cc000c

cc0014

cc001c

cc0024

cc002c

cc0034

cc003c

cc0044

cc0018

OLEACCRC.DLL

C:\Windows\system32\UxTheme.dll

USER32.DLL

C:\Windows\system32\dwmapi.dll

C:\sampleENU.dll

C:\sampleLOC.dll

ADVAPI32.dll

comctl32.dll

UxTheme.dll

imageres.dll

C:\Windows\system32\ole32.dll

C:\Windows\syswow64\MSCTF.dll

OLEAUT32.DLL

KERNEL32.DLL

advapi32.dll

comdlg32.dll

gdi32.dll

mpr.dll

ole32.dll

oleacc.dll

oleaut32.dll

shell32.dll

user32.dll

version.dll

winmm.dll

winspool.drv

olepro32.dll

uxtheme.dll

IMM32.dll

SHELL32.dll

API-MS-Win-Security-LSALookup-L1-1-0.dll

CRYPTBASE.dll

API-MS-Win-Core-LocalRegistry-L1-1-0.dll

C:\Windows\System32\msxml3r.dll

C:\sample

imm32.dll

kernel32

user32

API-MS-WIN-Service-Management-L1-1-0.dll

API-MS-WIN-Service-winsvc-L1-1-0.dll

RPCRT4.dll

MMDevAPI.DLL

propsys.dll

wdmaud.drv

MMDEVAPI.DLL

SETUPAPI.dll

SHLWAPI.dll

AUDIOSES.DLL

msacm32.drv

midimap.dll

CFGMGR32.dll

C:\Users\win7\AppData\Local\Temp\FlashDLL.dll

C:\Users\win7\AppData\Local\Temp\FlashDLLENU.dll

C:\Users\win7\AppData\Local\Temp\FlashDLLLOC.dll

C:\Users\win7\AppData\Local\Temp\is-80VO8.tmp\_isetup\_shfoldr.dll

shfolder.dll

C:\Users\win7\AppData\Local\Temp\is-80VO8.tmp\isxdl.dll

wininet.dll

msi.dll

C:\Windows\system32\msi.dll

C:\Windows\system32\imageres.dll

C:\Windows\system32\shell32.dll

C:\Windows\system32\shlwapi.dll

RICHED20.DLL

USP10.dll

msls31.dll

C:\Windows\system32\kernel32.dll

C:\Users\win7\AppData\Local\Temp\is-U2IOG.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-U2IOG.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-PFBCQ.tmp\_isetup\_shfoldr.dll

Rstrtmgr.dll

C:\Windows\SysWOW64\bcryptprimitives.dll

C:\Users\win7\AppData\Local\Temp\is-PFBCQ.tmp\idp.dll

kernel32.dll

C:\Users\win7\AppData\Local\Temp\is-PFBCQ.tmp\innocallback.dll

C:\Users\win7\AppData\Local\Temp\is-PFBCQ.tmp\innocallback.ENU

C:\Users\win7\AppData\Local\Temp\is-PFBCQ.tmp\innocallback.EN

C:\Users\win7\AppData\Local\Temp\is-PFBCQ.tmp\isslideshow.dll

C:\Users\win7\AppData\Local\Temp\is-PFBCQ.tmp\isslideshow.ENU

C:\Users\win7\AppData\Local\Temp\is-PFBCQ.tmp\isslideshow.EN

RICHED32.DLL

C:\Users\win7\AppData\Local\Temp\is-PFBCQ.tmp\ISDone.dll

SHFOLDER

ntmarta.dll

RichEd20

C:\Users\win7\AppData\Local\Temp\nsxF941.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nsxF941.tmp\System.dll

D3DX10_43.DLL

D3D10_1.DLL

DXGI.DLL

D3DCompiler_43.dll

api-ms-win-downlevel-shlwapi-l2-1-0.dll

urlmon.dll

api-ms-win-downlevel-ole32-l1-1-0.dll

OLEAUT32.dll

Secur32.dll

API-MS-WIN-DOWNLEVEL-SHLWAPI-L1-1-0.DLL

WININET.dll

api-ms-win-downlevel-advapi32-l2-1-0.dll

MSHTML.dll

Kernel32

API-MS-Win-Security-SDDL-L1-1-0.dll

WS2_32.dll

mshtml.dll

IEFRAME.dll

d2d1.dll

DWrite.dll

dxgi.dll

C:\DXGIDebug.dll

C:\Windows\system32\DXGIDebug.dll

setupapi.dll

WINTRUST.dll

d3d11.dll

D3D10Warp.dll

C:\Windows\system32\D3D10Warp.dll

C:\Windows\system32\Msimtf.dll

MLANG.dll

PROPSYS.dll

UIAutomationCore.dll

WINMM.dll

C:\Windows\system32\WINMM.dll

CRYPTSP.dll

jscript9.dll

dwrite.dll

OLEACC.DLL

SXS.DLL

C:\Windows\system32\Oleacc.dll

C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18834_none_72d38c5186679d48\gdiplus.dll

WindowsCodecs.dll

winhttp.dll

CRYPT32.dll

USERENV.dll

IPHLPAPI.DLL

DNSAPI.dll

dhcpcsvc.DLL

Comctl32.dll

C:\Windows\system32\ws2_32

secur32.dll

ncrypt.dll

USER32.dll

cryptnet.dll

C:\Windows\system32\cryptnet.dll

SensApi.dll

WINHTTP.dll

SspiCli.dll

ntdll.dll

NSI.dll

profapi.dll

Cabinet.dll

DEVRTL.dll

RichEd32.dll

certcli.dll

C:\Windows\system32\dsrole.dll

C:\Windows\system32\urlmon.dll

C:\Windows\system32\riched20.dll

COMCTL32.dll

C:\Windows\System32\shdocvw.dll

C:\Windows\system32\ntdll.dll

C:\Windows\system32\sfc.dll

C:\Users\win7\AppData\Local\Temp\lui7CE0.tmp\setup.exe

C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll

mscoree.dll

ntdll

C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll

RichEd20.dll

mscorsec.dll

WINTRUST.DLL

C:\Windows\syswow64\CRYPT32.dll

imagehlp.dll

bcrypt.dll

API-MS-WIN-Service-Management-L2-1-0.dll

Shell32.dll

UXTHEME.DLL

GdiPlus.dll

C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18834_none_72d38c5186679d48\GdiPlus.dll

msimg32.dll

ntshrui.dll

srvcli.dll

cscapi.dll

slc.dll

C:\ProgramData\Package Cache\{050d4fc8-5d48-4b8f-8972-47c82c46020f}\vcredist_x64.exe

C:\ProgramData\Package Cache\{f65db027-aff3-4070-886a-0d87064aabb1}\vcredist_x86.exe

C:\Windows\system32\ntshrui.dll

netutils.dll

ADVAPI32.DLL

FMOD.DLL

api-ms-win-core-synch-l1-2-0

api-ms-win-core-fibers-l1-1-1

advapi32

api-ms-win-core-localization-l1-2-1

api-ms-win-appmodel-runtime-l1-1-1

ext-ms-win-kernel32-package-current-l1-1-0

mscms.dll

icm32.dll

C:\Windows\system32\EhStorShell.dll

c:\windows\system32\imageres.dll

C:\Windows\system32\winmm.dll

mapistub.dll

C:\Windows\system32\mapi32.dll

Advapi32.dll

Crypt32.dll

C:\Users\win7\AppData\Local\Temp\{7C029707-4E9A-470A-AADA-703787A937A1}\Disk1\ISSetup.dll

GDI32.dll

VERSION.dll

C:\Users\win7\AppData\Local\Temp\{7C029707-4E9A-470A-AADA-703787A937A1}\_Setup.dll

C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{5722A91F-051C-4190-B442-191B2349EAF4}\ISRT.dll

WINSPOOL.DRV

C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{5722A91F-051C-4190-B442-191B2349EAF4}\_isres.dll

C:\Windows\system32\AppHelp.dll

C:\Users\win7\AppData\Local\Temp\{7C029707-4E9A-470A-AADA-703787A937A1}\Disk1\data1.hdr

C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{5722A91F-051C-4190-B442-191B2349EAF4}\_ISRes.dll

C:\Windows\system32\KERNEL32.DLL

C:\Windows\system32\NTDLL.DLL

C:\Windows\system32\ADVAPI32.DLL

security.dll

Kernel32.dll

iphlpapi.dll

OPENGL32

gdi32

VBoxOGL.dll

C:\Windows\system32\gdi32.dll

opengl32.dll

url.dll

C:\Users\win7\AppData\Local\Temp\nsi4AD0.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\is-P334T.tmp\_isetup\_shfoldr.dll

Iphlpapi.dll

C:\Users\win7\AppData\Local\Temp\is-30KTH.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-30KTH.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-TUK65.tmp\_isetup\_shfoldr.dll

Msctf.dll

wtsapi32.dll

WINSTA.dll

NTDLL.dll

C:\Users\win7\AppData\Local\Temp\is-NMVG6.tmp\_isetup\_shfoldr.dll

DSound.dll

C:\Windows\system32\DSound.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\ole32.dll

AdvApi32.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System\908ba9e296e92b4e14bdc2437edac603\System.ni.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\abecd46ce0b212dad31a9e8f9adf073f\System.EnterpriseServices.ni.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\abecd46ce0b212dad31a9e8f9adf073f\System.EnterpriseServices.Wrapper.dll

C:\Windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll

C:\Windows\system32\DBGHELP.DLL

C:\Windows\system32\odbcint.dll

MSVCRT.DLL

C:\Users\win7\AppData\Local\Temp\is-C5KLU.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-VSQT4.tmp\_isetup\_shfoldr.dll

gdiplus.dll

propsys

Shell32

shlwapi

DCIMAN32.DLL

WS2_32.DLL

Fwpuclnt.dll

DWMAPI.DLL

Restore.dll

Msimg32.dll

riched20.dll

PSAPI.DLL

SHELL32.DLL

URLMON.DLL

api-ms-win-core-winrt-l1-1-0.dll

C:\Windows\system32\clusapi.dll

feclient.dll

C:\Users\win7\AppData\Local\Temp\is-5N2K7.tmp\_isetup\_shfoldr.dll

SetupENU

SETUPENU.DLL

C:\Users\win7\AppData\Local\Temp\is-VIMSI.tmp\_isetup\_shfoldr.dll

KERNEL32.dll

NTDLL

SSPICLI

C:\Users\win7\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Program Files\Microsoft Silverlight\sllauncher.exe

ddraw.dll

C:\Windows\SysWOW64\DDRAW.dll

C:\Windows\SysWOW64\jscript9.dll

COMCTL32

KERNEL32

Msi.DLL

SHFolder.dll

C:\Windows\SysWOW64\OLE32.DLL

C:\Windows\system32\UXTHEME.dll

C:\Windows\system32\USERENV.dll

C:\Windows\system32\SETUPAPI.dll

C:\Windows\system32\APPHELP.dll

C:\Windows\system32\PROPSYS.dll

C:\Windows\system32\DWMAPI.dll

C:\Windows\system32\CRYPTBASE.dll

C:\Windows\system32\OLEACC.dll

C:\Windows\system32\CLBCATQ.dll

C:\Windows\system32\SHFOLDER.dll

C:\Windows\system32\RichEd20.dll

C:\Users\win7\AppData\Local\Temp\nsi6434.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nsi6434.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\is-F7VI6.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nswA975.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nswA975.tmp\CityHash.dll

C:\Users\win7\AppData\Local\Temp\GLCE5A.tmp

C:\Users\win7\AppData\Local\Temp\ELICEN~1\EULAs\\SPANISH.rtf

C:\Users\win7\AppData\Local\Temp\ELICEN~1\EULAs\\JAPANESE.rtf

C:\Users\win7\AppData\Local\Temp\ELICEN~1\EULAs\\GERMAN.rtf

C:\Users\win7\AppData\Local\Temp\ELICEN~1\EULAs\\FRENCH.rtf

C:\Users\win7\AppData\Local\Temp\ELICEN~1\EULAs\\ENGLISH.rtf

C:\Users\win7\AppData\Local\Temp\ELICEN~1\EULAs\\ITALIAN.rtf

C:\Windows\system32\user32.dll

C:\Users\win7\AppData\Local\Temp\GLF1A43.tmp

C:\Users\win7\AppData\Local\Temp\ELICEN~1\msvcr71.dll

C:\Users\win7\AppData\Local\Temp\ELICEN~1\ELICEN~1.EXE

C:\Users\win7\AppData\Local\Temp\ELICEN~1\DOTNET~1.EXE

C:\Users\win7\AppData\Local\Temp\ELICEN~1\eLicenserWISEHelper.exe

C:\Users\win7\AppData\Local\Temp\ELICEN~1\DotNetCheck.exe

C:\Users\win7\AppData\Local\Temp\ELICEN~1\INSTAL~1\\ELICEN~1.EXE

C:\Users\win7\AppData\Local\Temp\ELICEN~1\INSTAL~1\\msvcr71.dll

C:\Users\win7\AppData\Local\Temp\ELICEN~1\INSTAL~1\\ELICEN~2.EXE

C:\Users\win7\AppData\Local\Temp\ELICEN~1\INSTAL~1\\DOTNET~1.EXE

C:\Users\win7\AppData\Local\Temp\ELICEN~1\INSTAL~1\eLicenserWISEHelper.exe

C:\WBDJA44I.DLL

lsm.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\drivers\pacer.sys

fwpuclnt.dll

pnrpsvc.dll

C:\Windows\system32\pnrpsvc.dll

AzRoles.dll

fxsresm.dll

cscsvc.dll

C:\Windows\system32\cscsvc.dll

C:\Windows\system32\iphlpsvc.dll

C:\Windows\system32\umpo.dll

HTTPAPI.DLL

NetLogon.dll

drt.dll

C:\Windows\system32\drivers\ndis.sys

C:\Windows\system32\advapi32.dll

PeerDistSvc.dll

C:\Windows\system32\PeerDistSvc.dll

WsmRes.dll

tbssvc.dll

C:\Windows\system32\tbssvc.dll

C:\Users\win7\AppData\Local\Temp\is-87UQK.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-87UQK.tmp\sample.EN

Advpack.dll

C:\Users\win7\AppData\Local\Temp\is-TTE6J.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-TTE6J.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-A5PDU.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nsvB74A.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsvB74A.tmp\CityHash.dll

FVEAPI.DLL

C:\Windows\SysWOW64\ieframe.dll

C:\Windows\system32\kernel32

C:\Windows\system32\ntdll

C:\Windows\system32\advapi32

C:\Windows\system32\AdvAPI32.dll

C:\rarlng.dll

riched32.dll

COMCTL32.DLL

C:\Windows\system32\VBoxMRXNP.dll

C:\Windows\System32\drprov.dll

C:\Windows\System32\ntlanman.dll

C:\Windows\System32\davclnt.dll

UTILDLL.dll

C:\Windows\system32\ntoskrnl.exe

C:\Windows\System32\wininit.exe

C:\Windows\System32\svchost.exe

C:\Windows\System32\SearchIndexer.exe

C:\Windows\explorer.exe

C:\Windows\System32\cmd.exe

C:\Python27\python.exe

C:\Windows\System32\dllhost.exe

C:\CFVS_Injector.exe

C:\Users\win7\AppData\Local\Temp\is-7EQFR.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-7EQFR.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-TA70S.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-TA70S.tmp\_isetup\_isdecmp.dll

C:\Users\win7\AppData\Local\Temp\is-TA70S.tmp\VclStylesInno.dll

C:\Users\win7\AppData\Local\Temp\is-TA70S.tmp\ISDone.dll

C:\Users\win7\AppData\Local\Temp\is-TA70S.tmp\BASS.dll

C:\Users\win7\AppData\Local\Temp\is-TA70S.tmp\bp.dll

C:\Users\win7\AppData\Local\Temp\is-TA70S.tmp\bp.ENU

C:\Users\win7\AppData\Local\Temp\is-TA70S.tmp\bp.EN

C:\Users\win7\AppData\Local\Temp\is-TA70S.tmp\ISMD5.dll

C:\Users\win7\AppData\Local\Temp\nsv7783.tmp\LangDLL.dll

C:\Users\win7\AppData\Local\Temp\nsv7783.tmp\System.dll

mscoree

C:\Users\win7\AppData\Local\Temp\nsv7783.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\is-LI4KF.tmp\_isetup\_shfoldr.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\csc.exe

C:\Windows\Microsoft.NET\Framework\v2.0.50727\alink.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5a401fd2a7689ff13fb54182953f9c40\System.Drawing.ni.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\6949c4470a81970ec3de0a575d93babc\System.Windows.Forms.ni.dll

C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\uxtheme.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\Gdiplus.dll

sxs.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\culture.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\en-US\mscorrc.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\en\mscorrc.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll

C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\oleaut32.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\0967cf5c31691f38d013263304d2dacb\System.Runtime.Remoting.ni.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\d49908aa93a23c84847b1f8b1b667860\System.Xml.ni.dll

C:\shell32.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\007fc007edc388d9806dff94ee04f129\System.Configuration.ni.dll

C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorwks.dll

mscorwks.dll

C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\rasapi32.dll

rasapi32.dll

C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\ws2_32.dll

ws2_32.dll

RASMAN.DLL

rtutils.dll

C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\winhttp.dll

C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\iphlpapi.dll

C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\comctl32.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll

C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll

C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll

C:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll

C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll

C:\Windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.Xml.dll

C:\Windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.dll

gtapi_signed.dll

WSOCK32.dll

C:\Windows\system32\wer.dll

werui.dll

DUI70.dll

DUser.dll

C:\Windows\system32\DUser.dll

C:\Windows\system32\RICHED20.DLL

dwmapi.dll

C:\Windows\system32\xmllite.dll

\PWMIF32V.DLL

C:\Users\win7\AppData\Local\Temp\is-7QT2S.tmp\OCSetupHlp.dll

C:\Users\win7\AppData\Local\Temp\is-7QT2S.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nsd737A.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsd737A.tmp\UAC.dll

AdvAPI32

SECUR32

C:\Users\win7\AppData\Local\Temp\nsd737A.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nssBF5D.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nssBF5D.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nssBF5D.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nssBF5D.tmp\InetBgDL.dll

C:\Users\win7\AppData\Local\Temp\nssBF5D.tmp\CertCheck.dll

hhctrl.ocx

HHCtrl.OCX

C:\Windows\System32\ShellStyle.dll

explorerframe.dll

MsftEdit.dll

C:\Windows\system32\mssvp.dll

C:\msfte.dll

C:\msTracer.dll

C:\Windows\system32\networkexplorer.dll

C:\Windows\System32\imageres.dll

msctf.dll

C:\ProgramData\eSellerate\eWebClient.dll

C:\Users\win7\AppData\Local\Temp\nstA488.tmp\LangDLL.dll

C:\Users\win7\AppData\Local\Temp\nstA488.tmp\InstallOptions.dll

C:\Users\win7\AppData\Roaming\UcMapi\Office Tabs\xPowerTab.dll

C:\Users\win7\AppData\Local\Temp\nstA488.tmp\System.dll

C:\Windows\system32\Winsta.dll

C:\Windows\SysWOW64\taskkill.exe

iertutil.dll

C:\Users\win7\AppData\Local\Temp\nsxA19B.tmp\INetC.dll

WININET

C:\Users\win7\AppData\Local\Temp\nsxA19B.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsxA19B.tmp\nsExec.dll

C:\Users\win7\AppData\Local\Temp\nstA352.tmp.bat

C:\Users\win7\AppData\Local\Temp\nspDD14.tmp\System.dll

NETMSG

sfc.dll

C:\Users\win7\AppData\Local\Temp\27E6Q1K9\unpack.dll

C:\Windows\system32\CRTDLL.DLL

C:\Users\win7\AppData\Local\Temp\27E6Q1K9\sample\plugins\0\CustomUI.dll

C:\Users\win7\AppData\Local\Temp\27E6Q1K9\sample\plugins\0\CustomUI.ENU

C:\Users\win7\AppData\Local\Temp\27E6Q1K9\sample\plugins\0\CustomUI.EN

psapi.dll

C:\Windows\System32\msxml6r.dll

Wininet.dll

ShlWapi.dll

C:\Program Files\Internet Explorer\iexplore.exe

wmiutils.dll

[System Process]

System

smss.exe

csrss.exe

wininit.exe

winlogon.exe

services.exe

lsass.exe

svchost.exe

VBoxService.exe

audiodg.exe

spoolsv.exe

sppsvc.exe

SearchIndexer.exe

PsApi.dll

taskhost.exe

dwm.exe

explorer.exe

VBoxTray.exe

cmd.exe

conhost.exe

python.exe

dllhost.exe

WmiPrvSE.exe

C:\Windows\SysWOW64\urlmon.dll

oledlg.dll

SSCE5332.dll

C:\Users\win7\AppData\Local\Temp\nsu3DD5.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nsu3DD5.tmp\System.dll

wsock32.dll

MSVBVM60.DLL

C:\Windows\SysWOW64\TSAPPCMP.DLL

Ntdll.dll

C:\Windows\SysWOW64\KERNEL32.DLL

MsiMsg.dll

C:\Windows\SysWOW64\NETAPI32.DLL

C:\Windows\SysWOW64\SAGE.DLL

C:\Windows\system32\IconCodecService.dll

C:\Users\win7\AppData\Local\Temp\is-HTOUE.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-HTOUE.tmp\_isetup\_isdecmp.dll

GDI32

C:\Users\win7\AppData\Local\Temp\is-HTOUE.tmp\ISDone.dll

C:\Users\win7\AppData\Local\Temp\is-HTOUE.tmp\isslideshow.dll

C:\Users\win7\AppData\Local\Temp\is-HTOUE.tmp\isslideshow.ENU

C:\Users\win7\AppData\Local\Temp\is-HTOUE.tmp\isslideshow.EN

C:\Users\win7\AppData\Local\Temp\is-HTOUE.tmp\b2p.dll

C:\Users\win7\AppData\Local\Temp\is-HTOUE.tmp\botva2.dll

GDIPlus

C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18834_none_72d38c5186679d48\GDIPlus.DLL

POWRPROF.DLL

API-MS-Win-Security-Base-L1-1-0.dll

NETAPI32.DLL

MSACM32.dll

MSIMG32.dll

Msftedit.dll

OLEACC.dll

msdmo.dll

C:\AsMultiLang.dll

ASCDDMI.DLL

C:\Users\win7\AppData\Local\Temp\GUMBA51.tmp\goopdate.dll

dbghelp.dll

rpcrt4.dll

C:\Users\win7\AppData\Local\Temp\GUMBA51.tmp\goopdateres_en.dll

C:\Windows\System32\msiexec.exe

Ntdll

C:\Users\win7\AppData\Local\Temp\\dup2patcher.dll

C:\Users\win7\AppData\Local\Temp\\bassmod.dll

Riched20.dll

C:\pcnsl.gui

C:\Users\win7\AppData\Local\Temp\is-5KLFT.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-5KLFT.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-609I7.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-609I7.tmp\ISDone.dll

C:\Users\win7\AppData\Local\Temp\is-609I7.tmp\isskin.dll

C:\Users\win7\AppData\Local\Temp\is-609I7.tmp\b2p.dll

C:\Users\win7\AppData\Local\Temp\is-609I7.tmp\botva2.dll

C:\Users\win7\AppData\Local\Temp\is-5KLFT.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\is-609I7.tmp\skin.tm

C:\Users\win7\AppData\Local\Temp\is-609I7.tmp\CallbackCtrl.dll

Wtsapi32.dll

C:\Windows\system32\ExplorerFrame.dll

OLEAUT32

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\30280e5e7d89ffe702df50de4d339fc7\System.Configuration.Install.ni.dll

crypt32.dll

netapi32.dll

UXTHEME

User32

wship6.dll

C:\Users\win7\AppData\Local\Temp\nsj1BA6.tmp\System.dll

C:\Windows\system32\MFC120ENU.DLL

C:\Windows\system32\MSVCR120.dll

C:\Users\win7\AppData\Local\Temp\is-5UPJ0.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-5UPJ0.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-A7DCB.tmp\OCSetupHlp.dll

C:\Users\win7\AppData\Local\Temp\is-A7DCB.tmp\GCountry.dll

MSFTEDIT.DLL

C:\dotNetFx40_Full_setup.exe

COMDLG32.dll

MPR.dll

C:\Windows\SysWOW64\SHLWAPI.DLL

C:\Windows\SysWOW64\SHELL32.DLL

C:\Windows\SysWOW64\ADVAPI32.DLL

C:\Windows\SysWOW64\APPHELP.DLL

C:\Windows\SysWOW64\VERSION.DLL

C:\Windows\SysWOW64\sxs.DLL

C:\Windows\SysWOW64\MSCOREE.DLL

C:\Windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll

C:\Windows\SysWOW64\NTDLL.DLL

MsiHnd.dll

DWMAPI

C:\Windows\SysWOW64\USER32.DLL

C:\Windows\SysWOW64\RPCRT4.DLL

USER32

MScrlSup.dll

C:\Windows\system32\VB6ES.DLL

C:/Users/win7/AppData/Local/Temp/TCL65EE.tmp

shell32

C:\Users\win7\AppData\Local\Temp\nspEA36.tmp\UAC.dll

ADVAPI32

ShlWAPI

C:\Users\win7\AppData\Local\Temp\nspEA36.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nspEA36.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsc23F3.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsc23F3.tmp\InstallOptions.dll

alsslider.ocx

C:\Users\win7\AppData\Local\Temp\is-R4QBA.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-R4QBA.tmp\sample.EN

wintrust.dll

C:\Users\win7\AppData\Local\Temp\is-B8LNK.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-B8LNK.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-G9UMR.tmp\_isetup\_shfoldr.dll

C:\kclient.dll

C:\kclientu.dll

C:\klientsh.dll

C:\Users\win7\AppData\Local\Temp\is-89ROM.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nskD150.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nskD150.tmp\lib7zEx.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\12dc10e5c0e8d176cf21a16a6fc5fc3b\Microsoft.VisualBasic.ni.dll

C:\Users\win7\AppData\Local\Temp\nstFB.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nstFB.tmp\nsDialogs.dll

NETAPI32.dll

C:\Users\win7\AppData\Local\Temp\nseBF85.tmp\LangDLL.dll

C:\Users\win7\AppData\Local\Temp\nseBF85.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nseBF85.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nseBF85.tmp\nsWeb.dll

OpenCL.dll

C:\Users\win7\AppData\Local\Temp\nsx669F.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsx669F.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\nsx669F.tmp\nsProcess.dll

NTDLL.DLL

C:\Users\win7\AppData\Local\Temp\nsx669F.tmp\registry.dll

C:\Users\win7\AppData\Local\Temp\nsx669F.tmp\nsis7z.dll

C:\Users\win7\AppData\Local\Temp\nsx669F.tmp\nsExec.dll

Opera.dll

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\shell32.dll

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Opera.dll

FastMM_FullDebugMode.dll

C:\Windows\system32\version.dll

C:\Windows\system32\psapi.dll

DbgHelp.dll

C:\Windows\system32\symsrv.dll

C:\zlib1.dll

IMM32.DLL

C:\Program Files\AVAST Software\Avast Business\ashTaskEx.dll

C:\Program Files\AVAST Software\Avast Business\ashBase.dll

C:\Program Files\AVAST Software\Avast Business\defs\FFFFFFFF\aswCmnBS.dll

MSVCRT.dll

C:\Windows\SysWOW64\msls31.dll

C:\swingbox.exe

RASMONTR.DLL

C:\Windows\SysWOW64\odbcint.dll

NSHWFP.DLL

DHCPCMONITOR.DLL

Dhcpcsvc.dll

Dhcpqec.dll

WSHELPER.DLL

NSHHTTP.DLL

FWCFG.DLL

AUTHFWCFG.DLL

IFMON.DLL

NETIOHLP.DLL

WHHELPER.DLL

HNETMON.DLL

RPCNSH.DLL

DOT3CFG.DLL

NAPMONTR.DLL

NSHIPSEC.DLL

QHVer.dll

C:\Windows\system32\wintab32.dll

C:\Windows\system32\uxtheme.dll

CSUNSAPI.dll

swift.dll

nfhwcrhk.dll

SureWareHook.dll

ATMLIB

CABINET.DLL

C:\Users\win7\AppData\Local\Temp\Opera_installer_2016462915493.dll

C:\Users\win7\AppData\Local\Temp\nsg69EB.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsg69EB.tmp\CityHash.dll

C:\Windows\SysWOW64\gameux.dll

PSAPI.dll

C:\Program Files\Oracle\VirtualBox Guest Additions\uninst.exe

C:\Users\win7\AppData\Local\Temp\is-PMO2C.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-PMO2C.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-GT4KS.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-GT4KS.tmp\VclStylesInno.dll

C:\Users\win7\AppData\Local\Temp\is-GT4KS.tmp\ISDone.dll

C:\Users\win7\AppData\Local\Temp\is-GT4KS.tmp\BASS.dll

C:\Users\win7\AppData\Local\Temp\is-GT4KS.tmp\bp.dll

C:\Users\win7\AppData\Local\Temp\is-GT4KS.tmp\bp.ENU

C:\Users\win7\AppData\Local\Temp\is-GT4KS.tmp\bp.EN

shlwapi.dll

hid.dll

SavuCfgHook.dll

MSISIP.DLL

WinInet.dll

C:\Users\win7\AppData\Local\Temp\sqlite3.dll

C:\Windows\system32\atl.dll

C:\Windows\system32\ntmarta.dll

C:\Windows\system32\dsound.dll

C:\Windows\system32\powrprof.dll

C:\Windows\system32\d3d9.dll

C:\Windows\system32\d3d8thk.dll

C:\Windows\system32\mscms.dll

C:\Windows\system32\userenv.dll

C:\Windows\system32\profapi.dll

C:\Windows\system32\ieframe.dll

C:\Windows\system32\oleacc.dll

C:\Windows\system32\oleaccrc.dll

C:\Windows\system32\dbghelp.dll

C:\Windows\system32\msasn1.dll

C:\Windows\system32\crypt32.dll

C:\Windows\system32\propsys.dll

C:\Windows\system32\secur32.dll

C:\Windows\system32\pcacli.dll

C:\Windows\system32\devrtl.dll

C:\Windows\system32\apphelp.dll

C:\Windows\system32\Shell32.dll

C:\Users\win7\AppData\Local\Temp\{44D633C6-C520-425D-AC0A-E5BC4FFBFC10}\fpb.tmp

C:\Users\win7\AppData\Local\Temp\{7456BC1B-F47E-49A8-B05E-0D0463F62F92}\fpb.tmp

C:\Windows\system32\Advapi32.dll

C:\Windows\system32\Msimg32.dll

atl.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\OLEAUT32.dll

C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\psapi.dll

C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\bcrypt.dll

C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\shell32.dll

C:\Users\win7\AppData\Local\Temp\nsgE05E.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsgE05E.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nsgE05E.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsgE05E.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsgE05E.tmp\SimpleSC.EN

msftedit

comctl32

MSDART.dll

C:\Windows\system32\cabinet.dll

C:\Windows\system32\feclient.dll

C:\Windows\system32\wininet.dll

C:\Windows\system32\AdvApi32.dll

C:\Windows\system32\Msi.dll

POWRPROF.dll

ComCtl32.dll

C:\Windows\system32\DSOUND.dll

C:\Users\win7\AppData\Local\Temp\RarSFX0\tapinstall.exe

C:\t8res.dll

C:\sares.dll

C:\Users\win7\AppData\Local\Temp\is-VKG19.tmp\_isetup\_shfoldr.dll

winsta.dll

wm_hooks.dll

C:\Users\win7\AppData\Local\Temp\nsaC4FB.tmp\FindProcDLL.dll

C:\Users\win7\AppData\Local\Temp\nsaC4FB.tmp\newadvsplash.dll

C:\Windows\system32\asycfilt.dll

C:\\RepBrRC.dll

C:\Windows\system32\E177E04D548C4006A465EEB92D3DE021\Temp\prv_ee.dll

C:\Windows\system32\E177E04D548C4006A465EEB92D3DE021\Runtime\Objects\prv_ee_6_41_98.dll

inetmib1.dll

C:\Windows\system32\E177E04D548C4006A465EEB92D3DE021\Temp\prv_fallback.dll

C:\Windows\system32\E177E04D548C4006A465EEB92D3DE021\Temp\ecad_prv_fallback.dll

C:\Windows\system32\E177E04D548C4006A465EEB92D3DE021\Temp\ecad_prv_td_lic.dll

C:\Windows\system32\E177E04D548C4006A465EEB92D3DE021\Temp\gb_prv_td_lic_gui.dll

C:\Users\win7\AppData\Local\Temp\001086a6.a

C:\Users\win7\AppData\Local\Temp\00108e96.a

C:\Users\win7\AppData\Local\Temp\OfficeSetup.exe

RASAPI32

C:\Windows\SysWOW64\DUser.dll

C:\samdll

C:\Users\win7\AppData\Local\Temp\is-NRG2D.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nsqBBC2.tmp\npeNSISUtil.dll

C:\Windows\system32\npkfxx.ocx

C:\Windows\system32\npkfxext.ocx

C:\Users\win7\AppData\Local\Temp\nsqBBC2.tmp\System.dll

C:\Windows\system32\AutoRunGUI.DLL

Shlwapi.dll

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\LuaBridge.dll

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\System.dll

lua51.dll

.\LuaXML_lib.dll

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp/87a5250e7389d052be3fdc257872ebd873ef2deb.dll

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp/1370ebd534807c69ad0db6461cbf3f3fd03c434f.dll

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp/026e996a3a5897970b058ffb093a163a1d763649.dll

wininet

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp/f40368059830399ce8189100003d317f2739d087.dll

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\versioninfo.dll

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\UACInfo.dll

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\FloatingProgress.dll

C:\Users\win7\AppData\Local\Temp\7zS204B.tmp\BlueStacks-ThinInstaller_0.8.1.3003.exe

SLWGA.DLL

C:\Users\win7\AppData\Local\Temp\nsr464E.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsr464E.tmp\CityHash.dll

msimg32

VERSION.DLL

C:\Windows\system32\NETAPI32.DLL

C:\Windows\system32\SECUR32.DLL

C:\Users\win7\AppData\Local\Temp\is-A465F.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-A465F.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-1RQ3T.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-1RQ3T.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-SNNTH.tmp\_isetup\_shfoldr.dll

atlthunk.dll

C:\Users\win7\AppData\Local\Temp\nssA394.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nssA394.tmp\nsDialogs.dll

C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_ec86b8d6858ec0bc\COMCTL32.dll

userenv.dll

C:\Windows\system32\shdocvw.dll

easyhook32.dll

C:\Users\win7\AppData\Local\Temp\GUM2BD3.tmp\goopdate.dll

C:\Users\win7\AppData\Local\Temp\GUM2BD3.tmp\goopdateres_en.dll

C:\CFVS_I~1.EXE

C:\DLL_LO~1.EXE

C:\Procmon.exe

C:\PROGRA~2\COMMON~1\MICROS~1\ink\mip.exe

C:\PROGRA~2\COMMON~1\MICROS~1\MSInfo\msinfo32.exe

C:\PROGRA~2\INTERN~1\ieinstal.exe

C:\PROGRA~2\INTERN~1\ielowutil.exe

C:\PROGRA~2\INTERN~1\iexplore.exe

C:\PROGRA~2\WINDOW~1\wab.exe

C:\PROGRA~2\WINDOW~1\wabmig.exe

C:\PROGRA~2\WINDOW~1\WinMail.exe

C:\PROGRA~2\WINDOW~2\ACCESS~1\wordpad.exe

C:\PROGRA~2\WINDOW~4\ImagingDevices.exe

C:\PROGRA~2\WI4223~1\sidebar.exe

C:\PROGRA~3\PACKAG~1\{050D4~1\VCREDI~1.EXE

C:\PROGRA~3\PACKAG~1\{F65DB~1\VCREDI~1.EXE

C:\Python27\Lib\DISTUT~1\command\WININS~1.EXE

C:\Python27\Lib\DISTUT~1\command\WININS~2.EXE

C:\Python27\Lib\DISTUT~1\command\WININS~3.EXE

C:\Python27\Lib\DISTUT~1\command\WININS~4.EXE

C:\Python27\Lib\DISTUT~1\command\WI02EA~1.EXE

C:\Python27\Lib\SITE-P~1\pip\_vendor\distlib\t32.exe

C:\Python27\Lib\SITE-P~1\pip\_vendor\distlib\t64.exe

C:\Python27\Lib\SITE-P~1\pip\_vendor\distlib\w32.exe

C:\Python27\Lib\SITE-P~1\pip\_vendor\distlib\w64.exe

C:\Python27\Lib\SITE-P~1\SETUPT~1\cli-32.exe

C:\Python27\Lib\SITE-P~1\SETUPT~1\cli-64.exe

C:\Python27\Lib\SITE-P~1\SETUPT~1\CLI-AR~1.EXE

C:\Python27\Lib\SITE-P~1\SETUPT~1\cli.exe

C:\Python27\Lib\SITE-P~1\SETUPT~1\gui-32.exe

C:\Python27\Lib\SITE-P~1\SETUPT~1\gui-64.exe

C:\Python27\Lib\SITE-P~1\SETUPT~1\GUI-AR~1.EXE

C:\Python27\Lib\SITE-P~1\SETUPT~1\gui.exe

C:\Python27\Scripts\EASY_I~2.EXE

C:\Python27\Scripts\EASY_I~1.EXE

C:\Python27\Scripts\pip.exe

C:\Python27\Scripts\PIP27~1.EXE

C:\Python27\Scripts\pip2.exe

C:\Users\win7\AppData\Local\Temp\is-UA0PS.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-0ULN1.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-0ULN1.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-I1OTB.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-ISAJ2.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-ISAJ2.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-JUBU3.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\{3943BD2F-91F4-4AF7-B3A4-88A8B896C1E9}\Disk1\ISSetup.dll

C:\Users\win7\AppData\Local\Temp\{3943BD2F-91F4-4AF7-B3A4-88A8B896C1E9}\_Setup.dll

C:\Users\win7\AppData\Local\Temp\{C78D7FA1-0A77-469A-AB3F-E9C3B1DE5972}\{8EA79DBF-D637-448A-89D6-410A087A4493}\ISRT.dll

C:\Users\win7\AppData\Local\Temp\{C78D7FA1-0A77-469A-AB3F-E9C3B1DE5972}\{8EA79DBF-D637-448A-89D6-410A087A4493}\_isres.dll

C:\Users\win7\AppData\Local\Temp\{C78D7FA1-0A77-469A-AB3F-E9C3B1DE5972}\{8EA79DBF-D637-448A-89D6-410A087A4493}\_isuser.dll

C:\Users\win7\AppData\Local\Temp\{3943BD2F-91F4-4AF7-B3A4-88A8B896C1E9}\Disk1\data1.hdr

C:\Users\win7\AppData\Local\Temp\{C78D7FA1-0A77-469A-AB3F-E9C3B1DE5972}\{8EA79DBF-D637-448A-89D6-410A087A4493}\_ISRes.dll

Imagehlp.dll

C:\Windows\syswow64\dbghelp.dll

zlib

C:\Windows\system32\CRTDLL.dll

zlib.dll

jsproxy.dll

MSVCR90.dll

C:\zlib.pyd

mswsock.dll

C:\__Xenocode\x86\vmx.dll

C:\Users\win7\AppData\Local\Temp\is-RMVB0.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-RMVB0.tmp\sample.EN

C:\Windows\system32\cryptsp.dll

C:\Windows\system32\setupapi.dll

C:\Windows\system32\clbcatq.dll

C:\Windows\system32\ws2_32.dll

C:\Windows\system32\wsock32.dll

C:\Windows\system32\winnsi.dll

C:\Windows\system32\iphlpapi.dll

C:\Windows\system32\slc.dll

C:\Windows\system32\gpapi.dll

C:\Windows\system32\hnetcfg.dll

C:\Windows\system32\dnsapi.dll

C:\Windows\system32\rasman.dll

C:\Windows\system32\rasapi32.dll

C:\Windows\system32\sensapi.dll

C:\Windows\system32\rasadhlp.dll

C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll

C:\Windows\system32\dinput8.dll

C:\Windows\system32\sxs.dll

C:\Windows\system32\rpcrtremote.dll

C:\Windows\system32\schannel.dll

C:\Users\win7\AppData\Local\Temp\{45A933D2-C520-425D-AC0A-E5BC4EFBFB10}\fpb.tmp

C:\Users\win7\AppData\Local\Temp\{7529BC0F-F47E-49A8-B05E-0D0463F62F92}\fpb.tmp

dinput8.dll

xul.dll

C:\Users\win7\AppData\Local\Temp\nsdD99D.tmp\System.dll

SetupApi.DLL

newdev.dll

kernel32.DLL

Advapi32.DLL

Clusapi.DLL

gdi32.DLL

StethoscopeUpset

UrbanTransfers

StolidityYapping

C:\Users\win7\AppData\Local\Temp\F848\7C24.bat

C:\Users\win7\AppData\Local\Temp\nswA0F4.tmp\time.dll

C:\Users\win7\AppData\Local\Temp\nswA0F4.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nswA0F4.tmp\NSISpcre.dll

C:\Users\win7\AppData\Local\Temp\nswA0F4.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\nswA0F4.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\{39406CC9-9143-4AF7-93C1-CCA8B896C1E9}\fpb.tmp

api-ms-win-core-sysinfo-l1-2-1

C:\LinkHandler32.dll

C:\Users\win7\AppData\Local\Temp\nsnEDD6.tmp\InstallOptions.dll

C:\Windows\system32\Windowscodecs.dll

C:\Windows\system32\Msxml6.dll

C:\Users\win7\AppData\Local\Temp\nsnFBC0.tmp\LangDLL.dll

C:\Users\win7\AppData\Local\Temp\nsnFBC0.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\{391B768D-643B-4AEF-A720-89A8B896C1E9}\Disk1\ISSetup.dll

C:\Users\win7\AppData\Local\Temp\{D79CE850-0A10-469A-AA3F-E9C3A5215D62}\{CED8E25B-122A-4E80-B612-7F99B93284B3}\ISRT.dll

C:\Users\win7\AppData\Local\Temp\{D79CE850-0A10-469A-AA3F-E9C3A5215D62}\{CED8E25B-122A-4E80-B612-7F99B93284B3}\_isres_0x0409.dll

C:\Users\win7\AppData\Local\Temp\{D79CE850-0A10-469A-AA3F-E9C3A5215D62}\{CED8E25B-122A-4E80-B612-7F99B93284B3}\_isuser_0x0409.dll

C:\Users\win7\AppData\Local\Temp\{391B768D-643B-4AEF-A720-89A8B896C1E9}\Disk1\data1.hdr

C:\Users\win7\AppData\Local\Temp\{D79CE850-0A10-469A-AA3F-E9C3A5215D62}\{CED8E25B-122A-4E80-B612-7F99B93284B3}\

SRCLIENT.DLL

vsoscaler.dll

swscale.dll

avutil.dll

C:\Users\win7\AppData\Local\Temp\nss6DD3.tmp\System.dll

C:\Windows\SysWOW64\cryptnet.dll

Normaliz.dll

XmlLite.dll

VirtDisk.dll

C:\Users\win7\AppData\Local\Temp\nss2403.tmp\StartMenu.dll

C:\Users\win7\AppData\Local\Temp\is-VCMTQ.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-VCMTQ.tmp\itdownload.dll

C:\Users\win7\AppData\Local\Temp\is-VCMTQ.tmp\itdownload.ENU

C:\Users\win7\AppData\Local\Temp\is-VCMTQ.tmp\itdownload.EN

C:\Users\win7\AppData\Local\Temp\nsc48DB.tmp\LangDLL.dll

C:\Users\win7\AppData\Local\Temp\nsc48DB.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nsc48DB.tmp\nsDialogs.dll

C:\Windows\system32\MSI.dll

c:\c945c557281d253cbaaf\Setup.exe

SetupUi.dll

c:\c945c557281d253cbaaf\1033\SetupResources.DLL

C:\Users\win7\AppData\Local\Temp\is-67E8P.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-67E8P.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-AM00S.tmp\_isetup\_shfoldr.dll

uxtheme

C:\Windows\system32\comdlg32.dll

lang/en.dll

C:\Windows\SysWOW64\quartz.dll

VBoxDisp.dll

mscat32.dll

D3DREF8.DLL

C:\Users\win7\AppData\Local\Temp\nsrAB20.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsrAB20.tmp\CityHash.dll

C:\Users\win7\AppData\Local\Temp\is-5BC7F.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-5BC7F.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-10N7G.tmp\_isetup\_shfoldr.dll

SETUPLNG.DLL

SETUPNTR.DLL

WINHTTP

C:\Windows\Branding\Basebrd\Basebrd.dll

SetupRes.dll

msftedit.dll

fsdeph.dll

C:\Users\win7\AppData\Local\Temp\nsmA8F3.tmp\LangDLL.dll

C:\Users\win7\AppData\Local\Temp\nsmA8F3.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nsmA8F3.tmp\nsDialogs.dll

C:\Windows\system32\dbgeng.dll

C:\Users\win7\AppData\Local\Temp\nss4B9F.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\nss4B9F.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nss4B9F.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nss4B9F.tmp\ExecDos.dll

C:\Users\win7\AppData\Local\Temp\nss4B9F.tmp\IpConfig.dll

C:\Users\win7\AppData\Local\Temp\nss4B9F.tmp\NSISEncrypt.dll

C:\Users\win7\AppData\Local\Temp\nss4B9F.tmp\WmiInspector.dll

C:\Users\win7\AppData\Local\Temp\nss4B9F.tmp\inetc.dll

C:\Users\win7\AppData\Local\Temp\nss4B9F.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Temp\nss4B9F.tmp\nsExec.dll

C:\strings.dll

C:\Users\win7\AppData\Local\Temp\AIRB1EA.tmp\\Adobe AIR\Versions\1.0\Adobe AIR.dll

C:\Users\win7\AppData\Local\Temp\AIRB1EA.tmp\Adobe AIR\Versions\1.0\Resources\WebKit.dll

C:\Users\win7\AppData\Local\Temp\AIRB1EA.tmp\Adobe AIR Installer.exe

downloader_v4.dll

libcurl_v4.dll

C:\Users\win7\AppData\Local\Temp\nskEB02.tmp\SkinnedControls.dll

C:\Users\win7\AppData\Local\Temp\nskEB02.tmp\NSISArray.dll

C:\Users\win7\AppData\Local\Temp\nskEB02.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nskEB02.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nskEB02.tmp\btag.dll

C:\AcroRd32.dll

C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18834_none_72d38c5186679d48\GDIPLUS.DLL

C:\Windows\system32\comsvcs.dll

ole32

C:\Windows\notepad.exe

C:\Windows\System32\calc.exe

IDAPI32.DLL

Gdiplus.dll

C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18834_none_72d38c5186679d48\Gdiplus.dll

C:\Users\win7\AppData\Local\Temp\{97937BFE-5F33-426a-9C72-F21F4A2A208E}.tmp\360P2SP.dll

360P2SP.dll

kClnBsymb8kTUFojaqfVnA3CPkaCWl6itnzVszE29N.dll

C:\Users\win7\AppData\Local\Temp\nsyF680.tmp\InstallOptions.dll

C:\UpdMngr_en.dll

C:\UpdMngr_it.dll

C:\Windows\SysWOW64\timeout.exe

C:\Windows\system32\wbem\xml\wmi2xml.dll

C:\Users\win7\AppData\Local\Temp\DXGIDebug.dll

ImgUtil.dll

C:\Users\win7\AppData\Local\Temp\is-861HL.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-861HL.tmp\sample.EN

glu32.dll

C:\Windows\system32\shfolder.dll

Psapi.dll

lua5.1-32.dll

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\\win32\dbghelp.dll

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\win32\symsrv.dll

C:\Users\win7\AppData\Local\Temp\nsv899D.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsv899D.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\nsv899D.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nszF854.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\GUM5C61.tmp\goopdate.dll

C:\Users\win7\AppData\Local\Temp\GUM5C61.tmp\goopdateres_en.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\8d3ad9576a6262c04228796389a2d43f\Microsoft.JScript.ni.dll

powrprof.dll

C:\Windows\SysWOW64\ntdll.dll

C:\Windows\SYSTEM32\MSCOREE.DLL

C:\Windows\syswow64\KERNEL32.dll

C:\Windows\syswow64\KERNELBASE.dll

C:\CFVS_HookDll.dll

C:\Windows\syswow64\WS2_32.dll

C:\Windows\syswow64\msvcrt.dll

C:\Windows\syswow64\RPCRT4.dll

C:\Windows\syswow64\SspiCli.dll

C:\Windows\syswow64\CRYPTBASE.dll

C:\Windows\SysWOW64\sechost.dll

C:\Windows\syswow64\NSI.dll

C:\Windows\syswow64\urlmon.dll

C:\Windows\syswow64\api-ms-win-downlevel-ole32-l1-1-0.dll

C:\Windows\syswow64\ole32.DLL

C:\Windows\syswow64\GDI32.dll

C:\Windows\syswow64\USER32.dll

C:\Windows\syswow64\ADVAPI32.dll

C:\Windows\syswow64\LPK.dll

C:\Windows\syswow64\USP10.dll

C:\Windows\syswow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll

C:\Windows\syswow64\shlwapi.DLL

C:\Windows\syswow64\api-ms-win-downlevel-advapi32-l1-1-0.dll

C:\Windows\syswow64\api-ms-win-downlevel-user32-l1-1-0.dll

C:\Windows\syswow64\api-ms-win-downlevel-version-l1-1-0.dll

C:\Windows\system32\version.DLL

C:\Windows\syswow64\api-ms-win-downlevel-normaliz-l1-1-0.dll

C:\Windows\syswow64\normaliz.DLL

C:\Windows\syswow64\iertutil.dll

C:\Windows\syswow64\WININET.dll

C:\Windows\syswow64\USERENV.dll

C:\Windows\syswow64\profapi.dll

C:\Windows\system32\DNSAPI.dll

C:\Windows\system32\IMM32.DLL

C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc\MSVCR80.dll

C:\Windows\syswow64\shell32.dll

C:\Windows\syswow64\WINTRUST.dll

C:\Windows\syswow64\MSASN1.dll

C:\Windows\system32\CRYPTSP.dll

C:\Windows\system32\rsaenh.dll

C:\Windows\syswow64\imagehlp.dll

C:\Windows\system32\ncrypt.dll

C:\Windows\system32\bcrypt.dll

C:\Windows\system32\GPAPI.dll

C:\Windows\syswow64\WLDAP32.dll

C:\Windows\system32\SensApi.dll

C:\Windows\syswow64\SETUPAPI.dll

C:\Windows\syswow64\CFGMGR32.dll

C:\Windows\syswow64\DEVOBJ.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll

verifier.dll

C:\Windows\syswow64\OLEAUT32.dll

C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d\comctl32.dll

C:\Users\win7\AppData\Local\Temp\nsl8A49.tmp\nsExec.dll

C:\Users\win7\AppData\Local\Temp\is-CUTSA.tmp\_isetup\_shfoldr.dll

C:\PYTHON27.DLL

pythondll

C:\Users\win7\AppData\Local\Temp\nsjF6BF.tmp\Banner.dll

C:\Users\win7\AppData\Local\Temp\nsjF6BF.tmp\inetc.dll

C:\Users\win7\AppData\Local\Temp\nsjF6BF.tmp\RC4dll.dll

C:\Users\win7\AppData\Local\Temp\nsjF6BF.tmp\Unicode.dll

C:\Users\win7\AppData\Local\Temp\is-JRQLE.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-JRQLE.tmp\TempkillProcess.dll

C:\Users\win7\AppData\Local\Temp\is-JRQLE.tmp\TempkillProcess.ENU

C:\Users\win7\AppData\Local\Temp\is-JRQLE.tmp\TempkillProcess.EN

C:\Users\win7\AppData\Local\Temp\is-JRQLE.tmp\KPByName.dll

msvfw32.dll

msrle32.dll

msvidc32.dll

msyuv.dll

iyuv_32.dll

tsbyuv.dll

iccvid.dll

msacm32.dll

imaadp32.acm

msg711.acm

msgsm32.acm

msadp32.acm

C:\Users\win7\AppData\Local\Temp\is-62P8P.tmp\OCSetupHlp.dll

C:\Users\win7\AppData\Local\Temp\is-62P8P.tmp\_isetup\_shfoldr.dll

User32.dll

C:\Users\win7\AppData\Local\Temp\ipw326E.tmp

C:\Users\win7\AppData\Local\Temp\ipw327F.tmp

C:\Users\win7\AppData\Local\Temp\ipw3280.tmp

C:\Users\win7\AppData\Local\Temp\ipw3475.tmp

C:\Users\win7\AppData\Local\Temp\ipw3495.tmp

C:\Users\win7\AppData\Local\Temp\ipw34B5.tmp

icmp.dll

adsldpc.dll

adsldpc.dll

orcmn.dll

C:\Users\win7\AppData\Local\Temp\nswFE9D.tmp\LangDLL.dll

C:\Users\win7\AppData\Local\Temp\nswFE9D.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nswFE9D.tmp\InstallOptions.dll

C:\Windows\system32\vb6chs.dll

IMAGEHLP.dll

MFC42u.DLL

MSVCP60.dll

C:\Users\win7\AppData\Local\Temp\jki55C5.tmp

C:\Users\win7\AppData\Local\Temp\shell32.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\99cdfef98595ed91f14936cf52a49c54\System.Management.ni.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\\wminet_utils.dll

C:\Users\win7\AppData\Local\Temp\is-S2LL8.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-S2LL8.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-G0RUC.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-G0RUC.tmp\isskinU.dll

C:\Users\win7\AppData\Local\Temp\is-S2LL8.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\is-G0RUC.tmp\ChromeXP.cjstyles

C:\Users\win7\AppData\Local\Temp\nst8254.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nst8254.tmp\nsRandom.dll

C:\Users\win7\AppData\Local\Temp\nst8254.tmp\nsRandom.ENU

C:\Users\win7\AppData\Local\Temp\nst8254.tmp\nsRandom.EN

MyNsisSkin

C:\Users\win7\AppData\Local\Temp\nst8254.tmp\MyNsisExtend.dll

C:\Users\win7\AppData\Local\Temp\nst8254.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nst8254.tmp\ButtonEvent.dll

advpack.dll

dsetup.dll

C:\Windows\SysWOW64\WScript.exe

C:\Windows\SysWOW64\wshext.dll

C:\Windows\SysWOW64\schtasks.exe

C:\Users\win7\AppData\Local\Temp\nsg9210.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsg9210.tmp\LangDLL.dll

C:\Users\win7\AppData\Local\Temp\nsg9210.tmp\installer.dll

C:\Users\win7\AppData\Local\Temp\nsg9210.tmp\exdll.dll

C:\Users\win7\AppData\Local\Temp\nsg9210.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\nsg9210.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nsg9210.tmp\nsExec.dll

usp10.dll

C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll

ComCtl32

Wship6.dll

C:\Users\win7\AppData\Local\Temp\is-81191.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-81191.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\is-2VR4C.tmp\_isetup\_shfoldr.dll

SPINF.dll

C:\Users\win7\AppData\Local\Temp\nsk67D.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsk67D.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\nsk67D.tmp\Pioneer_DDJ_SR_Plugin.dll

C:\Users\win7\AppData\Local\Temp\nsk67D.tmp\LangDLL2.dll

C:\Users\win7\AppData\Local\Temp\nsk67D.tmp\ButtonEvent2.dll

C:\Users\win7\AppData\Local\Temp\nsz4397.tmp\System.dll

dosss11

mozglue.dll

C:\Users\win7\AppData\Local\Temp\{84cc4d51-23ee-42a3-af9f-43f332a362a2}\.ba1\wixstdba.dll

C:\Users\win7\AppData\Local\Temp\{84cc4d51-23ee-42a3-af9f-43f332a362a2}\.ba1\bafunctions.dll

C:\Windows\system32\wups.dll

C:\Windows\system32\wu.upgrade.ps.dll

RASAPI32.dll

C:\Users\win7\AppData\Local\Temp\nsd9C.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsd9C.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nsd9C.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nsd9C.tmp\InetBgDL.dll

C:\Users\win7\AppData\Local\Temp\nsd9C.tmp\CertCheck.dll

C:\Users\win7\AppData\Local\Temp\nsdCD87.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsdCD87.tmp\inetc.dll

C:\Users\win7\AppData\Local\Temp\nsdCD87.tmp\IpConfig.dll

C:\Users\win7\AppData\Local\Temp\nsdCD87.tmp\md5dll.dll

C:\Users\win7\AppData\Local\Temp\nsdCD87.tmp\DcryptDll.dll

C:\Users\win7\AppData\Local\Temp\nsdCD87.tmp\MoreInfo.dll

C:\Users\win7\AppData\Local\Temp\nsdCD87.tmp\NSISList.dll

C:\Users\win7\AppData\Local\Temp\nsdCD87.tmp\NSISList.ENU

C:\Users\win7\AppData\Local\Temp\nsdCD87.tmp\NSISList.EN

C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\oleaut32.dll

C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\ntdll.dll

C:\Users\win7\AppData\Local\Temp\TencentDownload\~9f12a\QQPCDownload.dll

C:\Users\win7\AppData\Local\Temp\TencentDownload\~9f12a\dr.dll

C:\Windows\system32\winhttp.dll

C:\win64\wEap-AKA.dll

C:\Users\win7\AppData\Local\Temp\nsu7A2B.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\is-LI3OB.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\12au8ed56\QBInstaller.dll

C:\Users\win7\AppData\Local\Temp\nshCB79.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nshCB79.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nshCB79.tmp\Base64.dll

C:\Users\win7\AppData\Local\Temp\nshCB79.tmp\Inetc.dll

C:\Users\win7\AppData\Local\Temp\nshCB79.tmp\ZipDLL.dll

C:\Users\win7\AppData\Local\Temp\nsw8A87.tmp\nsExec.dll

C:\Users\win7\AppData\Local\Temp\nsw8A87.tmp\System.dll

C:\ntdll.dll

C:\Users\win7\AppData\Local\Temp\gert0.dll

C:\Users\win7\AppData\Local\Temp\ci0-temp\install.bmp

C:\Users\win7\AppData\Local\Temp\ci0-temp\logo.bmp

C:\Users\win7\AppData\Local\Temp\is-B3RES.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-B3RES.tmp\isxdl.dll

C:\Users\win7\AppData\Local\Temp\is-2PGRV.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\is-2PGRV.tmp\sample.EN

oci.dll

C:\Users\win7\AppData\Local\Temp\is-C4A8S.tmp\_isetup\_shfoldr.dll

msvcrt.dll

NoRun

NoDrives

RestrictRun

NoNetConnectDisconnect

NoRecentDocsHistory

NoClose

Install

Disable

DataFilePath

Plane1

Plane2

Plane3

Plane4

Plane5

Plane6

Plane7

Plane8

Plane9

Plane10

Plane11

Plane12

Plane13

Plane14

Plane15

Plane16

MS Shell Dlg 2

layout text

DisableUNCCheck

EnableExtensions

DelayedExpansion

DefaultColor

CompletionChar

PathCompletionChar

AutoRun

ProgramFilesDir

CommonFilesDir

RegisteredOwner

RegisteredOrganization

Win31FileSystem

Version

DropLocation

WaitToKillServiceTimeout

FrameTabWindow

FrameMerging

SessionMerging

AdminTabProcs

TabProcGrowth

CreateUriCacheSize

EnablePunycode

NavigationDelay

sample

TotalLimit

DomainLimit

RootDomainLimit

MaxSubDomains

UrlEncoding

DisableSecuritySettingsCheck

SystemSetupInProgress

SpecialFoldersCacheSize

No3DBorder

IsTextPlainHonored

SyncMode5

ZoomDisabled

MinimumSystemTimerResolution

RenderingLoopMaxTime

RtfConverterFlags

Use_DlgBox_Colors

Anchor Underline

CSS_Compat

Expand Alt Text

Display Inline Images

Display Inline Videos

Play_Background_Sounds

Play_Animations

Print_Background

SmoothScroll

XMLHTTP

Show image placeholders

Disable Script Debugger

DisableScriptDebuggerIE

Disable Diagnostics Mode

Move System Caret

Enable AutoImageResize

UseHR

Q300829

Cleanup HTCs

XDomainRequest

DOMStorage

JScriptProfileCacheEventDelay

Default_CodePage

AutoDetect

Default_IEFontSizePrivate

Anchor Color

Anchor Color Visited

Anchor Color Hover

Always Use My Colors

Always Use My Font Size

Always Use My Font Face

Disable Visited Hyperlinks

Use Anchor Hover Color

MiscFlags

Allow Programmatic Cut_Copy_Paste

DisableCachingOfSSLPages

950

IEFontSize

IEFontSizePrivate

IEPropFontName

IEFixedFontName

IESerifFontName

IESansSerifFontName

IEUIFontName

VML

IE

WindowsEdition

CLSID

NoProtectedModeBanner

ProtectedModeOffForAllZones

CVListXMLVersionLow

CVListXMLVersionHigh

IECompatVersionLow

IECompatVersionHigh

ClientCacheSize

Size

Name

DaysToKeep

Use Web Based FTP

CoInternetCombineIUriCacheSize

ForceBFCacheCandidacyPass

FEATURE_CLIENTAUTHCERTFILTER

FromCacheTimeout

SecureProtocols

DisableKeepAlive

IdnEnabled

PreConnectLimit

PreResolveLimit

SqmHttpStreamRandomUploadPoolSize

CacheMode

EnableHttp1_1

ProxyHttp1.1

EnableNegotiate

DisableBasicOverClearChannel

ClientAuthBuiltInUI

DisableReadRange

SocketSendBufferLength

SocketReceiveBufferLength

KeepAliveTimeout

MaxHttpRedirects

MaxConnectionsPerServer

MaxConnectionsPer1_0Server

MaxConnectionsPerProxy

ServerInfoTimeout

ConnectTimeOut

ConnectRetries

SendTimeOut

ReceiveTimeOut

DisableNTLMPreAuth

ScavengeCacheLowerBound

CertCacheNoValidate

ScavengeCacheFileLifeTime

ScavengeCacheFileLimit

HttpDefaultExpiryTimeSecs

FtpDefaultExpiryTimeSecs

LeashLegacyCookies

SendExtraCRLF

WpadSearchAllDomains

DontUseDNSLoadBalancing

ShareCredsWithWinHttp

DnsCacheEnabled

DnsCacheEntries

DnsCacheTimeout

WarnOnPost

WarnAlwaysOnPost

WarnOnZoneCrossing

WarnOnBadCertRecving

WarnOnPostRedirect

AlwaysDrainOnRedirect

WarnOnHTTPSToHTTPRedirect

TcpAutotuning

BadProxyExpiresTime

AutoProxyDetectType

WpadOverride

DisableBranchCache

UseFirstAvailable

CombineFalseStartData

DisableFalseStartBlocklist

EnforceP3PValidity

DuoProtocols

EnableSpdyDebugAsserts

DefaultConnectionSettings

ProxyEnable

ProxyServer

ProxyOverride

AutoConfigURL

SavedLegacySettings

WpadDecision

WpadDecisionTime

WpadExpirationDays

WpadDecisionReason

WpadDhcp

WpadDns

WpadDetectedUrl

UserContextLockCount

UserContextListCount

Debug

InstallerLocation

<NULL>

InstallRoot

CLRLoadLogDir

OnlyUseLatestCLR

GCStressStart

GCStressStartAtJit

DisableConfigCache

CacheLocation

DownloadCacheQuotaInKB

EnableLog

LoggingLevel

ForceLog

LogFailures

VersioningLog

LogResourceBinds

UseLegacyIdentityFormat

DisableMSIPeek

NoClientChecks

DevOverrideEnable

LatestIndex

NIUsageMask

ILUsageMask

DisplayName

ConfigMask

ConfigString

MVID

EvalationData

Status

ILDependencies

NIDependencies

MissingDependencies

Modules

SIG

LastModTime

mscorlib

DEPOff

DisplayIcon

ParentKeyName

ParentDisplayName

InstallLocation

Inno Setup: App Path

InstallDir

UninstallString

ModifyPath

DisplayVersion

Publisher

ReleaseType

URLInfoAbout

HelpLink

SystemComponent

NoModify

WindowsInstaller

EstimatedSize

ProcessID

EnablePrivateObjectHeap

ContextLimit

ObjectLimit

IdentifierLimit

CurrentMajorVersionNumber

pv

opv

cmd

ap

brand

UninstallArguments

usagestats

oeminstall

eulaaccepted

msi

lang

InstallerResult

InstallerError

InstallerResultUIString

NoGuiFromShim

0409

.HLP

ProductGuid

PendingFileRenameOperations

DLL

Flags

DriverVersion

MSOGL

UseDoubleClickTimer

Tahoma

AutoShardSelect

CacheOk

Compatible

Platform

EnableUTF8

DataStreamEnabledState

EnabledScopes

Latest

index1

LegacyPolicyTimeStamp

System.EnterpriseServices

System

System.Xml

System.Configuration

Microsoft.VisualC

System.Runtime.Remoting

System.DirectoryServices

System.Transactions

IJWEntrypointCompatMode

InstallResource

SystemPartition

AutoRecover

SP

MachineGUID

DigitalProductId

DigitalProductId4

PnpInstanceID

SecurityIdIUriCacheSize

DXTFilterBehavior

OWNDC

{b0bc68f9-b760-468d-9fa6-de07dffb370b}

ProcessorNameString

Buzzing Dhol

CodePointToFontMap

TasksFolder

NotifyOnTaskMiss

ViewHiddenTasks

BuildLabEx

sLanguage

SharedDir

C:\Users\win7\AppData\Local\Temp\GLF1A43.tmp

C:\Users\win7\AppData\Local\Temp\eLicenserInst\EULAs\\SPANISH.rtf

C:\Users\win7\AppData\Local\Temp\eLicenserInst\EULAs\\JAPANESE.rtf

C:\Users\win7\AppData\Local\Temp\eLicenserInst\EULAs\\GERMAN.rtf

C:\Users\win7\AppData\Local\Temp\eLicenserInst\EULAs\\FRENCH.rtf

C:\Users\win7\AppData\Local\Temp\eLicenserInst\EULAs\\ENGLISH.rtf

C:\Users\win7\AppData\Local\Temp\eLicenserInst\EULAs\\ITALIAN.rtf

Locale

Common AppData

C:\Users\win7\AppData\Local\Temp\eLicenserInst\msvcr71.dll

C:\Users\win7\AppData\Local\Temp\eLicenserInst\eLicenserWISEHelper.exe

C:\Users\win7\AppData\Local\Temp\eLicenserInst\DotNetCheck.exe

C:\Users\win7\AppData\Local\Temp\eLicenserInst\InstallerTools\\eLicenserWISEHelper.exe

C:\Users\win7\AppData\Local\Temp\eLicenserInst\InstallerTools\\msvcr71.dll

C:\Users\win7\AppData\Local\Temp\eLicenserInst\InstallerTools\\eLicenserWISEHelper_64.exe

C:\Users\win7\AppData\Local\Temp\eLicenserInst\InstallerTools\\DotNetCheck.exe

Counter

AdvpackLogFile

SetupPath

Path

rarkey

rarreg.key

Default

ArcName

FileNames

ExclNames

StoreNames

UseRAR

SFXModule

SFX

SFXIcon

CmtFile

CmtText

VolumeSize

VolPause

OldVolNames

RecVolNumber

Update

Fresh

SyncFiles

Move

Solid

AV

Test

Recovery

EraseDest

AddArcOnly

ClearArc

Lock

Method

DictSizeLZ

Password

EncryptHeaders

OpenShared

ProcessOwners

SaveStreams

Background

Shutdown

GenerateArcName

VersionControl

GenerateMask

FileTimeMode

FileDays

FileHours

FileMinutes

ArcTimeOriginal

ArcTimeLatest

mtime

ctime

atime

PathsAbs

PathsNone

PathsAbsDrive

ImmExec

SeparateArc

EmailArcTo

PackDetails

UsrColumnSettings

Preferences

Debugger

FORCE_ASSEMREF_DUPCHECK

MD_TrackColDesMisses

System.Windows.Forms

System.Drawing

System.Deployment

System.Runtime.Serialization.Formatters.Soap

Accessibility

System.Security

DbgJITDebugLaunchSetting

DbgManagedDebugger

Class

System.Web

System.Data.SqlXml

sYearMonth

InstallationType

Library

IsMultiInstance

First Counter

CategoryOptions

FileMappingSize

Counter Names

LegacyWPADSupport

DontSendAdditionalData

Disabled

DefaultConsent

DefaultOverrideBehavior

CLR20r3

LoggingDisabled

DontShowUI

DisableArchive

ConfigureArchive

DisableQueue

MaxQueueCount

MaxArchiveCount

ForceQueue

QueuePesterInterval

SendEFSFiles

BypassDataThrottling

ForceUserModeCabCollection

CorporateWerServer

CorporateWerUseSSL

CorporateWerPortNumber

CorporateWerUseAuthentication

BIOSVersion

FormatForDisplayHelper

PreventIndexingOfflineFiles

optimizer pro

defaultscope

qip internet guardian

systweak support dock

rdreminder

systweakasp

advanced system protector.bak

advanced system protector_startup

magent

torcho

onekit

onlysearch

bestoffers

pennybee

gophoto.it

playnowradio

webprotect

adworldads

whitesmoke

minibr

keepmysearch

mysearchdial

shopwit

searcharmor

convertad

googleupdate

chromeupdate

FoundUws

ShortcutBehavior

PrivacyAdvanced

MachineGuid

BootDir

InstallDate

DisableRunAsAdmin

svcVersion

ScreenSaverIsSecure

VendorIdentifier

Last Stable Install Path

Last install path

ProgId

CurrentVersion

CheckMaxTime

HighlightCursor

SoundMoniker

Seed

GlitchInstrumentation

ClassManagerFlags

MaxID

Key

Command

InstallDateFirst

ColorName

ProductIcon

InstallSource

UninstallPath

LocalPackage

Content Type

PNP_TDI

Tag

System.Configuration.Install

SwapMouseButtons

PackageCode

InstanceType

MajorVersion

AllowUnsafeObjectPassing

locale

~MHz

Local AppData

Local Settings

t

User Agent

Microsoft.VisualBasic

System.Management

di

GamesRoot

ProductId

Plugin path

Next Plugin path

disabled

SusClientId

MID

CSDVersion

ProductType

DataFolder

nome

info

InstallSuccess

MetricsReportingEnabled

DefaultScope

CurrentBuildNumber

Upgrade

ServiceName

filepath

Last beta Install Path

Last Next Install Path

HelpURL

HomePage

RegistryURL

LostURL

RenewURL

CheckUpdate

ShowWindowsUpdate

ViewStyle

Widthlist

RegistryKey

PNUCT

MS Sans Serif

ProductCodes

URLUpdateInfo

Readme

ROCCAT Savu Gaming Mouse

PF1 Page Scroll

PF1 HScroll Lines

PF1 System Pointer Accel

PF1 Enable System Accel

PF1 Enable Pointer Trail

PF1 Double Clicks

PF2 VScroll Lines

PF2 Page Scroll

PF2 HScroll Lines

PF2 System Pointer Accel

PF2 Enable System Accel

PF2 Enable Pointer Trail

PF2 Double Clicks

PF3 VScroll Lines

PF3 Page Scroll

PF3 HScroll Lines

PF3 System Pointer Accel

PF3 Enable System Accel

PF3 Enable Pointer Trail

PF3 Double Clicks

PF4 VScroll Lines

PF4 Page Scroll

PF4 HScroll Lines

PF4 System Pointer Accel

PF4 Enable System Accel

PF4 Enable Pointer Trail

PF4 Double Clicks

PF5 VScroll Lines

PF5 Page Scroll

PF5 HScroll Lines

PF5 System Pointer Accel

PF5 Enable System Accel

PF5 Enable Pointer Trail

PF5 Double Clicks

Statistic DB

SchemeLangID

EnableLUA

UseMPHeap

DepOfLookAsideBuf

NumberOfCsPools

FXMemEnabled

TrapPollTimeMilliSecs

SystemBiosVersion

LaunchPermission

LocalService

Persistent

baseurl

version

platform

tx

reinstallversion

culture

Extension

MaxConnectionsNumber

isUseWinDialUp

mAttempts

mRedialTime

bUseAltKey

bUseControlKey

AppData

GinaDLL

ProfileImagePath

ComputerName

BuildLab

ProductName

TZI

Std

Dlt

Display

MapID

Default Impersonation Level

EnableVirtualization

CurrentType

ProductID

ProductKey

FirstInstallDateTime

DVD_Region

DevicePath

OtherDevicePath

MediaPath

ConfigPath

WallPaperDir

DigitalProductID

order

extra key

gesture up

gesture down

gesture left

gesture right

bt0

bt1

bt2

bt3

bt4

Default Namespace

DomainLocationDeterminationUrl

ShowEULA

ShowQuickGuide

MS Shell Dlg

CorrelationVector

PostStatusUrl

LocalFileName

VersionXmlURL

Current

LastKnownGood

ScheduledSelections

LANG

USERNAME

RegistryTest

UMID

UUID

MSFTInternal

IsTest

MachineId

OEMID

InstalledLanguages

SuiteLanguage

UserLanguage

OsLoaderPath

SourcePath

LogLevel

appmsvc6

Client

ID

IDD

Gateway

Language

zi_id

zi_bid

zi_inf

LogFile

%IS_PREREQF%-Arc

%IS_PREREQ%-Arc

DisableMMX

RulesXmlDir

AllowConsecutiveSlashesInUrlPathComponent

UID

SendCustomerData

AppUserIdleTimerInterval

AppUserIdleResetInterval

VersionToReport

ClientVersionToReport

ClientFolder

CDNBaseUrl

recoverydata

ClientCulture

ULSCategoriesSeverities

ULSAllCategories

cmLock

cmlib

Custom_Action

AffiliateID

ALT_THEME

License

CEIPEnable

CSDReleaseType

PerfLab

LoadDebugRuntime

ForceDriverFlagsOff

InstalledDisplayDrivers

SoftwareOnly

DriverStyle

DisplayString

FontHeight

FontWeight

FontItalic

FontCharSet

FontPitchFamily

FontFace

DisplayTime

MeshQuality

SurfaceType

Specular

RotationSpeed

RotationStyle

SurfaceColor

UseCustomColor

UseCustomTexture

UseCustomEnvironment

CustomTexture

CustomEnvironment

AllScreensSame

Domain

UserUUID

EnablePrefetcher

Personal

Common Start Menu

Start Menu

Common Programs

Programs

Recent

Desktop

Queue Size

Holders

MaxResLifeTime

Always Test Connection

OLEDB_SERVICES

SPTimeOut

ETWLogging

DnsProxy

TFWRate

Intranet

MaxDnSpeed

PeerNumPerS

MaxUpSpeed

MaxUpUpdate

UseEntModuleList

Nat

ProxySettingsPerUser

proxytype

ieproxy

manual_v3

Logging

Logging Directory

Log File Max Size

befbccbddg.exe

0

Save window positions

BgsMsndTimeToRunSecs

printerName

Priority

SFXLogo

SFXElevate

CmtTextData

Overwrite

ArcRecBin

ArcWipe

WaitForOther

OnTop

RestoreFolder

LastFolder

AltColor

AltEncryptionColor

ExportedSettings

DlgHistory

CustomExt

Sound

WizardMode

Microsoft.JScript

Microsoft.Vsa

C:\sample

C:\Windows\SysWOW64\ntdll.dll

C:\Windows\SYSTEM32\MSCOREE.DLL

C:\Windows\syswow64\KERNEL32.dll

C:\Windows\syswow64\KERNELBASE.dll

C:\CFVS_HookDll.dll

C:\Windows\syswow64\WS2_32.dll

C:\Windows\syswow64\msvcrt.dll

C:\Windows\syswow64\RPCRT4.dll

C:\Windows\syswow64\SspiCli.dll

C:\Windows\syswow64\CRYPTBASE.dll

C:\Windows\SysWOW64\sechost.dll

C:\Windows\syswow64\NSI.dll

C:\Windows\syswow64\urlmon.dll

C:\Windows\syswow64\api-ms-win-downlevel-ole32-l1-1-0.dll

C:\Windows\syswow64\ole32.DLL

C:\Windows\syswow64\GDI32.dll

C:\Windows\syswow64\USER32.dll

C:\Windows\syswow64\ADVAPI32.dll

C:\Windows\syswow64\LPK.dll

C:\Windows\syswow64\USP10.dll

C:\Windows\syswow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll

C:\Windows\syswow64\shlwapi.DLL

C:\Windows\syswow64\api-ms-win-downlevel-advapi32-l1-1-0.dll

C:\Windows\syswow64\api-ms-win-downlevel-user32-l1-1-0.dll

C:\Windows\syswow64\api-ms-win-downlevel-version-l1-1-0.dll

C:\Windows\system32\version.DLL

C:\Windows\syswow64\api-ms-win-downlevel-normaliz-l1-1-0.dll

C:\Windows\syswow64\normaliz.DLL

C:\Windows\syswow64\iertutil.dll

C:\Windows\syswow64\WININET.dll

C:\Windows\syswow64\USERENV.dll

C:\Windows\syswow64\profapi.dll

C:\Windows\system32\DNSAPI.dll

C:\Windows\system32\IMM32.DLL

C:\Windows\syswow64\MSCTF.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll

C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc\MSVCR80.dll

C:\Windows\syswow64\shell32.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll

C:\Windows\syswow64\WINTRUST.dll

C:\Windows\syswow64\CRYPT32.dll

C:\Windows\syswow64\MSASN1.dll

C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_ec86b8d6858ec0bc\COMCTL32.dll

C:\Windows\system32\CRYPTSP.dll

C:\Windows\system32\rsaenh.dll

C:\Windows\syswow64\imagehlp.dll

C:\Windows\system32\ncrypt.dll

C:\Windows\system32\bcrypt.dll

C:\Windows\SysWOW64\bcryptprimitives.dll

C:\Windows\system32\GPAPI.dll

C:\Windows\system32\cryptnet.dll

C:\Windows\syswow64\WLDAP32.dll

C:\Windows\system32\SensApi.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System\908ba9e296e92b4e14bdc2437edac603\System.ni.dll

C:\Windows\syswow64\SETUPAPI.dll

C:\Windows\syswow64\CFGMGR32.dll

C:\Windows\syswow64\DEVOBJ.dll

C:\Windows\system32\apphelp.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll

C:\Windows\system32\PROPSYS.dll

C:\Windows\syswow64\OLEAUT32.dll

C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d\comctl32.dll

InterfaceLanguage

HideCaptionMenu

HideNavigation

ControlState

DefaultVideoFrame

KeepAspectRatio

CompMonDeskARDiff

Volume

Balance

Mute

LoopNum

Loop

Rewind

Zoom

DSVidRen

RMVidRen

QTVidRen

APSurfaceUsage

DX9Resizer

VMR9MixerMode

VMRMixerYUV

VMRAlternateVSync

VMRVSyncOffset

VMRVSyncAccurate2

VMRFullscreenGUISupport

EVRHighColorRes

EVRForceInputHighColorRes

EVREnableFrameTimeCorrection

VMRVSync

VMRDisableDesktopComposition

VMRFullFloatingPointProcessing

VMRHalfFloatingPointProcessing

VMRColorManagementEnable

VMRColorManagementInput

VMRColorManagementAmbientLight

VMRColorManagementIntent

EVROutputRange

VMRFlushGPUBeforeVSync

VMRFlushGPUAfterPresent

VMRFlushGPUWait

SynchronizeClock

SynchronizeDisplay

SynchronizeNearest

LineDelta

ColumnDelta

CycleDelta

TargetSyncOffset

ControlLimit

ResetDevice

SPCSize

SPCMaxRes

SPCPow2Tex

SPCAllowAnimationWhenBuffering

EVRBuffers

D3D9RenderDevice

AudioRendererType

AutoloadAudio

AutoloadSubtitles

SubtitlesLanguageOrder

AudiosLanguageOrder

BlockVSFilter

EnableWorkerThreadForOpening

ReportFailedPins

AllowMultipleInstances

TitleBarTextStyle

TitleBarTextTitle

TrayIcon

AutoZoom

FullScreenCtrls

FullScreenCtrlsTimeOut

FullScreenMonitor

PreventMinimize

UseWin7TaskBar

ExitAfterPlayBack

SearchInDirAfterPlayBack

DontUseSearchInFolder

UseTimeTooltip

TimeTooltipPosition

OSD_Size

OSD_Font

AssociatedWithIcon

LastOpenDir

FullscreenRes

ExitFullscreenAtTheEnd

RestoreResAfterExit

RememberWindowPos

RememberWindowSize

SnapToDesktopEdges

AspectRatioX

AspectRatioY

KeepHistory

LastWindowRect

LastWindowType

ShufflePlaylistItems

RememberPlaylistItems

HidePlaylistFullScreen

RememberPosition

RelativeDrive

DVDPath

UseDVDPath

MenuLang

AudioLang

SubtitlesLang

AutoSpeakerConf

SPDefaultStyle

SPOverridePlacement

SPHorPos

SPVerPos

SubDelayInterval

EnableSubtitles

PrioritizeExternalSubtitles

DisableInternalSubtitles

SubtitlePaths

UseDefaultsubtitlesStyle

EnableAudioSwitcher

EnableAudioTimeShift

AudioTimeShift

DownSampleTo441

CustomChannelMapping

SpeakerToChannelMapping

AudioNormalize

AudioNormalizeRecover

AudioBoost

SpeakerChannels

Enabled

SourceType

IntRealMedia

Preset0

CommandMod0

WinLircAddr

UseWinLirc

UICEAddr

UseUICE

UseGlobalMedia

DisableXPToolbars

UseWMASFReader

JumpDistS

JumpDistM

JumpDistL

LimitWindowProportions

NotifyMSN2

NotifyGTSdll

RtspHandler

RtspFileExtFirst

Video file

Matroska Media file

WebM video file

Windows Media file

MPEG Media file

MPEG-TS Media file

VCD file

DVD file

Ogg Media file

DVD2AVI Project file

MPEG4 file

Flash Video file

FLIC file

Indeo Video file

Smacker/Bink Media file

RatDVD file

DirectShow Media file

MP3 audio file

Windows Media Audio file

Audio file

MPEG Audio file

DVD Audio file

Ogg Vorbis Audio file

Matroska Audio file

CD audio track

MPEG4 Audio file

Musepack file

FLAC audio file

WavPack audio file

ALAC audio file

OptimFrog audio file

Monkey's Audio file

True audio file

AMR audio file

AIFF audio file

AU audio file

MIDI file

Shockwave Flash file

Real Media file

Real Audio file

Real Script file

QuickTime file

3GP video file

3G2 video file

Playlist file

Blu-ray playlist file

Other

SRC_AVI

SRC_CDDA

SRC_CDXA

SRC_DSM

SRC_DTSAC3

SRC_VTS

SRC_D2V

SRC_MPA

SRC_OGG

SRC_SHOUTCAST

SRC_SUBS

TRA_PS2AUD

TRA_PCM

TRA_MPEG2

TRA_DXVA_H264

TRA_DXVA_VC1

LogoFile

LogoID2

LogoExt

HideCDROMsSubMenu

LaunchFullScreen

EnableWebServer

WebServerPort

WebServerPrintDebugIfo

WebServerUseCompression

WebServerLocalhostOnly

WebRoot

WebDefIndex

WebServerCGI

My Pictures

SnapShotPath

SnapShotExt

ThumbRows

ThumbCols

ThumbWidth

ISDb

LastUsedPage

D3DFullScreen

MonitorAutoRefreshRate

Color Brightness

Color Contrast

Color Hue

Color Saturation

Shaders List

ShaderListScreenSpace

ToggleShader

ToggleShaderScreenSpace

Show OSD

EnableEDLEditor

FastSeek

DefaultCapture

VidDispName

AudDispName

Country

BDANetworkProvider

BDATuner

BDAReceiver

BDAScanFreqStart

BDAScanFreqEnd

BDABandWidth

BDAUseOffset

BDAOffset

BDAIgnoreEncryptedChannels

LastChannel

Remember DVD Pos

DVD Position 0

DVD Position 1

DVD Position 2

DVD Position 3

DVD Position 4

DVD Position 5

DVD Position 6

DVD Position 7

DVD Position 8

DVD Position 9

DVD Position 10

DVD Position 11

DVD Position 12

DVD Position 13

DVD Position 14

DVD Position 15

DVD Position 16

DVD Position 17

DVD Position 18

DVD Position 19

Remember File Pos

File Name 0

File Position 0

File Name 1

File Position 1

File Name 2

File Position 2

File Name 3

File Position 3

File Name 4

File Position 4

File Name 5

File Position 5

File Name 6

File Position 6

File Name 7

File Position 7

File Name 8

File Position 8

File Name 9

File Position 9

File Name 10

File Position 10

File Name 11

File Position 11

File Name 12

File Position 12

File Name 13

File Position 13

File Name 14

File Position 14

File Name 15

File Position 15

File Name 16

File Position 16

File Name 17

File Position 17

File Name 18

File Position 18

File Name 19

File Position 19

LastFullScreen

Combine

CombineScreenSpace

RemainingTime

DockState

Visible

sizeHorzCX

sizeHorzCY

sizeVertCX

sizeVertCY

sizeFloatCX

sizeFloatCY

File1

File2

File3

File4

File5

File6

File7

File8

File9

File10

File11

File12

File13

File14

File15

File16

File17

File18

File19

File20

vidc.mrle

vidc.msvc

vidc.uyvy

vidc.yuy2

vidc.yvyu

vidc.iyuv

vidc.i420

vidc.yvu9

vidc.cvid

FriendlyName

NoPCMConverter

Priority1

VidBuffers

AudBuffers

VidOutput

AudOutput

VidPreview

AudPreview

FileFormat

FileName

SepAudio

DockPosX

DockPosY

OCDLMgr

ORACLE_SID

SQLPATH

LOCAL

NLS_LANG

NET20

NET80

TNS_ADMIN

ORACLE_HOME

ORACLE_HOME_NAME

uid

flags

affid

befbbcebdg.exe

LogSecuritySuccesses

IgnoreUserSettings

TrustPolicy

UseWINSAFER

Timeout

DisplayLogo

COM+Enabled

InfoReq

BaseBoardProduct

Brandover

WINDOW_LEFT

WINDOW_TOP

WINDOW_WIDTH

WINDOW_HEIGHT

SplitterPositionCleaner

NewVersion

RunICS

AutoICS

CookiesToSave

NtfsDisableLastAccessUpdate

SecureDeleteType

SecureDeleteMethod

WipeAlternateDataStreams

WipeClusterTips

IEDetailed

FFDetailed

DelayTemp

DelayRB

Exclude1

CustomFiles

CustomFolders

Include1

CustomLocation1

WipeFreeSpaceDrives

JumplistTasks

WipeMFTFreeSpace

CachePath

WINDOW_MAX

Monitoring

ShowCleanWarning

BundleUpgradeCode

BundleAddonCode

BundlePatchCode

BundleDetectCode

GlobalFlags

Columns

Level

LogDir

FirstRun

LastIndex

SynUnInstall

MediaSubType

PATH

config_ext

exe_path

priority

log_append

Common Desktop

Startup

Common Startup

Fonts

Common Fonts

TRACE_MISC

TRACE_CM

TRACE_TRACE

TRACE_SVC

TRACE_GATEWAY

TRACE_UI

TRACE_CONTACT

TRACE_UTIL

TRACE_CLUSTER

TRACE_RESOURCE

TRACE_TIP

TRACE_XA

TRACE_LOG

TRACE_MTXOCI

TRACE_ETWTRACE

TRACE_PROXY

TRACE_KTMRM

TRACE_VSSBACKUP

TRACE_PERFMON

TRACE_TM

TRACE_LU

TraceFilePath

MemoryBufferSize

DebugOutEnabled

OracleXaLib

OracleSqlLib

OracleOciLib

MTxOciCPTimeout

OracleTraceFilePath

DefaultTTL

SOFTWARE\Microsoft\MpSigStub

Software\Microsoft\RestartManager\Session0000

SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings

Software\Microsoft\Internet Explorer\Main

Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections

Software\Microsoft\Windows\CurrentVersion\Internet Settings

Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad

{69DC4768-446B-4F82-A6B0-63966A243064}

52-54-00-12-35-02

System\CurrentControlSet\Control\SecurityProviders\Schannel

SOFTWARE\Microsoft\Cryptography\AutoEnrollment

Software\Microsoft\Fusion\GACChangeNotification\Default

SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{4E33E8E0-0F03-1A8D-6313-2769A8F675DA}

Software\Yandex\YandexBrowser

Software

Software\Yandex

SOFTWARE\InstallShield\ISEngine12.0

Software\WAC\Arcanum\Config

Software\Microsoft\DownloadManager

System\CurrentControlSet\Services\Tcpip\Parameters

Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing

Software\Microsoft\SystemCertificates\My

Software\Microsoft\SystemCertificates\CA

Certificates

CRLs

CTLs

Software\Policies\Microsoft\SystemCertificates\CA

Software\Microsoft\EnterpriseCertificates\CA

Software\Microsoft\SystemCertificates\Disallowed

Software\Policies\Microsoft\SystemCertificates\Disallowed

Software\Microsoft\EnterpriseCertificates\Disallowed

Software\Microsoft\SystemCertificates\Root

Software\Microsoft\SystemCertificates\AuthRoot

Software\Policies\Microsoft\SystemCertificates\Root

Software\Microsoft\EnterpriseCertificates\Root

Software\Microsoft\SystemCertificates\SmartCardRoot

Software\Microsoft\SystemCertificates\TrustedPeople

Software\Policies\Microsoft\SystemCertificates\TrustedPeople

Software\Microsoft\EnterpriseCertificates\TrustedPeople

Software\Microsoft\SystemCertificates\trust

Software\Policies\Microsoft\SystemCertificates\trust

Software\Microsoft\EnterpriseCertificates\trust

wayworn.ghostly.1

CLSID

wayworn.ghostly

CurVer

{e504de59-0446-43d1-ba64-01bb410e15fb}

ProgID

VersionIndependentProgID

Programmable

LocalServer32

TypeLib

Version

.nsi

NSIS.Script

NSIS.Script\DefaultIcon

NSIS.Script\shell

NSIS.Script\shell\open\command

NSIS.Script\shell\compile

NSIS.Script\shell\compile\command

NSIS.Script\shell\compile-compressor

NSIS.Script\shell\compile-compressor\command

.nsh

NSIS.Header

NSIS.Header\DefaultIcon

NSIS.Header\shell

NSIS.Header\shell\open\command

Software\NSIS

Software\Microsoft\Windows\CurrentVersion\Uninstall\NSIS

Software\Microsoft\WBEM\CIMOM

Software\Mozilla\Thunderbird\TaskBarIDs

Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\

Software\Microsoft\Microsoft Games\Age of Empires 3 Expansion Pack\1.0

Software\Classes

SYSTEM\CurrentControlSet\Control\Session Manager\Environment

Software\WinRAR\Profiles\0

Software\WinRAR\Profiles\1

Software\WinRAR\Profiles\2

Software\WinRAR\Profiles\3

Software\WinRAR\Profiles\4

SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Software\Microsoft\Windows\CurrentVersion\App Paths\CaliforniaFonts.exe

Software\Microsoft\Windows\CurrentVersion\Uninstall\California Font Manager

Software\Mozilla

SOFTWARE\ej-technologies\exe4j\pids\

SOFTWARE\ej-technologies\exe4j\

Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\CIDSizeMRU\

Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedPidlMRU\

Software\Microsoft\Windows\Shell

BagMRU

1

0

Bags\34\ComDlg

Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU

Software\Google\Software Removal Tool

Software\UcMapi\Office Tabs

Software\Microsoft\Windows\CurrentVersion\Uninstall\Office Tabs

UcMapi.PowerTabExt.1

UcMapi.PowerTabExt

{3BC29F01-9096-4DD9-9866-D1B407F82A9D}

InprocServer32

Office

PowerPoint

Addins

{9A720BF3-A296-4516-83BE-706836BC20B6}

1.0

FLAGS

win32

HELPDIR

{C7F73D84-F9B1-4A75-9FF8-40323C74DBC4}

ProxyStubClsid32

SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\P3P\History

Software\WeatherTool\Settings

SOFTWARE\DtsEncodeTools

Software\WeatherTool\DUMPSETTING

SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted

Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform

Software\Opera Software

Software\NCH Software\Components\x264enc5

Software\NCH Swift Sound\Components\x264enc5

Software\NCH Software\Debut\Settings

Software\NCH Software\Debut

Software\Microsoft\Windows\CurrentVersion\Uninstall\Debut

Software\Microsoft\ActiveMovie\devenum

{33D9A762-90C8-11D0-BD43-00A0C911CE86}

Software\NCH Software\Debut\ScreenVideoSettings

Software\NCH Software\Debut\WebCamVideoSettings

Software\NCH Software\Debut\CaptureDeviceVideoSettings

Software\NCH Software\Debut\IPCameraVideoSettings

Software\NCH Software\Debut\Hotkey

Software\NCH Software\Debut\Hotkey\0

Software\NCH Software\Debut\Hotkey\1

Software\NCH Software\Debut\Hotkey\2

Software\NCH Software\Debut\Hotkey\3

Software\NCH Software\Debut\Hotkey\4

Software\NCH Software\Debut\Hotkey\5

Software\Classes\.cdo

Software\Classes\cdofile

Software\Classes\cdofile\shell\open\command

Software\Classes\cdofile\DefaultIcon

Software\Classes\.deproj

Software\Classes\deprojfile

Software\Classes\deprojfile\shell\open\command

Software\Classes\deprojfile\DefaultIcon

Software\Classes\.drp

Software\Classes\drpfile

Software\Classes\drpfile\shell\open\command

Software\Classes\drpfile\DefaultIcon

Software\Classes\.ddp

Software\Classes\ddpfile

Software\Classes\ddpfile\shell\open\command

Software\Classes\ddpfile\DefaultIcon

Software\Classes\.apj

Software\Classes\apjfile

Software\Classes\apjfile\shell\open\command

Software\Classes\apjfile\DefaultIcon

Software\Classes\.npp

Software\Classes\nppfile

Software\Classes\nppfile\shell\open\command

Software\Classes\nppfile\DefaultIcon

Software\Classes\.moh

Software\Classes\mohfile

Software\Classes\mohfile\shell\open\command

Software\Classes\mohfile\DefaultIcon

Software\Classes\.ivr

Software\Classes\ivrfile

Software\Classes\ivrfile\shell\open\command

Software\Classes\ivrfile\DefaultIcon

Software\Classes\.meo

Software\Classes\meofile

Software\Classes\meofile\shell\open\command

Software\Classes\meofile\DefaultIcon

Software\Classes\.mpdp

Software\Classes\mpdpfile

Software\Classes\mpdpfile\shell\open\command

Software\Classes\mpdpfile\DefaultIcon

Software\Classes\.dct

Software\Classes\dctfile

Software\Classes\dctfile\shell\open\command

Software\Classes\dctfile\DefaultIcon

Software\Classes\.dss

Software\Classes\dssfile

Software\Classes\dssfile\shell\open\command

Software\Classes\dssfile\DefaultIcon

Software\Classes\.ds2

Software\Classes\ds2file

Software\Classes\ds2file\shell\open\command

Software\Classes\ds2file\DefaultIcon

Software\Classes\.vpj

Software\Classes\vpjfile

Software\Classes\vpjfile\shell\open\command

Software\Classes\vpjfile\DefaultIcon

Software\Classes\.spj

Software\Classes\spjfile

Software\Classes\spjfile\shell\open\command

Software\Classes\spjfile\DefaultIcon

Software\Classes\.aac

Software\Classes\aacfile\Shell\NCHeditsound\command

Software\Classes\aacfile\Shell\NCHeditsound

Software\Classes\aacfile\DefaultIcon

Software\Classes\.aif

Software\Classes\aiffile\Shell\NCHeditsound\command

Software\Classes\aiffile\Shell\NCHeditsound

Software\Classes\aiffile\DefaultIcon

Software\Classes\.aiff

Software\Classes\aifffile\Shell\NCHeditsound\command

Software\Classes\aifffile\Shell\NCHeditsound

Software\Classes\aifffile\DefaultIcon

Software\Classes\.au

Software\Classes\aufile\Shell\NCHeditsound\command

Software\Classes\aufile\Shell\NCHeditsound

Software\Classes\aufile\DefaultIcon

Software\Classes\.caf

Software\Classes\caffile\Shell\NCHeditsound\command

Software\Classes\caffile\Shell\NCHeditsound

Software\Classes\caffile\DefaultIcon

Software\Classes\.flac

Software\Classes\flacfile\Shell\NCHeditsound\command

Software\Classes\flacfile\Shell\NCHeditsound

Software\Classes\flacfile\DefaultIcon

Software\Classes\.m4a

Software\Classes\m4afile\Shell\NCHeditsound\command

Software\Classes\m4afile\Shell\NCHeditsound

Software\Classes\m4afile\DefaultIcon

Software\Classes\.mp3

Software\Classes\mp3file\Shell\NCHeditsound\command

Software\Classes\mp3file\Shell\NCHeditsound

Software\Classes\mp3file\DefaultIcon

Software\Classes\.oga

Software\Classes\ogafile\Shell\NCHeditsound\command

Software\Classes\ogafile\Shell\NCHeditsound

Software\Classes\ogafile\DefaultIcon

Software\Classes\.ogg

Software\Classes\oggfile\Shell\NCHeditsound\command

Software\Classes\oggfile\Shell\NCHeditsound

Software\Classes\oggfile\DefaultIcon

Software\Classes\.voc

Software\Classes\vocfile\Shell\NCHeditsound\command

Software\Classes\vocfile\Shell\NCHeditsound

Software\Classes\vocfile\DefaultIcon

Software\Classes\.vox

Software\Classes\voxfile\Shell\NCHeditsound\command

Software\Classes\voxfile\Shell\NCHeditsound

Software\Classes\voxfile\DefaultIcon

Software\Classes\.wav

Software\Classes\wavfile\Shell\NCHeditsound\command

Software\Classes\wavfile\Shell\NCHeditsound

Software\Classes\wavfile\DefaultIcon

Software\Classes\.wma

Software\Classes\wmafile\Shell\NCHeditsound\command

Software\Classes\wmafile\Shell\NCHeditsound

Software\Classes\wmafile\DefaultIcon

Software\Classes\aacfile\Shell\NCHconvertsound\command

Software\Classes\aacfile\Shell\NCHconvertsound

Software\Classes\aiffile\Shell\NCHconvertsound\command

Software\Classes\aiffile\Shell\NCHconvertsound

Software\Classes\aifffile\Shell\NCHconvertsound\command

Software\Classes\aifffile\Shell\NCHconvertsound

Software\Classes\.ape

Software\Classes\apefile\Shell\NCHconvertsound\command

Software\Classes\apefile\Shell\NCHconvertsound

Software\Classes\apefile\DefaultIcon

Software\Classes\aufile\Shell\NCHconvertsound\command

Software\Classes\aufile\Shell\NCHconvertsound

Software\Classes\caffile\Shell\NCHconvertsound\command

Software\Classes\caffile\Shell\NCHconvertsound

Software\Classes\ds2file\Shell\NCHconvertsound\command

Software\Classes\ds2file\Shell\NCHconvertsound

Software\Classes\dssfile\Shell\NCHconvertsound\command

Software\Classes\dssfile\Shell\NCHconvertsound

Software\Classes\flacfile\Shell\NCHconvertsound\command

Software\Classes\flacfile\Shell\NCHconvertsound

Software\Classes\.gsm

Software\Classes\gsmfile\Shell\NCHconvertsound\command

Software\Classes\gsmfile\Shell\NCHconvertsound

Software\Classes\gsmfile\DefaultIcon

Software\Classes\m4afile\Shell\NCHconvertsound\command

Software\Classes\m4afile\Shell\NCHconvertsound

Software\Classes\mp3file\Shell\NCHconvertsound\command

Software\Classes\mp3file\Shell\NCHconvertsound

Software\Classes\ogafile\Shell\NCHconvertsound\command

Software\Classes\ogafile\Shell\NCHconvertsound

Software\Classes\oggfile\Shell\NCHconvertsound\command

Software\Classes\oggfile\Shell\NCHconvertsound

Software\Classes\.shn

Software\Classes\shnfile\Shell\NCHconvertsound\command

Software\Classes\shnfile\Shell\NCHconvertsound

Software\Classes\shnfile\DefaultIcon

Software\Classes\vocfile\Shell\NCHconvertsound\command

Software\Classes\vocfile\Shell\NCHconvertsound

Software\Classes\voxfile\Shell\NCHconvertsound\command

Software\Classes\voxfile\Shell\NCHconvertsound

Software\Classes\wavfile\Shell\NCHconvertsound\command

Software\Classes\wavfile\Shell\NCHconvertsound

Software\Classes\wmafile\Shell\NCHconvertsound\command

Software\Classes\wmafile\Shell\NCHconvertsound

Software\Classes\.3g2

Software\Classes\3g2file\Shell\NCHeditvideo\command

Software\Classes\3g2file\Shell\NCHeditvideo

Software\Classes\3g2file\DefaultIcon

Software\Classes\.3gp

Software\Classes\3gpfile\Shell\NCHeditvideo\command

Software\Classes\3gpfile\Shell\NCHeditvideo

Software\Classes\3gpfile\DefaultIcon

Software\Classes\.asf

Software\Classes\asffile\Shell\NCHeditvideo\command

Software\Classes\asffile\Shell\NCHeditvideo

Software\Classes\asffile\DefaultIcon

Software\Classes\.avi

Software\Classes\avifile\Shell\NCHeditvideo\command

Software\Classes\avifile\Shell\NCHeditvideo

Software\Classes\avifile\DefaultIcon

Software\Classes\.divx

Software\Classes\divxfile\Shell\NCHeditvideo\command

Software\Classes\divxfile\Shell\NCHeditvideo

Software\Classes\divxfile\DefaultIcon

Software\Classes\.dv

Software\Classes\dvfile\Shell\NCHeditvideo\command

Software\Classes\dvfile\Shell\NCHeditvideo

Software\Classes\dvfile\DefaultIcon

Software\Classes\.m2ts

Software\Classes\m2tsfile\Shell\NCHeditvideo\command

Software\Classes\m2tsfile\Shell\NCHeditvideo

Software\Classes\m2tsfile\DefaultIcon

Software\Classes\.m4v

Software\Classes\m4vfile\Shell\NCHeditvideo\command

Software\Classes\m4vfile\Shell\NCHeditvideo

Software\Classes\m4vfile\DefaultIcon

Software\Classes\.mkv

Software\Classes\mkvfile\Shell\NCHeditvideo\command

Software\Classes\mkvfile\Shell\NCHeditvideo

Software\Classes\mkvfile\DefaultIcon

Software\Classes\.mov

Software\Classes\movfile\Shell\NCHeditvideo\command

Software\Classes\movfile\Shell\NCHeditvideo

Software\Classes\movfile\DefaultIcon

Software\Classes\.mp4

Software\Classes\mp4file\Shell\NCHeditvideo\command

Software\Classes\mp4file\Shell\NCHeditvideo

Software\Classes\mp4file\DefaultIcon

Software\Classes\.mpeg

Software\Classes\mpegfile\Shell\NCHeditvideo\command

Software\Classes\mpegfile\Shell\NCHeditvideo

Software\Classes\mpegfile\DefaultIcon

Software\Classes\.mpeg2

Software\Classes\mpeg2file\Shell\NCHeditvideo\command

Software\Classes\mpeg2file\Shell\NCHeditvideo

Software\Classes\mpeg2file\DefaultIcon

Software\Classes\.mpg

Software\Classes\mpgfile\Shell\NCHeditvideo\command

Software\Classes\mpgfile\Shell\NCHeditvideo

Software\Classes\mpgfile\DefaultIcon

Software\Classes\.ogv

Software\Classes\ogvfile\Shell\NCHeditvideo\command

Software\Classes\ogvfile\Shell\NCHeditvideo

Software\Classes\ogvfile\DefaultIcon

Software\Classes\.ts

Software\Classes\tsfile\Shell\NCHeditvideo\command

Software\Classes\tsfile\Shell\NCHeditvideo

Software\Classes\tsfile\DefaultIcon

Software\Classes\.vob

Software\Classes\vobfile\Shell\NCHeditvideo\command

Software\Classes\vobfile\Shell\NCHeditvideo

Software\Classes\vobfile\DefaultIcon

Software\Classes\.webm

Software\Classes\webmfile\Shell\NCHeditvideo\command

Software\Classes\webmfile\Shell\NCHeditvideo

Software\Classes\webmfile\DefaultIcon

Software\Classes\.xvid

Software\Classes\xvidfile\Shell\NCHeditvideo\command

Software\Classes\xvidfile\Shell\NCHeditvideo

Software\Classes\xvidfile\DefaultIcon

Software\Classes\3g2file\Shell\NCHconvertvideo\command

Software\Classes\3g2file\Shell\NCHconvertvideo

Software\Classes\3gpfile\Shell\NCHconvertvideo\command

Software\Classes\3gpfile\Shell\NCHconvertvideo

Software\Classes\asffile\Shell\NCHconvertvideo\command

Software\Classes\asffile\Shell\NCHconvertvideo

Software\Classes\avifile\Shell\NCHconvertvideo\command

Software\Classes\avifile\Shell\NCHconvertvideo

Software\Classes\divxfile\Shell\NCHconvertvideo\command

Software\Classes\divxfile\Shell\NCHconvertvideo

Software\Classes\dvfile\Shell\NCHconvertvideo\command

Software\Classes\dvfile\Shell\NCHconvertvideo

Software\Classes\m2tsfile\Shell\NCHconvertvideo\command

Software\Classes\m2tsfile\Shell\NCHconvertvideo

Software\Classes\m4vfile\Shell\NCHconvertvideo\command

Software\Classes\m4vfile\Shell\NCHconvertvideo

Software\Classes\mkvfile\Shell\NCHconvertvideo\command

Software\Classes\mkvfile\Shell\NCHconvertvideo

Software\Classes\movfile\Shell\NCHconvertvideo\command

Software\Classes\movfile\Shell\NCHconvertvideo

Software\Classes\mp4file\Shell\NCHconvertvideo\command

Software\Classes\mp4file\Shell\NCHconvertvideo

Software\Classes\mpegfile\Shell\NCHconvertvideo\command

Software\Classes\mpegfile\Shell\NCHconvertvideo

Software\Classes\mpeg2file\Shell\NCHconvertvideo\command

Software\Classes\mpeg2file\Shell\NCHconvertvideo

Software\Classes\mpgfile\Shell\NCHconvertvideo\command

Software\Classes\mpgfile\Shell\NCHconvertvideo

Software\Classes\ogvfile\Shell\NCHconvertvideo\command

Software\Classes\ogvfile\Shell\NCHconvertvideo

Software\Classes\tsfile\Shell\NCHconvertvideo\command

Software\Classes\tsfile\Shell\NCHconvertvideo

Software\Classes\vobfile\Shell\NCHconvertvideo\command

Software\Classes\vobfile\Shell\NCHconvertvideo

Software\Classes\webmfile\Shell\NCHconvertvideo\command

Software\Classes\webmfile\Shell\NCHconvertvideo

Software\Classes\xvidfile\Shell\NCHconvertvideo\command

Software\Classes\xvidfile\Shell\NCHconvertvideo

Software\Classes\Paint.Picture\Shell\NCHconvertimage\command

Software\Classes\Paint.Picture\Shell\NCHconvertimage

Software\Classes\.cr2

Software\Classes\cr2file\Shell\NCHconvertimage\command

Software\Classes\cr2file\Shell\NCHconvertimage

Software\Classes\cr2file\DefaultIcon

Software\Classes\.crw

Software\Classes\crwfile\Shell\NCHconvertimage\command

Software\Classes\crwfile\Shell\NCHconvertimage

Software\Classes\crwfile\DefaultIcon

Software\Classes\.dng

Software\Classes\dngfile\Shell\NCHconvertimage\command

Software\Classes\dngfile\Shell\NCHconvertimage

Software\Classes\dngfile\DefaultIcon

Software\Classes\.exr

Software\Classes\exrfile\Shell\NCHconvertimage\command

Software\Classes\exrfile\Shell\NCHconvertimage

Software\Classes\exrfile\DefaultIcon

Software\Classes\giffile\Shell\NCHconvertimage\command

Software\Classes\giffile\Shell\NCHconvertimage

Software\Classes\.jp2

Software\Classes\jp2file\Shell\NCHconvertimage\command

Software\Classes\jp2file\Shell\NCHconvertimage

Software\Classes\jp2file\DefaultIcon

Software\Classes\jpegfile\Shell\NCHconvertimage\command

Software\Classes\jpegfile\Shell\NCHconvertimage

Software\Classes\.mrw

Software\Classes\mrwfile\Shell\NCHconvertimage\command

Software\Classes\mrwfile\Shell\NCHconvertimage

Software\Classes\mrwfile\DefaultIcon

Software\Classes\.nef

Software\Classes\neffile\Shell\NCHconvertimage\command

Software\Classes\neffile\Shell\NCHconvertimage

Software\Classes\neffile\DefaultIcon

Software\Classes\.nrw

Software\Classes\nrwfile\Shell\NCHconvertimage\command

Software\Classes\nrwfile\Shell\NCHconvertimage

Software\Classes\nrwfile\DefaultIcon

Software\Classes\.pgf

Software\Classes\pgffile\Shell\NCHconvertimage\command

Software\Classes\pgffile\Shell\NCHconvertimage

Software\Classes\pgffile\DefaultIcon

Software\Classes\pngfile\Shell\NCHconvertimage\command

Software\Classes\pngfile\Shell\NCHconvertimage

Software\Classes\.srw

Software\Classes\srwfile\Shell\NCHconvertimage\command

Software\Classes\srwfile\Shell\NCHconvertimage

Software\Classes\srwfile\DefaultIcon

Software\Classes\.tga

Software\Classes\tgafile\Shell\NCHconvertimage\command

Software\Classes\tgafile\Shell\NCHconvertimage

Software\Classes\tgafile\DefaultIcon

Software\Classes\TIFImage.Document\Shell\NCHconvertimage\command

Software\Classes\TIFImage.Document\Shell\NCHconvertimage

Software\Classes\.webp

Software\Classes\webpfile\Shell\NCHconvertimage\command

Software\Classes\webpfile\Shell\NCHconvertimage

Software\Classes\webpfile\DefaultIcon

Software\Classes\.arw

Software\Classes\arwfile\Shell\NCHslideshow\command

Software\Classes\arwfile\Shell\NCHslideshow

Software\Classes\arwfile\DefaultIcon

Software\Classes\Paint.Picture\Shell\NCHslideshow\command

Software\Classes\Paint.Picture\Shell\NCHslideshow

Software\Classes\cr2file\Shell\NCHslideshow\command

Software\Classes\cr2file\Shell\NCHslideshow

Software\Classes\crwfile\Shell\NCHslideshow\command

Software\Classes\crwfile\Shell\NCHslideshow

Software\Classes\dngfile\Shell\NCHslideshow\command

Software\Classes\dngfile\Shell\NCHslideshow

Software\Classes\.erf

Software\Classes\erffile\Shell\NCHslideshow\command

Software\Classes\erffile\Shell\NCHslideshow

Software\Classes\erffile\DefaultIcon

Software\Classes\giffile\Shell\NCHslideshow\command

Software\Classes\giffile\Shell\NCHslideshow

Software\Classes\jp2file\Shell\NCHslideshow\command

Software\Classes\jp2file\Shell\NCHslideshow

Software\Classes\jpegfile\Shell\NCHslideshow\command

Software\Classes\jpegfile\Shell\NCHslideshow

Software\Classes\mrwfile\Shell\NCHslideshow\command

Software\Classes\mrwfile\Shell\NCHslideshow

Software\Classes\neffile\Shell\NCHslideshow\command

Software\Classes\neffile\Shell\NCHslideshow

Software\Classes\nrwfile\Shell\NCHslideshow\command

Software\Classes\nrwfile\Shell\NCHslideshow

Software\Classes\pngfile\Shell\NCHslideshow\command

Software\Classes\pngfile\Shell\NCHslideshow

Software\Classes\.raf

Software\Classes\raffile\Shell\NCHslideshow\command

Software\Classes\raffile\Shell\NCHslideshow

Software\Classes\raffile\DefaultIcon

Software\Classes\.rw2

Software\Classes\rw2file\Shell\NCHslideshow\command

Software\Classes\rw2file\Shell\NCHslideshow

Software\Classes\rw2file\DefaultIcon

Software\Classes\.sr2

Software\Classes\sr2file\Shell\NCHslideshow\command

Software\Classes\sr2file\Shell\NCHslideshow

Software\Classes\sr2file\DefaultIcon

Software\Classes\.srf

Software\Classes\srffile\Shell\NCHslideshow\command

Software\Classes\srffile\Shell\NCHslideshow

Software\Classes\srffile\DefaultIcon

Software\Classes\srwfile\Shell\NCHslideshow\command

Software\Classes\srwfile\Shell\NCHslideshow

Software\Classes\.doc

Software\Classes\docfile\Shell\NCHconvertdoc\command

Software\Classes\docfile\Shell\NCHconvertdoc

Software\Classes\docfile\DefaultIcon

Software\Classes\docxfile\Shell\NCHconvertdoc\command

Software\Classes\docxfile\Shell\NCHconvertdoc

Software\Classes\htmlfile\Shell\NCHconvertdoc\command

Software\Classes\htmlfile\Shell\NCHconvertdoc

Software\Classes\odtfile\Shell\NCHconvertdoc\command

Software\Classes\odtfile\Shell\NCHconvertdoc

Software\Classes\.pdf

Software\Classes\pdffile\Shell\NCHconvertdoc\command

Software\Classes\pdffile\Shell\NCHconvertdoc

Software\Classes\pdffile\Shell

Software\Classes\rtffile\Shell\NCHconvertdoc\command

Software\Classes\rtffile\Shell\NCHconvertdoc

Software\Classes\.wp

Software\Classes\wpfile\Shell\NCHconvertdoc\command

Software\Classes\wpfile\Shell\NCHconvertdoc

Software\Classes\wpfile\DefaultIcon

Software\Classes\.wpd

Software\Classes\wpdfile\Shell\NCHconvertdoc\command

Software\Classes\wpdfile\Shell\NCHconvertdoc

Software\Classes\wpdfile\DefaultIcon

Software\Classes\.wps

Software\Classes\wpsfile\Shell\NCHconvertdoc\command

Software\Classes\wpsfile\Shell\NCHconvertdoc

Software\Classes\wpsfile\DefaultIcon

Software\Classes\.7z

Software\Classes\7zfile\Shell\NCHextract\command

Software\Classes\7zfile\Shell\NCHextract

Software\Classes\7zfile\DefaultIcon

Software\Classes\.bz2

Software\Classes\bz2file\Shell\NCHextract\command

Software\Classes\bz2file\Shell\NCHextract

Software\Classes\bz2file\DefaultIcon

Software\Classes\CABFolder\Shell\NCHextract\command

Software\Classes\CABFolder\Shell\NCHextract

Software\Classes\.gz

Software\Classes\gzfile\Shell\NCHextract\command

Software\Classes\gzfile\Shell\NCHextract

Software\Classes\gzfile\DefaultIcon

Software\Classes\Windows.IsoFile\Shell\NCHextract\command

Software\Classes\Windows.IsoFile\Shell\NCHextract

Software\Classes\.rar

Software\Classes\rarfile\Shell\NCHextract\command

Software\Classes\rarfile\Shell\NCHextract

Software\Classes\rarfile\DefaultIcon

Software\Classes\.tar

Software\Classes\tarfile\Shell\NCHextract\command

Software\Classes\tarfile\Shell\NCHextract

Software\Classes\tarfile\DefaultIcon

Software\Classes\.tar.gz

Software\Classes\tar.gzfile\Shell\NCHextract\command

Software\Classes\tar.gzfile\Shell\NCHextract

Software\Classes\tar.gzfile\DefaultIcon

Software\Classes\.tgz

Software\Classes\tgzfile\Shell\NCHextract\command

Software\Classes\tgzfile\Shell\NCHextract

Software\Classes\tgzfile\DefaultIcon

Software\Classes\Windows.IsoFile\Shell\NCHburn\command

Software\Classes\Windows.IsoFile\Shell\NCHburn

Software\NCH Software\Debut\Software

Software\Epic Privacy Browser\Update\network

secure

SOFTWARE\Samsung\PrintingAlert

Software\Microsoft\Windows\CurrentVersion

SOFTWARE\KYE\NetScroll\CurrentVersion\Settings

Software\Microsoft\Windows\CurrentVersion\App Paths\BackgroundSwitcher.exe

Software\Microsoft\Windows\CurrentVersion\Uninstall\{DD3DAD13-289E-440E-A5D3-3EFB25305018}_is1

SOFTWARE\Dell Computer Corporation\QuickSet\ALS

31BD6AEF73031C5A49338E7A06040DD815EF7512

D3FBFAA8A67FC9A2EADBF86AEB5D07A9D6AF322E

B5DCF1C58E86DBED2EA2D217A5C28D11FD9254F0

57C5CEBB53FBF181E0B13977AF864F1C13F11AA9

4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5

Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted

Software\Atrativa\1.0\Preferences

Software\Zylom\1.0\Preferences

Software\GameHouse\2.0\Preferences

coverts.trotline.1

coverts.trotline

{4b70b803-0cef-4b9b-9255-a9728811bac5}

SOFTWARE\Microsoft\Office\Common

SOFTWARE\Wow6432Node\Microsoft\Office\Common

Software\Microsoft\Office\15.0\Registration\WIN7-PC

Software\AVAST Software\TestSetup

SYSTEM\CurrentControlSet\Services\avastTestService

Software\AVAST Software\Avast

Software\Brasfoot2015

{91814EB1-B5F0-11D2-80B9-00104B1F6CEA}

{AA7E2068-CB55-11D2-8094-00104B1F9838}

{AA7E2066-CB55-11D2-8094-00104B1F9838}

{CC096170-E2CB-11D2-80C8-00104B1F6CEA}

{8C3C1B11-E59D-11D2-B40B-00A024B9DDDD}

{8C3C1B13-E59D-11D2-B40B-00A024B9DDDD}

{8C3C1B12-E59D-11D2-B40B-00A024B9DDDD}

{8C3C1B10-E59D-11D2-B40B-00A024B9DDDD}

{8C3C1B16-E59D-11D2-B40B-00A024B9DDDD}

{8C3C1B15-E59D-11D2-B40B-00A024B9DDDD}

{2583251F-0A04-11D3-886B-00C04F72F303}

{AA7E2065-CB55-11D2-8094-00104B1F9838}

{BE6115A1-7DE5-48DC-AD2A-25060E00FCE2}

{6B15A454-9067-4878-B10E-B9DFFE03049D}

{91814EBF-B5F0-11D2-80B9-00104B1F6CEA}

{44D61997-B7D4-11D2-80BA-00104B1F6CEA}

{91814EC1-B5F0-11D2-80B9-00104B1F6CEA}

{91814EC5-B5F0-11D2-80B9-00104B1F6CEA}

{91814EC3-B5F0-11D2-80B9-00104B1F6CEA}

{AA7E2061-CB55-11D2-8094-00104B1F9838}

{AA7E2060-CB55-11D2-8094-00104B1F9838}

{DED5FEEC-225A-11D3-88AA-00C04F72F303}

{AA7E2069-CB55-11D2-8094-00104B1F9838}

{D4FF39BB-1A05-11D3-8896-00C04F72F303}

{D4FF39B9-1A05-11D3-8896-00C04F72F303}

{AF57A6F0-4101-11D3-88F6-00C04F72F303}

{AF57A6F1-4101-11D3-88F6-00C04F72F303}

{761C8359-55AF-4E7B-9C83-C1A927E0F617}

{9CFCFE67-0BB8-43E0-8425-378D0A02ACE4}

{3EE77D8B-40C1-4A2A-9B77-421907F02058}

{AA7E2084-CB55-11D2-8094-00104B1F9838}

{AA7E2062-CB55-11D2-8094-00104B1F9838}

{1F9922A2-F026-11D2-8822-00C04F72F303}

{251753FA-FB3B-11D2-8842-00C04F72F303}

{7D795704-435D-11D3-88FF-00C04F72F303}

{8415DDF9-1C1D-11D3-889D-00C04F72F303}

{8415DE38-1C1D-11D3-889D-00C04F72F303}

{348440B0-C79A-11D3-B28B-00C04F59FBE9}

{AA7E2067-CB55-11D2-8094-00104B1F9838}

{E1B9357F-24B9-11D3-88B2-00C04F72F303}

{DAB9BF17-267D-11D3-88B6-00C04F72F303}

{54DADAB3-28A6-11D3-88BA-00C04F72F303}

{54DADAB2-28A6-11D3-88BA-00C04F72F303}

{0BA4BA22-2EF0-11D3-88C8-00C04F72F303}

{39040274-3D36-11D3-88EE-00C04F72F303}

{7BB118F1-6D5B-470E-82D0-AFB042724560}

{65D37452-0EBB-11D3-887B-00C04F72F303}

SOFTWARE\Perfect Uninstaller

Software\ROCCAT\Savu

SOFTWARE\AdwCleaner

Software\Microsoft\RFC1156Agent\CurrentVersion\Parameters

{11AC3232-E7D7-49CD-ABFE-501700100B3A}

IntelCpHeciSvc.EXE

IntelCpHeciSvc.CphsSession.1

IntelCpHeciSvc.CphsSession

{C41B1461-3F8C-4666-B512-6DF24DE566D1}

Software\Microsoft\Office\15.0\ClickToRun

Software\Microsoft\Office\15.0\ClickToRun\scenario

Software\Microsoft\Office\15.0\ClickToRun\propertyBag

Software\DownloadManager\

Software\DownloadManager\MCN

Software\DownloadManager\IDMBI

IEXPLORE

Firefox

OPERA

chrome

Safari

NETSCP

Mozilla

SpecialKeys

strTemp

CLSID\{1CBDCD5A-18EE-4CCA-9AEA-93D5D27E310B}

NPKFXX.npkfxxCtrl.1

CLSID\{2EC9D04D-22E2-4587-9FFE-CD1DE2905977}

NPKFXEXT.npkfxextCtrl.1

SoftWare\Microsoft\Windows\CurrentVersion\Uninstall\npkfx

Software\MozillaPlugins\@nprotect.com/keycrypt

Software\Microsoft\Tracing

Software\Microsoft\Tracing\sample_RASAPI32

SOFTWARE\AJ A Mouse

Software\MadaSoft

Software\MadaSoft\PC-Info DesktopWidget

Software\\{49786D7E-D41C-414F-959C-0D7BDB95F69F}

SYSTEM\Setup\MoSetup

Software\DropboxUpdate\Update\network

SOFTWARE\JavaSoft\Java Update\Policy\jucheck

CLSID\{3643C661-18D4-4B82-8AF8-53742FBEC4EF}

CLSID\{A64C68BB-8F33-4F4B-BAA8-07D6319D30B4}

CLSID\{C7C94802-F60D-4070-B702-0ACA1BF538A9}

CLSID\{EB1520B4-0182-433E-A6CA-99A7A21C6EDF}

CLSID\{CB4EC897-07F7-4ECD-A15E-BBBE23A46EFF}

CLSID\{C2D5BDCE-4629-4542-AE9F-19CBDF074D3E}

hottest.currans.1

hottest.currans

{f0527021-96a9-4b33-b3da-28850721d7cd}

Software\Samsung

Software\Samsung\Samsung_MonSetup

Software\Samsung\Samsung_MonSetup\1.00.0000

Software\Samsung\Samsung_MonSetup\1.00.0000\

.DEFAULT\SOFTWARE\Acpana\Backup

Software\Microsoft\Windows Live\QoS

Software\Microsoft\SQMClient

Software\Microsoft\Windows Live\Common

Software\Microsoft\Windows Live\Installer\BITS

Software\Microsoft\Windows\CurrentVersion\Uninstall\Usbfix

Software\Microsoft\Windows\CurrentVersion\Uninstall\UsbFix

SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce

Software\Microsoft\Windows Script Host\Settings

SOFTWARE\MetaQuotes Software

Software\Microsoft\Windows\CurrentVersion\App Paths\FreeHotspotRouter.exe

Software\Microsoft\Windows\CurrentVersion\Uninstall\FreeHotspotRouter

Software\Essentware\Installer

Software\Essentware\PCKeeper

Software\Microsoft\Office\Common

Software\Microsoft\Office\16.0\Common\ClientTelemetry\RulesMetadata

Software\Microsoft\Office\16.0\Registration\WIN7-PC

Software\Microsoft\Office\ClickToRun\Configuration

RulesLastModified

RulesMetadata\sample

sample\ULSMonitor

Software\Microsoft\Windows\CurrentVersion\Setup\AppLogLevels

ParetoLogic

FileCure

System\CurrentControlSet\Services\Eventlog\Application\VSSetup

Software\Mozilla\Firefox\TaskBarIDs

Software\ComodoGroup\CSB\Link

Software\Blizzard Entertainment\Blizzard Error

Applications\sample

SOFTWARE\LiveUpdate360

SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections

Software\Genieo

Software\Cheat Engine\Window Positions

Software\pdfMachine\

Software\WinRAR\General

Software\WinRAR\Interface\Themes

Software\WinRAR\Setup\.rar

Software\WinRAR\Setup\.zip

Software\WinRAR\Setup\.cab

Software\WinRAR\Setup\.arj

Software\WinRAR\Setup\.lzh

Software\WinRAR\Setup\.ace

Software\WinRAR\Setup\.7z

Software\WinRAR\Setup\.tar

Software\WinRAR\Setup\.gz

Software\WinRAR\Setup\.uue

Software\WinRAR\Setup\.bz2

Software\WinRAR\Setup\.jar

Software\WinRAR\Setup\.iso

Software\WinRAR\Setup\.z

Software\WinRAR\Setup\Links

Software\WinRAR\Setup

Software\Microsoft\Windows\CurrentVersion\App Paths\WinRAR.exe

WinRAR\shellex\ContextMenuHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}

WinRAR\shellex\PropertySheetHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}

WinRAR.ZIP\shellex\ContextMenuHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}

WinRAR.ZIP\shellex\PropertySheetHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}

exefile\shellex\PropertySheetHandlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}

WinRAR\shellex\DropHandler

WinRAR.ZIP\shellex\DropHandler

*\shellex\ContextMenuHandlers\WinRAR32

Folder\shellex\ContextMenuHandlers\WinRAR32

Folder\shellex\DragDropHandlers\WinRAR32

Drive\shellex\DragDropHandlers\WinRAR32

Directory\shellex\ContextMenuHandlers\WinRAR32

Directory\shellex\DragDropHandlers\WinRAR32

Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

WinRAR\shellex\ContextMenuHandlers\{B41DB860-64E4-11D2-9906-E49FADC173CA}

WinRAR\shellex\PropertySheetHandlers\{B41DB860-64E4-11D2-9906-E49FADC173CA}

WinRAR.ZIP\shellex\ContextMenuHandlers\{B41DB860-64E4-11D2-9906-E49FADC173CA}

WinRAR.ZIP\shellex\PropertySheetHandlers\{B41DB860-64E4-11D2-9906-E49FADC173CA}

exefile\shellex\PropertySheetHandlers\{B41DB860-64E4-11D2-9906-E49FADC173CA}

*\shellex\ContextMenuHandlers\WinRAR

Folder\shellex\ContextMenuHandlers\WinRAR

Folder\shellex\DragDropHandlers\WinRAR

Drive\shellex\DragDropHandlers\WinRAR

Directory\shellex\ContextMenuHandlers\WinRAR

Directory\shellex\DragDropHandlers\WinRAR

Software\RegisteredApplications

Software\WinRAR\Capabilities

Software\WinRAR\Capabilities\FileAssociations

WinRAR

WinRAR\shell\open\command

WinRAR\DefaultIcon

WinRAR.ZIP

WinRAR.ZIP\shell\open\command

WinRAR.ZIP\DefaultIcon

.rev

WinRAR.REV

WinRAR.REV\shell\open\command

WinRAR.REV\DefaultIcon

Software\kaola\service

Gabest

Media Player Classic

Settings

Favorites

Filters\0000

Settings\PnSPresets

Commands2

FileFormats

Internal Filters

Shaders

Capture

DVB configuration

Software\Gabest\Media Player Classic

ToolBars\Subresync

ToolBars\Subresync\State-SCBar-823

ToolBars\Playlist

ToolBars\Playlist\State-SCBar-824

Recent File List

ToolBars\Edit List Editor

ToolBars\Edit List Editor\State-SCBar-846

{33D9A760-90C8-11D0-BD43-00A0C911CE86}

Software\Microsoft\ActiveMovie\devenum\{33D9A760-90C8-11D0-BD43-00A0C911CE86}\mrle

Software\Microsoft\ActiveMovie\devenum\{33D9A760-90C8-11D0-BD43-00A0C911CE86}\msvc

Software\Microsoft\ActiveMovie\devenum\{33D9A760-90C8-11D0-BD43-00A0C911CE86}\uyvy

Software\Microsoft\ActiveMovie\devenum\{33D9A760-90C8-11D0-BD43-00A0C911CE86}\yuy2

Software\Microsoft\ActiveMovie\devenum\{33D9A760-90C8-11D0-BD43-00A0C911CE86}\yvyu

Software\Microsoft\ActiveMovie\devenum\{33D9A760-90C8-11D0-BD43-00A0C911CE86}\iyuv

Software\Microsoft\ActiveMovie\devenum\{33D9A760-90C8-11D0-BD43-00A0C911CE86}\i420

Software\Microsoft\ActiveMovie\devenum\{33D9A760-90C8-11D0-BD43-00A0C911CE86}\yvu9

Software\Microsoft\ActiveMovie\devenum\{33D9A760-90C8-11D0-BD43-00A0C911CE86}\cvid

Capture\{33D9A760-90C8-11D0-BD43-00A0C911CE86}

Software\Microsoft\Multimedia\Audio Compression Manager\

MSACM

Priority v4.00

{33D9A761-90C8-11D0-BD43-00A0C911CE86}

Software\Microsoft\ActiveMovie\devenum\{33D9A761-90C8-11D0-BD43-00A0C911CE86}\1PCM

Software\Microsoft\ActiveMovie\devenum\{33D9A761-90C8-11D0-BD43-00A0C911CE86}\17IMA ADPCM

Software\Microsoft\ActiveMovie\devenum\{33D9A761-90C8-11D0-BD43-00A0C911CE86}\6CCITT A-Law

Software\Microsoft\ActiveMovie\devenum\{33D9A761-90C8-11D0-BD43-00A0C911CE86}\7CCITT u-Law

Software\Microsoft\ActiveMovie\devenum\{33D9A761-90C8-11D0-BD43-00A0C911CE86}\49GSM 6.10

Software\Microsoft\ActiveMovie\devenum\{33D9A761-90C8-11D0-BD43-00A0C911CE86}\2Microsoft ADPCM

Capture\{33D9A761-90C8-11D0-BD43-00A0C911CE86}

ToolBars\Capture Settings

ToolBars\Capture Settings\State-SCBar-825

ToolBars\Navigation bar

ToolBars\Navigation bar\State-SCBar-33415

ToolBars\Shader Editor

ToolBars\Shader Editor\State-SCBar-826

Software\Developer Express\PrintingSystem\CustomColors

SOFTWARE\Baidu Security\PC Faster

Software\Microsoft\DirectX

SOFTWARE\System Healer

Software\Microsoft\Windows\CurrentVersion\Uninstall\SystemHealer

Microsoft

Windows

CurrentVersion

Run

Software\Magicbit\UmmyVideoDownloader

Software\Piriform\CCleaner

SYSTEM\CurrentControlSet\Services\VSS\Diag

SystemRestore

software\WhiteCanyon\SC4\Settings

Software\wifiman_supplicant

Software\wifiman_supplicant\configs\default

Software\wifiman_supplicant\configs\default\networks

Software\wifiman_supplicant\interfaces

Environment

SOFTWARE\CrSSL

C:\CdiResource\dialog\Graph.html

C:\Windows\Fonts\staticcache.dat

C:\Windows\system32\rsaenh.dll

wdmaud.drv

C:\\hpqFlash.log

C:\Users\win7\AppData\Local\Temp\FlashDLL.dll

C:\sample

C:\Users\win7\AppData\Local\Temp\is-80VO8.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-80VO8.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-80VO8.tmp\isxdl.dll

1.217.500.0_TO_1.217.565.0_MPASDLTA.VDM._P

1.217.500.0_TO_1.217.565.0_MPAVDLTA.VDM._P

C:\Users\win7\AppData\Local\Temp\is-PFBCQ.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-PFBCQ.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-PFBCQ.tmp\idp.dll

C:\Users\win7\AppData\Local\Temp\is-PFBCQ.tmp\innocallback.dll

C:\Users\win7\AppData\Local\Temp\is-PFBCQ.tmp\isslideshow.dll

C:\Users\win7\AppData\Local\Temp\is-PFBCQ.tmp\ISDone.dll

C:\

C:\Windows

C:\Users\win7\AppData\Local\Microsoft\Windows\Caches\cversions.1.db

C:\Users\win7\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000008.db

C:\Users\win7\AppData\Local\Temp\nsrF920.tmp

C:\Users\win7\AppData\Local\Temp\nsxF941.tmp\ioSpecial.ini

C:\Users\win7\AppData\Local\Temp\nsxF941.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nsxF941.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nsxF941.tmp\System.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\104[1]

C:\WINDOWS\FONTS\TIMES.TTF

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\138[1]

C:\WINDOWS\FONTS\ARIAL.TTF

\\.\PhysicalDrive0

\\.\Scsi0:

\\.\Scsi1:

\\.\Scsi2:

\\.\Scsi3:

\\.\Scsi4:

\\.\Scsi5:

\\.\Scsi6:

\\.\Scsi7:

\\.\Scsi8:

\\.\Scsi9:

\\.\Scsi10:

\\.\Scsi11:

\\.\Scsi12:

\\.\Scsi13:

\\.\Scsi14:

\\.\Scsi15:

\\.\Nsi

C:\Users\win7\AppData\Local\GDIPFONTCACHEV1.DAT

C:\WINDOWS\FONTS\SEGOEUI.TTF

C:\WINDOWS\FONTS\SEGOEUIB.TTF

C:\WINDOWS\FONTS\SEGOEUII.TTF

C:\WINDOWS\FONTS\SEGOEUIZ.TTF

C:\Windows\syswow64\kernel32.dll

C:\Windows\syswow64\KERNELBASE.dll

C:\Windows\SysWOW64\ntdll.dll

C:\Users\win7\AppData\Local\Temp\wrapped.sandboxed\cis_temp_9fd30.exe

C:\Users\win7\AppData\Local\Temp\wrapped.sandboxed\cis_temp_a055e.exe

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\win7\AppData\Local\Temp\Cab15C9.tmp

C:\Users\win7\AppData\Local\Temp\Tar15CA.tmp

C:\Users\win7\AppData\Local\Temp\wrapped.sandboxed\D05FA426B8066855DBA5FDB116C58080.dll

C:\Users\win7\AppData\Local\Temp\wrapped.sandboxed\F06FA53C5EE2822C92F22ABA8D8C6867.dll

\\.\PIPE\lsarpc

C:\setup.eif

C:\_cdres\setup.eif

C:\Users\win7\AppData\Local\Temp\VSD8145.tmp\install.log

C:\Users

C:\Users\win7

C:\Users\win7\Videos\desktop.ini

C:\Users\win7\Contacts\desktop.ini

C:\Users\win7\Favorites\desktop.ini

C:\Users\win7\Downloads\desktop.ini

C:\Users\win7\Links\desktop.ini

C:\Users\win7\Saved Games\desktop.ini

\??\C:\Windows\System32\shdocvw.dll

C:\Users\win7\AppData\Local\Temp\lui7CE0.tmp\setup.exe

C:\sample.config

C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\machine.config

C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\security.config

C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\security.config.cch

C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\enterprisesec.config

C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\enterprisesec.config.cch

C:\Users\win7\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config

C:\Users\win7\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch

C:\Windows\assembly\NativeImages_v2.0.50727_32\index1c2.dat

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_E9915110418DBDEA47BB3BFCDB24CFF1

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8DFDF057024880D7A081AFBF6D26B92F

C:\Users\win7\AppData\Roaming\CrystalIdea Software\Uninstall Tool\preferences.xml

C:\languages\English.xml

C:\Users\desktop.ini

C:\Users\win7\AppData

C:\Users\win7\AppData\Roaming

C:\Users\win7\AppData\Roaming\Microsoft\desktop.ini

C:\Users\win7\AppData\Roaming\Microsoft

C:\Users\win7\AppData\Roaming\Microsoft\Windows

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu

C:\ProgramData

C:\ProgramData\Microsoft\desktop.ini

C:\ProgramData\Microsoft

C:\ProgramData\Microsoft\Windows

C:\ProgramData\Microsoft\Windows\Start Menu

C:\Users\Public

C:\Users\win7\AppData\Roaming\Microsoft\Internet Explorer

C:\Users\win7\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch

\\.\PIPE\srvsvc

C:\Users\win7\AppData\Roaming\CrystalIdea Software\Uninstall Tool\CachedData.dat

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\utool[1].txt

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\378B079587A9184B2E2AB859CB263F40_524AD1B9B08D3C6450727265AE77B7D2

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\378B079587A9184B2E2AB859CB263F40_948293FAEF496DD8F043F516682193C1

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C987C966D19B79B9D9F35B962FCC8FA

C:\Users\win7\AppData\Local

C:\Users\win7\AppData\Local\Temp

C:\Users\win7\Searches\desktop.ini

C:\ProgramData\d8986107-dff3-4565-a17b-637d7c3968d3\temp

C:\Users\win7\AppData\Local\Temp\yandex_browser_installer.log

C:\Users\win7\AppData\Local\Yandex

C:\Users\win7\AppData\Local\Yandex\YandexBrowser

C:\Users\win7\AppData\Local\Yandex\YandexBrowser\Temp

C:\Users\win7\AppData\Local\Yandex\YandexBrowser\Temp\source2072_8957

\??\C:\Windows\system32\ntshrui.dll

\\.\TRW

\\.\SICE

\\.\NTICE

\\.\FILEVXD

\\.\FILEMON

\\.\REGVXD

\\.\REGMON

\??\C:\Windows\system32\EhStorShell.dll

Splash.cab

setup.exe

splash_install.msi

vcredist_x86.exe

C:\Users\win7\AppData\Local\Temp\Mirillis\setup.exe

1.217.521.0_TO_1.217.576.0_MPASDLTA.VDM._P

1.217.521.0_TO_1.217.576.0_MPAVDLTA.VDM._P

LocalConfig.xml

C:\Windows\system32\LocalConfig.xml

c:\sample.exe

c:\windows\system32\explorer.exe

C:\Users\win7\AppData\Local\Temp\{7C029707-4E9A-470A-AADA-703787A937A1}\Disk1\data1.cab

C:\Users\win7\AppData\Local\Temp\{7C029707-4E9A-470A-AADA-703787A937A1}\Disk1\data1.hdr

C:\Users\win7\AppData\Local\Temp\{7C029707-4E9A-470A-AADA-703787A937A1}\Disk1\ISSetup.dll

C:\Users\win7\AppData\Local\Temp\{7C029707-4E9A-470A-AADA-703787A937A1}\Disk1\layout.bin

C:\Users\win7\AppData\Local\Temp\{7C029707-4E9A-470A-AADA-703787A937A1}\Disk1\setup.exe

C:\Users\win7\AppData\Local\Temp\{7C029707-4E9A-470A-AADA-703787A937A1}\Disk1\setup.ini

C:\Users\win7\AppData\Local\Temp\{7C029707-4E9A-470A-AADA-703787A937A1}\Disk1\setup.inx

C:\Users\win7\AppData\Local\Temp\{7C029707-4E9A-470A-AADA-703787A937A1}\Disk1\_Setup.dll

C:\Users\win7\AppData\Local\Temp\{7C029707-4E9A-470A-AADA-703787A937A1}\x

C:\Users\win7\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3979321414-2393373014-2172761192-1000\e8a79749e4c2d3fdfee1a489f20d567f_c4b6765a-c53d-4b48-b576-0e1db4e9f3bc

C:\Users\win7\AppData\Local\Temp\{7C029707-4E9A-470A-AADA-703787A937A1}\setup.ini

C:\Users\win7\AppData\Local\Temp\{7C029707-4E9A-470A-AADA-703787A937A1}\Disk1\setupdir\0009\setup.gif

C:\Users\win7\AppData\Local\Temp\{7C029707-4E9A-470A-AADA-703787A937A1}\Disk1\setup.gif

C:\ProgramData\InstallShield\ISEngine12.0\IsBE.dll

C:\Windows\Fonts\desktop.ini

C:\Users\win7\AppData\Local\Temp\f90b.rra

C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{5722A91F-051C-4190-B442-191B2349EAF4}\setuf93a.rra

C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{5722A91F-051C-4190-B442-191B2349EAF4}\licef978.rra

C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\coref988.rra

C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\dotnf988.rra

C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{5722A91F-051C-4190-B442-191B2349EAF4}\Fontf988.rra

C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{5722A91F-051C-4190-B442-191B2349EAF4}\DIFxf998.rra

C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\ISBEf998.rra

C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{5722A91F-051C-4190-B442-191B2349EAF4}\Strif998.rra

C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{5722A91F-051C-4190-B442-191B2349EAF4}\isrtf9a7.rra

C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{5722A91F-051C-4190-B442-191B2349EAF4}\defaf9b7.rra

C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{5722A91F-051C-4190-B442-191B2349EAF4}\_IsRf9b7.rra

C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{5722A91F-051C-4190-B442-191B2349EAF4}\setup.inx

C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{5722A91F-051C-4190-B442-191B2349EAF4}\ISRT.dll

C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{5722A91F-051C-4190-B442-191B2349EAF4}\_isres.dll

C:\Windows\SysWOW64\stdole2.tlb

C:\ProgramData\Microsoft\Windows\Start Menu\Programs

C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{5722A91F-051C-4190-B442-191B2349EAF4}\StringTable-0009-English.ips

C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\corecomp.ini

\??\C:\Users\win7\AppData\Local\Temp\{7C029707-4E9A-470A-AADA-703787A937A1}\Disk1\data1.hdr

C:\Users\win7\AppData\Local\Temp\{DBEA4094-3E7D-4157-A2D5-4A732706A9C8}\{5722A91F-051C-4190-B442-191B2349EAF4}\default.pal

C:\ProgramData\9a4b8b26-f4e0-4529-a5b4-93ec828f7e42\temp

C\aped

MPASDLTA.VDM

MPAVDLTA.VDM

C:\ProgramData\48ed1695-d484-472b-bd42-582714ef1368\temp

\\.\VBoxGuest

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\updt1071[1].htm

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\updt1071[1].htm

Temp\Download\updt1071.txt

.\Arcanum 5x

Arcanum 5x

.\Arcanum 2x

Arcanum 2x

.\http://www.arcanum.gen.tr/karakter/connector.php

http://www.arcanum.gen.tr/karakter/connector.php

C:\Windows\SysWOW64\ieframe.dll

.\unrar.dll

unrar.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\unrar.dll.BBE56E601D118C95F8C5BF2AC34B3E6B5D867A03[1].txt

Temp\Download\unrar.dll.exe

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\connector[1].htm

C:\WINDOWS\FONTS\ARIALBD.TTF

C:\Users\win7\AppData\Local\Microsoft

C:\Users\win7\AppData\Local\Microsoft\Windows

C:\Users\win7\AppData\Local\Microsoft\Windows\History\desktop.ini

C:\Users\win7\AppData\Local\Temp\nsy4A91.tmp

C:\Users\win7\AppData\Local\Temp\nsi4AD0.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\~nsu.tmp\Au_.exe

C:\Users\win7\AppData\Local\Temp\nsmBC31.tmp

C:\Users\win7\AppData\Local\Temp\is-P334T.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-P334T.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-P334T.tmp\_isetup\_shfoldr.dll

\\.\PhysicalDrive1

\\.\PhysicalDrive2

\\.\PhysicalDrive3

\\.\PhysicalDrive4

C:\Users\win7\AppData\Local\Temp\is-09NMN.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\is-TUK65.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-TUK65.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-TUK65.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-NMVG6.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-NMVG6.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-NMVG6.tmp\_isetup\_shfoldr.dll

C:\Users\win7\Favorites

EbotWordHisList.csv

EbotUrlHisList.csv

C:\WINDOWS\FONTS\MARLETT.TTF

C:\Windows\system32\l_intl.nls

C:\Windows\assembly\pubpol1.dat

C:\Windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll

C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp

C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp

C:\ProgramData\NortonInstaller\Logs\2016-04-05-04h40m53s\NortonInstall-2016-04-05-04h40m53s.log

C:\Log\HttpDownloader.log

C:\\ArcInstall_STO_20151009a.exe.idx

C:\\ArcInstall_STO_20151009a.exe

C:\Users\win7\AppData\Local\Temp\is-C5KLU.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-C5KLU.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-VSQT4.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-VSQT4.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nseFE0B.tmp

C:\Users\win7\AppData\Local\Temp\ILIST-0BB87E3A.tmp

C:\Users\win7\AppData\Local\Temp\ICACHE-2588E327.tmp

C:\Logs\log.txt

C:\WinClonLang.ini

\\.\C:

\\?\Volume{babe9b10-0f98-11e5-b301-806e6f6e6963}

C:/writest

C:/gzdoom.ini

c:\7aebca794e4ea64fec25b3\MpMiniSigStub.exe

c:\7aebca794e4ea64fec25b3\1.217.23.0_to_1.217.613.0_mpasdlta.vdm._p

c:\7aebca794e4ea64fec25b3\$shtdwn$.req

C:\Users\win7\AppData\Local\Temp\is-5N2K7.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-5N2K7.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-5N2K7.tmp\bassmusic.dll

C:\Users\win7\AppData\Local\Temp\is-VIMSI.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-VIMSI.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-VIMSI.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-VIMSI.tmp\isgsg.dll

C:\sample:typelib

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\index[1].htm

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\amipb[1].js

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\main[1].css

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\footer_img[1].png

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\cancel1[1].gif

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\cancel[1].gif

C:\Users\win7\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\skip[1].gif

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\decline[1].gif

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\next[1].gif

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\accept[1].gif

C:\Windows\SysWOW64\Dxtmsft.dll

C:\Windows\SysWOW64\Dxtrans.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\finish[1].gif

C:\Users\win7\AppData\Local\Temp\sample

C:\Users\win7\Desktop\Continue installation .lnk

C:\Users\win7\AppData\Local\Temp\sample:Zone.Identifier

C:\WINDOWS\FONTS\VERDANA.TTF

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\dm_left_image[1].png

1.217.539.0_TO_1.217.613.0_MPASDLTA.VDM._P

1.217.539.0_TO_1.217.613.0_MPAVDLTA.VDM._P

C:\Users\win7\AppData\Local\Temp\_MSI5166._IS

0x0000.ini

C:\Users\win7\AppData\Local\Temp\_isA856.tmp

C:\Users\win7\AppData\Local\Temp\{7C02B65B-A00A-4712-8ABF-3437AF472FA1}\Setup.INI

C:\Users\win7\AppData\Local\Temp\{7C02B65B-A00A-4712-8ABF-3437AF472FA1}\_ISMSIDEL.INI

C:\Users\win7\AppData\Local\Temp\{7C02B65B-A00A-4712-8ABF-3437AF472FA1}\0x0000.ini

C:\Users\win7\AppData\Local\Temp\_isA8E4.tmp

C:\Users\win7\AppData\Local\Temp\{7C02B65B-A00A-4712-8ABF-3437AF472FA1}\0x0409.ini

C:\Users\win7\AppData\Local\Temp\_isA963.tmp

C:\Users\win7\AppData\Local\Temp\~A962.tmp

C:\Users\win7\AppData\Local\Temp\_isA984.tmp

C:\Users\win7\AppData\Local\Temp\~A983.tmp

C:\Users\win7\AppData\Local\Temp\_isAA50.tmp

C:\Users\win7\AppData\Local\Temp\{7C02B65B-A00A-4712-8ABF-3437AF472FA1}\VanDyke Software SecureCRT 7.1.msi

C:\Users\win7\AppData\Local\Temp\_isB927.tmp

C:\Users\win7\AppData\Local\Temp\~B926.tmp

C:\Users\win7\AppData\Local\Downloaded Installations\{6703B89D-203D-4244-9507-3DD6716BAA46}\VanDyke Software SecureCRT 7.1.msi

C:\Users\win7\AppData\Local\Temp\issB966.tmp

C:\Users\win7\AppData\Local\Temp\_isB967.tmp

C:\Users\win7\AppData\Local\Temp\{6A4413B4-BC45-4AF9-9873-1B7CCD192FBD}\IsConfig.ini

C:\Users\win7\AppData\Local\Temp\_isB978.tmp

C:\Users\win7\AppData\Local\Temp\{F308833F-3173-4A8B-9926-457010C4274D}\Setup.inx

C:\Users\win7\AppData\Local\Temp\_isBA06.tmp

C:\Users\win7\AppData\Local\Temp\{F308833F-3173-4A8B-9926-457010C4274D}\ISRT.dll

C:\Users\win7\AppData\Local\Temp\_isBA74.tmp

C:\Users\win7\AppData\Local\Temp\{F308833F-3173-4A8B-9926-457010C4274D}\ISBEWX64.exe

C:\Users\win7\AppData\Local\Temp\_isBAE2.tmp

C:\Users\win7\AppData\Local\Temp\{F308833F-3173-4A8B-9926-457010C4274D}\ISBEWI64.exe

C:\Users\win7\AppData\Local\Temp\_isBB41.tmp

C:\Users\win7\AppData\Local\Temp\{F308833F-3173-4A8B-9926-457010C4274D}\_isres_0x0409.dll

C:\Users\win7\AppData\Local\Temp\_isBB81.tmp

C:\Users\win7\AppData\Local\Temp\{F308833F-3173-4A8B-9926-457010C4274D}\IsConfig.ini

C:\Users\win7\AppData\Local\Temp\_isBBA1.tmp

C:\Users\win7\AppData\Local\Temp\{F308833F-3173-4A8B-9926-457010C4274D}\String1033.txt

C:\Users\win7\AppData\Local\Temp\nsy63F5.tmp

C:\Users\win7\AppData\Local\Temp\nsi6434.tmp\modern-header.bmp

C:\Users\win7\AppData\Local\Temp\nsi6434.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nsi6434.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nsi6434.tmp\System.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NSIS.lnk

C:\Users\win7\Desktop\NSIS.lnk

C:\Users\win7\AppData\Local\Temp\is-F7VI6.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-F7VI6.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-F7VI6.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nswA975.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nswA975.tmp\CityHash.dll

C:\Users\win7\AppData\Local\Temp\GLG1A33.tmp

C:\Users\win7\AppData\Local\Temp\~GLH0000.TMP

C:\Users\win7\AppData\Local\Temp\eLicenserInst\EULAs\\~GLH0001.TMP

C:\Users\win7\AppData\Local\Temp\eLicenserInst\EULAs\\SPANISH.rtf

C:\Users\win7\AppData\Local\Temp\ELICEN~1\EULAs\\SPANISH.rtf

C:\Users\win7\AppData\Local\Temp\eLicenserInst\EULAs\\~GLH0002.TMP

C:\Users\win7\AppData\Local\Temp\eLicenserInst\EULAs\\JAPANESE.rtf

C:\Users\win7\AppData\Local\Temp\ELICEN~1\EULAs\\JAPANESE.rtf

C:\Users\win7\AppData\Local\Temp\eLicenserInst\EULAs\\~GLH0003.TMP

C:\Users\win7\AppData\Local\Temp\eLicenserInst\EULAs\\GERMAN.rtf

C:\Users\win7\AppData\Local\Temp\ELICEN~1\EULAs\\GERMAN.rtf

C:\Users\win7\AppData\Local\Temp\eLicenserInst\EULAs\\~GLH0004.TMP

C:\Users\win7\AppData\Local\Temp\eLicenserInst\EULAs\\FRENCH.rtf

C:\Users\win7\AppData\Local\Temp\ELICEN~1\EULAs\\FRENCH.rtf

C:\Users\win7\AppData\Local\Temp\eLicenserInst\EULAs\\~GLH0005.TMP

C:\Users\win7\AppData\Local\Temp\eLicenserInst\EULAs\\ENGLISH.rtf

C:\Users\win7\AppData\Local\Temp\ELICEN~1\EULAs\\ENGLISH.rtf

C:\Users\win7\AppData\Local\Temp\eLicenserInst\EULAs\\~GLH0006.TMP

C:\Users\win7\AppData\Local\Temp\eLicenserInst\EULAs\\ITALIAN.rtf

C:\Users\win7\AppData\Local\Temp\ELICEN~1\EULAs\\ITALIAN.rtf

C:\Users\win7\AppData\Local\Temp\eLicenserInst\~GLH0007.TMP

C:\Users\win7\AppData\Local\Temp\eLicenserInst\msvcr71.dll

C:\Users\win7\AppData\Local\Temp\ELICEN~1\msvcr71.dll

C:\Users\win7\AppData\Local\Temp\eLicenserInst\~GLH0008.TMP

C:\Users\win7\AppData\Local\Temp\eLicenserInst\eLicenserWISEHelper.exe

C:\Users\win7\AppData\Local\Temp\ELICEN~1\ELICEN~1.EXE

C:\Users\win7\AppData\Local\Temp\eLicenserInst\~GLH0009.TMP

C:\Users\win7\AppData\Local\Temp\eLicenserInst\DotNetCheck.exe

C:\Users\win7\AppData\Local\Temp\ELICEN~1\DOTNET~1.EXE

C:\Users\win7\AppData\Local\Temp\eLicenserInst\InstallerTools\\~GLH000a.TMP

C:\Users\win7\AppData\Local\Temp\eLicenserInst\InstallerTools\\eLicenserWISEHelper.exe

C:\Users\win7\AppData\Local\Temp\ELICEN~1\INSTAL~1\\ELICEN~1.EXE

C:\Users\win7\AppData\Local\Temp\eLicenserInst\InstallerTools\\~GLH000b.TMP

C:\Users\win7\AppData\Local\Temp\eLicenserInst\InstallerTools\\msvcr71.dll

C:\Users\win7\AppData\Local\Temp\ELICEN~1\INSTAL~1\\msvcr71.dll

C:\Users\win7\AppData\Local\Temp\eLicenserInst\InstallerTools\\~GLH000c.TMP

C:\Users\win7\AppData\Local\Temp\eLicenserInst\InstallerTools\\eLicenserWISEHelper_64.exe

C:\Users\win7\AppData\Local\Temp\ELICEN~1\INSTAL~1\\ELICEN~2.EXE

C:\Users\win7\AppData\Local\Temp\eLicenserInst\InstallerTools\\~GLH000d.TMP

C:\Users\win7\AppData\Local\Temp\eLicenserInst\InstallerTools\\DotNetCheck.exe

C:\Users\win7\AppData\Local\Temp\ELICEN~1\INSTAL~1\\DOTNET~1.EXE

C:\Users\win7\AppData\Local\Temp\ELICEN~1\INSTAL~1\ELICEN~1.EXE

C:\Users\win7\AppData\Local\Temp\eLicenserInst\EULAs\ENGLISH.rtf

C:\Users\win7\AppData\Local\Temp\AutoRunPro0\autorun.exe

C:\WBDJA44I.DLL

C:\Setup.INI

C:\0x0000.ini

C:\Users\win7\AppData\Local\Temp\Setup Log 2016-04-05 #001.txt

C:\Users\win7\AppData\Local\Temp\toolbar_log.txt

\\.\avgtp

C:\Users\win7\AppData\Local\Temp\is-A5PDU.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-A5PDU.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nsvB74A.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsvB74A.tmp\CityHash.dll

C:\Windows\Temp\ljp1100inst.log

C:\properties.ini

C:\Windows\system32\ActlBstr.ini

C:\sample.ini

C:\Users\win7\AppData\Roaming\Loonies\Actual Booster\ActlBstr.ini

\??\C:\Windows\SysWOW64\ieframe.dll

C:\Windows\System32

C:\Windows\System32\control.exe

C:\WINDOWS\SYSTEM32\CONTROL.EXE

C:\Users\win7\AppData\Local\Temp\jusched.log

C:/ProgramData/Oracle/Java/java.settings.cfg

install.log

C:\Users\win7\Desktop

C:\Users\Public\Desktop

\\.\VBoxMiniRdrDN

\\.\PIPE\wkssvc

\\.\PIPE\DAV RPC SERVICE

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Network Shortcuts\desktop.ini

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Network Shortcuts

\\.\PIPE\samr

C:\Python27

C:\Users\win7\AppData\Local\Temp\is-TA70S.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-TA70S.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-TA70S.tmp\_isetup\_isdecmp.dll

C:\Users\win7\AppData\Local\Temp\is-TA70S.tmp\VclStylesInno.dll

C:\Users\win7\AppData\Local\Temp\is-TA70S.tmp\ISDone.dll

C:\Users\win7\AppData\Local\Temp\is-TA70S.tmp\BASS.dll

C:\Users\win7\AppData\Local\Temp\is-TA70S.tmp\bp.dll

C:\Users\win7\AppData\Local\Temp\is-TA70S.tmp\ISMD5.dll

C:\Users\win7\AppData\Local\Temp\is-TA70S.tmp\wintb.dll

\\.\SIWVID

C:\Users\win7\AppData\Local\Temp\nsf7772.tmp

C:\Users\win7\AppData\Local\Temp\nsv7783.tmp\LangDLL.dll

C:\Users\win7\AppData\Local\Temp\nsv7783.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsv7783.tmp\ioSpecial.ini

C:\Users\win7\AppData\Local\Temp\nsv7783.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nsv7783.tmp\modern-header.bmp

C:\Users\win7\AppData\Local\Temp\nsv7783.tmp\InstallOptions.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\California Font Manager\California Font Manager.lnk

C:\Users\win7\Desktop\California Font Manager.lnk

C:\Users\win7\Documents\California Fonts\Fonts\chromeye\CHROY___.TTF

C:\Users\win7\Documents\California Fonts\Fonts\collegiate10\Readme.txt

C:\Users\win7\Documents\California Fonts\Fonts\collegiate10\SF Collegiate Italic.ttf

C:\Users\win7\Documents\California Fonts\Fonts\collegiate10\SF Collegiate Sample.jpg

C:\Users\win7\Documents\California Fonts\Fonts\collegiate10\SF Collegiate Solid Bold Italic.ttf

C:\Users\win7\Documents\California Fonts\Fonts\collegiate10\SF Collegiate Solid Bold.ttf

C:\Users\win7\Documents\California Fonts\Fonts\collegiate10\SF Collegiate Solid Italic.ttf

C:\Users\win7\Documents\California Fonts\Fonts\collegiate10\SF Collegiate Solid.ttf

C:\Users\win7\Documents\California Fonts\Fonts\collegiate10\SF Collegiate.ttf

C:\Users\win7\Documents\California Fonts\Fonts\comic\comic.txt

C:\Users\win7\Documents\California Fonts\Fonts\comic\COMIC6.TTF

C:\Users\win7\Documents\California Fonts\Fonts\Cybertron_Metals\Cybertron Metals.TTF

C:\Users\win7\Documents\California Fonts\Fonts\daisy\daisy.ttf

C:\Users\win7\Documents\California Fonts\Fonts\force\force.txt

C:\Users\win7\Documents\California Fonts\Fonts\force\FORCE3.TTF

C:\Users\win7\Documents\California Fonts\Fonts\fragilebombers\FRAGILEB.TTF

C:\Users\win7\Documents\California Fonts\Fonts\fragilebombers\Read_Me.txt

C:\Users\win7\Documents\California Fonts\Fonts\freebooterscript\FREEBSCA.ttf

C:\Users\win7\Documents\California Fonts\Fonts\freebooterscript\FREEBSC_.ttf

C:\Users\win7\Documents\California Fonts\Fonts\humanoid\!pizzadude.txt

C:\Users\win7\Documents\California Fonts\Fonts\humanoid\HUMANOI0.TTF

C:\Users\win7\Documents\California Fonts\Fonts\humanoid\HUMANOID.TTF

C:\Users\win7\Documents\California Fonts\Fonts\hurryup\HURRYUP.TTF

C:\Users\win7\Documents\California Fonts\Fonts\hurryup\Read_Me.txt

C:\Users\win7\Documents\California Fonts\Fonts\hypersonic\!pizzadude.txt

C:\Users\win7\Documents\California Fonts\Fonts\hypersonic\Hypersonic.ttf

C:\Users\win7\Documents\California Fonts\Fonts\knuckled\KNUCKLED.TTF

C:\Users\win7\Documents\California Fonts\Fonts\knuckled\READ_ME.TXT

C:\Users\win7\Documents\California Fonts\Fonts\oakwood\OAKWOOD_.TTF

C:\Users\win7\Documents\California Fonts\Fonts\oakwood\README.TXT

C:\Users\win7\Documents\California Fonts\Fonts\stoneybilly\readme.txt

C:\Users\win7\Documents\California Fonts\Fonts\stoneybilly\STONB___.TTF

C:\Users\win7\Documents\California Fonts\Fonts\twinkle\Twinkle.ttf

C:\Users\win7\Documents\California Fonts\Fonts\walter\WALTER__.TTF

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\California Font Manager\Website.lnk

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\California Font Manager\Uninstall.lnk

C:\Users\win7\AppData\Local\Temp\is-LI4KF.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-LI4KF.tmp\_isetup\_shfoldr.dll

C:\ProgramData\219d5106-5a99-41fd-b942-db6b503b0178\temp

c:\Users\win7\AppData\Local\Temp\CSC4EF5.tmp

C:\Users\win7\AppData\Local\Temp\RES4EF6.tmp

c:\Users\win7\AppData\Local\Temp\yxxztl9y.cmdline

C:\Windows\Microsoft.NET\Framework\v2.0.50727\csc.exe.config

c:\Users\win7\AppData\Local\Temp\yxxztl9y.0.cs

c:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll

c:\Windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll

c:\sample

c:\Users\win7\AppData\Local\Temp\yxxztl9y.dll

C:\WINDOWS\FONTS\TAHOMA.TTF

C:\WINDOWS\FONTS\MSJH.TTF

C:\WINDOWS\FONTS\MSYH.TTF

C:\WINDOWS\FONTS\MALGUN.TTF

C:\WINDOWS\FONTS\MICROSS.TTF

C:\WINDOWS\FONTS\TAHOMABD.TTF

C:\WINDOWS\FONTS\ARIALI.TTF

C:\WINDOWS\FONTS\ARIALBI.TTF

C:\Windows\Microsoft.NET\Framework\v2.0.50727\Config\machine.config

C:\Users\win7\AppData\Local\Temp\yxxztl9y.tmp

C:\Users\win7\AppData\Local\Temp\yxxztl9y.0.cs

C:\Users\win7\AppData\Local\Temp\yxxztl9y.dll

C:\Users\win7\AppData\Local\Temp\yxxztl9y.cmdline

C:\Users\win7\AppData\Local\Temp\yxxztl9y.out

C:\Users\win7\AppData\Local\Temp\yxxztl9y.err

C:\Users\win7\AppData\LocalLow\D2M\Settings.xml

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\7ZB3P1W0.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\RV4OUS9D.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\MG4C5NVS.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\DV7UX8EH.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\LJV2VX45.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\U8VZU304.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\A4HQ5LQT.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\KRVSKFEO.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\H1QRV2ZL.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\178S9VCZ.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\0TPTDR50.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\HDD5460F.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\7JIEZE4I.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\T6X47WH9.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\BN4ZCNYC.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\QF0B2H9C.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\O98Z4CN1.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\6FX9W22Z.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\WNPKXY63.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\0C5BAPV6.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\S759SH6J.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\220X10C1.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\0QDK8JVW.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\E917R8SO.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\L2OMZRFK.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\win7@dll-files[2].txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\win7@youtube[2].txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\win7@google[1].txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\win7@bing[1].txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\win7@serving-sys[1].txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\win7@bs.serving-sys[1].txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\win7@scorecardresearch[2].txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\win7@ssl.bing[2].txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\win7@www.bing[2].txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\win7@bluekai[2].txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\win7@c1.microsoft[2].txt

C:\D2MClient.pdb

C:\Windows\symbols\D2MClient.pdb

C:\Windows\D2MClient.pdb

C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll

C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.pdb

C:\Windows\symbols\dll\System.Windows.Forms.pdb

C:\Windows\dll\System.Windows.Forms.pdb

C:\Windows\System.Windows.Forms.pdb

Logo.bmp

C:\Iron\chrome.exe

C:\Windows\system32\en-US\erofflps.txt

C:\Users\win7\AppData\Local\Temp\WERC392.tmp.WERInternalMetadata.xml

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DB87D2AB058205E5452E4516D5631B

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3151BAC9462B3E2DEE2326609B77DE7E

\\.\LCD

C:\Users\win7\AppData\Local\Temp\is-7QT2S.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-7QT2S.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-7QT2S.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-7QT2S.tmp\OCSetupHlp.dll

C:\Users\win7\AppData\Local\Temp\nsd737A.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsd737A.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nsd737A.tmp\bgintro.bmp

C:\Users\win7\AppData\Local\Temp\nsd737A.tmp\appname.bmp

C:\Users\win7\AppData\Local\Temp\nsd737A.tmp\clock.bmp

C:\Users\win7\AppData\Local\Temp\nsd737A.tmp\particles.bmp

C:\Users\win7\AppData\Local\Temp\nsd737A.tmp\pencil.bmp

C:\Users\win7\AppData\Local\Temp\nsd737A.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nssBF5D.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nssBF5D.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nssBF5D.tmp\bgintro.bmp

C:\Users\win7\AppData\Local\Temp\nssBF5D.tmp\appname.bmp

C:\Users\win7\AppData\Local\Temp\nssBF5D.tmp\clock.bmp

C:\Users\win7\AppData\Local\Temp\nssBF5D.tmp\particles.bmp

C:\Users\win7\AppData\Local\Temp\nssBF5D.tmp\pencil.bmp

C:\Users\win7\AppData\Local\Temp\nssBF5D.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nssBF5D.tmp\InetBgDL.dll

C:\Users\win7\AppData\Local\Temp\nssBF5D.tmp\download.exe

w "C:\Users\win7\AppData\Local\Temp\nssBF5D.tmp\download.exe"

C:\Users\win7\AppData\Local\Temp\nssBF5D.tmp\CertCheck.dll

C:\Users\win7\AppData\Local\Temp\CabE0B3.tmp

C:\Users\win7\AppData\Local\Temp\TarE0B4.tmp

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\42B9A473B4DAF01285A36B4D3C7B1662_AB5EAAA21DF673505B87D680AC76B6E1

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\782D7E2BFB036A849A99FFA65C652D39

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\616AD1AB067CFD351D6C0EF6F3E12F40

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\66AE3BFDF94A732B262342AD2154B86E_AF71C1BB2E04981CC28D0E1D27405C45

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\0E506CEBBC8B162CFB2D72DB4891DCAE

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F4EA555947766F67C3BB52DEDFD509C5

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162

\\.\IBMPMDRV

C:\Users\win7\AppData\Local\Temp\i4j_nlog_2

C:\Users\win7\AppData\Local\Temp\e4j99D3.tmp_dir1459867574\i4jruntime.jar.pack

C:\Users\win7\AppData\Local\Temp\e4j99D3.tmp_dir1459867574\i4jparams.conf

C:\Users\win7\AppData\Local\Temp\e4j99D3.tmp_dir1459867574\i4j_extf_0_1y7nkmy.utf8

C:\Users\win7\AppData\Local\Temp\e4j99D3.tmp_dir1459867574\installer.ico

C:\Users\win7\AppData\Local\Temp\e4j99D3.tmp_dir1459867574\MessagesDefault

C:\Users\win7\AppData\Local\Temp\e4j99D3.tmp_dir1459867574\platform.zip

C:\Users\win7\AppData\Local\Temp\e4j99D3.tmp_dir1459867574\stats.properties

C:\Users\win7\AppData\Local\Temp\e4j99D3.tmp_dir1459867574\user.jar.pack

C:\\.install4j\pref_jre.cfg

C:\\.install4j\inst_jre.cfg

C:\install.cfg

C:\Windows\Temp\IntelTVWizard.log

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Libraries

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Libraries\Documents.library-ms

C:\Users\win7\Documents

C:\Users\win7\Documents\My Music\desktop.ini

C:\Users\win7\Documents\My Pictures\desktop.ini

C:\Users\win7\Documents\My Videos\desktop.ini

C:\Users\Public\Documents

C:\Users\Public\Documents\My Music\desktop.ini

C:\Users\Public\Documents\My Pictures\desktop.ini

C:\Users\Public\Documents\My Videos\desktop.ini

C:\Users\win7\Links

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Libraries\Music.library-ms

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Libraries\Videos.library-ms

C:\Users\Public\Videos\desktop.ini

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Libraries\Pictures.library-ms

C:\Users\win7\Links\Desktop.lnk

C:\Users\win7\Links\Downloads.lnk

C:\Users\win7\Links\RecentPlaces.lnk

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Recent\desktop.ini

C:\Users\win7\Documents\INSTALL.LOG

C:\InstallLog.ixml

C:\Windows\System32\schtasks.exe

C:\debug.log

C:\Users\win7\AppData\Local\Google\Chrome Cleanup Tool\chrome_cleanup_tool.log

C:\Users\win7\AppData\Roaming\Foxit Software\Foxit Cloud\svclog.txt

C:\Users\win7\AppData\Local\Temp\nstA488.tmp\LangDLL.dll

C:\Users\win7\AppData\Local\Temp\nstA488.tmp\ioSpecial.ini

C:\Users\win7\AppData\Local\Temp\nstA488.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nstA488.tmp\modern-header.bmp

C:\Users\win7\AppData\Local\Temp\nstA488.tmp\InstallOptions.dll

C:\Users\win7\AppData\Roaming\UcMapi\Office Tabs\xPowerTab.dll

C:\Users\win7\AppData\Roaming\UcMapi\Office Tabs\xPowerTab.1.lan

C:\Users\win7\AppData\Roaming\UcMapi\Office Tabs\OfficeTabs.exe

C:\Users\win7\AppData\Roaming\UcMapi\Office Tabs\OfficeTabs.chm

C:\Users\win7\AppData\Roaming\UcMapi

C:\Users\win7\AppData\Roaming\UcMapi\Office Tabs

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UcMapi\Office Tabs\Office Tabs Center.lnk

C:\Users\win7\AppData\Roaming\UcMapi\Office Tabs\Uninstall.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UcMapi\Office Tabs\UnInstall.lnk

C:\Users\win7\Desktop\Office Tabs Center.lnk

C:\Users\win7\AppData\Local\Temp\nstA488.tmp\System.dll

C:\Users\win7\AppData\Roaming\Microsoft\Office\MSO7318.pip

http://www.xl415.com/apu.php?n=&zoneid=11838&cb=INSERT_RANDOM_NUMBER_HERE&popunder=1&direct=1

C:\Program Files\Internet Explorer\iexplore.exe

C:\Users\win7\AppData\Local\Temp\nsxA19B.tmp\INetC.dll

C:\Users\win7\AppData\Local\Temp\nsxA19A.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\2QJTRDNL.txt

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\0[1].gif

C:\Users\win7\AppData\Local\Temp\nstA352.tmp.bat

C:\Users\win7\AppData\Local\Temp\nsxA19B.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsxA19B.tmp\nsExec.dll

C:\Users\win7\AppData\Roaming\Adobe\LogTransport2\LogTransport2.cfg

C:\Users\win7\AppData\Local\Temp\nspDD14.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nskDD44.tmp.exe

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D237426009EE0F53ADECD7FCEBA7288C_97325C0F99E0D4A128C98C1EE254C1B7

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D237426009EE0F53ADECD7FCEBA7288C_97325C0F99E0D4A128C98C1EE254C1B7

C:\Users\win7\AppData\Local\Temp\2b9c0cfb-fb4e-11e5-9e88-08002763e612\target.exe_2b9c0cfe-fb4e-11e5-9e88-08002763e612

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\49514950C94E8026A2B06312597DFF49_F4692EBD578D04048E176E82BB8369BB

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\49514950C94E8026A2B06312597DFF49_5C747AF723CAFB63F2E5D43C4489EFE2

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D4F348B882DF3F205ECCB6243795CB3A

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\49514950C94E8026A2B06312597DFF49_F4692EBD578D04048E176E82BB8369BB

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\0D6ED27B76F0582A8D2120DF24D1E180_7B011182263149A63230BFA6B295F3D3

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\0D6ED27B76F0582A8D2120DF24D1E180_FB2F4FA9E9C6B6CBBC4B069A9FDAAE62

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CC61097B94A0A007D678F95504798376

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\0D6ED27B76F0582A8D2120DF24D1E180_7B011182263149A63230BFA6B295F3D3

C:\Users\win7\AppData\Local\Temp\27E6Q1K9\unpack.dll

C:\Users\win7\AppData\Local\Temp\27E6Q1K9\comregc.exe

C:\Users\win7\AppData\Local\Temp\27E6Q1K9\Resume.exe

CONIN$

CONOUT$

C:\Users\win7\AppData\Local\Temp\27E6Q1K9\sample\presetup.rgn

C:\Users\win7\AppData\Local\Temp\27E6Q1K9\sample\presetup.bmp

C:\Users\win7\AppData\Local\Temp\27E6Q1K9\sample\presetup\banner.bmp

C:\Users\win7\AppData\Local\Temp\27E6Q1K9\sample\presetup\watermark.bmp

C:\Users\win7\AppData\Local\Temp\27E6Q1K9\sample\presetup\butt_warn.bmp

C:\Users\win7\AppData\Local\Temp\27E6Q1K9\sample\presetup\butt_cancel.bmp

C:\Users\win7\AppData\Local\Temp\27E6Q1K9\sample\presetup\butt_inf.bmp

C:\Users\win7\AppData\Local\Temp\27E6Q1K9\sample\presetup\butt_que.bmp

C:\Users\win7\AppData\Local\Temp\27E6Q1K9\sample\presetup\unbanner.bmp

C:\Users\win7\AppData\Local\Temp\27E6Q1K9\sample\presetup\unwatermark.bmp

C:\Users\win7\AppData\Local\Temp\27E6Q1K9\sample\presetup\maintenance.bmp

C:\Users\win7\AppData\Local\Temp\27E6Q1K9\sample\presetup\eula.txt

C:\Users\win7\AppData\Local\Temp\27E6Q1K9\sample\plugins\0\CustomUI.dll

C:\Users\win7\AppData\Local\Temp\27E6Q1K9\sample\packagedb

C:\Users\win7\AppData\Local\Temp\27E6Q1K9\sample\languages

C:\Users\win7\AppData\Local\Temp\27E6Q1K9\sample\maindb

C:\Users\win7\AppData\Roaming\Microsoft\Windows\SendTo\desktop.ini

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs

\logs\service_log.txt

C:\Windows\System32\msxml3.dll\1

C:\Windows\System32\msxml3.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\131917[1].png

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\sprite[1].png

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\left_pane[1].jpg

C:\Windows\System32\ZHP2.exe

C:\Users\win7\AppData\Local\Temp\btwinlog.txt

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\10KWM6QU.htm

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\loader[1].gif

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\l_gaal[1].jpg

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\youtube[1].gif

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\facebook[1].gif

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\twitter[1].gif

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\google[1].gif

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\logo[1].png

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\ga[1].js

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\L0J6HMKE.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\IJQDK6RH.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\VRP0HJP0.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\T00147LS.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\P6IHZF8R.txt

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\back[1].png

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\mobile[1].htm

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\alienstrike[1].gif

C:\DockConfig.xml

Uninstall.lst

C:\Users\win7\AppData\Local\Temp\nsu3DD5.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nsu3DD5.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsu3DD5.tmp\reporting

C:\Users\win7\AppData\Local\Temp\nsu3DD5.tmp\MIP-mo-03_1458241094026.bmp

C:\Users\win7\AppData\Local\Temp\nsu3DD5.tmp\installerParams

C:\ProgramData\c00fd789-4044-4a32-8a4f-7d731dbdc0d1\temp

C:\\ninja.txt

C:\Windows\system32\config.ini

C:\Users\win7\AppData\Local\Temp\\~DFDC590AF8AFDADEE3.TMP

C:\Users\win7\AppData\Local\Temp\SmartConsoleWrapper\\setup.exe

C:\Users\win7\AppData\Local\Temp\is-HTOUE.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-HTOUE.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-HTOUE.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-HTOUE.tmp\_isetup\_isdecmp.dll

C:\Users\win7\AppData\Local\Temp\is-HTOUE.tmp\isgsg.dll

C:\Users\win7\AppData\Local\Temp\is-HTOUE.tmp\ISDone.dll

C:\Users\win7\AppData\Local\Temp\is-HTOUE.tmp\isslideshow.dll

C:\Users\win7\AppData\Local\Temp\is-HTOUE.tmp\b2p.dll

C:\Users\win7\AppData\Local\Temp\is-HTOUE.tmp\botva2.dll

C:\Users\win7\AppData\Local\Temp\is-HTOUE.tmp\icon.dll

C:\screen_off.PNG

C:\Up.PNG

C:\Down.PNG

C:\Brightness.PNG

\\.\PQAWRwa

C:\Users\win7\AppData\Local\rec_ca_181\rec_ca_181\1.20\cnf.cyl

C:\Users\win7\AppData\Local\Temp\gch552E.tmp

C:\SAMPLE

\\.\pipe\OperaCrashReporter2200

C:\installer_prefs.json

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160406011126.log

\\.\D:

C:\Users\win7\AppData\Local\Temp\Opera Installer\installer.lck

http://www.opera.com/download/get/?partner=www&opsys=Windows

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EDC238BFF48A31D55A97E1E93892934B_A7467B47637944C1E4B4025C763E391F

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\0270780F846F08BEFE0DD8112D932FEF

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E4F76C0C82655FD6506668127FA0ACD1_F6AB1C86FB0C74897AC7F2CB403CFB96

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E4F76C0C82655FD6506668127FA0ACD1_CDD1BCAFC964EE6D17D60D9802FE2583

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D0EAFE99DD0474CD3DF1720DC4B3759

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C911EABD82D65947049C32F9037AA0E0

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E4F76C0C82655FD6506668127FA0ACD1_F6AB1C86FB0C74897AC7F2CB403CFB96

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160406011125.exe

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\Opera_36.0.2130.59_Setup[1].exe

C:\Users\win7\AppData\Local\Temp\x264enc5_.cab

C:\Users\Public\Desktop\NCH Suite.lnk

C:\Users\Public\Desktop\NCH Suite.lnk\desktop.ini

C:\Users\Public\Desktop\NCH Software.lnk

C:\Users\Public\Desktop\NCH Software.lnk\desktop.ini

C:\Users\win7\Desktop\NCH Suite.lnk

C:\Users\win7\Desktop\NCH Suite.lnk\desktop.ini

C:\Users\win7\Desktop\NCH Software.lnk

C:\Users\win7\Desktop\NCH Software.lnk\desktop.ini

C:\Users\win7\AppData\Local\Temp\n1s\nchdata.dat

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Debut Video Capture Software.lnk

C:\Users\Public\Desktop\Debut Video Capture Software.lnk

\\.\DebutFilter

C:\Windows\system32\wdmaud.drv

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Related Programs\VideoPad Video Editor.lnk

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Related Programs\Video Capture Software.lnk

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Related Programs\Video File Format Converter.lnk

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Related Programs\Slideshow Creator Software.lnk

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Related Programs\Video Tape to DVD Converter.lnk

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\VideoPad Video Editor.lnk

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\WavePad Sound Editor.lnk

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Video Capture Software.lnk

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Switch Sound File Converter.lnk

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Transcription Software.lnk

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Invoicing Software.lnk

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Prism Video File Format Converter.lnk

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\MixPad MultiTrack Mixer.lnk

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Accounting Software.lnk

C:\Users\win7\Favorites\NCH Software Download Site.lnk

C:\Windows\As_Utilities.log

C:\Users\win7\AppData\Local\Temp\GUMBA51.tmp\goopdate.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BAEBE581FCB73249406FC21094EA252E_BC0CE803EF41A748738619ED7838EEFC

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BAEBE581FCB73249406FC21094EA252E_FD361CE5A85478C5EE18C8A08F5CE82E

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C3E814D1CB223AFCD58214D14C3B7EAB

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D84E548583BE1EE7DB5A935821009D26_5B98B6CD6E69202676965CF5B0E2A7A7

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D84E548583BE1EE7DB5A935821009D26_1070D8A1DE1737B040B2F83EA6FA69E1

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8BD11C4A2318EC8E5A82462092971DEA

C:\ProgramData\Epic Privacy Browser\Update\Log\EpicUpdate.log

C:\Users\win7\AppData\Local\Temp\sample.log

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\uninstallguide[1].txt

C:\uninstallguide.txt

C:\ProgramData\Package Cache

C:\ProgramData\Package Cache\{050d4fc8-5d48-4b8f-8972-47c82c46020f}

C:\ProgramData\Package Cache\{f65db027-aff3-4070-886a-0d87064aabb1}

C:\installedsoftware.txt

C:\Users\win7\AppData\Local\Temp\\dup2patcher.dll

C:\Users\win7\AppData\Local\Temp\\bassmod.dll

C:\pcnsl.msg

C:\ProgramData\6f66c052-8827-4487-9031-09becb0cf541\temp

C:\Users\win7\AppData\Local\Temp\is-609I7.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-609I7.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-609I7.tmp\ISDone.dll

C:\Users\win7\AppData\Local\Temp\is-609I7.tmp\isskin.dll

C:\Users\win7\AppData\Local\Temp\is-609I7.tmp\botva2.dll

C:\Users\win7\AppData\Local\Temp\is-609I7.tmp\b2p.dll

C:\Users\win7\AppData\Local\Temp\is-609I7.tmp\CallbackCtrl.dll

C:\Users\win7\AppData\Local\Temp\is-609I7.tmp\unarc.dll

C:\Users\win7\AppData\Local\Temp\is-609I7.tmp\WizImg1.bmp

C:\Users\win7\AppData\Local\Temp\is-609I7.tmp\WizImg2.bmp

C:\Users\win7\AppData\Local\Temp\is-609I7.tmp\WizImg3.bmp

C:\Users\win7\AppData\Local\Temp\is-609I7.tmp\skin.tm

C:\Users\win7\AppData\Local\Temp\is-609I7.tmp\CLS-precomp.dll

C:\Users\win7\AppData\Local\Temp\is-609I7.tmp\packjpg_dll.dll

C:\Users\win7\AppData\Local\Temp\is-609I7.tmp\packjpg_dll1.dll

C:\Users\win7\AppData\Local\Temp\is-609I7.tmp\precomp.exe

C:\Users\win7\AppData\Local\Temp\is-609I7.tmp\zlib1.dll

C:\Users\win7\AppData\Local\Temp\is-609I7.tmp\CLS-srep.dll

C:\Users\win7\AppData\Local\Temp\is-609I7.tmp\records.inf

C:\Users\win7\AppData\Local\Temp\is-609I7.tmp\English.ini

C:\\sample.log

C:\sample\SSL

C:\sample\SSL\Hades CA.cer

\\.\CtrlSMsample

<NULL>

\??\C:\Windows\system32\explorerframe.dll

C:\Users\win7\AppData\Roaming\Ground.exe

C:\Users\win7\AppData\Local\Temp\nsj1BA6.tmp\System.dll

\\.\pipe\OperaCrashReporter2100

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160406063912.log

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160406063910.exe

C:\Users\win7\AppData\Local\Temp\Setup Log 2016-04-06 #001.txt

C:\Users\win7\AppData\Local\Temp\qdios.ini

C:\Users\win7\AppData\Local\Temp\is-A7DCB.tmp\rar.ini

\\?\C:\Users\win7\AppData\Local\Temp\is-A7DCB.tmp\rar.ini

stub_tmp.rar

stub4_install.exe

C:\Users\win7\AppData\Local\Temp\is-A7DCB.tmp\GCountry.dll

C:\Users\win7\AppData\Local\Temp\is-A7DCB.tmp\config.rar

C:\Users\win7\AppData\Local\Temp\is-A7DCB.tmp\UnRAR.exe

C:\Users\win7\AppData\Local\Temp\is-A7DCB.tmp\stub4_install.exe

C:\Users\win7\AppData\Local\Temp\is-A7DCB.tmp\stub5_install.exe

C:\Users\win7\AppData\Local\Temp\is-A7DCB.tmp\stub6_install.exe

C:\Users\win7\AppData\Local\Temp\is-A7DCB.tmp\OCSetupHlp.dll

C:\Users\win7\AppData\Local\Temp\is-A7DCB.tmp\16.txt

C:\Users\win7\AppData\Local\Temp\is-A7DCB.tmp\393.txt

C:\Users\win7\AppData\Local\Temp\dd_dotNetFx40_Full_setup_decompression_log.txt

C:\dotNetFx40_Full_setup.exe

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\dotNetFx40_Full_setup[1].exe

C:\\dotNetFx40_Full_setup.exe

C:\Windows\{852419C7-09D1-4B64-A52C-18A848270DA0}\DellCommandIntegrationSuite.msi

C:\Users\win7\AppData\Local\Temp\MSI9f560.LOG

C:\Windows\SysWOW64\MSIEXEC.EXE.config

C:\Windows\SysWOW64\MSIEXEC.EXE

C:\Users\win7\AppData\Local\Temp\MSIFA42.tmp

C:\Users\win7\AppData\Local\Temp\{39439CF3-7F64-4AEF-93C1-CCA89078D9E9}\_ISMSIDEL.INI

C:\Users\win7\AppData\Local\Temp\{39439CF3-7F64-4AEF-93C1-CCA89078D9E9}\DellCommandIntegrationSuite.msi

C:\Users\win7\AppData\Local\Temp\{39439CF3-7F64-4AEF-93C1-CCA89078D9E9}\0x0409.ini

C:\Users\win7\AppData\Local\Temp\~EDC1.tmp

C:\Users\win7\AppData\Local\Temp\issEE3F.tmp

C:\Users\win7\AppData\Local\Temp\{7C5A6B41-1FFB-474A-86D7-5A3780A837A1}\IsConfig.ini

C:\Users\win7\AppData\Local\Temp\{4DE50490-6064-4489-A100-9BA3204A190C}\_isres_0x0409.dll

C:\Users\win7\AppData\Local\Temp\{4DE50490-6064-4489-A100-9BA3204A190C}\ISBEWI64.exe

C:\Users\win7\AppData\Local\Temp\{4DE50490-6064-4489-A100-9BA3204A190C}\ISBEWX64.exe

C:\Users\win7\AppData\Local\Temp\{4DE50490-6064-4489-A100-9BA3204A190C}\IsConfig.ini

C:\Users\win7\AppData\Local\Temp\{4DE50490-6064-4489-A100-9BA3204A190C}\ISRT.dll

C:\Users\win7\AppData\Local\Temp\{4DE50490-6064-4489-A100-9BA3204A190C}\Setup.inx

C:\Users\win7\AppData\Local\Temp\{4DE50490-6064-4489-A100-9BA3204A190C}\String1033.txt

C:\Users\win7\AppData\Local\Temp\\~DF731CE407D056C832.TMP

C:/lib/tcl8.4/encoding/cp1252.enc

C:/lib/tcl8.4/encoding/iso8859-1.enc

C:/sample

C:/Users/win7/.Xdefaults

C:/lib/tclIndex

/installkitvfs/lib/tclIndex

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\desktop.ini

C:/Users/win7/AppData/Local/Temp/TCL65EE.tmp

C:/Users/win7/AppData/Local/Temp/ijtmp_18B20ECB-5BE8-435E-B8E1-4513862F2153/bin/xdg-desktop-icon

C:/Users/win7/AppData/Local/Temp/ijtmp_18B20ECB-5BE8-435E-B8E1-4513862F2153/bin/xdg-desktop-menu

C:/Users/win7/AppData/Local/Temp/ijtmp_18B20ECB-5BE8-435E-B8E1-4513862F2153/bin/xdg-open

C:\Users\win7\AppData\Local\Temp\nspEA36.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nspEA36.tmp\ioSpecial.ini

C:\Users\win7\AppData\Local\Temp\nspEA36.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nspEA36.tmp\modern-header.bmp

C:\Users\win7\AppData\Local\Temp\nspEA36.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nspEA36.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nspEA36.tmp\KillJBS.exe

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\johnsadventures.com\John's Background Switcher.lnk

C:\Windows\hh.exe

C:\menu\model.dat

C:\menu\LogoOPEN.swf

C:\Users\win7\AppData\Local\Temp\nsc23F3.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsc23F3.tmp\GlaryUtilities.ini

C:\Users\win7\AppData\Local\Temp\nsc23F3.tmp\ioSpecial.ini

C:\Users\win7\AppData\Local\Temp\nsc23F3.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nsc23F3.tmp\modern-header.bmp

C:\Users\win7\AppData\Local\Temp\nsc23F3.tmp\InstallOptions.dll

\\.\APPDRV

C:\USBKeyConfig.dat

C:\CustomConfig.dat

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\EBankAssistantUpdate[1].ini

C:\EBankAssistantUpdate.ini

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\CustomEncrypt[1].dat

C:\Download\CustomEncrypt.dat

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\HXBAssistantTool[1].exe

C:\Download\HXBAssistantTool.exe

C:\Users\win7\AppData\Local\Temp\is-G9UMR.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-G9UMR.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-89ROM.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-89ROM.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-89ROM.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nskD0B3.tmp

C:\Users\win7\AppData\Local\Temp\nskD150.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\UTPSInstall.log

C:\Users\win7\AppData\Local\Temp\nskD150.tmp\lib7zEx.dll

C:\data.bin

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8828F39C7C0CE9A14B25C7EB321181BA_DC03E45EC7611F50ADAEBABE405A8C4C

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A3D5BF1283C2E63D8C8A8C72F0051F5A

C:\Users\win7\AppData\Local\Temp\look.exe.config

C:\Users\win7\AppData\Local\Temp\look.exe

C:\Users\win7\AppData\Local\Temp\nstFA.tmp

C:\Users\win7\AppData\Local\Temp\nstFB.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nstFB.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nstFB.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\com.gamehouse.acid\params.dat

C:\Users\win7\AppData\Local\com.gamehouse.acid\install.log

C:\Users\win7\AppData\Local\Temp\dat5860.tmp

C:\Users\win7\AppData\Local\Temp\dat5B7E.tmp

C:\Users\win7\AppData\Local\Temp\dat5B7F.tmp

C:\Users\win7\AppData\Local\Temp\nseBF85.tmp\LangDLL.dll

C:\Users\win7\AppData\Local\Temp\nseBF85.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nseBF85.tmp\modern-header.bmp

C:\Users\win7\AppData\Local\Temp\nseBF85.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nseBF85.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nseBF85.tmp\System.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\installer[1].htm

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\img0020[1].png

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\img0021[1].png

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\img0022[1].png

C:\WINDOWS\FONTS\COMICBD.TTF

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\Installer[1].png

http://java.com/download

C:\Users\win7\AppData\Local\Temp\nsi668F.tmp

C:\Users\win7\AppData\Local\Temp\nsx669F.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsx669F.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\nsx669F.tmp\nsProcess.dll

C:\Users\win7\AppData\Local\Temp\nsx669F.tmp\registry.dll

C:\Users\win7\AppData\Roaming\vnlgp\vnlgp.7z

C:\Users\win7\AppData\Local\Temp\nsx669F.tmp\nsis7z.dll

vnlgp.7z

C:\Users\win7\AppData\Roaming\vnlgp\vnlgp

C:\Users\win7\AppData\Roaming\vnlgp\vnlgp\kernel

C:\Users\win7\AppData\Roaming\vnlgp\vnlgp\start.cmd

C:\Users\win7\AppData\Roaming\vnlgp\vnlgp\clinfo.exe

C:\Users\win7\AppData\Roaming\vnlgp\vnlgp\vnlgp.exe

C:\Users\win7\AppData\Roaming\vnlgp\vnlgp\kernel\aes_helper.cl

C:\Users\win7\AppData\Roaming\vnlgp\vnlgp\kernel\blake.cl

C:\Users\win7\AppData\Roaming\vnlgp\vnlgp\kernel\blake256.cl

C:\Users\win7\AppData\Roaming\vnlgp\vnlgp\kernel\bmw.cl

C:\Users\win7\AppData\Roaming\vnlgp\vnlgp\kernel\bmw256.cl

C:\Users\win7\AppData\Roaming\vnlgp\vnlgp\kernel\cubehash.cl

C:\Users\win7\AppData\Roaming\vnlgp\vnlgp\kernel\darkcoin-mod.cl

C:\Users\win7\AppData\Roaming\vnlgp\vnlgp\kernel\decred.cl

C:\Users\win7\AppData\Roaming\vnlgp\vnlgp\kernel\echo.cl

C:\Users\win7\AppData\Roaming\vnlgp\vnlgp\kernel\fugue.cl

C:\Users\win7\AppData\Roaming\vnlgp\vnlgp\kernel\groestl.cl

C:\Users\win7\AppData\Roaming\vnlgp\vnlgp\kernel\groestl256.cl

C:\Users\win7\AppData\Roaming\vnlgp\vnlgp\kernel\jh.cl

C:\Users\win7\AppData\Roaming\vnlgp\vnlgp\kernel\keccak.cl

C:\Users\win7\AppData\Roaming\vnlgp\vnlgp\kernel\keccak1600.cl

C:\Users\win7\AppData\Roaming\vnlgp\vnlgp\kernel\luffa.cl

C:\Users\win7\AppData\Roaming\vnlgp\vnlgp\kernel\lyra2.cl

C:\Users\win7\AppData\Roaming\vnlgp\vnlgp\kernel\lyra2re.cl

C:\Users\win7\AppData\Roaming\vnlgp\vnlgp\kernel\lyra2rev2.cl

C:\Users\win7\AppData\Roaming\vnlgp\vnlgp\kernel\lyra2v2.cl

C:\Users\win7\AppData\Roaming\vnlgp\vnlgp\kernel\neoscrypt-old.cl

C:\Users\win7\AppData\Roaming\vnlgp\vnlgp\kernel\neoscrypt.cl

C:\Users\win7\AppData\Roaming\vnlgp\vnlgp\kernel\shabal.cl

C:\Users\win7\AppData\Roaming\vnlgp\vnlgp\kernel\shavite.cl

C:\Users\win7\AppData\Roaming\vnlgp\vnlgp\kernel\simd.cl

C:\Users\win7\AppData\Roaming\vnlgp\vnlgp\kernel\skein.cl

C:\Users\win7\AppData\Roaming\vnlgp\vnlgp\kernel\skein256.cl

C:\Users\win7\AppData\Roaming\vnlgp\vnlgp\kernel\vanilla.cl

C:\Users\win7\AppData\Roaming\vnlgp\vnlgp\msvcr120.dll

C:\Users\win7\AppData\Roaming\vnlgp\vnlgp\vnlgp.conf

C:\Users\win7\AppData\Local\Temp\nsx669F.tmp\nsExec.dll

C:\Users\win7\AppData\Local\Temp\61c00096-fbe3-11e5-9e88-08002763e612\target.exe_61c00099-fbe3-11e5-9e88-08002763e612

Opera.dll

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\\operaprefs_default.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\custom\defaults\operaprefs.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\operaprefs.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\operaprefs_default.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\region.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\oprBBEC.tmp

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\custom

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\custom\defaults

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\custom\defaults\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\custom\defaults\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\custom\defaults\operaprefs.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\custom\defaults\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\custom\defaults\standard_speeddial.ini

C:\Windows\system32\operaprefs_fixed.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\custom\defaults\operaprefs_disabled.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\us\operaprefs_region.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\en\operaprefs_locale.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\upgrade.log

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\encoding.bin

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\user

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\user\accessibility.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\styles\user\accessibility.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\user\altdebugger.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\styles\user\altdebugger.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\user\classid.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\styles\user\classid.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\user\contrastbw.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\styles\user\contrastbw.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\user\contrastwb.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\styles\user\contrastwb.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\user\disablebreaks.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\styles\user\disablebreaks.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\user\disablefloats.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\styles\user\disablefloats.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\user\disableforms.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\styles\user\disableforms.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\user\disablepositioning.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\styles\user\disablepositioning.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\user\disabletables.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\styles\user\disabletables.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\user\outline.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\styles\user\outline.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\user\structureblock.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\styles\user\structureblock.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\user\structureinline.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\styles\user\structureinline.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\user\structuretables.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\styles\user\structuretables.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\user\tablelayout.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\styles\user\tablelayout.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\user\toc.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\styles\user\toc.css

C:\Windows\system32\handlersrc.fixed

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\handlersrc

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\handlers.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\defaults\plugin-ignore.ini

C:\Windows\system32\override.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\override_downloaded.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\override.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\oprBC6A.tmp

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\en\en.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\html5_entity_init.dat

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\cache\activity.opr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\cache

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\cache\CACHEDIR.TAG

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\cache\dcache4.url

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\cache\dcache4.old

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\opcache\dcache4.url

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\opcache\dcache4.old

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\vlink4.dat

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\vlink4.old

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\cache\revocation\dcache4.url

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\cache\revocation\dcache4.old

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\cache\revocation\vlink4.dat

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\cache\revocation\vlink4.old

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\cache\revocation\activity.opr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\oprand.dat

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\opssl6.dat

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\opcert6.dat

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\skin

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\skin\standard_skin.zip

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\wml.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\mathml.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\contentblock.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\vps\\0000\w.axx

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\vps\\0000\wb.vx

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\vps\\0000\md.dat

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\vps\\0000\adoc.bx

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\vps\\0000\url.axx

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\defaults\feedreaders.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\webfeeds\feedreaders.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\webfeeds\webfeeds.store

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\widgets\widgets.dat

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\application_cache\mcache\dcache4.url

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\application_cache\mcache\dcache4.old

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\application_cache\mcache\vlink4.dat

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\application_cache\mcache\vlink4.old

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\application_cache\mcache\activity.opr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\global_history.dat

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\typed_history.xml

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\profile\optrb.dat

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\files_list

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\en\en.zip

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\customize.gif

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\arrow.png

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\bar.png

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\bkgd-rev.png

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\bkgd.png

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\bullet.png

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\center.png

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\container.png

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\darkBox.png

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\defaultFavicon.png

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\error.png

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\file.png

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\flag.png

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\folder.png

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\hanger.png

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\opera-icon-red.png

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\opera.png

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\Opera_256x256.png

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\page-bot.png

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\red_center.png

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\red_left.png

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\red_right.png

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\root.png

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\search.png

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\section.png

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\smartGroup.png

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\tooltiptail.png

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\top.png

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\images\warning.png

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\extra\missingplugin.svg

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\extra\missingpluginhover.svg

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\defaults\dictionaries.xml

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\defaults\mailproviders.xml

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\pubsuffix.xml

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\cn\turbosettings.xml

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\hk\turbosettings.xml

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\tw\turbosettings.xml

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\webfeeds.html

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\about.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\cache.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\certinfo.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\config.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\cpu.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\debug.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\dir.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\drives.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\error.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\feed.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\gpu.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\history.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\im.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\image.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\info.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\mail.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\media.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\message.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\mime.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\opera.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\plugins.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\private.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\search.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\unstyledxml.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\warning.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\webstorage.css

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\cn\browser.js

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\hk\browser.js

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\tw\browser.js

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\gstreamer\LGPL.txt

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\defaults\license.txt

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\en\license.txt

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\lngcode.txt

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\program\plugins\readme.txt

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\gstreamer\README.txt

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\ui\dialog.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\ui\embedded_keyboard.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\ui\embedded_menu.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\ui\embedded_mouse.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\ui\fastforward.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\defaults\handlers-ignore.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\zh-cn\operaprefs_locale.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\eg\search.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\middle_east\search.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\bg\search.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\ro\search.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\sr\search.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\pt-BR\search.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\ar\search.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\latin_america\search.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\mx\search.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\in\search.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\id\search.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\hu\search.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\es-ES\search.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\fr\search.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\it\search.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\de\search.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\be\search.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\tr\search.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\sk\search.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\defaults\search.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\pl\search.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\cn\en\search.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\nb\search.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\ja\search.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\us\search.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\gb\search.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\cs\search.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\zh-cn\search.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\cis\en\search.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\ua\ru\search.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\uk\search.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\ru\search.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\cis\ru\search.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\ru\search.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\ui\standard_keyboard.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\ui\standard_keyboard_compat.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\ui\standard_menu.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\ui\standard_mouse.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\sr\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\es-ES\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\za\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\hu\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\ja\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\ro\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\uk\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\bg\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\my\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\au\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\tr\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\ng\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\zh-cn\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\cn\en\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\us\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\gb\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\ru\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\cis\ru\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\ru\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\pl\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\cs\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\sk\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\be\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\de\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\cis\en\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\ar\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\fr\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\ua\ru\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\it\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\id\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\se\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\nb\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\in\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\ph\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\pk\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\vn\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\pt-BR\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\eg\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\middle_east\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\latin_america\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\mx\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\defaults\standard_speeddial.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\ui\standard_toolbar.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\defaults\standard_trusted_repositories.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\defaults\tips_metadata.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\defaults\webmailproviders.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\defaults\xmlentities.ini

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\cn\en\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\bg\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\sr\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\ro\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\middle_east\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\zh-cn\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\ja\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\sk\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\eg\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\hu\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\be\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\cs\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\pk\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\cis\en\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\tr\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\uk\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\ph\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\ar\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\id\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\defaults\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\vn\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\nb\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\es-ES\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\it\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\ng\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\latin_america\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\fr\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\us\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\mx\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\za\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\se\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\ua\ru\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\my\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\pt-BR\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\au\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\ru\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\cis\ru\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\gb\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\in\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\pl\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\region\ru\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\de\bookmarks.adr

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\defaults\public_domains.dat

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\html40_entities.dtd

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\mathml.dtd

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\extra\windows-direct3d-10.blocklist.json

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\extra\windows-opengl.blocklist.json

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\af\af.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\ar\ar.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\az\az.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\be\be.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\bg\bg.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\bn\bn.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\cs\cs.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\da\da.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\de\de.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\el\el.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\en-GB\en-GB.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\es-ES\es-ES.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\es-LA\es-LA.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\et\et.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\fa\fa.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\fi\fi.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\fr-CA\fr-CA.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\fr\fr.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\fy\fy.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\gd\gd.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\he\he.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\hi\hi.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\hr\hr.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\hu\hu.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\id\id.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\it\it.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\ja\ja.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\ka\ka.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\kk\kk.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\ko\ko.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\lt\lt.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\lv\lv.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\me\me.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\mk\mk.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\ms\ms.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\nb\nb.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\nl\nl.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\nn\nn.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\pa\pa.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\pl\pl.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\pt-BR\pt-BR.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\pt\pt.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\ro\ro.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\ru\ru.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\sk\sk.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\sr\sr.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\sv\sv.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\sw\sw.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\ta\ta.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\te\te.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\th\th.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\tl\tl.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\tr\tr.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\uk\uk.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\ur\ur.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\uz\uz.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\vi\vi.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\zh-cn\zh-cn.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\zh-tw\zh-tw.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\locale\zu\zu.lng

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\m2_upgrade_1160.mbs

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\styles\m2_welcome_message.mbs

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\files.sig

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\files_old.sig

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\ui\dialogs.yml

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\ui\widgets.yml

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\opera.exe

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\D3DCompiler_43.dll

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\gstreamer\plugins\gstaudioconvert.dll

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\gstreamer\plugins\gstaudioresample.dll

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\gstreamer\plugins\gstautodetect.dll

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\gstreamer\plugins\gstcoreplugins.dll

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\gstreamer\plugins\gstdecodebin2.dll

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\gstreamer\plugins\gstdirectsound.dll

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\gstreamer\plugins\gstffmpegcolorspace.dll

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\gstreamer\plugins\gstoggdec.dll

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\gstreamer\gstreamer.dll

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\gstreamer\plugins\gstwaveform.dll

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\gstreamer\plugins\gstwavparse.dll

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\gstreamer\plugins\gstwebmdec.dll

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\opera.dll

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\mapi\OperaMAPI.dll

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\Opera.exe

C:\writefiletest_1076

C:\main.download.log

C:\GameCenter@Mail.Ru.ini

C:\Windows\system32\sample.dbg

C:\sample.dbg

C:\Windows\system32\sample.pdb

C:\Windows\system32\exe\sample.pdb

C:\Windows\system32\symbols\exe\sample.pdb

sample.pdb

C:\main.log

C:\GameCenter@Mail.Ru.ini:Tamper

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\amipb[1].js

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\footer_img[1].png

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\cancel1[1].gif

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\skip[1].gif

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\cancel[1].gif

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\decline[1].gif

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\next[1].gif

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\accept[1].gif

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\finish[1].gif

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\dm_left_image[1].png

C:\Users\win7\AppData\Local\Temp\WIN7-PC-20160406-1359.log

C:\Users\win7\AppData\Local\Temp\OfficeC2RB4DC20CE-9249-4317-9BA8-C0DC50AA9F9F\v32.cab

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\696F3DE637E6DE85B458996D49D759AD

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\696F3DE637E6DE85B458996D49D759AD

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7396C420A8E1BC1DA97F1AF0D10BAD21

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7396C420A8E1BC1DA97F1AF0D10BAD21

C:\Users\win7\AppData\Local\Temp\_asw_abpI.tm~a03036\setup.lok

C:\Users\win7\AppData\Local\Temp\_asw_abpI.tm~a03036\servers.def

C:\Users\win7\AppData\Local\Temp\_asw_abpI.tm~a03036\servers.def.lkg

C:\Program Files\AVAST Software\Avast Business\Setup\setup.log

C:\ProgramData\AVAST Software\Avast\Log\Setup.log

C:\setup1.dat

C:\Windows\system32\stdole32.tlb

C:\Users\win7\AppData\Local\Temp\pft43FF.tmp\pftw1.pkg

C:\Users\win7\AppData\Local\Temp\pft43FF.tmp\Disk1\data1.cab

C:\Users\win7\AppData\Local\Temp\pft43FF.tmp\Disk1\data1.hdr

C:\Users\win7\AppData\Local\Temp\pft43FF.tmp\Disk1\data2.cab

C:\Users\win7\AppData\Local\Temp\pft43FF.tmp\Disk1\ikernel.ex_

C:\Users\win7\AppData\Local\Temp\pft43FF.tmp\Disk1\layout.bin

C:\Users\win7\AppData\Local\Temp\pft43FF.tmp\Disk1\Setup.exe

C:\Users\win7\AppData\Local\Temp\pft43FF.tmp\Disk1\Setup.ini

C:\Users\win7\AppData\Local\Temp\pft43FF.tmp\Disk1\setup.inx

C:\Intel\Logs\IntelGFX.log

C:\Users\win7\AppData\Local\Temp\CabFFFA.tmp

C:\Users\win7\AppData\Local\Temp\TarFFFB.tmp

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\74BFD122C0875EC75DBE5C6DB4C59019

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\74BFD122C0875EC75DBE5C6DB4C59019

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\378B079587A9184B2E2AB859CB263F40_2B618FC6CF84AEF3C14E129161BF18D9

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\378B079587A9184B2E2AB859CB263F40_197DFA069EB2C1F78E8B5A54666FCA53

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\378B079587A9184B2E2AB859CB263F40_2B618FC6CF84AEF3C14E129161BF18D9

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C9E3282A673263848AB7F0C007FD3AF1_822B6608387F476B0B3F4BF39AC7D5BD

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C9E3282A673263848AB7F0C007FD3AF1_A2F11F1CB14F12E80F11566DD71C1AEA

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B06FC0C94A5D113109C15E5A5EE1C21E

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C9E3282A673263848AB7F0C007FD3AF1_822B6608387F476B0B3F4BF39AC7D5BD

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\update[1].json

C:\Users\win7\AppData\Local\Temp\Update.ini

C:\icudtl.dat

.\swingie.exe.pdb

.\exe\swingie.exe.pdb

.\symbols\exe\swingie.exe.pdb

C:\swingie.exe.pdb

C:\exe\swingie.exe.pdb

C:\symbols\exe\swingie.exe.pdb

C:\jenkins-work\workspace\swing-new-rel\src\out\Release\swingie.exe.pdb

.\wkernel32.pdb

.\dll\wkernel32.pdb

.\symbols\dll\wkernel32.pdb

C:\wkernel32.pdb

C:\dll\wkernel32.pdb

C:\symbols\dll\wkernel32.pdb

wkernel32.pdb

.\wntdll.pdb

.\dll\wntdll.pdb

.\symbols\dll\wntdll.pdb

C:\wntdll.pdb

C:\dll\wntdll.pdb

C:\symbols\dll\wntdll.pdb

wntdll.pdb

C:\Users\win7\AppData\Local\Temp\tmp.mof

C:\Users\win7\AppData\Local\Temp\2B4022~1\target.exe

c:\57876dc56e3192b1386d8a82b8291707\silverlight.7z

c:\57876dc56e3192b1386d8a82b8291707\install.res.dll

c:\57876dc56e3192b1386d8a82b8291707\install.exe

c:\57876dc56e3192b1386d8a82b8291707\microsoft_defaults.exe

c:\57876dc56e3192b1386d8a82b8291707\silverlight.msi

c:\57876dc56e3192b1386d8a82b8291707\$shtdwn$.req

C:\Users\win7\AppData\Local\Temp\2b4022e2-fbfe-11e5-9e88-08002763e612\target.exe_2b4022e3-fbfe-11e5-9e88-08002763e612

C:\Users\win7\AppData\Local\Temp\2b4022e2-fbfe-11e5-9e88-08002763e612\target.exe

C:\Users\win7\AppData\Local\Temp\2b4022e6-fbfe-11e5-9e88-08002763e612\target.exe_2b4022e7-fbfe-11e5-9e88-08002763e612

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\FB788E090BC1F3AA2FBC9E8FB2859601

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\FB788E090BC1F3AA2FBC9E8FB2859601

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\40E450F7CE13419A2CCC2A5445035A0A_97482851B9CF8FBB790FA8AEAB0C772D

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\40E450F7CE13419A2CCC2A5445035A0A_2CFCD3B0E185E4A8F87A94EFDCF71017

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1DAF2884EC4DFA96BA4A58D4DBC9C406

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\40E450F7CE13419A2CCC2A5445035A0A_97482851B9CF8FBB790FA8AEAB0C772D

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\12B9DB160AD5C40A43865B2B20626F11_562B4DB7E667DCC825A4240DF458A240

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\12B9DB160AD5C40A43865B2B20626F11_22EBCC8FAAC2C0C319540C9E50A04C3B

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D0466EA99B1687E7F2254A079EC72DD2

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\12B9DB160AD5C40A43865B2B20626F11_562B4DB7E667DCC825A4240DF458A240

C:\Users\win7\AppData\Local\Temp\2b4022e6-fbfe-11e5-9e88-08002763e612\target.exe

\\.\{CFE68B1E-656A-488B-8077-738CA67BA3A5}

\\.\360SelfProtection

360base.dll

C:\uninstall.lng

\\?\C:\uninstall.lng

/usr/local/ssl/openssl.cnf

C://lockmyApp1234865.lock

\\?\C:\sample

\\?\C:\sample.dat

C:\log.prf

C:\Users\win7\AppData\Local\Temp\Opera_installer_2016462915493.dll

\\.\pipe\OperaCrashReporter2696

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160406172915.log

http://www.opera.com/download/get/?partner=www&opsys=Windows&product=Opera%20beta

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160406172914.exe

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\Opera_beta_37.0.2178.4_Setup[1].exe

C:\Users\win7\AppData\Local\Temp\nsg69EB.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsg69EB.tmp\CityHash.dll

C:\Windows\system32\AK083E209605E394C.lie

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\ACCESS~1\SPEECH~1.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\CALCUL~1.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\DISPLA~1.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\MATHIN~1.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\MOBILI~1.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\NETWOR~1.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\Paint.lnk

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\REMOTE~1.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\SNIPPI~1.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\SOUNDR~1.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\STICKY~1.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\SYNCCE~1.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\SYSTEM~1\CHARAC~1.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\SYSTEM~1\dfrgui.lnk

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\SYSTEM~1\DISKCL~1.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\SYSTEM~1\RESOUR~1.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\SYSTEM~1\SYSTEM~1.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\SYSTEM~1\SYSTEM~2.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\SYSTEM~1\TASKSC~1.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\SYSTEM~1\WINDOW~2.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\SYSTEM~1\WINDOW~1.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\TABLET~1\SHAPEC~1.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\TABLET~1\TabTip.lnk

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\TABLET~1\WINDOW~1.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\WELCOM~1.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\WINDOW~1\WINDOW~1.LNK

C:\Windows\SysWOW64

C:\Windows\SysWOW64\WindowsPowerShell

C:\Windows\SysWOW64\WindowsPowerShell\v1.0

C:\Windows\syswow64\Windowspowershell\v1.0

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\WINDOW~1\WINDOW~4.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\WINDOW~1\WINDOW~3.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\WINDOW~1\WINDOW~2.LNK

C:\Windows\System32\WindowsPowerShell

C:\Windows\System32\WindowsPowerShell\v1.0

C:\WINDOWS\system32\WindowsPowerShell\v1.0

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\Wordpad.lnk

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ADMINI~1\COMPON~1.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ADMINI~1\COMPUT~1.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ADMINI~1\DATASO~1.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ADMINI~1\EVENTV~1.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ADMINI~1\ISCSII~1.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ADMINI~1\MEMORY~1.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ADMINI~1\PERFOR~1.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ADMINI~1\PRINTM~1.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ADMINI~1\SECURI~1.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ADMINI~1\services.lnk

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ADMINI~1\SYSTEM~1.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ADMINI~1\TASKSC~1.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ADMINI~1\WINDOW~2.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\ADMINI~1\WINDOW~1.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Games\GAMEEX~1.LNK

\??\C:\Windows\SysWOW64\gameux.dll

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\MAINTE~1\BACKUP~1.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\MAINTE~1\CREATE~1.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\MAINTE~1\REMOTE~1.LNK

C:\Windows\Installer\desktop.ini

C:\Windows\Installer

C:\Windows\Installer\{E2B51919-207A-43EB-AE78-733F9C6797C3}

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\PYTHON~1.7\MODULE~1.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\PYTHON~1.7\PYTHON~1.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\PYTHON~1.7\PYTHON~2.LNK

C:\Python27\Doc

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\PYTHON~1.7\UNINST~1.LNK

C:\Windows\system32

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Sidebar.lnk

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\WINDOW~2.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\WINDOW~1.LNK

C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\XPSVIE~1.LNK

C:\Users\win7\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\ACCESS~1\EASEOF~1.LNK

C:\Users\win7\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\ACCESS~1\Magnify.lnk

C:\Users\win7\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\ACCESS~1\Narrator.lnk

C:\Users\win7\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\ACCESS~1\ON-SCR~1.LNK

C:\Users\win7\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\COMMAN~1.LNK

C:\Users\win7\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\Notepad.lnk

C:\Users\win7\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\Run.lnk

C:\Users\win7\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\SYSTEM~1\computer.lnk

C:\Users\win7\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\SYSTEM~1\CONTRO~1.LNK

C:\Users\win7\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\SYSTEM~1\INTERN~1.LNK

C:\Users\win7\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\SYSTEM~1\PRIVAT~1.LNK

C:\Users\win7\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\ACCESS~1\WINDOW~1.LNK

C:\Users\win7\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\INTERN~2.LNK

C:\Users\win7\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\MAINTE~1\Help.lnk

C:\Users\win7\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\ORACLE~1\UNINST~1.LNK

C:\Program Files\Oracle\VirtualBox Guest Additions

C:\Users\win7\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\ORACLE~1\Website.lnk

C:\Users\win7\AppData\Local\Temp\is-GT4KS.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-GT4KS.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-GT4KS.tmp\VclStylesInno.dll

C:\Users\win7\AppData\Local\Temp\is-GT4KS.tmp\ISDone.dll

C:\Users\win7\AppData\Local\Temp\is-GT4KS.tmp\BASS.dll

C:\Users\win7\AppData\Local\Temp\is-GT4KS.tmp\bp.dll

C:\Users\win7\AppData\Local\Temp\is-GT4KS.tmp\wintb.dll

.\Savu Config.exe

Savu Config.exe

C:\Savu Config.exe

.\SavuCfgHook.dll

SavuCfgHook.dll

C:\SavuCfgHook.dll

\\?\hid#vid_80ee&pid_0021#6&e993e07&0&0000#{4d1e55b2-f16f-11cf-88cb-001111000030}

C:\Users\win7\AppData\Local\Temp\\{DFA8F784-AE17-4111-9AE8-FE4E6B21562A}\PuntoSwitcher_punto-portals-elements.msi

C:\Users\win7\AppData\Local\Temp\PuntoSwitcher_punto-portals-elements00000.log

C:\Users\win7\AppData\Local\Temp\{DFA8F784-AE17-4111-9AE8-FE4E6B21562A}\PuntoSwitcher_punto-portals-elements.msi

C:\Users\win7\AppData\Local\Temp\evb1740.tmp

c:\operator.ini

C:\Users\win7\AppData\Local\Temp\autE7F9.tmp

C:\Users\win7\AppData\Local\Temp\AdwCleaner.jpg

C:\Users\win7\AppData\Local\Temp\autE809.tmp

C:\Users\win7\AppData\Local\Temp\Cleaning.ico

C:\Users\win7\AppData\Local\Temp\autE80A.tmp

C:\Users\win7\AppData\Local\Temp\Uninstall.ico

C:\Users\win7\AppData\Local\Temp\autE80B.tmp

C:\Users\win7\AppData\Local\Temp\Scan.ico

C:\Users\win7\AppData\Local\Temp\autE80C.tmp

C:\Users\win7\AppData\Local\Temp\Report.ico

C:\Users\win7\AppData\Local\Temp\autE80D.tmp

C:\Users\win7\AppData\Local\Temp\EULA.txt

C:\Users\win7\AppData\Local\Temp\autE81E.tmp

C:\Users\win7\AppData\Local\Temp\Quarantine.exe

C:\Users\win7\AppData\Local\Temp\autE83E.tmp

C:\Users\win7\AppData\Local\Temp\adwcleaner.db

C:\Users\win7\AppData\Local\Temp\autE86E.tmp

C:\Users\win7\AppData\Local\Temp\sqlite3.dll

C:\Users\win7\AppData\Local\Temp\CabF85D.tmp

C:\Users\win7\AppData\Local\Temp\TarF85E.tmp

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\4E3B89F45B2DEE97195EF8860AA1F05A

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5457A8CE4B2A7499F8299A013B6E1C7C_CBB16B7A61CE4E298043181730D3CE9B

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5457A8CE4B2A7499F8299A013B6E1C7C_794FC759C4757394B1BE2707ABEDEB93

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3B6E683A7A45CC59BF035C9BA8C7AB9D

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\5457A8CE4B2A7499F8299A013B6E1C7C_CBB16B7A61CE4E298043181730D3CE9B

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\07CEF2F654E3ED6050FFC9B6EB844250_5F5269AC0D922158A5B542020448A2D3

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\07CEF2F654E3ED6050FFC9B6EB844250_47BB28211D4E6F8B94DBD842EDE48141

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3538626A1FCCCA43C7E18F220BDD9B02

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\07CEF2F654E3ED6050FFC9B6EB844250_5F5269AC0D922158A5B542020448A2D3

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\99E7D179A416539E7B659C228E8F1AA4_D0544CDFD289562A8C595C30BA2F0844

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\99E7D179A416539E7B659C228E8F1AA4_C8910E5681FBE146518040694714CEBE

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D804485E9E323277FD41EBA359D12E77

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\99E7D179A416539E7B659C228E8F1AA4_D0544CDFD289562A8C595C30BA2F0844

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\KW34D1LK.txt

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\live[1].db

C:\Users\win7\AppData\Local\Temp\adwcleanerLive.db

\\.\pipe\OperaCrashReporter3044

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160406185919.log

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160406185917.exe

C:\Users\win7\AppData\Local\Temp\{44D633C6-C520-425D-AC0A-E5BC4FFBFC10}\fpb.tmp

C:\Users\win7\AppData\Local\Temp\{7456BC1B-F47E-49A8-B05E-0D0463F62F92}\fpb.tmp

C:\Windows\SysWOW64\Macromed\Flash\mms.cfg

C:\Windows\SysWOW64\mms.cfg

settings.hldj

binds.hldj

C:\Users\win7\AppData\Local\Temp\setup.msi

C:\Windows\System32\msiexec.exe

C:\Users\win7\AppData\Local\Temp\nsbE03E.tmp

C:\Users\win7\AppData\Local\Temp\nsgE05E.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsgE05E.tmp\ioSpecial.ini

C:\Users\win7\AppData\Local\Temp\nsgE05E.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nsgE05E.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nsgE05E.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\$inst\2.tmp

C:\Users\win7\AppData\Local\Temp\$inst\4.tmp

C:\Users\win7\AppData\Local\Temp\$inst\5.tmp

C:\Users\win7\AppData\Local\Temp\$inst\7.tmp

C:\Users\win7\AppData\Local\Temp\$inst\9.tmp

\\?\C:\Users\win7\AppData\Roaming\alekseih09\=B5@=5B @048> 101.ru 4.4.3.0\install\holder0.aiph

\\?\C:\Users\win7\AppData\Roaming\alekseih09\=B5@=5B @048> 101.ru 4.4.3.0\install\=B5@=5B @048> 101.ru.msi

C:\Users\win7\AppData\Roaming\alekseih09\=B5@=5B @048> 101.ru 4.4.3.0\install\=B5@=5B @048> 101.ru.msi

C:\Users\win7\AppData\Local\Temp\MSI710A.tmp

C:\Users\win7\AppData\Local\Temp\MSI7243.tmp

C:\Users\win7\AppData\Local\Temp\AI_EXTUI_BIN_1948\Up

C:\Users\win7\AppData\Local\Temp\AI_EXTUI_BIN_1948\removico

C:\Users\win7\AppData\Local\Temp\AI_EXTUI_BIN_1948\dialog

C:\Users\win7\AppData\Local\Temp\AI_EXTUI_BIN_1948\banner

C:\Users\win7\AppData\Local\Temp\AI_EXTUI_BIN_1948\New

C:\Users\win7\AppData\Local\Temp\AI_EXTUI_BIN_1948\exclamic

C:\Users\win7\AppData\Local\Temp\AI_EXTUI_BIN_1948\insticon

C:\Users\win7\AppData\Local\Temp\AI_EXTUI_BIN_1948\tabback

C:\Users\win7\AppData\Local\Temp\AI_EXTUI_BIN_1948\completi

C:\Users\win7\AppData\Local\Temp\AI_EXTUI_BIN_1948\custicon

C:\Users\win7\AppData\Local\Temp\AI_EXTUI_BIN_1948\info

C:\Users\win7\AppData\Local\Temp\AI_EXTUI_BIN_1948\repairic

C:\Users\win7\AppData\Local\Temp\AI_EXTUI_BIN_1948\Prereq.dll

C:\Users\win7\AppData\Local\Temp\AI_EXTUI_BIN_1948\ShortcutFlags.dll

C:\Users\win7\AppData\Local\Temp\AI_EXTUI_BIN_1948\aicustact.dll

C:\Users\win7\AppData\Local\Temp\AI_EXTUI_BIN_1948\lzmaextractor.dll

C:\Users\win7\AppData\Local\Temp\AI_EXTUI_BIN_1948\sharefolders.dll

C:\Users\win7\AppData\Local\Temp\AI_EXTUI_BIN_1948\cmdlinkarrow

C:\Users\win7\AppData\Local\Temp\MSI7496.tmp

C:\Users\win7\AppData\Local\Temp\MSI74C6.tmp

C:\Users\win7\AppData\Local\Temp\sample874.log

C:\Users\win7\AppData\Local\Temp\nsm70A1.tmp

__tmp_rar_sfx_access_check_866203

ipshtap.sys

tapinstall.exe

ipshtap.inf

tap.cat

C:\Users\win7\AppData\Local\Temp\RarSFX0\tapinstall.exe

C:\Users\win7\AppData\Local\Temp\RarSFX0

\\.\pipe\OperaCrashReporter2852

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160406232331.log

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160406232329.exe

C:\Users\win7\AppData\Local\Temp\is-VKG19.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-VKG19.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-VKG19.tmp\_isetup\_shfoldr.dll

C:\Windows\Performance\WinSAT\winsat.log

VOACLM.INI

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Bin\dbclean.exe

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Bin\msgtest.exe

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Bin\proclaunch.exe

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Bin\rpcloudview.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Bin\rpcloudview.propdesc

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Bin\rpdsvc.exe

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Bin\setup.exe

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Bin\x86\rpsystray.exe

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Lib\r1api.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Lib\r1com.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Plugins\alohaplin.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Plugins\cldplin.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Plugins\cmsplin.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Plugins\httpfsysshim.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Plugins\metrics.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Plugins\smplfsys.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Plugins\tmplgpln.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Plugins\transfspln.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Plugins\webapipln.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Resources\rpcloudview_res_de.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Resources\rpcloudview_res_en.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Resources\rpcloudview_res_es.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Resources\rpcloudview_res_fr.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Resources\rpcloudview_res_it.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Resources\rpcloudview_res_ja.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Resources\rpcloudview_res_ko.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Resources\rpcloudview_res_pt-br.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Resources\rpcloudview_res_zh-tw.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Resources\rpsystray_res_de.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Resources\rpsystray_res_en.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Resources\rpsystray_res_es.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Resources\rpsystray_res_fr.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Resources\rpsystray_res_it.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Resources\rpsystray_res_ja.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Resources\rpsystray_res_ko.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Resources\rpsystray_res_pt-br.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Resources\rpsystray_res_zh-tw.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Tools\ffmpeg\avcodec-54.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Tools\ffmpeg\avfilter-3.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Tools\ffmpeg\avformat-54.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Tools\ffmpeg\avutil-52.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Tools\ffmpeg\ffmpeg.exe

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Tools\ffmpeg\ffprobe.exe

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Tools\ffmpeg\postproc-52.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Tools\ffmpeg\segmenter.exe

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Tools\ffmpeg\swresample-0.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Tools\ffmpeg\swscale-2.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Tools\plugins\directshowdec.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Tools\plugins\hxfformat.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Tools\plugins\MFTDecoder.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Tools\plugins\MFTencoder.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\Tools\plugins\RealDecodeFilters.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\uninst.exe

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\x64\Bin64\msvcp100.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\x64\Bin64\msvcr100.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\x64\Bin64\rpcloudview.dll

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\x64\Bin64\rpcloudview.propdesc

C:\Users\win7\AppData\Local\Temp\~hxsetup\.\x64\Bin64\rpsystray.exe

__tmp_rar_sfx_access_check_642203

contacts.xml

no_connection.html

servers.xml

update.xml

update_config.xml

UserGuide.pdf

lang\award_flow1.html

lang\award_flow2.html

lang\bdHtmlBox.html

lang\cpptexts.xlf

lang\eula.html

lang\eula_text.html

lang\eula_text_en.html

lang\general.xlf

lang\httpaph.html

lang\httpgeneric.html

lang\httpmalware.html

lang\installer.xlf

lang\logs.xlf

lang\main.ui.css

lang\notifications.xlf

lang\rem_confirm.html

lang\rem_confirm_p.html

lang\repair_progress.html

lang\setup_progress.html

lang\uninstall_progress.html

lang\welcome.html

lang\images\alert_margin_left.png

lang\images\alert_margin_right.png

lang\images\alert_middle.png

lang\images\award.png

lang\images\back.png

lang\images\background.png

lang\images\background_award_flow.png

lang\images\background_install_steps.png

lang\images\background_tall.png

lang\images\background_uninstall.png

lang\images\bd_logo.png

lang\images\bg.png

lang\images\bg_AlertWindow.png

lang\images\bg_header_image.png

lang\images\bg_number_events.png

lang\images\bg_number_events_active.png

lang\images\bg_number_events_hover.png

lang\images\big_picture.png

lang\images\big_shadow.png

lang\images\btn_combo.png

lang\images\btn_combo_active.png

lang\images\btn_combo_disabled.png

lang\images\btn_combo_hover.png

lang\images\button.png

lang\images\button_active.png

lang\images\button_disabled.png

lang\images\button_hover.png

lang\images\checkbox_off.png

lang\images\checkbox_off_disabled.png

lang\images\checkbox_off_hover.png

lang\images\checkbox_on.png

lang\images\checkbox_on_disabled.png

lang\images\checkbox_on_hover.png

lang\images\close.png

lang\images\delete_normal.png

lang\images\details_button.png

lang\images\feedback_banner.png

lang\images\flow_background.png

lang\images\icon_alert.png

lang\images\icon_critical.png

lang\images\icon_critical_big.png

lang\images\icon_done.png

lang\images\icon_done_big.png

lang\images\icon_informative.png

lang\images\icon_notok.png

lang\images\icon_ok.png

lang\images\icon_sb.png

lang\images\icon_skipped.png

lang\images\input_bg.png

lang\images\install_big_button.png

lang\images\install_big_button_hover.png

lang\images\install_button.png

lang\images\install_button_hover.png

lang\images\loader_install.gif

lang\images\lock_normal.png

lang\images\minimize.png

lang\images\open_normal.png

lang\images\pending.png

lang\images\products_chart.jpg

lang\images\progress_bar_not_ok.png

lang\images\progress_bar_ok.png

lang\images\progress_bg.png

lang\images\qs_scan_log.xsl

lang\images\scroll_next.png

lang\images\scroll_prev.png

lang\images\share_fb.png

lang\images\share_go.png

lang\images\share_line.png

lang\images\share_tabel.png

lang\images\share_top_text.png

lang\images\share_tw.png

lang\images\small_shadow.png

lang\images\sswitch_off.png

lang\images\sswitch_on.png

lang\images\status_bg.png

lang\images\sys_btn.png

lang\images\sys_btn_active.png

lang\images\sys_btn_hover.png

lang\images\tabs_bg_feedback.png

lang\images\tabs_bg_feedback_hover.png

lang\images\tabs_bg_left.png

lang\images\tabs_bg_left_hover.png

lang\images\tabs_bg_right.png

lang\images\tabs_bg_right_hover.png

lang\images\top_header_bg.png

lang\images\unlock_normal.png

C:\Users\win7\AppData\Local\Temp\nsaC4FB.tmp\FindProcDLL.dll

C:\Users\win7\AppData\Local\Temp\nsaC4FB.tmp\splash.jpg

C:\Users\win7\AppData\Local\Temp\nsaC4FB.tmp\newadvsplash.dll

C:\Users\win7\AppData\Local\Temp\\~DFCF40027B03A68402.TMP

C:\Users\win7\AppData\Local\Temp\\~DF361EFCBE72C255F1.TMP

C:\sample\install.cfg

C:\Users\win7\AppData\Local\Skyhook Wireless\log\sample\sample.log

C:\Windows\system32\E177E04D548C4006A465EEB92D3DE021\Temp\prv_fallback.dll

C:\Windows\system32\E177E04D548C4006A465EEB92D3DE021\Runtime\Security\prv_fallback_6_41_98.dll.sec

C:\Windows\system32\E177E04D548C4006A465EEB92D3DE021\Temp\ecad_prv_fallback.dll

C:\Windows\system32\E177E04D548C4006A465EEB92D3DE021\Publisher Runtime\SOQSZ5635UA41RS5EEVO1TPUGA\Security\ecad_prv_fallback_6_41_95.dll.sec

C:\Windows\system32\E177E04D548C4006A465EEB92D3DE021\Temp\ecad_prv_td_lic.dll

C:\Windows\system32\E177E04D548C4006A465EEB92D3DE021\Publisher Runtime\SOQSZ5635UA41RS5EEVO1TPUGA\Security\ecad_prv_td_lic_6_41_95.dll.sec

C:\Windows\system32\E177E04D548C4006A465EEB92D3DE021\Temp\gb_prv_td_lic_gui.dll

C:\Windows\system32\E177E04D548C4006A465EEB92D3DE021\Publisher Runtime\SOQSZ5635UA41RS5EEVO1TPUGA\Security\gb_prv_td_lic_gui_6_41_95.dll.sec

C:\Windows\system32\E177E04D548C4006A465EEB92D3DE021\Runtime\Security\prv_ee_6_41_98.dll.sec

C:\Windows\system32\E177E04D548C4006A465EEB92D3DE021\Temp\6SYZ1TYRHQ2YJ

C:\Windows\system32\E177E04D548C4006A465EEB92D3DE021\Temp\ED32VTY62FAKP

C:\Windows\system32\E177E04D548C4006A465EEB92D3DE021\Temp\6J115CE6H34DP

C:\Intel\Logs\IntelCPHS.log

C:\Windows\System32\drivers\etc\services

C:\Users\win7\AppData\Local\Temp\001086a6.a

C:\Users\win7\AppData\Local\Temp\00108e96.a

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\index[1]

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\wrapper[1]

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\normal_bg[1]

C:\WINDOWS\FONTS\VERDANAB.TTF

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\appImg[1]

C:\WINDOWS\FONTS\SEGUISYM.TTF

C:\Users\win7\AppData\Local\Temp\1085781\dlreport

C:\Users\win7\AppData\Local\Temp\1085781\uTorrent.exe

C:\Users\win7\AppData\Local\Temp\OfficeSetup.exe

C:\SetupData\FitbitConnect.msi

C:\Users\win7\AppData\Local\Temp\\~DFCA4476B579264C15.TMP

C:\samdll

C:\Users\win7\AppData\Local\Temp\is-NRG2D.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-NRG2D.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-NRG2D.tmp\_isetup\_shfoldr.dll

C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\temp

1.217.722.0_TO_1.217.812.0_MPASDLTA.VDM._P

1.217.722.0_TO_1.217.812.0_MPAVDLTA.VDM._P

C:\licecap.ini

C:\ProgramData\65ad47d7-2e27-4a5c-b238-26643fdaeb98\temp

C:\Users\win7\AppData\Local\Temp\nsyB76B.tmp

C:\Users\win7\AppData\Local\Temp\nsqBBC2.tmp\npeNSISUtil.dll

C:\Windows\system32\npkfxext.ocx

C:\Windows\system32\npkfxx.ocx

C:\Windows\system32\npkfxtr.exe

C:\Windows\system32\npkfxup.exe

C:\Windows\system32\npkfxupd.exe

C:\Windows\system32\npkfxust.exe

C:\Windows\system32\INICRYPTOSDK.dll

C:\Windows\system32\npkfx.dll

C:\Windows\system32\npkfxcv.dll

C:\Windows\system32\npkfxes.dll

C:\Windows\system32\npkfxexp.dll

C:\Windows\system32\npkfxjv.dll

C:\Windows\system32\npkfxmi.dll

C:\Windows\system32\npkfxmp.dll

C:\Windows\system32\npkfxne.dll

C:\Windows\system32\npkfxpa.dll

C:\Windows\system32\npkfxrsen.dll

C:\Windows\system32\npkfxrskr.dll

C:\Windows\system32\npkfxsdk.dll

C:\Windows\system32\npasdk.dll

C:\Windows\system32\npkfxsdkex.dll

C:\Windows\system32\npacr_32.dll

C:\Windows\system32\npamgr_32.exe

C:\Windows\system32\npacr_64.dll

C:\Windows\system32\npamgr_64.exe

C:\Windows\system32\npkfxa.sys

C:\Windows\system32\npkfxs.sys

C:\Windows\system32\npkfxp.sys

C:\Windows\system32\npkfxu.sys

C:\Windows\system32\npcl_win_32u.dll

C:\Windows\system32\npcf_win_32u.dll

C:\Windows\system32\np_ck32s.sys

C:\Users\win7\AppData\Local\Temp\nsqBBC2.tmp\System.dll

C:\Windows\system32\npkfxe64.exe

C:\Windows\system32\np_ck64s.sys

C:\Windows\system32\npcl_win_64u.dll

C:\Windows\system32\npcf_win_64u.dll

C:\Windows\system32\npkfx64.dll

C:\Windows\system32\npkfxc64.dll

C:\Windows\system32\npkfxes64.dll

C:\Windows\system32\npkfxexp64.dll

C:\Windows\system32\npkfxne64.dll

C:\Windows\system32\npkfxrsen64.dll

C:\Windows\system32\npkfxrskr64.dll

C:\Windows\system32\npkfxsdk64.dll

C:\Windows\system32\npkfxsdkex64.dll

C:\Windows\system32\npkfxx64.ocx

\Localization.ini

C:\C:\sample

C:\Users\win7\AppData\Local\Temp\ptn89C3.tmp

C:\Users\win7\AppData\Local\Temp\nso82D1.tmp

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\LuaBridge.dll

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\lua51.dll

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\LuaXml_lib.dll

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\step1.lua

.\trlocalconfig.lua

C:\lua\trlocalconfig.lua

C:\lua\trlocalconfig\init.lua

C:\trlocalconfig.lua

C:\trlocalconfig\init.lua

.\trlocalconfig.dll

C:\trlocalconfig.dll

C:\loadall.dll

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\c6d51ab09f96b7569326130e860517b7d87e866d.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\897d21056a341314b60764c31b36c1fad542e78a.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\7d4b85d62fb353e7a43256f40d539ceb6fd06006.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\7b33b2bde409277581a53da83ac5b1bfdcf29afa.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\f45008e3c900e7920effac3ed6f377dd0caf0cf1.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\a317db596f44efe64d2468fcc06f25e9e5c24881.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\fb9a971095becfd9b1e850eb6279c1348b614289.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\c27913efc6edcc938c504fa24651c7f3d95f51cc.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\c1c6244f2ae1702a3000c622f7096790af0fce54.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\05d97e6e9834ccf063c552e404b9ecafc5e4d662.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\a2a55e68a147ddb026454c38213bc01a3979f52c.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\1db41df8dccf7e3b03a1b1cd221519090170ae52.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\2ef40efb3ce47d8141682e9cd50f9848be24fcd8.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\6ee341160694a1164db3bdcdb8a5bdf67cb8e295.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\21bf231e6241de6c31600941d84be38815e28488.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\bf87348c373b422b894b2aa91466db367ea80aaa.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\526e1aa5c4ffd23f07dd88b5fb40e6f2e034caef.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\920f8f5815b381ea692e9e7c2f7119f2b1aa620a.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\9ed037b84943c4caa3a520e48a5540181c46c98c.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\142f817c3ec0586de0f960c1c0483043b61a0d06.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\00dd744df5073c5ea8e44a65021a773b42bddf79.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\78e7626f746ee5577b52d70f6be23e4200f721f1.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\051b9663e868ce31e198a113ab8583e4975333cc.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\b67dd0daccce8aa22f9ae05b1ba94204e35079c1.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\3dec5266be16767074bd7e633762711cad92c73c.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\c9f011a4972686d5e6b3011c1f3d869999161f98.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\fe80be6cc93b6dd7bc3fadf2c043443a64eb487f.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\364a4e2a5b8a1bf8e9d7bd8564dd4847bc2d4dda.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\fcdcfb4437ad8599b23f499b563e237a464ff441.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\632078f327839b0df0b12da37f835169172076ee.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\1d76390fb3b717cf3455968a560ca5420e3de218.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\e7a170af4b32945995cc5d1f1aee630920f88095.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\845c4cc600dfc06afce750ce6b8870433b7d47ec.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\f44b567e3a3a123bcabbee52004a1b32b680a84e.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\083e81bd6d4ed3f8c712846787b4588d08f99e95.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\8171799b04351aef58c38f5109cd1ef7a43d20d0.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\590f6cae552c6eb2859cbad0ffbdbd5571946df4.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\0ec81897a17fb0f84013e683b09bb6f0c8d42cd8.dll

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\1feb3ea612cdf9b90056427956a6421e260272ab.dll

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\1370ebd534807c69ad0db6461cbf3f3fd03c434f.dll

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\026e996a3a5897970b058ffb093a163a1d763649.dll

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\672305f73718cddf94bb13e3c100dc29b8397598.dll

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\c5bfcd4d85ffe4e22099630f8abb9b98b714e7e0.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\389da82bc55b853a5b301d1ded34c566dbac4d4f.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\f49f0cb90d014cf5c8ac1925a9478d720c972747.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\7a0c7559331d92414337ab9237a8a62c13d544ee.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\7b2584cd1b859d0b92b2ad88463adbe6757e8ae1.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\0016e501ecf62f9d1e0ea5ff98d62e9163b91e1a.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\cf7afea710adf5a4494f7eea03db9c908baf9a8f.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\72ed3d41d77b75b2612d44bc1df80903b476928b.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\7c5fb38f536c5e201a10ce382c0756a186346bc2.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\cc9afe3271c429b15e72e21f6d4fb371283a4843.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\87a5250e7389d052be3fdc257872ebd873ef2deb.dll

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\f40368059830399ce8189100003d317f2739d087.dll

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\nsis7z.dll

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\nsisunz.dll

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\extension.tlb

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\step2.lua

.\c1c6244f2ae1702a3000c622f7096790af0fce54.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp/71674fbf1c4c7d35e641d498f18012fb8a4af083.dll

.\LuaXML_lib.lua

C:\lua\LuaXML_lib.lua

C:\lua\LuaXML_lib\init.lua

C:\LuaXML_lib.lua

C:\LuaXML_lib\init.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\LuaXML_lib.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\LuaSocket\lua\LuaXML_lib.lua

.\LuaXML_lib.dll

.\7c5fb38f536c5e201a10ce382c0756a186346bc2.lua

.\897d21056a341314b60764c31b36c1fad542e78a.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp/87a5250e7389d052be3fdc257872ebd873ef2deb.dll

.\7a0c7559331d92414337ab9237a8a62c13d544ee.lua

.\389da82bc55b853a5b301d1ded34c566dbac4d4f.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp/1370ebd534807c69ad0db6461cbf3f3fd03c434f.dll

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp/026e996a3a5897970b058ffb093a163a1d763649.dll

.\72ed3d41d77b75b2612d44bc1df80903b476928b.lua

.\cf7afea710adf5a4494f7eea03db9c908baf9a8f.lua

.\c5bfcd4d85ffe4e22099630f8abb9b98b714e7e0.lua

.\0016e501ecf62f9d1e0ea5ff98d62e9163b91e1a.lua

.\7b2584cd1b859d0b92b2ad88463adbe6757e8ae1.lua

.\f49f0cb90d014cf5c8ac1925a9478d720c972747.lua

.\7d4b85d62fb353e7a43256f40d539ceb6fd06006.lua

.\05d97e6e9834ccf063c552e404b9ecafc5e4d662.lua

.\c6d51ab09f96b7569326130e860517b7d87e866d.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp/f40368059830399ce8189100003d317f2739d087.dll

.\9ed037b84943c4caa3a520e48a5540181c46c98c.lua

.\920f8f5815b381ea692e9e7c2f7119f2b1aa620a.lua

.\6ee341160694a1164db3bdcdb8a5bdf67cb8e295.lua

.\a2a55e68a147ddb026454c38213bc01a3979f52c.lua

.\526e1aa5c4ffd23f07dd88b5fb40e6f2e034caef.lua

.\78e7626f746ee5577b52d70f6be23e4200f721f1.lua

.\00dd744df5073c5ea8e44a65021a773b42bddf79.lua

.\c9f011a4972686d5e6b3011c1f3d869999161f98.lua

.\e7a170af4b32945995cc5d1f1aee630920f88095.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\step_d.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\stepInt.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\skin\res\jquery.js

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\skin\res\common.js

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\skin\res\common.css

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\skin\res\knockout.js

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\stepAdv.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\versioninfo.dll

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\UACInfo.dll

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp/7196757c55c00a4e556f206981fd0cd029b8ee5b.dll

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\trlocalconfig.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\LuaSocket\lua\trlocalconfig.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\trlocalconfig.dll

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\LuaSocket\trlocalconfig.dll

.\051b9663e868ce31e198a113ab8583e4975333cc.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\FloatingProgress.dll

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\un.package.exe

.\632078f327839b0df0b12da37f835169172076ee.lua

.\590f6cae552c6eb2859cbad0ffbdbd5571946df4.lua

C:\Users\win7\AppData\Local\Temp\nse82E2.tmp\__web.xml

C:\Users\win7\AppData\Local\Temp\CabA196.tmp

C:\Users\win7\AppData\Local\Temp\TarA197.tmp

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EB2C4AB8B68FFA4B7733A9139239A396_D76DB901EE986B889F30D8CC06229E2D

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EB2C4AB8B68FFA4B7733A9139239A396_AD876BD6070522D4EE8560FE72EBB41A

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C5FD5BF0CE6372B1CAFE381FD0BC969C

C:\Users\win7\AppData\Local\Temp\7zS204B.tmp\BlueStacks-ThinInstaller_0.8.1.3003.exe.config

C:\Users\win7\AppData\Local\Temp\7zS204B.tmp\BlueStacks-ThinInstaller_0.8.1.3003.exe

C:\Users\win7\AppData\Local\Microsoft\Windows\Burn

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\desktop.ini

C:\Users\win7\AppData\Local\Temp\nsr464E.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsr464E.tmp\CityHash.dll

C:\Users\win7\AppData\Local\Temp\\~DF0DCA8B5A72454099.TMP

C:\Windows\system32\wbem\wbemdisp.TLB

C:\Windows\SysWOW64\FirewallAPI.dll

C:\Windows\SysWOW64\activeds.tlb

\\win7-PC*\MAILSLOT\NET\NETLOGON

C:\WINDOWS\FONTS\LUCON.TTF

C:\WINDOWS\FONTS\COUR.TTF

C:\WINDOWS\FONTS\COURBD.TTF

C:\WINDOWS\FONTS\COURI.TTF

C:\WINDOWS\FONTS\COURBI.TTF

C:\Users\win7\AppData\Local\Temp\Setup Log 2016-04-07 #001.txt

C:\Users\win7\AppData\Local\Temp\is-SNNTH.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-SNNTH.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-SNNTH.tmp\Setup.dll

C:\tree.js

C:\Users\win7\AppData\LocalLow\\{D2020D47-707D-4E26-B4D9-739C4F4C2E9A}\\{FBC0652C-7B29-4FB6-8ADA-91F54B267AD4}\\1.5\tree.js

update.txt

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\config[1].js

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\msg[1].htm

C:\Users\win7\AppData\Local\Temp\nscA383.tmp

C:\Users\win7\AppData\Local\Temp\nssA394.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nssA394.tmp\modern-header.bmp

C:\Users\win7\AppData\Local\Temp\nssA394.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nssA394.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\is-4P4FR.tmp\sample.tmp

./cmdline.txt

c:\crypticsettings\MachineMonitorIsRunning.txt

C:\Users\win7\AppData\Local\Temp\nsj114.tmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\updateinfo[1].htm

updateinfo.dat

1.217.812.0_TO_1.217.841.0_MPASDLTA.VDM._P

1.217.812.0_TO_1.217.841.0_MPAVDLTA.VDM._P

C:\appdata\sbrowser.ini

C:\data\adblocker filter lists.txt

C:\data\autoproxy.ini

C:\appdata\adblocker\WhitelistDomains.txt

Sources\Panther

Sources\Panther\setuperr.log

Sources\Panther\diagerr.xml

Sources\Panther\diagwrn.xml

Sources\Panther\setuplog.cfg

Sources\Panther\setupact.log

C:\Users\win7\AppData\Local\Temp\849d1719-fca8-11e5-9e88-08002763e612\target.exe_849d171a-fca8-11e5-9e88-08002763e612

C:\Users\win7\AppData\Local\Temp\849d1719-fca8-11e5-9e88-08002763e612\target.exe

C:\Users\win7\AppData\Local\Temp\849d1719-fca8-11e5-9e88-08002763e612\7zG.exe_849d171b-fca8-11e5-9e88-08002763e612

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_EE9DB89C3D6A328B5FEAFF0ED3C77874

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6BADA8974A10C4BD62CC921D13E43B18_E8BA778045934C3C7879AC75FF5434B4

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\82CB34DD3343FE727DF8890D352E0D8F

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6BADA8974A10C4BD62CC921D13E43B18_EE9DB89C3D6A328B5FEAFF0ED3C77874

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1E698CCB2C296D265AC1A253974E09FD_2ECAC56206023EEBF88741A5B79DBBED

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1E698CCB2C296D265AC1A253974E09FD_7078F9480E1BEA50678A6898C8D92A62

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D57B3BFF6E0B79FBD8CB6482C7775D35

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C07822D66105396A1B8E01486E66C5F3

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1E698CCB2C296D265AC1A253974E09FD_2ECAC56206023EEBF88741A5B79DBBED

C:\Users\win7\AppData\Local\Temp\849d1719-fca8-11e5-9e88-08002763e612\7zG.exe

C:\Users\win7\AppData\Local\Temp\849d1719-fca8-11e5-9e88-08002763e612\7z.dll_849d171c-fca8-11e5-9e88-08002763e612

C:\Users\win7\AppData\Local\Temp\849d1719-fca8-11e5-9e88-08002763e612\7z.dll

C:\Users\win7\AppData\Local\Temp\GUM2BD3.tmp\goopdate.dll

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C86BD7751D53F10F65AAAD66BBDF33C7

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EE44ECA143B76F2B9F2A5AA75B5D1EC6_847118BE2683F0C241D1D702F3A3F5F9

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EE44ECA143B76F2B9F2A5AA75B5D1EC6_48BC6893316669491F73A0AFA6B78DC9

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CA4458E7366E94A3C3A9C1FE548B6D21_03701DFFBB0DB68C6FEF44A923FC306A

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CA4458E7366E94A3C3A9C1FE548B6D21_11890B83A662A94DAA54032730C974C0

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7BD5521448F9309F5CEB0C75890FFABC

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\76A6104AD5D7661815E18299392B9F65

C:\ProgramData\Dropbox\Update\Log\DropboxUpdate.log-2016-04-07-10-13-19-082-2252

C:\Users\win7\AppData\Local\Temp\WERA06F.tmp.WERInternalMetadata.xml

C:\Users\win7\AppData\Local\Temp\3582-490\sample

C:\Windows\svchost.com

C:\Users\win7\AppData\Local\Temp\tmp5023.tmp

C:\CFVS_I~1.EXE

C:\DLL_LO~1.EXE

C:\Procmon.exe

C:\PROGRA~2\COMMON~1\MICROS~1\ink\mip.exe

C:\PROGRA~2\COMMON~1\MICROS~1\MSInfo\msinfo32.exe

C:\PROGRA~2\INTERN~1\ieinstal.exe

C:\PROGRA~2\INTERN~1\ielowutil.exe

C:\PROGRA~2\INTERN~1\iexplore.exe

C:\PROGRA~2\WINDOW~1\wab.exe

C:\PROGRA~2\WINDOW~1\wabmig.exe

C:\PROGRA~2\WINDOW~1\WinMail.exe

C:\PROGRA~2\WINDOW~2\ACCESS~1\wordpad.exe

C:\PROGRA~2\WINDOW~4\ImagingDevices.exe

C:\PROGRA~2\WI4223~1\sidebar.exe

C:\PROGRA~3\PACKAG~1\{050D4~1\VCREDI~1.EXE

C:\PROGRA~3\PACKAG~1\{F65DB~1\VCREDI~1.EXE

C:\Python27\Lib\DISTUT~1\command\WININS~1.EXE

C:\Python27\Lib\DISTUT~1\command\WININS~2.EXE

C:\Python27\Lib\DISTUT~1\command\WININS~3.EXE

C:\Python27\Lib\DISTUT~1\command\WININS~4.EXE

C:\Python27\Lib\DISTUT~1\command\WI02EA~1.EXE

C:\Python27\Lib\SITE-P~1\pip\_vendor\distlib\t32.exe

C:\Python27\Lib\SITE-P~1\pip\_vendor\distlib\t64.exe

C:\Python27\Lib\SITE-P~1\pip\_vendor\distlib\w32.exe

C:\Python27\Lib\SITE-P~1\pip\_vendor\distlib\w64.exe

C:\Python27\Lib\SITE-P~1\SETUPT~1\cli-32.exe

C:\Python27\Lib\SITE-P~1\SETUPT~1\cli-64.exe

C:\Python27\Lib\SITE-P~1\SETUPT~1\CLI-AR~1.EXE

C:\Python27\Lib\SITE-P~1\SETUPT~1\cli.exe

C:\Python27\Lib\SITE-P~1\SETUPT~1\gui-32.exe

C:\Python27\Lib\SITE-P~1\SETUPT~1\gui-64.exe

C:\Python27\Lib\SITE-P~1\SETUPT~1\GUI-AR~1.EXE

C:\Python27\Lib\SITE-P~1\SETUPT~1\gui.exe

C:\Python27\Scripts\EASY_I~2.EXE

C:\Python27\Scripts\EASY_I~1.EXE

C:\Python27\Scripts\pip.exe

C:\Python27\Scripts\PIP27~1.EXE

C:\Python27\Scripts\pip2.exe

C:\Users\ALLUSE~1\PACKAG~1\{050D4~1\VCREDI~1.EXE

C:\Users\ALLUSE~1\PACKAG~1\{F65DB~1\VCREDI~1.EXE

C:\ProgramData\78a595fd-df95-40de-93ec-d80a00f25811\temp

C:\Users\win7\AppData\Local\Temp\nsgDE89.tmp

C:\Users\win7\AppData\Local\Temp\pftA3D2.tmp\pftw1.pkg

C:\Users\win7\AppData\Local\Temp\pftA3D2.tmp\ConsoleInatall.exe

C:\Users\win7\AppData\Local\Temp\pftA3D2.tmp\Download_8110.ocx

C:\Users\win7\AppData\Local\Temp\pftA3D2.tmp\Install_OCX.exe

C:\Users\win7\AppData\Local\Temp\pftA3D2.tmp\LocalInstall.exe

C:\Users\win7\AppData\Local\Temp\pftA3D2.tmp\LocalInstall.ini

C:\Users\win7\AppData\Local\Temp\pftA3D2.tmp\MSetup.exe

C:\Users\win7\AppData\Local\Temp\pftA3D2.tmp\MSetup_AllRes.exe

C:\Users\win7\AppData\Local\Temp\pftA3D2.tmp\multiview.ini

C:\Users\win7\AppData\Local\Temp\pftA3D2.tmp\OCXDownloadChecker_8320.ocx

C:\Users\win7\AppData\Local\Temp\pftA3D2.tmp\RegOCX.INI

C:\Users\win7\AppData\Local\Temp\vmsetup.20160407152738.log

C:\Users\win7\AppData\Local\Temp\is-UA0PS.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-UA0PS.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-UA0PS.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-UA0PS.tmp\isgsg.dll

.

patch.inf

patch_allow.txt

patch8.txt

C:\Users\win7\AppData\Local\Temp\is-I1OTB.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-I1OTB.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\VSDB876.tmp\install.log

C:\Users\win7\AppData\Local\Temp\is-JUBU3.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-JUBU3.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\dply_en_015020289\dply_en_015020289\1.20\cnf.cyl

C:\Users\win7\AppData\Local\Temp\gch2DF3.tmp

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\accept[1].gif

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\finish[1].gif

C:\Users\win7\AppData\Local\Temp\{3943BD2F-91F4-4AF7-B3A4-88A8B896C1E9}\Disk1\data1.cab

C:\Users\win7\AppData\Local\Temp\{3943BD2F-91F4-4AF7-B3A4-88A8B896C1E9}\Disk1\data1.hdr

C:\Users\win7\AppData\Local\Temp\{3943BD2F-91F4-4AF7-B3A4-88A8B896C1E9}\Disk1\ISSetup.dll

C:\Users\win7\AppData\Local\Temp\{3943BD2F-91F4-4AF7-B3A4-88A8B896C1E9}\Disk1\layout.bin

C:\Users\win7\AppData\Local\Temp\{3943BD2F-91F4-4AF7-B3A4-88A8B896C1E9}\Disk1\setup.exe

C:\Users\win7\AppData\Local\Temp\{3943BD2F-91F4-4AF7-B3A4-88A8B896C1E9}\Disk1\setup.ini

C:\Users\win7\AppData\Local\Temp\{3943BD2F-91F4-4AF7-B3A4-88A8B896C1E9}\Disk1\setup.inx

C:\Users\win7\AppData\Local\Temp\{3943BD2F-91F4-4AF7-B3A4-88A8B896C1E9}\Disk1\setup.isn

C:\Users\win7\AppData\Local\Temp\{3943BD2F-91F4-4AF7-B3A4-88A8B896C1E9}\Disk1\setup.iss

C:\Users\win7\AppData\Local\Temp\{3943BD2F-91F4-4AF7-B3A4-88A8B896C1E9}\Disk1\_setup.dll

C:\Users\win7\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3979321414-2393373014-2172761192-1000\515f902ea4c67266e39e6cfe894f944f_c4b6765a-c53d-4b48-b576-0e1db4e9f3bc

C:\Users\win7\AppData\Local\Temp\{3943BD2F-91F4-4AF7-B3A4-88A8B896C1E9}\setup.ini

C:\Users\win7\AppData\Local\Temp\{3943BD2F-91F4-4AF7-B3A4-88A8B896C1E9}\setup.isn

C:\Users\win7\AppData\Local\Temp\skind456.rra

C:\Users\win7\AppData\Local\Temp\{3943BD2F-91F4-4AF7-B3A4-88A8B896C1E9}\Disk1\setupdir\0009\setup.gif

C:\Users\win7\AppData\Local\Temp\{3943BD2F-91F4-4AF7-B3A4-88A8B896C1E9}\Disk1\setup.gif

C:\Users\win7\AppData\Local\Temp\d7e1.rra

C:\Users\win7\AppData\Local\Temp\{C78D7FA1-0A77-469A-AB3F-E9C3B1DE5972}\{8EA79DBF-D637-448A-89D6-410A087A4493}\setud81f.rra

C:\Users\win7\AppData\Local\Temp\{C78D7FA1-0A77-469A-AB3F-E9C3B1DE5972}\{8EA79DBF-D637-448A-89D6-410A087A4493}\liced82f.rra

C:\Users\win7\AppData\Local\Temp\{C78D7FA1-0A77-469A-AB3F-E9C3B1DE5972}\{8EA79DBF-D637-448A-89D6-410A087A4493}\_ISUd82f.rra

C:\Users\win7\AppData\Local\Temp\{C78D7FA1-0A77-469A-AB3F-E9C3B1DE5972}\cored83e.rra

C:\Users\win7\AppData\Local\Temp\{C78D7FA1-0A77-469A-AB3F-E9C3B1DE5972}\dotnd83e.rra

C:\Users\win7\AppData\Local\Temp\{C78D7FA1-0A77-469A-AB3F-E9C3B1DE5972}\{8EA79DBF-D637-448A-89D6-410A087A4493}\Fontd84e.rra

C:\Users\win7\AppData\Local\Temp\{C78D7FA1-0A77-469A-AB3F-E9C3B1DE5972}\ISBEd84e.rra

C:\Users\win7\AppData\Local\Temp\{C78D7FA1-0A77-469A-AB3F-E9C3B1DE5972}\{8EA79DBF-D637-448A-89D6-410A087A4493}\Strid84e.rra

C:\Users\win7\AppData\Local\Temp\{C78D7FA1-0A77-469A-AB3F-E9C3B1DE5972}\{8EA79DBF-D637-448A-89D6-410A087A4493}\isrtd85e.rra

C:\Users\win7\AppData\Local\Temp\{C78D7FA1-0A77-469A-AB3F-E9C3B1DE5972}\{8EA79DBF-D637-448A-89D6-410A087A4493}\defad85e.rra

C:\Users\win7\AppData\Local\Temp\{C78D7FA1-0A77-469A-AB3F-E9C3B1DE5972}\{8EA79DBF-D637-448A-89D6-410A087A4493}\_IsRd85e.rra

C:\Users\win7\AppData\Local\Temp\{C78D7FA1-0A77-469A-AB3F-E9C3B1DE5972}\{8EA79DBF-D637-448A-89D6-410A087A4493}\setup.inx

C:\Users\win7\AppData\Local\Temp\{C78D7FA1-0A77-469A-AB3F-E9C3B1DE5972}\{8EA79DBF-D637-448A-89D6-410A087A4493}\ISRT.dll

C:\Users\win7\AppData\Local\Temp\{C78D7FA1-0A77-469A-AB3F-E9C3B1DE5972}\{8EA79DBF-D637-448A-89D6-410A087A4493}\_isres.dll

C:\Users\win7\AppData\Local\Temp\{C78D7FA1-0A77-469A-AB3F-E9C3B1DE5972}\{8EA79DBF-D637-448A-89D6-410A087A4493}\_isuser.dll

C:\Users\win7\AppData\Local\Temp\isprd938.rra

C:\Users\win7\AppData\Local\Temp\{C78D7FA1-0A77-469A-AB3F-E9C3B1DE5972}\{8EA79DBF-D637-448A-89D6-410A087A4493}\skind938.rra

C:\Users\win7\AppData\Local\Temp\{C78D7FA1-0A77-469A-AB3F-E9C3B1DE5972}\{8EA79DBF-D637-448A-89D6-410A087A4493}\StringTable-0009-English.ips

C:\Users\win7\AppData\Local\Temp\{C78D7FA1-0A77-469A-AB3F-E9C3B1DE5972}\corecomp.ini

\??\C:\Users\win7\AppData\Local\Temp\{3943BD2F-91F4-4AF7-B3A4-88A8B896C1E9}\Disk1\data1.hdr

C:\Users\win7\AppData\Local\Temp\{C78D7FA1-0A77-469A-AB3F-E9C3B1DE5972}\{8EA79DBF-D637-448A-89D6-410A087A4493}\default.pal

C:\Windows\system32\ieuinit.inf

C:\Windows\system32\mapisvc.inf

\\.\iocbios2

C:\Users\win7\AppData\Local\Temp\WIN7-PC-20160407-1751.log

C:\Users\win7\AppData\Local\Temp\OfficeC2RB4DC20CE-9C05-430B-9BA8-65DC1CA8839F\v32.cab

\\.\pipe\OperaCrashReporter2648

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160407175812.log

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160407175810.exe

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\Opera_36.0.2130.46_Setup[1].exe

C:\subinacl.exe

C:\Support\WinsockReset\Fixes.zip

C:\Windows\syswow64\zlib.dll

C:\Support\WinsockReset\XP\WinsockXP.reg

C:\Support\WinsockReset\7\winsock2.reg

C:\Support\WinsockReset\7\winsock2_64.reg

C:\Support\WinsockReset\7\winsock.reg

C:\Support\WinsockReset\Vista\winsock2.reg

C:\Support\WinsockReset\Vista\winsock.reg

C:\Support\WinsockReset\Vista\winsock2_64.reg

C:\Users\win7\AppData\Roaming\Download Manager\QuickBooksPremier2015.exe_cae6b0c6_cae6b0c6.dmc

C:\Users\win7\Desktop\QuickBooksPremier2015.exe.dlm

C:\Python27\lib\site-packages\py2exe\boot_common.py

C:\Windows\system32\sample\boot_common.py

<install zipextimporter>

C:\Windows\system32\sample\<install zipextimporter>

__main__.py

C:\Windows\system32\sample\__main__.py

\\.\FileCloner

C:\profile.xml

C:\PID976.txt

backup_20160407.txt

C:\FileZilla Server.xml

C:\Users\win7\AppData\Local\Temp\{45A933D2-C520-425D-AC0A-E5BC4EFBFB10}\fpb.tmp

C:\Users\win7\AppData\Local\Temp\{7529BC0F-F47E-49A8-B05E-0D0463F62F92}\fpb.tmp

C:\Users\win7\AppData\Local\Temp\nsdD900.tmp

C:\Users\win7\AppData\Local\Temp\nsdD99D.tmp\System.dll

C:\ProgramData\Microsoft\WLSetup\Logs\2016-04-07_21-20_ae4-tihgzac6.log

\\.\PIPE\winreg

C:\Users\win7\AppData\Local\Temp\04072120-00000ae4-tqwxlm45xo\tmpC734.tmp

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B2238AACCEDC3F1FFE8E7EB5F575EC9

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3130B1871A126520A8C47861EFE3ED4D

C:\Users\win7\AppData\Local\Temp\040721~1\tmpC734.tmp

C:\Users\win7\AppData\Local\Temp\04072120-00000ae4-tqwxlm45xo\tmpC7D1.tmp

C:\WINDOWS\FONTS\SEGOEUIL.TTF

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F90F18257CBB4D84216AC1E1F3BB2C76

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F90F18257CBB4D84216AC1E1F3BB2C76

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\SSPHRPGL.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\WG4K31QY.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\3LYLFV6G.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\JCEXKIBQ.txt

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\tr-tr[1].htm

C:\Users\win7\AppData\Local\Temp\wctCC38.tmp

C:\ProgramData\Microsoft\WLSetup\wltC958.tmp

C:\PROGRA~3\MICROS~1\WLSetup\wltC958.tmp

C:\Intel\Logs\IntelAMT.log

c:\47f0240001f96be68c2cba9bb5260c00\update\update.inf

c:\windows\MSCompPackV1.log

c:\47f0240001f96be68c2cba9bb5260c00\update\update.exe

C:\Windows\system32\c_1252.nls

C:\Users\win7\AppData\Roaming\acleound\eappPQEC.exe

C:\Users\win7\AppData\Local\Temp\F848\7C24.bat

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C46E7B0F942663A1EDC8D9D6D7869173_DF4CA81DC775CDA9B3214BDB5B55900E

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\40C68D5626484A90937F0752C8B950AB

C:\Users\win7\AppData\Local\Temp\nsgA0E3.tmp

C:\Users\win7\AppData\Local\Temp\nswA0F4.tmp\time.dll

C:\Users\win7\AppData\Local\Temp\nswA0F4.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nswA0F4.tmp\NSISpcre.dll

C:\Users\win7\AppData\Local\Temp\nswA0F4.tmp\UserInfo.dll

C:\Windows\nsmA23D.tmp

C:\Users\win7\AppData\Local\Temp\nswA0F4.tmp\modern-header.bmp

C:\Users\win7\AppData\Local\Temp\nswA0F4.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nswA0F4.tmp\nsDialogs.dll

C:\sampl.dll

C:\Users\win7\AppData\Local\Temp\{39406CC9-9143-4AF7-93C1-CCA8B896C1E9}\fpb.tmp

C:\UsbFix\UsbFix.exe

C:\UsbFix\Res\Account-Over.png

C:\UsbFix\Res\Account.png

C:\UsbFix\Res\Angle-149.png

C:\UsbFix\Res\Angle.png

C:\UsbFix\Res\Angle2.png

C:\UsbFix\Res\Apply.jpg

C:\UsbFix\Res\Apply2.jpg

C:\UsbFix\Res\ApplyOver.jpg

C:\UsbFix\Res\AutoClean.png

C:\UsbFix\Res\AutoVaccine.png

C:\UsbFix\Res\BRNGScan.png

C:\UsbFix\Res\Bug.png

C:\UsbFix\Res\Center Direction-50.png

C:\UsbFix\Res\Center Direction-64.png

C:\UsbFix\Res\Checked-40.png

C:\UsbFix\Res\Checkout-64.png

C:\UsbFix\Res\Computer-64.png

C:\UsbFix\Res\Detected.ico

C:\UsbFix\Res\Domain-50.png

C:\UsbFix\Res\EULA-en.txt

C:\UsbFix\Res\EULA-es.txt

C:\UsbFix\Res\EULA-fr.txt

C:\UsbFix\Res\EULA-it.txt

C:\UsbFix\Res\EULA-po.txt

C:\UsbFix\Res\EULA.txt

C:\UsbFix\Res\Exit-64.png

C:\UsbFix\Res\FastScan.png

C:\UsbFix\Res\Folder.ico

C:\UsbFix\Res\Folder.png

C:\UsbFix\Res\Get-Premium-120.png

C:\UsbFix\Res\HDDetected.png

C:\UsbFix\Res\HDFolder.png

C:\UsbFix\Res\HDHidden.png

C:\UsbFix\Res\HDKey.png

C:\UsbFix\Res\HDValue.png

C:\UsbFix\Res\Happy-50.png

C:\UsbFix\Res\Happy.png

C:\UsbFix\Res\Help-40.png

C:\UsbFix\Res\Hidden.ico

C:\UsbFix\Res\Initizialize.ico

C:\UsbFix\Res\Key.ico

C:\UsbFix\Res\ListPlus.png

C:\UsbFix\Res\LogoSetting.jpg

C:\UsbFix\Res\Monster-149.png

C:\UsbFix\Res\Quarantine_left.png

C:\UsbFix\Res\Rocket-64-Green.png

C:\UsbFix\Res\Rocket-64.png

C:\UsbFix\Res\Rocket.png

C:\UsbFix\Res\Sad-50.png

C:\UsbFix\Res\ScanNow-Over.png

C:\UsbFix\Res\ScanNow.png

C:\UsbFix\Res\Settings.png

C:\UsbFix\Res\Shield.png

C:\UsbFix\Res\Speed.png

C:\UsbFix\Res\Support-SosVirus.png

C:\UsbFix\Res\Tools.png

C:\UsbFix\Res\Trashes.png

C:\UsbFix\Res\UsbFix.ico

C:\UsbFix\Res\User-Shield.png

C:\UsbFix\Res\Viseur.png

C:\UsbFix\Res\Windows.png

C:\UsbFix\Res\arrow_left.png

C:\UsbFix\Res\bg-buton.png

C:\UsbFix\Res\bg-footer-768x70.png

C:\UsbFix\Res\bitdefender-2015.png

C:\UsbFix\Res\bitdefender-en-1.jpg

C:\UsbFix\Res\bitdefender-en-3.jpg

C:\UsbFix\Res\bitdefender-fr-1.jpg

C:\UsbFix\Res\bitdefender-fr-2.jpg

C:\UsbFix\Res\bitdefender-texte.png

C:\UsbFix\Res\bitdefender-texte_en.png

C:\UsbFix\Res\donate.jpg

C:\UsbFix\Res\donateover.jpg

C:\UsbFix\Res\encart-bitdefender-en.jpg

C:\UsbFix\Res\encart-bitdefender-en.png

C:\UsbFix\Res\encart-bitdefender-fr.png

C:\UsbFix\Res\facebook.jpg

C:\UsbFix\Res\facebookover.jpg

C:\UsbFix\Res\forum.jpg

C:\UsbFix\Res\forumover.jpg

C:\UsbFix\Res\listing.jpg

C:\UsbFix\Res\listingover.jpg

C:\UsbFix\Res\logo-2-300x86.png

C:\UsbFix\Res\logo-box.jpg

C:\UsbFix\Res\logo-sosvirus.png

C:\UsbFix\Res\logo.jpg

C:\UsbFix\Res\logo_listing.png

C:\UsbFix\Res\monstre110.png

C:\UsbFix\Res\monstre130.png

C:\UsbFix\Res\monstre80.png

C:\UsbFix\Res\msgbox3.jpg

C:\UsbFix\Res\msgbox4.jpg

C:\UsbFix\Res\off.png

C:\UsbFix\Res\on.png

C:\UsbFix\Res\options.jpg

C:\UsbFix\Res\optionsover.jpg

C:\UsbFix\Res\picto-bouclier-120.png

C:\UsbFix\Res\picto-bouclier-slide.png

C:\UsbFix\Res\picto-check - Copie.png

C:\UsbFix\Res\picto-check.png

C:\UsbFix\Res\picto-check1 - Copie.png

C:\UsbFix\Res\picto-check1.png

C:\UsbFix\Res\picto-diag.png

C:\UsbFix\Res\picto-outil.png

C:\UsbFix\Res\picto-virus.png

C:\UsbFix\Res\picto-virus1.png

C:\UsbFix\Res\quitter.jpg

C:\UsbFix\Res\quitterover.jpg

C:\UsbFix\Res\scan.jpg

C:\UsbFix\Res\scanover.jpg

C:\UsbFix\Res\scanoverusbdetect.jpg

C:\UsbFix\Res\scanoverusbdetectover.jpg

C:\UsbFix\Res\settings.ico

C:\UsbFix\Res\splash.png

C:\UsbFix\Res\suppr.jpg

C:\UsbFix\Res\supprover.jpg

C:\UsbFix\Res\twitter.jpg

C:\UsbFix\Res\twitterover.jpg

C:\UsbFix\Res\usbfix-logo-128.png

C:\UsbFix\Res\usbfix-upgrade.png

C:\UsbFix\Res\vaccin.jpg

C:\UsbFix\Res\vaccinover.jpg

C:\UsbFix\Res\Ico\Autograph-50.png

C:\UsbFix\Res\Ico\Checked-50.png

C:\UsbFix\Res\Ico\Computer-64.png

C:\UsbFix\Res\Ico\Computer-blue-64.png

C:\UsbFix\Res\Ico\HDD-50-White.png

C:\UsbFix\Res\Ico\HDD-64-White.png

C:\UsbFix\Res\Ico\HDD-64.png

C:\UsbFix\Res\Ico\HDD-blue-64.png

C:\UsbFix\Res\Ico\Network-50.png

C:\UsbFix\Res\Ico\Scanner-64.png

C:\UsbFix\Res\Ico\Search-64.png

C:\UsbFix\Res\Ico\Settings-50.png

C:\UsbFix\Res\Ico\USB-DOG-500.png

C:\UsbFix\Res\Ico\Unchecked-50.png

C:\UsbFix\Res\Ico\VT-Result-64.png

C:\UsbFix\Res\Ico\VTScan-64.png

C:\UsbFix\Res\Ico\Voice-50.png

C:\UsbFix\Res\Ico\bg-50x50.png

C:\UsbFix\Tools\swreg.com

C:\UsbFix\Un-UsbFix.exe

\\.\PHYSICALDRIVE0

https://www.mql5.com/?utm_campaign=WebInstaller&utm_medium=special&utm_source=installer

C:\Users\win7\AppData\Local\Temp\7ZipSfx.000\vcredist.msi

C:\Users\win7\AppData\Local\Safer Technologies\CrashReports\SecureBrowserProtector.error.log

C:\Users\win7\AppData\Local\Temp\nsnEDD6.tmp\ioSpecial.ini

C:\Users\win7\AppData\Local\Temp\nsnEDD6.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nsnEDD6.tmp\modern-header.bmp

C:\Users\win7\AppData\Local\Temp\nsnEDD6.tmp\InstallOptions.dll

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeHotspotRouter\FreeHotspotRouter.lnk

C:\Users\win7\Desktop\FreeHotspotRouter.lnk

C:\Users\win7\AppData\Roaming\FreeHotspotRouter\promo\burgershop.jpg

C:\Users\win7\AppData\Roaming\FreeHotspotRouter\promo\drive_64.png

C:\Users\win7\AppData\Roaming\FreeHotspotRouter\promo\family.jpg

C:\Users\win7\AppData\Roaming\FreeHotspotRouter\promo\geek_64.png

C:\Users\win7\AppData\Roaming\FreeHotspotRouter\promo\hotspot_64.png

C:\Users\win7\AppData\Roaming\FreeHotspotRouter\promo\jewel_quest.png

C:\Users\win7\AppData\Roaming\FreeHotspotRouter\promo\luxor.jpg

C:\Users\win7\AppData\Roaming\FreeHotspotRouter\promo\mahjong.png

C:\Users\win7\AppData\Roaming\FreeHotspotRouter\promo\montezuma.jpg

C:\Users\win7\AppData\Roaming\FreeHotspotRouter\promo\news_64.png

C:\Users\win7\AppData\Roaming\FreeHotspotRouter\promo\poppit.png

C:\Users\win7\AppData\Roaming\FreeHotspotRouter\promo\sherlock.jpg

C:\Users\win7\AppData\Roaming\FreeHotspotRouter\promo\slingo.jpg

C:\Users\win7\AppData\Roaming\FreeHotspotRouter\promo\tube_64.png

C:\Users\win7\AppData\Roaming\FreeHotspotRouter\promo\turboPizza.jpg

C:\Users\win7\AppData\Roaming\FreeHotspotRouter\promo\TurboSub.jpg

C:\Users\win7\AppData\Roaming\FreeHotspotRouter\promo\villagers.jpg

C:\Users\win7\AppData\Roaming\FreeHotspotRouter\promo\vlc.png

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeHotspotRouter\Uninstall.lnk

C:\ProgramData\Essentware\Installer\installer0.exe0.llog

C:\Users\win7\AppData\Local\Temp\installer0.exe

C:\WINDOWS\FONTS\TIMESBD.TTF

C:\WINDOWS\FONTS\TIMESI.TTF

C:\WINDOWS\FONTS\TIMESBI.TTF

C:\Users\win7\AppData\Local\Temp\dotNetFx40_Client_x86_x640.exe

C:\Users\win7\AppData\Local\Temp\AccountSvc640.msi

C:\Users\win7\AppData\Local\Temp\PCK640.msi

C:\ProgramData\074666a9-9c4a-46c0-9d2f-0ac2cbbb1ef3\temp

C:\Users\win7\AppData\Local\Temp\nsnFBC0.tmp\LangDLL.dll

C:\Users\win7\AppData\Local\Temp\nsnFBC0.tmp\ioSpecial.ini

C:\Users\win7\AppData\Local\Temp\nsnFBC0.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nsnFBC0.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\{391B768D-643B-4AEF-A720-89A8B896C1E9}\Disk1\0x0407.ini

C:\Users\win7\AppData\Local\Temp\{391B768D-643B-4AEF-A720-89A8B896C1E9}\Disk1\0x0409.ini

C:\Users\win7\AppData\Local\Temp\{391B768D-643B-4AEF-A720-89A8B896C1E9}\Disk1\0x040c.ini

C:\Users\win7\AppData\Local\Temp\{391B768D-643B-4AEF-A720-89A8B896C1E9}\Disk1\0x0410.ini

C:\Users\win7\AppData\Local\Temp\{391B768D-643B-4AEF-A720-89A8B896C1E9}\Disk1\0x0415.ini

C:\Users\win7\AppData\Local\Temp\{391B768D-643B-4AEF-A720-89A8B896C1E9}\Disk1\0x0416.ini

C:\Users\win7\AppData\Local\Temp\{391B768D-643B-4AEF-A720-89A8B896C1E9}\Disk1\0x0419.ini

C:\Users\win7\AppData\Local\Temp\{391B768D-643B-4AEF-A720-89A8B896C1E9}\Disk1\0x041f.ini

C:\Users\win7\AppData\Local\Temp\{391B768D-643B-4AEF-A720-89A8B896C1E9}\Disk1\0x0809.ini

C:\Users\win7\AppData\Local\Temp\{391B768D-643B-4AEF-A720-89A8B896C1E9}\Disk1\data1.cab

C:\Users\win7\AppData\Local\Temp\{391B768D-643B-4AEF-A720-89A8B896C1E9}\Disk1\data1.hdr

C:\Users\win7\AppData\Local\Temp\{391B768D-643B-4AEF-A720-89A8B896C1E9}\Disk1\ISSetup.dll

C:\Users\win7\AppData\Local\Temp\{391B768D-643B-4AEF-A720-89A8B896C1E9}\Disk1\layout.bin

C:\Users\win7\AppData\Local\Temp\{391B768D-643B-4AEF-A720-89A8B896C1E9}\Disk1\setup.exe

C:\Users\win7\AppData\Local\Temp\{391B768D-643B-4AEF-A720-89A8B896C1E9}\Disk1\setup.ini

C:\Users\win7\AppData\Local\Temp\{391B768D-643B-4AEF-A720-89A8B896C1E9}\Disk1\setup.inx

C:\Users\win7\AppData\Local\Temp\{391B768D-643B-4AEF-A720-89A8B896C1E9}\Disk1\setup.isn

C:\Users\win7\AppData\Local\Temp\{391B768D-643B-4AEF-A720-89A8B896C1E9}\setup.ini

C:\Users\win7\AppData\Local\Temp\{391B768D-643B-4AEF-A720-89A8B896C1E9}\0x0407.ini

C:\Users\win7\AppData\Local\Temp\{391B768D-643B-4AEF-A720-89A8B896C1E9}\0x0409.ini

C:\Users\win7\AppData\Local\Temp\{391B768D-643B-4AEF-A720-89A8B896C1E9}\0x040c.ini

C:\Users\win7\AppData\Local\Temp\{391B768D-643B-4AEF-A720-89A8B896C1E9}\0x0410.ini

C:\Users\win7\AppData\Local\Temp\{391B768D-643B-4AEF-A720-89A8B896C1E9}\0x0415.ini

C:\Users\win7\AppData\Local\Temp\{391B768D-643B-4AEF-A720-89A8B896C1E9}\0x0416.ini

C:\Users\win7\AppData\Local\Temp\{391B768D-643B-4AEF-A720-89A8B896C1E9}\0x0419.ini

C:\Users\win7\AppData\Local\Temp\{391B768D-643B-4AEF-A720-89A8B896C1E9}\0x041f.ini

C:\Users\win7\AppData\Local\Temp\{391B768D-643B-4AEF-A720-89A8B896C1E9}\0x0809.ini

C:\Users\win7\AppData\Local\Temp\{391B768D-643B-4AEF-A720-89A8B896C1E9}\setup.isn

C:\Users\win7\AppData\Local\Temp\skin9cf4.rra

C:\Users\win7\AppData\Local\Temp\a1f6.rra

C:\Users\win7\AppData\Local\Temp\{D79CE850-0A10-469A-AA3F-E9C3A5215D62}\{CED8E25B-122A-4E80-B612-7F99B93284B3}\setua273.rra

C:\Users\win7\AppData\Local\Temp\{D79CE850-0A10-469A-AA3F-E9C3A5215D62}\{CED8E25B-122A-4E80-B612-7F99B93284B3}\lefta292.rra

C:\Users\win7\AppData\Local\Temp\{D79CE850-0A10-469A-AA3F-E9C3A5215D62}\{CED8E25B-122A-4E80-B612-7F99B93284B3}\ArcDa292.rra

C:\Users\win7\AppData\Local\Temp\{D79CE850-0A10-469A-AA3F-E9C3A5215D62}\{CED8E25B-122A-4E80-B612-7F99B93284B3}\vcrea2a1.rra

C:\Users\win7\AppData\Local\Temp\{D79CE850-0A10-469A-AA3F-E9C3A5215D62}\{CED8E25B-122A-4E80-B612-7F99B93284B3}\Confa2c1.rra

C:\Users\win7\AppData\Local\Temp\{D79CE850-0A10-469A-AA3F-E9C3A5215D62}\{CED8E25B-122A-4E80-B612-7F99B93284B3}\EULAa2c1.rra

C:\Users\win7\AppData\Local\Temp\{D79CE850-0A10-469A-AA3F-E9C3A5215D62}\{CED8E25B-122A-4E80-B612-7F99B93284B3}\Fonta2d0.rra

C:\Users\win7\AppData\Local\Temp\{D79CE850-0A10-469A-AA3F-E9C3A5215D62}\{CED8E25B-122A-4E80-B612-7F99B93284B3}\DIFxa2d0.rra

C:\Users\win7\AppData\Local\Temp\{D79CE850-0A10-469A-AA3F-E9C3A5215D62}\corea2d0.rra

C:\Users\win7\AppData\Local\Temp\{D79CE850-0A10-469A-AA3F-E9C3A5215D62}\dotna2d0.rra

C:\Users\win7\AppData\Local\Temp\{D79CE850-0A10-469A-AA3F-E9C3A5215D62}\ISBEa2d0.rra

C:\Users\win7\AppData\Local\Temp\{D79CE850-0A10-469A-AA3F-E9C3A5215D62}\{CED8E25B-122A-4E80-B612-7F99B93284B3}\Stria2d0.rra

C:\Users\win7\AppData\Local\Temp\{D79CE850-0A10-469A-AA3F-E9C3A5215D62}\{CED8E25B-122A-4E80-B612-7F99B93284B3}\isrta2e0.rra

C:\Users\win7\AppData\Local\Temp\{D79CE850-0A10-469A-AA3F-E9C3A5215D62}\{CED8E25B-122A-4E80-B612-7F99B93284B3}\defaa2e0.rra

C:\Users\win7\AppData\Local\Temp\{D79CE850-0A10-469A-AA3F-E9C3A5215D62}\{CED8E25B-122A-4E80-B612-7F99B93284B3}\_isra2e0.rra

C:\Users\win7\AppData\Local\Temp\{D79CE850-0A10-469A-AA3F-E9C3A5215D62}\{CED8E25B-122A-4E80-B612-7F99B93284B3}\_isua2f0.rra

C:\Users\win7\AppData\Local\Temp\{D79CE850-0A10-469A-AA3F-E9C3A5215D62}\{CED8E25B-122A-4E80-B612-7F99B93284B3}\setup.inx

C:\Users\win7\AppData\Local\Temp\{D79CE850-0A10-469A-AA3F-E9C3A5215D62}\{CED8E25B-122A-4E80-B612-7F99B93284B3}\ISRT.dll

C:\Users\win7\AppData\Local\Temp\{D79CE850-0A10-469A-AA3F-E9C3A5215D62}\{CED8E25B-122A-4E80-B612-7F99B93284B3}\_isres_0x0409.dll

C:\Users\win7\AppData\Local\Temp\{D79CE850-0A10-469A-AA3F-E9C3A5215D62}\{CED8E25B-122A-4E80-B612-7F99B93284B3}\_isuser_0x0409.dll

C:\Users\win7\AppData\Local\Temp\ispra706.rra

C:\Users\win7\AppData\Local\Temp\{D79CE850-0A10-469A-AA3F-E9C3A5215D62}\{CED8E25B-122A-4E80-B612-7F99B93284B3}\skina716.rra

C:\Users\win7\AppData\Local\Temp\{D79CE850-0A10-469A-AA3F-E9C3A5215D62}\{CED8E25B-122A-4E80-B612-7F99B93284B3}\StringTable_0x0409.ips

C:\Users\win7\AppData\Local\Temp\{D79CE850-0A10-469A-AA3F-E9C3A5215D62}\corecomp.ini

\??\C:\Users\win7\AppData\Local\Temp\{391B768D-643B-4AEF-A720-89A8B896C1E9}\Disk1\data1.hdr

C:\Users\win7\AppData\Local\Temp\{D79CE850-0A10-469A-AA3F-E9C3A5215D62}\{CED8E25B-122A-4E80-B612-7F99B93284B3}\default.pal

C:\Windows\system32\psapi.dll

C:\Windows\system32\Advapi32.dll

C:\Users\win7\AppData\Local\Temp\{D79CE850-0A10-469A-AA3F-E9C3A5215D62}\{CED8E25B-122A-4E80-B612-7F99B93284B3}\EULA_EN.rtf

C:\Windows\system32\sfc.dll

C:\Users\win7\AppData\Local\Temp\nss6DD3.tmp\System.dll

C:\Users\win7\AppData\Roaming\win7-host\H01.EXE

C:\Users\win7\AppData\Roaming\win7-host\H02.EXE

C:\Users\win7\AppData\Roaming\win7-host\H03.EXE

C:\Users\win7\AppData\Roaming\win7-host\H04.EXE

C:\Users\win7\AppData\Roaming\win7-host\HTSINF.SYS

config.txt

C:\Users\win7\AppData\Local\Temp\IXP208.TMP\QuickTime.msi

C:\Users\win7\AppData\Local\Temp\WIN7-PC-20160408-0223.log

C:\Users\win7\AppData\Local\Temp\OfficeC2R57286048-F04B-4E42-BA4C-C02A19C3CCDD\v32.cab

C:\Users\win7\AppData\Local\Temp\OFFICE~1\v32.cab

C:\Users\win7\AppData\Local\Temp\OfficeC2R57286048-F04B-4E42-BA4C-C02A19C3CCDDOfficeC2R5ADC58C9-9588-442B-9901-9E6ADB7C2C4A\v32.hash

C:\Users\win7\AppData\Local\Temp\OfficeC2R57286048-F04B-4E42-BA4C-C02A19C3CCDDOfficeC2R5ADC58C9-9588-442B-9901-9E6ADB7C2C4A\VersionDescriptor.xml

C:\Users\win7\AppData\Local\Temp\OfficeC2R57286048-F04B-4E42-BA4C-C02A19C3CCDD\VersionDescriptor.xml

C:\Users\win7\AppData\Local\Microsoft\Office\16.0\sample_Rules.xml

C:\settings.xml

\License_Time.rdat

\RB.rdat

C:\Windows\system32\Images\StartScanButton.png

.\Images\StartScanButton.png

C:\Windows\system32\Images\StartScanButtonMouseOver.png

.\Images\StartScanButtonMouseOver.png

C:\images\bullet_list.png

C:\images/bullet_list.png

\\?\ide#diskvbox_harddisk___________________________1.0_____#5&33d1638a&0&0.0.0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}

C:\Windows\System32\bcdedit.exe

C:\Users\win7\AppData\Local\Temp\nss2403.tmp\StartMenu.dll

C:\Users\win7\AppData\Local\Temp\is-VCMTQ.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-VCMTQ.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-VCMTQ.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-VCMTQ.tmp\itdownload.dll

C:\Users\win7\AppData\Local\Temp\nsc48DB.tmp\LangDLL.dll

C:\Users\win7\AppData\Local\Temp\nsc48DB.tmp\ioSpecial.ini

C:\Users\win7\AppData\Local\Temp\nsc48DB.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nsc48DB.tmp\modern-header.bmp

C:\Users\win7\AppData\Local\Temp\nsc48DB.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nsc48DB.tmp\nsDialogs.dll

\\.\pipe\OperaCrashReporter2896

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160408080648.log

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160408080647.exe

C:\Users\win7\AppData\Local\Temp\PreVerC.log

1.217.786.0_TO_1.217.915.0_MPASDLTA.VDM._P

1.217.786.0_TO_1.217.915.0_MPAVDLTA.VDM._P

C:\Users\win7\AppData\Local\Temp\HFIA406.tmp.html

C:\Users\win7\AppData\Local\Temp\Setup_20160408_095844739.html

c:\c945c557281d253cbaaf\UiInfo.xml

c:\c945c557281d253cbaaf\ParameterInfo.xml

c:\c945c557281d253cbaaf\SplashScreen.bmp

c:\c945c557281d253cbaaf\1033\LocalizedData.xml

c:\c945c557281d253cbaaf\1025\LocalizedData.xml

c:\c945c557281d253cbaaf\1028\LocalizedData.xml

c:\c945c557281d253cbaaf\1029\LocalizedData.xml

c:\c945c557281d253cbaaf\1030\LocalizedData.xml

c:\c945c557281d253cbaaf\1031\LocalizedData.xml

c:\c945c557281d253cbaaf\1032\LocalizedData.xml

c:\c945c557281d253cbaaf\1035\LocalizedData.xml

c:\c945c557281d253cbaaf\1036\LocalizedData.xml

c:\c945c557281d253cbaaf\1037\LocalizedData.xml

c:\c945c557281d253cbaaf\1038\LocalizedData.xml

c:\c945c557281d253cbaaf\1040\LocalizedData.xml

c:\c945c557281d253cbaaf\1041\LocalizedData.xml

c:\c945c557281d253cbaaf\1042\LocalizedData.xml

c:\c945c557281d253cbaaf\1043\LocalizedData.xml

c:\c945c557281d253cbaaf\1044\LocalizedData.xml

c:\c945c557281d253cbaaf\1045\LocalizedData.xml

c:\c945c557281d253cbaaf\1046\LocalizedData.xml

c:\c945c557281d253cbaaf\1049\LocalizedData.xml

c:\c945c557281d253cbaaf\1053\LocalizedData.xml

c:\c945c557281d253cbaaf\1055\LocalizedData.xml

c:\c945c557281d253cbaaf\2052\LocalizedData.xml

c:\c945c557281d253cbaaf\2070\LocalizedData.xml

c:\c945c557281d253cbaaf\3076\LocalizedData.xml

c:\c945c557281d253cbaaf\3082\LocalizedData.xml

C:\Users\win7\AppData\Local\Temp\KB2979575v2_20160408_095845067.html

c:\c945c557281d253cbaaf\SetupUi.xsd

c:\c945c557281d253cbaaf\Strings.xml

C:\Users\win7\AppData\Local\Temp\HFIA6E8.tmp.html

c:\c945c557281d253cbaaf\graphics\print.ico

c:\c945c557281d253cbaaf\graphics\save.ico

c:\c945c557281d253cbaaf\graphics\setup.ico

c:\c945c557281d253cbaaf\header.bmp

c:\c945c557281d253cbaaf\watermark.bmp

c:\c945c557281d253cbaaf\1033\EULA.rtf

c:\c945c557281d253cbaaf\graphics\SysReqMet.ico

c:\c945c557281d253cbaaf\graphics\SysReqNotMet.ico

C:\Users\win7\AppData\Local\Temp\is-AM00S.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-AM00S.tmp\_isetup\_shfoldr.dll

\??\C:\Windows\system32\mssvp.dll

\??\C:\Windows\system32\NetworkExplorer.dll

1.217.740.0_TO_1.217.915.0_MPASDLTA.VDM._P

1.217.740.0_TO_1.217.915.0_MPAVDLTA.VDM._P

TAXI.CFG

c:\windows\system32\vboxdisp.dll

C:\Users\win7\AppData\Local\Temp\nsrAB20.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsrAB20.tmp\CityHash.dll

C:\Users\win7\AppData\Local\Temp\\~DF0B53CD81BB0F1993.TMP

C:\Users\win7\AppData\Local\Temp\WIN7-PC-20160408-1246.log

C:\Users\win7\AppData\Local\Temp\OfficeC2RE1424CFA-7CA5-4F87-9A41-C668CAA990AB\v32.cab

C:\Users\win7\AppData\Local\Temp\OfficeC2RE1424CFA-7CA5-4F87-9A41-C668CAA990ABOfficeC2RF20DB613-BB90-497D-A91B-613E5124E393\v32.hash

C:\Users\win7\AppData\Local\Temp\OfficeC2RE1424CFA-7CA5-4F87-9A41-C668CAA990ABOfficeC2RF20DB613-BB90-497D-A91B-613E5124E393\VersionDescriptor.xml

C:\Users\win7\AppData\Local\Temp\OfficeC2RE1424CFA-7CA5-4F87-9A41-C668CAA990AB\VersionDescriptor.xml

C:\Users\win7\AppData\Local\Temp\is-10N7G.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-10N7G.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\AMDSDKSetupMSI_amd64.log

C:\Windows\Installer\MSI2477.tmp

http://amd-dev.wpengine.netdna-cdn.com/app-sdk/installers/UnifiedSDKInstaller/1.3-Beta/web/x64/AMD SDK Installer 1.3.msi

https://autenticacao.gov.pt/fa/ajuda/autenticacaogovpt.aspx#installJava

C:\Users\win7\AppData\Local\Temp\LuResult.txt

C:\Users\win7\AppData\Local\Temp\comodo_temp_setup\csb_installer.exe

C:\Windows\system32\Macromed\Flash\mms.cfg

\??\C:\Users\win7\AppData\Local\Temp\acro_rd_dir

\??\C:\Users\win7\AppData\LocalLow\Microsoft\IMJP12

\??\C:\Users\win7\AppData\LocalLow\Microsoft\IME12

\??\C:\Users\win7\AppData\LocalLow\Microsoft\IMJP8_1

\??\C:\Users\win7\AppData\LocalLow\Microsoft\IMJP9_0

\??\C:\Users\win7\AppData\LocalLow\Microsoft\IMJP?_?

\??\C:\Users\win7\AppData\LocalLow\Microsoft

\??\C:\Users\win7\AppData\LocalLow\Microsoft\IME??

\??\C:\Users\win7\AppData\LocalLow\Microsoft\IMJP??

\??\C:\Users\win7\AppData\Roaming\Microsoft\Speech

\??\C:\Users\win7\AppData\Roaming\Adobe\Flash Player\AssetCache

\??\C:\Users\win7\AppData\Roaming\Adobe\Flash Player\AFCache

\??\C:\Users\win7\AppData\Roaming\Adobe\Flash Player\Icon Cache

\??\C:\Users\win7\AppData\Roaming\Adobe\Flash Player\APSPrivateData2

\??\C:\Users\win7\AppData\Roaming\Adobe\Flash Player\NativeCache

\??\C:\Users\win7\AppData\Roaming\Macromedia\Flash Player

\??\C:\Users\win7\AppData\Local\Macromedia\Flash Player

\??\C:\Users\win7\AppData\Roaming\Justsystem

\??\C:\Users\win7\AppData\Roaming

C:\ProgramData\F-Secure\Logs\CCF\PreInstallHandler.log

C:\uninstaller.cfg

C:\ProgramData\F-Secure\Logs\ComputerSecurity\setup\uninstaller.log

C:\Users\win7\AppData\Local\Temp\nsmA8F3.tmp\LangDLL.dll

C:\Users\win7\AppData\Local\Temp\nsmA8F3.tmp\ioSpecial.ini

C:\Users\win7\AppData\Local\Temp\nsmA8F3.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nsmA8F3.tmp\modern-header.bmp

C:\Users\win7\AppData\Local\Temp\nsmA8F3.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nsmA8F3.tmp\nsDialogs.dll

\\.\aswSP

C:\Users\win7\AppData\Local\Temp\nss4B9F.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\nss4B9F.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nss4B9F.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nss4B9F.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nss4B9F.tmp\ExecDos.dll

C:\Users\win7\AppData\Local\Temp\nss4B9F.tmp\IpConfig.dll

C:\Users\win7\AppData\Local\Temp\nss4B9F.tmp\NSISEncrypt.dll

C:\Users\win7\AppData\Local\Temp\nss4B9F.tmp\WmiInspector.dll

C:\Users\win7\AppData\Local\Temp\nss4B9F.tmp\inetc.dll

C:\Users\win7\AppData\Local\Temp\nss4B9F.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Temp\nss4B9F.tmp\nsExec.dll

C:\Windows\Temp\EZInst.log

\\?\C:\Windows\system32\Macromed\Flash\mms.cfg

\\?\C:\Windows\system32\mms.cfg

\\?\C:\Users\win7\mm.cfg

\\?\C:\Users\win7\AppData\Local\Temp\AIRB1EA.tmp\setup.swf

\\?\C:\Users\win7\AppData\Local\Temp\flaC514.tmp

C:\Users\win7\AppData\Roaming\Macromedia

C:\Users\win7\AppData\Roaming\Macromedia\Flash Player

C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\#Security

\\?\C:\Windows\system32\Macromed\Flash\FlashAuthor.cfg

\\?\C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\#Security\FlashAuthor.cfg

\\?\C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\#Security\FlashPlayerTrust\air.1.0.trust.cfg

\\?\C:\Users\win7\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx

C:\Users\win7\AppData\Local\Temp\AIRB1EA.tmp\Adobe AIR Installer.exe

C:\Users\win7\AppData\Local\Temp\AIRB1EA.tmp\Adobe AIR/sentinel

C:\Users\win7\AppData\Local\Temp\AIRB1EA.tmp\Adobe AIR/Versions/1.0/Adobe AIR Application Installer.exe

C:\Users\win7\AppData\Local\Temp\AIRB1EA.tmp\Adobe AIR/Versions/1.0/Adobe AIR Application Installer.swf

C:\Users\win7\AppData\Local\Temp\AIRB1EA.tmp\Adobe AIR/Versions/1.0/Adobe AIR.dll

C:\Users\win7\AppData\Local\Temp\AIRB1EA.tmp\Adobe AIR/Versions/1.0/Resources/Adobe AIR Updater.exe

C:\Users\win7\AppData\Local\Temp\AIRB1EA.tmp\Adobe AIR/Versions/1.0/Resources/Adobe Root Certificate.cer

C:\Users\win7\AppData\Local\Temp\AIRB1EA.tmp\Adobe AIR/Versions/1.0/Resources/AdobeCP.dll

C:\Users\win7\AppData\Local\Temp\AIRB1EA.tmp\Adobe AIR/Versions/1.0/Resources/airappinstaller.exe

C:\Users\win7\AppData\Local\Temp\AIRB1EA.tmp\Adobe AIR/Versions/1.0/Resources/digest.s

C:\Users\win7\AppData\Local\Temp\AIRB1EA.tmp\Adobe AIR/Versions/1.0/Resources/NPSWF32.dll

C:\Users\win7\AppData\Local\Temp\AIRB1EA.tmp\Adobe AIR/Versions/1.0/Resources/setup.swf

C:\Users\win7\AppData\Local\Temp\AIRB1EA.tmp\Adobe AIR/Versions/1.0/Resources/template.exe

C:\Users\win7\AppData\Local\Temp\AIRB1EA.tmp\Adobe AIR/Versions/1.0/Resources/template.msi

C:\Users\win7\AppData\Local\Temp\AIRB1EA.tmp\Adobe AIR/Versions/1.0/Resources/Thawte Root Certificate.cer

C:\Users\win7\AppData\Local\Temp\AIRB1EA.tmp\Adobe AIR/Versions/1.0/Resources/WebKit.dll

C:\Users\win7\AppData\Local\Temp\AIRB1EA.tmp\setup.msi

C:\Users\win7\AppData\Local\Temp\AIRB1EA.tmp\setup.swf

C:\ProgramData\Battle.net\Setup\wow\Logs\battle.net-setup-20160408T131410.398367.log

C:\Users\win7\AppData\Local\Temp\nskEB02.tmp\ioSpecial.ini

C:\Users\win7\AppData\Local\Temp\nskEB02.tmp\PageBG.bmp

C:\Users\win7\AppData\Local\Temp\nskEB02.tmp\ButtonImg.bmp

C:\Users\win7\AppData\Local\Temp\nskEB02.tmp\ScrollBarImg.bmp

C:\Users\win7\AppData\Local\Temp\nskEB02.tmp\SkinnedControls.dll

C:\Users\win7\AppData\Local\Temp\nskEB02.tmp\NSISArray.dll

C:\Users\win7\AppData\Local\Temp\nskEB02.tmp

C:\Users\win7\AppData\Local\Temp\nskEB02.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nskEB02.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nskEB02.tmp\btag.dll

C:\Windows\SysWOW64\scrrun.dll

C:\Users\win7\AppData\Roaming\ViStart\nuke_metro.ini

C:\Windows\system32\MSVBVM60.DLL

C:\Windows\SysWOW64\wshom.ocx

C:\Users\win7\AppData\Roaming\ViStart\errors.log

C:\WINDOWS\NOTEPAD.EXE

C:\WINDOWS\NOTEPAD.EXE\desktop.ini

C:\WINDOWS\SYSTEM32\CALC.EXE

C:\WINDOWS\SYSTEM32\CALC.EXE\desktop.ini

C:\WINDOWS\SYSTEM32\CMD.EXE

C:\WINDOWS\SYSTEM32\CMD.EXE\desktop.ini

C:\PLUGINS\METROPROVIDER.EXE

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\setup.msi

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\FED7A12F\basebg.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\3F1A2E3C\basecurve-left.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\3F1A2E3C\basecurve-right.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\FED7A12F\btn_websitelink.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\3247EA44\jd_emb002_02.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\3247EA44\jd_emb002_04.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\3247EA44\jd_emb002_07.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\3247EA44\jd_emb002_10.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\C012AD5A\jd_emb036_02.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\89836BA2\leftbg3.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\FED7A12F\leftbg4.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\FED7A12F\leftinnerblue.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\3F1A2E3C\logo.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\FED7A12F\main1.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\FED7A12F\main2.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\89836BA2\mainbg3.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\3247EA44\mainpic.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\3F1A2E3C\mainpic2.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\C012AD5A\mainpic5.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\E72374F0\mainpic6.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\C012AD5A\mainpictop.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\3F1A2E3C\mftico.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\3247EA44\more_info.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\89836BA2\rightbg3.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\FED7A12F\rightbg4.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\FED7A12F\rightinnerblue.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\E72374F0\sidetop.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\7BF78FBD\sidetop2.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\D5A8265B\sidetop3.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\3247EA44\spacer.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\3F1A2E3C\spacer.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\7BF78FBD\spacer.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\D5A8265B\spacer.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\E72374F0\spacer.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\FED7A12F\specialoffer.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\89836BA2\topbar.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\E72374F0\toplogo2.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\7BF78FBD\toplogo3.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\D5A8265B\toplogo4.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\3F1A2E3C\toptreatment.gif

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\7BF78FBD\mainpic.jpg

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\D5A8265B\mainpic7.jpg

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\C1C01A3A\Preview.JPG

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\1386B4BB\Preview.JPG

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\15D0D5F\Preview.JPG

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\B9925CD\Preview.JPG

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\FB58F88D\Preview.JPG

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\997C75DF\Preview.JPG

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\5803B21A\Preview.JPG

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\A377A5CF\Preview.JPG

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\67385181\User Image.JPG

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\89836BA2\Message.htm

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\3F1A2E3C\Message.htm

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\FED7A12F\Message.htm

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\C012AD5A\Message.htm

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\E72374F0\Message.htm

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\7BF78FBD\Message.htm

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\D5A8265B\Message.htm

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF350\3247EA44\Message.htm

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF328\D1482367\additionalbuttons.txt

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF328\D1482367\additionalfields.txt

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF328\D1482367\additionalhiddenfield.txt

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF328\D1482367\additionalscript.txt

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF328\D1482367\signin.txt

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF328\6A383B6E\ContactLists.mdb

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF328\6A383B6E\Log.mdb

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF328\6A383B6E\SendingResults.mdb

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF328\6A383B6E\Tracking.mdb

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF339\A02978A6\Mailer.exe

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\setup.exe

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF349\97012198\adodb.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF329\A02978A6\AxInterop.SHDocVw.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF348\A02978A6\BounceEmailProcessor.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF346\A852DFD3\BounceEmailProcessor.resources.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF358\A8AC68A4\BounceEmailProcessor.resources.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF347\5DE9D1A4\BounceEmailProcessor.resources.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF364\78D51FE1\BounceEmailProcessor.resources.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF359\463A7F91\BounceEmailProcessor.resources.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF357\E215ABA4\BounceEmailProcessor.resources.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF356\BBAA5B20\BounceEmailProcessor.resources.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF330\A02978A6\Common.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF358\A8AC68A4\Common.resources.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF364\78D51FE1\Common.resources.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF359\463A7F91\Common.resources.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF357\E215ABA4\Common.resources.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF356\BBAA5B20\Common.resources.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF346\A852DFD3\Common.resources.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF347\5DE9D1A4\Common.resources.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF365\A02978A6\DevExpress.BonusSkins.v11.1.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF366\A02978A6\DevExpress.Charts.v11.1.Core.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF367\A02978A6\DevExpress.Data.v11.1.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF368\A02978A6\DevExpress.OfficeSkins.v11.1.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF369\A02978A6\DevExpress.Printing.v11.1.Core.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF370\A02978A6\DevExpress.Utils.v11.1.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF371\A02978A6\DevExpress.XtraBars.v11.1.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF372\A02978A6\DevExpress.XtraCharts.v11.1.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF373\A02978A6\DevExpress.XtraCharts.v11.1.UI.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF374\A02978A6\DevExpress.XtraEditors.v11.1.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF375\A02978A6\DevExpress.XtraGrid.v11.1.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF376\A02978A6\DevExpress.XtraLayout.v11.1.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF377\A02978A6\DevExpress.XtraNavBar.v11.1.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF331\A02978A6\ICSharpCode.SharpZipLib.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF332\A02978A6\Interop.Excel.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF333\A02978A6\Interop.Microsoft.Office.Core.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF334\A02978A6\Interop.MSDASC.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF335\A02978A6\Interop.MSScriptControl.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF336\A02978A6\Interop.Outlook.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF337\A02978A6\Interop.SHDocVw.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF345\D991067D\JRO.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF338\A02978A6\Lists.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF346\A852DFD3\Lists.resources.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF358\A8AC68A4\Lists.resources.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF347\5DE9D1A4\Lists.resources.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF364\78D51FE1\Lists.resources.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF359\463A7F91\Lists.resources.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF357\E215ABA4\Lists.resources.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF356\BBAA5B20\Lists.resources.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF346\A852DFD3\Mailer.resources.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF358\A8AC68A4\Mailer.resources.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF347\5DE9D1A4\Mailer.resources.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF364\78D51FE1\Mailer.resources.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF359\463A7F91\Mailer.resources.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF357\E215ABA4\Mailer.resources.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF356\BBAA5B20\Mailer.resources.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\mDotNet.dll\mDotNetExec.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF344\D991067D\Microsoft.mshtml.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\mMDACRun.dll\mMDACExec.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\mMSI.dll\mMSIExec.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\mWinRun.dll\mWinRunExec.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF352\A02978A6\NetSpell.SpellChecker.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF340\A02978A6\Network.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF346\A852DFD3\Network.resources.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF358\A8AC68A4\Network.resources.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF347\5DE9D1A4\Network.resources.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF364\78D51FE1\Network.resources.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF359\463A7F91\Network.resources.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF357\E215ABA4\Network.resources.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF356\BBAA5B20\Network.resources.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF341\A02978A6\Office.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF342\A02978A6\SourceGrid2.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF343\A02978A6\WABHelper.dll

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\mia.lib

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF353\CC89FBED\de-DE.dic

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF361\CC89FBED\en-AU.dic

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF362\CC89FBED\en-CA.dic

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF351\CC89FBED\en-US.dic

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF360\CC89FBED\es-ES.dic

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF363\CC89FBED\es-MX.dic

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\OFFLINE\IF354\CC89FBED\fr-FR.dic

C:\Users\win7\AppData\Local\Temp\miaFE1F.tmp\setup.res

C:\ProgramData\capin.zip

C:\ProgramData\capiroto.exe

C:\Users\win7\AppData\Local\Temp\{7C42A9E5-4E2D-470a-8ABF-343787A937A1}.tmp

C:\Users\win7\AppData\Local\Temp\{97937BFE-5F33-426a-9C72-F21F4A2A208E}.tmp\360P2SP.dll

C:\Users\win7\AppData\Roaming\360Safe\LiveUpdateLog\P2SP.log

C:\Users\win7\AppData\Local\Temp\{C67BF7CF-284E-495a-A405-8AF7E5E78A98}.tmp

C:\Users\win7\AppData\Local\Temp\!@tCE7F.tmp

C:\Users\win7\AppData\Local\Temp\!@tCE7F.tmp.P2P

C:\Users\win7\AppData\Local\Temp\C__Users_win7_AppData_Local_Temp_!@tCE7F.tmp.mem

C:\Users\win7\AppData\Local\Temp\!@tCE7F.tmp.dir\setup.ini

C:\Users\win7\AppData\Local\Temp\!@tCE7F.tmp.dir\Setup.ini

C:\360TS_Setup.exe

C:\360TS_Setup.exe.P2P

C:\Users\win7\AppData\Local\Temp\C__360TS_Setup.exe.mem

C:\Users\win7\AppData\Local\Temp\C__360TS_Setup.exe.trt

C:\Users\win7\AppData\Local\Temp\nsjF670.tmp

C:\Users\win7\AppData\Local\Temp\nsyF680.tmp\uninstall_dialog.ini

C:\Users\win7\AppData\Local\Temp\nsyF680.tmp\InstallOptions.dll

C:\sample_debug.log

NUL

C:\Windows\system32\wbem\XSL-Mappings.xml

C:\Users\win7\AppData\Local\Temp\81460127270.txt

C:\Users\win7\AppData\Local\Temp\befbccbddg.exe

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\DynamicOfferScreen[1].htm

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\bodyImg[1].png

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\dc[1].js

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0Q58CC5A\button_over[1].png

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\button[1].png

C:\Users\win7\AppData\Local\Temp\nsxBF7C.tmp

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\sample

C:\CFVS_HookDll.dll

C:\Windows\syswow64\WS2_32.dll

C:\Windows\syswow64\msvcrt.dll

C:\Windows\syswow64\RPCRT4.dll

C:\Windows\syswow64\SspiCli.dll

C:\Windows\syswow64\CRYPTBASE.dll

C:\Windows\SysWOW64\sechost.dll

C:\Windows\syswow64\NSI.dll

C:\Windows\syswow64\urlmon.dll

C:\Windows\syswow64\api-ms-win-downlevel-ole32-l1-1-0.dll

C:\Windows\syswow64\ole32.DLL

C:\Windows\syswow64\GDI32.dll

C:\Windows\syswow64\USER32.dll

C:\Windows\syswow64\ADVAPI32.dll

C:\Windows\syswow64\LPK.dll

C:\Windows\syswow64\USP10.dll

C:\Windows\syswow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll

C:\Windows\syswow64\shlwapi.DLL

C:\Windows\syswow64\api-ms-win-downlevel-advapi32-l1-1-0.dll

C:\Windows\syswow64\api-ms-win-downlevel-user32-l1-1-0.dll

C:\Windows\syswow64\api-ms-win-downlevel-version-l1-1-0.dll

C:\Windows\system32\version.DLL

C:\Windows\syswow64\api-ms-win-downlevel-normaliz-l1-1-0.dll

C:\Windows\syswow64\normaliz.DLL

C:\Windows\syswow64\iertutil.dll

C:\Windows\syswow64\WININET.dll

C:\Windows\syswow64\USERENV.dll

C:\Windows\syswow64\profapi.dll

C:\Windows\system32\DNSAPI.dll

C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d\comctl32.dll

C:\Windows\syswow64\comdlg32.dll

C:\Windows\syswow64\SHELL32.dll

C:\Windows\system32\hhctrl.ocx

C:\Windows\syswow64\OLEAUT32.dll

C:\Windows\syswow64\imagehlp.dll

C:\Windows\syswow64\imm32.dll

C:\Windows\syswow64\MSCTF.dll

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\lua5.1-32.dll

C:\Windows\system32\opengl32.dll

C:\Windows\system32\GLU32.dll

C:\Windows\system32\DDRAW.dll

C:\Windows\system32\DCIMAN32.dll

C:\Windows\syswow64\SETUPAPI.dll

C:\Windows\syswow64\CFGMGR32.dll

C:\Windows\syswow64\DEVOBJ.dll

C:\Windows\system32\dwmapi.dll

C:\Windows\system32\wsock32.dll

C:\Windows\system32\msimg32.dll

C:\Windows\system32\uxtheme.dll

C:\Windows\syswow64\CLBCatQ.DLL

C:\Windows\system32\explorerframe.dll

C:\Windows\system32\DUser.dll

C:\Windows\system32\DUI70.dll

C:\Windows\system32\shfolder.dll

C:\Windows\syswow64\psapi.dll

C:\Windows\system32\propsys.dll

C:\Windows\system32\ntmarta.dll

C:\Windows\syswow64\WLDAP32.dll

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\sample.dbg

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\sample.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\exe\sample.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\exe\sample.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\wntdll.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\wntdll.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\wntdll.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\wkernel32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\wkernel32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\wkernel32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\wkernelbase.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\wkernelbase.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\wkernelbase.pdb

wkernelbase.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\CFVS_HookDll.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\CFVS_HookDll.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\CFVS_HookDll.pdb

C:\DETECTION_REPO\Valkyrie_Dynamic\CAMAS\CamasNative\CFVS_HookDll\Release\CFVS_HookDll.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\ws2_32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\ws2_32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\ws2_32.pdb

ws2_32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\msvcrt.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\msvcrt.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\msvcrt.pdb

msvcrt.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\wrpcrt4.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\wrpcrt4.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\wrpcrt4.pdb

wrpcrt4.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\wsspicli.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\wsspicli.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\wsspicli.pdb

wsspicli.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\cryptbase.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\cryptbase.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\cryptbase.pdb

cryptbase.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\sechost.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\sechost.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\sechost.pdb

sechost.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\nsi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\nsi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\nsi.pdb

nsi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\urlmon.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\urlmon.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\urlmon.pdb

urlmon.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\api-ms-win-downlevel-ole32-l1-1-0.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\api-ms-win-downlevel-ole32-l1-1-0.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\api-ms-win-downlevel-ole32-l1-1-0.pdb

api-ms-win-downlevel-ole32-l1-1-0.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\ole32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\DLL\ole32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\DLL\ole32.pdb

ole32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\wgdi32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\wgdi32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\wgdi32.pdb

wgdi32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\wuser32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\wuser32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\wuser32.pdb

wuser32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\advapi32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\advapi32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\advapi32.pdb

advapi32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\wlpk.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\wlpk.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\wlpk.pdb

wlpk.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\usp10.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\usp10.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\usp10.pdb

usp10.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\api-ms-win-downlevel-shlwapi-l1-1-0.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\api-ms-win-downlevel-shlwapi-l1-1-0.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\api-ms-win-downlevel-shlwapi-l1-1-0.pdb

api-ms-win-downlevel-shlwapi-l1-1-0.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\shlwapi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\DLL\shlwapi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\DLL\shlwapi.pdb

shlwapi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\api-ms-win-downlevel-advapi32-l1-1-0.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\api-ms-win-downlevel-advapi32-l1-1-0.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\api-ms-win-downlevel-advapi32-l1-1-0.pdb

api-ms-win-downlevel-advapi32-l1-1-0.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\api-ms-win-downlevel-user32-l1-1-0.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\api-ms-win-downlevel-user32-l1-1-0.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\api-ms-win-downlevel-user32-l1-1-0.pdb

api-ms-win-downlevel-user32-l1-1-0.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\api-ms-win-downlevel-version-l1-1-0.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\api-ms-win-downlevel-version-l1-1-0.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\api-ms-win-downlevel-version-l1-1-0.pdb

api-ms-win-downlevel-version-l1-1-0.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\version.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\DLL\version.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\DLL\version.pdb

version.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\api-ms-win-downlevel-normaliz-l1-1-0.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\api-ms-win-downlevel-normaliz-l1-1-0.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\api-ms-win-downlevel-normaliz-l1-1-0.pdb

api-ms-win-downlevel-normaliz-l1-1-0.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\normaliz.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\DLL\normaliz.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\DLL\normaliz.pdb

normaliz.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\iertutil.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\iertutil.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\iertutil.pdb

iertutil.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\wininet.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\wininet.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\wininet.pdb

wininet.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\userenv.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\userenv.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\userenv.pdb

userenv.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\profapi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\profapi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\profapi.pdb

profapi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dnsapi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\dnsapi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\dnsapi.pdb

dnsapi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\comctl32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\comctl32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\comctl32.pdb

comctl32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\comdlg32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\comdlg32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\comdlg32.pdb

comdlg32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\shell32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\shell32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\shell32.pdb

shell32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\hhctrl.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\ocx\hhctrl.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\ocx\hhctrl.pdb

hhctrl.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\oleaut32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\oleaut32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\oleaut32.pdb

oleaut32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\imagehlp.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\imagehlp.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\imagehlp.pdb

imagehlp.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\wimm32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\wimm32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\wimm32.pdb

wimm32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\msctf.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\msctf.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\msctf.pdb

msctf.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\lua5.1-32.dbg

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\lua5.1-32.dbg

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\lua5.1-32.dbg

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\lua5.1-32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\lua5.1-32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\lua5.1-32.pdb

lua5.1-32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\opengl32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\opengl32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\opengl32.pdb

opengl32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\glu32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\glu32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\glu32.pdb

glu32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\ddraw.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\ddraw.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\ddraw.pdb

ddraw.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dciman32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\dciman32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\dciman32.pdb

dciman32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\setupapi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\setupapi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\setupapi.pdb

setupapi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\cfgmgr32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\cfgmgr32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\cfgmgr32.pdb

cfgmgr32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\devobj.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\devobj.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\devobj.pdb

devobj.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dwmapi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\dwmapi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\dwmapi.pdb

dwmapi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\wsock32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\wsock32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\wsock32.pdb

wsock32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\msimg32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\msimg32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\msimg32.pdb

msimg32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\wuxtheme.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\wuxtheme.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\wuxtheme.pdb

wuxtheme.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\CLBCatQ.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\DLL\CLBCatQ.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\DLL\CLBCatQ.pdb

CLBCatQ.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\ExplorerFrame.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\ExplorerFrame.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\ExplorerFrame.pdb

ExplorerFrame.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\DUser.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\DUser.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\DUser.pdb

DUser.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\DUI70.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\DUI70.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\DUI70.pdb

DUI70.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\shfolder.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\shfolder.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\shfolder.pdb

shfolder.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\psapi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\psapi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\psapi.pdb

psapi.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\propsys.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\propsys.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\propsys.pdb

propsys.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\ntmarta.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\ntmarta.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\ntmarta.pdb

ntmarta.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\wldap32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\wldap32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\wldap32.pdb

wldap32.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dbghelp.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\dll\dbghelp.pdb

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\symbols\dll\dbghelp.pdb

dbghelp.pdb

defines.lua

C:\Users\win7\AppData\Local\Temp\cetrainers\CETA39B.tmp\extracted\CET_TRAINER.CETRAINER

C:\Users\win7\AppData\Roaming\Wargaming.net\WorldOfTanks\tundra_keys_v2.txt

C:\Users\win7\AppData\Local\Temp\prey-install.log

C:\Users\win7\AppData\Local\Temp\nsg898D.tmp

C:\Users\win7\AppData\Local\Temp\nsv899D.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsv899D.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\nsv899D.tmp\modern-header.bmp

C:\Users\win7\AppData\Local\Temp\nsv899D.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nsv899D.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\prey-windows-1.5.1-x86.msi

C:\Users\win7\AppData\Local\Temp\nszF854.tmp\System.dll

C:\winrar.lng

C:\Themes

C:\WinRAR.exe

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk

C:\WinRAR.chm

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR help.lnk

C:\Rar.txt

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Console RAR manual.lnk

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR help.lnk

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Console RAR manual.lnk

C:\Users\win7\AppData\Local\Temp\GUM5C61.tmp\goopdate.dll

C:\ProgramData\Dropbox\Update\Log\DropboxUpdate.log-2016-04-08-15-51-49-503-2592

C:\Users\win7\AppData\Local\Temp\WER2BEB.tmp.WERInternalMetadata.xml

C:\Users\win7\AppData\Local\Temp\WER2BEC.tmp.hdmp

C:\Windows\SYSTEM32\MSCOREE.DLL

C:\Windows\syswow64\KERNEL32.dll

C:\Windows\system32\IMM32.DLL

C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll

C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc\MSVCR80.dll

C:\Windows\syswow64\shell32.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll

C:\Windows\syswow64\WINTRUST.dll

C:\Windows\syswow64\CRYPT32.dll

C:\Windows\syswow64\MSASN1.dll

C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_ec86b8d6858ec0bc\COMCTL32.dll

C:\Windows\system32\CRYPTSP.dll

C:\Windows\system32\ncrypt.dll

C:\Windows\system32\bcrypt.dll

C:\Windows\SysWOW64\bcryptprimitives.dll

C:\Windows\system32\GPAPI.dll

C:\Windows\system32\cryptnet.dll

C:\Windows\system32\SensApi.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System\908ba9e296e92b4e14bdc2437edac603\System.ni.dll

C:\Windows\system32\apphelp.dll

C:\Windows\System32\mscoree.dll

C:\Windows\SysWOW64\kernel32.dll

C:\Windows\SysWOW64\KERNELBASE.dll

C:\Windows\SysWOW64\ws2_32.dll

C:\Windows\SysWOW64\msvcrt.dll

C:\Windows\SysWOW64\rpcrt4.dll

C:\Windows\SysWOW64\sspicli.dll

C:\Windows\SysWOW64\CRYPTBASE.dll

C:\Windows\SysWOW64\nsi.dll

C:\Windows\SysWOW64\urlmon.dll

C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll

C:\Windows\SysWOW64\ole32.dll

C:\Windows\SysWOW64\gdi32.dll

C:\Windows\SysWOW64\user32.dll

C:\Windows\SysWOW64\advapi32.dll

C:\Windows\SysWOW64\lpk.dll

C:\Windows\SysWOW64\usp10.dll

C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll

C:\Windows\SysWOW64\shlwapi.dll

C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll

C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll

C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll

C:\Windows\System32\version.dll

C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll

C:\Windows\SysWOW64\normaliz.dll

C:\Windows\SysWOW64\iertutil.dll

C:\Windows\SysWOW64\wininet.dll

C:\Windows\SysWOW64\userenv.dll

C:\Windows\SysWOW64\profapi.dll

C:\Windows\System32\dnsapi.dll

C:\Windows\System32\imm32.dll

C:\Windows\SysWOW64\msctf.dll

C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc\msvcr80.dll

C:\Windows\SysWOW64\shell32.dll

C:\Windows\SysWOW64\wintrust.dll

C:\Windows\SysWOW64\crypt32.dll

C:\Windows\SysWOW64\msasn1.dll

C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_ec86b8d6858ec0bc\comctl32.dll

C:\Windows\System32\cryptsp.dll

C:\Windows\System32\rsaenh.dll

C:\Windows\SysWOW64\imagehlp.dll

C:\Windows\System32\ncrypt.dll

C:\Windows\System32\bcrypt.dll

C:\Windows\System32\gpapi.dll

C:\Windows\System32\cryptnet.dll

C:\Windows\SysWOW64\Wldap32.dll

C:\Windows\System32\SensApi.dll

C:\Windows\System32\propsys.dll

C:\Windows\SysWOW64\oleaut32.dll

C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d\comctl32.dll

C:\Windows\SysWOW64\setupapi.dll

C:\Windows\SysWOW64\cfgmgr32.dll

C:\Windows\SysWOW64\devobj.dll

C:\Windows\System32\apphelp.dll

C:\Users\win7\AppData\Local\Temp\WER3EF8.tmp.mdmp

C:\Windows\system32\PROPSYS.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\WER\ReportQueue

C:\Users\win7\AppData\Local\Microsoft\Windows\WER\ReportQueue\AppCrash_sample_15968e93b28c8f55d76e8a757e889bc6eab8e9_cab_064c3fa2\Report.wer

C:\Users\win7\AppData\Local\Temp\nsl8A49.tmp\nsExec.dll

C:\Users\win7\AppData\Local\Temp\nsl8A49.tmp\[RANDOM_STRING].7z

C:\Users\win7\AppData\Local\Temp\nsl8A49.tmp\7za.exe

C:\Microsoft Visual C++ 2005 Redistributable.dat

C:\Users\win7\AppData\Local\Temp\is-CUTSA.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-CUTSA.tmp\_isetup\_shfoldr.dll

C:\library.dat

C:\Users\win7\AppData\Local\Temp\nstF6AE.tmp

C:\Users\win7\AppData\Local\Temp\nsjF6BF.tmp\Banner.dll

C:\Users\win7\AppData\Local\Temp\nsjF6BF.tmp\inetc.dll

C:\Users\win7\AppData\Local\Temp\nsjF6BF.tmp\ti.dat

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\status[1].htm

C:\Users\win7\AppData\Local\Temp\nsjF6BF.tmp\tmp.txt

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\kaola72conf2[1].ini

C:\Users\win7\AppData\Local\Temp\nsjF6BF.tmp\RC4dll.dll

C:\Users\win7\AppData\Local\Temp\nsjF6BF.tmp\tmp2.txt

C:\Users\win7\AppData\Local\Temp\nsjF6BF.tmp\Unicode.dll

C:\Users\win7\AppData\Local\Temp\nsjF6BF.tmp\config.ini

C:\Users\win7\AppData\Local\Temp\81460134285.txt

C:\Windows\system32\wbem\\texttable.xsl

C:\Windows\system32\wbem\texttable.xsl

\\.\pipe\OperaCrashReporter2668

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160408195642.log

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160408195641.exe

C:\Users\win7\AppData\Local\Temp\is-JRQLE.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-JRQLE.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-JRQLE.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-JRQLE.tmp\TempkillProcess.dll

C:\Users\win7\AppData\Local\Temp\is-JRQLE.tmp\KPByName.dll

Users.txt

HotFolders.txt

msrle32.dll

msvidc32.dll

msyuv.dll

iyuv_32.dll

tsbyuv.dll

iccvid.dll

C:\Users\win7\AppData\Local\Temp\is-9G5QF.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\is-62P8P.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-62P8P.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-62P8P.tmp\OCSetupHlp.dll

C:\Users\win7\AppData\Local\Temp\ipw326E.tmp

C:\Users\win7\AppData\Local\Temp\ipw327F.tmp

C:\Users\win7\AppData\Local\Temp\ipw3280.tmp

C:\Users\win7\AppData\Local\Temp\ipw3475.tmp

C:\Users\win7\AppData\Local\Temp\ipw3495.tmp

C:\Users\win7\AppData\Local\Temp\ipw34B5.tmp

C:\Users\win7\AppData\Local\IconCache.db

C:\TOAD.LIC

C:\data

C:\Users\win7\AppData\Local\Temp\81460137333.txt

C:\Users\win7\AppData\Local\Temp\befbbcebdg.exe

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\89Q863BS\button_over[1].png

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\button[1].png

1.217.680.0_TO_1.217.955.0_MPASDLTA.VDM._P

1.217.680.0_TO_1.217.955.0_MPAVDLTA.VDM._P

C:\Users\win7\AppData\Local\Temp\tmp_gui\tmp_0\tmp_2184_1.dat

C:\Users\win7\AppData\Local\Temp\nswFE9D.tmp\LangDLL.dll

C:\Users\win7\AppData\Local\Temp\nswFE9D.tmp\InstallType.ini

C:\Users\win7\AppData\Local\Temp\nswFE9D.tmp\ioSpecial.ini

C:\Users\win7\AppData\Local\Temp\nswFE9D.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nswFE9D.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nswFE9D.tmp\InstallOptions.dll

C:\Users\win7\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3979321414-2393373014-2172761192-1000\58b8aea4ae7184a912187a66498d9b0c_c4b6765a-c53d-4b48-b576-0e1db4e9f3bc

C:\sample.tmp1

C:\Users\win7\AppData\Local\Temp\jki55C5.tmp

C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll

C:\Users\win7\AppData\Local\Temp\97937bfe-5f33-426a-9c72-f21f4a2a208e\bin.dmc

C:\Users\win7\AppData\Local\Temp\97937bfe-5f33-426a-9c72-f21f4a2a208e\bin\bin.html

C:\Windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll

C:\Users\win7\AppData\Local\Temp\is-G0RUC.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-G0RUC.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-G0RUC.tmp\isskinU.dll

C:\Users\win7\AppData\Local\Temp\is-G0RUC.tmp\ChromeXP.cjstyles

C:\ProgramData\8708eaaa-1c2b-4faa-8923-a6c9f88eeb0e\temp

C:\Users\win7\AppData\Local\Temp\pft3B88.tmp\Disk1\Setup.ini

C:\Users\win7\AppData\Local\Temp\pft3B88.tmp\Disk1\Setup.inx

C:\Users\win7\AppData\Local\Temp\pft3B88.tmp\Disk1\layout.bin

C:\Users\win7\AppData\Local\Temp\nst8254.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nst8254.tmp\nsRandom.dll

C:\Users\win7\AppData\Local\Temp\821880\GMSkin_Image_2012_v1.zip

C:\Users\win7\AppData\Local\Temp\821880\MyNsisSkin.dll

C:\Users\win7\AppData\Local\Temp\821880\game.jpg

C:\Users\win7\AppData\Local\Temp\nst8254.tmp\MyNsisExtend.dll

C:\Users\win7\AppData\Local\Temp\nst8254.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nst8254.tmp\ButtonEvent.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\game_get[1].xml

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\report_mini_info[1].66919&sip=&drc=20000&dt=0&firc=100&oldid=VB505af8-08002763E612!390383cd-9143-4af7-93c1-cca8b896c1e9@#08002763E612

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\report_mini_info[1].96&drc=20000&dt=0&firc=100&oldid=VB505af8-08002763E612!390383cd-9143-4af7-93c1-cca8b896c1e9@#08002763E612

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\downinfo[1].htm

C:\Users\win7\AppData\Local\Temp\baidu_secure\update\test4822FBB5_0309_420f_9DA2_FA5B8B854946\test4822FBB5_0309_420f_9DA2_FA5B8B854947.txt

C:\Users\win7\AppData\Local\Temp\baidu_secure

C:\Users\win7\AppData\Local\Temp\baidu_secure\update

C:\Users\win7\AppData\Local\Temp\baidu_secure\update\test4822FBB5_0309_420f_9DA2_FA5B8B854946

C:\Users\win7\AppData\Local\Temp\baidu_secure\update\newver.xml

C:\Windows\Logs\DirectX.log

C:\Windows\Logs\DXError.log

C:\Users\win7\AppData\Local\Temp\~unins9883.bat

C:\Windows\SysWOW64\dpnaddrw.exe.config

C:\Windows\SysWOW64\WScript.exe

C:\Users\win7\AppData\Local\Temp\fufEF51.js

C:\Users\win7\AppData\Local\Temp\fufEF51.exe

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\OBQSRGI0.htm

C:\Windows\System32\WScript.exe

keybind.dat

1.217.861.0_TO_1.217.970.0_MPASDLTA.VDM._P

1.217.861.0_TO_1.217.970.0_MPAVDLTA.VDM._P

http://go.microsoft.com/fwlink/?linkid=182804

C:\Users\win7\AppData\Local\Temp\nsq91FF.tmp

C:\Users\win7\AppData\Local\Temp\nsg9210.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsg9210.tmp\LangDLL.dll

C:\Users\win7\AppData\Local\Temp\nsg9210.tmp\installer.dll

C:\Users\win7\AppData\Local\Temp\nsg9210.tmp\exdll.dll

C:\Users\win7\AppData\Local\Temp\nsg9210.tmp\UserInfo.dll

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\YXCY2N06.txt

C:\Users\win7\AppData\Local\Temp\nsg9210.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nsg9210.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nsg9210.tmp\logo.bmp

C:\Users\win7\AppData\Roaming\System Healer\Languages\English.xml

C:\Users\win7\AppData\Roaming\System Healer\Languages\Swedish.xml

C:\Users\win7\AppData\Roaming\System Healer\Languages\French.xml

C:\Users\win7\AppData\Roaming\System Healer\Languages\German.xml

C:\Users\win7\AppData\Roaming\System Healer\Languages\Danish.xml

C:\Users\win7\AppData\Roaming\System Healer\Languages\Italian.xml

C:\Users\win7\AppData\Roaming\System Healer\Languages\Dutch.xml

C:\Users\win7\AppData\Roaming\System Healer\Languages\Norwegian.xml

C:\Users\win7\AppData\Roaming\System Healer\Languages\Spanish.xml

C:\Users\win7\AppData\Roaming\System Healer\Languages\Portuguese.xml

C:\Users\win7\AppData\Roaming\System Healer\Languages\Parameters.xml

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Healer\Launch System Healer.lnk

C:\Users\Public\Desktop\Launch System Healer.lnk

C:\Users\win7\AppData\Local\Temp\nsg9210.tmp\nsExec.dll

C:\Users\win7\AppData\Roaming\TreeDBNotes Pro 4\Settings\TreeDBNotesPro.PIM

C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll

C:\MBSWindowsWMIPlugin16309.dll

C:\MBSWindowsWMIPlugin16309.dll\desktop.ini

C:\MBSRegistrationPlugin16309.dll

C:\MBSRegistrationPlugin16309.dll\desktop.ini

C:\plugin.dll

C:\plugin.dll\desktop.ini

C:\RBShell600.dll

C:\RBShell600.dll\desktop.ini

C:\RBMD5600.dll

C:\RBMD5600.dll\desktop.ini

C:\RBInternetEncodings600.dll

C:\RBInternetEncodings600.dll\desktop.ini

C:\rbap600.dll

C:\rbap600.dll\desktop.ini

C:\Backup.ini

C:\Users\win7\AppData\Local\Temp\is-2VR4C.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-2VR4C.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-2VR4C.tmp\AsrLib.dll

setup.cfg

c:\64e065be9b69524c44d245b167\update\branches.inf

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Desktop_Shell-GettingStarted-NoWindowsLive-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Hyper-V-Common-Drivers-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Hyper-V-Guest-Integration-Drivers-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Anytime-Upgrade-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Anytime-Upgrade-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Anytime-Upgrade-Results-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Anytime-Upgrade-Results-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Backup-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Backup-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-BLB-Client-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-BLB-Client-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Branding-ProfessionalN-Client-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Branding-ProfessionalN-Client-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Branding-UltimateN-Client-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Branding-UltimateN-Client-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-BusinessScanning-Feature-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-BusinessScanning-Feature-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Drivers-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Drivers-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-LanguagePack-Package-wrapper~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-LanguagePack-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Refresh-LanguagePack-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Wired-Network-Drivers-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Wired-Network-Drivers-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CodecPack-Basic-Encoder-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CodecPack-Basic-Package-wrapper~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CodecPack-Basic-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-CodecPack-Basic-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Common-Drivers-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Common-Drivers-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Common-Modem-Drivers-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Common-Modem-Drivers-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-DesktopWindowManager-uDWM-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Disk-Diagnosis-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Disk-Diagnosis-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Editions-ClientN-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-EnterpriseNEdition-wrapper~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Gadget-Platform-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Gadget-Platform-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientExtensions-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientExtensions-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Help-CoreClientUAPSN-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Help-CoreClientUAPSN-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Help-CoreClientUAUEN-Package-Lang~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Help-CoreClientUAUEN-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Help-Customization-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Help-Customization-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-HomeBasicNEdition-wrapper~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-HomePremiumNEdition-wrapper~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ICM-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ICM-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IE-Hyphenation-Package-English~31bf3856ad364e35~amd64~~6.3.9412.0.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~11.2.9412.0.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IE-Spelling-Package-English~31bf3856ad364e35~amd64~~6.3.9412.0.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~11.2.9412.0.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IE-Troubleshooters-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IE-Troubleshooters-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IIS-WebServer-AddOn-2-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IIS-WebServer-AddOn-2-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IIS-WebServer-AddOn-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-IIS-WebServer-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ImageBasedSetup-IE-Package-Base-Downlevel~31bf3856ad364e35~amd64~en-US~6.3.9600.16428.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ImageBasedSetup-IE-Package-Base-Downlevel~31bf3856ad364e35~amd64~~6.3.9600.16428.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Indexing-Service-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Indexing-Service-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-Optional-Package~31bf3856ad364e35~amd64~en-US~11.2.9600.16428.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-Optional-Package~31bf3856ad364e35~amd64~en-US~8.0.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-Optional-Package~31bf3856ad364e35~amd64~~11.2.9600.16428.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-Optional-Package~31bf3856ad364e35~amd64~~8.0.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-Package-MiniLP~31bf3856ad364e35~amd64~en-US~11.2.9600.16428.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-Package-TopLevel~31bf3856ad364e35~amd64~~11.2.9600.16428.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-Package~31bf3856ad364e35~amd64~en-US~11.2.9600.16428.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-Package~31bf3856ad364e35~amd64~en-US~8.0.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-Package~31bf3856ad364e35~amd64~~11.2.9600.16428.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-Package~31bf3856ad364e35~amd64~~8.0.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-InternetExplorer-VistaPlus-Update~31bf3856ad364e35~amd64~~11.2.9600.16428.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Killbits-Package~31bf3856ad364e35~amd64~~8.0.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-LocalPack-AU-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-LocalPack-CA-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-LocalPack-GB-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-LocalPack-US-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-LocalPack-ZA-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Basic-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Basic-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Premium-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Sensors-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-Sensors-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-SideShow-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MobilePC-Client-SideShow-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MSMQ-Client-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-MSMQ-Client-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-NetFx3-OC-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-NetFx3-OC-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-NetworkDiagnostics-DirectAccessEntry-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-NFS-ClientSKU-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-NFS-ClientSKU-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-OfflineFiles-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-OfflineFiles-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ParentalControls-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-ParentalControls-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerDist-Client-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerDist-Client-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerToPeer-Full-Package~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PeerToPeer-Full-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Personalization-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PhotoBasicPackage~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PhotoBasicPackage~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~en-US~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PhotoPremiumPackage~31bf3856ad364e35~amd64~~6.1.7601.17514.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~ar-SA~7.1.7601.16492.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~bg-BG~7.1.7601.16492.cat

C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-PlatformUpdate-Win7-SRV08R2-Package-MiniLP~31bf3856ad364e35~amd64~cs-CZ~7.1.7601.16492.cat

C:\Users\win7\AppData\Local\Temp\nsk67D.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsk67D.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\nsk67D.tmp\Pioneer_DDJ_SR_Plugin.dll

C:\Users\win7\AppData\Local\Temp\nsk67D.tmp\LangDLL2.dll

C:\Users\win7\AppData\Local\Temp\licenses\license_de.rtf

C:\Users\win7\AppData\Local\Temp\licenses\license_en.rtf

C:\Users\win7\AppData\Local\Temp\licenses\license_es.rtf

C:\Users\win7\AppData\Local\Temp\licenses\license_fr.rtf

C:\Users\win7\AppData\Local\Temp\licenses\license_it.rtf

C:\Users\win7\AppData\Local\Temp\licenses\license_ja.rtf

C:\Users\win7\AppData\Local\Temp\licenses\license_ko.rtf

C:\Users\win7\AppData\Local\Temp\licenses\license_nl.rtf

C:\Users\win7\AppData\Local\Temp\licenses\license_pt.rtf

C:\Users\win7\AppData\Local\Temp\licenses\license_ru.rtf

C:\Users\win7\AppData\Local\Temp\licenses\license_zh-cn.rtf

C:\Users\win7\AppData\Local\Temp\licenses\license_zh-tw.rtf

C:\Users\win7\AppData\Local\Temp\licenses\old\license_de.rtf

C:\Users\win7\AppData\Local\Temp\licenses\old\license_en.rtf

C:\Users\win7\AppData\Local\Temp\licenses\old\license_es.rtf

C:\Users\win7\AppData\Local\Temp\licenses\old\license_fr.rtf

C:\Users\win7\AppData\Local\Temp\licenses\old\license_it.rtf

C:\Users\win7\AppData\Local\Temp\licenses\old\license_ja.rtf

C:\Users\win7\AppData\Local\Temp\licenses\old\license_ko.rtf

C:\Users\win7\AppData\Local\Temp\licenses\old\license_nl.rtf

C:\Users\win7\AppData\Local\Temp\licenses\old\license_pt.rtf

C:\Users\win7\AppData\Local\Temp\licenses\old\license_ru.rtf

C:\Users\win7\AppData\Local\Temp\licenses\old\license_zh-cn.rtf

C:\Users\win7\AppData\Local\Temp\licenses\old\license_zh-tw.rtf

C:\Users\win7\AppData\Local\Temp\nsk67D.tmp\ButtonEvent2.dll

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\UmmyVideoDownloader_setup[1].exe

C:\Users\win7\AppData\Local\Temp\nst4376.tmp

C:\Users\win7\AppData\Local\Temp\nsz4397.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\dosss11.dll

C:\Users\win7\AppData\Local\Temp\hcpidesk.sys

C:\ccleaner_checkpoint.dat

C:\Users\win7\AppData\Local\Temp\Cab7071.tmp

C:\Users\win7\AppData\Local\Temp\Tar7072.tmp

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\ACF244F1A10D4DBED0D88EBA0C43A9B5_16756CC7371BB76A269719AA1471E96C

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\ACF244F1A10D4DBED0D88EBA0C43A9B5_D62C8C0658CD0C539180D271944F01C1

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C8E7EC0C85688F4738F3BE49B104BA67

C:\Users\win7\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\ACF244F1A10D4DBED0D88EBA0C43A9B5_16756CC7371BB76A269719AA1471E96C

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\app_cc_pro_trialkey[1].htm

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RGC5OOPI\verify[1].htm

C:\ProgramData\NortonInstaller\Logs\2016-04-09-01h10m31s\NortonInstall-2016-04-09-01h10m31s.log

C:\Windows\system32\dfrgui.exe

C:\Users\win7\AppData\Local\Temp\{84cc4d51-23ee-42a3-af9f-43f332a362a2}\.ba1\wixstdba.dll

C:\Users\win7\AppData\Local\Temp\{84cc4d51-23ee-42a3-af9f-43f332a362a2}\.ba1\thm.xml

C:\Users\win7\AppData\Local\Temp\{84cc4d51-23ee-42a3-af9f-43f332a362a2}\.ba1\thm.wxl

C:\Users\win7\AppData\Local\Temp\{84cc4d51-23ee-42a3-af9f-43f332a362a2}\.ba1\logo.png

C:\Users\win7\AppData\Local\Temp\{84cc4d51-23ee-42a3-af9f-43f332a362a2}\.ba1\license.rtf

C:\Users\win7\AppData\Local\Temp\{84cc4d51-23ee-42a3-af9f-43f332a362a2}\.ba1\BootstrapperApplicationData.xml

C:\Users\win7\AppData\Local\Temp\Special_Effects_Voices_for_MorphVOX_20160409013518.log

C:\Windows\WindowsUpdate.log

C:\Users\win7\AppData\Local\Temp\{84cc4d51-23ee-42a3-af9f-43f332a362a2}\.be\VP-SpecialEffects_Install.exe

C:\Windows\Dell\UpdatePackage\log\Synaptics.log

C:\Windows\Synaptics.log

C:\Users\win7\AppData\Local\Temp\nsp387A.tmp

C:\\AliUpgrdInfo

C:\Users\win7\AppData\Roaming\TaobaoProtect\TaobaoProtect.exe

C:\Users\win7\AppData\Local\Temp\nsd9C.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsd9C.tmp\UAC.dll

C:\Users\win7\AppData\Local\Temp\nsd9C.tmp\bgintro.bmp

C:\Users\win7\AppData\Local\Temp\nsd9C.tmp\appname.bmp

C:\Users\win7\AppData\Local\Temp\nsd9C.tmp\clock.bmp

C:\Users\win7\AppData\Local\Temp\nsd9C.tmp\particles.bmp

C:\Users\win7\AppData\Local\Temp\nsd9C.tmp\pencil.bmp

C:\Users\win7\AppData\Local\Temp\nsd9C.tmp\nsDialogs.dll

C:\Users\win7\AppData\Local\Temp\nsd9C.tmp\InetBgDL.dll

C:\Users\win7\AppData\Local\Temp\nsd9C.tmp\download.exe

w "C:\Users\win7\AppData\Local\Temp\nsd9C.tmp\download.exe"

C:\Users\win7\AppData\Local\Temp\nsd9C.tmp\CertCheck.dll

account.dat

bmo.dll

BomberMan.exe

upnp.vbs

upnpportf.vbs

launch.exe

_launch.exe

C:\Windows\System32\_launch.exe

C:\Users\win7\AppData\Local\Temp\nstCD48.tmp

C:\Users\win7\AppData\Local\Temp\nsdCD87.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsdCD87.tmp\inetc.dll

C:\Users\win7\AppData\Local\Temp\nsdCD87.tmp\get_local_output.tmp

C:\Users\win7\AppData\Local\Temp\nsdCD87.tmp\IpConfig.dll

C:\Users\win7\AppData\Local\Temp\nsdCD87.tmp\md5dll.dll

C:\Users\win7\AppData\Local\Temp\nsdCD87.tmp\DcryptDll.dll

C:\Users\win7\AppData\Local\Temp\nsrD568.tmp

C:\Users\win7\AppData\Local\Temp\nsdCD87.tmp\MoreInfo.dll

C:\Users\win7\AppData\Local\Temp\nsdCD87.tmp\NSISList.dll

C:\Users\win7\AppData\Local\Temp\TencentDownload\~9f12a\setup.xml

C:\Users\win7\AppData\Local\Temp\TencentDownload\~9f12a\QQPCDownload.dll

C:\Users\win7\AppData\Roaming\Tencent\QQPCMgr\TxdlProxy.exe

C:\Users\win7\AppData\Local\Temp\TencentDownload\~9f12a\dr.dll

C:\Users\win7\AppData\Local\Temp\TencentDownload\~9f12a\dr.ini

C:\Users\win7\AppData\Roaming\Tencent\QQPCMgr\Download\version

\\.\pipe\OperaCrashReporter2748

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160409031429.log

C:\Users\win7\AppData\Local\Temp\Opera Installer\opera_installer_20160409031428.exe

C:\Users\win7\AppData\Local\Temp\nsu7A2B.tmp\System.dll

C:\wifiman_unistall.exe

0x1be00c2f

C:\Users\win7\AppData\Local\Temp\is-LI3OB.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-LI3OB.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-LI3OB.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\V8._85416_20150820204011.exe

C:\Users\win7\AppData\Local\Temp\12au8ed56\nsis_skin.gt

C:\Users\win7\AppData\Local\Temp\12au8ed56\QBInstaller.dll

C:\Users\win7\AppData\Local\Temp\12au8ed56\Config.xml

C:\Users\win7\AppData\Local\Temp\12au8ed56\CustomerJoinPlan.txt

C:\Users\win7\AppData\Local\Temp\12au8ed56\license.txt

C:\Users\win7\AppData\Local\Temp\nshCB78.tmp

C:\Users\win7\AppData\Local\Temp\nshCB79.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nshCB79.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\0.gif

C:\Users\win7\AppData\Local\Temp\nsgD78F.tmp

C:\Users\win7\AppData\Local\Temp\nshCB79.tmp\Base64.dll

C:\Users\win7\AppData\Local\Temp\nshCB79.tmp\Inetc.dll

21.gif

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\7185bdf1gw1evetce26ljg21130hix6s[1].gif

C:\Users\win7\AppData\Local\Temp\nshCB79.tmp\ZipDLL.dll

C:\Users\win7\AppData\Local\Temp\21.gif

C:\Users\win7\AppData\Local\Temp\nsw8A87.tmp\nsExec.dll

C:\Users\win7\AppData\Local\Temp\nsw8A87.tmp\System.dll

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cyberoam\Cyberoam SSL\Cyberoam SSL Client.lnk

C:\Users\Public\Desktop\Cyberoam SSL Client.lnk

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Cyberoam SSL Client.lnk

C:\Users\win7\AppData\Local\Temp\ci0-temp\AlexaBooster.set

C:\Users\win7\AppData\Local\Temp\ci0-temp\install.bmp

C:\Users\win7\AppData\Local\Temp\ci0-temp\logo.bmp

c:\Program Files\Alexa Booster v3.2\_ci_gentee_

c:\Program Files\Alexa Booster v3.2\Skins\1.bmp

c:\Program Files\Alexa Booster v3.2\Skins\1P.bmp

c:\Program Files\Alexa Booster v3.2\Skins\2.bmp

c:\Program Files\Alexa Booster v3.2\Skins\2P.bmp

c:\Program Files\Alexa Booster v3.2\Skins\3.bmp

c:\Program Files\Alexa Booster v3.2\Skins\4.bmp

c:\Program Files\Alexa Booster v3.2\Skins\scanner.jpg

c:\Program Files\Alexa Booster v3.2\Skins\step1.jpg

c:\Program Files\Alexa Booster v3.2\Skins\step2.jpg

c:\Program Files\Alexa Booster v3.2\Skins\step3.jpg

c:\Program Files\Alexa Booster v3.2\Proxy\PROXYs.txt

c:\Program Files\Alexa Booster v3.2\Proxy\URLs.txt

c:\Program Files\Alexa Booster v3.2\Proxy\agents.txt

c:\Program Files\Alexa Booster v3.2\Proxy\conf.txt

c:\Program Files\Alexa Booster v3.2\Proxy\dedicated_sites.dat

c:\Program Files\Alexa Booster v3.2\Proxy\proxy.txt

c:\Program Files\Alexa Booster v3.2\Proxy\referers.txt

c:\Program Files\Alexa Booster v3.2\Proxy\google-keywords.txt

c:\Program Files\Alexa Booster v3.2\Alexa Booster v3.2.exe

C:\Users\win7\AppData\Local\Temp\ci0-temp\uninstall.ico

1.213.5692.0_TO_1.213.5817.0_MPASDLTA.VDM._P

1.213.5692.0_TO_1.213.5817.0_MPAVDLTA.VDM._P

C:\Users\win7\AppData\Local\Temp\is-B3RES.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-B3RES.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\is-B3RES.tmp\isxdl.dll

C:\Windows\system32\\\\\\wmidx.dll

C:\Users\win7\AppData\Local\Temp\is-HUTQ9.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\is-C4A8S.tmp\_isetup\_RegDLL.tmp

C:\Users\win7\AppData\Local\Temp\is-C4A8S.tmp\_isetup\_setup64.tmp

C:\Users\win7\AppData\Local\Temp\is-C4A8S.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\autC29D.tmp

C:\Users\win7\AppData\Local\Temp\autC29E.tmp

C:\Users\win7\AppData\Local\Temp\autC29F.tmp

C:\Users\win7\AppData\Local\Temp\autC2A0.tmp

C:\Users\win7\AppData\Local\Temp\autC2B1.tmp

C:\Users\win7\AppData\Local\Temp\autC2B2.tmp

C:\Users\win7\AppData\Local\Temp\autC2B3.tmp

C:\Users\win7\AppData\Local\Temp\Uninstall.bat

C:\Users\win7\AppData\Local\Temp\autC2B4.tmp

C:\Users\win7\AppData\Local\Temp\autC2E3.tmp

C:\Users\win7\AppData\Roaming\Microsoft\Windows\Cookies\RFRYN44A.txt

C:\Users\win7\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H0G27RVV\version[1].htm

http://general-changelog-team.fr/fr/downloads/viewdownload/20-outils-de-xplode/2-adwcleaner