7za.exe

C:\Users\win7\AppData\Local\Temp\is-GM21J.tmp\ex.bat

C:\Users\win7\AppData\Local\Temp\is-GM21J.tmp\av.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\JCDI0RNYQY0OD8BB2THJ.temp

C:\Users\win7\AppData\Local\Temp\nsmBD1B.tmp

C:\Users\win7\AppData\Local\Temp\nsxBE45.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsxBE45.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\{fa356f34-eef9-4655-aa8e-0eea851f3102}\.ba1\wixstdba.dll

C:\Users\win7\AppData\Local\Temp\{fa356f34-eef9-4655-aa8e-0eea851f3102}\.ba1\thm.xml

C:\Users\win7\AppData\Local\Temp\{fa356f34-eef9-4655-aa8e-0eea851f3102}\.ba1\thm.wxl

C:\Users\win7\AppData\Local\Temp\{fa356f34-eef9-4655-aa8e-0eea851f3102}\.ba1\logo.png

C:\Users\win7\AppData\Local\Temp\{fa356f34-eef9-4655-aa8e-0eea851f3102}\.ba1\license.rtf

C:\Users\win7\AppData\Local\Temp\{fa356f34-eef9-4655-aa8e-0eea851f3102}\.ba1\BootstrapperApplicationData.xml

C:\Users\win7\AppData\Local\Temp\Translator_Fun_Voices_for_MorphVOX_20160409013437.log

C:\Users\win7\AppData\Local\Temp\{fa356f34-eef9-4655-aa8e-0eea851f3102}\.be\VP-TranslatorFun_Install.exe

Ahmbed

C:\Users\win7\AppData\Local\Temp\sqlite_LDcv5M49WASQNGS

C:\Users\win7\AppData\Local\Temp\sqlite_W0ZHYu6660UqONu

C:\Users\win7\AppData\Local\Temp\sqlite_4u6PtsfcFOIqhQG

C:\Users\win7\AppData\Local\Temp\sqlite_jgeIaXJW6sqxmta

C:\Users\win7\AppData\Local\Temp\sqlite_IgwtoLQAK1PkM4Y

C:\Users\win7\AppData\Local\Temp\sqlite_b8a5iY2ZeLPkLai

C:\Users\win7\AppData\Local\Temp\sqlite_C7HZY2cFTLo6A2W

C:\Users\win7\AppData\Local\Temp\sqlite_vdpbNtp1mnCqx7H

C:\Users\win7\AppData\Local\Temp\sqlite_zaTNSXCxEGmX3vi

C:\Users\win7\AppData\Local\Temp\sqlite_RTkBTAX0XkbbXFF

C:\Users\win7\AppData\Local\Temp\sqlite_Tg2H5ByopHgqpnj

Ahmbed.gz

C:\Users\win7\AppData\Local\Temp\81460156832.txt

C:\Users\win7\AppData\Local\Temp\befbbjjhdg.exe

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\topLine[1].jpg

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\topComp[1].png

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\bgImg[1].jpg

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\bodyImg[1].png

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\bottomLine[1].jpg

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\nextCase[1].jpg

C:\WINDOWS\FONTS\TIMESBI.TTF

C:\WINDOWS\FONTS\TIMESBD.TTF

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\button[1].png

C:\Users\win7\AppData\Local\Temp\PB1BEA.tmp

C:\Users\win7\AppData\Local\Temp\CitrixLogs\GoToAssist Remote Support Customer\948\20160409_023128\g2ax_installer_customer.log

C:\Users\win7\AppData\Local\Temp\Citrix\GoToAssist Remote Support Customer\948\g2aA30B.tmp\uninshlp.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EA618097E393409AFA316F0F87E2C202_645BA731BA91CBD8B8BEB2499E0E63F0

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EA618097E393409AFA316F0F87E2C202_1D5FA52EB8816C13C01C3E76E0047654

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\ECF3006D44DA211141391220EE5049F4

C:\Users\win7\Documents\DCSCMIN\IMDCSC.exe

C:\Users\win7\AppData\Local\Temp\$inst\2.tmp

C:\Users\win7\AppData\Local\Temp\$inst\7.tmp

C:\Users\win7\AppData\Local\Temp\$inst\9.tmp

C:\Users\win7\AppData\Local\Temp\$inst\temp_0.tmp

C:\Users\win7\AppData\Local\Temp\12345.exe

C:\Users\win7\AppData\Local\Temp\result.exe

C:\ProgramData\8708eaaa-1c2b-4faa-8923-a6c9f88eeb0e\temp

C:\DLL_Loader.exe

C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe

C:\Program Files\Common Files\Microsoft Shared\ink\en-US\FlickLearningWizard.exe.mui

C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkWatson.exe.mui

C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InputPersonalization.exe.mui

C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mip.exe.mui

C:\Program Files\Common Files\Microsoft Shared\ink\en-US\ShapeCollector.exe.mui

C:\Program Files\Common Files\Microsoft Shared\ink\FlickLearningWizard.exe

C:\Program Files\Common Files\Microsoft Shared\ink\InkWatson.exe

C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe

C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe

C:\Program Files\Common Files\Microsoft Shared\ink\ShapeCollector.exe

C:\Program Files\Common Files\Microsoft Shared\ink\TabTip.exe

C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\msinfo32.exe.mui

C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe

C:\Program Files\Internet Explorer\en-US\ieinstal.exe.mui

C:\Program Files\Internet Explorer\en-US\iexplore.exe.mui

C:\Program Files\Internet Explorer\iediagcmd.exe

C:\Program Files\Internet Explorer\ieinstal.exe

C:\Program Files\Internet Explorer\ielowutil.exe

C:\Program Files\Oracle\VirtualBox Guest Additions\uninst.exe

C:\Program Files\Oracle\VirtualBox Guest Additions\VBoxControl.exe

C:\Users\win7\AppData\Roaming\subfolder\filename.exe

C:\Users\win7\AppData\Local\Temp\jkiC855.tmp

C:\Users\win7\AppData\Local\Temp\6a5cd110-eea3-4ab9-b4ab-857cca182fbd\bin.dmc

C:\Users\win7\AppData\Local\Temp\6a5cd110-eea3-4ab9-b4ab-857cca182fbd\bin\bin.html

C:\Users\win7\AppData\Local\Temp\nscCA79.tmp

C:\Users\win7\AppData\Local\Temp\nssCBC2.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\UTPSInstall.log

C:\Users\win7\AppData\Local\Temp\nssCBC2.tmp\nsis7z.dll

C:\Users\win7\AppData\Local\Temp\81460161251.txt

C:\Users\win7\AppData\Local\Temp\befcjhajed.exe

setup_log.tmp

setup_log.tmp~~

C:\Users\win7\AppData\Local\Temp\PPFiles_Setup_Temp\setup_error.log

__tmp_rar_sfx_access_check_570390

iixRg.exe

C:\Users\win7\qEWT\iixRg.exe

C:\Users\win7\Documents

C:\Users\win7\Documents\My Music\desktop.ini

C:\Users\win7\Documents\My Pictures\desktop.ini

C:\Users\win7\Documents\My Videos\desktop.ini

C:\Users\Public\Documents

C:\Users\Public\Documents\My Music\desktop.ini

C:\Users\Public\Documents\My Pictures\desktop.ini

C:\Users\Public\Documents\My Videos\desktop.ini

Users.txt

HotFolders.txt

msrle32.dll

msvidc32.dll

msyuv.dll

iyuv_32.dll

tsbyuv.dll

iccvid.dll

C:\Users\win7\AppData\Local\Temp\dfs843C.tmp

C:\Users\win7\AppData\Local\Temp\7c42a9e5-4e2d-470a-8abf-343787a937a1\bin.dmc

C:\Users\win7\AppData\Local\Temp\7c42a9e5-4e2d-470a-8abf-343787a937a1\bin\bin.html

own

C:\setup.dat

C:\{DFE23E8A-FA34-5941-1FBD-CA936B758A2E}

C:\sample.exe

1.213.5352.0_TO_1.213.5427.0_MPASDLTA.VDM._P

1.213.5352.0_TO_1.213.5427.0_MPAVDLTA.VDM._P

1.217.955.0_TO_1.217.983.0_MPASDLTA.VDM._P

1.217.955.0_TO_1.217.983.0_MPAVDLTA.VDM._P

C:\Users\win7\AppData\Local\Temp\is-K8F3O.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\is-HTBJ6.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-HTBJ6.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-HTBJ6.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\tf00294823.dll

C:\Users\win7\AppData\Local\Temp\81460167222.txt

C:\Users\win7\AppData\Local\Temp\befbbbdddg.exe

C:\Users\win7\AppData\Local\Temp\vpa9BD6.tmp

C:\Users\win7\AppData\Local\Temp\Windows\Windows.exe

C:\Users\win7\AppData\Local\Temp\chrome_installer.log

C:\Users\win7\AppData\Local\Google

C:\Users\win7\AppData\Local\Google\Chrome

C:\Users\win7\AppData\Local\Google\Chrome\Temp

C:\Users\win7\AppData\Local\Google\Chrome\Temp\source2736_8957

C:\Users\win7\AppData\Local\Temp\HWSignature.dll

C:\Users\win7\AppData\Local\Temp\\~DF00E8E0971B823C54.TMP

C:\Users\win7\AppData\Local\Temp\\sgwp_version.ini

C:\Users\win7\AppData\Local\Temp\\sogou_wallpaper_13_1493.exe

C:\Windows\bootstat.dat

C:\Windows\win32dc\Counter-Strike_trainer.exe

C:\Windows\win32dc\Quake3 crack.exe

C:\Windows\win32dc\Half-Life 2 + codes.exe

C:\Windows\win32dc\DAoC + trainer.exe

C:\Windows\win32dc\Doom 3 + cdfix.exe

C:\Windows\win32dc\FlatOut fix.exe

C:\Windows\rMCDGwPmilfcBMO.com

C:\Users\win7\AppData\Local\Temp\evb33F5.tmp

\\.\SUPERBPM

\\.\ICEEXT

\\.\FROGSICE

C:\Users\win7\AppData\Local\Temp\WER2AEC.tmp.WERInternalMetadata.xml

C:\Windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll

C:\Users\win7\AppData\Local\Temp\deldll.bat

C:\settings.xml

C:\Users\win7\AppData\Local\Temp\jkiFFC0.tmp

C:\Users\win7\AppData\Local\Temp\nsjB57A.tmp

C:\Users\win7\AppData\Local\Temp\nskB924.tmp\System.dll

\\.\SIWVIDSTART

\\.\VMDRV

C:\Users\win7\AppData\Local\Temp\Ywf..bat

C:\Windows\system32\cmd.exe

C:\Windows\system32\Disk1\IPWorksZipV9NETEdition_demo.exe

C:\Users\win7\AppData\Local\Temp\nst698C.tmp

C:\Users\win7\AppData\Local\Temp\nsj699D.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsj699D.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nsj699D.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\nsj699D.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nsj699D.tmp\nsDialogs.dll

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR help.lnk

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Console RAR manual.lnk

1.213.6253.0_TO_1.213.6352.0_MPASDLTA.VDM._P

1.213.6253.0_TO_1.213.6352.0_MPAVDLTA.VDM._P

C:\Users\win7\AppData\Local\Temp\TsuD33EACE3.dll

C:\Users\win7\AppData\Local\Temp\sample.log

C:\Users\win7\AppData\Local\Temp\50BE1D8E.dat

C:\Users\win7\AppData\Local\Temp\{B6F8261D-62CA-4E7E-AC95-2AE86D1B04EB}\_Setup.dll

C:\Users\win7\AppData\Local\Temp\{B6F8261D-62CA-4E7E-AC95-2AE86D1B04EB}\Setup.ico

C:\Users\win7\AppData\Local\Temp\{B6F8261D-62CA-4E7E-AC95-2AE86D1B04EB}\Readme.txt

C:\Users\win7\AppData\Local\Temp\{B6F8261D-62CA-4E7E-AC95-2AE86D1B04EB}\Custom.dll

C:\Users\win7\AppData\Local\Temp\{B6F8261D-62CA-4E7E-AC95-2AE86D1B04EB}\Setup.exe

C:\Users\win7\AppData\Local\Temp\down.2768.1.ini

C:\Users\win7\AppData\Local\Temp\edurss.exe

__tmp_rar_sfx_access_check_610656

KMSPico 10.0.9.exe

C:\Windows\system32\KMSPico 10.0.9.exe

C:\Windows\SysWOW64\FirewallAPI.dll

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\\.lnk

C:\Users\Public\Desktop\.lnk

C:\Users\win7\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned

C:\Users\win7\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar

C:\Users\win7\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\ailiao.lnk

http://ailiao.liaoban.com/xszd/index.html

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\4DHGN078.txt

C:\UI\main.png

C:\Windows\system32\UI\digi_num\0.png

UI\digi_num\0.png

C:\Windows\system32\UI\digi_num\1.png

UI\digi_num\1.png

C:\Windows\system32\UI\digi_num\2.png

UI\digi_num\2.png

C:\Windows\system32\UI\digi_num\3.png

UI\digi_num\3.png

C:\Windows\system32\UI\digi_num\4.png

UI\digi_num\4.png

C:\Windows\system32\UI\digi_num\5.png

UI\digi_num\5.png

C:\Windows\system32\UI\digi_num\6.png

UI\digi_num\6.png

C:\Windows\system32\UI\digi_num\7.png

UI\digi_num\7.png

C:\Windows\system32\UI\digi_num\8.png

UI\digi_num\8.png

C:\Windows\system32\UI\digi_num\9.png

UI\digi_num\9.png

C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00000.png

UI\mem_meter\palit_UI_517x517_01_00000.png

C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00001.png

UI\mem_meter\palit_UI_517x517_01_00001.png

C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00002.png

UI\mem_meter\palit_UI_517x517_01_00002.png

C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00003.png

UI\mem_meter\palit_UI_517x517_01_00003.png

C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00004.png

UI\mem_meter\palit_UI_517x517_01_00004.png

C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00005.png

UI\mem_meter\palit_UI_517x517_01_00005.png

C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00006.png

UI\mem_meter\palit_UI_517x517_01_00006.png

C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00007.png

UI\mem_meter\palit_UI_517x517_01_00007.png

C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00008.png

UI\mem_meter\palit_UI_517x517_01_00008.png

C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00009.png

UI\mem_meter\palit_UI_517x517_01_00009.png

C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00010.png

UI\mem_meter\palit_UI_517x517_01_00010.png

C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00011.png

UI\mem_meter\palit_UI_517x517_01_00011.png

C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00012.png

UI\mem_meter\palit_UI_517x517_01_00012.png

C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00013.png

UI\mem_meter\palit_UI_517x517_01_00013.png

C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00014.png

UI\mem_meter\palit_UI_517x517_01_00014.png

C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00015.png

UI\mem_meter\palit_UI_517x517_01_00015.png

C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00016.png

UI\mem_meter\palit_UI_517x517_01_00016.png

C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00017.png

UI\mem_meter\palit_UI_517x517_01_00017.png

C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00018.png

UI\mem_meter\palit_UI_517x517_01_00018.png

C:\Windows\system32\UI\mem_meter\palit_UI_517x517_01_00019.png

UI\mem_meter\palit_UI_517x517_01_00019.png

C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00000.png

UI\core_meter\palit_UI_517x517_02_00000.png

C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00001.png

UI\core_meter\palit_UI_517x517_02_00001.png

C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00002.png

UI\core_meter\palit_UI_517x517_02_00002.png

C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00003.png

UI\core_meter\palit_UI_517x517_02_00003.png

C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00004.png

UI\core_meter\palit_UI_517x517_02_00004.png

C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00005.png

UI\core_meter\palit_UI_517x517_02_00005.png

C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00006.png

UI\core_meter\palit_UI_517x517_02_00006.png

C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00007.png

UI\core_meter\palit_UI_517x517_02_00007.png

C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00008.png

UI\core_meter\palit_UI_517x517_02_00008.png

C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00009.png

UI\core_meter\palit_UI_517x517_02_00009.png

C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00010.png

UI\core_meter\palit_UI_517x517_02_00010.png

C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00011.png

UI\core_meter\palit_UI_517x517_02_00011.png

C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00012.png

UI\core_meter\palit_UI_517x517_02_00012.png

C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00013.png

UI\core_meter\palit_UI_517x517_02_00013.png

C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00014.png

UI\core_meter\palit_UI_517x517_02_00014.png

C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00015.png

UI\core_meter\palit_UI_517x517_02_00015.png

C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00016.png

UI\core_meter\palit_UI_517x517_02_00016.png

C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00017.png

UI\core_meter\palit_UI_517x517_02_00017.png

C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00018.png

UI\core_meter\palit_UI_517x517_02_00018.png

C:\Windows\system32\UI\core_meter\palit_UI_517x517_02_00019.png

UI\core_meter\palit_UI_517x517_02_00019.png

C:\Users\win7\AppData\Local\Temp\is-R54I4.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\nstC3E6.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nstC3E6.tmp\abc.ini

C:\Users\win7\AppData\Local\Temp\nstC3E6.tmp\xID.dll

C:\Users\win7\AppData\Local\Temp\nstC3E6.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nstC3E6.tmp\abc.ini.log

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Y73\Y73.lnk

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Y73\Uninstall.lnk

C:\Users\win7\AppData\Local\Temp\svchost..exe.config

C:\Users\win7\AppData\Local\Temp\svchost..exe

C:\Users\win7\AppData\Local\Temp\is-UJCR5.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-UJCR5.tmp\_isetup\_shfoldr.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\security.config.cch.new

C:\Users\win7\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.new

C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\enterprisesec.config.cch.new

C:\Users\win7\AppData\Local\Temp\nsnF46C.tmp

C:\Windows\System32\calc.exe

C:\Users\win7\AppData\Local\Temp\81460184120.txt

C:\Users\win7\AppData\Local\Temp\befchjibed.exe

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D47DBD2F9E3365FBBE008D71FB06716F_A181C5603FD5980A35CF32BD209BBF4F

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\sample

C:\CFVS_HookDll.dll

C:\Windows\syswow64\WS2_32.dll

C:\Windows\syswow64\msvcrt.dll

C:\Windows\syswow64\RPCRT4.dll

C:\Windows\syswow64\SspiCli.dll

C:\Windows\syswow64\CRYPTBASE.dll

C:\Windows\SysWOW64\sechost.dll

C:\Windows\syswow64\NSI.dll

C:\Windows\syswow64\urlmon.dll

C:\Windows\syswow64\api-ms-win-downlevel-ole32-l1-1-0.dll

C:\Windows\syswow64\ole32.DLL

C:\Windows\syswow64\GDI32.dll

C:\Windows\syswow64\USER32.dll

C:\Windows\syswow64\ADVAPI32.dll

C:\Windows\syswow64\LPK.dll

C:\Windows\syswow64\USP10.dll

C:\Windows\syswow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll

C:\Windows\syswow64\shlwapi.DLL

C:\Windows\syswow64\api-ms-win-downlevel-advapi32-l1-1-0.dll

C:\Windows\syswow64\api-ms-win-downlevel-user32-l1-1-0.dll

C:\Windows\syswow64\api-ms-win-downlevel-version-l1-1-0.dll

C:\Windows\system32\version.DLL

C:\Windows\syswow64\api-ms-win-downlevel-normaliz-l1-1-0.dll

C:\Windows\syswow64\normaliz.DLL

C:\Windows\syswow64\iertutil.dll

C:\Windows\syswow64\WININET.dll

C:\Windows\syswow64\USERENV.dll

C:\Windows\syswow64\profapi.dll

C:\Windows\system32\DNSAPI.dll

C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d\comctl32.dll

C:\Windows\syswow64\comdlg32.dll

C:\Windows\syswow64\SHELL32.dll

C:\Windows\system32\hhctrl.ocx

C:\Windows\syswow64\OLEAUT32.dll

C:\Windows\syswow64\imagehlp.dll

C:\Windows\syswow64\imm32.dll

C:\Windows\syswow64\MSCTF.dll

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\lua5.1-32.dll

C:\Windows\system32\opengl32.dll

C:\Windows\system32\GLU32.dll

C:\Windows\system32\DDRAW.dll

C:\Windows\system32\DCIMAN32.dll

C:\Windows\syswow64\SETUPAPI.dll

C:\Windows\syswow64\CFGMGR32.dll

C:\Windows\syswow64\DEVOBJ.dll

C:\Windows\system32\dwmapi.dll

C:\Windows\system32\wsock32.dll

C:\Windows\system32\msimg32.dll

C:\Windows\system32\uxtheme.dll

C:\Windows\syswow64\CLBCatQ.DLL

C:\Windows\system32\explorerframe.dll

C:\Windows\system32\DUser.dll

C:\Windows\system32\DUI70.dll

C:\Windows\system32\shfolder.dll

C:\Windows\syswow64\psapi.dll

C:\Windows\system32\propsys.dll

C:\Windows\system32\ntmarta.dll

C:\Windows\syswow64\WLDAP32.dll

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\sample.dbg

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\sample.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\exe\sample.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\exe\sample.pdb

sample.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\wntdll.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\wntdll.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\wntdll.pdb

wntdll.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\wkernel32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\wkernel32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\wkernel32.pdb

wkernel32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\wkernelbase.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\wkernelbase.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\wkernelbase.pdb

wkernelbase.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\CFVS_HookDll.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\CFVS_HookDll.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\CFVS_HookDll.pdb

C:\DETECTION_REPO\Valkyrie_Dynamic\CAMAS\CamasNative\CFVS_HookDll\Release\CFVS_HookDll.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\ws2_32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\ws2_32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\ws2_32.pdb

ws2_32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\msvcrt.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\msvcrt.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\msvcrt.pdb

msvcrt.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\wrpcrt4.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\wrpcrt4.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\wrpcrt4.pdb

wrpcrt4.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\wsspicli.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\wsspicli.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\wsspicli.pdb

wsspicli.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\cryptbase.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\cryptbase.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\cryptbase.pdb

cryptbase.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\sechost.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\sechost.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\sechost.pdb

sechost.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\nsi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\nsi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\nsi.pdb

nsi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\urlmon.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\urlmon.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\urlmon.pdb

urlmon.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\api-ms-win-downlevel-ole32-l1-1-0.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\api-ms-win-downlevel-ole32-l1-1-0.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\api-ms-win-downlevel-ole32-l1-1-0.pdb

api-ms-win-downlevel-ole32-l1-1-0.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\ole32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\DLL\ole32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\DLL\ole32.pdb

ole32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\wgdi32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\wgdi32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\wgdi32.pdb

wgdi32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\wuser32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\wuser32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\wuser32.pdb

wuser32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\advapi32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\advapi32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\advapi32.pdb

advapi32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\wlpk.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\wlpk.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\wlpk.pdb

wlpk.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\usp10.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\usp10.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\usp10.pdb

usp10.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\api-ms-win-downlevel-shlwapi-l1-1-0.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\api-ms-win-downlevel-shlwapi-l1-1-0.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\api-ms-win-downlevel-shlwapi-l1-1-0.pdb

api-ms-win-downlevel-shlwapi-l1-1-0.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\shlwapi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\DLL\shlwapi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\DLL\shlwapi.pdb

shlwapi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\api-ms-win-downlevel-advapi32-l1-1-0.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\api-ms-win-downlevel-advapi32-l1-1-0.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\api-ms-win-downlevel-advapi32-l1-1-0.pdb

api-ms-win-downlevel-advapi32-l1-1-0.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\api-ms-win-downlevel-user32-l1-1-0.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\api-ms-win-downlevel-user32-l1-1-0.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\api-ms-win-downlevel-user32-l1-1-0.pdb

api-ms-win-downlevel-user32-l1-1-0.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\api-ms-win-downlevel-version-l1-1-0.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\api-ms-win-downlevel-version-l1-1-0.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\api-ms-win-downlevel-version-l1-1-0.pdb

api-ms-win-downlevel-version-l1-1-0.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\version.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\DLL\version.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\DLL\version.pdb

version.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\api-ms-win-downlevel-normaliz-l1-1-0.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\api-ms-win-downlevel-normaliz-l1-1-0.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\api-ms-win-downlevel-normaliz-l1-1-0.pdb

api-ms-win-downlevel-normaliz-l1-1-0.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\normaliz.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\DLL\normaliz.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\DLL\normaliz.pdb

normaliz.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\iertutil.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\iertutil.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\iertutil.pdb

iertutil.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\wininet.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\wininet.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\wininet.pdb

wininet.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\userenv.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\userenv.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\userenv.pdb

userenv.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\profapi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\profapi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\profapi.pdb

profapi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dnsapi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\dnsapi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\dnsapi.pdb

dnsapi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\comctl32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\comctl32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\comctl32.pdb

comctl32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\comdlg32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\comdlg32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\comdlg32.pdb

comdlg32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\shell32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\shell32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\shell32.pdb

shell32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\hhctrl.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\ocx\hhctrl.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\ocx\hhctrl.pdb

hhctrl.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\oleaut32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\oleaut32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\oleaut32.pdb

oleaut32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\imagehlp.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\imagehlp.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\imagehlp.pdb

imagehlp.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\wimm32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\wimm32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\wimm32.pdb

wimm32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\msctf.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\msctf.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\msctf.pdb

msctf.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\lua5.1-32.dbg

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\lua5.1-32.dbg

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\lua5.1-32.dbg

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\lua5.1-32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\lua5.1-32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\lua5.1-32.pdb

lua5.1-32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\opengl32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\opengl32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\opengl32.pdb

opengl32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\glu32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\glu32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\glu32.pdb

glu32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\ddraw.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\ddraw.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\ddraw.pdb

ddraw.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dciman32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\dciman32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\dciman32.pdb

dciman32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\setupapi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\setupapi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\setupapi.pdb

setupapi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\cfgmgr32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\cfgmgr32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\cfgmgr32.pdb

cfgmgr32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\devobj.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\devobj.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\devobj.pdb

devobj.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dwmapi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\dwmapi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\dwmapi.pdb

dwmapi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\wsock32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\wsock32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\wsock32.pdb

wsock32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\msimg32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\msimg32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\msimg32.pdb

msimg32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\wuxtheme.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\wuxtheme.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\wuxtheme.pdb

wuxtheme.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\CLBCatQ.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\DLL\CLBCatQ.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\DLL\CLBCatQ.pdb

CLBCatQ.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\ExplorerFrame.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\ExplorerFrame.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\ExplorerFrame.pdb

ExplorerFrame.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\DUser.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\DUser.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\DUser.pdb

DUser.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\DUI70.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\DUI70.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\DUI70.pdb

DUI70.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\shfolder.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\shfolder.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\shfolder.pdb

shfolder.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\psapi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\psapi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\psapi.pdb

psapi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\propsys.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\propsys.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\propsys.pdb

propsys.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\ntmarta.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\ntmarta.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\ntmarta.pdb

ntmarta.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\wldap32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\wldap32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\wldap32.pdb

wldap32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dbghelp.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\dll\dbghelp.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\symbols\dll\dbghelp.pdb

dbghelp.pdb

defines.lua

C:\Users\win7\AppData\Local\Temp\cetrainers\CET4DD6.tmp\extracted\CET_TRAINER.CETRAINER

C:\Users\win7\AppData\Roaming\Wargaming.net\WorldOfTanks\tundra_keys_v2.txt

__tmp_rar_sfx_access_check_596984

data.txt

Office2016Trial.exe

C:\Users\win7\AppData\Local\Temp\RarSFX0\Office2016Trial.exe

C:\Users\win7\AppData\Local\Temp\dfsB714.tmp

C:\Users\win7\AppData\Local\Temp\b4dc208c-7bd9-4329-97c4-d2dc5041a19f\bin.dmc

C:\Users\win7\AppData\Local\Temp\b4dc208c-7bd9-4329-97c4-d2dc5041a19f\bin\bin.html

C:\Users\win7\AppData\Local\Temp\Setup Log 2016-04-09 #001.txt

C:\Users\win7\AppData\Local\Temp\is-N8BHQ.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-N8BHQ.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\{3943BD48-91F4-4AF7-93C1-CCA84463D9E9}\Setup.INI

C:\Users\win7\AppData\Local\Temp\{3943BD48-91F4-4AF7-93C1-CCA84463D9E9}\_ISMSIDEL.INI

C:\Users\win7\AppData\Local\Temp\{3943BD48-91F4-4AF7-93C1-CCA84463D9E9}\0x0000.ini

C:\Users\win7\AppData\Local\Temp\{3943BD48-91F4-4AF7-93C1-CCA84463D9E9}\0x0404.ini

C:\Users\win7\AppData\Local\Temp\{3943BD48-91F4-4AF7-93C1-CCA84463D9E9}\0x0406.ini

C:\Users\win7\AppData\Local\Temp\{3943BD48-91F4-4AF7-93C1-CCA84463D9E9}\0x0407.ini

C:\Users\win7\AppData\Local\Temp\{3943BD48-91F4-4AF7-93C1-CCA84463D9E9}\0x0409.ini

C:\Users\win7\AppData\Local\Temp\{3943BD48-91F4-4AF7-93C1-CCA84463D9E9}\0x040a.ini

C:\Users\win7\AppData\Local\Temp\{3943BD48-91F4-4AF7-93C1-CCA84463D9E9}\0x040b.ini

C:\Users\win7\AppData\Local\Temp\{3943BD48-91F4-4AF7-93C1-CCA84463D9E9}\0x040c.ini

C:\Users\win7\AppData\Local\Temp\{3943BD48-91F4-4AF7-93C1-CCA84463D9E9}\0x0410.ini

C:\Users\win7\AppData\Local\Temp\{3943BD48-91F4-4AF7-93C1-CCA84463D9E9}\0x0411.ini

C:\Users\win7\AppData\Local\Temp\{3943BD48-91F4-4AF7-93C1-CCA84463D9E9}\0x0412.ini

C:\Users\win7\AppData\Local\Temp\{3943BD48-91F4-4AF7-93C1-CCA84463D9E9}\0x0413.ini

C:\Users\win7\AppData\Local\Temp\{3943BD48-91F4-4AF7-93C1-CCA84463D9E9}\0x0414.ini

C:\Users\win7\AppData\Local\Temp\{3943BD48-91F4-4AF7-93C1-CCA84463D9E9}\0x0416.ini

C:\Users\win7\AppData\Local\Temp\{3943BD48-91F4-4AF7-93C1-CCA84463D9E9}\0x041d.ini

C:\Users\win7\AppData\Local\Temp\{3943BD48-91F4-4AF7-93C1-CCA84463D9E9}\0x0804.ini

C:\Users\win7\AppData\Local\Temp\{3943BD48-91F4-4AF7-93C1-CCA84463D9E9}\0x0816.ini

C:\Users\win7\AppData\Local\Temp\~CB77.tmp

C:\Users\win7\AppData\Local\Temp\~CBA6.tmp

C:\Users\win7\AppData\Local\Temp\{3943BD48-91F4-4AF7-93C1-CCA84463D9E9}\1033.MST

C:\Users\win7\AppData\Local\Temp\{3943BD48-91F4-4AF7-93C1-CCA84463D9E9}\Intelligent Sensing.msi

C:\Users\win7\AppData\Local\Temp\issD52D.tmp

C:\Users\win7\AppData\Local\Temp\{7C42A9E5-4E2D-470A-8ABF-343787A937A1}\IsConfig.ini

C:\Users\win7\AppData\Local\Temp\{A6D80004-539E-4016-8D20-CBBD1206211E}\_isres_0x0404.dll

C:\Users\win7\AppData\Local\Temp\{A6D80004-539E-4016-8D20-CBBD1206211E}\_isres_0x0406.dll

C:\Users\win7\AppData\Local\Temp\{A6D80004-539E-4016-8D20-CBBD1206211E}\_isres_0x0407.dll

C:\Users\win7\AppData\Local\Temp\{A6D80004-539E-4016-8D20-CBBD1206211E}\_isres_0x0409.dll

C:\Users\win7\AppData\Local\Temp\{A6D80004-539E-4016-8D20-CBBD1206211E}\_isres_0x040a.dll

C:\Users\win7\AppData\Local\Temp\{A6D80004-539E-4016-8D20-CBBD1206211E}\_isres_0x040b.dll

C:\Users\win7\AppData\Local\Temp\{A6D80004-539E-4016-8D20-CBBD1206211E}\_isres_0x040c.dll

C:\Users\win7\AppData\Local\Temp\{A6D80004-539E-4016-8D20-CBBD1206211E}\_isres_0x0410.dll

C:\Users\win7\AppData\Local\Temp\{A6D80004-539E-4016-8D20-CBBD1206211E}\_isres_0x0411.dll

C:\Users\win7\AppData\Local\Temp\{A6D80004-539E-4016-8D20-CBBD1206211E}\_isres_0x0412.dll

C:\Users\win7\AppData\Local\Temp\{A6D80004-539E-4016-8D20-CBBD1206211E}\_isres_0x0413.dll

C:\Users\win7\AppData\Local\Temp\{A6D80004-539E-4016-8D20-CBBD1206211E}\_isres_0x0414.dll

C:\Users\win7\AppData\Local\Temp\{A6D80004-539E-4016-8D20-CBBD1206211E}\_isres_0x0416.dll

C:\Users\win7\AppData\Local\Temp\{A6D80004-539E-4016-8D20-CBBD1206211E}\_isres_0x041d.dll

C:\Users\win7\AppData\Local\Temp\{A6D80004-539E-4016-8D20-CBBD1206211E}\_isres_0x0804.dll

C:\Users\win7\AppData\Local\Temp\{A6D80004-539E-4016-8D20-CBBD1206211E}\_isres_0x0816.dll

C:\Users\win7\AppData\Local\Temp\{A6D80004-539E-4016-8D20-CBBD1206211E}\ISBEWI64.exe

C:\Users\win7\AppData\Local\Temp\nsqEEBF.tmp

C:\Users\win7\AppData\Local\Temp\nsfEECF.tmp\lxdl.dll

C:\Users\win7\AppData\Local\Temp\nsfEECF.tmp\inetc.dll

C:\Users\win7\AppData\Local\Temp\nsfEECF.tmp\nsmF113.tmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\api[1].htm

C:\Users\win7\AppData\Local\Temp\nsfEECF.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Temp\nsfEECF.tmp\nsuF7EA.tmp

C:\Windows\wmsetup.log

C:\Users\win7\AppData\Local\Temp\tmp07859.WMC\control.xml

.\BingBarPartnerConfig.cab

C:\Users\win7\AppData\Local\Temp\7C6A733F4E2C470AB4631C3787A937A1\BBSetupConfig.xml

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\711[1]

.\PF.cab

C:\Users\win7\AppData\Local\Temp\\~DFD0804B4E68DB7B3E.TMP

C:\Users\win7\AppData\Local\Folder\windows.exe.config

C:\Users\win7\AppData\Local\Folder\windows.exe

C:\Users\win7\AppData\Local\Temp\1425820292.xml

__tmp_rar_sfx_access_check_733890

data.dll

win2016kms__2827_il150568_26.exe

C:\Users\win7\AppData\Local\Temp\RarSFX0\win2016kms__2827_il150568_26.exe

http://bestprosoft.xyz/redirection.html

C:\Users\win7\AppData\Local\Temp\is-V046T.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\WERB9C.tmp.WERInternalMetadata.xml

1.217.983.0_TO_1.217.1000.0_MPASDLTA.VDM._P

1.217.983.0_TO_1.217.1000.0_MPAVDLTA.VDM._P

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\setup.exe

C:\Users\win7\AppData\Local\Temp\nso5CBB.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nso5CBB.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nso5CBB.tmp\options.ini

C:\Users\win7\AppData\Local\Temp\nso5CBB.tmp\shortcuts.ini

C:\Users\win7\AppData\Local\Temp\nso5CBB.tmp\summary.ini

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\AccessibleMarshal.dll

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\application.ini

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\blocklist.xml

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\crashreporter-override.ini

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\crashreporter.exe

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\crashreporter.ini

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\dependentlibs.list

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\firefox.exe

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\freebl3.chk

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\freebl3.dll

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\js3250.dll

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\LICENSE

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\mozcpp19.dll

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\mozcrt19.dll

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\nspr4.dll

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\nss3.dll

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\nssckbi.dll

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\nssdbm3.chk

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\nssdbm3.dll

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\nssutil3.dll

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\platform.ini

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\plc4.dll

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\plds4.dll

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\plugin-container.exe

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\README.txt

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\smime3.dll

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\softokn3.chk

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\softokn3.dll

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\sqlite3.dll

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\ssl3.dll

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\updater.exe

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\xpcom.dll

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\xul.dll

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\arrow.gif

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\arrowd.gif

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\broken-image.png

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\charsetalias.properties

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\charsetData.properties

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\contenteditable.css

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\designmode.css

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\EditorOverride.css

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\forms.css

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\grabber.gif

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\hiddenWindow.html

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\html.css

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\langGroups.properties

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\language.properties

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\loading-image.png

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\mathml.css

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\quirk.css

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\svg.css

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\table-add-column-after-active.gif

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\table-add-column-after-hover.gif

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\table-add-column-after.gif

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\table-add-column-before-active.gif

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\table-add-column-before-hover.gif

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\table-add-column-before.gif

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\table-add-row-after-active.gif

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\table-add-row-after-hover.gif

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\table-add-row-after.gif

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\table-add-row-before-active.gif

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\table-add-row-before-hover.gif

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\table-add-row-before.gif

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\table-remove-column-active.gif

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\table-remove-column-hover.gif

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\table-remove-column.gif

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\table-remove-row-active.gif

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\table-remove-row-hover.gif

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\table-remove-row.gif

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\ua.css

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\viewsource.css

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\wincharset.properties

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\html\folder.png

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\fonts\mathfont.properties

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\fonts\mathfontStandardSymbolsL.properties

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\fonts\mathfontSTIXNonUnicode.properties

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\fonts\mathfontSTIXSize1.properties

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\fonts\mathfontSymbol.properties

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\fonts\mathfontUnicode.properties

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\entityTables\html40Latin1.properties

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\entityTables\html40Special.properties

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\entityTables\html40Symbols.properties

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\entityTables\htmlEntityVersions.properties

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\entityTables\mathml20.properties

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\entityTables\transliterate.properties

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\dtd\mathml.dtd

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\res\dtd\xhtml11.dtd

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\plugins\npnul32.dll

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\modules\CertUtils.jsm

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\modules\CrashSubmit.jsm

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\modules\ctypes.jsm

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\modules\debug.js

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\modules\distribution.js

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\modules\DownloadLastDir.jsm

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\modules\DownloadUtils.jsm

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\modules\FileUtils.jsm

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\modules\ISO8601DateUtils.jsm

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\modules\LightweightThemeConsumer.jsm

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\modules\LightweightThemeManager.jsm

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\modules\Microformats.js

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\modules\NetUtil.jsm

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\modules\NetworkPrioritizer.jsm

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\modules\openLocationLastURL.jsm

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\modules\PlacesDBUtils.jsm

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\modules\PluralForm.jsm

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\modules\SpatialNavigation.js

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\modules\utils.js

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\modules\WindowDraggingUtils.jsm

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\modules\WindowsPreviewPerTab.jsm

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\modules\XPCOMUtils.jsm

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\greprefs\all.js

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\greprefs\security-prefs.js

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\greprefs\xpinstall.js

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}\icon.png

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}\install.rdf

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}\preview.png

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\defaults\pref\channel-prefs.js

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\defaults\pref\firefox-branding.js

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\defaults\pref\firefox.js

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\defaults\pref\reporter.js

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\defaults\autoconfig\platform.js

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\defaults\autoconfig\prefcalls.js

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\components\browser.xpt

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\components\browserdirprovider.dll

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\components\brwsrcmp.dll

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\components\components.list

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\components\FeedConverter.js

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\components\FeedProcessor.js

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\components\FeedWriter.js

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\components\fuelApplication.js

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\components\GPSDGeolocationProvider.js

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\components\jsconsole-clhandler.js

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\components\NetworkGeolocationProvider.js

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\components\nsAddonRepository.js

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\components\nsBadCertHandler.js

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\components\nsBlocklistService.js

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\components\nsBrowserContentHandler.js

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\components\nsBrowserGlue.js

C:\Users\win7\AppData\Local\Temp\7zS50A4.tmp\nonlocalized\components\nsContentDispatchChooser.js

C:\Users\win7\AppData\Local\Temp\\~DF6C783EF969FA9D62.TMP

C:\Users\win7\AppData\Local\Temp\nsy80ED.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\.ba1\WixStdBA.dll

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\.ba1\thm.xml

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\.ba1\thm.wxl

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\.ba1\logo.png

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\.ba1\Avira.OE.Setup.InstallationCore.dll

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\.ba1\progress.gif

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\.ba1\de\thm.wxl

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\.ba1\en\thm.wxl

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\.ba1\es\thm.wxl

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\.ba1\fr\thm.wxl

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\.ba1\it\thm.wxl

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\.ba1\ptbr\thm.wxl

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\.ba1\ru\thm.wxl

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\.ba1\nl\thm.wxl

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\.ba1\tr\thm.wxl

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\.ba1\ja\thm.wxl

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\.ba1\zhcn\thm.wxl

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\.ba1\zhtw\thm.wxl

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\.ba1\pl\thm.wxl

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\.ba1\BootstrapperApplicationData.xml

C:\Users\win7\AppData\Local\Temp\Avira_Launcher_20160409122914.log

C:\ProgramData\Package Cache\{315dd168-0794-4cf1-8355-f195cde642fc}\state.rsm

C:\ProgramData\Package Cache\15568BEAD79920B30F068404FD4CBB9D841B18F2\Avira.OE.Setup.Prerequisites.exe

C:\ProgramData\Package Cache\.unverified\ExecutePrequisites

C:\Users\win7\AppData\Local\Temp\Cab696C.tmp

C:\Users\win7\AppData\Local\Temp\Tar696D.tmp

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8828F39C7C0CE9A14B25C7EB321181BA_DC03E45EC7611F50ADAEBABE405A8C4C

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A3D5BF1283C2E63D8C8A8C72F0051F5A

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\0972B7C417F696E06E186AEB26286F01_9D3D67F23DE0B5AF5A01813A18AAA802

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\0972B7C417F696E06E186AEB26286F01_5FE673895F793154E229BED7BA1C1A2B

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3D0AC26322348780E90E022EA217C58C

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\0972B7C417F696E06E186AEB26286F01_9D3D67F23DE0B5AF5A01813A18AAA802

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BAEBE581FCB73249406FC21094EA252E_BC0CE803EF41A748738619ED7838EEFC

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D84E548583BE1EE7DB5A935821009D26_5B98B6CD6E69202676965CF5B0E2A7A7

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\.be\Avira.OE.Setup.Bundle.exe

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\ExecutePrequisites

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\OECrossDetectionKey

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\BundlePayload

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\MsiDE

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\MsiEN

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\MsiEs

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\MsiFr

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\MsiIt

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\MsiPtBr

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\MsiRu

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\MsiNl

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\MsiTr

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\MsiJa

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\MsiZhCn

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\MsiZhTw

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\MsiPl

C:\Users\win7\AppData\Local\Temp\{315dd168-0794-4cf1-8355-f195cde642fc}\Id.Avira.OE.Setup.Msi

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\23B523C9E7746F715D33C6527C18EB9D

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\23B523C9E7746F715D33C6527C18EB9D

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\828298824EA5549947C17DDABF6871F5_334ED69A36BF882B447815998BE46E97

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\828298824EA5549947C17DDABF6871F5_95A32724DDCFA58B11E92C028AD410A3

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D7B4E43171BB9E412497B0377F4343E7

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\828298824EA5549947C17DDABF6871F5_334ED69A36BF882B447815998BE46E97

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\0CCA7F4B3366C6FAA13012C139D5D8C6_D929E6188CFB2655AFCC3684E0AD5177

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\0CCA7F4B3366C6FAA13012C139D5D8C6_3E5A36213ABCB9178323FF3C3E7EC975

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B9BC83D408105DBA1B3E3814C9C8FB9F

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\0CCA7F4B3366C6FAA13012C139D5D8C6_D929E6188CFB2655AFCC3684E0AD5177

C:\Windows\System32\9906fc7.exe

C:\Users\win7\AppData\Local\Temp\is-QJ066.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-QJ066.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\50bf5171-fe38-11e5-9e88-08002763e612\target.exe_50bf5174-fe38-11e5-9e88-08002763e612

C:\Users\win7\AppData\Local\Temp\50bf5171-fe38-11e5-9e88-08002763e612\target.exe

C:\Users\win7\AppData\Local\Temp\50bf5171-fe38-11e5-9e88-08002763e612\javainst.exe_50bf5175-fe38-11e5-9e88-08002763e612

C:\Users\win7\AppData\Local\Temp\is-OVKH7.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-OVKH7.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-ER970.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-ER970.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-ER970.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-ER970.tmp\isskin.dll

C:\Temp\ves_rework_01.zip

C:\Temp\ves_rework_02.zip

C:\Temp\ves_rew_up_03.zip

C:\Users\win7\AppData\Roaming\eLEThjJwJF\1132.xml

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\vVzWJrYnj.lnk

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\vVzWJrYnj.lnk\desktop.ini

C:\Users\win7\AppData\Roaming\eLEThjJwJF

C:\Users\win7\AppData\Roaming\eLEThjJwJF\dKrvSGxBAr.exe

C:\Users\win7\AppData\Local\Temp\is-AQFQB.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-AQFQB.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-AQFQB.tmp\_isetup\_shfoldr.dll

\\.\pipe\OperaCrashReporter2768

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160409135640.log

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160409135639.exe

\\?\C:\Users\win7\AppData\Roaming\Adobe\Flash Player\AssetCache\D6VX55H9

\\?\C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\D93KKETC

\\?\C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\D93KKETC\macromedia.com\support\flashplayer\sys\settings.sol

\\?\C:\Users\win7\AppData\Roaming\Adobe\Flash Player\AssetCache\D6VX55H9\ABD49354324081CEBB8F60184CF5FEE81F0F9298.swz

\\?\C:\libs\framework_4.6.0.23201.swz

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\crossdomain[1].xml

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\framework_4.6.0.23201[1].swz

\\?\C:\Users\win7\AppData\Roaming\Adobe\Flash Player\AssetCache\D6VX55H9\cacheSize.txt

\\?\C:\Users\win7\AppData\Roaming\Adobe\Flash Player\AssetCache\D6VX55H9\ABD49354324081CEBB8F60184CF5FEE81F0F9298.heu

\\?\C:\Users\win7\AppData\Roaming\Adobe\Flash Player\AssetCache\D6VX55H9\8F903698240FE799F61EEDA8595181137B996156.swz

\\?\C:\libs\textLayout_2.0.0.232.swz

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\crossdomain[1].xml

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\textLayout_2.0.0.232[1].swz

\\?\C:\Users\win7\AppData\Roaming\Adobe\Flash Player\AssetCache\D6VX55H9\8F903698240FE799F61EEDA8595181137B996156.heu

\\?\C:\Users\win7\AppData\Roaming\Adobe\Flash Player\AssetCache\D6VX55H9\4BAE91DBAEF0CEEC0FCE5505D96DDEA865EDBFC1.swz

\\?\C:\libs\spark_4.6.0.23201.swz

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\spark_4.6.0.23201[1].swz

\\?\C:\Users\win7\AppData\Roaming\Adobe\Flash Player\AssetCache\D6VX55H9\4BAE91DBAEF0CEEC0FCE5505D96DDEA865EDBFC1.heu

\\?\C:\Users\win7\AppData\Roaming\Adobe\Flash Player\AssetCache\D6VX55H9\84D36BDF5E2577BFB0B8CE6A12A8646BB1AADDDD.swz

\\?\C:\libs\sparkskins_4.6.0.23201.swz

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\sparkskins_4.6.0.23201[1].swz

\\?\C:\Users\win7\AppData\Roaming\Adobe\Flash Player\AssetCache\D6VX55H9\84D36BDF5E2577BFB0B8CE6A12A8646BB1AADDDD.heu

\\?\C:\Users\win7\AppData\Roaming\Adobe\Flash Player\AssetCache\D6VX55H9\D888AEE0CE49F58A35C32EB138EDD00F0D6B9FAE.swz

\\?\C:\libs\mx_4.6.0.23201.swz

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\mx_4.6.0.23201[1].swz

\\?\C:\Users\win7\AppData\Roaming\Adobe\Flash Player\AssetCache\D6VX55H9\D888AEE0CE49F58A35C32EB138EDD00F0D6B9FAE.heu

\\?\C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\D93KKETC\localhost\sample\2a2e129f06131a87bc3822912e0ed206.sol

\\?\C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\localhost\sample\2a2e129f06131a87bc3822912e0ed206.sol

\\?\C:\files\assets\alchemy.swf

C:\Users\win7\AppData\Local\Temp\is-40J5L.tmp\rar.ini

\\?\C:\Users\win7\AppData\Local\Temp\is-40J5L.tmp\rar.ini

stub_tmp.rar

stub4_install.exe

C:\Users\win7\AppData\Local\Temp\is-40J5L.tmp\GCountry.dll

C:\Users\win7\AppData\Local\Temp\is-40J5L.tmp\config.rar

C:\Users\win7\AppData\Local\Temp\is-40J5L.tmp\UnRAR.exe

C:\Users\win7\AppData\Local\Temp\is-40J5L.tmp\stub4_install.exe

C:\Users\win7\AppData\Local\Temp\is-40J5L.tmp\stub5_install.exe

C:\Users\win7\AppData\Local\Temp\is-40J5L.tmp\stub6_install.exe

C:\Users\win7\AppData\Local\Temp\is-40J5L.tmp\OCSetupHlp.dll

C:\Users\win7\AppData\Local\Temp\is-40J5L.tmp\16.txt

C:\Users\win7\AppData\Local\Temp\is-40J5L.tmp\12.txt

C:\Users\win7\AppData\Local\Temp\is-40J5L.tmp\393.txt

C:\Users\win7\AppData\Local\Temp\is-UK70N.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-UK70N.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-UK70N.tmp\ISTask.dll

C:\Users\win7\AppData\Local\Temp\is-UK70N.tmp\banner0_english.bmp

C:\Users\win7\AppData\Local\Temp\is-UK70N.tmp\banner1_english.bmp

C:\Users\win7\AppData\Local\Temp\nsk13CB.tmp

C:\Users\win7\AppData\Local\Temp\nsq143A.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nslA146.tmp

C:\Users\win7\AppData\Local\Temp\nsgA212.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\GLCCD1C.tmp

C:\Users\win7\AppData\Local\Temp\is-GLSLC.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-GLSLC.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-GLSLC.tmp\CallbackCtrl.dll

C:\Users\win7\AppData\Local\Temp\1634612720.xml

C:\Windows\System32\schtasks.exe

C:\ProgramData\b56dff5a-df23-4e43-acde-a4f08b8dcffb\temp

C:\Users\win7\AppData\Local\Temp\WER5DF3.tmp.WERInternalMetadata.xml

C:\Users\win7\AppData\Local\Temp\is-FVER2.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-FVER2.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-FVER2.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-FVER2.tmp\ISLogo.dll

C:\Users\win7\AppData\Local\Temp\is-FVER2.tmp\isexec.dll

C:\Users\win7\AppData\Local\Temp\is-FVER2.tmp\logo.png

C:\Users\win7\AppData\Local\Temp\_ir_sf_temp_0\irsetup.dat

C:\Users\win7\AppData\Local\Temp\_ir_sf_temp_0\IRIMG1.JPG

C:\Users\win7\AppData\Local\Temp\_ir_sf_temp_0\IRIMG2.JPG

C:\Users\win7\AppData\Local\Temp\Majorgeeks.com Software Updates and News Setup Log.txt

C:\Users\win7\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe

C:\Users\win7\AppData\Local\Temp\_ir_sf_temp_0\lua5.1.dll

C:\ProgramData\Battle.net\Setup\battle.net\Logs\battle.net-setup-20160409T120247.141335.log

C:\ProgramData\Battle.net\Setup\diablo3_enus\SetupWin.mpq

C:\ProgramData\Battle.net\Setup\diablo3_enus\Diablo III Setup.exe

C:\ProgramData\Battle.net\Setup\diablo3\Logs\battle.net-launcher-20160409T122241.324750.log

C:\sample.writeCacheBackup

C:\ProgramData\Battle.net\Setup\diablo3_enus\SetupWin.mpq.lock

C:\ProgramData\Battle.net\Setup\diablo3_enus\Diablo III Setup.exe.temp

rufus.com

C:\Windows\system32\rufus.ini

C:\Users\win7\AppData\Local\Temp\RufCF65.tmp

C:\Windows\System32\GroupPolicy\User\Registry.pol

C:\Windows\System32\GroupPolicy\Machine\Registry.pol

\\.\MountPointManager

C:\Windows\system32\rufus.ini~

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\Rufus_win[1].ver

C:\Users\win7\AppData\Local\Temp\nsl4904.tmp

C:\Users\win7\AppData\Local\Temp\nsw4992.tmp\System.dll

__tmp_rar_sfx_access_check_594546

data

stub.exe

C:\Users\win7\AppData\Local\Temp\stub.exe

C:\Users\win7\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\UCOh.lnk

C:\Users\win7\AppData\Local\Temp\is-79O4Q.tmp\ex.bat

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\G5P9Q7NKMPLD7RWW7EWB.temp

C:\Users\win7\AppData\Local\Temp\nsc7D1F.tmp

C:\Users\win7\AppData\Local\Temp\nss7DCC.tmp\System.dll

C:\ProgramData\074666a9-9c4a-46c0-9d2f-0ac2cbbb1ef3\temp

C:\Users\win7\AppData\Local\Temp\is-46GEG.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-46GEG.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nsl8EE.tmp

C:\Users\win7\AppData\Local\Temp\nsb8FF.tmp\LangDLL.dll

C:\Users\win7\AppData\Local\Temp\nsb8FF.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsb8FF.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\DRHelper_installStart.exe

C:\Users\win7\AppData\Local\Temp\nsb8FF.tmp\background_small.ole

C:\Users\win7\AppData\Local\Temp\nsb8FF.tmp\button.bmp

C:\Users\win7\AppData\Local\Temp\nsb8FF.tmp\GraphicalInstaller.dll

C:\Users\win7\AppData\Local\Temp\nsb8FF.tmp\Math.dll

C:\Users\win7\AppData\Local\Temp\nsb8FF.tmp\background.ole

C:\Users\win7\AppData\Local\Temp\\~DF71CE3A7D6C64BA59.TMP

C:\Users\win7\AppData\Local\Temp\nsb8FF.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\\z.zlib

C:\Users\win7\AppData\Local\

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\mbahost.dll

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\ManagedUx.dll

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\AdminDeployment.xsd

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\res\stop.ico

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\res\info.ico

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\LocalizableStrings.xml

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\2052\LocalizableStrings.xml

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\1028\LocalizableStrings.xml

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\3082\LocalizableStrings.xml

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\1036\LocalizableStrings.xml

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\1041\LocalizableStrings.xml

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\1055\LocalizableStrings.xml

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\SkuResources.xaml

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\HighContrastSkuResources.xaml

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\1028\License.htm

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\1029\License.htm

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\1031\License.htm

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\3082\License.htm

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\1040\License.htm

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\BootstrapperCore.dll

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\mbapreq.dll

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\mbapreq.thm

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\mbapreq.png

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\1028\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\1029\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\1030\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\1031\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\1032\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\1035\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\1036\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\1038\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\1040\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\1041\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\1042\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\1043\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\1044\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\1045\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\1046\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\1049\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\1051\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\1053\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\1055\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\1060\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\2052\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\2070\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\3082\mbapreq.wxl

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\BootstrapperCore.config

C:\Users\win7\AppData\Local\Temp\Setup_20160409171527_Failed.txt

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\1045\License.htm

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\1046\License.htm

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\1049\License.htm

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\1055\License.htm

C:\Users\win7\AppData\Local\Temp\{7dbba119-718a-4f68-b33e-454dc8aa5faf}\.ba1\BootstrapperApplicationData.xml

C:\Users\win7\AppData\Local\Temp\dd_patch_KB2932965_20160409171527.log

C:\Users\win7\AppData\Local\Temp\is-KOL0K.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-KOL0K.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-KOL0K.tmp\_isetup\_shfoldr.dll

/mingw/etc/mplayer/mplayer.conf

C:/mplayer/config

C:/mplayer/codecs.conf

/mingw/etc/mplayer/codecs.conf

C:\Users\win7\AppData\Local\Temp\is-L0AAM.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-L0AAM.tmp\_isetup\_shfoldr.dll