cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

ÿþOTL logfile created on: 09/01/2016 13:20:46 - Run 2
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\asus\Desktop
64bit- Professional (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy

3,89 Gb Total Physical Memory | 1,05 Gb Available Physical Memory | 26,94% Memory free
7,77 Gb Paging File | 4,33 Gb Available in Paging File | 55,75% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 195,21 Gb Total Space | 88,88 Gb Free Space | 45,53% Space Free | Partition Type: NTFS
Drive D: | 270,45 Gb Total Space | 102,96 Gb Free Space | 38,07% Space Free | Partition Type: NTFS

Computer Name: ASUS-PC | User Name: asus | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - [2016/01/07 19:50:22 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\asus\Desktop\OTL.exe
PRC - [2015/12/25 18:17:38 | 000,211,712 | ---- | M] (Kaspersky Lab ZAO) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avpui.exe
PRC - [2015/12/25 18:17:38 | 000,194,000 | ---- | M] (Kaspersky Lab ZAO) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe
PRC - [2015/12/16 17:34:16 | 002,771,576 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
PRC - [2015/12/16 17:34:16 | 001,872,504 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
PRC - [2015/12/14 15:43:10 | 006,889,232 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
PRC - [2015/12/11 03:54:14 | 000,741,704 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
PRC - [2015/12/05 00:17:45 | 000,245,576 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler.exe
PRC - [2015/11/12 10:39:52 | 000,260,896 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
PRC - [2015/11/04 11:28:22 | 000,323,056 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
PRC - [2015/11/04 11:28:20 | 000,019,440 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
PRC - [2015/10/10 18:55:02 | 003,911,248 | R--- | M] (Tonec Inc.) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe
PRC - [2015/10/05 09:48:46 | 001,135,416 | ---- | M] (Malwarebytes) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
PRC - [2015/10/05 09:48:44 | 001,513,784 | ---- | M] (Malwarebytes) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
PRC - [2015/10/05 09:48:34 | 009,832,760 | ---- | M] (Malwarebytes) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
PRC - [2015/06/15 01:00:28 | 000,296,216 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
PRC - [2015/02/04 10:05:36 | 000,269,848 | ---- | M] (Tonec Inc.) -- C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
PRC - [2013/12/09 16:27:54 | 000,169,432 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe


[color=#E56717]========== Modules (No Company Name) ==========[/color]

MOD - [2015/12/16 17:34:16 | 000,011,896 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
MOD - [2015/12/16 17:34:16 | 000,011,896 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\coprocmanager\detoured.dll
MOD - [2015/12/11 03:54:11 | 001,583,432 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.106\libglesv2.dll
MOD - [2015/12/11 03:54:09 | 000,081,224 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.106\libegl.dll
MOD - [2015/08/25 22:48:26 | 000,430,080 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Serv30e99c02#\d4252cf36fde88b79fb4c84fb536a17b\System.ServiceModel.Channels.ni.dll
MOD - [2015/08/25 22:48:18 | 019,522,560 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\41816035c80d62c9321c7f245dfad2f1\System.ServiceModel.ni.dll
MOD - [2015/08/25 22:26:49 | 001,879,552 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\45bfaf1cf147dd99e140a76d1d6999f7\System.Xaml.ni.dll
MOD - [2015/02/11 21:12:17 | 002,956,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\c37bcdac22f4bcd9531dfcc4b9ebda56\System.IdentityModel.ni.dll
MOD - [2015/02/11 21:12:03 | 001,073,664 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Servf73e6522#\5c930566b541a92c65f32cfae4018d87\System.ServiceModel.Web.ni.dll
MOD - [2015/02/11 20:53:56 | 012,692,992 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\22ae167d586450ad3a9b9a9ee43ebc86\System.Windows.Forms.ni.dll
MOD - [2015/02/11 20:53:46 | 001,630,720 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\72269ea7cc6281139e4d155e7c57dc67\System.Drawing.ni.dll
MOD - [2015/02/11 20:53:45 | 000,121,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\98e3281d79512c9a2a0a89e3bc2e554f\SMDiagnostics.ni.dll
MOD - [2015/02/11 20:53:44 | 000,802,816 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Servd1dec626#\df55f04bc0ebe6c1abde4bc467bf4d03\System.ServiceModel.Internals.ni.dll
MOD - [2015/02/11 20:53:43 | 002,785,280 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\293cfe2c05a8ee921726927fd00ea81c\System.Runtime.Serialization.ni.dll
MOD - [2015/02/11 20:53:40 | 006,995,456 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\b9f7adbc90a2bcbe8eb9e6e8d2bb975b\System.Core.ni.dll
MOD - [2015/02/11 20:53:39 | 007,559,680 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\9ba07396ae369d010c5c3927a82ef426\System.Xml.ni.dll
MOD - [2015/02/11 20:53:33 | 000,958,464 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\28586400bcaf94c13a9fd0dff4a1e090\System.Configuration.ni.dll
MOD - [2015/02/11 20:53:32 | 009,925,120 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\e40da7a49f8c3f0108e7c835b342f382\System.ni.dll
MOD - [2015/02/11 20:53:26 | 016,501,248 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\51e2934144ba15628ba5a31be2dae7dc\mscorlib.ni.dll
MOD - [2014/08/13 14:09:24 | 000,035,328 | ---- | M] () -- C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
MOD - [2014/05/24 16:41:24 | 000,892,416 | ---- | M] () -- C:\Program Files (x86)\FileZilla FTP Client\libstdc++-6.dll
MOD - [2014/05/24 16:41:24 | 000,091,648 | ---- | M] () -- C:\Program Files (x86)\FileZilla FTP Client\libgcc_s_sjlj-1.dll
MOD - [2013/01/15 18:48:26 | 000,348,992 | ---- | M] () -- C:\Program Files (x86)\IObit\IObit Uninstaller\madexcept_.bpl
MOD - [2013/01/15 18:48:26 | 000,051,008 | ---- | M] () -- C:\Program Files (x86)\IObit\IObit Uninstaller\maddisAsm_.bpl
MOD - [2013/01/15 18:48:24 | 000,183,616 | ---- | M] () -- C:\Program Files (x86)\IObit\IObit Uninstaller\madbasic_.bpl


[color=#E56717]========== Services (SafeList) ==========[/color]

SRV:[b]64bit:[/b] - [2015/12/28 06:23:27 | 000,226,440 | ---- | M] (AVAST Software) [On_Demand | Stopped] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV:[b]64bit:[/b] - [2015/12/28 06:23:22 | 000,109,520 | ---- | M] (AVAST Software) [On_Demand | Stopped] -- C:\Program Files\AVAST Software\Avast\afwServ.exe -- (avast! Firewall)
SRV:[b]64bit:[/b] - [2015/12/16 17:34:16 | 008,185,464 | ---- | M] (NVIDIA Corporation) [On_Demand | Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe -- (NvStreamNetworkSvc)
SRV:[b]64bit:[/b] - [2015/12/16 17:34:16 | 006,477,432 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe -- (NvStreamSvc)
SRV:[b]64bit:[/b] - [2015/12/16 17:34:16 | 001,156,216 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe -- (GfExperienceService)
SRV:[b]64bit:[/b] - [2015/11/04 11:28:20 | 000,019,440 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
SRV:[b]64bit:[/b] - [2015/10/09 16:30:52 | 002,505,472 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -- (ekrn)
SRV:[b]64bit:[/b] - [2015/02/24 19:49:50 | 000,117,704 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Windows\SysNative\DptfParticipantProcessorService.exe -- (DptfParticipantProcessorService)
SRV:[b]64bit:[/b] - [2015/01/10 12:42:00 | 000,344,168 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Windows\SysNative\igfxCUIService.exe -- (igfxCUIService1.0.0.0)
SRV:[b]64bit:[/b] - [2014/07/22 23:31:23 | 000,172,344 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Program Files\SUPERAntiSpyware\SASCore64.exe -- (!SASCORE)
SRV:[b]64bit:[/b] - [2013/09/28 21:06:28 | 000,148,160 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Windows\SysNative\DptfPolicyCriticalService.exe -- (DptfPolicyCriticalService)
SRV:[b]64bit:[/b] - [2013/09/28 21:06:28 | 000,126,952 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Windows\SysNative\DptfPolicyLpmService.exe -- (DptfPolicyLpmService)
SRV:[b]64bit:[/b] - [2013/09/28 21:06:28 | 000,116,680 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Windows\SysNative\DptfPolicyConfigTDPService.exe -- (DptfPolicyConfigTDPService)
SRV:[b]64bit:[/b] - [2013/08/27 14:32:30 | 000,828,376 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe -- (Intel(R)
SRV:[b]64bit:[/b] - [2013/08/27 14:32:14 | 000,747,520 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R)
SRV:[b]64bit:[/b] - [2010/09/12 15:34:12 | 000,325,120 | ---- | M] (CybelSoft) [On_Demand | Stopped] -- C:\Program Files\ma-config.com\x64\maconfservice.exe -- (maconfservice)
SRV:[b]64bit:[/b] - [2009/07/14 01:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:[b]64bit:[/b] - [2009/07/14 01:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2016/01/02 13:04:47 | 001,392,792 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Windows\SysWOW64\esif_uf.exe -- (esifsvc)
SRV - [2015/12/25 18:17:38 | 000,194,000 | ---- | M] (Kaspersky Lab ZAO) [Auto | Running] -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe -- (AVP16.0.0)
SRV - [2015/12/16 17:34:16 | 001,872,504 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe -- (NvNetworkService)
SRV - [2015/12/15 14:24:12 | 000,147,624 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2015/12/14 15:43:10 | 006,889,232 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe -- (TeamViewer)
SRV - [2015/12/10 00:33:53 | 000,269,504 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2015/11/10 13:48:12 | 002,934,048 | ---- | M] (IObit) [Auto | Stopped] -- C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe -- (LiveUpdateSvc)
SRV - [2015/10/05 09:48:46 | 001,135,416 | ---- | M] (Malwarebytes) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2015/10/05 09:48:44 | 001,513,784 | ---- | M] (Malwarebytes) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2015/07/09 00:02:50 | 000,144,640 | ---- | M] (AO Kaspersky Lab) [On_Demand | Stopped] -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\vssbridge64.exe -- (vssbrigde64)
SRV - [2015/06/12 09:25:00 | 000,082,112 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2015/01/10 12:42:02 | 000,279,144 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)
SRV - [2014/02/25 22:17:38 | 000,319,104 | ---- | M] (Windows (R) Win 7 DDK provider) [On_Demand | Stopped] -- C:\Program Files (x86)\Bluetooth Suite\AdminService.exe -- (AtherosSvc)
SRV - [2014/02/25 21:50:24 | 000,323,584 | ---- | M] (Atheros) [On_Demand | Stopped] -- C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe -- (ZAtheros Bt and Wlan Coex Agent)
SRV - [2013/12/09 16:27:58 | 000,390,616 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2013/12/09 16:27:54 | 000,169,432 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe -- (jhi_service)
SRV - [2012/07/09 00:40:10 | 000,104,912 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009/06/10 21:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2002/06/18 14:04:54 | 000,503,808 | ---- | M] () [On_Demand | Stopped] -- C:\MATLAB6p5\webserver\bin\win32\matlabserver.exe -- (matlabserver)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV:[b]64bit:[/b] - [2016/01/09 12:53:55 | 000,192,216 | ---- | M] (Malwarebytes) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys -- (MBAMSwissArmy)
DRV:[b]64bit:[/b] - [2016/01/02 15:09:38 | 000,020,160 | ---- | M] (Glarysoft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\GUBootStartup.sys -- (GUBootStartup)
DRV:[b]64bit:[/b] - [2016/01/02 13:07:13 | 000,052,184 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dptf_pch.sys -- (dptf_pch)
DRV:[b]64bit:[/b] - [2016/01/02 13:04:47 | 000,260,072 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\esif_lf.sys -- (esif_lf)
DRV:[b]64bit:[/b] - [2015/12/28 07:18:57 | 000,451,040 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswsp.sys -- (aswSP)
DRV:[b]64bit:[/b] - [2015/12/28 07:18:57 | 000,097,648 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswmonflt.sys -- (aswMonFlt)
DRV:[b]64bit:[/b] - [2015/12/28 06:23:29 | 000,273,784 | ---- | M] (AVAST Software) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswVmm.sys -- (aswVmm)
DRV:[b]64bit:[/b] - [2015/12/28 06:23:29 | 000,155,304 | ---- | M] (AVAST Software) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\aswStm.sys -- (aswStm)
DRV:[b]64bit:[/b] - [2015/12/28 06:23:29 | 000,093,528 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
DRV:[b]64bit:[/b] - [2015/12/28 06:23:29 | 000,065,224 | ---- | M] (AVAST Software) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt)
DRV:[b]64bit:[/b] - [2015/12/28 06:23:29 | 000,028,656 | ---- | M] (AVAST Software) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\aswHwid.sys -- (aswHwid)
DRV:[b]64bit:[/b] - [2015/12/28 06:23:25 | 001,055,560 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
DRV:[b]64bit:[/b] - [2015/12/28 06:23:25 | 000,028,144 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswKbd.sys -- (aswKbd)
DRV:[b]64bit:[/b] - [2015/12/28 06:23:23 | 000,466,400 | ---- | M] (AVAST Software) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswNdisFlt.sys -- (aswNdisFlt)
DRV:[b]64bit:[/b] - [2015/12/28 00:34:57 | 000,170,280 | ---- | M] (ESET) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ESETCleanersDriver.sys -- (ESETCleanersDriver)
DRV:[b]64bit:[/b] - [2015/12/25 19:14:32 | 000,041,352 | ---- | M] (AO Kaspersky Lab) [File_System | System | Running] -- C:\Windows\SysNative\drivers\klpd.sys -- (klpd)
DRV:[b]64bit:[/b] - [2015/12/25 19:14:31 | 000,940,928 | ---- | M] (AO Kaspersky Lab) [File_System | System | Running] -- C:\Windows\SysNative\drivers\klif.sys -- (KLIF)
DRV:[b]64bit:[/b] - [2015/12/25 19:14:30 | 000,181,640 | ---- | M] (AO Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\klflt.sys -- (klflt)
DRV:[b]64bit:[/b] - [2015/12/25 18:18:31 | 000,227,000 | ---- | M] (AO Kaspersky Lab) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\klhk.sys -- (klhk)
DRV:[b]64bit:[/b] - [2015/12/17 13:32:33 | 001,026,304 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:[b]64bit:[/b] - [2015/12/17 13:32:19 | 000,052,200 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dptf_cpu.sys -- (dptf_cpu)
DRV:[b]64bit:[/b] - [2015/12/17 13:31:55 | 004,161,536 | ---- | M] (Qualcomm Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:[b]64bit:[/b] - [2015/12/17 13:31:00 | 000,057,304 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dptf_acpi.sys -- (dptf_acpi)
DRV:[b]64bit:[/b] - [2015/12/16 17:34:16 | 000,050,472 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvvad64v.sys -- (nvvad_WaveExtensible)
DRV:[b]64bit:[/b] - [2015/12/16 17:34:16 | 000,031,352 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt)
DRV:[b]64bit:[/b] - [2015/12/16 17:34:16 | 000,019,576 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys -- (NvStreamKms)
DRV:[b]64bit:[/b] - [2015/12/05 09:24:24 | 000,098,760 | ---- | M] (G Data Software) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\TS4nt.sys -- (TS4NT)
DRV:[b]64bit:[/b] - [2015/12/04 18:35:04 | 000,179,456 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\TeeDriverx64.sys -- (MEIx64)
DRV:[b]64bit:[/b] - [2015/11/17 15:38:26 | 000,475,384 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
DRV:[b]64bit:[/b] - [2015/11/17 15:36:27 | 000,073,512 | ---- | M] (ASUS Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AsusTP.sys -- (ATP)
DRV:[b]64bit:[/b] - [2015/11/17 15:36:08 | 000,600,776 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btfilter.sys -- (BtFilter)
DRV:[b]64bit:[/b] - [2015/11/17 15:35:50 | 000,060,928 | ---- | M] (GenesysLogic) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\GeneStor.sys -- (GeneStor)
DRV:[b]64bit:[/b] - [2015/11/12 20:05:48 | 001,467,912 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStorA.sys -- (iaStorA)
DRV:[b]64bit:[/b] - [2015/11/12 20:05:48 | 000,031,728 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStorF.sys -- (iaStorF)
DRV:[b]64bit:[/b] - [2015/11/06 11:33:20 | 000,264,040 | ---- | M] (ESET) [File_System | System | Running] -- C:\Windows\SysNative\drivers\eamonm.sys -- (eamonm)
DRV:[b]64bit:[/b] - [2015/11/06 11:33:20 | 000,186,784 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ehdrv.sys -- (ehdrv)
DRV:[b]64bit:[/b] - [2015/10/05 09:50:18 | 000,063,704 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mwac.sys -- (MBAMWebAccessControl)
DRV:[b]64bit:[/b] - [2015/10/05 09:50:10 | 000,109,272 | ---- | M] (Malwarebytes) [File_System | System | Running] -- C:\Windows\SysNative\drivers\mbamchameleon.sys -- (mbamchameleon)
DRV:[b]64bit:[/b] - [2015/10/05 09:50:06 | 000,025,816 | ---- | M] (Malwarebytes) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:[b]64bit:[/b] - [2015/08/27 13:49:34 | 000,033,448 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Smb_driver_Intel.sys -- (SmbDrvI)
DRV:[b]64bit:[/b] - [2015/08/27 13:43:37 | 000,752,856 | ---- | M] (Realsil Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtsPer.sys -- (RTSPER)
DRV:[b]64bit:[/b] - [2015/07/06 00:10:20 | 000,389,816 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\cm_km.sys -- (cm_km)
DRV:[b]64bit:[/b] - [2015/06/30 03:44:28 | 000,814,376 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3xhc.sys -- (iusb3xhc)
DRV:[b]64bit:[/b] - [2015/06/27 01:30:00 | 000,070,000 | ---- | M] (Kaspersky Lab ZAO) [File_System | System | Running] -- C:\Windows\SysNative\drivers\klbackupflt.sys -- (klbackupflt)
DRV:[b]64bit:[/b] - [2015/06/26 08:13:34 | 000,403,752 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3hub.sys -- (iusb3hub)
DRV:[b]64bit:[/b] - [2015/06/26 08:12:38 | 000,031,528 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iusb3hcs.sys -- (iusb3hcs)
DRV:[b]64bit:[/b] - [2015/06/23 18:30:50 | 000,187,056 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\kneps.sys -- (kneps)
DRV:[b]64bit:[/b] - [2015/06/22 20:40:04 | 000,478,392 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\kl1.sys -- (kl1)
DRV:[b]64bit:[/b] - [2015/06/16 21:56:32 | 000,103,096 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\klwtp.sys -- (Klwtp)
DRV:[b]64bit:[/b] - [2015/06/12 02:00:58 | 000,197,616 | ---- | M] (Tonec Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\idmwfp.sys -- (IDMWFP)
DRV:[b]64bit:[/b] - [2015/06/11 19:32:42 | 000,039,096 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\klim6.sys -- (KLIM6)
DRV:[b]64bit:[/b] - [2015/06/11 15:56:56 | 000,065,208 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\kltdi.sys -- (kltdi)
DRV:[b]64bit:[/b] - [2015/06/07 01:50:04 | 000,041,648 | ---- | M] (Kaspersky Lab ZAO) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\klmouflt.sys -- (klmouflt)
DRV:[b]64bit:[/b] - [2015/06/06 08:51:00 | 000,068,280 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\kldisk.sys -- (kldisk)
DRV:[b]64bit:[/b] - [2015/06/06 08:48:24 | 000,053,432 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\klbackupdisk.sys -- (klbackupdisk)
DRV:[b]64bit:[/b] - [2015/06/06 08:31:42 | 000,041,144 | ---- | M] (Kaspersky Lab ZAO) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\klkbdflt.sys -- (klkbdflt)
DRV:[b]64bit:[/b] - [2015/06/02 17:38:12 | 000,061,432 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\adgnetworktdidrv.sys -- (adgnetworktdidrv)
DRV:[b]64bit:[/b] - [2015/03/10 13:21:37 | 000,203,672 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudmdm.sys -- (ssudmdm)
DRV:[b]64bit:[/b] - [2015/02/24 22:11:37 | 000,103,448 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudbus.sys -- (dg_ssudbus)
DRV:[b]64bit:[/b] - [2015/02/24 19:49:50 | 000,289,744 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\DptfDevProc.sys -- (DptfDevProc)
DRV:[b]64bit:[/b] - [2015/02/24 19:49:50 | 000,116,752 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\DptfDevPch.sys -- (DptfDevPch)
DRV:[b]64bit:[/b] - [2015/01/10 12:41:56 | 004,856,760 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:[b]64bit:[/b] - [2014/12/11 20:22:46 | 000,040,664 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tapwp01.sys -- (tapwp01)
DRV:[b]64bit:[/b] - [2014/07/24 11:48:35 | 000,036,736 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pwftap.sys -- (pwftap)
DRV:[b]64bit:[/b] - [2014/05/17 00:42:38 | 000,042,184 | ---- | M] (Anchorfree Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\taphss6.sys -- (taphss6)
DRV:[b]64bit:[/b] - [2014/05/07 07:22:40 | 000,011,576 | ---- | M] (Samsung Electronics) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\SSPORT.sys -- (SSPORT)
DRV:[b]64bit:[/b] - [2014/02/25 21:53:00 | 000,338,120 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_a2dp.sys -- (BTATH_A2DP)
DRV:[b]64bit:[/b] - [2014/02/25 21:53:00 | 000,179,432 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_hcrp.sys -- (BTATH_HCRP)
DRV:[b]64bit:[/b] - [2014/02/25 21:53:00 | 000,137,928 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_rcp.sys -- (BTATH_RCP)
DRV:[b]64bit:[/b] - [2014/02/25 21:53:00 | 000,116,424 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_avdt.sys -- (btath_avdt)
DRV:[b]64bit:[/b] - [2014/02/25 21:53:00 | 000,089,800 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_flt.sys -- (AthBTPort)
DRV:[b]64bit:[/b] - [2014/02/25 21:53:00 | 000,077,464 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_lwflt.sys -- (BTATH_LWFLT)
DRV:[b]64bit:[/b] - [2014/02/25 21:53:00 | 000,035,016 | ---- | M] (Qualcomm Atheros) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\btath_bus.sys -- (BTATH_BUS)
DRV:[b]64bit:[/b] - [2013/09/28 21:06:26 | 000,494,296 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\DptfManager.sys -- (DptfManager)
DRV:[b]64bit:[/b] - [2013/09/28 21:06:26 | 000,145,640 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\DptfDevDram.sys -- (DptfDevDram)
DRV:[b]64bit:[/b] - [2013/09/27 19:23:26 | 000,162,392 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NSTx64\7DE070B0.02A\ccSetx64.sys -- (ccSet_NST)
DRV:[b]64bit:[/b] - [2013/09/04 13:57:42 | 000,031,264 | ---- | M] (ThreatTrack Security) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\gfiutil.sys -- (gfiutil)
DRV:[b]64bit:[/b] - [2013/02/12 14:02:24 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx)
DRV:[b]64bit:[/b] - [2013/02/12 14:02:23 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb80236.sys -- (usbrndis6)
DRV:[b]64bit:[/b] - [2012/03/01 06:54:38 | 000,022,896 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2011/07/22 16:26:56 | 000,014,928 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys -- (SASDIFSV)
DRV:[b]64bit:[/b] - [2011/07/12 21:55:18 | 000,012,368 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\saskutil64.sys -- (SASKUTIL)
DRV:[b]64bit:[/b] - [2010/08/30 12:19:54 | 000,015,872 | ---- | M] (CybelSoft) [Kernel | On_Demand | Stopped] -- C:\Program Files\ma-config.com\Drivers\driverhardwarev2x64.sys -- (driverhardwarev2x64)
DRV:[b]64bit:[/b] - [2009/07/14 01:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2009/07/14 01:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2009/07/14 01:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009/07/14 01:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009/07/14 01:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2009/07/14 01:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009/06/10 20:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009/06/10 20:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009/06/10 20:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009/06/10 20:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV - [2015/02/24 19:44:52 | 000,026,528 | ---- | M] (REALiX(tm)) [Kernel | System | Running] -- C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS -- (HWiNFO32)
DRV - [2009/07/14 01:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://home.microsoft.com/search/search.asp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://fr.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = fr
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = B9 1D 29 4D 3C C4 CF 01 [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{85A60A59-D3D8-468F-B598-FB4393789EF4}: "URL" = https://www.google.com/search?q={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..browser.search.countryCode: "MA"
FF - prefs.js..browser.search.region: "MA"
FF - prefs.js..extensions.enabledAddons: mozilla_cc2%40internetdownloadmanager.com:6.23.25
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:43.0.1
FF - user.js - File not found

FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_134.dll File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.65.2: C:\Program Files\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.65.2: C:\Program Files\Java\jre1.8.0_65\bin\plugin2\npjp2.dll (Oracle Corporation)
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@ma-config.com/HardwareDetection: C:\Program Files\ma-config.com\nphardwaredetection.dll (Cybelsoft)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: File not found
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.76.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.76.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@ma-config.com/HardwareDetection: C:\Program Files\ma-config.com\nphardwaredetection.dll (Cybelsoft)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.3088: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.2.3146: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.11.3006: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.6: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.1: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKCU\Software\MozillaPlugins\hao123.com/VideoBox: File not found

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Program Files (x86)\Real\RealPlayer\browserrecord [2014/08/30 09:46:50 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{F04D2D30-776C-4d02-8627-8E4385ECA58D}: C:\ProgramData\Norton\{92622AAD-05E8-4459-B256-765CE1E929FB}\NST_2014.7.11.42\coFFPlgn\ [2016/01/02 09:57:53 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\light_plugin_D772DC8D6FAF43A29B25C4EBAA5AD1DE@kaspersky.com: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\FFExt\light_plugin_firefox [2015/12/25 19:16:41 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2015/12/28 07:17:47 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 42.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 42.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\mozilla_cc2@internetdownloadmanager.com: C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2015/10/02 12:35:54 | 000,030,178 | ---- | M] ()
FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\mozilla_cc2@internetdownloadmanager.com: C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2015/10/02 12:35:54 | 000,030,178 | ---- | M] ()
FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Users\asus\AppData\Roaming\IDM\idmmzcc5 [2016/01/09 12:40:27 | 000,000,000 | ---D | M]

[2014/08/30 09:52:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\asus\AppData\Roaming\mozilla\Extensions
[2015/12/28 15:21:40 | 000,000,000 | ---D | M] (No name found) -- C:\Users\asus\AppData\Roaming\mozilla\Firefox\Profiles\bvdnp588.default-1449438158314\extensions
[2015/12/28 15:21:40 | 000,000,000 | ---D | M] (No name found) -- C:\Users\asus\AppData\Roaming\mozilla\Firefox\Profiles\K1cykQcl.default\extensions
[2015/12/27 13:47:23 | 000,000,000 | ---D | M] (Avira Browser Safety) -- C:\Users\asus\AppData\Roaming\mozilla\Firefox\Profiles\K1cykQcl.default\extensions\abs@avira.com
[2015/12/15 14:23:58 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2015/12/27 13:48:01 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2015/10/02 12:35:54 | 000,030,178 | ---- | M] () (No name found) -- C:\PROGRAM FILES (X86)\INTERNET DOWNLOAD MANAGER\IDMMZCC2.XPI
File not found (No name found) -- C:\PROGRAM FILES (X86)\IOBIT APPS TOOLBAR\FF
File not found (No name found) -- C:\USERS\ASUS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BVDNP588.DEFAULT-1449438158314\EXTENSIONS\IOBITASCSURFINGPROTECTION@IOBIT.COM

[color=#E56717]========== Chrome ==========[/color]

CHR - default_search_provider: ()
CHR - default_search_provider: search_url =
CHR - default_search_provider: suggest_url =
CHR - plugin: Error reading preferences file
CHR - Extension: No name found = C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\
CHR - Extension: No name found = C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\goalojoobcfkhddpbjcmhdceeegmaphh\2.1.8.0_0\
CHR - Extension: No name found = C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\
CHR - Extension: No name found = C:\Users\asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\

O1 HOSTS File: ([2015/12/28 11:25:37 | 000,000,830 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:[b]64bit:[/b] - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll (Internet Download Manager, Tonec Inc.)
O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_65\bin\ssv.dll (Oracle Corporation)
O2:[b]64bit:[/b] - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2:[b]64bit:[/b] - BHO: (no name) - {AB4C7833-A6EC-433f-B9FE-6B14B1A2F836} - No CLSID value found.
O2:[b]64bit:[/b] - BHO: (Kaspersky Protection plugin) - {C66D064F-82FE-4E1A-B06A-B2490BA48B18} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\IEExt\ie_plugin.dll (AO Kaspersky Lab)
O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_65\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.)
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files (x86)\Real\RealPlayer\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (no name) - {AB4C7833-A6EC-433f-B9FE-6B14B1A2F836} - No CLSID value found.
O2 - BHO: (AcroIEToolbarHelper Class) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (Kaspersky Protection plugin) - {C66D064F-82FE-4E1A-B06A-B2490BA48B18} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll (AO Kaspersky Lab)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (Kaspersky Protection toolbar) - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\IEExt\ie_plugin.dll (AO Kaspersky Lab)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - {A13C2648-91D4-4bf3-BC6D-0079707C4389} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Kaspersky Protection toolbar) - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll (AO Kaspersky Lab)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (no name) - {A13C2648-91D4-4bf3-BC6D-0079707C4389} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O4:[b]64bit:[/b] - HKLM..\Run: [CDAServer] C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe ()
O4:[b]64bit:[/b] - HKLM..\Run: [DptfPolicyLpmServiceHelper] C:\Windows\SysNative\DptfPolicyLpmServiceHelper.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [IAStorIcon] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [NvBackend] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [ShadowPlay] C:\Windows\SysNative\nvspcap64.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [USB3MON] C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Intel Corporation)
O4 - HKCU..\Run: [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe (Tonec Inc.)
O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware)
O4 - HKLM..\RunOnceEx: [Flags] Reg Error: Invalid data type. File not found
O4 - HKLM..\RunOnceEx: [Title] UnHackMe Rootkit Check File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 253
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: BtvStack = "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe" (Qualcomm®Atheros®)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableCAD = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoInternetOpenWith = 1
O8:[b]64bit:[/b] - Extra context menu item: Convert link target to Adobe PDF - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:[b]64bit:[/b] - Extra context menu item: Convert link target to existing PDF - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:[b]64bit:[/b] - Extra context menu item: Convert selected links to Adobe PDF - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:[b]64bit:[/b] - Extra context menu item: Convert selected links to existing PDF - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:[b]64bit:[/b] - Extra context menu item: Convert selection to Adobe PDF - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:[b]64bit:[/b] - Extra context menu item: Convert selection to existing PDF - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:[b]64bit:[/b] - Extra context menu item: Convert to Adobe PDF - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:[b]64bit:[/b] - Extra context menu item: Convert to existing PDF - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:[b]64bit:[/b] - Extra context menu item: Télécharger avec IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()
O8:[b]64bit:[/b] - Extra context menu item: Télécharger tous les liens avec Internet Download Manager - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()
O8 - Extra context menu item: Convert link target to Adobe PDF - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert link target to existing PDF - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert selected links to Adobe PDF - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert selected links to existing PDF - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert selection to Adobe PDF - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert selection to existing PDF - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert to Adobe PDF - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert to existing PDF - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Télécharger avec IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()
O8 - Extra context menu item: Télécharger tous les liens avec Internet Download Manager - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O15:[b]64bit:[/b] - ..Trusted Domains: eset.com ([help] http in Trusted sites)
O15 - HKCU\..Trusted Domains: localhost ([]* in Sites de confiance)
O15 - HKCU\..Trusted Domains: yahoo.com ([fr] https in Sites de confiance)
O15 - HKCU\..Trusted Ranges: GD ([http] in Local intranet)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{6B01E150-403F-439F-857A-29ED9D60CAA6}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D45C1022-4DFA-4E94-A61E-B91B690FE73D}: DhcpNameServer = 192.168.42.129
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D45C1022-4DFA-4E94-A61E-B91B690FE73D}: NameServer = 192.168.1.1
O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
O20:[b]64bit:[/b] - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\System32\Userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - File not found
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 0
O32 - AutoRun File - [2015/08/21 15:27:31 | 000,000,000 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{8d02d85a-2fa6-11e4-adfe-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{8d02d85a-2fa6-11e4-adfe-806e6f6e6963}\Shell\AutoRun\command - "" = E:\AsInsWiz.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

NetSvcs:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

MsConfig:64bit - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Canon LBP2900 Fenêtre d'état.lnk - C:\Windows\SysNative\spool\drivers\x64\3\CNAB4LAD.EXE - (CANON INC.)
MsConfig:64bit - StartUpFolder: C:^Users^asus^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^System Mechanic Professional 14 Crack Serial Key.lnk - Reg Error: Value error. - File not found
MsConfig:64bit - StartUpReg: [b]Advanced SystemCare 8[/b] - hkey= - key= - File not found
MsConfig:64bit - StartUpReg: [b]AvastUI.exe[/b] - hkey= - key= - Reg Error: Value error. File not found
MsConfig:64bit - StartUpReg: [b]BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}[/b] - hkey= - key= - C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG)
MsConfig:64bit - StartUpReg: [b]MediaFire Tray[/b] - hkey= - key= - Reg Error: Value error. File not found
MsConfig:64bit - State: "startup" - Reg Error: Key error.

SafeBootMin:[b]64bit:[/b] !SASCORE - C:\Program Files\SUPERAntiSpyware\SASCore64.exe (SUPERAntiSpyware.com)
SafeBootMin:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] Base - Driver Group
SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group
SafeBootMin:[b]64bit:[/b] File system - Driver Group
SafeBootMin:[b]64bit:[/b] Filter - Driver Group
SafeBootMin:[b]64bit:[/b] HelpSvc - Service
SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group
SafeBootMin:[b]64bit:[/b] sacsvr - Service
SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] vmms - Service
SafeBootMin:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vmms - Service
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet:[b]64bit:[/b] !SASCORE - C:\Program Files\SUPERAntiSpyware\SASCore64.exe (SUPERAntiSpyware.com)
SafeBootNet:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] Base - Driver Group
SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group
SafeBootNet:[b]64bit:[/b] File system - Driver Group
SafeBootNet:[b]64bit:[/b] Filter - Driver Group
SafeBootNet:[b]64bit:[/b] HelpSvc - Service
SafeBootNet:[b]64bit:[/b] Messenger - Service
SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group
SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group
SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group
SafeBootNet:[b]64bit:[/b] Network - Driver Group
SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group
SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group
SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group
SafeBootNet:[b]64bit:[/b] rdsessmgr - Service
SafeBootNet:[b]64bit:[/b] sacsvr - Service
SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group
SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] TDI - Driver Group
SafeBootNet:[b]64bit:[/b] vmms - Service
SafeBootNet:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver
SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vmms - Service
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

ActiveX:[b]64bit:[/b] {1AD147D0-BE0E-3D6C-AC11-64F6DC4163F1} - .NET Framework
ActiveX:[b]64bit:[/b] {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:[b]64bit:[/b] {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:[b]64bit:[/b] {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:[b]64bit:[/b] {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:[b]64bit:[/b] {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:[b]64bit:[/b] {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:[b]64bit:[/b] {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:[b]64bit:[/b] {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:[b]64bit:[/b] {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:[b]64bit:[/b] {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:[b]64bit:[/b] {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:[b]64bit:[/b] {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX:[b]64bit:[/b] {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX:[b]64bit:[/b] {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:[b]64bit:[/b] {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:[b]64bit:[/b] {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:[b]64bit:[/b] {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:[b]64bit:[/b] {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX:[b]64bit:[/b] {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:[b]64bit:[/b] >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX:[b]64bit:[/b] >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX:[b]64bit:[/b] >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: {05466845-FF44-4671-92C1-A5FD0F9EEE1C} - Microsoft Reader
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Microsoft VM
ActiveX: {09AD8774-827C-D388-BCCF-5EC745C42A87} - Microsoft Windows Media Player
ActiveX: {1AD147D0-BE0E-3D6C-AC11-64F6DC4163F1} - .NET Framework
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {2C70950D-58DA-97F0-15BD-D3AC4FA877B3} - Microsoft Windows Media Player
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {4073912B-922C-A617-BCBD-CAFC87D97D86} - Microsoft Reader
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.106\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP

Drivers32:[b]64bit:[/b] msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: vidc.XVID - C:\Windows\SysWow64\xvidvfw.dll ()
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2016/01/08 18:31:46 | 000,000,000 | ---D | C] -- C:\Users\asus\Desktop\llg hx2
[2016/01/08 14:02:53 | 000,192,216 | ---- | C] (Malwarebytes) -- C:\Windows\SysNative\drivers\2BA27087.sys
[2016/01/07 20:09:36 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\asus\Desktop\OTL.exe
[2016/01/07 17:39:02 | 000,290,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\subinacl.exe
[2016/01/07 17:39:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adware Removal Tool by TSA
[2016/01/03 11:59:31 | 000,000,000 | ---D | C] -- C:\Users\asus\AppData\Local\TeamViewer
[2016/01/03 11:50:40 | 000,000,000 | ---D | C] -- C:\Users\asus\AppData\Roaming\TeamViewer
[2016/01/03 11:49:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TeamViewer
[2016/01/03 00:16:26 | 000,000,000 | ---D | C] -- C:\Users\asus\AppData\Local\Nvidia Corporation
[2016/01/03 00:11:09 | 000,000,000 | ---D | C] -- C:\Users\asus\AppData\Local\NVIDIA
[2016/01/03 00:10:49 | 000,276,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx11_43.dll
[2016/01/03 00:10:49 | 000,248,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx11_43.dll
[2016/01/03 00:10:48 | 000,511,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_43.dll
[2016/01/03 00:10:48 | 000,470,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_43.dll
[2016/01/03 00:10:42 | 002,401,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_43.dll
[2016/01/03 00:10:42 | 001,998,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_43.dll
[2016/01/03 00:09:18 | 001,756,424 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvspbridge64.dll
[2016/01/03 00:09:17 | 001,846,016 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvspcap64.dll
[2016/01/03 00:09:14 | 001,530,240 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvspcap.dll
[2016/01/03 00:09:14 | 001,316,184 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvspbridge.dll
[2016/01/03 00:08:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
[2016/01/03 00:04:48 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\NV
[2016/01/03 00:04:48 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\NV
[2016/01/03 00:03:37 | 000,075,056 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nv3dappshextr.dll
[2016/01/03 00:03:36 | 000,523,384 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nv3dappshext.dll
[2016/01/02 23:46:27 | 000,050,472 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvvad64v.sys
[2016/01/02 23:46:26 | 000,072,504 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvaudcap64v.dll
[2016/01/02 23:46:25 | 000,069,416 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvaudcap32v.dll
[2016/01/02 23:46:23 | 018,716,176 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvwgf2umx.dll
[2016/01/02 23:46:23 | 016,286,888 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvwgf2um.dll
[2016/01/02 23:46:22 | 000,388,560 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvumdshim.dll
[2016/01/02 23:46:20 | 021,122,456 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvopencl.dll
[2016/01/02 23:46:20 | 017,561,432 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvopencl.dll
[2016/01/02 23:46:20 | 000,031,352 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvpciflt.sys
[2016/01/02 23:46:17 | 031,061,624 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglv64.dll
[2016/01/02 23:46:17 | 024,895,792 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglv32.dll
[2016/01/02 23:46:17 | 000,151,184 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglshim64.dll
[2016/01/02 23:46:17 | 000,128,696 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglshim32.dll
[2016/01/02 23:46:12 | 000,153,392 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvinit.dll
[2016/01/02 23:46:10 | 000,938,104 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvFBC64.dll
[2016/01/02 23:46:10 | 000,872,056 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvIFR64.dll
[2016/01/02 23:46:10 | 000,681,592 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvIFR.dll
[2016/01/02 23:46:08 | 000,734,512 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvFBC.dll
[2016/01/02 23:46:06 | 001,564,976 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispgenco6436143.dll
[2016/01/02 23:46:04 | 001,915,696 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco6436143.dll
[2016/01/02 23:46:02 | 016,981,976 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvd3dumx.dll
[2016/01/02 23:46:01 | 014,005,408 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvd3dum.dll
[2016/01/02 23:45:55 | 020,663,816 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuda.dll
[2016/01/02 23:45:55 | 003,168,376 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvid.dll
[2016/01/02 23:45:55 | 002,755,704 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll
[2016/01/02 23:45:53 | 017,156,968 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuda.dll
[2016/01/02 23:45:37 | 003,637,352 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvapi64.dll
[2016/01/02 23:45:37 | 003,211,760 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvapi.dll
[2016/01/02 23:40:06 | 000,000,000 | ---D | C] -- C:\NVIDIA
[2016/01/02 22:48:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Intel Corporation
[2016/01/02 22:47:45 | 000,000,000 | ---D | C] -- C:\Users\asus\AppData\Roaming\Intel Corporation
[2016/01/02 22:46:17 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
[2016/01/02 22:41:50 | 000,000,000 | ---D | C] -- C:\Users\asus\Intel
[2016/01/02 22:41:31 | 000,000,000 | ---D | C] -- C:\Intel
[2016/01/02 22:41:16 | 000,814,376 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\iusb3xhc.sys
[2016/01/02 22:41:16 | 000,403,752 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\iusb3hub.sys
[2016/01/02 22:41:15 | 001,730,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WdfCoInstaller01009.dll
[2016/01/02 22:41:15 | 000,031,528 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\iusb3hcs.sys
[2016/01/02 19:19:39 | 000,000,000 | ---D | C] -- C:\Users\asus\AppData\Roaming\SUPERAntiSpyware.com
[2016/01/02 19:18:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
[2016/01/02 19:18:44 | 000,000,000 | ---D | C] -- C:\ProgramData\SUPERAntiSpyware.com
[2016/01/02 19:18:44 | 000,000,000 | ---D | C] -- C:\Program Files\SUPERAntiSpyware
[2016/01/02 18:35:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ma-config.com
[2016/01/02 18:35:22 | 000,000,000 | ---D | C] -- C:\Program Files\ma-config.com
[2016/01/02 18:35:20 | 000,000,000 | ---D | C] -- C:\ProgramData\ma-config.com
[2016/01/02 15:09:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5
[2016/01/02 15:09:38 | 000,020,160 | ---- | C] (Glarysoft Ltd) -- C:\Windows\SysNative\drivers\GUBootStartup.sys
[2016/01/02 14:54:22 | 000,000,000 | ---D | C] -- C:\ProgramData\{FD6F83C0-EC70-4581-8361-C70CD1AA4B98}
[2016/01/02 13:08:45 | 000,000,000 | ---D | C] -- C:\sh4ldr
[2016/01/02 13:07:13 | 000,052,184 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\dptf_pch.sys
[2016/01/02 13:05:34 | 000,194,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFPlatform.dll
[2016/01/02 13:05:32 | 000,744,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFx.dll
[2016/01/02 13:05:32 | 000,229,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFHost.exe
[2016/01/02 13:05:32 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFCoinstaller.dll
[2016/01/02 13:04:48 | 002,366,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WudfUpdate_01011.dll
[2016/01/02 13:04:48 | 001,806,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WdfCoInstaller01011.dll
[2016/01/02 13:04:47 | 001,392,792 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\esif_uf.exe
[2016/01/02 13:04:47 | 000,973,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msvcr120.dll
[2016/01/02 13:04:47 | 000,668,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msvcp120.dll
[2016/01/02 13:04:47 | 000,260,072 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\esif_lf.sys
[2016/01/02 11:46:20 | 000,192,216 | ---- | C] (Malwarebytes) -- C:\Windows\SysNative\drivers\61B53338.sys
[2015/12/29 22:33:51 | 000,000,000 | ---D | C] -- C:\Users\asus\AppData\Roaming\Everything
[2015/12/29 21:30:28 | 000,000,000 | ---D | C] -- C:\ProgramData\BSD
[2015/12/29 21:30:16 | 000,000,000 | ---D | C] -- C:\Users\asus\AppData\Roaming\Performix LLC
[2015/12/29 21:30:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Adguard
[2015/12/29 21:30:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adguard
[2015/12/29 20:33:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Auslogics
[2015/12/28 20:15:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\sAccessNet
[2015/12/28 16:10:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Everything
[2015/12/28 16:07:28 | 000,000,000 | ---D | C] -- C:\Users\asus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Everything
[2015/12/28 15:44:36 | 000,000,000 | ---D | C] -- C:\Users\asus\Desktop\docs du groupe
[2015/12/28 15:43:50 | 000,000,000 | ---D | C] -- C:\Users\asus\AppData\Roaming\AdobeUM
[2015/12/28 14:20:26 | 000,031,264 | ---- | C] (ThreatTrack Security) -- C:\Windows\SysNative\drivers\gfiutil.sys
[2015/12/28 14:11:51 | 005,457,816 | ---- | C] ((c) PC Cleaners Inc) -- C:\ProgramData\pclunst.exe
[2015/12/28 14:11:39 | 000,000,000 | ---D | C] -- C:\ProgramData\PC1Data
[2015/12/28 13:59:49 | 000,000,000 | ---D | C] -- C:\ProgramData\ProductData
[2015/12/28 13:49:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
[2015/12/28 13:49:32 | 000,000,000 | ---D | C] -- C:\ProgramData\{D76294E6-03B8-4971-AF2E-3F846161A690}
[2015/12/28 13:49:31 | 000,000,000 | ---D | C] -- C:\ProgramData\{ACBCD40A-42A8-4FF9-BD42-ABCD14998CBA}
[2015/12/28 13:48:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Opera
[2015/12/28 08:33:07 | 000,000,000 | ---D | C] -- C:\ProgramData\RegRun
[2015/12/28 08:26:50 | 000,000,000 | ---D | C] -- C:\Users\asus\Documents\RegRun2
[2015/12/28 08:26:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\UnHackMe
[2015/12/28 07:17:53 | 000,386,096 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
[2015/12/28 06:51:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET
[2015/12/28 06:35:40 | 000,000,000 | ---D | C] -- C:\ProgramData\GlarySoft
[2015/12/28 06:26:24 | 000,000,000 | ---D | C] -- C:\Users\asus\AppData\Roaming\DiskDefrag
[2015/12/28 06:23:54 | 000,155,304 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswStm.sys
[2015/12/28 06:23:53 | 000,273,784 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswVmm.sys
[2015/12/28 06:23:52 | 000,451,040 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswsp.sys
[2015/12/28 06:23:52 | 000,097,648 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswmonflt.sys
[2015/12/28 06:23:52 | 000,065,224 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRvrt.sys
[2015/12/28 06:23:51 | 000,028,656 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswHwid.sys
[2015/12/28 06:23:50 | 000,093,528 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr2.sys
[2015/12/28 06:23:48 | 001,055,560 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
[2015/12/28 06:23:48 | 000,028,144 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswKbd.sys
[2015/12/28 06:23:28 | 000,043,112 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
[2015/12/28 06:23:23 | 000,466,400 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswNdisFlt.sys
[2015/12/28 06:22:46 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2015/12/27 23:47:42 | 000,170,280 | ---- | C] (ESET) -- C:\Windows\SysNative\drivers\ESETCleanersDriver.sys
[2015/12/27 23:24:45 | 000,000,000 | ---D | C] -- C:\Users\asus\AppData\Roaming\ProductData
[2015/12/27 09:26:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
[2015/12/27 09:26:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira
[2015/12/27 08:39:39 | 000,000,000 | ---D | C] -- C:\ProgramData\IDM
[2015/12/27 00:19:48 | 000,000,000 | ---D | C] -- C:\zoek_backup
[2015/12/25 22:39:07 | 000,450,504 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\coxgfxsz.sys
[2015/12/25 22:38:22 | 000,450,504 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\lxyvueeb.sys
[2015/12/25 22:38:21 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
[2015/12/25 22:08:54 | 000,000,000 | --SD | C] -- C:\Windows\SysWow64\Microsoft
[2015/12/25 18:51:10 | 000,192,216 | ---- | C] (Malwarebytes) -- C:\Windows\SysNative\drivers\56A5074F.sys
[2015/12/25 18:14:38 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\GroupPolicy
[2015/12/25 17:52:21 | 000,000,000 | ---D | C] -- C:\Users\asus\Desktop\lib
[2015/12/25 17:11:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security
[2015/12/25 17:04:41 | 000,940,928 | ---- | C] (AO Kaspersky Lab) -- C:\Windows\SysNative\drivers\klif.sys
[2015/12/25 17:04:41 | 000,181,640 | ---- | C] (AO Kaspersky Lab) -- C:\Windows\SysNative\drivers\klflt.sys
[2015/12/25 16:38:15 | 000,000,000 | ---D | C] -- C:\Users\asus\Desktop\Devoirs et TD pdf
[2015/12/21 12:21:59 | 000,000,000 | ---D | C] -- C:\Users\asus\.matplotlib
[2015/12/21 10:33:17 | 000,000,000 | ---D | C] -- C:\Users\asus\Desktop\Stage Python
[2015/12/21 10:17:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\pyzo2015a
[2015/12/21 10:14:27 | 000,000,000 | ---D | C] -- C:\pyzo2015a
[2015/12/21 10:03:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\pyzo2014a
[2015/12/21 09:33:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Python 3.3
[2015/12/21 09:32:17 | 000,000,000 | ---D | C] -- C:\Python33
[2015/12/17 13:34:14 | 001,382,240 | ---- | C] (TOSHIBA Corporation) -- C:\Windows\SysNative\tosade.dll
[2015/12/17 13:34:13 | 000,873,464 | ---- | C] (TOSHIBA Corporation) -- C:\Windows\SysNative\tadefxapo264.dll
[2015/12/17 13:34:13 | 000,166,208 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSWOW64.dll
[2015/12/17 13:34:13 | 000,158,704 | ---- | C] (TOSHIBA Corporation) -- C:\Windows\SysNative\tadefxapo.dll
[2015/12/17 13:34:13 | 000,075,544 | ---- | C] (TOSHIBA CORPORATION.) -- C:\Windows\SysNative\tepeqapo64.dll
[2015/12/17 13:34:12 | 000,532,384 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSX64.dll
[2015/12/17 13:34:12 | 000,221,976 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSH64.dll
[2015/12/17 13:34:12 | 000,209,536 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSHP64.dll
[2015/12/17 13:34:10 | 000,965,032 | ---- | C] (Sony Corporation) -- C:\Windows\SysNative\SFSS_APO.dll
[2015/12/17 13:34:09 | 000,231,920 | ---- | C] (Synopsys, Inc.) -- C:\Windows\SysNative\SFNHK64.dll
[2015/12/17 13:34:09 | 000,090,920 | ---- | C] (Synopsys, Inc.) -- C:\Windows\SysNative\SFCOM64.dll
[2015/12/17 13:34:09 | 000,088,328 | ---- | C] (Synopsys, Inc.) -- C:\Windows\SysNative\SFAPO64.dll
[2015/12/17 13:34:09 | 000,083,632 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysWow64\SFCOM.dll
[2015/12/17 13:34:06 | 002,997,504 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtPgEx64.dll
[2015/12/17 13:34:06 | 002,893,568 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTSnMg64.cpl
[2015/12/17 13:34:06 | 000,343,712 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtlCPAPI64.dll
[2015/12/17 13:34:01 | 000,195,192 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkCfg64.dll
[2015/12/17 13:34:01 | 000,023,704 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkCoLDR64.dll
[2015/12/17 13:34:00 | 003,271,912 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkApi64.dll
[2015/12/17 13:34:00 | 000,689,888 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtDataProc64.dll
[2015/12/17 13:34:00 | 000,387,320 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEP64A.dll
[2015/12/17 13:34:00 | 000,214,840 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEED64A.dll
[2015/12/17 13:34:00 | 000,110,984 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEL64A.dll
[2015/12/17 13:34:00 | 000,088,352 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEG64A.dll
[2015/12/17 13:33:58 | 002,965,120 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RltkAPO64.dll
[2015/12/17 13:33:58 | 001,351,992 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTCOM64.dll
[2015/12/17 13:33:58 | 000,321,720 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DHT64.dll
[2015/12/17 13:33:58 | 000,321,720 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DAA64.dll
[2015/12/17 13:33:56 | 072,203,792 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoRes64.dat
[2015/12/17 13:33:56 | 002,028,664 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoInstII64.dll
[2015/12/17 13:33:52 | 007,172,920 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEP64A.dll
[2015/12/17 13:33:52 | 000,447,720 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EED64A.dll
[2015/12/17 13:33:52 | 000,151,792 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEL64A.dll
[2015/12/17 13:33:52 | 000,134,208 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEA64A.dll
[2015/12/17 13:33:52 | 000,084,624 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEG64A.dll
[2015/12/17 13:33:48 | 000,677,672 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxVolumeSDAPO.dll
[2015/12/17 13:33:36 | 002,050,184 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioEQ64.dll
[2015/12/17 13:33:35 | 001,164,336 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO4064.dll
[2015/12/17 13:33:35 | 000,678,184 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO30.dll
[2015/12/17 13:33:35 | 000,330,568 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO20.dll
[2015/12/17 13:33:34 | 000,618,192 | ---- | C] (Knowles Acoustics ) -- C:\Windows\SysNative\KAAPORT64.dll
[2015/12/17 13:33:33 | 007,096,192 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\DDPP64A.dll
[2015/12/17 13:33:33 | 003,278,408 | ---- | C] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll
[2015/12/17 13:33:33 | 001,965,816 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\DDPD64A.dll
[2015/12/17 13:33:33 | 001,780,624 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2SpeakerDLL64.dll
[2015/12/17 13:33:33 | 001,591,064 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2HeadphoneDLL64.dll
[2015/12/17 13:33:33 | 001,508,936 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBoostDLL64.dll
[2015/12/17 13:33:33 | 000,743,968 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBassEnhancementDLL64.dll
[2015/12/17 13:33:33 | 000,727,440 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSSymmetryDLL64.dll
[2015/12/17 13:33:33 | 000,708,320 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSVoiceClarityDLL64.dll
[2015/12/17 13:33:33 | 000,574,760 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAC64.dll
[2015/12/17 13:33:33 | 000,514,528 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSU2PLFX64.dll
[2015/12/17 13:33:33 | 000,504,312 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSNeoPCDLL64.dll
[2015/12/17 13:33:33 | 000,500,560 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSU2PGFX64.dll
[2015/12/17 13:33:33 | 000,445,408 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLimiterDLL64.dll
[2015/12/17 13:33:33 | 000,441,272 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGainCompensatorDLL64.dll
[2015/12/17 13:33:33 | 000,428,232 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSU2PREC64.dll
[2015/12/17 13:33:33 | 000,327,464 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\DDPO64A.dll
[2015/12/17 13:33:33 | 000,272,720 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\DDPA64.dll
[2015/12/17 13:33:33 | 000,253,904 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPO64.dll
[2015/12/17 13:33:33 | 000,253,872 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLFXAPO64.dll
[2015/12/17 13:33:33 | 000,252,880 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPONS64.dll
[2015/12/17 13:33:33 | 000,122,328 | ---- | C] (Real Sound Lab SIA) -- C:\Windows\SysNative\CONEQMSAPOGUILibrary.dll
[2015/12/17 13:33:33 | 000,118,600 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAR64.dll
[2015/12/17 13:32:33 | 001,026,304 | ---- | C] (Realtek ) -- C:\Windows\SysNative\drivers\Rt64win7.sys
[2015/12/17 13:32:33 | 000,082,544 | ---- | C] (Realtek Semiconductor Corporation) -- C:\Windows\SysNative\RtNicProp64.dll
[2015/12/17 13:32:19 | 001,806,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WdfCoInstaller01011.dll
[2015/12/17 13:32:19 | 000,052,200 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\dptf_cpu.sys
[2015/12/17 13:31:55 | 004,161,536 | ---- | C] (Qualcomm Atheros Communications, Inc.) -- C:\Windows\SysNative\drivers\athrx.sys
[2015/12/17 13:31:00 | 000,057,304 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\dptf_acpi.sys
[2015/12/15 14:23:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2015/12/15 13:40:52 | 000,000,000 | ---D | C] -- C:\Program Files\BotRevoltFree
[2015/12/15 13:37:21 | 000,162,392 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NSTx64\7DE070B0.02A\ccSetx64.sys
[2015/12/15 13:36:50 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\NSTx64
[2015/12/15 13:36:50 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\NSTx64\7DE070B0.02A
[2015/12/15 13:36:39 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Identity Safe
[2015/12/15 13:36:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Norton Identity Safe
[2015/12/15 13:36:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Norton
[2015/12/15 13:35:27 | 000,000,000 | ---D | C] -- C:\ProgramData\NortonInstaller
[2015/12/15 13:35:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NortonInstaller
[2015/12/15 13:25:00 | 000,000,000 | -HSD | C] -- C:\Windows\SysWow64\%APPDATA%
[2015/12/14 22:58:06 | 000,000,000 | ---D | C] -- C:\Users\asus\AppData\Roaming\Auslogics
[2015/12/14 22:57:59 | 000,000,000 | ---D | C] -- C:\ProgramData\TEMP
[2015/12/14 00:12:11 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\%Report%
[2015/12/13 14:43:35 | 000,000,000 | ---D | C] -- C:\ProgramData\QFX Software
[2015/12/13 14:26:30 | 000,000,000 | ---D | C] -- C:\Program Files\Folder Guard
[2015/12/12 00:07:54 | 000,192,216 | ---- | C] (Malwarebytes) -- C:\Windows\SysNative\drivers\77B233DE.sys
[2015/12/11 23:07:49 | 000,000,000 | ---D | C] -- C:\Users\asus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
[2015/12/11 23:07:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
[2015/12/11 23:07:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Internet Download Manager
[2015/12/11 00:01:44 | 000,192,216 | ---- | C] (Malwarebytes) -- C:\Windows\SysNative\drivers\05BC6104.sys
[10 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ]
[1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2016/01/09 13:24:17 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2016/01/09 13:23:29 | 000,001,070 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2016/01/09 12:53:55 | 000,192,216 | ---- | M] (Malwarebytes) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys
[2016/01/09 12:48:30 | 000,020,512 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2016/01/09 12:48:30 | 000,020,512 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2016/01/09 12:40:04 | 000,001,066 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2016/01/09 12:39:07 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2016/01/09 12:38:52 | 3129,528,320 | -HS- | M] () -- C:\hiberfil.sys
[2016/01/08 22:14:19 | 003,292,970 | ---- | M] () -- C:\Users\asus\Desktop\proba mp m14ae1e.pdf
[2016/01/08 22:10:44 | 008,339,466 | ---- | M] () -- C:\Windows\SysNative\perfh00C.dat
[2016/01/08 22:10:44 | 004,467,520 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2016/01/08 22:10:44 | 002,870,876 | ---- | M] () -- C:\Windows\SysNative\perfc00C.dat
[2016/01/08 22:10:43 | 002,612,066 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2016/01/08 22:10:43 | 000,006,432 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2016/01/08 19:32:20 | 000,192,216 | ---- | M] (Malwarebytes) -- C:\Windows\SysNative\drivers\2BA27087.sys
[2016/01/07 19:50:22 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\asus\Desktop\OTL.exe
[2016/01/07 19:19:01 | 000,000,508 | ---- | M] () -- C:\Windows\tasks\SUPERAntiSpyware Scheduled Task 258b8937-8da4-47a8-8057-e091bd9dcf5f.job
[2016/01/07 17:39:02 | 000,290,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\subinacl.exe
[2016/01/07 13:29:37 | 005,323,487 | ---- | M] () -- C:\Users\asus\Desktop\[Michel_Métivier]_Notions_fondamentales_de_la_thÃ(BookZZ.org).djvu
[2016/01/06 15:24:29 | 031,193,034 | ---- | M] () -- C:\Users\asus\Desktop\[Alain_Yger,_Jacques-Arthur_Weil]_Mathématiques_a(BookZZ.org).djvu
[2016/01/06 14:58:26 | 000,729,210 | ---- | M] () -- C:\Users\asus\Desktop\[Arbenz_K.,_Wohlhauser_A.]_Complements_d'analyse(BookZZ.org).djvu
[2016/01/06 14:43:01 | 006,297,349 | ---- | M] () -- C:\Users\asus\Desktop\[Rudin]_Analyse_réelle_et_complexe__Cours_et_exe(BookZZ.org).djvu
[2016/01/05 13:27:43 | 000,072,869 | ---- | M] () -- C:\Users\asus\Desktop\DemandeMvt2353.pdf
[2016/01/04 23:24:13 | 000,000,009 | ---- | M] () -- C:\Users\asus\Desktop\TD MP Probabilité 2015.aux
[2016/01/04 23:21:33 | 000,029,775 | ---- | M] () -- C:\Users\asus\Desktop\TD MP Probabilité 2015.tex
[2016/01/04 23:21:26 | 000,029,775 | ---- | M] () -- C:\Users\asus\Desktop\TD MP Probabilité 2015.bak
[2016/01/03 12:05:13 | 000,552,768 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2016/01/03 11:50:14 | 000,001,035 | ---- | M] () -- C:\Users\Public\Desktop\TeamViewer 11.lnk
[2016/01/03 00:11:33 | 000,001,403 | ---- | M] () -- C:\Users\Public\Desktop\GeForce Experience.lnk
[2016/01/02 22:05:24 | 000,000,508 | ---- | M] () -- C:\Windows\tasks\SUPERAntiSpyware Scheduled Task 6c0a92ea-c0e8-41b6-8d0f-81ef3b3bc13a.job
[2016/01/02 19:18:48 | 000,001,784 | ---- | M] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk
[2016/01/02 18:40:48 | 001,743,360 | ---- | M] () -- C:\Users\asus\Desktop\adwcleaner_5.026.exe
[2016/01/02 16:35:55 | 000,030,056 | ---- | M] () -- C:\Users\asus\Desktop\DL dérivation DS MPSI2 calcul matriciel 2013.tex
[2016/01/02 16:09:24 | 000,192,216 | ---- | M] (Malwarebytes) -- C:\Windows\SysNative\drivers\61B53338.sys
[2016/01/02 15:09:47 | 000,001,114 | ---- | M] () -- C:\Users\asus\Application Data\Microsoft\Internet Explorer\Quick Launch\Glary Utilities 5.lnk
[2016/01/02 15:09:38 | 000,020,160 | ---- | M] (Glarysoft Ltd) -- C:\Windows\SysNative\drivers\GUBootStartup.sys
[2016/01/02 14:16:08 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_esif_umdf_01_11_00.Wdf
[2016/01/02 13:07:13 | 000,052,184 | ---- | M] (Intel Corporation) -- C:\Windows\SysNative\drivers\dptf_pch.sys
[2016/01/02 13:07:04 | 000,022,704 | ---- | M] () -- C:\Windows\SysNative\drivers\EsgScanner.sys
[2016/01/02 13:06:49 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_esif_lf_01011.Wdf
[2016/01/02 13:06:43 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\MsftWdf_user_01_11_00.Wdf
[2016/01/02 13:04:48 | 002,366,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WudfUpdate_01011.dll
[2016/01/02 13:04:48 | 001,806,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WdfCoInstaller01011.dll
[2016/01/02 13:04:48 | 000,973,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msvcr120.dll
[2016/01/02 13:04:47 | 001,392,792 | ---- | M] (Intel Corporation) -- C:\Windows\SysWow64\esif_uf.exe
[2016/01/02 13:04:47 | 000,830,616 | ---- | M] (Intel Corporation) -- C:\Windows\SysNative\drivers\UMDF\esif_umdf.dll
[2016/01/02 13:04:47 | 000,668,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msvcp120.dll
[2016/01/02 13:04:47 | 000,260,072 | ---- | M] (Intel Corporation) -- C:\Windows\SysNative\drivers\esif_lf.sys
[2016/01/01 14:31:38 | 000,188,610 | ---- | M] () -- C:\Users\asus\Desktop\Soutien DERIVATION 2010 MPSI.tex
[2016/01/01 14:10:21 | 000,170,930 | ---- | M] () -- C:\Users\asus\Desktop\DS DERIVATION 2010 MPSI.tex
[2016/01/01 14:08:53 | 000,196,487 | ---- | M] () -- C:\Users\asus\Desktop\DS 3 MPSI dérivation 2011 ibn ghazi.tex
[2016/01/01 10:52:31 | 000,001,066 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2016/01/01 10:52:30 | 000,001,111 | ---- | M] () -- C:\Users\Public\Desktop\Opera.lnk
[2016/01/01 10:52:30 | 000,001,102 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2016/01/01 10:52:29 | 000,002,306 | ---- | M] () -- C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
[2016/01/01 10:52:29 | 000,001,364 | ---- | M] () -- C:\Users\Public\Desktop\IObit Uninstaller.lnk
[2016/01/01 10:52:17 | 000,001,344 | ---- | M] () -- C:\Users\asus\Application Data\Microsoft\Internet Explorer\Quick Launch\Video Converter Studio.lnk
[2016/01/01 10:52:17 | 000,000,272 | ---- | M] () -- C:\Users\asus\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2016/01/01 10:52:16 | 000,001,993 | ---- | M] () -- C:\Users\asus\Application Data\Microsoft\Internet Explorer\Quick Launch\Samsung Kies 3.lnk
[2016/01/01 10:52:16 | 000,000,290 | ---- | M] () -- C:\Users\asus\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2016/01/01 10:52:15 | 000,002,772 | ---- | M] () -- C:\Users\asus\Application Data\Microsoft\Internet Explorer\Quick Launch\Nero StartSmart.lnk
[2016/01/01 10:52:15 | 000,002,676 | ---- | M] () -- C:\Users\asus\Application Data\Microsoft\Internet Explorer\Quick Launch\Nero Home.lnk
[2016/01/01 10:52:14 | 000,002,277 | ---- | M] () -- C:\Users\asus\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2016/01/01 10:52:14 | 000,001,381 | ---- | M] () -- C:\Users\asus\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2016/01/01 10:52:13 | 000,001,115 | ---- | M] () -- C:\Users\asus\Application Data\Microsoft\Internet Explorer\Quick Launch\CodeBlocks.lnk
[2016/01/01 10:52:06 | 000,001,302 | ---- | M] () -- C:\Users\asus\Desktop\Auslogics Disk Defrag Professional.lnk
[2015/12/31 13:26:46 | 017,816,737 | ---- | M] () -- C:\Users\asus\Desktop\[Corina_Reischer,_Raymond_Leblanc,_Bruno_Rémillar(BookZZ.org).pdf
[2015/12/30 13:28:29 | 000,002,052 | ---- | M] () -- C:\Windows\epplauncher.mif
[2015/12/29 21:30:51 | 000,000,232 | ---- | M] () -- C:\Windows\SysWow64\drivers\vwifikerneldrv.sys
[2015/12/29 21:30:51 | 000,000,232 | ---- | M] () -- C:\ProgramData\fontcacheev1.dat
[2015/12/28 23:36:49 | 000,001,392 | ---- | M] () -- C:\Users\asus\Desktop\DS dérivation et equation diff 2010.tex
[2015/12/28 21:57:05 | 000,412,893 | ---- | M] () -- C:\Users\asus\Desktop\dichotomienewton_2.pdf
[2015/12/28 19:13:04 | 000,096,972 | ---- | M] () -- C:\Users\asus\Desktop\Corr dérivation.tex
[2015/12/28 19:12:32 | 000,006,574 | ---- | M] () -- C:\Users\asus\Desktop\O031CW03.xvz
[2015/12/28 19:11:17 | 000,003,112 | ---- | M] () -- C:\Users\asus\Desktop\O031DS04.wmf
[2015/12/28 17:45:52 | 000,246,638 | ---- | M] () -- C:\Users\asus\Desktop\DS dérivation et equation diff 2010.bak
[2015/12/28 16:03:09 | 000,559,063 | ---- | M] () -- C:\Users\asus\Desktop\Everything-1.3.4.686.x64-Setup.exe
[2015/12/28 14:11:31 | 005,457,816 | ---- | M] ((c) PC Cleaners Inc) -- C:\ProgramData\pclunst.exe
[2015/12/28 13:58:13 | 000,192,216 | ---- | M] (Malwarebytes) -- C:\Windows\SysNative\drivers\56A5074F.sys
[2015/12/28 13:54:40 | 000,000,434 | ---- | M] () -- C:\Windows\tasks\Opera scheduled Autoupdate 1451310872.job
[2015/12/28 11:26:19 | 000,000,045 | ---- | M] () -- C:\Windows\SysNative\Partizan.RRI
[2015/12/28 08:26:56 | 000,000,002 | RHS- | M] () -- C:\Windows\winstart.bat
[2015/12/28 08:26:56 | 000,000,002 | RHS- | M] () -- C:\Windows\SysWow64\AUTOEXEC.NT
[2015/12/28 07:18:57 | 000,451,040 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswsp.sys
[2015/12/28 07:18:57 | 000,097,648 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswmonflt.sys
[2015/12/28 06:23:29 | 000,386,096 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
[2015/12/28 06:23:29 | 000,273,784 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswVmm.sys
[2015/12/28 06:23:29 | 000,155,304 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswStm.sys
[2015/12/28 06:23:29 | 000,093,528 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr2.sys
[2015/12/28 06:23:29 | 000,065,224 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRvrt.sys
[2015/12/28 06:23:29 | 000,028,656 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswHwid.sys
[2015/12/28 06:23:28 | 000,043,112 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
[2015/12/28 06:23:25 | 001,055,560 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
[2015/12/28 06:23:25 | 000,028,144 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswKbd.sys
[2015/12/28 06:23:23 | 000,466,400 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswNdisFlt.sys
[2015/12/28 00:34:57 | 000,170,280 | ---- | M] (ESET) -- C:\Windows\SysNative\drivers\ESETCleanersDriver.sys
[2015/12/28 00:10:34 | 000,049,904 | ---- | M] () -- C:\Users\asus\Documents\cc_20151228_001000.reg
[2015/12/26 23:40:34 | 010,645,418 | ---- | M] () -- C:\Users\asus\Desktop\Cours de Maths MPSI.pdf
[2015/12/25 22:39:07 | 000,450,504 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\coxgfxsz.sys
[2015/12/25 22:38:22 | 000,450,504 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\lxyvueeb.sys
[2015/12/25 22:33:51 | 000,073,264 | ---- | M] () -- C:\Users\asus\Desktop\12234883_528094107363344_8424314014372629673_n.jpg
[2015/12/25 22:12:14 | 000,001,032 | RHS- | M] () -- C:\ProgramData\ntuser.pol
[2015/12/25 19:14:32 | 000,041,352 | ---- | M] (AO Kaspersky Lab) -- C:\Windows\SysNative\drivers\klpd.sys
[2015/12/25 19:14:31 | 000,940,928 | ---- | M] (AO Kaspersky Lab) -- C:\Windows\SysNative\drivers\klif.sys
[2015/12/25 19:14:30 | 000,181,640 | ---- | M] (AO Kaspersky Lab) -- C:\Windows\SysNative\drivers\klflt.sys
[2015/12/25 18:46:29 | 000,005,120 | ---- | M] () -- C:\Users\asus\AppData\Roaming\GiftBag.db
[2015/12/25 18:18:31 | 000,227,000 | ---- | M] (AO Kaspersky Lab) -- C:\Windows\SysNative\drivers\klhk.sys
[2015/12/25 18:14:52 | 000,000,008 | RHS- | M] () -- C:\Users\asus\ntuser.pol
[2015/12/21 10:28:19 | 000,000,025 | ---- | M] () -- C:\Users\asus\Desktop\TP python.py
[2015/12/17 13:36:10 | 000,319,042 | ---- | M] () -- C:\Windows\SysNative\drivers\RTWAVES40.dat
[2015/12/17 13:34:14 | 001,382,240 | ---- | M] (TOSHIBA Corporation) -- C:\Windows\SysNative\tosade.dll
[2015/12/17 13:34:13 | 000,873,464 | ---- | M] (TOSHIBA Corporation) -- C:\Windows\SysNative\tadefxapo264.dll
[2015/12/17 13:34:13 | 000,532,384 | ---- | M] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSX64.dll
[2015/12/17 13:34:13 | 000,166,208 | ---- | M] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSWOW64.dll
[2015/12/17 13:34:13 | 000,158,704 | ---- | M] (TOSHIBA Corporation) -- C:\Windows\SysNative\tadefxapo.dll
[2015/12/17 13:34:13 | 000,075,544 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Windows\SysNative\tepeqapo64.dll
[2015/12/17 13:34:12 | 000,221,976 | ---- | M] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSH64.dll
[2015/12/17 13:34:12 | 000,209,536 | ---- | M] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSHP64.dll
[2015/12/17 13:34:10 | 000,965,032 | ---- | M] (Sony Corporation) -- C:\Windows\SysNative\SFSS_APO.dll
[2015/12/17 13:34:09 | 000,231,920 | ---- | M] (Synopsys, Inc.) -- C:\Windows\SysNative\SFNHK64.dll
[2015/12/17 13:34:09 | 000,090,920 | ---- | M] (Synopsys, Inc.) -- C:\Windows\SysNative\SFCOM64.dll
[2015/12/17 13:34:09 | 000,088,328 | ---- | M] (Synopsys, Inc.) -- C:\Windows\SysNative\SFAPO64.dll
[2015/12/17 13:34:09 | 000,083,632 | ---- | M] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysWow64\SFCOM.dll
[2015/12/17 13:34:06 | 002,997,504 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtPgEx64.dll
[2015/12/17 13:34:06 | 002,893,568 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTSnMg64.cpl
[2015/12/17 13:34:06 | 000,343,712 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtlCPAPI64.dll
[2015/12/17 13:34:01 | 003,271,912 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkApi64.dll
[2015/12/17 13:34:01 | 000,195,192 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkCfg64.dll
[2015/12/17 13:34:01 | 000,023,704 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkCoLDR64.dll
[2015/12/17 13:34:00 | 000,689,888 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtDataProc64.dll
[2015/12/17 13:34:00 | 000,387,320 | ---- | M] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEP64A.dll
[2015/12/17 13:34:00 | 000,214,840 | ---- | M] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEED64A.dll
[2015/12/17 13:34:00 | 000,110,984 | ---- | M] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEL64A.dll
[2015/12/17 13:34:00 | 000,088,352 | ---- | M] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEG64A.dll
[2015/12/17 13:33:59 | 001,351,992 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTCOM64.dll
[2015/12/17 13:33:58 | 004,005,405 | ---- | M] () -- C:\Windows\SysNative\drivers\RTAIODAT.DAT
[2015/12/17 13:33:58 | 002,965,120 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RltkAPO64.dll
[2015/12/17 13:33:58 | 000,321,720 | ---- | M] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DHT64.dll
[2015/12/17 13:33:58 | 000,321,720 | ---- | M] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DAA64.dll
[2015/12/17 13:33:57 | 072,203,792 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoRes64.dat
[2015/12/17 13:33:56 | 002,028,664 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoInstII64.dll
[2015/12/17 13:33:52 | 007,172,920 | ---- | M] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEP64A.dll
[2015/12/17 13:33:52 | 000,447,720 | ---- | M] (Dolby Laboratories) -- C:\Windows\SysNative\R4EED64A.dll
[2015/12/17 13:33:52 | 000,151,792 | ---- | M] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEL64A.dll
[2015/12/17 13:33:52 | 000,134,208 | ---- | M] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEA64A.dll
[2015/12/17 13:33:52 | 000,084,624 | ---- | M] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEG64A.dll
[2015/12/17 13:33:48 | 000,677,672 | ---- | M] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxVolumeSDAPO.dll
[2015/12/17 13:33:36 | 002,050,184 | ---- | M] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioEQ64.dll
[2015/12/17 13:33:36 | 001,164,336 | ---- | M] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO4064.dll
[2015/12/17 13:33:35 | 000,678,184 | ---- | M] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO30.dll
[2015/12/17 13:33:35 | 000,330,568 | ---- | M] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO20.dll
[2015/12/17 13:33:34 | 000,618,192 | ---- | M] (Knowles Acoustics ) -- C:\Windows\SysNative\KAAPORT64.dll
[2015/12/17 13:33:33 | 007,096,192 | ---- | M] (Dolby Laboratories) -- C:\Windows\SysNative\DDPP64A.dll
[2015/12/17 13:33:33 | 003,278,408 | ---- | M] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll
[2015/12/17 13:33:33 | 001,965,816 | ---- | M] (Dolby Laboratories) -- C:\Windows\SysNative\DDPD64A.dll
[2015/12/17 13:33:33 | 001,780,624 | ---- | M] (DTS) -- C:\Windows\SysNative\DTSS2SpeakerDLL64.dll
[2015/12/17 13:33:33 | 001,591,064 | ---- | M] (DTS) -- C:\Windows\SysNative\DTSS2HeadphoneDLL64.dll
[2015/12/17 13:33:33 | 001,508,936 | ---- | M] (DTS) -- C:\Windows\SysNative\DTSBoostDLL64.dll
[2015/12/17 13:33:33 | 000,743,968 | ---- | M] (DTS) -- C:\Windows\SysNative\DTSBassEnhancementDLL64.dll
[2015/12/17 13:33:33 | 000,727,440 | ---- | M] (DTS) -- C:\Windows\SysNative\DTSSymmetryDLL64.dll
[2015/12/17 13:33:33 | 000,708,320 | ---- | M] (DTS) -- C:\Windows\SysNative\DTSVoiceClarityDLL64.dll
[2015/12/17 13:33:33 | 000,574,760 | ---- | M] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAC64.dll
[2015/12/17 13:33:33 | 000,514,528 | ---- | M] (DTS) -- C:\Windows\SysNative\DTSU2PLFX64.dll
[2015/12/17 13:33:33 | 000,504,312 | ---- | M] (DTS) -- C:\Windows\SysNative\DTSNeoPCDLL64.dll
[2015/12/17 13:33:33 | 000,500,560 | ---- | M] (DTS) -- C:\Windows\SysNative\DTSU2PGFX64.dll
[2015/12/17 13:33:33 | 000,445,408 | ---- | M] (DTS) -- C:\Windows\SysNative\DTSLimiterDLL64.dll
[2015/12/17 13:33:33 | 000,441,272 | ---- | M] (DTS) -- C:\Windows\SysNative\DTSGainCompensatorDLL64.dll
[2015/12/17 13:33:33 | 000,428,232 | ---- | M] (DTS) -- C:\Windows\SysNative\DTSU2PREC64.dll
[2015/12/17 13:33:33 | 000,327,464 | ---- | M] (Dolby Laboratories) -- C:\Windows\SysNative\DDPO64A.dll
[2015/12/17 13:33:33 | 000,272,720 | ---- | M] (Dolby Laboratories) -- C:\Windows\SysNative\DDPA64.dll
[2015/12/17 13:33:33 | 000,253,904 | ---- | M] (DTS) -- C:\Windows\SysNative\DTSGFXAPO64.dll
[2015/12/17 13:33:33 | 000,253,872 | ---- | M] (DTS) -- C:\Windows\SysNative\DTSLFXAPO64.dll
[2015/12/17 13:33:33 | 000,252,880 | ---- | M] (DTS) -- C:\Windows\SysNative\DTSGFXAPONS64.dll
[2015/12/17 13:33:33 | 000,122,328 | ---- | M] (Real Sound Lab SIA) -- C:\Windows\SysNative\CONEQMSAPOGUILibrary.dll
[2015/12/17 13:33:33 | 000,118,600 | ---- | M] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAR64.dll
[2015/12/17 13:32:33 | 001,026,304 | ---- | M] (Realtek ) -- C:\Windows\SysNative\drivers\Rt64win7.sys
[2015/12/17 13:32:33 | 000,116,304 | ---- | M] (Realtek Semiconductor Corporation) -- C:\Windows\SysNative\RTNUninst64.dll
[2015/12/17 13:32:33 | 000,082,544 | ---- | M] (Realtek Semiconductor Corporation) -- C:\Windows\SysNative\RtNicProp64.dll
[2015/12/17 13:32:19 | 001,806,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WdfCoInstaller01011.dll
[2015/12/17 13:32:19 | 000,052,200 | ---- | M] (Intel Corporation) -- C:\Windows\SysNative\drivers\dptf_cpu.sys
[2015/12/17 13:31:55 | 004,161,536 | ---- | M] (Qualcomm Atheros Communications, Inc.) -- C:\Windows\SysNative\drivers\athrx.sys
[2015/12/17 13:31:33 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_dptf_acpi_01011.Wdf
[2015/12/17 13:31:00 | 000,057,304 | ---- | M] (Intel Corporation) -- C:\Windows\SysNative\drivers\dptf_acpi.sys
[2015/12/16 17:34:16 | 042,977,072 | ---- | M] () -- C:\Windows\SysNative\nvcompiler.dll
[2015/12/16 17:34:16 | 037,609,080 | ---- | M] () -- C:\Windows\SysWow64\nvcompiler.dll
[2015/12/16 17:34:16 | 031,061,624 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglv64.dll
[2015/12/16 17:34:16 | 024,895,792 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglv32.dll
[2015/12/16 17:34:16 | 021,122,456 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvopencl.dll
[2015/12/16 17:34:16 | 020,663,816 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuda.dll
[2015/12/16 17:34:16 | 018,716,176 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvwgf2umx.dll
[2015/12/16 17:34:16 | 017,561,432 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvopencl.dll
[2015/12/16 17:34:16 | 017,156,968 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuda.dll
[2015/12/16 17:34:16 | 016,981,976 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvd3dumx.dll
[2015/12/16 17:34:16 | 016,286,888 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvwgf2um.dll
[2015/12/16 17:34:16 | 014,005,408 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvd3dum.dll
[2015/12/16 17:34:16 | 003,637,352 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvapi64.dll
[2015/12/16 17:34:16 | 003,211,760 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvapi.dll
[2015/12/16 17:34:16 | 003,168,376 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvid.dll
[2015/12/16 17:34:16 | 002,755,704 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll
[2015/12/16 17:34:16 | 001,915,696 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco6436143.dll
[2015/12/16 17:34:16 | 001,846,016 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvspcap64.dll
[2015/12/16 17:34:16 | 001,756,424 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvspbridge64.dll
[2015/12/16 17:34:16 | 001,564,976 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispgenco6436143.dll
[2015/12/16 17:34:16 | 001,530,240 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvspcap.dll
[2015/12/16 17:34:16 | 001,316,184 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvspbridge.dll
[2015/12/16 17:34:16 | 000,938,104 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\NvFBC64.dll
[2015/12/16 17:34:16 | 000,872,056 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\NvIFR64.dll
[2015/12/16 17:34:16 | 000,734,512 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvFBC.dll
[2015/12/16 17:34:16 | 000,681,592 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvIFR.dll
[2015/12/16 17:34:16 | 000,469,144 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvumdshimx.dll
[2015/12/16 17:34:16 | 000,388,560 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvumdshim.dll
[2015/12/16 17:34:16 | 000,175,368 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvinitx.dll
[2015/12/16 17:34:16 | 000,153,392 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvinit.dll
[2015/12/16 17:34:16 | 000,151,184 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglshim64.dll
[2015/12/16 17:34:16 | 000,128,696 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglshim32.dll
[2015/12/16 17:34:16 | 000,111,520 | ---- | M] () -- C:\Windows\SysNative\NvRtmpStreamer64.dll
[2015/12/16 17:34:16 | 000,072,504 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvaudcap64v.dll
[2015/12/16 17:34:16 | 000,069,416 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvaudcap32v.dll
[2015/12/16 17:34:16 | 000,050,472 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvvad64v.sys
[2015/12/16 17:34:16 | 000,034,848 | ---- | M] () -- C:\Windows\SysNative\nvinfo.pb
[2015/12/16 17:34:16 | 000,031,352 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvpciflt.sys
[2015/12/16 14:53:39 | 006,359,672 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcpl.dll
[2015/12/16 14:53:39 | 002,985,080 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvsvc64.dll
[2015/12/16 14:53:37 | 002,554,488 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvsvcr.dll
[2015/12/16 14:53:37 | 000,523,384 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nv3dappshext.dll
[2015/12/16 14:53:37 | 000,385,328 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvmctray.dll
[2015/12/16 14:53:37 | 000,075,056 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nv3dappshextr.dll
[2015/12/16 14:53:37 | 000,062,768 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvshext.dll
[2015/12/16 14:49:53 | 006,090,019 | ---- | M] () -- C:\Windows\SysNative\nvcoproc.bin
[2015/12/12 08:20:09 | 000,192,216 | ---- | M] (Malwarebytes) -- C:\Windows\SysNative\drivers\77B233DE.sys
[2015/12/11 08:34:46 | 000,192,216 | ---- | M] (Malwarebytes) -- C:\Windows\SysNative\drivers\05BC6104.sys
[10 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ]
[1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2016/01/08 22:14:18 | 003,292,970 | ---- | C] () -- C:\Users\asus\Desktop\proba mp m14ae1e.pdf
[2016/01/07 20:13:01 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2016/01/07 13:33:57 | 005,323,487 | ---- | C] () -- C:\Users\asus\Desktop\[Michel_Métivier]_Notions_fondamentales_de_la_thÃ(BookZZ.org).djvu
[2016/01/06 15:25:51 | 031,193,034 | ---- | C] () -- C:\Users\asus\Desktop\[Alain_Yger,_Jacques-Arthur_Weil]_Mathématiques_a(BookZZ.org).djvu
[2016/01/06 15:00:54 | 000,729,210 | ---- | C] () -- C:\Users\asus\Desktop\[Arbenz_K.,_Wohlhauser_A.]_Complements_d'analyse(BookZZ.org).djvu
[2016/01/06 14:57:51 | 006,297,349 | ---- | C] () -- C:\Users\asus\Desktop\[Rudin]_Analyse_réelle_et_complexe__Cours_et_exe(BookZZ.org).djvu
[2016/01/05 13:27:43 | 000,072,869 | ---- | C] () -- C:\Users\asus\Desktop\DemandeMvt2353.pdf
[2016/01/04 22:44:04 | 000,000,009 | ---- | C] () -- C:\Users\asus\Desktop\TD MP Probabilité 2015.aux
[2016/01/04 22:12:59 | 000,029,775 | ---- | C] () -- C:\Users\asus\Desktop\TD MP Probabilité 2015.tex
[2016/01/04 22:12:59 | 000,029,775 | ---- | C] () -- C:\Users\asus\Desktop\TD MP Probabilité 2015.bak
[2016/01/03 11:50:14 | 000,001,047 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 11.lnk
[2016/01/03 11:50:14 | 000,001,035 | ---- | C] () -- C:\Users\Public\Desktop\TeamViewer 11.lnk
[2016/01/03 00:11:33 | 000,001,403 | ---- | C] () -- C:\Users\Public\Desktop\GeForce Experience.lnk
[2016/01/03 00:09:23 | 000,111,520 | ---- | C] () -- C:\Windows\SysNative\NvRtmpStreamer64.dll
[2016/01/02 23:46:12 | 000,034,848 | ---- | C] () -- C:\Windows\SysNative\nvinfo.pb
[2016/01/02 23:45:41 | 042,977,072 | ---- | C] () -- C:\Windows\SysNative\nvcompiler.dll
[2016/01/02 23:45:38 | 037,609,080 | ---- | C] () -- C:\Windows\SysWow64\nvcompiler.dll
[2016/01/02 19:19:44 | 000,000,508 | ---- | C] () -- C:\Windows\tasks\SUPERAntiSpyware Scheduled Task 258b8937-8da4-47a8-8057-e091bd9dcf5f.job
[2016/01/02 19:19:42 | 000,000,508 | ---- | C] () -- C:\Windows\tasks\SUPERAntiSpyware Scheduled Task 6c0a92ea-c0e8-41b6-8d0f-81ef3b3bc13a.job
[2016/01/02 19:18:48 | 000,001,784 | ---- | C] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk
[2016/01/02 18:40:57 | 001,743,360 | ---- | C] () -- C:\Users\asus\Desktop\adwcleaner_5.026.exe
[2016/01/02 16:35:53 | 000,030,056 | ---- | C] () -- C:\Users\asus\Desktop\DL dérivation DS MPSI2 calcul matriciel 2013.tex
[2016/01/02 15:09:47 | 000,001,114 | ---- | C] () -- C:\Users\asus\Application Data\Microsoft\Internet Explorer\Quick Launch\Glary Utilities 5.lnk
[2016/01/02 14:16:08 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_esif_umdf_01_11_00.Wdf
[2016/01/02 13:07:04 | 000,022,704 | ---- | C] () -- C:\Windows\SysNative\drivers\EsgScanner.sys
[2016/01/02 13:06:49 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_esif_lf_01011.Wdf
[2016/01/02 13:06:43 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\MsftWdf_user_01_11_00.Wdf
[2016/01/02 13:05:31 | 000,000,003 | ---- | C] () -- C:\Windows\SysNative\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
[2016/01/01 14:10:45 | 000,188,610 | ---- | C] () -- C:\Users\asus\Desktop\Soutien DERIVATION 2010 MPSI.tex
[2016/01/01 14:10:21 | 000,170,930 | ---- | C] () -- C:\Users\asus\Desktop\DS DERIVATION 2010 MPSI.tex
[2016/01/01 14:08:52 | 000,196,487 | ---- | C] () -- C:\Users\asus\Desktop\DS 3 MPSI dérivation 2011 ibn ghazi.tex
[2015/12/31 13:26:48 | 017,816,737 | ---- | C] () -- C:\Users\asus\Desktop\[Corina_Reischer,_Raymond_Leblanc,_Bruno_Rémillar(BookZZ.org).pdf
[2015/12/30 13:28:29 | 000,002,052 | ---- | C] () -- C:\Windows\epplauncher.mif
[2015/12/29 21:31:05 | 000,061,432 | ---- | C] () -- C:\Windows\SysNative\drivers\adgnetworktdidrv.sys
[2015/12/29 21:30:51 | 000,000,232 | ---- | C] () -- C:\Windows\SysWow64\drivers\vwifikerneldrv.sys
[2015/12/29 21:30:51 | 000,000,232 | ---- | C] () -- C:\ProgramData\fontcacheev1.dat
[2015/12/29 21:30:07 | 000,001,302 | ---- | C] () -- C:\Users\asus\Desktop\Auslogics Disk Defrag Professional.lnk
[2015/12/29 11:17:22 | 003,251,267 | ---- | C] () -- C:\Users\asus\Desktop\N. Boccara-Analyse Fonctionnelle. Une introduction pour physiciens-Ellipses Marketing (1984).djvu
[2015/12/29 09:06:14 | 034,876,965 | ---- | C] () -- C:\Users\asus\Desktop\[Jean-Pierre_Ramis]_Mathematiques_Tout-en-un_pour_(BookZZ.org)_copy.djvu
[2015/12/28 22:36:09 | 000,096,463 | ---- | C] () -- C:\Users\asus\Desktop\Maths-MP-Copyright.tex
[2015/12/28 22:36:09 | 000,083,093 | ---- | C] () -- C:\Users\asus\Desktop\Maths-PSI-Copyright.tex
[2015/12/28 22:36:09 | 000,077,529 | ---- | C] () -- C:\Users\asus\Desktop\Maths-PT-Copyright.tex
[2015/12/28 22:36:09 | 000,075,348 | ---- | C] () -- C:\Users\asus\Desktop\Maths-PC-Copyright.tex
[2015/12/28 22:36:09 | 000,073,171 | ---- | C] () -- C:\Users\asus\Desktop\Maths-TSI2-Copyright.tex
[2015/12/28 22:36:09 | 000,068,562 | ---- | C] () -- C:\Users\asus\Desktop\Maths-TPC2-Copyright.tex
[2015/12/28 22:35:57 | 000,110,607 | ---- | C] () -- C:\Users\asus\Desktop\Maths-MPSI-UPS.tex
[2015/12/28 21:57:05 | 000,412,893 | ---- | C] () -- C:\Users\asus\Desktop\dichotomienewton_2.pdf
[2015/12/28 19:13:04 | 000,003,112 | ---- | C] () -- C:\Users\asus\Desktop\O031DS04.wmf
[2015/12/28 19:12:32 | 000,006,574 | ---- | C] () -- C:\Users\asus\Desktop\O031CW03.xvz
[2015/12/28 19:12:12 | 000,096,972 | ---- | C] () -- C:\Users\asus\Desktop\Corr dérivation.tex
[2015/12/28 16:39:07 | 000,246,638 | ---- | C] () -- C:\Users\asus\Desktop\DS dérivation et equation diff 2010.bak
[2015/12/28 16:39:07 | 000,001,392 | ---- | C] () -- C:\Users\asus\Desktop\DS dérivation et equation diff 2010.tex
[2015/12/28 16:04:32 | 000,559,063 | ---- | C] () -- C:\Users\asus\Desktop\Everything-1.3.4.686.x64-Setup.exe
[2015/12/28 13:54:40 | 000,000,434 | ---- | C] () -- C:\Windows\tasks\Opera scheduled Autoupdate 1451310872.job
[2015/12/28 13:54:39 | 000,001,123 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
[2015/12/28 13:54:39 | 000,001,111 | ---- | C] () -- C:\Users\Public\Desktop\Opera.lnk
[2015/12/28 13:49:40 | 000,001,376 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller.lnk
[2015/12/28 13:49:40 | 000,001,364 | ---- | C] () -- C:\Users\Public\Desktop\IObit Uninstaller.lnk
[2015/12/28 11:26:19 | 000,000,045 | ---- | C] () -- C:\Windows\SysNative\Partizan.RRI
[2015/12/28 08:26:56 | 000,000,002 | RHS- | C] () -- C:\Windows\winstart.bat
[2015/12/28 08:26:56 | 000,000,002 | RHS- | C] () -- C:\Windows\SysWow64\AUTOEXEC.NT
[2015/12/28 06:25:08 | 000,001,143 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
[2015/12/28 00:10:13 | 000,049,904 | ---- | C] () -- C:\Users\asus\Documents\cc_20151228_001000.reg
[2015/12/26 23:40:16 | 010,645,418 | ---- | C] () -- C:\Users\asus\Desktop\Cours de Maths MPSI.pdf
[2015/12/25 22:33:32 | 000,073,264 | ---- | C] () -- C:\Users\asus\Desktop\12234883_528094107363344_8424314014372629673_n.jpg
[2015/12/25 22:20:42 | 000,001,066 | ---- | C] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2015/12/25 18:46:26 | 000,005,120 | ---- | C] () -- C:\Users\asus\AppData\Roaming\GiftBag.db
[2015/12/25 18:14:52 | 000,001,032 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2015/12/25 18:14:52 | 000,000,008 | RHS- | C] () -- C:\Users\asus\ntuser.pol
[2015/12/25 17:11:25 | 000,002,306 | ---- | C] () -- C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
[2015/12/21 10:24:26 | 000,000,025 | ---- | C] () -- C:\Users\asus\Desktop\TP python.py
[2015/12/17 13:33:58 | 004,005,405 | ---- | C] () -- C:\Windows\SysNative\drivers\RTAIODAT.DAT
[2015/12/17 13:31:33 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_dptf_acpi_01011.Wdf
[2015/12/15 13:36:50 | 000,008,202 | R--- | C] () -- C:\Windows\SysNative\drivers\NSTx64\7DE070B0.02A\ccSetx64.cat
[2015/12/15 13:36:50 | 000,000,855 | R--- | C] () -- C:\Windows\SysNative\drivers\NSTx64\7DE070B0.02A\ccSetx64.inf
[2015/12/15 13:36:50 | 000,000,172 | ---- | C] () -- C:\Windows\SysNative\drivers\NSTx64\7DE070B0.02A\isolate.ini
[2015/11/17 22:01:40 | 000,002,960 | ---- | C] () -- C:\Windows\SysWow64\LavasoftTcpServiceOff.ini
[2015/11/06 14:46:15 | 000,005,972 | ---- | C] () -- C:\Users\asus\ginette.tex
[2015/07/21 23:25:24 | 000,000,496 | ---- | C] () -- C:\Users\asus\cercle.pst
[2015/07/20 14:01:59 | 000,000,296 | ---- | C] () -- C:\Users\asus\arbre.pag
[2015/07/08 15:59:08 | 000,000,534 | ---- | C] () -- C:\Users\asus\presentation memoire.nav
[2015/07/08 15:59:08 | 000,000,041 | ---- | C] () -- C:\Users\asus\presentation memoire.toc
[2015/07/08 15:59:08 | 000,000,000 | ---- | C] () -- C:\Users\asus\presentation memoire.snm
[2015/07/08 15:59:08 | 000,000,000 | ---- | C] () -- C:\Users\asus\presentation memoire.out
[2015/07/08 15:59:03 | 000,034,659 | ---- | C] () -- C:\Users\asus\presentation memoire.pdf
[2015/07/08 15:59:03 | 000,001,489 | ---- | C] () -- C:\Users\asus\presentation memoire.aux
[2015/07/08 15:59:00 | 000,003,826 | ---- | C] () -- C:\Users\asus\presentation memoire.synctex.gz
[2015/07/08 15:58:54 | 000,000,201 | ---- | C] () -- C:\Users\asus\presentation memoire.tex
[2015/07/08 15:58:26 | 000,000,166 | ---- | C] () -- C:\Users\asus\présentation mémoire.tex
[2015/07/01 19:40:56 | 000,000,233 | ---- | C] () -- C:\Users\asus\.swfinfo
[2015/05/29 10:45:52 | 000,000,013 | ---- | C] () -- C:\Windows\SysWow64\MSVCTSCP.DLL
[2015/04/19 08:34:35 | 000,000,020 | ---- | C] () -- C:\ProgramData\bc.ini
[2015/04/17 21:34:32 | 000,000,234 | ---- | C] () -- C:\Windows\wininit.ini
[2015/04/10 20:54:36 | 000,001,056 | ---- | C] () -- C:\Users\asus\Documents - Raccourci.lnk
[2015/04/04 09:25:08 | 000,001,042 | ---- | C] () -- C:\Users\asus\AppData\Roaming\coreavc.ini
[2015/04/02 13:43:11 | 000,004,864 | ---- | C] () -- C:\ProgramData\zgedrojb.fyf
[2015/04/02 13:37:32 | 000,004,099 | ---- | C] () -- C:\ProgramData\mtbjfghn.xbe
[2015/03/12 20:36:25 | 000,148,992 | ---- | C] () -- C:\Windows\SysWow64\mllink5.dll
[2015/03/12 20:36:25 | 000,000,019 | ---- | C] () -- C:\Windows\exlink.ini
[2015/03/05 23:53:19 | 000,003,584 | ---- | C] () -- C:\Users\asus\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2015/02/21 21:58:11 | 000,000,000 | ---- | C] () -- C:\Windows\topsecret.INI
[2015/02/21 21:58:11 | 000,000,000 | ---- | C] () -- C:\Windows\GDDevCtrl.INI
[2015/02/13 09:27:16 | 017,217,024 | ---- | C] () -- C:\Windows\SysWow64\igd11dxva32.dll
[2015/02/13 09:27:16 | 000,187,392 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll
[2014/11/05 14:27:49 | 000,001,027 | ---- | C] () -- C:\Users\asus\ffgui.ini
[2014/09/26 21:01:02 | 001,652,180 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2014/09/02 23:19:37 | 000,000,080 | ---- | C] () -- C:\Windows\matlab.ini
[2014/09/01 15:58:43 | 000,006,550 | ---- | C] () -- C:\Windows\jautoexp.dat
[2014/09/01 14:28:53 | 000,008,704 | ---- | C] () -- C:\Windows\SysWow64\vidccleaner.exe
[2014/08/30 10:20:35 | 000,000,000 | -H-- | C] () -- C:\ProgramData\DP45977C.lfl
[2014/08/30 09:58:11 | 000,004,606 | ---- | C] () -- C:\Windows\SysWow64\DptfInvalidPolicyRemover.ini
[2014/08/30 09:52:11 | 000,000,025 | ---- | C] () -- C:\Windows\cdplayer.ini
[2014/07/25 04:36:40 | 000,094,208 | ---- | C] () -- C:\Windows\SysWow64\ssdevm.dll

[color=#E56717]========== ZeroAccess Check ==========[/color]

[2009/07/14 04:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2012/06/09 05:30:56 | 014,165,504 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012/06/09 04:46:56 | 012,868,608 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/14 01:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009/07/14 01:15:20 | 000,605,696 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/14 01:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

[color=#E56717]========== LOP Check ==========[/color]

[2015/05/30 17:19:52 | 000,000,000 | ---D | M] -- C:\Users\asus\AppData\Roaming\Apowersoft
[2015/12/29 21:30:36 | 000,000,000 | ---D | M] -- C:\Users\asus\AppData\Roaming\Auslogics
[2015/02/26 20:04:43 | 000,000,000 | ---D | M] -- C:\Users\asus\AppData\Roaming\Design Science
[2015/12/28 06:26:24 | 000,000,000 | ---D | M] -- C:\Users\asus\AppData\Roaming\DiskDefrag
[2016/01/08 23:46:26 | 000,000,000 | ---D | M] -- C:\Users\asus\AppData\Roaming\DMCache
[2015/03/13 21:54:21 | 000,000,000 | ---D | M] -- C:\Users\asus\AppData\Roaming\Dropbox
[2015/03/13 21:53:32 | 000,000,000 | ---D | M] -- C:\Users\asus\AppData\Roaming\DropboxMaster
[2016/01/08 18:38:16 | 000,000,000 | ---D | M] -- C:\Users\asus\AppData\Roaming\Everything
[2015/04/18 19:21:36 | 000,000,000 | ---D | M] -- C:\Users\asus\AppData\Roaming\FileZilla
[2014/11/05 13:50:36 | 000,000,000 | ---D | M] -- C:\Users\asus\AppData\Roaming\fltk.org
[2016/01/02 15:56:37 | 000,000,000 | ---D | M] -- C:\Users\asus\AppData\Roaming\GlarySoft
[2016/01/02 15:32:45 | 000,000,000 | ---D | M] -- C:\Users\asus\AppData\Roaming\IDM
[2015/05/19 11:48:10 | 000,000,000 | ---D | M] -- C:\Users\asus\AppData\Roaming\iep
[2016/01/02 17:15:14 | 000,000,000 | ---D | M] -- C:\Users\asus\AppData\Roaming\IObit
[2014/09/21 12:31:16 | 000,000,000 | ---D | M] -- C:\Users\asus\AppData\Roaming\LyX2.1
[2015/04/13 23:20:33 | 000,000,000 | ---D | M] -- C:\Users\asus\AppData\Roaming\Opera Software
[2015/12/29 21:30:16 | 000,000,000 | ---D | M] -- C:\Users\asus\AppData\Roaming\Performix LLC
[2015/12/29 17:22:02 | 000,000,000 | ---D | M] -- C:\Users\asus\AppData\Roaming\ProductData
[2015/08/27 14:11:11 | 000,000,000 | ---D | M] -- C:\Users\asus\AppData\Roaming\Samsung
[2015/11/17 21:54:43 | 000,000,000 | ---D | M] -- C:\Users\asus\AppData\Roaming\Soda PDF 8
[2016/01/03 11:50:40 | 000,000,000 | ---D | M] -- C:\Users\asus\AppData\Roaming\TeamViewer
[2015/09/13 21:18:18 | 000,000,000 | ---D | M] -- C:\Users\asus\AppData\Roaming\xm1
[2014/10/27 20:34:32 | 000,000,000 | ---D | M] -- C:\Users\asus\AppData\Roaming\Zbshareware Lab

[color=#E56717]========== Purity Check ==========[/color]



[color=#E56717]========== Custom Scans ==========[/color]

[color=#A23BEC]< %SYSTEMDRIVE%\*.* >[/color]
[2015/08/21 15:27:31 | 000,000,000 | ---- | M] () -- C:\autoexec.bat
[2015/12/10 12:10:19 | 000,022,904 | ---- | M] () -- C:\bootsqm.dat
[2014/09/14 12:47:53 | 000,000,466 | ---- | M] () -- C:\Disque local (D) - Raccourci.lnk
[2013/11/06 16:56:54 | 002,705,607 | ---- | M] () -- C:\Fly Project - Toca - Toca (Official Video).mp3
[2015/11/02 10:28:48 | 000,000,383 | ---- | M] () -- C:\ftconfig.ini
[2016/01/09 12:38:52 | 3129,528,320 | -HS- | M] () -- C:\hiberfil.sys
[2015/02/20 17:27:45 | 000,010,363 | ---- | M] () -- C:\images.jpg
[2016/01/09 12:38:58 | 4172,705,792 | -HS- | M] () -- C:\pagefile.sys
[2016/01/09 13:24:17 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2015/12/27 09:35:01 | 000,000,493 | ---- | M] () -- C:\runcheck.txt

[color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]

[color=#A23BEC]< %PROGRAMFILES%\*.* >[/color]
[2009/07/14 04:54:24 | 000,000,174 | -HS- | M] () -- C:\Program Files (x86)\desktop.ini

[color=#A23BEC]< %PROGRAMFILES%\*. >[/color]
[2015/04/25 13:41:36 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Achiwa
[2015/07/08 22:22:15 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Adobe
[2016/01/07 17:39:02 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Adware Removal Tool by TSA
[2015/05/30 17:19:52 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Apowersoft
[2015/04/17 20:11:35 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ASUS
[2016/01/03 11:55:06 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Auslogics
[2015/12/22 15:02:53 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\AVG
[2015/12/22 15:17:42 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Avira
[2015/04/24 12:26:35 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Baidu Security
[2015/02/23 15:05:31 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Bluetooth Suite
[2014/11/09 14:36:57 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\CodeBlocks
[2016/01/02 22:48:14 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files
[2015/12/28 06:51:37 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ESET
[2015/12/28 16:10:34 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Everything
[2014/08/31 17:19:02 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\FileZilla FTP Client
[2015/02/24 22:12:57 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Free PDF Downloader
[2014/11/05 13:50:37 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\FreeFem++-cs-14.3
[2015/10/12 17:23:28 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Google
[2015/02/21 22:31:52 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Google Books Downloader
[2015/08/27 14:03:52 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\InstallShield Installation Information
[2016/01/02 13:05:06 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Intel
[2015/02/11 20:56:09 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Intel Driver Update Utility
[2016/01/02 21:56:46 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Intel Drivers Update Utility
[2015/12/27 13:48:01 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Internet Download Manager
[2015/08/25 23:06:36 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Internet Explorer
[2016/01/02 17:15:14 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\IObit
[2015/03/29 15:22:56 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Java
[2015/05/16 12:36:16 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\K-Lite Codec Pack
[2015/12/25 17:11:18 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Kaspersky Lab
[2015/09/18 16:52:02 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\La Course aux Nombres-3.0.2
[2015/10/15 22:01:50 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Malwarebytes Anti-Malware
[2015/02/17 13:28:48 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MaxiGet Software Manager
[2014/08/30 09:44:50 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Office
[2014/10/30 22:35:22 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Reader
[2015/01/10 13:18:10 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Silverlight
[2014/08/30 09:44:46 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Visual Studio
[2014/08/30 09:42:13 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Visual Studio 8
[2014/08/30 09:45:44 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Works
[2014/08/31 13:08:28 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft.NET
[2015/12/28 13:07:55 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox
[2015/12/16 14:35:04 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Maintenance Service
[2014/08/30 09:45:04 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSBuild
[2015/08/25 22:48:09 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSXML 4.0
[2014/09/02 00:51:09 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Nero
[2016/01/02 10:24:08 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Norton Identity Safe
[2015/12/15 13:35:28 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\NortonInstaller
[2016/01/03 00:09:00 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\NVIDIA Corporation
[2015/12/28 13:54:40 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Opera
[2015/07/14 20:29:24 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\PdfAdd
[2014/12/28 10:27:19 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\PDFsvg
[2015/07/21 23:17:02 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Pstplus
[2014/08/30 09:45:17 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Real
[2014/08/30 10:18:32 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Realtek
[2009/07/14 05:32:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Reference Assemblies
[2016/01/07 18:19:59 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\sAccessNet
[2015/08/27 14:33:20 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Samsung
[2015/04/17 21:36:59 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Spybot - Search & Destroy 2
[2016/01/03 11:51:56 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\TeamViewer
[2014/08/30 10:21:10 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\Temp
[2014/09/21 11:54:41 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Texmaker
[2015/07/01 19:42:25 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\TV 3L PC
[2016/01/01 09:44:33 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\UnHackMe
[2009/07/14 04:57:06 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\Uninstall Information
[2014/08/30 09:45:03 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\VideoLAN
[2009/07/14 15:24:08 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Defender
[2015/08/24 23:13:17 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Mail
[2015/08/24 23:13:16 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Media Player
[2009/07/14 05:32:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows NT
[2009/07/14 15:24:08 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Photo Viewer
[2009/07/14 05:32:40 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Portable Devices
[2015/12/10 00:01:40 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Sidebar
[2014/08/30 09:37:44 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\WinRAR
[2014/09/01 14:28:15 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\XviD
[2015/05/16 12:35:58 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\YouTube Song Downloader

[color=#A23BEC]< MD5 for: AGP440.SYS >[/color]
[2009/07/14 01:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\drivers\AGP440.sys
[2009/07/14 01:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_9e6bb86c3b39a3e9\AGP440.sys
[2009/07/14 01:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys

[color=#A23BEC]< MD5 for: APPMGMTS.DLL >[/color]
[2009/07/14 01:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) MD5=4ABA3E75A76195A3E38ED2766C962899 -- C:\Windows\SysNative\appmgmts.dll
[2009/07/14 01:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) MD5=4ABA3E75A76195A3E38ED2766C962899 -- C:\Windows\winsxs\amd64_microsoft-windows-g..oftwareinstallation_31bf3856ad364e35_6.1.7600.16385_none_ddc3da0b75baa7e0\appmgmts.dll
[2009/07/14 01:14:53 | 000,149,504 | ---- | M] (Microsoft Corporation) MD5=A45D184DF6A8803DA13A0B329517A64A -- C:\Windows\SysWOW64\appmgmts.dll
[2009/07/14 01:14:53 | 000,149,504 | ---- | M] (Microsoft Corporation) MD5=A45D184DF6A8803DA13A0B329517A64A -- C:\Windows\winsxs\wow64_microsoft-windows-g..oftwareinstallation_31bf3856ad364e35_6.1.7600.16385_none_e818845daa1b69db\appmgmts.dll

[color=#A23BEC]< MD5 for: ATAPI.SYS >[/color]
[2009/07/14 01:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009/07/14 01:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_a69a58a4286f0b22\atapi.sys
[2009/07/14 01:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys

[color=#A23BEC]< MD5 for: AUTOCHK.EXE >[/color]
[2009/07/14 01:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\SysWOW64\autochk.exe
[2009/07/14 01:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_e1ca436d2314b860\autochk.exe
[2009/07/14 01:38:56 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=8B7F8E882A649D81CEA1EDE9BBB68FFF -- C:\Windows\SysNative\autochk.exe
[2009/07/14 01:38:56 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=8B7F8E882A649D81CEA1EDE9BBB68FFF -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_3de8def0db722996\autochk.exe

[color=#A23BEC]< MD5 for: BEEP.SYS >[/color]
[2009/07/14 00:00:13 | 000,006,656 | ---- | M] (Microsoft Corporation) MD5=16A47CE2DECC9B099349A5F840654746 -- C:\Windows\SysNative\drivers\beep.sys
[2009/07/14 00:00:13 | 000,006,656 | ---- | M] (Microsoft Corporation) MD5=16A47CE2DECC9B099349A5F840654746 -- C:\Windows\winsxs\amd64_microsoft-windows-beepsys_31bf3856ad364e35_6.1.7600.16385_none_201592fa214e4f02\beep.sys

[color=#A23BEC]< MD5 for: CNGAUDIT.DLL >[/color]
[2009/07/14 01:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
[2009/07/14 01:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
[2009/07/14 01:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\SysNative\cngaudit.dll
[2009/07/14 01:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll

[color=#A23BEC]< MD5 for: EVENTLOG.DLL >[/color]
[1999/10/03 20:38:26 | 000,017,408 | ---- | M] () MD5=1363337A5301619F00F8033835EF30E9 -- C:\MATLAB6p5\sys\perl\win32\site\lib\auto\Win32\EventLog\EventLog.dll
[1999/10/02 10:24:46 | 000,017,408 | ---- | M] () MD5=1363337A5301619F00F8033835EF30E9 -- C:\MATLAB7\sys\perl\win32\site\lib\auto\Win32\EventLog\EventLog.dll
[2007/01/23 16:22:16 | 000,032,890 | ---- | M] () MD5=4FA5D1120762802A741F374F8B391E69 -- C:\Program Files\MATLAB\R2010a\sys\perl\win32\lib\auto\Win32\EventLog\EventLog.dll

[color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color]
[2009/07/14 01:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2015/02/24 21:38:25 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\SysWOW64\explorer.exe
[2015/02/24 21:38:25 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
[2015/02/24 21:38:25 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\explorer.exe
[2015/02/24 21:38:25 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
[2015/02/24 21:38:25 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
[2009/07/14 01:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2015/02/24 21:38:25 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe

[color=#A23BEC]< MD5 for: HIDSERV.DLL >[/color]
[2009/07/14 01:15:24 | 000,049,152 | ---- | M] (Microsoft Corporation) MD5=2BC6F6A1992B3A77F5F41432CA6B3B6B -- C:\Windows\SysWOW64\hidserv.dll
[2009/07/14 01:15:24 | 000,049,152 | ---- | M] (Microsoft Corporation) MD5=2BC6F6A1992B3A77F5F41432CA6B3B6B -- C:\Windows\winsxs\wow64_microsoft-windows-hid-user_31bf3856ad364e35_6.1.7600.16385_none_3cf5e466d58070d9\hidserv.dll
[2009/07/14 01:41:00 | 000,038,912 | ---- | M] (Microsoft Corporation) MD5=BD9EB3958F213F96B97B1D897DEE006D -- C:\Windows\SysNative\hidserv.dll
[2009/07/14 01:41:00 | 000,038,912 | ---- | M] (Microsoft Corporation) MD5=BD9EB3958F213F96B97B1D897DEE006D -- C:\Windows\winsxs\amd64_microsoft-windows-hid-user_31bf3856ad364e35_6.1.7600.16385_none_32a13a14a11faede\hidserv.dll

[color=#A23BEC]< MD5 for: IASTORV.SYS >[/color]
[2009/07/14 01:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\SysNative\drivers\iaStorV.sys
[2009/07/14 01:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_18cccb83b34e1453\iaStorV.sys
[2009/07/14 01:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_0b06441fa1790136\iaStorV.sys

[color=#A23BEC]< MD5 for: IMM32.DLL >[/color]
[2009/07/14 01:11:21 | 000,119,808 | ---- | M] (Microsoft Corporation) MD5=0DE3069D6E09BA262856EF31C941BEFE -- C:\Windows\SysWOW64\imm32.dll
[2009/07/14 01:11:21 | 000,119,808 | ---- | M] (Microsoft Corporation) MD5=0DE3069D6E09BA262856EF31C941BEFE -- C:\Windows\winsxs\wow64_microsoft-windows-imm32_31bf3856ad364e35_6.1.7600.16385_none_c29fba0fc87cc5a4\imm32.dll
[2009/07/14 01:41:09 | 000,167,424 | ---- | M] (Microsoft Corporation) MD5=AA2C08CE85653B1A0D2E4AB407FA176C -- C:\Windows\SysNative\imm32.dll
[2009/07/14 01:41:09 | 000,167,424 | ---- | M] (Microsoft Corporation) MD5=AA2C08CE85653B1A0D2E4AB407FA176C -- C:\Windows\winsxs\amd64_microsoft-windows-imm32_31bf3856ad364e35_6.1.7600.16385_none_b84b0fbd941c03a9\imm32.dll

[color=#A23BEC]< MD5 for: KERNEL32.DLL >[/color]
[2011/05/14 07:20:00 | 001,162,752 | ---- | M] (Microsoft Corporation) MD5=0E1B2E16235AA7F89F064EE75DFC905E -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.17617_none_f1e6ed746ce85c1b\kernel32.dll
[2011/05/14 06:22:22 | 000,837,632 | ---- | M] (Microsoft Corporation) MD5=166116134C58DC36400DE59ACD64FB39 -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.17617_none_fc3b97c6a1491e16\kernel32.dll
[2012/10/04 17:41:16 | 001,161,216 | ---- | M] (Microsoft Corporation) MD5=1DC3504CA4C57900F1557E9A3F01D272 -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.17965_none_f1aee2f66d12ac97\kernel32.dll
[2012/10/04 17:32:16 | 001,161,216 | ---- | M] (Microsoft Corporation) MD5=1DDCACAB8DA5399E5521051923016B18 -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7600.17135_none_efe8cbf06fd422f3\kernel32.dll
[2013/01/04 04:51:08 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=385BE92E3106491BBB542F8F1C06C606 -- C:\Windows\SysWOW64\kernel32.dll
[2013/01/04 04:51:08 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=385BE92E3106491BBB542F8F1C06C606 -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7600.17206_none_fa5ee836a41ba799\kernel32.dll
[2011/05/14 06:32:33 | 000,837,120 | ---- | M] (Microsoft Corporation) MD5=40EACEE0B6432CBE2459A11B298E9D88 -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7600.16816_none_fa543a76a42398d3\kernel32.dll
[2013/01/04 05:30:34 | 001,161,216 | ---- | M] (Microsoft Corporation) MD5=43DB3433F141F01E53D1C5AA0F434098 -- C:\Windows\SysNative\kernel32.dll
[2013/01/04 05:30:34 | 001,161,216 | ---- | M] (Microsoft Corporation) MD5=43DB3433F141F01E53D1C5AA0F434098 -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7600.17206_none_f00a3de46fbae59e\kernel32.dll
[2009/07/14 01:41:13 | 001,162,240 | ---- | M] (Microsoft Corporation) MD5=5B4B379AD10DEDA4EDA01B8C6961B193 -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7600.16385_none_efb2d6e86ffc8f55\kernel32.dll
[2012/10/04 16:36:32 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=5FA395364EE727E4BEE6B1406C207F98 -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22125_none_fcb841e5ba70d1da\kernel32.dll
[2009/07/14 01:11:23 | 000,836,608 | ---- | M] (Microsoft Corporation) MD5=606ECB76A424CC535407E7A24E2A34BC -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7600.16385_none_fa07813aa45d5150\kernel32.dll
[2011/05/14 07:11:10 | 001,163,264 | ---- | M] (Microsoft Corporation) MD5=6743E8705A96FCBF71279B5AE2CCFDBC -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.21728_none_f266ba9d860d312d\kernel32.dll
[2011/06/03 05:58:27 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=6EB2AEE15C20681E323E9A3E334FE6CF -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7600.20978_none_fa9ef84dbd7012f1\kernel32.dll
[2012/10/04 17:29:16 | 001,162,752 | ---- | M] (Microsoft Corporation) MD5=6EED0D77C20137948979EA47360A890B -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7600.21335_none_f0726aa188f1bfe4\kernel32.dll
[2013/01/04 04:52:09 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=7E55988F5CB3BA67E2732370E8D71BBB -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22209_none_fcd1e4cbba5cfc7b\kernel32.dll
[2011/06/03 06:54:47 | 001,162,240 | ---- | M] (Microsoft Corporation) MD5=8225958BAC83EAFCDB6BAB6EE5EDF6E6 -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7600.20978_none_f04a4dfb890f50f6\kernel32.dll
[2011/05/14 07:36:24 | 001,162,240 | ---- | M] (Microsoft Corporation) MD5=98DA1B7572DAD6BA10296E0DF0950B37 -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7600.16816_none_efff90246fc2d6d8\kernel32.dll
[2013/01/04 14:14:42 | 001,162,752 | ---- | M] (Microsoft Corporation) MD5=9DD828EFBD17246275E8A74D58E836AC -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7600.21416_none_f0890ca988e09e80\kernel32.dll
[2012/10/04 16:54:17 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=A6778FC49011313995A4D718F624CC74 -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7600.17135_none_fa3d7642a434e4ee\kernel32.dll
[2013/01/04 05:36:09 | 001,162,240 | ---- | M] (Microsoft Corporation) MD5=B844114B247D8EF1E5E4E93A282D2E6F -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22209_none_f27d3a7985fc3a80\kernel32.dll
[2011/05/14 07:33:36 | 000,837,632 | ---- | M] (Microsoft Corporation) MD5=CC5CBC069944E7EA70D8674478A70A37 -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.21728_none_fcbb64efba6df328\kernel32.dll
[2012/10/04 16:47:40 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=D4F3176082566CEFA633B4945802D4C4 -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.17965_none_fc038d48a1736e92\kernel32.dll
[2012/10/04 16:56:24 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=DE7A37CB1F48526A78A2D42786411578 -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7600.21335_none_fac714f3bd5281df\kernel32.dll
[2012/10/04 17:37:46 | 001,162,240 | ---- | M] (Microsoft Corporation) MD5=F3C594D0DA3ACFA6C7B781A490AB4282 -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22125_none_f263979386100fdf\kernel32.dll
[2013/01/04 04:51:07 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=F9F6CD9EF1F6C896A56B5259B81027D9 -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7600.21416_none_faddb6fbbd41607b\kernel32.dll

[color=#A23BEC]< MD5 for: MSWSOCK.DLL >[/color]
[2009/07/14 01:15:51 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=11A41F17527ED75D6B758FDD7F4FD00D -- C:\Windows\SysWOW64\mswsock.dll
[2009/07/14 01:15:51 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=11A41F17527ED75D6B758FDD7F4FD00D -- C:\Windows\winsxs\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.1.7600.16385_none_b829ad298e9f53ff\mswsock.dll
[2009/07/14 01:41:34 | 000,320,000 | ---- | M] (Microsoft Corporation) MD5=FC76FE3C1E1FDB761244D4F74EF560FD -- C:\Windows\SysNative\mswsock.dll
[2009/07/14 01:41:34 | 000,320,000 | ---- | M] (Microsoft Corporation) MD5=FC76FE3C1E1FDB761244D4F74EF560FD -- C:\Windows\winsxs\amd64_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.1.7600.16385_none_144848ad46fcc535\mswsock.dll

[color=#A23BEC]< MD5 for: NDIS.SYS >[/color]
[2009/07/14 01:48:27 | 000,947,776 | ---- | M] (Microsoft Corporation) MD5=CAD515DBD07D082BB317D9928CE8962C -- C:\Windows\SysNative\drivers\ndis.sys
[2009/07/14 01:48:27 | 000,947,776 | ---- | M] (Microsoft Corporation) MD5=CAD515DBD07D082BB317D9928CE8962C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.16385_none_03bc1d6e35c013bf\ndis.sys

[color=#A23BEC]< MD5 for: NETLOGON.DLL >[/color]
[2009/07/14 01:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\SysNative\netlogon.dll
[2009/07/14 01:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_59aca8ea51aaeefe\netlogon.dll
[2009/07/14 01:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\SysWOW64\netlogon.dll
[2009/07/14 01:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_6401533c860bb0f9\netlogon.dll

[color=#A23BEC]< MD5 for: NTFS.SYS >[/color]
[2009/07/14 01:48:27 | 001,659,984 | ---- | M] (Microsoft Corporation) MD5=356698A13C4630D5B31C37378D469196 -- C:\Windows\winsxs\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7600.16385_none_02661b64369ca03a\ntfs.sys
[2013/04/12 14:36:57 | 001,679,208 | ---- | M] (Microsoft Corporation) MD5=91127EC56F7BA2182EA1340DC00F98E5 -- C:\Windows\winsxs\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7600.21499_none_02e8d2a34fbedaf2\ntfs.sys
[2013/04/12 14:36:37 | 001,653,096 | ---- | M] (Microsoft Corporation) MD5=9A6089B056EA1B83B36424FC9D0A300E -- C:\Windows\SysNative\drivers\ntfs.sys
[2013/04/12 14:36:37 | 001,653,096 | ---- | M] (Microsoft Corporation) MD5=9A6089B056EA1B83B36424FC9D0A300E -- C:\Windows\winsxs\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7600.17281_none_0262018e36a05758\ntfs.sys
[2013/04/12 14:16:02 | 001,686,888 | ---- | M] (Microsoft Corporation) MD5=A6AE4551BF8EED09FA3B6FCDF472F3E1 -- C:\Windows\winsxs\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.22297_none_04cd2f154ce71430\ntfs.sys
[2013/04/12 14:45:08 | 001,656,680 | ---- | M] (Microsoft Corporation) MD5=B98F8C6E31CD07B2E6F71F7F648E38C0 -- C:\Windows\winsxs\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.18127_none_048f41be3390b0cf\ntfs.sys

[color=#A23BEC]< MD5 for: NVSTOR.SYS >[/color]
[2009/07/14 01:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\SysNative\drivers\nvstor.sys
[2009/07/14 01:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_5bde3fe2945bce9e\nvstor.sys
[2009/07/14 01:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvstor.sys

[color=#A23BEC]< MD5 for: PROQUOTA.EXE >[/color]
[2009/07/14 01:39:28 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=19117589BA265AAF89BEBE1E9040000C -- C:\Windows\SysNative\proquota.exe
[2009/07/14 01:39:28 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=19117589BA265AAF89BEBE1E9040000C -- C:\Windows\winsxs\amd64_microsoft-windows-proquota_31bf3856ad364e35_6.1.7600.16385_none_83bbe97eac162e90\proquota.exe
[2009/07/14 01:14:29 | 000,028,160 | ---- | M] (Microsoft Corporation) MD5=8CDF71E78469BE54C29C1AD2FC8DE611 -- C:\Windows\SysWOW64\proquota.exe
[2009/07/14 01:14:29 | 000,028,160 | ---- | M] (Microsoft Corporation) MD5=8CDF71E78469BE54C29C1AD2FC8DE611 -- C:\Windows\winsxs\x86_microsoft-windows-proquota_31bf3856ad364e35_6.1.7600.16385_none_279d4dfaf3b8bd5a\proquota.exe

[color=#A23BEC]< MD5 for: QMGR.DLL >[/color]
[2009/07/14 01:41:53 | 000,848,384 | ---- | M] (Microsoft Corporation) MD5=7F0C323FE3DA28AA4AA1BDA3F575707F -- C:\Windows\SysNative\qmgr.dll
[2009/07/14 01:41:53 | 000,848,384 | ---- | M] (Microsoft Corporation) MD5=7F0C323FE3DA28AA4AA1BDA3F575707F -- C:\Windows\winsxs\amd64_microsoft-windows-bits-client_31bf3856ad364e35_6.1.7600.16385_none_7f85b69413231233\qmgr.dll

[color=#A23BEC]< MD5 for: SCECLI.DLL >[/color]
[2009/07/14 01:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\SysWOW64\scecli.dll
[2009/07/14 01:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
[2009/07/14 01:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\SysNative\scecli.dll
[2009/07/14 01:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll

[color=#A23BEC]< MD5 for: SPOOLSV.EXE >[/color]
[2010/08/20 05:38:12 | 000,559,104 | ---- | M] (Microsoft Corporation) MD5=8547491BE7086EE317163365D83A37D2 -- C:\Windows\winsxs\amd64_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.1.7600.20785_none_32ca3745f45762fc\spoolsv.exe
[2009/07/14 01:39:44 | 000,558,080 | ---- | M] (Microsoft Corporation) MD5=89E8550C5862999FCF482EA562B0E98E -- C:\Windows\winsxs\amd64_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.1.7600.16385_none_324094c8db39cbbd\spoolsv.exe
[2010/08/21 06:29:47 | 000,558,592 | ---- | M] (Microsoft Corporation) MD5=F8E1FA03CB70D54A9892AC88B91D1E7B -- C:\Windows\SysNative\spoolsv.exe
[2010/08/21 06:29:47 | 000,558,592 | ---- | M] (Microsoft Corporation) MD5=F8E1FA03CB70D54A9892AC88B91D1E7B -- C:\Windows\winsxs\amd64_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.1.7600.16661_none_3252392adb2d25f4\spoolsv.exe

[color=#A23BEC]< MD5 for: SVCHOST.EXE >[/color]
[2009/07/14 01:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
[2009/07/14 01:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2009/07/14 01:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
[2009/07/14 01:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe
[2015/10/05 09:48:32 | 000,893,752 | ---- | M] (MalwareBytes) MD5=E9A75E4B409A01E52055CE7CCA7FF925 -- C:\Program Files (x86)\Malwarebytes Anti-Malware\Chameleon\Windows\svchost.exe

[color=#A23BEC]< MD5 for: TERMSRV.DLL >[/color]
[2009/07/14 01:41:55 | 000,706,560 | ---- | M] (Microsoft Corporation) MD5=0F05EC2887BFE197AD82A13287D2F404 -- C:\Windows\SysNative\termsrv.dll
[2009/07/14 01:41:55 | 000,706,560 | ---- | M] (Microsoft Corporation) MD5=0F05EC2887BFE197AD82A13287D2F404 -- C:\Windows\winsxs\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7600.16385_none_ea94336f6df51e09\termsrv.dll

[color=#A23BEC]< MD5 for: USERINIT.EXE >[/color]
[2009/07/14 01:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\SysWOW64\userinit.exe
[2009/07/14 01:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009/07/14 01:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\SysNative\userinit.exe
[2009/07/14 01:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe

[color=#A23BEC]< MD5 for: VOLSNAP.SYS >[/color]
[2015/02/24 21:42:38 | 000,296,304 | ---- | M] (Microsoft Corporation) MD5=523E3C704BEE5326A502BA235D0938D6 -- C:\Windows\winsxs\amd64_volume.inf_31bf3856ad364e35_6.1.7600.21320_none_72710b5b2eb7975f\volsnap.sys
[2009/07/14 01:45:55 | 000,294,992 | ---- | M] (Microsoft Corporation) MD5=58F82EED8CA24B461441F9C3E4F0BF5C -- C:\Windows\SysNative\DriverStore\FileRepository\volume.inf_amd64_neutral_1b1a512d99c5b72c\volsnap.sys
[2009/07/14 01:45:55 | 000,294,992 | ---- | M] (Microsoft Corporation) MD5=58F82EED8CA24B461441F9C3E4F0BF5C -- C:\Windows\winsxs\amd64_volume.inf_31bf3856ad364e35_6.1.7600.16385_none_71aba92815c60174\volsnap.sys
[2015/02/24 21:42:38 | 000,295,792 | ---- | M] (Microsoft Corporation) MD5=9E425AC5C9A5A973273D169F43B4F5E1 -- C:\Windows\SysNative\drivers\volsnap.sys
[2015/02/24 21:42:38 | 000,295,792 | ---- | M] (Microsoft Corporation) MD5=9E425AC5C9A5A973273D169F43B4F5E1 -- C:\Windows\SysNative\DriverStore\FileRepository\volume.inf_amd64_neutral_2509122af013a38e\volsnap.sys
[2015/02/24 21:42:38 | 000,295,792 | ---- | M] (Microsoft Corporation) MD5=9E425AC5C9A5A973273D169F43B4F5E1 -- C:\Windows\winsxs\amd64_volume.inf_31bf3856ad364e35_6.1.7600.17122_none_71e96d3e15982d1c\volsnap.sys

[color=#A23BEC]< MD5 for: WININET.DLL >[/color]
[2013/03/02 04:28:05 | 000,982,016 | ---- | M] (Microsoft Corporation) MD5=073488F3805ADC63DFFDDC6247DD9F4E -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.22272_none_1ef142ef90675d35\wininet.dll
[2009/07/14 01:16:19 | 000,977,920 | ---- | M] (Microsoft Corporation) MD5=0D874F3BC751CC2198AF2E6783FB8B35 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7600.16385_none_1c7990d87a289fd4\wininet.dll
[2013/03/04 04:48:19 | 000,982,528 | ---- | M] (Microsoft Corporation) MD5=109DD2D8F7A7A013C1A93CBA3138E532 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7600.21484_none_1d02169193473fe8\wininet.dll
[2015/02/24 21:37:43 | 000,981,504 | ---- | M] (Microsoft Corporation) MD5=1B3DD46BC6396143A205EAAF05F38039 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7600.20862_none_1d15d4359338b053\wininet.dll
[2015/02/24 21:37:43 | 001,198,080 | ---- | M] (Microsoft Corporation) MD5=1D3466E7E9D63F8B2B84A8AD5E833C29 -- C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7600.20862_none_79346fb94b962189\wininet.dll
[2013/03/04 05:41:39 | 001,198,080 | ---- | M] (Microsoft Corporation) MD5=3BD77CF56FF4B03BA390379F67259258 -- C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7600.21484_none_7920b2154ba4b11e\wininet.dll
[2013/03/02 05:06:05 | 000,981,504 | ---- | M] (Microsoft Corporation) MD5=6A02CB2EDC24630845D11B507952141A -- C:\Windows\SysWOW64\wininet.dll
[2013/03/02 05:06:05 | 000,981,504 | ---- | M] (Microsoft Corporation) MD5=6A02CB2EDC24630845D11B507952141A -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7600.17267_none_1c9118967a16b71a\wininet.dll
[2013/03/02 05:19:12 | 001,189,888 | ---- | M] (Microsoft Corporation) MD5=6E8A768CEA17C6542E3031812745AC3F -- C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.22272_none_7b0fde7348c4ce6b\wininet.dll
[2015/02/24 21:37:43 | 000,981,504 | ---- | M] (Microsoft Corporation) MD5=78B9ADA2BC8946AF7B17678E0D07A773 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7600.16723_none_1cb8776479f9ba1c\wininet.dll
[2013/03/02 05:49:19 | 001,198,080 | ---- | M] (Microsoft Corporation) MD5=8523338F749AC8C5300C125BC4B08275 -- C:\Windows\SysNative\wininet.dll
[2013/03/02 05:49:19 | 001,198,080 | ---- | M] (Microsoft Corporation) MD5=8523338F749AC8C5300C125BC4B08275 -- C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7600.17267_none_78afb41a32742850\wininet.dll
[2013/03/02 05:56:00 | 001,188,864 | ---- | M] (Microsoft Corporation) MD5=9E7687984107C81B859200C9BD570AFF -- C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.18106_none_7ad5f2442f6ad066\wininet.dll
[2009/07/14 01:41:56 | 001,193,472 | ---- | M] (Microsoft Corporation) MD5=B1037F0131C9A010D611F6914E03CD92 -- C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7600.16385_none_78982c5c3286110a\wininet.dll
[2013/03/02 04:58:26 | 000,981,504 | ---- | M] (Microsoft Corporation) MD5=C3D43E21FA49657BC1645E9D745656C6 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.18106_none_1eb756c0770d5f30\wininet.dll
[2015/02/24 21:37:43 | 001,197,056 | ---- | M] (Microsoft Corporation) MD5=E71DB117DBDA6B33646F37936C17D226 -- C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7600.16723_none_78d712e832572b52\wininet.dll

[color=#A23BEC]< MD5 for: WININIT.EXE >[/color]
[2009/07/14 01:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\SysNative\wininit.exe
[2009/07/14 01:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\winsxs\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_8ce7aa761e01ad49\wininit.exe
[2009/07/14 01:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\SysWOW64\wininit.exe
[2009/07/14 01:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe

[color=#A23BEC]< MD5 for: WININIT.INI >[/color]
[2015/04/19 08:39:15 | 000,000,234 | ---- | M] () MD5=C5BF109653FBB57C8B7B67E0371E7DCF -- C:\Windows\wininit.ini

[color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
[2009/07/14 01:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2009/07/14 01:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2015/02/24 21:38:25 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2015/02/24 21:38:25 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2015/02/24 21:38:25 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\SysNative\winlogon.exe
[2015/02/24 21:38:25 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\SysNative\winlogon.exe
[2015/02/24 21:38:25 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe
[2015/02/24 21:38:25 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe
[2015/10/05 09:48:32 | 000,893,752 | ---- | M] (MalwareBytes) MD5=E9A75E4B409A01E52055CE7CCA7FF925 -- C:\Program Files (x86)\Malwarebytes Anti-Malware\Chameleon\Windows\winlogon.exe
[2015/10/05 09:48:32 | 000,893,752 | ---- | M] (MalwareBytes) MD5=E9A75E4B409A01E52055CE7CCA7FF925 -- C:\Program Files (x86)\Malwarebytes Anti-Malware\Chameleon\Windows\winlogon.exe

[color=#A23BEC]< MD5 for: WS2_32.DLL >[/color]
[2009/07/14 01:41:58 | 000,296,448 | ---- | M] (Microsoft Corporation) MD5=7083F463788CB34FCC42F565D56F89E8 -- C:\Windows\SysNative\ws2_32.dll
[2009/07/14 01:41:58 | 000,296,448 | ---- | M] (Microsoft Corporation) MD5=7083F463788CB34FCC42F565D56F89E8 -- C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7600.16385_none_4eaca269e8070c6b\ws2_32.dll
[2009/07/14 01:16:20 | 000,206,336 | ---- | M] (Microsoft Corporation) MD5=DAAE8A9B8C0ACC7F858454132553C30D -- C:\Windows\SysWOW64\ws2_32.dll
[2009/07/14 01:16:20 | 000,206,336 | ---- | M] (Microsoft Corporation) MD5=DAAE8A9B8C0ACC7F858454132553C30D -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7600.16385_none_f28e06e62fa99b35\ws2_32.dll

[color=#A23BEC]< HKEY_LOCAL_MACHINE\SYSTEM\Curr entControlSet\Control\Session Manager\SubSystems /s >[/color]

[color=#A23BEC]< %systemroot%\*. /mp /s >[/color]

[color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]
[2013/03/02 05:01:19 | 011,019,776 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\ieframe.dll
[1 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]

[color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\system32\drivers\ *.sys /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\System32\config\* .sav >[/color]

[color=#A23BEC]< c:\$recycle.bin\*.* /s >[/color]
[2016/01/02 14:30:35 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I02USTF.html
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I03FSY0.tif
[2016/01/03 10:34:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I04XHJ0.pdf
[2016/01/02 14:30:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I05BCI5.log
[2016/01/03 10:40:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I05I4M5.pdf
[2016/01/02 14:30:55 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I0679JF.log
[2016/01/02 14:30:45 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I0D7ODZ.log
[2016/01/03 10:44:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I0DLWHL.pdf
[2016/01/02 16:50:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I0K6MXW.exe
[2016/01/02 14:30:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I0NHN9J.log
[2016/01/02 14:31:05 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I0RSXXS.log
[2016/01/02 14:30:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I0VR9VF.err
[2016/01/03 09:16:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I0WQ5OF.lnk
[2016/01/02 14:30:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I11RVP8.log
[2016/01/03 10:40:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I11VP35.pdf
[2016/01/07 21:49:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I128NV8.exe
[2016/01/02 14:30:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I13R6YA.log
[2016/01/02 14:30:48 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I17IJNR.log
[2016/01/02 14:30:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I17XR5X.log
[2016/01/02 14:30:34 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I199DC9.docx
[2016/01/02 14:30:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I1B17I2.log
[2016/01/02 14:30:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I1FHUMM.log
[2016/01/02 14:30:55 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I1G393E.log
[2016/01/02 14:30:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I1GZ8QT.log
[2016/01/02 14:30:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I1IV7K5.log
[2016/01/02 14:30:55 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I1MX2N7.log
[2016/01/02 14:30:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I1PU3A2.log
[2016/01/02 16:50:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I1SL8JZ.log
[2016/01/02 14:30:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I1YKKDA.log
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I1Z83P3.tif
[2016/01/02 14:30:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I21GIFX.log
[2016/01/03 10:40:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I22JZAV.pdf
[2016/01/02 14:30:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I24J8K9.log
[2016/01/02 14:30:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I24KDTF.log
[2016/01/07 21:49:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I24UC7C.exe
[2016/01/03 10:46:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I24WLC5.tex
[2016/01/02 14:30:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I255GMI.log
[2016/01/02 14:30:58 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I25RW2O.log
[2016/01/03 11:37:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I284NYW.aux
[2016/01/07 21:49:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I2CK5FU.exe
[2016/01/07 21:49:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I2DJIPO.exe
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I2EQHYQ.pdf2txt
[2016/01/02 14:30:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I2HCGH0.log
[2016/01/02 14:30:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I2KP8Y0.log
[2016/01/02 14:30:54 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I2M0898.log
[2016/01/02 14:30:45 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I2NMIRI.log
[2016/01/02 14:30:56 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I2OAWB9.log
[2016/01/02 14:30:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I2QK61Z.log
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I2QWYIH.log
[2016/01/02 14:30:46 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I2RDJOE.log
[2016/01/02 14:30:55 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I2X7U93.log
[2016/01/02 14:30:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I2Z6BPO.log
[2016/01/02 14:31:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I34LNLJ.log
[2016/01/02 14:31:04 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I34TJUQ.log
[2016/01/07 21:49:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I34VHM9.exe
[2016/01/02 16:50:24 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I35B3JA.log
[2016/01/02 16:50:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I389ZCE.exe8
[2016/01/07 21:49:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I39BUU1.exe
[2016/01/02 14:30:54 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I3CIC9T.log
[2016/01/02 14:31:00 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I3D5ADJ.log
[2016/01/02 14:30:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I3DNKO5.log
[2016/01/07 21:49:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I3EVAU7.exe
[2016/01/03 10:37:21 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I3FR6JL.html
[2016/01/02 14:30:56 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I3HJW8Z.log
[2016/01/02 14:31:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I3HSNYW.log
[2016/01/02 14:30:33 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I3IE7X9.gid
[2016/01/02 14:30:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I3IUJQO.log
[2016/01/02 14:30:54 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I3JKCLD.log
[2016/01/02 14:31:00 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I3KVCIT.log
[2016/01/02 14:30:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I3L69O5.log
[2016/01/02 14:30:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I3N8ACP.log
[2016/01/02 16:50:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I3ND6DV.exe1
[2016/01/02 14:30:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I3PXE0I.log
[2016/01/02 14:31:09 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I3QVXBZ.log
[2016/01/02 14:31:02 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I3RMKY7.log
[2016/01/02 14:30:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I3RQQW8.log
[2015/12/28 00:55:02 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I3U6IUQ
[2016/01/02 14:31:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I3UCSW5.log
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I3VGZBR.pdf2txt
[2016/01/02 14:30:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I3WKKO0.log
[2016/01/02 14:31:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I3XNBB7.log
[2016/01/02 12:53:10 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I40R4MS.dav
[2016/01/03 10:37:05 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I42B3VZ.html
[2016/01/07 21:49:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I46KHKN.exe
[2016/01/03 11:37:32 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I4AEWGQ.lnk
[2016/01/02 14:31:09 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I4E9U2G.log
[2016/01/02 14:30:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I4F5AUQ.log
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I4FCQU3.log
[2016/01/02 14:31:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I4G2AUZ.log
[2016/01/07 21:49:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I4HE9QG.exe
[2016/01/02 14:30:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I4KHZY9.log
[2016/01/02 14:30:58 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I4M31CH.log
[2016/01/02 14:30:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I4MGGPQ.htm
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I4N69UL.tif
[2016/01/02 14:30:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I4P9SBP.log
[2016/01/02 14:30:34 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I4VXMCE.h~
[2016/01/02 14:30:58 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I4WS7O2.log
[2016/01/02 14:30:34 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I4XWWJU.txt~
[2016/01/02 14:31:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I4YJ0XP.log
[2016/01/07 21:49:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I4YJBCA.exe
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I50HV77.log
[2016/01/02 14:30:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I51GI7T.log
[2016/01/02 14:30:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I529G9W.log
[2016/01/07 21:49:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I539ONK.exe
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I53HY4I.tif
[2016/01/02 14:31:04 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I53TB82.log
[2016/01/02 14:30:41 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I54746U.log
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I554Q6W.log
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I566ZF3.tif
[2016/01/07 21:49:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I56ZHQ6.exe
[2016/01/07 21:49:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I57YR9B.exe
[2016/01/02 14:30:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I58OE6T.log
[2016/01/03 10:44:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I5ERFEO.pdf
[2016/01/02 14:30:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I5J89O7.log
[2016/01/02 14:30:54 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I5JCQKC.log
[2016/01/02 14:31:10 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I5K3GKB.tcl
[2016/01/02 14:30:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I5KVEXD.log
[2016/01/02 12:53:10 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I5KZGNR.pdf
[2016/01/02 14:30:41 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I5LI1RS.log
[2016/01/02 14:30:34 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I5M47P6.docx
[2016/01/02 14:30:58 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I5OAQM6.log
[2016/01/02 14:30:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I5QTXZ0.log
[2016/01/02 14:30:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I5R8AUJ.log
[2016/01/02 16:50:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I5S0GB9.exe4
[2016/01/02 14:30:55 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I5SOY7Q.log
[2016/01/02 16:50:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I5TPK43.exe7
[2016/01/02 14:30:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I5U9VQG.log
[2016/01/02 14:30:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I5WKZ4R.log
[2016/01/02 14:30:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I5Y2G81.log
[2016/01/02 14:30:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I5YWZZ2.log
[2016/01/02 14:30:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I5ZZ2LD.log
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I61L3TW.log
[2016/01/02 14:30:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I62DIGW.log
[2016/01/02 14:30:46 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I62WF3A.log
[2016/01/02 14:30:41 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I638BO6.log
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I65UCB0.txt
[2016/01/02 14:30:48 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I67V0UI.log
[2016/01/03 10:40:55 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I6BX9V8.pdf
[2016/01/02 14:30:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I6G3SH5.log
[2016/01/02 14:31:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I6I7UOX.log
[2016/01/02 14:30:41 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I6LU410.log
[2016/01/02 14:31:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I6MNF7T.log
[2016/01/02 14:30:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I6MRULL.log
[2016/01/02 14:31:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I6N95O7.log
[2016/01/02 14:30:34 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I6OLKAU.docx
[2016/01/07 21:49:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I6OZ3ID.exe
[2016/01/02 14:30:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I6QB1HJ.log
[2016/01/02 14:30:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I6QDIYD.log
[2016/01/02 16:50:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I6RANAZ.dav
[2016/01/02 14:30:46 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I6STD9I.log
[2016/01/02 14:31:12 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I6SWW46.chk
[2016/01/02 14:30:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I6TF4HI.log
[2016/01/02 14:31:06 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I6TXGXU.log
[2016/01/07 21:49:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I6UNCTP.exe
[2016/01/02 14:31:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I6VANEZ.log
[2016/01/02 14:30:35 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I6VSDDI.html
[2016/01/02 14:30:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I6VTD9Q.log
[2016/01/02 14:30:58 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I6YU28B.log
[2016/01/03 09:11:02 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I6ZPUV0.lnk
[2016/01/02 14:30:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I710ZNY.log
[2016/01/02 14:30:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I71QGQ4.log
[2016/01/02 14:30:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I74NJCG.docx
[2016/01/07 21:49:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I7A2PU1.exe
[2016/01/02 14:30:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I7AK4DN.log
[2016/01/02 14:30:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I7E1CTN.log
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I7H0O9Z.tif
[2016/01/02 14:31:06 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I7JRXO9.log
[2016/01/02 14:30:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I7L2ATY.log
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I7LYOT0.htm
[2016/01/02 14:31:09 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I7M3803.log
[2016/01/02 14:31:02 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I7NCB7C.log
[2016/01/02 14:30:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I7PY3NJ.log
[2016/01/02 14:31:06 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I7QF37Y.log
[2016/01/02 14:30:34 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I7RBNME.docx
[2016/01/02 14:30:45 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I7SBJED.log
[2016/01/03 10:40:31 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I7SPO79.pdf
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I7THRP7.tif
[2016/01/02 14:30:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I7UZ34D.log
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I80LFBF.log
[2016/01/03 10:45:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I81CJ12.pdf
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I81K0X4.log
[2016/01/02 14:30:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I871NOM.LOG
[2016/01/02 14:30:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I88GEYV.log
[2016/01/09 13:18:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I8F78XV.ini
[2016/01/07 21:49:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I8FFRFP.exe
[2016/01/07 21:49:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I8GVB7F.exe
[2016/01/02 14:30:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I8HHM3H.err
[2016/01/02 14:30:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I8HJZRL.log
[2016/01/02 14:30:34 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I8IXRCK.doc
[2016/01/02 14:30:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I8LEA25.log
[2016/01/02 14:30:35 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I8LTDCZ.html
[2016/01/07 21:49:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I8MIL8O.exe
[2016/01/02 14:30:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I8NHFKZ.log
[2016/01/02 14:30:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I8NTBP0.log
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I8O924L.tif
[2016/01/02 14:30:34 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I8R602Y.docx
[2015/12/28 00:28:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I8TB0OG.exe
[2016/01/02 14:30:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I8TLCYH.log
[2016/01/02 14:30:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I8X6I1W.err
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I901C8F.log
[2016/01/02 14:30:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I907MDN.log
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I91CKCQ.log
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I92QWG9.tif
[2016/01/07 21:49:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I95ENFB.exe
[2016/01/02 14:31:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I96FKM1.log
[2016/01/07 21:49:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I99FRS5.exe
[2016/01/02 14:30:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I99ZHQX.log
[2016/01/03 10:37:20 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I9C6DJ1.html
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I9CA8OS.tif
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I9EV8MM.log
[2016/01/07 21:49:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I9FUMQK.exe
[2016/01/02 14:30:34 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I9HLPON.doc
[2016/01/03 10:40:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I9LLDIX.pdf
[2016/01/02 14:30:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I9OSMM7.log
[2016/01/02 14:30:54 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I9OXYBE.log
[2016/01/02 14:30:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I9P1ER6.log
[2016/01/02 14:30:46 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I9Q4YBO.log
[2016/01/02 14:30:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I9QUKQW.log
[2016/01/02 14:30:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I9UB2V8.log
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I9VSLLA.log
[2016/01/02 14:30:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I9WUZ8G.log
[2016/01/02 14:31:06 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I9XRGKD.log
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I9Y3L9D.log
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$I9Z7HHS.log
[2016/01/02 14:30:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IA13ZYA.log
[2016/01/03 10:44:34 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IA1NGAH.pdf
[2016/01/02 14:30:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IA3V0Q0.err
[2016/01/02 16:50:24 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IA4P0IS.log
[2016/01/02 14:30:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IA9LWI0.log
[2016/01/02 14:31:02 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IAA1SGF.log
[2016/01/02 14:30:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IABHQK2.log
[2016/01/02 14:30:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IAC1RWK.log
[2016/01/02 14:30:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IACENTU.err
[2016/01/02 14:30:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IACO60M.log
[2016/01/02 14:31:05 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IAF7UV8.log
[2016/01/02 14:30:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IAGFPCH.log
[2016/01/02 14:31:00 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IAGISUD.log
[2016/01/02 14:31:05 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IAH05B9.log
[2016/01/02 14:31:05 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IAJFQL5.log
[2016/01/02 14:30:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IALWNYS.log
[2016/01/07 21:49:21 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IAP9GTW.exe
[2016/01/02 14:30:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IAR7PK5.log
[2016/01/02 14:30:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IARPUQD.log
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IAT974U.pdf2txt
[2016/01/02 14:30:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IAXUFM7.log
[2016/01/02 14:30:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IAZ6FJ5.log
[2016/01/03 11:37:41 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IB194LX.htm
[2016/01/07 21:49:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IB43NJJ.bib
[2016/01/02 14:30:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IB4RG87.log
[2016/01/02 14:30:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IB5ZRGV.log
[2016/01/02 14:30:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IB837O8.log
[2016/01/02 14:30:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IBC3T6G.log
[2016/01/02 14:30:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IBHADLK.log
[2016/01/02 14:30:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IBHCORK.log
[2016/01/02 14:30:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IBJTVJA.log
[2016/01/03 10:40:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IBJV86N.pdf
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IBL1KHK.log
[2016/01/03 10:40:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IBMQNS3.pdf
[2016/01/02 14:31:05 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IBMT5BR.log
[2016/01/02 14:30:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IBNR7SR.htm
[2016/01/02 14:30:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IBO5Q41.log
[2016/01/02 14:30:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IBQ4W8R.log
[2016/01/03 10:34:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IBQD9JX.pdf
[2016/01/02 14:30:58 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IBRUV29.log
[2016/01/02 14:30:32 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IBTBNVT.fts
[2016/01/03 11:37:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IBURHAN.aaa
[2016/01/02 14:31:06 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IBVYFH5.log
[2016/01/02 14:31:02 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IBXCP5N.log
[2016/01/07 21:49:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IBYD412.exe
[2016/01/07 21:49:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IBZE9WH.exe
[2016/01/02 14:30:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IC0K99P.log
[2016/01/03 10:46:18 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IC3T27O.tex
[2016/01/02 14:31:05 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IC400DN.log
[2016/01/02 14:30:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IC4JFBP.log
[2016/01/02 14:17:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IC6UJDO.lnk
[2016/01/02 14:30:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IC8KS69.log
[2016/01/02 14:31:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IC8KZ3D.log
[2016/01/02 14:30:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IC94QW4.log
[2016/01/02 14:30:48 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IC9DH9P.log
[2016/01/02 14:31:09 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IC9WH33.log
[2016/01/02 14:30:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ICAJMA7.log
[2016/01/02 14:30:41 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ICBV5F4.log
[2016/01/02 14:30:46 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ICDD8DD.log
[2016/01/02 14:30:45 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ICESV3N.log
[2016/01/02 14:30:46 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ICFZQMR.log
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ICGB52D.db
[2016/01/02 14:30:56 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ICJ8VYZ.log
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ICJVZX1.tif
[2016/01/02 14:30:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ICJXME1.err
[2016/01/02 14:30:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ICLVMQN.log
[2016/01/02 14:31:06 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ICMSKI4.log
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ICNM9LS.tif
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ICQIZVR.log
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ICQX3CP.log
[2016/01/02 14:31:09 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ICTWQI1.log
[2016/01/02 14:30:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ICZ0QF6.log
[2016/01/02 14:30:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ID0KGS5.log
[2016/01/02 14:30:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ID0Y8R4.log
[2016/01/02 14:30:34 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ID3QLAM.docx
[2016/01/02 14:31:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ID5XVAO.log
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ID8AKX9.tif
[2016/01/03 10:41:05 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ID9XU9U.pdf
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IDAPAQ8.log
[2016/01/02 14:30:45 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IDB3HF1.log
[2016/01/02 14:30:48 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IDEYSEV.log
[2016/01/02 14:30:48 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IDFXK3U.log
[2016/01/02 14:30:35 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IDK201J.xlsx
[2016/01/02 14:30:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IDKD9ZH.log
[2016/01/02 14:31:11 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IDL2LAZ.dmp
[2016/01/03 10:37:21 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IDOZX7X.html
[2016/01/02 12:53:10 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IDV9TKT.qua
[2016/01/02 16:50:24 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IDWCMDP.avastlic
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IDYB2LS.tif
[2016/01/02 14:30:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IE2OYWF.log
[2016/01/02 14:31:06 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IE4B82X.log
[2016/01/02 14:30:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IE4S8A4.log
[2016/01/02 14:30:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IEC7592.log
[2016/01/02 14:30:41 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IED3SPW.log
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IEG3LVD.log
[2016/01/02 14:30:46 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IEJLAOA.log
[2016/01/02 14:30:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IEJPV3J.log
[2016/01/02 14:30:55 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IEKY7IF.log
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IEMF9IM.htm
[2016/01/02 14:31:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IENRIHD.log
[2016/01/02 14:30:46 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IEP5QQW.log
[2016/01/02 14:30:41 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IEPF05P.log
[2016/01/02 14:30:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IEPJZYU.log
[2016/01/02 14:31:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IEQFEAE.log
[2016/01/02 14:30:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IEQL3DR.log
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IEVYV2M.tif
[2016/01/02 14:30:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IEZS7DB.log
[2016/01/02 14:31:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IF07101.log
[2016/01/02 14:30:34 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IF0D18B.docx
[2016/01/07 21:49:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IF22E6Y.exe
[2016/01/02 14:30:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IF2FAPW.err
[2015/12/11 13:53:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IF5A13A.exe
[2016/01/02 14:30:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IF7EDBP.log
[2016/01/02 14:30:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IF9CT1I.log
[2016/01/02 14:31:05 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IF9DKQ6.log
[2016/01/02 14:30:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IFB7ZBE.log
[2016/01/02 14:30:46 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IFCTKW2.log
[2016/01/02 14:30:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IFD33MO.log
[2016/01/03 09:16:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IFDPQGU.dav
[2016/01/02 14:31:04 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IFEMTLM.log
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IFF21NK.log
[2016/01/02 14:31:00 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IFFCDJ0.log
[2016/01/02 14:30:46 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IFI2DT9.log
[2016/01/02 14:30:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IFIEYMI.log
[2016/01/02 14:30:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IFKNEAV.log
[2016/01/03 10:40:31 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IFL9ZPL.pdf
[2016/01/02 14:30:46 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IFLJGXR.log
[2016/01/02 14:30:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IFMDNFV.log
[2016/01/02 14:30:56 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IFMJ8RD.log
[2015/12/29 10:39:56 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IFMZJUX.exe
[2016/01/02 14:30:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IFNKV4O.log
[2016/01/02 14:31:00 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IFQDMZZ.log
[2016/01/02 14:31:04 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IFS3Y7H.log
[2016/01/02 14:30:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IFT5FPU.log
[2016/01/02 14:31:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IFTDD15.log
[2016/01/02 14:30:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IFUKYUP.log
[2016/01/02 14:30:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IFUOVMB.log
[2016/01/02 14:30:45 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IFXBAM9.log
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IFXUYX0.log
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IG0M9IL.log
[2016/01/02 14:30:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IG2TA63.log
[2016/01/02 14:30:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IG2UCCC.log
[2016/01/02 14:30:54 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IG39DQ3.log
[2016/01/02 14:30:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IG4IER9.log
[2016/01/02 14:30:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IG5OKOB.log
[2016/01/02 14:30:54 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IG5WVSR.log
[2016/01/03 10:39:56 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IG638GE.pdf
[2015/12/28 00:28:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IG9BC4G.lnk
[2016/01/02 14:30:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IGACZBE.log
[2016/01/03 10:40:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IGAES67.pdf
[2016/01/02 14:30:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IGEIZT3.log
[2016/01/03 10:34:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IGHSMR3.pdf
[2016/01/02 14:31:00 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IGI18KK.log
[2016/01/02 14:30:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IGJ828B.log
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IGJXKIE.log
[2016/01/02 14:30:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IGL0W2A.log
[2016/01/02 14:30:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IGL9GZ9.log
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IGLMW8P.pdf2txt
[2016/01/02 14:30:41 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IGOQYJQ.log
[2015/12/11 23:03:13 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IGP42HX
[2016/01/07 21:49:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IGRZZM1.exe
[2016/01/02 14:31:12 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IGUMLRD.dmp
[2016/01/02 14:30:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IGVZU5C.log
[2016/01/02 14:30:45 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IGW4EDL.log
[2016/01/02 14:30:56 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IGXBN49.log
[2016/01/02 14:30:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IGXI67J.log
[2016/01/02 14:30:55 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IGZCKPQ.log
[2016/01/02 14:30:34 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IH0S58P.cpp~
[2016/01/02 14:31:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IH19DWP.log
[2016/01/02 14:30:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IH1METS.log
[2016/01/02 14:31:06 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IH52VPX.log
[2016/01/07 21:49:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IH5F43P.exe
[2016/01/02 14:31:11 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IH7YA30.dmp
[2016/01/02 14:30:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IH89444.log
[2016/01/02 14:30:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IH9HNLN.log
[2016/01/07 21:49:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IHBD540.exe
[2016/01/02 14:31:04 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IHD3DRV.log
[2016/01/02 14:30:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IHFEX5N.doc
[2016/01/02 14:31:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IHGR3K0.log
[2016/01/02 14:30:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IHHULJK.log
[2016/01/03 10:46:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IHIP0JE.pdf
[2016/01/02 14:30:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IHKPODC.log
[2016/01/02 14:30:35 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IHL0CPG.html
[2016/01/02 14:31:09 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IHPF9N3.log
[2016/01/02 14:31:11 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IHQA7SH.tcl
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IHQKUSI.pdf2txt
[2016/01/03 10:37:04 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IHQYYAU.html
[2016/01/02 14:31:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IHRMYTI.log
[2016/01/02 14:31:05 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IHS168W.log
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IHT8BLY.htm
[2016/01/02 14:30:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IHU16U1.log
[2016/01/02 14:30:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IHYDUX2.db
[2016/01/02 14:30:34 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IHYHH7N.docx
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IHYM6BO.log
[2016/01/02 14:30:48 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IHYQC39.log
[2016/01/02 14:30:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IHZ3KZU.html
[2016/01/02 14:30:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$II07K9A.log
[2016/01/02 14:30:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$II1TB0E.log
[2016/01/02 14:30:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$II2CE09.log
[2016/01/02 14:30:58 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$II3BHPB.log
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$II3YND6.tif
[2016/01/07 21:49:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$II4520A.exe
[2016/01/03 10:34:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$II4MNNS.pdf
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$II63VAV.log
[2016/01/02 14:30:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$II66JKF.log
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$II7A8MF.log
[2016/01/02 14:30:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$II814KP.log
[2016/01/02 16:47:46 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$II8320N
[2016/01/03 10:38:18 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$II94K1D.exe
[2016/01/02 14:30:35 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IIAEPX9.html
[2016/01/02 14:30:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IIBGILH.log
[2016/01/02 14:30:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IIILHVV.log
[2016/01/02 14:30:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IIKDED0.log
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IIKN9UE.log
[2016/01/02 14:31:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IIL2JZH.log
[2016/01/02 14:30:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IILIHCI.log
[2016/01/02 14:31:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IILSZA9.log
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IIM8KLY.htm
[2016/01/02 14:30:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IIRB6R7.log
[2016/01/02 14:30:56 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IIVWA61.log
[2016/01/02 14:30:48 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IIVYCY4.log
[2016/01/07 21:49:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IJ0PP1G.exe
[2016/01/02 14:30:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IJ2UEQE.log
[2016/01/02 14:30:58 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IJ3JXHS.log
[2016/01/02 14:31:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IJ3SSPG.log
[2016/01/02 14:30:56 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IJ4EPE5.log
[2016/01/02 14:30:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IJ5Q2VW.html
[2016/01/02 12:53:10 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IJ7X595.txt
[2016/01/02 14:30:54 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IJ8SHDB.log
[2016/01/02 14:30:46 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IJ92565.log
[2016/01/02 14:30:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IJ9UT9I.log
[2016/01/02 14:31:02 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IJABH0Z.log
[2016/01/02 14:30:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IJC0KRK.log
[2016/01/02 14:31:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IJER6JP.log
[2015/12/25 23:11:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IJFRMNV.jpg
[2016/01/02 14:30:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IJHY8P8.log
[2016/01/02 14:30:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IJI5LBL.log
[2016/01/02 14:31:06 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IJKPH5A.log
[2016/01/02 14:30:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IJLZ41S.log
[2016/01/02 14:30:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IJMFHZI.log
[2016/01/02 14:30:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IJO6EBY.log
[2016/01/02 14:31:09 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IJRHR8J.tcl
[2016/01/03 11:37:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IJU2ERM.bak
[2016/01/02 14:30:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IJW4YSJ.log
[2016/01/02 14:30:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IJX8Y8Z.log
[2016/01/07 21:49:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IJXI878.exe
[2016/01/02 14:31:09 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IJYMNML.log
[2016/01/02 14:30:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IJYRX1B.log
[2016/01/02 14:30:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IJZXBV5.log
[2016/01/07 21:49:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IK33NQF.exe
[2016/01/02 14:30:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IK42Q57.html
[2016/01/02 14:30:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IK44QK2.log
[2016/01/02 14:30:58 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IK7I337.log
[2016/01/02 14:30:58 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IK80ICO.log
[2016/01/07 21:49:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IK9AIW6.exe
[2016/01/02 14:30:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IK9H4EF.log
[2016/01/02 14:30:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IK9POE8.log
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IKABOGG.log
[2016/01/02 14:31:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IKAY6CG.log
[2016/01/07 21:49:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IKBYAH7.exe
[2016/01/02 14:30:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IKDGZY7.log
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IKGOBZ5.pdf2txt
[2016/01/02 14:30:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IKHG7QD.log
[2016/01/02 14:30:55 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IKHTDTM.log
[2016/01/02 14:31:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IKK64O1.log
[2016/01/02 14:31:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IKK9X1O.log
[2016/01/02 14:30:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IKKVBRR.log
[2016/01/03 10:37:06 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IKLP72R.html
[2016/01/02 14:30:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IKNN0OB.log
[2016/01/02 14:30:34 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IKPKIOB.doc
[2016/01/02 14:30:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IKQERIC.log
[2016/01/02 14:30:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IKTT4M6.log
[2016/01/02 14:30:34 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IKW1AG6.old
[2016/01/02 14:30:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IKWAU62.log
[2016/01/02 14:30:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IKWWQYB.err
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IKZ7UP1.tif
[2016/01/02 14:31:00 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IL0F5U5.log
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IL0QCJV.tif
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IL1XUBJ.log
[2016/01/03 10:42:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IL4N2GP.pdf
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IL5VYEE.log
[2016/01/02 14:31:06 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IL6JWJI.log
[2016/01/02 14:30:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IL6Z6CB.log
[2016/01/02 14:30:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IL7JJ7Z.log
[2016/01/02 14:30:45 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IL8J20J.log
[2016/01/02 14:30:34 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IL9KYV4.doc
[2016/01/02 14:30:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ILGEL2N.err
[2016/01/02 14:30:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ILGW5Y2.log
[2016/01/02 14:30:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ILJEK0N.log
[2016/01/02 14:30:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ILM09OG.log
[2016/01/06 16:32:18 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ILMG3TB
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ILNP8BZ.tif
[2016/01/02 14:30:34 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ILPZELQ.docx
[2016/01/02 14:30:46 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ILQKTYK.log
[2016/01/07 16:51:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ILQQP05
[2016/01/02 14:30:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ILR70RX.LOG
[2016/01/02 14:30:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ILR7DM8.log
[2016/01/02 14:30:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ILRKAAX.log
[2016/01/02 14:30:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ILSKPO2.log
[2016/01/02 14:30:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ILUPS9P.log
[2016/01/02 14:30:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ILZOC6G.log
[2016/01/02 14:30:48 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IM0OB2W.log
[2016/01/02 14:30:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IM18W2Q.log
[2016/01/03 10:39:56 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IM3MG3N.pdf
[2016/01/02 14:30:58 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IM8CPOA.log
[2016/01/02 14:30:48 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IMAJE16.log
[2016/01/02 14:31:02 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IMB6Y0J.log
[2016/01/02 14:30:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IMBEGVF.log
[2016/01/02 14:30:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IMBNDUE.log
[2016/01/02 14:31:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IMDCHL0.log
[2016/01/02 14:30:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IMDFFKC.log
[2016/01/02 14:30:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IMFSBIZ.log
[2016/01/02 14:30:45 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IMJ1H3U.log
[2016/01/02 14:30:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IMKDAWP.log
[2016/01/02 14:30:54 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IML7EU6.log
[2016/01/02 14:30:45 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IMLCY5B.log
[2016/01/02 14:30:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IMMMTSP.log
[2016/01/02 14:30:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IMNWDA5.log
[2016/01/02 14:30:48 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IMOVOJE.log
[2016/01/02 14:30:56 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IMT4EXZ.log
[2016/01/02 14:31:02 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IMTJ1GO.log
[2016/01/02 14:30:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IMTP68I.log
[2016/01/02 14:30:54 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IMTPGYT.log
[2016/01/02 14:30:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IMTZU60.log
[2016/01/03 10:46:12 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IMUNUFL.pdf
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IMY1RVQ.pdf2txt
[2016/01/02 14:31:10 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IMYUC9G.tcl
[2016/01/02 14:31:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IMYYPSB.log
[2016/01/02 14:30:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IMZH4SE.log
[2016/01/02 14:30:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IMZSWUU.doc
[2016/01/07 21:49:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IN03D14.exe
[2016/01/02 14:30:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IN1TPMM.log
[2016/01/02 14:30:48 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IN3VKFH.log
[2016/01/02 14:31:10 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IN5JBER.dmp
[2016/01/02 16:50:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IN5KBVK.exe2
[2016/01/03 10:41:05 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IN5ZDA8.pdf
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IN8FVLN.log
[2016/01/02 14:31:04 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IN9OH25.log
[2016/01/02 14:30:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$INDX0OX.log
[2016/01/07 21:49:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$INGDLBX.exe
[2016/01/02 14:30:55 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$INGRUH7.log
[2016/01/02 14:31:00 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$INILDAB.log
[2016/01/02 14:30:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$INKLL2Z.log
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$INMBCVM.tif
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$INNAOE4.tif
[2016/01/03 10:46:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$INOCIF1.pdf
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$INOQGA3.tif
[2016/01/02 14:31:00 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$INR1V1D.log
[2016/01/07 21:49:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$INT68AG.exe
[2016/01/02 14:30:55 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$INXOMNR.log
[2016/01/02 16:50:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IO2WNVL.exe6
[2016/01/02 14:30:33 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IO36VGL.gid
[2016/01/02 14:30:41 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IO4CKQT.log
[2016/01/02 14:31:02 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IO4FUT2.log
[2016/01/02 14:30:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IO4XI3B.log
[2016/01/02 14:30:45 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IO6FU99.log
[2016/01/02 14:30:46 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IO87D0T.log
[2016/01/02 14:31:06 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IO8OCPD.log
[2016/01/07 21:49:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IOBCDAC.exe
[2016/01/02 14:30:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IOC5MGM.err
[2016/01/02 12:53:10 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IOCR0HI.exe
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IOCVNRT.tif
[2016/01/07 21:49:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IOCYICH.htm
[2016/01/02 14:30:41 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IOER91G.log
[2016/01/02 14:30:45 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IOF2KEH.log
[2016/01/03 11:37:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IOFLKC4.mc
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IOGD056.log
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IOGWSKI.pdf2txt
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IOI06F0.pdf2txt
[2016/01/02 14:30:34 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IOIUAIK.doc
[2016/01/02 14:30:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IOK6ZHM.log
[2016/01/02 14:30:46 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ION47Z7.log
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IONU0XB.log
[2016/01/02 14:30:58 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IOOQTKY.log
[2016/01/02 14:31:02 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IOP7X7G.log
[2016/01/02 14:30:48 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IOS00N8.log
[2016/01/03 10:40:55 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IOSWAT9.pdf
[2016/01/02 14:31:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IOT1AU8.log
[2016/01/07 21:49:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IOVVQD3.exe
[2016/01/02 14:30:48 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IOWJE5P.log
[2016/01/02 14:31:10 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IOZRCZX.dmp
[2016/01/02 14:30:41 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IP06W87.log
[2016/01/02 14:30:45 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IP0D7SL.log
[2016/01/02 14:30:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IP7TJI7.log
[2016/01/02 14:30:55 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IP874OS.log
[2016/01/02 14:30:45 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IP8ENMI.log
[2016/01/02 14:30:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IPA8XT6.log
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IPC2PZO.db
[2016/01/02 14:30:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IPCC41P.log
[2016/01/02 14:30:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IPCPK3C.log
[2016/01/07 21:49:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IPDRCTI.exe
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IPEZTT9.log
[2016/01/02 14:30:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IPH010K.log
[2016/01/02 14:31:04 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IPIW9XI.log
[2016/01/02 14:30:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IPJN7JB.log
[2016/01/07 21:49:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IPL6PNG.exe
[2016/01/02 14:31:02 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IPM1IO2.log
[2016/01/02 14:30:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IPM38BW.log
[2016/01/07 21:49:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IPM7F11.exe
[2016/01/02 14:30:45 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IPQXSBP.log
[2016/01/02 14:30:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IPRKSNG.err
[2016/01/02 14:30:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IPSJTYP.err
[2016/01/02 14:31:12 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IPUNPVI.dmp
[2016/01/02 14:30:54 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IPVXF46.log
[2016/01/02 14:30:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IPYMP4Y.log
[2016/01/02 14:31:02 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IQ7A6EJ.log
[2016/01/02 14:30:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IQAHE0U.log
[2016/01/02 14:30:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IQC3FR3.err
[2016/01/02 14:30:35 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IQD69YS.html
[2016/01/02 14:30:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IQDZVAC.doc
[2016/01/02 14:30:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IQETGT0.err
[2016/01/02 14:30:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IQJEAPN.log
[2016/01/02 14:30:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IQK1B8Q.log
[2016/01/04 16:03:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IQKNLN8.lnk
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IQMZG8Q.log
[2016/01/02 14:31:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IQPLYZR.log
[2016/01/02 14:17:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IQQMXBC.exe
[2016/01/02 14:31:02 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IQSLWCD.log
[2016/01/02 14:30:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IQTXNFI.log
[2016/01/02 14:31:00 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IQU9JGY.log
[2016/01/07 21:49:21 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IQVWR2H.exe
[2016/01/02 14:31:06 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IR4HPF5.log
[2016/01/07 21:49:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IR6N507.exe
[2016/01/02 14:30:46 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IR772T1.log
[2016/01/02 14:30:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IR8XTY5.err
[2016/01/02 14:30:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IR9CZHO.log
[2016/01/07 21:49:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IR9EETO.exe
[2016/01/02 14:31:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IRAYDSD.log
[2016/01/02 14:30:45 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IRFHD6N.log
[2016/01/02 14:30:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IRJ0LOI.log
[2016/01/02 14:31:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IRK1L8U.log
[2016/01/02 14:30:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IRM8FTW.log
[2016/01/02 14:31:10 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IRMLXRF.tcl
[2016/01/02 14:30:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IRMYSDW.log
[2016/01/02 14:30:56 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IRNN7F9.log
[2016/01/02 14:30:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IRO04T4.log
[2016/01/02 14:30:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IRT1YJV.doc
[2016/01/02 14:30:45 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IRUMK8G.log
[2016/01/02 16:50:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IRXTIF4.exe5
[2016/01/07 21:49:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IRY4UMK.exe
[2016/01/02 14:31:00 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IRZSVDD.log
[2016/01/02 14:30:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IRZVXSP.log
[2016/01/02 14:30:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IS0CL3Q.log
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IS26LLO.tif
[2016/01/02 14:31:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IS3K8UK.log
[2016/01/02 14:31:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IS4PQCD.log
[2016/01/02 14:30:45 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IS7DEEP.log
[2016/01/06 16:32:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IS885QE
[2016/01/07 21:49:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IS8QFSM.exe
[2016/01/02 14:30:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IS8V3WP.log
[2016/01/02 14:30:35 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ISA3M91.html
[2016/01/02 14:30:41 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ISC69SF.log
[2016/01/07 21:49:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ISDFQOU.exe
[2016/01/07 21:49:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ISI0S71.exe
[2016/01/02 14:30:34 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ISMNES7.doc
[2016/01/02 14:31:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ISNQUOE.log
[2016/01/02 14:30:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ISOWB7Y.log
[2016/01/02 14:30:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ISPTYIZ.log
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ISV9JRW.log
[2016/01/02 14:16:33 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ISVFAU8.lnk
[2016/01/02 14:31:11 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ISYZ19M.dmp
[2016/01/02 14:30:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IT0DQ3P.htm
[2016/01/02 14:30:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IT16JFZ.log
[2016/01/02 14:30:56 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IT1GTPG.log
[2016/01/07 21:49:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IT46SNZ.exe
[2016/01/02 14:30:35 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IT9N51K.html
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ITCYZZ9.log
[2016/01/02 14:30:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ITDQ0EM.log
[2016/01/02 14:30:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ITIFNW1.log
[2016/01/02 14:30:56 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ITJCJBL.log
[2016/01/03 11:37:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ITL4O7S.txt
[2016/01/02 14:30:41 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ITN14LL.log
[2016/01/02 14:30:58 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ITNQVYP.log
[2016/01/02 14:30:41 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ITNSHZQ.log
[2016/01/02 14:30:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ITOMGS8.log
[2016/01/02 14:31:02 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ITR315M.log
[2016/01/02 14:30:41 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ITR8SO6.log
[2016/01/02 14:30:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ITRCV9W.log
[2016/01/02 14:31:00 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ITUTEU0.log
[2016/01/02 14:30:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ITXKVAB.log
[2016/01/02 14:31:02 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ITXXRWB.log
[2016/01/02 12:53:10 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IU13BS1
[2016/01/02 14:30:55 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IU1AA29.log
[2016/01/09 13:18:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IU1E1IT.Txt
[2016/01/02 14:30:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IU2TKLT.err
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IU36YQ3.html
[2016/01/02 14:30:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IU4WD56.log
[2016/01/02 14:30:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IU5SCOC.log
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IU74F01.log
[2016/01/02 14:31:04 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IU8BXTW.log
[2016/01/02 12:53:10 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IU8DGOQ.url
[2016/01/02 14:30:41 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IU94FWN.log
[2016/01/02 14:17:41 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IUBXPHO.exe
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IUD09E2.log
[2016/01/02 14:31:10 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IUDYHBQ.dmp
[2016/01/07 21:49:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IUG1EII.exe
[2016/01/02 14:30:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IUHJC1D.log
[2016/01/02 14:30:46 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IUIT742.log
[2016/01/07 21:49:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IUMTCS1.html
[2016/01/02 14:31:00 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IUQ2GVF.log
[2016/01/02 14:30:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IUR61P2.log
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IURENQU.log
[2016/01/02 14:30:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IUSTMGU.log
[2016/01/02 14:30:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IUUTMV3.log
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IUWD1AW.txt
[2016/01/02 14:30:55 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IUX84AF.log
[2016/01/02 14:37:00 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IUXBOVW.lnk
[2016/01/03 10:46:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IV0MSRP.tex
[2016/01/02 14:31:10 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IV21V0K.dmp
[2016/01/02 14:30:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IV28S34.log
[2016/01/02 14:30:54 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IV40V78.log
[2016/01/02 14:30:48 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IV4QBHQ.log
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IV7KFAU.tif
[2016/01/02 12:53:10 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IVC17R8.url
[2016/01/02 14:30:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IVK0VOA.log
[2016/01/07 21:49:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IVKMQI4.exe
[2016/01/02 14:30:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IVKUYVO.log
[2016/01/02 14:30:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IVLZE70.log
[2016/01/02 14:30:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IVMJKB7.log
[2016/01/02 14:31:04 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IVS45MH.log
[2016/01/02 14:30:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IVTIZWE.log
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IVVXKOJ.tif
[2016/01/02 14:31:00 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IVW73YJ.log
[2016/01/02 14:30:48 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IVY21TT.log
[2016/01/02 14:30:46 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IVYDFG9.log
[2016/01/02 12:53:10 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IVZ0TRV.rar
[2016/01/02 14:30:56 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IW16SGZ.log
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IW2J3FV.pdf2txt
[2016/01/02 14:31:12 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IW479XL.dmp
[2016/01/02 14:30:34 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IW4859G.pdf
[2016/01/07 21:49:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IW84QLI.exe
[2016/01/07 21:49:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IW86F8D.exe
[2016/01/02 14:30:41 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IW9SYPI.log
[2016/01/02 14:30:46 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IWA958H.log
[2016/01/02 14:30:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IWBYZ1E.log
[2016/01/02 14:31:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IWD7S0G.log
[2016/01/02 14:31:09 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IWDFXVS.tcl
[2016/01/02 14:30:34 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IWEXDHS.docx
[2016/01/02 14:30:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IWEXDN2.htm
[2016/01/02 14:31:06 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IWF7TJR.log
[2016/01/02 14:30:56 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IWFDFM9.log
[2016/01/02 14:30:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IWFJPBX.htm
[2016/01/02 14:30:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IWH716J.log
[2016/01/02 14:30:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IWJHO1T.log
[2016/01/02 14:30:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IWL5ZRW.log
[2016/01/02 14:31:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IWOCZAG.log
[2016/01/02 14:30:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IWODCVV.html
[2016/01/02 14:30:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IWQF1IO.log
[2016/01/02 14:31:04 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IWTY2RI.log
[2016/01/02 14:30:46 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IWW83FI.log
[2016/01/02 14:30:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IWW847L.log
[2016/01/02 14:30:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IWWQ3TP.log
[2016/01/02 14:31:12 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IWWT04N.dmp
[2016/01/02 14:30:56 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IWY5HOK.log
[2016/01/02 14:30:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IWY8XNS.log
[2016/01/02 14:30:54 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IWZ9YOV.log
[2016/01/02 14:30:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IX4EYCR.log
[2016/01/02 14:30:54 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IX66X1S.log
[2016/01/02 14:30:48 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IX79HRD.log
[2016/01/02 14:30:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IX7WF9D.html
[2016/01/06 16:32:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IX9QX5U
[2016/01/02 14:31:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IXC1FGZ.log
[2016/01/03 11:37:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IXCX0JH.aaa
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IXDLY4J.log
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IXED0QL.log
[2016/01/02 14:31:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IXELRE7.log
[2016/01/03 10:34:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IXEOWI1.pdf
[2016/01/02 14:30:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IXEPUKD.htm
[2016/01/02 14:30:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IXF88IS.log
[2016/01/02 14:31:09 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IXGI5B0.tcl
[2016/01/02 14:30:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IXH1TGL.log
[2016/01/02 14:30:56 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IXIF6Z9.log
[2016/01/02 14:30:55 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IXJ9LUU.log
[2016/01/02 14:31:12 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IXL3YF1.dmp
[2016/01/02 14:30:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IXLTSQT.log
[2016/01/03 10:40:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IXLWXNC.pdf
[2016/01/02 14:31:09 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IXN5VM3.tcl
[2016/01/02 14:30:34 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IXNJTJ9.docx
[2016/01/02 14:31:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IXRH9FN.log
[2016/01/02 14:30:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IXRS7J3.log
[2016/01/02 14:30:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IY2EGF7.err
[2016/01/02 14:31:02 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IY3AYVU.log
[2016/01/02 14:30:55 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IY3MU1T.log
[2016/01/02 14:30:41 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IY6TWO4.log
[2016/01/02 14:31:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IY6YWIL.log
[2016/01/02 14:30:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IY7JPFR.log
[2016/01/02 14:30:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IY7LI8B.log
[2016/01/02 14:30:56 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IY7ZAHU.log
[2016/01/02 16:47:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IY8RJX0
[2016/01/02 14:30:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IY93JNP.log
[2016/01/02 14:31:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IYA6SM2.log
[2016/01/02 14:30:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IYAORH3.log
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IYCQYMH.log
[2016/01/02 14:30:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IYCYJGP.log
[2016/01/02 14:30:35 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IYD9RET.html
[2016/01/03 10:46:18 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IYGD6JL.tex
[2016/01/07 21:49:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IYHFMA8.exe
[2016/01/07 21:49:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IYHNDK4.exe
[2016/01/02 14:30:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IYK8RIY.log
[2016/01/02 14:30:58 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IYKSRY1.log
[2016/01/02 14:30:56 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IYN53KQ.log
[2016/01/07 21:49:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IYNKITN.exe
[2016/01/02 14:18:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IYO0DUZ.lnk
[2016/01/03 11:39:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IYSRU34.tif
[2016/01/03 10:46:12 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IYT0XMG.pdf
[2016/01/02 14:30:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IYUH047.err
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IZ0NR60.log
[2016/01/02 14:30:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IZ0YJB7.log
[2016/01/02 14:31:00 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IZ2EGH3.log
[2016/01/07 21:49:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IZ2H5I1.exe
[2016/01/02 14:31:12 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IZ2S55F.dmp
[2016/01/02 14:30:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IZ4XLRV.db
[2016/01/09 13:18:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IZ57GRA.ini
[2016/01/02 14:30:45 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IZ688PC.log
[2016/01/02 14:30:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IZ6GRE1.log
[2016/01/02 14:31:06 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IZ757QG.log
[2016/01/07 21:49:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IZC1BQO.exe
[2016/01/02 14:30:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IZCBGNE.log
[2016/01/02 14:30:45 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IZCBNQM.log
[2016/01/02 14:30:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IZCYDGP.log
[2016/01/02 14:30:41 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IZCYNB4.log
[2016/01/02 14:30:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IZDMEJB.log
[2016/01/03 11:37:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IZFR82V.gz(busy)
[2016/01/02 14:30:34 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IZFVR0R.docx
[2016/01/07 21:49:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IZFVVI2.exe
[2016/01/02 14:30:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IZGXL2O.log
[2016/01/02 14:30:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IZIBDQG.log
[2016/01/02 14:30:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IZLBTOX.log
[2016/01/02 14:30:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IZLT587.log
[2016/01/02 14:30:34 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IZMOSSY.xlsx
[2016/01/02 16:47:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IZOBD4W
[2016/01/02 14:30:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IZPB8YB.html
[2016/01/02 14:31:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IZQPQQK.log
[2016/01/02 16:50:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IZROYA7.exe3
[2016/01/02 14:31:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IZVW4KE.log
[2016/01/03 09:16:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IZWY5LU.lnk
[2016/01/02 14:30:58 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IZXIT6Q.log
[2016/01/02 14:30:35 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IZZ1A0M.html
[2016/01/02 14:30:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IZZ8ZD8.log
[2016/01/09 13:18:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IZZJXJO.Txt
[2016/01/02 14:31:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IZZT3O1.log
[2016/01/02 14:30:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$IZZYRV3.log
[2015/11/17 15:50:55 | 000,647,860 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R03FSY0.tif
[2015/01/08 22:32:03 | 000,978,077 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R04XHJ0.pdf
[2009/03/26 20:55:28 | 000,052,488 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R05I4M5.pdf
[2009/12/29 20:43:14 | 000,595,208 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R0DLWHL.pdf
[2016/01/03 09:16:18 | 000,000,881 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R0WQ5OF.lnk
[2009/03/26 20:55:20 | 000,050,184 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R11VP35.pdf
[2015/12/28 06:51:33 | 002,870,984 | ---- | M] (ESET) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R128NV8.exe
[2015/11/17 15:50:05 | 000,445,082 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R1Z83P3.tif
[2009/03/26 20:55:12 | 000,062,038 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R22JZAV.pdf
[2015/12/27 23:58:55 | 003,286,400 | ---- | M] (Enigma Software Group USA, LLC.) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R24UC7C.exe
[2014/10/07 13:47:33 | 000,000,144 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R24WLC5.tex
[2015/12/28 23:36:50 | 000,000,009 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R284NYW.aux
[2015/12/10 00:31:10 | 043,179,592 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R2CK5FU.exe
[2015/11/14 13:25:32 | 185,030,080 | ---- | M] (G Data Software AG) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R2DJIPO.exe
[2015/11/17 15:52:35 | 000,005,098 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R2EQHYQ.pdf2txt
[2015/12/10 22:09:27 | 008,878,504 | ---- | M] (Glarysoft Ltd ) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R34VHM9.exe
[2015/07/07 00:12:24 | 000,931,408 | ---- | M] (Google Inc.) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R39BUU1.exe
[2015/10/30 23:34:08 | 105,931,029 | ---- | M] (MacKichan Software, Inc.) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R3EVAU7.exe
[2009/03/26 22:19:10 | 000,611,682 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R3FR6JL.html
[2015/11/17 15:49:14 | 000,003,962 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R3VGZBR.pdf2txt
[2009/03/26 22:19:10 | 000,611,682 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R42B3VZ.html
[2015/12/28 13:43:26 | 030,003,568 | ---- | M] (IObit ) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R46KHKN.exe
[2016/01/02 19:07:02 | 000,001,047 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R4AEWGQ.lnk
[2015/12/09 23:03:50 | 015,262,808 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R4HE9QG.exe
[2015/11/17 15:53:17 | 000,461,962 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R4N69UL.tif
[2015/07/23 01:30:33 | 000,931,408 | ---- | M] (Google Inc.) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R4YJBCA.exe
[2015/12/30 13:41:25 | 140,289,808 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R539ONK.exe
[2015/11/17 15:47:22 | 000,449,748 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R53HY4I.tif
[2015/11/17 15:53:55 | 000,390,050 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R566ZF3.tif
[2015/12/10 11:53:34 | 006,739,632 | ---- | M] (Tonec Inc.) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R56ZHQ6.exe
[2015/11/14 00:16:12 | 066,502,656 | ---- | M] (G Data Software AG) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R57YR9B.exe
[2009/12/28 12:39:14 | 000,109,096 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R5ERFEO.pdf
[2015/11/17 15:54:11 | 000,000,133 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R65UCB0.txt
[2009/03/26 20:55:08 | 000,062,690 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R6BX9V8.pdf
[2015/02/16 22:59:44 | 001,360,079 | ---- | M] ( ) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R6OZ3ID.exe
[2015/12/28 06:25:55 | 015,269,592 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R6UNCTP.exe
[2016/01/03 09:10:49 | 000,001,013 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R6ZPUV0.lnk
[2015/09/25 10:55:29 | 043,810,256 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R7A2PU1.exe
[2015/11/17 15:53:55 | 000,081,872 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R7H0O9Z.tif
[2011/08/09 20:07:38 | 000,041,166 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R7LYOT0.htm
[2009/03/26 20:55:22 | 000,039,538 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R7SPO79.pdf
[2015/11/17 15:50:04 | 000,377,744 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R7THRP7.tif
[2009/04/22 23:35:18 | 000,212,860 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R81CJ12.pdf
[2015/02/13 19:33:40 | 000,000,404 | -HS- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R8F78XV.ini
[2015/12/07 23:20:59 | 170,644,584 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R8FFRFP.exe
[2015/12/09 23:40:49 | 015,261,848 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R8GVB7F.exe
[2015/12/30 13:24:19 | 014,261,952 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R8MIL8O.exe
[2015/11/17 15:48:13 | 000,507,966 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R8O924L.tif
[2015/11/17 15:49:13 | 000,417,546 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R92QWG9.tif
[2015/12/28 14:04:52 | 001,774,656 | ---- | M] (US Tech Support LLC) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R95ENFB.exe
[2015/12/07 23:04:40 | 011,337,112 | ---- | M] (SurfRight B.V.) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R99FRS5.exe
[2009/03/26 22:19:10 | 000,611,682 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R9C6DJ1.html
[2015/11/17 15:53:17 | 000,196,420 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R9CA8OS.tif
[2015/08/18 09:26:50 | 020,382,648 | ---- | M] (SecureMix LLC) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R9FUMQK.exe
[2009/03/26 20:55:12 | 000,062,038 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$R9LLDIX.pdf
[2010/10/21 23:22:28 | 000,159,229 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RA1NGAH.pdf
[2015/12/10 00:30:18 | 018,362,048 | ---- | M] (Adobe Systems Incorporated) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RAP9GTW.exe
[2015/11/17 15:50:56 | 000,009,036 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RAT974U.pdf2txt
[2015/12/28 20:15:56 | 000,383,246 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RB194LX.htm
[2015/05/11 19:14:36 | 000,000,990 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RB43NJJ.bib
[2009/03/26 20:55:14 | 000,065,150 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RBJV86N.pdf
[2009/03/26 20:55:20 | 000,050,184 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RBMQNS3.pdf
[2015/01/08 22:32:08 | 000,978,077 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RBQD9JX.pdf
[2016/01/03 08:37:47 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RBURHAN.aaa
[2014/08/31 13:13:15 | 061,420,472 | ---- | M] (MediaFire) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RBYD412.exe
[2015/12/07 23:29:00 | 204,118,688 | ---- | M] (Emsisoft Ltd. ) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RBZE9WH.exe
[2009/03/26 20:37:28 | 000,000,143 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RC3T27O.tex
[2015/11/17 15:45:58 | 000,318,410 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RCJVZX1.tif
[2015/11/17 15:49:14 | 000,534,546 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RCNM9LS.tif
[2015/11/17 15:51:50 | 000,366,578 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RD8AKX9.tif
[2009/03/26 20:55:08 | 000,063,812 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RD9XU9U.pdf
[2009/03/26 22:19:10 | 000,611,682 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RDOZX7X.html
[2015/11/17 15:51:51 | 000,371,528 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RDYB2LS.tif
[2011/08/09 20:07:30 | 000,047,162 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$REMF9IM.htm
[2015/11/17 15:53:54 | 000,390,662 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$REVYV2M.tif
[2015/02/23 14:51:14 | 000,880,208 | ---- | M] (Google Inc.) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RF22E6Y.exe
[2015/11/19 22:13:42 | 000,000,870 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RFDPQGU.dav
[2009/03/26 20:55:22 | 000,039,538 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RFL9ZPL.pdf
[2009/03/26 20:55:30 | 000,077,118 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RG638GE.pdf
[2009/03/26 20:55:28 | 000,052,488 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RGAES67.pdf
[2015/01/08 22:25:11 | 000,978,077 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RGHSMR3.pdf
[2015/11/17 15:53:18 | 000,003,967 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RGLMW8P.pdf2txt
[2015/12/10 22:14:25 | 004,880,712 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RGRZZM1.exe
[2015/04/21 17:43:04 | 000,880,208 | ---- | M] (Google Inc.) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RH5F43P.exe
[2014/08/31 15:01:53 | 061,420,472 | ---- | M] (MediaFire) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RHBD540.exe
[2009/03/26 20:37:34 | 000,088,403 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RHIP0JE.pdf
[2015/11/17 15:51:51 | 000,002,868 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RHQKUSI.pdf2txt
[2009/03/26 22:19:10 | 000,611,682 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RHQYYAU.html
[2011/08/09 20:07:38 | 000,051,616 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RHT8BLY.htm
[2015/11/17 15:53:16 | 000,378,896 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RI3YND6.tif
[2015/12/10 11:53:06 | 006,739,632 | ---- | M] (Tonec Inc.) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RI4520A.exe
[2015/01/08 22:31:59 | 000,032,342 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RI4MNNS.pdf
[2009/04/13 20:15:42 | 000,041,984 | ---- | M] (Sun Microsystems, Inc.) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RI94K1D.exe
[2011/08/09 20:08:00 | 000,004,424 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RIM8KLY.htm
[2015/11/14 00:16:13 | 072,548,352 | ---- | M] (G Data Software AG) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RJ0PP1G.exe
[2015/12/28 19:12:13 | 000,030,971 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RJU2ERM.bak
[2015/11/02 14:27:25 | 011,464,256 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RJXI878.exe
[2015/08/23 17:09:40 | 009,980,608 | ---- | M] (MEGA Limited) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RK33NQF.exe
[2015/12/30 13:58:10 | 006,003,800 | ---- | M] (LULU Software Limited) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RK9AIW6.exe
[2015/12/28 14:11:31 | 005,457,816 | ---- | M] ((c) PC Cleaners Inc) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RKBYAH7.exe
[2015/11/17 15:48:14 | 000,005,212 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RKGOBZ5.pdf2txt
[2009/03/26 22:19:10 | 000,611,682 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RKLP72R.html
[2015/11/17 15:48:13 | 000,347,340 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RKZ7UP1.tif
[2015/11/17 15:52:34 | 000,480,312 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RL0QCJV.tif
[2009/12/29 20:40:12 | 000,370,921 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RL4N2GP.pdf
[2015/11/17 15:50:56 | 000,447,382 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RLNP8BZ.tif
[2009/03/26 20:55:30 | 000,077,118 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RM3MG3N.pdf
[2014/10/07 13:47:33 | 000,095,563 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RMUNUFL.pdf
[2015/11/17 15:53:56 | 000,003,209 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RMY1RVQ.pdf2txt
[2015/12/28 14:04:30 | 030,003,568 | ---- | M] (IObit ) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RN03D14.exe
[2009/03/26 20:55:08 | 000,063,812 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RN5ZDA8.pdf
[2015/04/12 22:49:36 | 000,880,208 | ---- | M] (Google Inc.) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RNGDLBX.exe
[2015/11/17 15:45:58 | 000,500,642 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RNMBCVM.tif
[2015/11/17 15:50:54 | 000,469,470 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RNNAOE4.tif
[2014/10/07 13:47:29 | 000,083,757 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RNOCIF1.pdf
[2015/11/17 15:50:54 | 000,628,534 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RNOQGA3.tif
[2015/10/12 17:21:49 | 000,929,872 | ---- | M] (Google Inc.) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RNT68AG.exe
[2015/02/21 17:53:04 | 004,515,896 | ---- | M] (Avira Operations & Co. KG) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ROBCDAC.exe
[2015/11/17 15:52:34 | 000,358,222 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ROCVNRT.tif
[2014/10/19 18:26:32 | 000,019,564 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ROCYICH.htm
[2016/01/01 10:52:05 | 000,001,173 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ROD4NTV.lnk
[2016/01/02 22:38:37 | 000,069,388 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ROFLKC4.mc
[2015/11/17 15:47:24 | 000,003,263 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ROGWSKI.pdf2txt
[2015/11/17 15:45:59 | 000,003,311 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ROI06F0.pdf2txt
[2009/03/26 20:55:08 | 000,062,690 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ROSWAT9.pdf
[2015/04/12 16:55:21 | 000,880,208 | ---- | M] (Google Inc.) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$ROVVQD3.exe
[2015/11/17 15:06:40 | 022,908,888 | ---- | M] (Malwarebytes ) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RPDRCTI.exe
[2015/12/10 22:14:00 | 015,262,808 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RPL6PNG.exe
[2015/08/17 22:20:15 | 000,931,408 | ---- | M] (Google Inc.) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RPM7F11.exe
[2016/01/04 16:03:28 | 000,000,557 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RQKNLN8.lnk
[2015/12/10 20:35:18 | 002,362,656 | ---- | M] (DENIAU F.A.A) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RQVWR2H.exe
[2015/12/28 06:43:20 | 002,837,704 | ---- | M] (ESET) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RR6N507.exe
[2015/12/10 00:01:05 | 013,778,600 | ---- | M] (IObit ) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RR9EETO.exe
[2015/08/29 10:34:03 | 001,762,504 | ---- | M] (ESET) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RRY4UMK.exe
[2015/11/17 15:52:33 | 000,422,214 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RS26LLO.tif
[2015/01/29 17:21:49 | 000,595,151 | ---- | M] (GBOOKSDOWNLOADER.COM ) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RS8QFSM.exe
[2014/09/15 21:05:30 | 000,323,696 | ---- | M] (Dropbox, Inc.) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RSDFQOU.exe
[2016/01/02 10:14:38 | 003,286,400 | ---- | M] (Enigma Software Group USA, LLC.) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RSI0S71.exe
[2015/03/29 15:16:17 | 041,206,136 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RT46SNZ.exe
[2015/12/28 11:20:45 | 000,404,271 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RTL4O7S.txt
[2016/01/07 21:49:09 | 000,314,960 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RU1E1IT.Txt
[2011/08/09 20:07:20 | 000,047,162 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RU36YQ3.html
[2015/12/07 23:02:04 | 004,275,464 | ---- | M] (SurfRight B.V.) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RUG1EII.exe
[2015/07/04 02:12:26 | 001,000,042 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RUMTCS1.html
[2015/11/17 15:54:11 | 000,000,334 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RUWD1AW.txt
[2009/03/26 20:37:36 | 000,000,144 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RV0MSRP.tex
[2015/11/17 15:50:05 | 000,293,616 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RV7KFAU.tif
[2015/02/16 23:09:41 | 000,858,432 | ---- | M] (SlimWare Utilities, Inc.) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RVKMQI4.exe
[2015/11/17 15:48:12 | 000,421,572 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RVVXKOJ.tif
[2015/11/17 15:50:06 | 000,004,373 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RW2J3FV.pdf2txt
[2014/11/26 14:20:07 | 027,806,774 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RW84QLI.exe
[2016/01/02 14:44:29 | 015,269,592 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RW86F8D.exe
[2016/01/03 08:41:29 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RXCX0JH.aaa
[2015/01/08 22:25:03 | 000,032,342 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RXEOWI1.pdf
[2009/03/26 20:55:14 | 000,065,150 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RXLWXNC.pdf
[2014/10/07 13:47:29 | 000,000,146 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RYGD6JL.tex
[2015/12/28 14:05:20 | 001,774,656 | ---- | M] (US Tech Support LLC) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RYHFMA8.exe
[2015/07/23 01:49:28 | 000,931,408 | ---- | M] (Google Inc.) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RYHNDK4.exe
[2015/12/28 00:01:18 | 003,286,400 | ---- | M] (Enigma Software Group USA, LLC.) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RYNKITN.exe
[2015/11/17 15:47:23 | 000,356,998 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RYSRU34.tif
[2009/03/26 20:37:44 | 000,110,514 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RYT0XMG.pdf
[2015/12/09 23:50:37 | 002,894,864 | ---- | M] (AVG Technologies) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RZ2H5I1.exe
[2015/08/26 09:51:54 | 000,000,282 | -HS- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RZ57GRA.ini
[2015/12/27 23:58:39 | 006,805,328 | ---- | M] (Piriform Ltd) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RZC1BQO.exe
[2015/12/28 23:36:50 | 000,000,856 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RZFR82V.gz(busy)
[2015/12/28 13:48:49 | 000,720,472 | ---- | M] (Opera Software) -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RZFVVI2.exe
[2015/12/28 19:05:35 | 000,000,739 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RZWY5LU.lnk
[2016/01/07 21:50:29 | 000,066,636 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RZZJXJO.Txt
[2015/04/19 09:15:37 | 000,000,129 | -HS- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\desktop.ini
[18 c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\*.tmp files -> c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\*.tmp -> ]
[2015/04/04 09:18:21 | 000,000,225 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RLQQP05\Cleaner.ini
[2015/04/02 13:43:22 | 000,006,144 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RLQQP05\Cleaner\Cleaner{3f5d990f-8b6d-4943-935e-75d2e1de26d4}.sqlite
[2015/04/02 13:43:11 | 000,000,038 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RLQQP05\Cleaner\install_id.txt
[2015/04/02 13:43:11 | 000,000,038 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RLQQP05\Cleaner\lastsession
[2014/03/13 07:30:18 | 000,009,150 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RLQQP05\Cleaner\data\lang\crashrpt_lang_DE.ini
[2014/03/13 07:30:18 | 000,008,214 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RLQQP05\Cleaner\data\lang\crashrpt_lang_EN.ini
[2014/03/13 07:30:18 | 000,009,490 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RLQQP05\Cleaner\data\lang\crashrpt_lang_ES.ini
[2014/03/13 07:30:18 | 000,009,340 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RLQQP05\Cleaner\data\lang\crashrpt_lang_FR.ini
[2014/03/13 07:30:18 | 000,008,706 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RLQQP05\Cleaner\data\lang\crashrpt_lang_IT.ini
[2013/04/04 14:52:34 | 000,006,218 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RLQQP05\Cleaner\data\lang\crashrpt_lang_JP.ini
[2014/03/13 07:30:18 | 000,008,632 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RLQQP05\Cleaner\data\lang\crashrpt_lang_RU.ini
[2015/09/18 18:41:10 | 000,013,579 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RS885QE\DesktopSearch\config.xml
[2015/12/27 14:28:52 | 000,000,724 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RX9QX5U\0D8C294C2168546A15A8A09794B76AB4FD074036.NDF
[2015/12/27 14:28:52 | 050,772,320 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RX9QX5U\0D8C294C2168546A15A8A09794B76AB4FD074036.NQF
[2015/12/27 14:29:21 | 000,000,652 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RX9QX5U\152315E6ABB6A8B27901D5932B3C2058F48DD3B7.NDF
[2015/12/27 14:29:21 | 000,145,326 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RX9QX5U\152315E6ABB6A8B27901D5932B3C2058F48DD3B7.NQF
[2015/12/26 23:52:38 | 000,000,732 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RX9QX5U\19D8254E651FC6F42B538148A2EDC09AA3F5BCCE.NDF
[2015/12/26 23:52:38 | 003,320,832 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RX9QX5U\19D8254E651FC6F42B538148A2EDC09AA3F5BCCE.NQF
[2015/12/27 14:28:58 | 000,000,756 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RX9QX5U\30FBE6C07B351DF76F5D9D1EDDE2275381648753.NDF
[2015/12/27 14:28:58 | 008,052,304 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RX9QX5U\30FBE6C07B351DF76F5D9D1EDDE2275381648753.NQF
[2015/12/26 23:52:35 | 000,000,710 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RX9QX5U\365171250C561609F550FE716E3D21C70DE7FE38.NDF
[2015/12/26 23:52:35 | 001,424,896 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RX9QX5U\365171250C561609F550FE716E3D21C70DE7FE38.NQF
[2015/12/27 14:28:55 | 000,000,592 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RX9QX5U\3BCF4F5C3E18D810CE0FF683C9AF86552BA00C38.NDF
[2015/12/27 14:28:55 | 001,360,079 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RX9QX5U\3BCF4F5C3E18D810CE0FF683C9AF86552BA00C38.NQF
[2015/12/27 14:29:16 | 000,000,704 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RX9QX5U\42713D2190539F5A6B17671380831113DA094240.NDF
[2015/12/27 14:29:16 | 000,401,784 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RX9QX5U\42713D2190539F5A6B17671380831113DA094240.NQF
[2015/12/27 14:29:20 | 000,000,596 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RX9QX5U\4C4377FF9272D448D9CB0ABB30FEA849B94F407B.NDF
[2015/12/27 14:29:20 | 006,140,760 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RX9QX5U\4C4377FF9272D448D9CB0ABB30FEA849B94F407B.NQF
[2015/12/27 14:29:25 | 000,000,728 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RX9QX5U\596E842DDD9A4FA4FAA13556B0F661630712491C.NDF
[2015/12/27 14:29:25 | 036,465,037 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RX9QX5U\596E842DDD9A4FA4FAA13556B0F661630712491C.NQF
[2015/12/27 14:29:18 | 000,000,692 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RX9QX5U\68B8794118B37767F9A6459BA764D35DB1E18538.NDF
[2015/12/27 14:29:18 | 000,401,792 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RX9QX5U\68B8794118B37767F9A6459BA764D35DB1E18538.NQF
[2015/12/27 14:29:14 | 000,000,600 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RX9QX5U\73C98F1721958026BEB496BFCF15FB9A28B3B7A0.NDF
[2015/12/27 14:29:14 | 000,402,911 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RX9QX5U\73C98F1721958026BEB496BFCF15FB9A28B3B7A0.NQF
[2015/12/28 07:06:44 | 000,000,628 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RX9QX5U\90150F15B23C203458F69D3E790E96272B3A6E29.NDF
[2015/12/26 23:42:56 | 002,605,056 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RX9QX5U\90150F15B23C203458F69D3E790E96272B3A6E29.NQF
[2015/12/27 14:29:13 | 000,000,664 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RX9QX5U\A0891BBD967ECCE9AE8DB8B3FE09C749555A045D.NDF
[2015/12/27 14:29:13 | 029,096,360 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RX9QX5U\A0891BBD967ECCE9AE8DB8B3FE09C749555A045D.NQF
[2015/12/27 13:55:09 | 000,000,326 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RX9QX5U\A6CBA516A442C648582B81F930752534FA45F0E9.NDF
[2015/12/27 13:55:09 | 000,000,908 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RX9QX5U\A6CBA516A442C648582B81F930752534FA45F0E9.NQF
[2015/12/27 14:29:13 | 000,000,624 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RX9QX5U\A898DFFB006B7C9A65D1E2B91DB0703F1F9210BC.NDF
[2015/12/27 14:29:13 | 003,176,136 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RX9QX5U\A898DFFB006B7C9A65D1E2B91DB0703F1F9210BC.NQF
[2015/12/27 14:29:14 | 000,000,600 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RX9QX5U\E52066236563D51EA30A42BF905692FB7055053B.NDF
[2015/12/27 14:29:14 | 000,246,784 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RX9QX5U\E52066236563D51EA30A42BF905692FB7055053B.NQF
[2015/12/27 14:29:25 | 000,000,012 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2971678698-329338944-1984170584-1000\$RX9QX5U\INFO.NQI
[2009/07/14 05:08:49 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2009/07/14 05:08:49 | 000,032,482 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2015/02/23 14:51:30 | 000,001,066 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2015/02/23 14:51:31 | 000,001,070 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
[2015/03/29 15:14:23 | 000,001,002 | ---- | C] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
[2015/12/28 13:54:40 | 000,000,434 | ---- | C] () -- C:\Windows\Tasks\Opera scheduled Autoupdate 1451310872.job
[2016/01/02 19:19:42 | 000,000,508 | ---- | C] () -- C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 6c0a92ea-c0e8-41b6-8d0f-81ef3b3bc13a.job
[2016/01/02 19:19:44 | 000,000,508 | ---- | C] () -- C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 258b8937-8da4-47a8-8057-e091bd9dcf5f.job

[color=#E56717]========== Files - Unicode (All) ==========[/color]
[2015/02/20 18:16:41 | 000,005,670 | ---- | M] ()(C:\?????_??_?????_?????.jpg) -- C:\E7HJ)_9F_317'F_'D+/J.jpg
[2015/02/20 18:16:37 | 000,005,670 | ---- | C] ()(C:\?????_??_?????_?????.jpg) -- C:\E7HJ)_9F_317'F_'D+/J.jpg
[2014/12/16 13:16:36 | 000,019,226 | ---- | M] ()(C:\Users\asus\Documents\???? ??????.docx) -- C:\Users\asus\Documents\'DE/ H'D,21.docx
[2014/12/16 13:16:36 | 000,019,226 | ---- | C] ()(C:\Users\asus\Documents\???? ??????.docx) -- C:\Users\asus\Documents\'DE/ H'D,21.docx
[2014/12/15 19:50:06 | 000,294,086 | ---- | M] ()(C:\Users\asus\Documents\?????? ??????.docx) -- C:\Users\asus\Documents\'DE:1( 'DB/JE.docx
[2014/12/15 19:50:05 | 000,294,086 | ---- | C] ()(C:\Users\asus\Documents\?????? ??????.docx) -- C:\Users\asus\Documents\'DE:1( 'DB/JE.docx

[color=#E56717]========== Alternate Data Streams ==========[/color]

@Alternate Data Stream - 146 bytes -> C:\ProgramData\TEMP:07BF512B

< End of report >

Publicité


Signaler le contenu de ce document

Publicité