cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

ÿþOTL logfile created on: 15/07/2016 20:22:47 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Ali\Downloads
Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17959)
Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy

1,97 Gb Total Physical Memory | 0,96 Gb Available Physical Memory | 48,81% Memory free
3,93 Gb Paging File | 2,95 Gb Available in Paging File | 75,06% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 465,66 Gb Total Space | 337,71 Gb Free Space | 72,52% Space Free | Partition Type: NTFS

Computer Name: ALI-PC | User Name: Ali | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - [2016/07/14 23:22:25 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Ali\Downloads\OTL.exe
PRC - [2015/04/30 01:04:12 | 000,022,216 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft Security Client\MsMpEng.exe
PRC - [2011/02/25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe


[color=#E56717]========== Modules (No Company Name) ==========[/color]


[color=#E56717]========== Services (SafeList) ==========[/color]

SRV - File not found [On_Demand | Stopped] -- %windir%\system32\seclogon.dll -- (seclogon)
SRV - File not found [On_Demand | Stopped] -- %windir%\system32\qwave.dll -- (QWAVE)
SRV - [2016/07/12 02:18:57 | 000,197,128 | ---- | M] (AVAST Software) [Auto | Stopped] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2016/07/09 03:06:18 | 001,450,064 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2016/06/02 16:29:49 | 000,467,016 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Stopped] -- C:\Program Files\Avira\Antivirus\sched.exe -- (AntiVirSchedulerService)
SRV - [2016/06/02 16:28:51 | 001,435,704 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Stopped] -- C:\Program Files\Avira\Antivirus\avwebg7.exe -- (AntiVirWebService)
SRV - [2016/06/02 16:28:34 | 000,970,656 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Stopped] -- C:\Program Files\Avira\Antivirus\avmailc7.exe -- (AntiVirMailService)
SRV - [2016/06/02 16:28:30 | 000,467,016 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Stopped] -- C:\Program Files\Avira\Antivirus\avguard.exe -- (AntiVirService)
SRV - [2016/05/04 17:10:58 | 000,276,424 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Stopped] -- C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe -- (Avira.ServiceHost)
SRV - [2015/08/18 16:26:47 | 000,269,000 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2015/08/15 11:39:23 | 000,149,160 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2015/08/07 03:50:34 | 000,151,832 | ---- | M] (Yahoo Inc.) [Auto | Stopped] -- C:\Program Files\Yahoo!\yset\{D195348A-71EA-2341-BEC7-1C8D39C0CCEC}\YSearchUtilSVC.exe -- (YSearchUtilSvc)
SRV - [2015/07/16 21:39:29 | 000,102,912 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV - [2015/06/05 17:54:42 | 000,129,168 | ---- | M] (Razer Inc.) [Auto | Stopped] -- C:\Program Files\Razer\Razer Cortex\RzKLService.exe -- (RzKLService)
SRV - [2015/05/29 02:13:40 | 000,187,048 | ---- | M] () [Auto | Stopped] -- C:\Program Files\Razer\Razer Services\GSS\GameScannerService.exe -- (Razer Game Scanner Service)
SRV - [2015/05/25 20:01:45 | 000,853,504 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\System32\diagtrack.dll -- (DiagTrack)
SRV - [2015/04/30 01:04:12 | 000,284,504 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- c:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
SRV - [2015/04/30 01:04:12 | 000,022,216 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV - [2014/09/12 11:43:06 | 000,064,704 | ---- | M] (Adobe Systems Incorporated) [Auto | Stopped] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2014/01/22 15:52:40 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2013/05/27 06:57:27 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2009/07/14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV - File not found [Kernel | System | Stopped] -- C:\Windows\system32\drivers\likrarlq.sys -- (likrarlq)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Ali\AppData\Local\Temp\cpuz134\cpuz134_x32.sys -- (cpuz134)
DRV - [2016/07/13 14:22:19 | 000,438,296 | ---- | M] (AVAST Software) [File_System | System | Stopped] -- C:\Windows\System32\drivers\aswsp.sys -- (aswSP)
DRV - [2016/07/12 02:19:48 | 000,118,152 | ---- | M] (AVAST Software) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\aswStm.sys -- (aswStm)
DRV - [2016/07/12 02:19:47 | 000,222,056 | ---- | M] (AVAST Software) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\aswVmm.sys -- (aswVmm)
DRV - [2016/07/12 02:19:46 | 000,060,424 | ---- | M] (AVAST Software) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\aswRvrt.sys -- (aswRvrt)
DRV - [2016/07/12 02:19:45 | 000,091,680 | ---- | M] (AVAST Software) [File_System | Auto | Stopped] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2016/07/12 02:19:45 | 000,091,232 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr2.sys -- (aswRdr)
DRV - [2016/07/12 02:19:45 | 000,034,008 | ---- | M] (AVAST Software) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\aswHwid.sys -- (aswHwid)
DRV - [2016/07/12 02:18:18 | 000,816,304 | ---- | M] (AVAST Software) [File_System | System | Stopped] -- C:\Windows\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2016/07/12 02:18:17 | 000,035,096 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\aswKbd.sys -- (aswKbd)
DRV - [2016/06/02 16:30:01 | 000,137,240 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb)
DRV - [2016/06/02 16:30:01 | 000,060,088 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\avnetflt.sys -- (avnetflt)
DRV - [2016/03/17 16:11:57 | 000,109,016 | ---- | M] (Avira Operations GmbH & Co. KG) [File_System | Auto | Stopped] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2015/06/19 09:12:24 | 000,031,848 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2015/06/19 09:11:45 | 000,037,896 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\avkmgr.sys -- (avkmgr)
DRV - [2015/03/04 19:34:52 | 000,095,408 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\NisDrvWFP.sys -- (NisDrv)
DRV - [2014/11/07 01:17:54 | 000,020,416 | ---- | M] (Razer, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\rzpmgrk.sys -- (rzpmgrk)
DRV - [2014/06/21 20:17:19 | 000,038,984 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\aswTap.sys -- (aswTap)
DRV - [2013/10/02 02:42:31 | 000,049,152 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2012/08/23 16:44:32 | 000,014,848 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV - [2010/11/20 11:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2009/07/14 00:02:47 | 000,050,688 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\L1C62x86.sys -- (L1C)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = https://fr.yahoo.com?fr=hp-avast&type=avastbcl
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://fr.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = about:newtab
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=MSSE
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://search.certified-toolbar.com?si=82443&tid=24086&ver=6.4&ts=1403906400000.000000&tguid=82443-24086-1403908196248-F947ED315043589EACB1E7A6EB5D4653&st=chrome&q=
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Search Bar = http://search.certified-toolbar.com?si=82443&tid=24086&ver=6.4&ts=1403906400000.000000&tguid=82443-24086-1403908196248-F947ED315043589EACB1E7A6EB5D4653&st=chrome&q=
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = http://search.certified-toolbar.com?si=82443&tid=24086&ver=6.4&ts=1403906400000.000000&tguid=82443-24086-1403908196248-F947ED315043589EACB1E7A6EB5D4653&st=chrome&q=
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Default_Page_URL = about:newtab
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = about:newtab
IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKLM\..\SearchScopes\{632F07F3-19A1-4d16-A23F-E6CE9486BAB5}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
IE - HKLM\..\SearchScopes\{9CB96984-43C3-4D44-90EF-01466EFCF7BB}: "URL" = https://fr.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.certified-toolbar.com?si=82443&st=bs&tid=24086&ver=6.4&ts=1403906400000.000000&tguid=82443-24086-1403908196248-F947ED315043589EACB1E7A6EB5D4653&q={searchTerms}
IE - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://feed.safefinder.com/?p=mKO_AwFzXIpYRak5VLd2-qQdkN5729vVFWxou9hox1BK-uv0lX5MhX6k7S1skZ72-fAbPuxaYay-NOrOX8v747mWTYT8TJn4LJksCOsgVTKTGbVzFEVcrZQeGNmfcfq_0GMgCcRysRvPbu_5MPSjB6Y71IXyB2M90IIf-XkTaWk5gBoBsZscs5GVmBTc8rkOFGfeXzVJdQ,,&q={searchTerms}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://feed.safefinder.com/?p=mKO_AwFzXIpYRak5VLd2-qQdkN5729vVFWxou9hox1BK-uv0lX5MhX6k7S1skZ72-fAbPuxaYay-NOrOX8v747mWTYT8TJn4LJksCOsgVTKTGbVzFEVcrZQeGNmfcfq_0GMgCcRysRvPbu_5MPSjB6Y71IXyB2M90IIf-XkTaWk5gBoBsZscs5GVmBTc8rkOFGfeXzVJdQ,,&q={searchTerms}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = about:newtab
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/?fr=yset_ie_syc_oracle&type=orcl_hpset
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://fr.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = fr-FR
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 1B 94 13 77 F2 1C CF 01 [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.safefinder.com/?p=mKO_AwFzXIpYRak5VLd2-qQdkN5729vVFWxou9hox1BK-uv0lX5MhX6k7S1skZ72-fAbPuxaYay-NOrOX8v747mWTYT8TJn4LJksCOsgVTKTGbVzFEVcrZQeGNmfcfq_0GMgCcRysRvPbu_5MPSjB6Y71IXyB2M90IIf-XkTaWk5gBoBsZscs5GVmBTc8rkOFGfeXzVJdQ,,&q={searchTerms}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Search Bar = http://search.certified-toolbar.com?si=82443&tid=24086&ver=6.4&ts=1403906400000.000000&tguid=82443-24086-1403908196248-F947ED315043589EACB1E7A6EB5D4653&st=chrome&q=
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = http://search.certified-toolbar.com?si=82443&tid=24086&ver=6.4&ts=1403906400000.000000&tguid=82443-24086-1403908196248-F947ED315043589EACB1E7A6EB5D4653&st=chrome&q=
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.safefinder.com/?p=mKO_AwFzXIpYRak5VLd2-qQdkN5729vVFWxou9hox1BK-uv0lX5MhX6k7S1skZ72-fAbPuxaYay-NOrOX8v747mWTYT8TJn4LJksCOsgVTKTGbVzFEVcrZQeGNmfcfq_0GMgCcRysRvPbu_5MPSjB6Y71IXyB2M90IIf-XkTaWk5gBoBsZscs5GVmBTc8rkOFGfeXzVJdQ,,&q={searchTerms}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Start Default_Page_URL = about:newtab
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = about:newtab
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02
IE - HKCU\..\SearchScopes\{2C7936FE-F136-4CE9-9936-D56F8E66EF0C}: "URL" = https://fr.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
IE - HKCU\..\SearchScopes\{632F07F3-19A1-4d16-A23F-E6CE9486BAB5}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKCU\..\SearchScopes\{9CB96984-43C3-4D44-90EF-01466EFCF7BB}: "URL" = https://fr.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
IE - HKCU\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.certified-toolbar.com?si=82443&st=bs&tid=24086&ver=6.4&ts=1403906400000.000000&tguid=82443-24086-1403908196248-F947ED315043589EACB1E7A6EB5D4653&q={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..browser.search.countryCode: "FR"
FF - prefs.js..browser.search.hiddenOneOffs: "default-search.net,DuckDuckGo,eBay France,Portail Lexical - CNRTL,StartWeb,webssearches"
FF - prefs.js..browser.search.isUS: false
FF - prefs.js..browser.search.region: "FR"
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:40.0.2
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_18_0_0_232.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw_1210150.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.51.2: C:\Program Files\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.51.2: C:\Program Files\Java\jre1.8.0_51\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10: C:\Program Files\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll File not found
FF - HKLM\Software\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4: C:\Program Files\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.1: C:\Program Files\VideoLAN\VLC\npvlc.dll File not found
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.3: C:\Program Files\VideoLAN\VLC\npvlc.dll File not found
FF - HKLM\Software\MozillaPlugins\@www.dlmanager.net/omaha/tools//Software Update;version=8: C:\Program Files\Software\Update\1.2.201.0\npSoftwareOneClick8.dll (Boxore OU.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Ali\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2016/07/12 02:20:15 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\bubbledock@nosibay.com: C:\Program Files\Nosibay\Bubble Dock\extensions\FFSurfMatch
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\sp@avast.com: C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016/07/12 02:20:06 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 40.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 40.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins

[2014/05/01 14:22:15 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Ali\AppData\Roaming\mozilla\Extensions
[2014/05/02 07:21:50 | 000,000,000 | ---D | M] (Monitor) -- C:\Users\Ali\AppData\Roaming\mozilla\Extensions\{12477a84-2e51-4281-acac-68f2ca244f23}
[2015/08/20 06:17:26 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Ali\AppData\Roaming\mozilla\Firefox\Profiles\e5imzq21.default-1428178325222\extensions
[2015/07/11 21:27:55 | 000,000,000 | ---D | M] (cacaoweb) -- C:\Users\Ali\AppData\Roaming\mozilla\Firefox\Profiles\e5imzq21.default-1428178325222\extensions\cacaoweb@cacaoweb.org
[2015/08/02 15:06:19 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Ali\AppData\Roaming\mozilla\Firefox\Profiles\vNGCCkTh.default\extensions
[2015/07/18 18:43:59 | 000,000,000 | ---D | M] (Avira Browser Safety) -- C:\Users\Ali\AppData\Roaming\mozilla\Firefox\Profiles\vNGCCkTh.default\extensions\abs@avira.com
[2015/08/02 15:06:19 | 000,000,000 | ---D | M] (cacaoweb) -- C:\Users\Ali\AppData\Roaming\mozilla\Firefox\Profiles\vNGCCkTh.default\extensions\cacaoweb@cacaoweb.org
[2015/12/09 17:59:02 | 000,510,189 | ---- | M] () (No name found) -- C:\Users\Ali\AppData\Roaming\mozilla\firefox\profiles\e5imzq21.default-1428178325222\extensions\jid1-G80Ec8LLEbK5fQ@jetpack.xpi
[2015/12/29 14:59:27 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2015/12/29 14:59:27 | 000,000,000 | ---D | M] () -- C:\Program Files\Mozilla Firefox\extensions\gethighlightly@gethighlightly.com
[2016/01/02 04:50:57 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2016/01/02 04:53:06 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

[color=#E56717]========== Chrome ==========[/color]

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: https://www.google.com/?trackid=sp-006
CHR - Extension: No name found = C:\Users\Ali\AppData\Local\Google\Chrome\User Data\Default\Extensions\afjgbiefmcjnmcahimhppogpbefeolac\1.0.1_0\
CHR - Extension: Web = C:\Users\Ali\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck\9.0.2022.120_0\
CHR - Extension: Web = C:\Users\Ali\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbiodiodggnlakggeeckkjccjhhjndnb\235\
CHR - Extension: Avast Online Security = C:\Users\Ali\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.0.2502.149_0\
CHR - Extension: Avast Online Security = C:\Users\Ali\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.187_0\
CHR - Extension: Avast Online Security = C:\Users\Ali\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\
CHR - Extension: Avast Online Security = C:\Users\Ali\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\9.0.2021.112_0\

O1 HOSTS File: ([2009/06/10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (no name) - {0d687747-ed29-4f98-ae2d-ea537ec4ea34} - No CLSID value found.
O2 - BHO: (no name) - {11111111-1111-1111-1111-110511421146} - No CLSID value found.
O2 - BHO: (no name) - {11111111-1111-1111-1111-110511421153} - No CLSID value found.
O2 - BHO: (no name) - {11111111-1111-1111-1111-110511951164} - No CLSID value found.
O2 - BHO: (no name) - {23AF19F7-1D5B-442c-B14C-3D1081953C94} - No CLSID value found.
O2 - BHO: (no name) - {31492082-96DE-B66D-759B-5BE8C452452C} - No CLSID value found.
O2 - BHO: (no name) - {44ed99e2-16a6-4b89-80d6-5b21cf42e78b} - No CLSID value found.
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (no name) - {a8b71ba7-8a3a-46b8-b803-b4244d1ea31f} - No CLSID value found.
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (no name) - {F1C81E40-2485-4DB6-8C9D-04BD596B281E} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {0d687747-ed29-4f98-ae2d-ea537ec4ea34} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {828DC97A-2277-4E10-92A9-4907FA0922A9} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\Antivirus\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [Avira SystrayStartTrigger] C:\Program Files\Avira\Launcher\Avira.SystrayStartTrigger.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [RazerCortex] C:\Program Files\Razer\Razer Cortex\RazerCortex.exe (Razer Inc.)
O4 - HKLM..\Run: [Speedup_umh] C:\Program Files\Avira\AviraSpeedup\Speedup_umh.exe (Avira Operations GmbH & Co. KG)
O4 - HKCU..\Run: [cacaoweb] C:\Users\Ali\AppData\Roaming\cacaoweb\cacaoweb.exe ()
O4 - HKCU..\Run: [Steam] C:\Program Files\Steam\steam.exe (Valve Corporation)
O4 - HKLM..\RunOnce: [20160512] C:\Program Files\AVAST Software\Avast\0df9066a-d2ea-4173-bce7-91807b80e496\AvastEmUpdate.exe (AVAST Software)
O4 - HKLM..\RunOnce: [20160527] C:\Program Files\AVAST Software\Avast\aswRunDll.exe (AVAST Software)
O4 - HKCU..\RunOnce: [Application Restart #1] C:\Users\Ali\AppData\Local\Pokki\Engine\pokki.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-phishing-detection --enable-file-cookies --disable-sync --disable-breakpad --disable-bundled-ppapi-flash --disable-sync-tabs --disable-speech-input --disable-custom-jumplist --process-per-tab --debug-devtools-frontend="C:\Users\Ali\AppData\Local\Pokki\Engine\inspector" --no-first-run --lang=en-US --disable-component-update --disable-prompt-on-repost --no-startup-window --disable-translate --disable-logging --disable-desktop-notifications --disable-gpu-process-prelaunch --flag-switches-begin --flag-switches-end --restore-last-session File not found
O4 - HKCU..\RunOnce: [Application Restart #2] C:\Users\Ali\AppData\Local\Pokki\Engine\pokki.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-phishing-detection --enable-file-cookies --disable-sync --disable-breakpad --disable-bundled-ppapi-flash --disable-sync-tabs --disable-speech-input --disable-custom-jumplist --process-per-tab --debug-devtools-frontend="C:\Users\Ali\AppData\Local\Pokki\Engine\inspector" --no-first-run --lang=en-US --disable-component-update --disable-prompt-on-repost --no-startup-window --disable-translate --disable-logging --disable-desktop-notifications --disable-gpu-process-prelaunch --flag-switches-begin --flag-switches-end --restore-last-session File not found
O4 - HKCU..\RunOnce: [Application Restart #3] C:\Users\Ali\AppData\Local\Pokki\Engine\pokki.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-phishing-detection --enable-file-cookies --disable-sync --disable-breakpad --disable-bundled-ppapi-flash --disable-sync-tabs --disable-speech-input --disable-custom-jumplist --process-per-tab --debug-devtools-frontend="C:\Users\Ali\AppData\Local\Pokki\Engine\inspector" --no-first-run --lang=en-US --disable-component-update --disable-prompt-on-repost --no-startup-window --disable-translate --disable-logging --disable-desktop-notifications --disable-gpu-process-prelaunch --flag-switches-begin --flag-switches-end --restore-last-session File not found
O4 - Startup: C:\Users\Ali\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FacebookGamesNotifier.exe.lnk = C:\Users\Ali\AppData\Local\Facebook\Games\FacebookGamesNotifier.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\SearchScopes present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\System32\ValueApps.dll (Conduit)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\System32\ValueApps.dll (Conduit)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\System32\ValueApps.dll (Conduit)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\System32\ValueApps.dll (Conduit)
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Windows\System32\ValueApps.dll (Conduit)
O13 - gopher Prefix: missing
O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{AAEEA26E-A8F6-4165-B97B-7767CF53099A}: DhcpNameServer = 192.168.1.254
O20 - HKLM Winlogon: Shell - (explorer.exe) - File not found
O20 - HKLM Winlogon: UserInit - (C:\Windows\System32\Userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found
NetSvcs: seclogon - %windir%\system32\seclogon.dll File not found

MsConfig - StartUpFolder: C:^Users^Ali^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Enregistrement de FIFA 10.lnk - - File not found
MsConfig - StartUpFolder: C:^Users^Ali^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^IMVU.lnk - - File not found
MsConfig - StartUpFolder: C:^Users^Ali^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MyPC Backup.lnk - - File not found
MsConfig - StartUpReg: [b]Bubble Dock[/b] - hkey= - key= - File not found
MsConfig - StartUpReg: [b]EA Core[/b] - hkey= - key= - File not found
MsConfig - StartUpReg: [b]Gameo[/b] - hkey= - key= - File not found
MsConfig - StartUpReg: [b]Optimizer Pro[/b] - hkey= - key= - File not found
MsConfig - StartUpReg: [b]PC Speed Maximizer[/b] - hkey= - key= - File not found
MsConfig - StartUpReg: [b]Pokki[/b] - hkey= - key= - File not found
MsConfig - StartUpReg: [b]Updater[/b] - hkey= - key= - File not found
MsConfig - State: "bootini" - 2
MsConfig - State: "startup" - 2
MsConfig - State: "services" - 0

SafeBootMin: AppMgmt - Service
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: MsMpSvc - c:\Program Files\Microsoft Security Client\MsMpEng.exe (Microsoft Corporation)
SafeBootMin: NTDS - File not found
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vmms - Service
SafeBootMin: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet: AppMgmt - Service
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: MsMpSvc - c:\Program Files\Microsoft Security Client\MsMpEng.exe (Microsoft Corporation)
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: NTDS - File not found
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vmms - Service
SafeBootNet: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Reg Error: Value error.
ActiveX: {3911CF56-9EF2-39BA-846A-C27BD3CD0685} - .NET Framework
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} -
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} -
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} -
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} -
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} -
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Reg Error: Value error.
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} -
ActiveX: {7D715857-A67C-4C2F-A929-038448584D63} - C:\Windows\System32\ie4uinit.exe -DisableSSL3
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} -
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} -
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} -
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} -
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} -
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} -

Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.VP60 - C:\Windows\System32\vp6vfw.dll (On2.com)
Drivers32: vidc.VP61 - C:\Windows\System32\vp6vfw.dll (On2.com)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2016/07/15 20:19:30 | 000,000,000 | ---D | C] -- C:\Users\Ali\WPDNSE
[2016/07/15 13:54:01 | 000,000,000 | ---D | C] -- C:\Users\Ali\3228_20920
[2016/07/14 22:38:56 | 000,000,000 | ---D | C] -- C:\Users\Ali\1076_26718
[2016/07/14 22:37:07 | 000,000,000 | ---D | C] -- C:\Program Files\ROUTES
[2016/07/14 09:46:40 | 000,000,000 | ---D | C] -- C:\Users\Ali\5556_20275
[2016/07/13 08:54:37 | 000,000,000 | ---D | C] -- C:\Users\Ali\3736_28420
[2016/07/12 22:28:59 | 000,000,000 | ---D | C] -- C:\Users\Ali\5388_1082
[2016/07/12 09:42:16 | 000,000,000 | ---D | C] -- C:\Users\Ali\3568_18127
[2016/07/12 02:21:37 | 000,035,096 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswKbd.sys
[2016/07/12 02:20:19 | 000,921,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\ucrtbase.dll
[2016/07/12 02:20:19 | 000,319,248 | ---- | C] (AVAST Software) -- C:\Windows\System32\aswBoot.exe
[2016/07/12 02:19:11 | 000,053,208 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
[2016/07/11 10:56:26 | 000,000,000 | ---D | C] -- C:\Users\Ali\3728_27174
[2016/07/10 23:20:28 | 000,000,000 | ---D | C] -- C:\Users\Ali\160_28970
[2016/07/10 09:04:47 | 000,000,000 | ---D | C] -- C:\Users\Ali\2532_32555
[2016/07/09 22:25:16 | 000,000,000 | ---D | C] -- C:\Users\Ali\208_13322
[2016/07/09 22:21:34 | 000,000,000 | ---D | C] -- C:\Users\Ali\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook
[2016/07/09 09:28:30 | 000,000,000 | ---D | C] -- C:\Users\Ali\3836_2010
[2016/07/09 00:30:02 | 000,000,000 | ---D | C] -- C:\Users\Ali\4748_25135
[2016/07/08 00:46:01 | 000,000,000 | ---D | C] -- C:\Users\Ali\980_28113
[2016/07/07 16:27:46 | 000,000,000 | ---D | C] -- C:\Users\Ali\4880_1968
[2016/07/06 23:10:38 | 000,000,000 | ---D | C] -- C:\Users\Ali\2632_7275
[2016/07/03 01:30:22 | 000,000,000 | ---D | C] -- C:\Users\Ali\4520_30808
[2016/07/02 13:04:36 | 000,000,000 | ---D | C] -- C:\Users\Ali\3364_12011
[2016/07/01 21:19:13 | 000,000,000 | ---D | C] -- C:\Users\Ali\3128_25365
[2016/07/01 11:01:49 | 000,000,000 | ---D | C] -- C:\Users\Ali\4928_16564
[2016/07/01 00:28:45 | 000,000,000 | ---D | C] -- C:\Users\Ali\4372_23122
[2016/06/30 18:54:47 | 000,000,000 | ---D | C] -- C:\Users\Ali\2448_29572
[2016/06/30 02:11:44 | 000,000,000 | ---D | C] -- C:\Users\Ali\5084_9411
[2016/06/29 10:36:17 | 000,000,000 | ---D | C] -- C:\Users\Ali\2692_11777
[2016/06/28 21:13:44 | 000,000,000 | ---D | C] -- C:\Users\Ali\3480_2221
[2016/06/28 11:27:44 | 000,000,000 | ---D | C] -- C:\Users\Ali\3940_500
[2016/06/28 09:39:46 | 000,000,000 | ---D | C] -- C:\Users\Ali\3116_20960
[2016/06/27 17:59:03 | 000,000,000 | ---D | C] -- C:\Users\Ali\4228_10262
[2016/06/27 01:50:54 | 000,000,000 | ---D | C] -- C:\Users\Ali\3820_6070
[2016/06/26 07:25:32 | 000,000,000 | ---D | C] -- C:\Users\Ali\5580_28667
[2016/06/25 13:17:09 | 000,000,000 | ---D | C] -- C:\Users\Ali\3152_29887
[2016/06/24 21:26:19 | 000,000,000 | ---D | C] -- C:\Users\Ali\5904_32274
[2016/06/24 14:52:31 | 000,000,000 | ---D | C] -- C:\Users\Ali\3784_19598
[2016/06/24 01:15:49 | 000,000,000 | ---D | C] -- C:\Users\Ali\2988_21548
[2016/06/22 20:46:01 | 000,000,000 | ---D | C] -- C:\Users\Ali\2508_8503
[2016/06/22 10:42:39 | 000,000,000 | ---D | C] -- C:\Users\Ali\3036_6012
[2016/06/21 22:14:30 | 000,000,000 | ---D | C] -- C:\Users\Ali\4280_3917
[2016/06/21 15:59:28 | 000,000,000 | ---D | C] -- C:\Users\Ali\4280_30655
[2016/06/20 15:14:59 | 000,000,000 | ---D | C] -- C:\Users\Ali\3260_32105
[2016/06/20 02:14:41 | 000,000,000 | ---D | C] -- C:\Users\Ali\4704_24459
[2016/06/19 13:54:00 | 000,000,000 | ---D | C] -- C:\Users\Ali\1688_9812
[2016/06/19 01:05:23 | 000,000,000 | ---D | C] -- C:\Users\Ali\4512_14303
[2016/06/18 17:19:24 | 000,000,000 | ---D | C] -- C:\Users\Ali\4784_16511
[2016/06/17 15:18:10 | 000,000,000 | ---D | C] -- C:\Users\Ali\4740_16690
[2016/06/16 00:02:47 | 000,000,000 | ---D | C] -- C:\Users\Ali\4852_32726
[2016/05/11 17:33:40 | 001,913,112 | ---- | C] (Microsoft Corporation) -- C:\Users\Ali\mpam-486e07f6.exe
[9 C:\Windows\System32\drivers\*.tmp files -> C:\Windows\System32\drivers\*.tmp -> ]
[287 C:\Users\Ali\*.tmp files -> C:\Users\Ali\*.tmp -> ]
[1 C:\Users\Ali\AppData\Local\*.tmp files -> C:\Users\Ali\AppData\Local\*.tmp -> ]

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2016/07/15 20:24:40 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2016/07/15 20:23:00 | 000,000,000 | -H-- | M] () -- C:\Users\Ali\etilqs_pdnZevNbkE6pB1i
[2016/07/15 20:18:32 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2016/07/15 20:18:28 | 1583,276,032 | -HS- | M] () -- C:\hiberfil.sys
[2016/07/15 20:17:07 | 000,564,016 | ---- | M] () -- C:\Users\Ali\Desktop\cacaoweb.exe
[2016/07/15 19:01:12 | 000,000,004 | -H-- | M] () -- C:\Users\Ali\etilqs_PCK6j5MtxkGCJS9
[2016/07/15 18:56:21 | 000,016,112 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2016/07/15 18:56:21 | 000,016,112 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2016/07/15 17:32:46 | 000,004,104 | -H-- | M] () -- C:\Users\Ali\etilqs_yoaENKlFoMwrvSx
[2016/07/15 13:52:09 | 000,008,945 | ---- | M] () -- C:\Users\Ali\jupdate_34da1d50
[2016/07/14 18:59:32 | 000,002,052 | -H-- | M] () -- C:\Users\Ali\etilqs_54K6JTMadykNMu2
[2016/07/14 16:13:16 | 000,004,100 | -H-- | M] () -- C:\Users\Ali\etilqs_X2F0hBLZBelfcce
[2016/07/14 16:07:45 | 000,016,400 | -H-- | M] () -- C:\Users\Ali\etilqs_lGf1RbtZZd2fODd
[2016/07/14 15:41:06 | 000,004,104 | -H-- | M] () -- C:\Users\Ali\etilqs_ZKtR9oSwLnjRfaL
[2016/07/14 15:13:27 | 000,001,145 | ---- | M] () -- C:\Users\Ali\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FacebookGamesNotifier.exe.lnk
[2016/07/14 11:14:02 | 000,000,000 | ---- | M] () -- C:\Users\Ali\8d2a8ce8-2256-46f6-8d04-31da8aa03a89.dmp
[2016/07/14 11:12:29 | 000,000,004 | -H-- | M] () -- C:\Users\Ali\etilqs_2gb1GJwpoBoTcsn
[2016/07/14 11:11:24 | 000,000,004 | -H-- | M] () -- C:\Users\Ali\etilqs_eYKo0fbMqgJjeAV
[2016/07/14 11:10:43 | 000,016,400 | -H-- | M] () -- C:\Users\Ali\etilqs_lahtp58v0TbDFXQ
[2016/07/13 17:57:01 | 000,000,004 | -H-- | M] () -- C:\Users\Ali\etilqs_Y8k9E5eljNbV3x3
[2016/07/13 17:56:47 | 000,004,104 | -H-- | M] () -- C:\Users\Ali\etilqs_yvbvmZLi8p6KBoj
[2016/07/13 14:22:19 | 000,438,296 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswsp.sys
[2016/07/13 12:26:05 | 000,000,004 | -H-- | M] () -- C:\Users\Ali\etilqs_uAEaZ0TEwQJVRCb
[2016/07/13 11:25:05 | 000,012,304 | -H-- | M] () -- C:\Users\Ali\etilqs_MCELuaTrNF8AEts
[2016/07/13 08:49:01 | 000,004,104 | -H-- | M] () -- C:\Users\Ali\etilqs_LEhzlkeO6yPcdOW
[2016/07/12 22:23:01 | 000,012,304 | -H-- | M] () -- C:\Users\Ali\etilqs_iVv509SmzEdKsaF
[2016/07/12 16:34:03 | 000,000,004 | -H-- | M] () -- C:\Users\Ali\etilqs_vhWVgf5eh9m9fBT
[2016/07/12 13:24:12 | 000,000,004 | -H-- | M] () -- C:\Users\Ali\etilqs_rZebNmebh68QsVw
[2016/07/12 11:55:42 | 000,012,304 | -H-- | M] () -- C:\Users\Ali\etilqs_WV5onE6JGynkYpf
[2016/07/12 09:49:55 | 000,773,953 | ---- | M] () -- C:\Users\Ali\965041bb-0045-4796-bc3c-d7065f564dee.dmp
[2016/07/12 09:47:15 | 000,002,056 | -H-- | M] () -- C:\Users\Ali\etilqs_ZmbOPMpvfuVisLd
[2016/07/12 09:46:59 | 000,001,028 | -H-- | M] () -- C:\Users\Ali\etilqs_Bk6IWrM0D96JSov
[2016/07/12 09:37:19 | 000,004,100 | -H-- | M] () -- C:\Users\Ali\etilqs_Kc7j0MgELYjP6qX
[2016/07/12 09:36:54 | 000,016,400 | -H-- | M] () -- C:\Users\Ali\etilqs_044bnaBqGHFtx8W
[2016/07/12 09:27:43 | 000,001,078 | ---- | M] () -- C:\Users\Public\Desktop\Avast SafeZone Browser.lnk
[2016/07/12 02:19:48 | 000,118,152 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswStm.sys
[2016/07/12 02:19:47 | 000,222,056 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswVmm.sys
[2016/07/12 02:19:46 | 000,060,424 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswRvrt.sys
[2016/07/12 02:19:45 | 000,091,680 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswMonFlt.sys
[2016/07/12 02:19:45 | 000,091,232 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswRdr2.sys
[2016/07/12 02:19:45 | 000,034,008 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswHwid.sys
[2016/07/12 02:19:17 | 000,921,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\ucrtbase.dll
[2016/07/12 02:19:12 | 000,053,208 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
[2016/07/12 02:19:11 | 000,319,248 | ---- | M] (AVAST Software) -- C:\Windows\System32\aswBoot.exe
[2016/07/12 02:18:18 | 000,816,304 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswSnx.sys
[2016/07/12 02:18:17 | 000,035,096 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswKbd.sys
[2016/07/11 17:15:27 | 000,000,004 | -H-- | M] () -- C:\Users\Ali\etilqs_zg7CsjJj4yswB13
[2016/07/11 16:48:27 | 000,004,104 | -H-- | M] () -- C:\Users\Ali\etilqs_pt5qeCr0KyFiTvG
[2016/07/11 10:50:30 | 000,012,304 | -H-- | M] () -- C:\Users\Ali\etilqs_R6Cx17h4y6gVeOx
[2016/07/11 00:21:39 | 000,000,004 | -H-- | M] () -- C:\Users\Ali\etilqs_G34gSYab4hbcVaS
[2016/07/10 23:26:13 | 000,012,304 | -H-- | M] () -- C:\Users\Ali\etilqs_nvyMngm04EXF4gc
[2016/07/10 13:09:27 | 000,000,004 | -H-- | M] () -- C:\Users\Ali\etilqs_EEgnxbNw8H3zqJj
[2016/07/10 13:09:18 | 000,000,004 | -H-- | M] () -- C:\Users\Ali\etilqs_Gqgkny0CNHbG1cr
[2016/07/10 13:08:59 | 000,000,004 | -H-- | M] () -- C:\Users\Ali\etilqs_TEryE0qolNdqaHm
[2016/07/10 08:58:51 | 000,016,400 | -H-- | M] () -- C:\Users\Ali\etilqs_oUpiifGJFChAj2Z
[2016/07/09 22:21:34 | 000,001,149 | ---- | M] () -- C:\Users\Ali\Desktop\Facebook Games Arcade (BETA).lnk
[2016/07/09 09:22:18 | 000,004,104 | -H-- | M] () -- C:\Users\Ali\etilqs_A20Yajkt8CEn2k7
[2016/07/09 01:54:01 | 000,016,400 | -H-- | M] () -- C:\Users\Ali\etilqs_nJ9CGPrbVpImua3
[2016/07/09 01:10:49 | 000,012,304 | -H-- | M] () -- C:\Users\Ali\etilqs_lyU93Q2CMXhzqTA
[2016/07/09 00:24:43 | 000,000,004 | -H-- | M] () -- C:\Users\Ali\etilqs_fW4rdSINAcBAMfe
[2016/07/09 00:24:34 | 000,000,004 | -H-- | M] () -- C:\Users\Ali\etilqs_8cOWfyAFjHArv51
[2016/07/09 00:24:07 | 000,012,304 | -H-- | M] () -- C:\Users\Ali\etilqs_t9qIlU59slaROTD
[2016/07/07 16:23:18 | 000,000,004 | -H-- | M] () -- C:\Users\Ali\etilqs_xEF4pMOjCFXibzY
[2016/07/07 16:23:10 | 000,000,004 | -H-- | M] () -- C:\Users\Ali\etilqs_4FDnWSLcEbj34UL
[2016/07/07 16:21:49 | 000,004,104 | -H-- | M] () -- C:\Users\Ali\etilqs_iB8PXIcFU7gE17m
[2016/07/06 23:24:43 | 000,004,100 | -H-- | M] () -- C:\Users\Ali\etilqs_EIdreJAcPmPKGIB
[2016/07/06 23:23:43 | 000,016,400 | -H-- | M] () -- C:\Users\Ali\etilqs_egw6vljWM6lHFJS
[2016/07/06 23:23:16 | 014,789,934 | ---- | M] () -- C:\Users\Ali\WER8057.tmp.mdmp
[2016/07/06 23:22:49 | 000,003,570 | ---- | M] () -- C:\Users\Ali\WER19D6.tmp.WERInternalMetadata.xml
[2016/07/06 23:16:22 | 000,000,000 | ---- | M] () -- C:\Users\Ali\6c750e4b-1cc7-4c06-a528-1cadb69650fc.dmp
[2016/07/06 23:13:55 | 000,000,004 | -H-- | M] () -- C:\Users\Ali\etilqs_vngFLmvoy5Ybw88
[2016/07/06 23:05:42 | 000,002,052 | -H-- | M] () -- C:\Users\Ali\etilqs_b1qDjZ1mjHRr7h1
[2016/07/06 23:05:12 | 000,012,304 | -H-- | M] () -- C:\Users\Ali\etilqs_icgfnL3vgM1D6vn
[2016/07/06 23:05:12 | 000,004,100 | -H-- | M] () -- C:\Users\Ali\etilqs_gNt8aTzu0a6sCfX
[2016/07/02 19:10:30 | 000,016,400 | -H-- | M] () -- C:\Users\Ali\etilqs_J74ZfYrd40jMQqe
[2016/07/02 19:10:29 | 000,004,100 | -H-- | M] () -- C:\Users\Ali\etilqs_Yvo6vA9pDfSU3Nk
[2016/07/02 15:19:21 | 000,000,004 | -H-- | M] () -- C:\Users\Ali\etilqs_P8E7VAKaXnLxaI7
[2016/07/02 13:53:41 | 000,000,004 | -H-- | M] () -- C:\Users\Ali\etilqs_42qx2pEqhUVqVL0
[2016/07/02 13:42:12 | 000,012,304 | -H-- | M] () -- C:\Users\Ali\etilqs_SYHd8jub2wqcn9P
[2016/07/01 20:56:20 | 000,000,004 | -H-- | M] () -- C:\Users\Ali\etilqs_KTY7OeTmhr7DQXx
[2016/07/01 20:49:56 | 000,016,400 | -H-- | M] () -- C:\Users\Ali\etilqs_qGvgEeVaWUkK6gp
[2016/07/01 19:19:30 | 000,000,004 | -H-- | M] () -- C:\Users\Ali\etilqs_UV3b3g6DJHueyKH
[2016/07/01 19:02:59 | 000,012,304 | -H-- | M] () -- C:\Users\Ali\etilqs_Bqg6kEOkuHnvqI5
[2016/07/01 18:56:13 | 000,000,000 | ---- | M] () -- C:\Users\Ali\997ebf60-c655-4007-8e8a-e1cdcc9fc37c.dmp
[2016/07/01 18:54:33 | 000,000,004 | -H-- | M] () -- C:\Users\Ali\etilqs_LmVNAgte76A1Zmj
[2016/07/01 18:54:24 | 000,000,004 | -H-- | M] () -- C:\Users\Ali\etilqs_zJX91N65IuSGlzX
[2016/07/01 18:44:45 | 000,012,304 | -H-- | M] () -- C:\Users\Ali\etilqs_t6V2jGUSyd7zcFz
[2016/07/01 18:44:45 | 000,004,100 | -H-- | M] () -- C:\Users\Ali\etilqs_PTiMxsH5cycYxMJ
[2016/07/01 10:57:45 | 000,016,400 | -H-- | M] () -- C:\Users\Ali\etilqs_T8WmKQRgbz1d3kp
[2016/06/30 19:33:00 | 000,004,104 | -H-- | M] () -- C:\Users\Ali\etilqs_1SzNAANFyIEZBoW
[2016/06/29 11:41:23 | 000,016,400 | -H-- | M] () -- C:\Users\Ali\etilqs_REvG4dCWSZ7SQee
[2016/06/29 11:35:58 | 000,000,004 | -H-- | M] () -- C:\Users\Ali\etilqs_AfdOWSsMls9jILR
[2016/06/29 10:30:45 | 000,004,100 | -H-- | M] () -- C:\Users\Ali\etilqs_QuxfNMoci2Bhbhv
[2016/06/29 10:30:30 | 000,012,304 | -H-- | M] () -- C:\Users\Ali\etilqs_x5VK2zrPh447YcD
[2016/06/28 21:08:03 | 000,004,104 | -H-- | M] () -- C:\Users\Ali\etilqs_4GsiySKXhqgVvR4
[2016/06/28 20:02:37 | 000,004,104 | -H-- | M] () -- C:\Users\Ali\etilqs_PCbv8RYe34zSmnZ
[2016/06/28 18:47:02 | 000,002,052 | -H-- | M] () -- C:\Users\Ali\etilqs_i2jxMSwSYtNamO6
[2016/06/28 18:46:41 | 000,012,300 | -H-- | M] () -- C:\Users\Ali\etilqs_XN60un1ibCab4qd
[2016/06/28 18:32:00 | 000,016,400 | -H-- | M] () -- C:\Users\Ali\etilqs_TnO98b4SvDdcVZH
[2016/06/28 18:32:00 | 000,002,052 | -H-- | M] () -- C:\Users\Ali\etilqs_MfAyIwjG5WPIRhk
[2016/06/28 15:37:45 | 000,016,400 | -H-- | M] () -- C:\Users\Ali\etilqs_3MNTq4jdP0XlOoJ
[2016/06/28 15:37:45 | 000,002,052 | -H-- | M] () -- C:\Users\Ali\etilqs_EXqxjsEqPLByFtg
[2016/06/28 11:49:26 | 000,004,100 | -H-- | M] () -- C:\Users\Ali\etilqs_zBlXvjfdNwafeoL
[2016/06/28 11:41:55 | 000,000,004 | -H-- | M] () -- C:\Users\Ali\etilqs_iXzlpeTpmH2zyJP
[2016/06/28 11:39:38 | 000,000,004 | -H-- | M] () -- C:\Users\Ali\etilqs_kinDDGZwa1Nejsn
[2016/06/28 11:38:29 | 000,012,300 | -H-- | M] () -- C:\Users\Ali\etilqs_PMqEMaXN826PVnQ
[2016/06/28 11:36:55 | 000,004,100 | -H-- | M] () -- C:\Users\Ali\etilqs_wPFUSYygD6HgpD7
[2016/06/28 09:40:49 | 000,000,000 | ---- | M] () -- C:\Users\Ali\e266df0a-b6dc-436a-9fce-8d768c5b6d0f.dmp
[2016/06/28 09:38:01 | 000,000,004 | -H-- | M] () -- C:\Users\Ali\etilqs_WXC3FZfV71eEKgE
[2016/06/28 09:37:42 | 000,004,100 | -H-- | M] () -- C:\Users\Ali\etilqs_9DTQytkrM52E1KO
[2016/06/28 09:36:12 | 000,016,400 | -H-- | M] () -- C:\Users\Ali\etilqs_9ereaEihcox2ujm
[2016/06/27 17:54:08 | 000,002,052 | -H-- | M] () -- C:\Users\Ali\etilqs_kksP2OJN0fjEbl0
[2016/06/27 17:53:42 | 000,004,100 | -H-- | M] () -- C:\Users\Ali\etilqs_eEt9sUM9DkWTSVY
[2016/06/27 17:53:15 | 000,016,400 | -H-- | M] () -- C:\Users\Ali\etilqs_kZ07NeeE3wCes1H
[2016/06/26 07:21:16 | 000,004,100 | -H-- | M] () -- C:\Users\Ali\etilqs_Fbh4zwTn7LkdH84
[2016/06/26 07:19:49 | 000,016,400 | -H-- | M] () -- C:\Users\Ali\etilqs_zUaTaMLXK7j7Uyr
[2016/06/25 14:45:11 | 000,016,400 | -H-- | M] () -- C:\Users\Ali\etilqs_XfJoX17Aom9f3B0
[2016/06/25 13:11:51 | 000,004,100 | -H-- | M] () -- C:\Users\Ali\etilqs_yzxfDNgfO1pf8PN
[2016/06/24 15:05:07 | 000,779,036 | ---- | M] () -- C:\Users\Ali\682f831a-1dfe-4dfd-8d80-010eb999a086.dmp
[2016/06/24 01:18:27 | 000,000,004 | -H-- | M] () -- C:\Users\Ali\etilqs_Zd7X2ipLgIzgjil
[2016/06/24 01:18:01 | 000,004,104 | -H-- | M] () -- C:\Users\Ali\etilqs_HaDGrD0HJ2x6puw
[2016/06/23 20:40:39 | 000,724,015 | ---- | M] () -- C:\Users\Ali\6984ebb8-37f0-477c-a1d9-bc5966a93f9f.dmp
[2016/06/23 20:05:45 | 000,995,671 | ---- | M] () -- C:\Users\Ali\70568997-44b4-4bed-95f3-b34d451112fc.dmp
[2016/06/22 22:39:35 | 000,016,400 | -H-- | M] () -- C:\Users\Ali\etilqs_9GZ8cg1ovoJAb54
[2016/06/22 22:39:35 | 000,004,100 | -H-- | M] () -- C:\Users\Ali\etilqs_wGXyIZ0TIuK0CJx
[2016/06/22 22:39:35 | 000,002,052 | -H-- | M] () -- C:\Users\Ali\etilqs_XScT7LsE0Q21vAL
[2016/06/21 21:49:01 | 000,024,600 | -H-- | M] () -- C:\Users\Ali\etilqs_vOPrYRUKNr4jo4n
[2016/06/21 21:49:01 | 000,004,100 | -H-- | M] () -- C:\Users\Ali\etilqs_S3R1xpWmz6zJt2Y
[2016/06/21 21:49:01 | 000,002,052 | -H-- | M] () -- C:\Users\Ali\etilqs_KRddxINzTH1T84f
[2016/06/20 17:53:11 | 000,000,004 | -H-- | M] () -- C:\Users\Ali\etilqs_njONnld89Lvc5pN
[2016/06/20 16:48:09 | 000,002,052 | -H-- | M] () -- C:\Users\Ali\etilqs_ARf2gVWbBQZxmON
[2016/06/20 16:13:43 | 000,016,400 | -H-- | M] () -- C:\Users\Ali\etilqs_QShcj8I48dKL0u5
[2016/06/20 16:05:20 | 000,000,004 | -H-- | M] () -- C:\Users\Ali\etilqs_GDQ5XcScZzFl5WM
[2016/06/20 16:04:44 | 000,000,004 | -H-- | M] () -- C:\Users\Ali\etilqs_5jNGeehZlut2r7e
[2016/06/20 08:22:57 | 000,000,004 | -H-- | M] () -- C:\Users\Ali\etilqs_FzJ6HeaQ8DLLq3a
[2016/06/20 07:53:26 | 000,012,304 | -H-- | M] () -- C:\Users\Ali\etilqs_XSUJHFZTC5HB3LQ
[2016/06/20 02:10:23 | 000,004,104 | -H-- | M] () -- C:\Users\Ali\etilqs_3DkKu9YSwd3Ep5W
[2016/06/19 13:48:35 | 000,004,100 | -H-- | M] () -- C:\Users\Ali\etilqs_kHb7FUvle4dD2k6
[2016/06/19 13:48:23 | 000,016,400 | -H-- | M] () -- C:\Users\Ali\etilqs_APsXGLEXCaV6YqQ
[2016/06/18 19:17:53 | 000,000,004 | -H-- | M] () -- C:\Users\Ali\etilqs_5EMNicgMkWRhdsK
[2016/06/18 18:44:24 | 000,016,400 | -H-- | M] () -- C:\Users\Ali\etilqs_cN75MS1FlsII4cL
[2016/06/17 16:10:52 | 000,000,004 | -H-- | M] () -- C:\Users\Ali\etilqs_ufGE2oJkfpw3TWj
[2016/06/17 15:12:52 | 000,012,304 | -H-- | M] () -- C:\Users\Ali\etilqs_p4eYU9c9b5ik6Ii
[2016/06/17 15:12:52 | 000,000,004 | -H-- | M] () -- C:\Users\Ali\etilqs_szxoUJBdLEKwNjh
[9 C:\Windows\System32\drivers\*.tmp files -> C:\Windows\System32\drivers\*.tmp -> ]
[287 C:\Users\Ali\*.tmp files -> C:\Users\Ali\*.tmp -> ]
[1 C:\Users\Ali\AppData\Local\*.tmp files -> C:\Users\Ali\AppData\Local\*.tmp -> ]

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2016/07/15 20:24:40 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2016/07/15 20:23:00 | 000,000,000 | -H-- | C] () -- C:\Users\Ali\etilqs_pdnZevNbkE6pB1i
[2016/07/15 19:01:12 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_PCK6j5MtxkGCJS9
[2016/07/15 17:32:46 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_yoaENKlFoMwrvSx
[2016/07/14 18:59:32 | 000,002,052 | -H-- | C] () -- C:\Users\Ali\etilqs_54K6JTMadykNMu2
[2016/07/14 16:13:16 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_X2F0hBLZBelfcce
[2016/07/14 16:07:45 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_lGf1RbtZZd2fODd
[2016/07/14 15:41:06 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_ZKtR9oSwLnjRfaL
[2016/07/14 11:14:02 | 000,000,000 | ---- | C] () -- C:\Users\Ali\8d2a8ce8-2256-46f6-8d04-31da8aa03a89.dmp
[2016/07/14 11:12:29 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_2gb1GJwpoBoTcsn
[2016/07/14 11:11:24 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_eYKo0fbMqgJjeAV
[2016/07/14 09:40:46 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_lahtp58v0TbDFXQ
[2016/07/13 17:57:01 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_Y8k9E5eljNbV3x3
[2016/07/13 17:56:47 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_yvbvmZLi8p6KBoj
[2016/07/13 12:26:05 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_uAEaZ0TEwQJVRCb
[2016/07/13 11:25:05 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_MCELuaTrNF8AEts
[2016/07/13 08:49:01 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_LEhzlkeO6yPcdOW
[2016/07/12 22:23:01 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_iVv509SmzEdKsaF
[2016/07/12 16:34:03 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_vhWVgf5eh9m9fBT
[2016/07/12 13:49:17 | 000,008,945 | ---- | C] () -- C:\Users\Ali\jupdate_34da1d50
[2016/07/12 13:24:12 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_rZebNmebh68QsVw
[2016/07/12 11:55:42 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_WV5onE6JGynkYpf
[2016/07/12 09:49:53 | 000,773,953 | ---- | C] () -- C:\Users\Ali\965041bb-0045-4796-bc3c-d7065f564dee.dmp
[2016/07/12 09:47:15 | 000,002,056 | -H-- | C] () -- C:\Users\Ali\etilqs_ZmbOPMpvfuVisLd
[2016/07/12 09:46:59 | 000,001,028 | -H-- | C] () -- C:\Users\Ali\etilqs_Bk6IWrM0D96JSov
[2016/07/12 09:37:19 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_Kc7j0MgELYjP6qX
[2016/07/12 09:36:54 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_044bnaBqGHFtx8W
[2016/07/12 09:27:44 | 000,001,078 | ---- | C] () -- C:\Users\Public\Desktop\Avast SafeZone Browser.lnk
[2016/07/12 09:27:44 | 000,001,078 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
[2016/07/11 17:15:27 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_zg7CsjJj4yswB13
[2016/07/11 16:48:27 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_pt5qeCr0KyFiTvG
[2016/07/11 10:50:30 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_R6Cx17h4y6gVeOx
[2016/07/11 00:21:39 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_G34gSYab4hbcVaS
[2016/07/10 23:26:13 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_nvyMngm04EXF4gc
[2016/07/10 13:09:27 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_EEgnxbNw8H3zqJj
[2016/07/10 13:09:18 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_Gqgkny0CNHbG1cr
[2016/07/10 13:08:59 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_TEryE0qolNdqaHm
[2016/07/10 08:58:51 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_oUpiifGJFChAj2Z
[2016/07/09 09:22:18 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_A20Yajkt8CEn2k7
[2016/07/09 01:54:01 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_nJ9CGPrbVpImua3
[2016/07/09 01:10:49 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_lyU93Q2CMXhzqTA
[2016/07/09 00:24:43 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_fW4rdSINAcBAMfe
[2016/07/09 00:24:34 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_8cOWfyAFjHArv51
[2016/07/09 00:24:07 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_t9qIlU59slaROTD
[2016/07/07 16:23:18 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_xEF4pMOjCFXibzY
[2016/07/07 16:23:10 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_4FDnWSLcEbj34UL
[2016/07/07 16:21:49 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_iB8PXIcFU7gE17m
[2016/07/06 23:24:43 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_EIdreJAcPmPKGIB
[2016/07/06 23:23:43 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_egw6vljWM6lHFJS
[2016/07/06 23:23:15 | 014,789,934 | ---- | C] () -- C:\Users\Ali\WER8057.tmp.mdmp
[2016/07/06 23:22:49 | 000,003,570 | ---- | C] () -- C:\Users\Ali\WER19D6.tmp.WERInternalMetadata.xml
[2016/07/06 23:16:22 | 000,000,000 | ---- | C] () -- C:\Users\Ali\6c750e4b-1cc7-4c06-a528-1cadb69650fc.dmp
[2016/07/06 23:13:55 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_vngFLmvoy5Ybw88
[2016/07/06 23:05:42 | 000,002,052 | -H-- | C] () -- C:\Users\Ali\etilqs_b1qDjZ1mjHRr7h1
[2016/07/06 23:05:12 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_icgfnL3vgM1D6vn
[2016/07/06 23:05:12 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_gNt8aTzu0a6sCfX
[2016/07/02 19:10:30 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_J74ZfYrd40jMQqe
[2016/07/02 19:10:29 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_Yvo6vA9pDfSU3Nk
[2016/07/02 15:19:21 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_P8E7VAKaXnLxaI7
[2016/07/02 13:53:41 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_42qx2pEqhUVqVL0
[2016/07/02 13:42:12 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_SYHd8jub2wqcn9P
[2016/07/01 20:56:20 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_KTY7OeTmhr7DQXx
[2016/07/01 19:28:09 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_qGvgEeVaWUkK6gp
[2016/07/01 19:19:30 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_UV3b3g6DJHueyKH
[2016/07/01 19:02:59 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_Bqg6kEOkuHnvqI5
[2016/07/01 18:56:13 | 000,000,000 | ---- | C] () -- C:\Users\Ali\997ebf60-c655-4007-8e8a-e1cdcc9fc37c.dmp
[2016/07/01 18:54:33 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_LmVNAgte76A1Zmj
[2016/07/01 18:54:24 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_zJX91N65IuSGlzX
[2016/07/01 18:44:45 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_t6V2jGUSyd7zcFz
[2016/07/01 18:44:45 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_PTiMxsH5cycYxMJ
[2016/07/01 10:56:00 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_T8WmKQRgbz1d3kp
[2016/06/30 19:33:00 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_1SzNAANFyIEZBoW
[2016/06/29 11:41:23 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_REvG4dCWSZ7SQee
[2016/06/29 11:35:58 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_AfdOWSsMls9jILR
[2016/06/29 10:30:45 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_QuxfNMoci2Bhbhv
[2016/06/29 10:30:30 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_x5VK2zrPh447YcD
[2016/06/28 21:08:03 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_4GsiySKXhqgVvR4
[2016/06/28 20:02:37 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_PCbv8RYe34zSmnZ
[2016/06/28 18:47:02 | 000,002,052 | -H-- | C] () -- C:\Users\Ali\etilqs_i2jxMSwSYtNamO6
[2016/06/28 18:46:41 | 000,012,300 | -H-- | C] () -- C:\Users\Ali\etilqs_XN60un1ibCab4qd
[2016/06/28 18:29:07 | 000,002,052 | -H-- | C] () -- C:\Users\Ali\etilqs_MfAyIwjG5WPIRhk
[2016/06/28 17:58:14 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_TnO98b4SvDdcVZH
[2016/06/28 15:27:10 | 000,002,052 | -H-- | C] () -- C:\Users\Ali\etilqs_EXqxjsEqPLByFtg
[2016/06/28 11:49:26 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_zBlXvjfdNwafeoL
[2016/06/28 11:49:18 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_3MNTq4jdP0XlOoJ
[2016/06/28 11:41:55 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_iXzlpeTpmH2zyJP
[2016/06/28 11:39:38 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_kinDDGZwa1Nejsn
[2016/06/28 11:22:23 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_wPFUSYygD6HgpD7
[2016/06/28 11:21:59 | 000,012,300 | -H-- | C] () -- C:\Users\Ali\etilqs_PMqEMaXN826PVnQ
[2016/06/28 09:40:49 | 000,000,000 | ---- | C] () -- C:\Users\Ali\e266df0a-b6dc-436a-9fce-8d768c5b6d0f.dmp
[2016/06/28 09:38:01 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_WXC3FZfV71eEKgE
[2016/06/28 09:35:24 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_9DTQytkrM52E1KO
[2016/06/28 09:34:23 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_9ereaEihcox2ujm
[2016/06/27 17:54:08 | 000,002,052 | -H-- | C] () -- C:\Users\Ali\etilqs_kksP2OJN0fjEbl0
[2016/06/27 17:53:42 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_eEt9sUM9DkWTSVY
[2016/06/27 17:53:15 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_kZ07NeeE3wCes1H
[2016/06/26 07:21:16 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_Fbh4zwTn7LkdH84
[2016/06/26 07:19:49 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_zUaTaMLXK7j7Uyr
[2016/06/25 13:11:51 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_yzxfDNgfO1pf8PN
[2016/06/25 13:11:23 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_XfJoX17Aom9f3B0
[2016/06/24 15:04:51 | 000,779,036 | ---- | C] () -- C:\Users\Ali\682f831a-1dfe-4dfd-8d80-010eb999a086.dmp
[2016/06/24 01:18:27 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_Zd7X2ipLgIzgjil
[2016/06/24 01:18:01 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_HaDGrD0HJ2x6puw
[2016/06/23 20:40:39 | 000,724,015 | ---- | C] () -- C:\Users\Ali\6984ebb8-37f0-477c-a1d9-bc5966a93f9f.dmp
[2016/06/23 19:55:43 | 000,995,671 | ---- | C] () -- C:\Users\Ali\70568997-44b4-4bed-95f3-b34d451112fc.dmp
[2016/06/22 16:19:45 | 000,002,052 | -H-- | C] () -- C:\Users\Ali\etilqs_XScT7LsE0Q21vAL
[2016/06/22 16:15:28 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_wGXyIZ0TIuK0CJx
[2016/06/22 14:24:59 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_9GZ8cg1ovoJAb54
[2016/06/21 16:22:59 | 000,002,052 | -H-- | C] () -- C:\Users\Ali\etilqs_KRddxINzTH1T84f
[2016/06/21 15:55:01 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_S3R1xpWmz6zJt2Y
[2016/06/21 15:54:00 | 000,024,600 | -H-- | C] () -- C:\Users\Ali\etilqs_vOPrYRUKNr4jo4n
[2016/06/20 17:53:11 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_njONnld89Lvc5pN
[2016/06/20 16:48:09 | 000,002,052 | -H-- | C] () -- C:\Users\Ali\etilqs_ARf2gVWbBQZxmON
[2016/06/20 16:13:43 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_QShcj8I48dKL0u5
[2016/06/20 16:05:20 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_GDQ5XcScZzFl5WM
[2016/06/20 16:04:44 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_5jNGeehZlut2r7e
[2016/06/20 08:22:57 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_FzJ6HeaQ8DLLq3a
[2016/06/20 07:53:26 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_XSUJHFZTC5HB3LQ
[2016/06/20 02:10:23 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_3DkKu9YSwd3Ep5W
[2016/06/19 13:48:35 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_kHb7FUvle4dD2k6
[2016/06/19 13:48:23 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_APsXGLEXCaV6YqQ
[2016/06/18 19:17:53 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_5EMNicgMkWRhdsK
[2016/06/18 18:44:24 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_cN75MS1FlsII4cL
[2016/06/17 16:10:52 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_ufGE2oJkfpw3TWj
[2016/06/17 15:12:52 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_p4eYU9c9b5ik6Ii
[2016/06/17 15:12:52 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_szxoUJBdLEKwNjh
[2016/06/15 16:46:16 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_zxdnZ7hLZLNKHtM
[2016/06/15 11:26:49 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_tFbOvTbu25u0EXX
[2016/06/14 16:14:54 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_wSXkytcwy9zwi32
[2016/06/14 16:14:54 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_Zz46VbU20LouQI4
[2016/06/13 16:46:56 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_7Go9yc9GjItIuX6
[2016/06/11 18:24:06 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_YEwB7OTj0jaKguf
[2016/06/11 09:48:32 | 000,002,052 | -H-- | C] () -- C:\Users\Ali\etilqs_srfK0S34tTMyrgd
[2016/06/11 09:47:26 | 000,008,200 | -H-- | C] () -- C:\Users\Ali\etilqs_A4NPR01MRVir6ZA
[2016/06/11 07:54:26 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_tiGYqCFEEZ2eqDn
[2016/06/11 07:43:43 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_ylsTfgEIJ61AzpQ
[2016/06/11 07:42:35 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_0CnRblxLaLGGPzW
[2016/06/09 16:15:47 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_LmaiyYpHYZuIAAU
[2016/06/09 16:15:29 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_l8nd0sI6vdlXESz
[2016/06/09 15:48:06 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_DpxcdcIEz55hHib
[2016/06/09 15:46:49 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_m8qEZ6IyWL9fjb1
[2016/06/08 19:04:04 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_3uTDWFhIHa7Eeef
[2016/06/08 19:03:04 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_RONxKi03bkVOOvQ
[2016/06/08 11:47:49 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_dzftwm1VqDoTKrQ
[2016/06/08 11:39:12 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_3HVSlD4e1eylnkj
[2016/06/07 01:28:40 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_NmECb9Jh9uX97J6
[2016/06/06 17:07:50 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_qL7t9z0g3mJK5Y5
[2016/06/06 16:50:57 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_Doe5pVSbmRcovB5
[2016/06/06 16:08:04 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_IHnM27epkkw5meU
[2016/06/06 15:48:58 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_MH2rq1oQXfbVVIE
[2016/06/06 15:48:57 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_vjY0whQy4WGN1g4
[2016/06/05 23:46:00 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_S7AQ74YG1j8L8k8
[2016/06/05 23:45:00 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_qarax2aXc2OekXA
[2016/06/05 15:02:24 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_hkhSZKWzMRz2fiw
[2016/06/05 14:04:03 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_RrpR0gGIxSwJ0la
[2016/06/05 13:51:53 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_uMjt3weAL9FoxCL
[2016/06/05 07:36:12 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_BMwUTRBMV8eScV5
[2016/06/04 22:09:50 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_EDcZNRc6mqmsAPr
[2016/06/04 21:14:03 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_PRoJMsC0g6jsZyv
[2016/06/04 21:13:03 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_654bLgLopgWTXVB
[2016/06/04 18:40:22 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_6Sj3RAiB33cyL50
[2016/06/04 18:39:05 | 000,012,300 | -H-- | C] () -- C:\Users\Ali\etilqs_HhJGKTMKwl5YHML
[2016/06/04 16:14:30 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_6QgrHcZD9rd0f2m
[2016/06/04 12:43:09 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_qRNj7AZgKSiMfjY
[2016/06/03 21:59:00 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_2cdqE9FWrYA0F41
[2016/06/03 21:17:06 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_mnmgHNcZUOdXQof
[2016/06/03 21:03:31 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_MXr6r9KpzNmsWDN
[2016/06/03 18:35:28 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_bqMICGUTCtvY6Tp
[2016/06/03 16:29:08 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_4160YCBkkzl49ru
[2016/06/03 16:23:17 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_4rxaDtS0Es9CLb6
[2016/06/03 15:26:06 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_nmzagvXwLJlt07P
[2016/06/03 15:25:37 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_oBIlQXynsBhDmma
[2016/06/03 15:22:37 | 000,000,000 | ---- | C] () -- C:\Users\Ali\9538daee-229d-48dc-aed7-ff688768b09b.dmp
[2016/06/02 18:33:21 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_VAsDCkqz6YquIEI
[2016/06/02 18:32:46 | 014,790,492 | ---- | C] () -- C:\Users\Ali\WERC0D0.tmp.mdmp
[2016/06/02 18:32:27 | 000,003,570 | ---- | C] () -- C:\Users\Ali\WER7982.tmp.WERInternalMetadata.xml
[2016/06/02 18:11:36 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_hklzyd7rPJhcqgV
[2016/06/02 16:21:45 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_h3Ht4UTEhp8GfyI
[2016/06/02 16:19:46 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_bTqT4NbcAHFSsuc
[2016/06/01 22:55:34 | 000,694,340 | ---- | C] () -- C:\Users\Ali\7a8db809-2e05-4fd6-ac4c-1809f7aa3082.dmp
[2016/06/01 14:58:29 | 000,811,796 | ---- | C] () -- C:\Users\Ali\47da23e7-6437-4512-9454-d38546ef5af3.dmp
[2016/06/01 03:13:34 | 034,701,312 | ---- | C] () -- C:\Users\Ali\download_latest_installer
[2016/05/30 23:56:36 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_VLmqVwHepPGGmPH
[2016/05/29 15:56:07 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_YtwHvAFATQ8ZGHY
[2016/05/28 15:41:22 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_YnS5PmsMd7okEUS
[2016/05/28 15:29:14 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_lSsIVghSqgDqZF0
[2016/05/28 14:53:05 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_CTJBemSgsWJnOHY
[2016/05/28 14:06:46 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_OGiI2jeGiAuv59U
[2016/05/28 12:47:16 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_gZsskncr1QE8UU6
[2016/05/27 19:27:17 | 000,002,052 | -H-- | C] () -- C:\Users\Ali\etilqs_5RgIejSAhpyHWYl
[2016/05/27 19:25:46 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_a51bDRHqPkyyEP0
[2016/05/27 15:26:37 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_YqqbeN65owOxVT9
[2016/05/27 15:07:37 | 000,003,088 | -H-- | C] () -- C:\Users\Ali\etilqs_GxuCZmIxwUOPa55
[2016/05/27 14:55:33 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_YprCeLHxjsA6uAC
[2016/05/25 10:34:48 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_VSN60HcxUUyaYKA
[2016/05/24 18:24:41 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_JBxfRB3l7f2cmjk
[2016/05/24 17:43:45 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_nrncMB4F11e5QXR
[2016/05/24 17:43:20 | 000,012,300 | -H-- | C] () -- C:\Users\Ali\etilqs_FdiM24lLcG1CpRt
[2016/05/24 00:10:15 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_cM7rYeCwNsjjP7F
[2016/05/23 23:53:28 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_NjAXISG9UueuCvN
[2016/05/23 23:06:26 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_q2F97HGjcuA1aC9
[2016/05/23 18:07:42 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_sqWdmAU9cZEkulr
[2016/05/23 18:01:49 | 000,008,200 | -H-- | C] () -- C:\Users\Ali\etilqs_Q6a63nbK1OIBCqw
[2016/05/23 17:28:12 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_s0pM1x6KTa5Bs4B
[2016/05/23 16:21:43 | 000,008,200 | -H-- | C] () -- C:\Users\Ali\etilqs_BA2E8iQ1bp7Ccb8
[2016/05/23 14:01:43 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_gyOl8T2AzbF5h4G
[2016/05/23 11:22:13 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_O2agBaEHO5Oikvb
[2016/05/23 00:42:22 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_vwJIuFzDT1mqbtO
[2016/05/22 18:10:48 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_nwayHfKkeDmMfyK
[2016/05/22 18:09:01 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_Ica1oY73SUzeXyC
[2016/05/22 18:03:25 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_fmYwi57KNQ0toFs
[2016/05/22 10:32:21 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_Z921wYt22y8hpGm
[2016/05/22 10:20:23 | 000,002,052 | -H-- | C] () -- C:\Users\Ali\etilqs_0qnKzWO08L7gDCf
[2016/05/22 10:15:30 | 000,012,300 | -H-- | C] () -- C:\Users\Ali\etilqs_M3euFEBG5NIhx09
[2016/05/22 08:38:08 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_79y75Y1dVWcvHv4
[2016/05/22 08:29:21 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_a4l8ptg0ZrxScdd
[2016/05/22 07:25:39 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_VXJ8er5sRm4SJAa
[2016/05/22 07:12:05 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_e0Hz2GbvRaXa37f
[2016/05/21 11:02:10 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_lsehICnW057TUfI
[2016/05/21 08:44:49 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_XLaV8zfMAVg4Amk
[2016/05/21 08:21:04 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_hfmxCGQ3g1lPTCo
[2016/05/21 07:07:20 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_Y9ldzFduiEMhyBa
[2016/05/21 05:35:17 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_PXIzYban2dqpdNr
[2016/05/21 05:33:50 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_LJeO1bXsVcG3Yuf
[2016/05/21 05:32:50 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_sgcKpQ1wjgrPUgm
[2016/05/20 17:50:33 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_WVHtMxgXwVFjEn5
[2016/05/20 16:17:22 | 000,001,452 | ---- | C] () -- C:\Users\Ali\wmplog00.sqm
[2016/05/20 16:15:11 | 000,000,966 | ---- | C] () -- C:\Users\Ali\22606bce.avp
[2016/05/20 16:14:50 | 000,018,105 | ---- | C] () -- C:\Users\Ali\Avast.VC140.CRT.cat
[2016/05/20 15:29:32 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_CnwbnNNkvc0PSFb
[2016/05/20 14:42:56 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_aRdleygSOgOOsX4
[2016/05/20 08:19:25 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_CHxVejbfJcZUxvn
[2016/05/20 08:05:50 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_rUeJLlmfXbIhkSy
[2016/05/19 21:50:36 | 000,008,200 | -H-- | C] () -- C:\Users\Ali\etilqs_oCf0uBuvd624kuT
[2016/05/19 18:11:59 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_U8yeTgM0gXv4KDp
[2016/05/19 18:04:38 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_U6eW8GqSu7FRbUz
[2016/05/19 17:55:18 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_tY4ZDhHwfGnNIp1
[2016/05/19 17:55:11 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_Jk6sdoZRuNsO9fd
[2016/05/18 20:48:28 | 000,002,052 | -H-- | C] () -- C:\Users\Ali\etilqs_0gT88pRYdYzSCks
[2016/05/18 18:55:41 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_ZHeo3lv8jQaxsOl
[2016/05/18 17:05:43 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_eao8hYxLjSJ9reH
[2016/05/18 15:06:37 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_TVRrBlNFduZKyek
[2016/05/18 11:43:52 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_iHw3QnbMV1x76KC
[2016/05/18 10:30:37 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_Xy63IUGaFfs4ouF
[2016/05/17 14:57:35 | 000,003,088 | -H-- | C] () -- C:\Users\Ali\etilqs_f65xUHwHeixPuuM
[2016/05/17 14:47:34 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_Ak3W1W5vzoPaVQS
[2016/05/17 14:47:05 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_bg3bNaaFajnaEa7
[2016/05/16 19:17:43 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_qJ2kaSds4vUgeGT
[2016/05/16 18:55:43 | 000,012,300 | -H-- | C] () -- C:\Users\Ali\etilqs_ODxpvsearxcCHpY
[2016/05/16 18:35:31 | 000,012,300 | -H-- | C] () -- C:\Users\Ali\etilqs_2qhjIk4GI3VeJMk
[2016/05/16 18:07:51 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_qUsZl0JhnsbYAgC
[2016/05/16 18:06:21 | 000,012,300 | -H-- | C] () -- C:\Users\Ali\etilqs_ySVhRVOfob7JJec
[2016/05/16 08:55:48 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_RbdQNvHiWfHwpyc
[2016/05/15 18:54:24 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_nWI6iDCSwMQl6N8
[2016/05/15 16:45:14 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_ptkgHqM0ocECf0k
[2016/05/15 09:53:08 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_g9YjCYJj5FgqE36
[2016/05/15 09:45:03 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_tuTTUia35ACfnaI
[2016/05/15 08:41:42 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_ZfcUCXfLAiIFncF
[2016/05/15 08:40:13 | 000,012,300 | -H-- | C] () -- C:\Users\Ali\etilqs_G9jDOB9sC8TdeKn
[2016/05/14 20:06:30 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_b9Wq0RA21bjc67o
[2016/05/14 15:58:53 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_cmq4KTG5KfyN97u
[2016/05/14 15:17:26 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_UMOdODp5Rr27uI3
[2016/05/14 11:47:31 | 000,003,568 | ---- | C] () -- C:\Users\Ali\WER3C82.tmp.WERInternalMetadata.xml
[2016/05/14 09:19:47 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_iDeOVgTWgttqtnZ
[2016/05/14 08:57:30 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_exypNR0pVOrlhKT
[2016/05/14 08:57:03 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_zNNKYQaqk0JSmxf
[2016/05/13 16:33:22 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_noyI14M0i6D0Mm0
[2016/05/13 15:49:10 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_ZWIrDzp0UenHvtM
[2016/05/13 14:44:24 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_q68zfvNMSCpb4f0
[2016/05/13 14:43:55 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_6gUUGVaXUGCZtEt
[2016/05/12 10:44:27 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_XJYvnyLfuzrd6I0
[2016/05/12 10:30:09 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_mELZA3DQWpgT5qK
[2016/05/12 10:28:40 | 000,024,600 | -H-- | C] () -- C:\Users\Ali\etilqs_jD2B3op8c9wtROx
[2016/05/11 17:46:28 | 000,000,946 | ---- | C] () -- C:\Users\Ali\2025be24.avp
[2016/05/11 16:15:15 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_DYQM2LvAZfGG6XL
[2016/05/11 16:07:47 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_cCHCcDWjOxgLnmW
[2016/05/11 15:38:12 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_RiRaFz3leO4DpV6
[2016/05/11 15:37:11 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_2mYHf9Jf2uj0JW3
[2016/05/10 20:53:32 | 000,000,004 | ---- | C] () -- C:\Windows\System32\DispDiag-20160510-205332-1392-1404.dat
[2016/05/10 20:48:40 | 000,000,000 | ---- | C] () -- C:\Users\Ali\Twunk002.MTX
[2016/05/10 20:41:25 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_7aumfEkyedwUQ6L
[2016/05/10 20:40:02 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_sw21PGf9XcW9SHx
[2016/05/10 15:20:23 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_sMOgjCOjAc2pREg
[2016/05/10 15:19:55 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_kCL8b7aJZLFQkhi
[2016/05/09 08:34:15 | 000,002,052 | -H-- | C] () -- C:\Users\Ali\etilqs_w4FIq62ctmfPAAJ
[2016/05/09 08:33:31 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_VgffKTjG6fQevlM
[2016/05/09 07:29:09 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_NsLR6pw2Z3c46MT
[2016/05/09 07:11:39 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_5MlfflJ5KjKaJY2
[2016/05/09 07:08:16 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_UT1LE0TzLxMonBa
[2016/05/09 07:08:16 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_VYqwHtxyWFjIWc0
[2016/05/09 00:57:30 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_K0Jo4atlLaA39lS
[2016/05/07 14:56:44 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_Ed7aTnF15SqmhKR
[2016/05/07 07:43:03 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_AeuqDBRktf9HooL
[2016/05/07 07:42:35 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_YV0a8JgP9u5GpEz
[2016/05/06 17:53:14 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_XPFOuB7xsN8wSNM
[2016/05/06 14:54:58 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_CeUbT0ssM9beWWd
[2016/05/06 14:16:04 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_H1oKSQO8bVKK3pC
[2016/05/06 11:05:48 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_BUotPSGCqAIMZiv
[2016/05/06 11:05:21 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_6pr2eRATjOxJk5n
[2016/05/05 17:36:58 | 000,012,300 | -H-- | C] () -- C:\Users\Ali\etilqs_jkftYQk58afWn5t
[2016/05/05 17:03:22 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_9zjAeVxWJT8Qnzl
[2016/05/05 17:02:55 | 000,012,300 | -H-- | C] () -- C:\Users\Ali\etilqs_kx2nkjOiSehJFC6
[2016/05/05 16:12:38 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_PtyjATTniGRGRFa
[2016/05/05 15:07:59 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_clhE7TsIUxWupT2
[2016/05/05 13:06:46 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_Z2UePV93CduXNAd
[2016/05/04 20:25:29 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_2MEbG9IutcJbBLV
[2016/05/04 19:19:00 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_6TamlCrdwwsTfJ5
[2016/05/04 17:07:13 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_l9fjO4RlMZCDHt4
[2016/05/04 16:55:44 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_aSu5BheWIN064v0
[2016/05/04 12:50:29 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_4i1pa7ehhzg6znx
[2016/05/04 11:57:16 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_5b0aX78OmSLmUPD
[2016/05/04 11:43:30 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_Tzl5gJx2ztafF0u
[2016/05/02 15:13:19 | 000,798,126 | ---- | C] () -- C:\Users\Ali\90c4fe38-7d05-4c98-8978-9515a490289d.dmp
[2016/05/02 15:12:14 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_4I9AOwujXGrZCTE
[2016/05/02 15:03:59 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_axiDJWJKHeexyuj
[2016/05/02 15:03:47 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_ZqTCUrjmCv3jRFc
[2016/05/01 23:34:13 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_ej4pBIfF59VAVxL
[2016/05/01 22:55:54 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_HZ0d89oLaVeXLrh
[2016/05/01 22:42:33 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_Ho95UY8raPX8UdU
[2016/05/01 19:11:40 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_fZSB8uuaA0Dskxc
[2016/05/01 17:48:42 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_iFjsEzC8AMH0UcP
[2016/04/30 18:47:30 | 000,002,052 | -H-- | C] () -- C:\Users\Ali\etilqs_Vg6S8gPclnR9pcj
[2016/04/30 17:56:48 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_ipkA4LzbVaMG2R6
[2016/04/30 17:23:27 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_2rfr1tPtOdoi6I6
[2016/04/30 17:08:11 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_4DY0Zuga7auawxd
[2016/04/30 17:07:17 | 000,878,240 | ---- | C] () -- C:\Users\Ali\1acbd45d-40e8-4912-b635-2cf3cb0395a4.dmp
[2016/04/29 20:11:16 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_L85khGKk7j0CoZL
[2016/04/29 20:09:53 | 000,012,300 | -H-- | C] () -- C:\Users\Ali\etilqs_ExNytAXojSWQHFn
[2016/04/29 19:30:01 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_DsT07doigiNEjxN
[2016/04/29 19:18:43 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_lW7zva3VRySHpGy
[2016/04/29 18:27:14 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_2wyfCGVxmpUnxHa
[2016/04/29 17:37:28 | 000,002,052 | -H-- | C] () -- C:\Users\Ali\etilqs_f8wYDwbhTTkngK0
[2016/04/29 17:37:19 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_FPymN7oSFZbuI0u
[2016/04/29 06:36:16 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_0HlfMab9u3tF3Fr
[2016/04/29 05:53:48 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_bN9gcsjLXFKxqBk
[2016/04/29 05:52:47 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_TL8Pfb3F1WvSwIX
[2016/04/28 06:01:37 | 000,002,052 | -H-- | C] () -- C:\Users\Ali\etilqs_DMdgOydcVTSP5xW
[2016/04/28 05:57:01 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_HtvXzmTsgqKUw1v
[2016/04/28 00:12:28 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_rqgkLdtLxhoISxT
[2016/04/27 23:54:58 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_FEKo4luZOoGVRIx
[2016/04/27 23:52:31 | 000,825,358 | ---- | C] () -- C:\Users\Ali\80ab83ed-e89d-4721-afc2-6ee5390c9b71.dmp
[2016/04/27 23:42:34 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_FZda2dS71ek0YM6
[2016/04/27 23:42:15 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_YEUDRhDfzZdCOm4
[2016/04/24 09:23:59 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_xpxRbcvgAPOzaB6
[2016/04/24 08:43:49 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_1p1OudfVhbDIi4L
[2016/04/23 17:12:30 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_ITaQiW89maMkc5u
[2016/04/22 12:55:24 | 000,837,140 | ---- | C] () -- C:\Users\Ali\d08267d8-d6a5-4299-9116-2c47aba8eb3c.dmp
[2016/04/20 11:52:10 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_lcOx1l5NiLdA8bh
[2016/04/20 09:34:23 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_NsiRmOpGjsshKQM
[2016/04/18 15:02:18 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_nbioc0CMbMgEht7
[2016/04/18 13:51:28 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_ihSCdnRuF6XRYfz
[2016/04/18 13:43:07 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_VKUfyMDD2baQPrH
[2016/04/17 17:33:06 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_pOF9PGfX4soVeK5
[2016/04/17 10:01:50 | 000,002,052 | -H-- | C] () -- C:\Users\Ali\etilqs_Er6aPAe2D0JGHaI
[2016/04/17 09:57:55 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_55ucuD4P32wmT2I
[2016/04/16 23:52:01 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_m3ArsfDFblVTFhh
[2016/04/16 23:51:06 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_1NRKKme7yyrr9dI
[2016/04/16 08:29:07 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_qThR9s8NWOvgQjx
[2016/04/16 07:04:12 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_PTdPINdowwe4e4a
[2016/04/15 19:40:55 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_QK8OHHBIHQQ9Kz8
[2016/04/15 17:10:22 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_x1HpaAMdbZd9mRh
[2016/04/15 16:47:55 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_UBcSOpLoEbgGrWv
[2016/04/15 15:03:24 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_YKnVu8YbspdacJr
[2016/04/15 14:49:31 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_4VXkxTEIdTgZngI
[2016/04/15 14:49:28 | 000,002,052 | -H-- | C] () -- C:\Users\Ali\etilqs_2iNFCUfvlVTUzhL
[2016/04/15 14:49:09 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_fLYbxULzMCXplto
[2016/04/14 14:42:59 | 000,002,052 | -H-- | C] () -- C:\Users\Ali\etilqs_0JhHhUb2sHKzsAX
[2016/04/14 12:13:53 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_chnuqAu8nfKjbMb
[2016/04/14 12:13:37 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_Y70SZeShXNfzp9Y
[2016/04/13 18:31:00 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_P0f6VjJc9Ee1ekK
[2016/04/13 17:49:56 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_BEe6Qfw0zGawUdD
[2016/04/13 16:26:58 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_vMQxMthcog7kgmm
[2016/04/13 13:10:18 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_9DbfZlJhbnjRWsN
[2016/04/13 13:10:18 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_MNu371IteIRW4sj
[2016/04/13 12:59:52 | 000,003,570 | ---- | C] () -- C:\Users\Ali\WERCB88.tmp.WERInternalMetadata.xml
[2016/04/13 07:23:20 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_On0yfnuDZyLdXgC
[2016/04/13 07:22:55 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_3IKkMf0rgZGgxwS
[2016/04/12 23:18:26 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_0Ne3sjTFZxwvtlm
[2016/04/12 18:21:03 | 000,002,052 | -H-- | C] () -- C:\Users\Ali\etilqs_p2kuXROXA2BAX5y
[2016/04/12 15:54:23 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_yEqUf0WAAu4X5SI
[2016/04/12 15:30:55 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_d6jgnFpzYuLAp07
[2016/04/12 15:28:00 | 000,000,000 | ---- | C] () -- C:\Users\Ali\79df9f48-3e0b-46e1-8d01-7d0c2ff760de.dmp
[2016/04/12 15:17:10 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_fxQsJ3a7bky6R7S
[2016/04/12 15:17:09 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_jBrceKYI1PU6XTm
[2016/04/11 19:07:10 | 000,002,052 | -H-- | C] () -- C:\Users\Ali\etilqs_LnbXitNh9UqSxY7
[2016/04/11 18:55:00 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_X2vezuVF5pOGebZ
[2016/04/11 17:04:34 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_qtcQoZ5BjuK1Sm5
[2016/04/11 16:34:44 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_Kwrz3yFjkw9W4SJ
[2016/04/11 16:12:15 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_WIQYSlRpcbx56yy
[2016/04/10 16:39:46 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_VhZoCjCU61Ws1gC
[2016/04/10 16:37:54 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_Aguy573GTeymaSx
[2016/04/10 16:24:40 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_mfALfatEIrbgEgR
[2016/04/10 13:38:58 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_hKILUoZtwsNfqjA
[2016/04/10 13:28:33 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_2a1x8vxOTf3bHCc
[2016/04/10 13:28:25 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_Q4BcNF0ofkTogzK
[2016/04/10 09:28:19 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_Pi2nOO674odNDld
[2016/04/10 09:26:49 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_noDs4Os4lghwHMV
[2016/04/10 09:08:15 | 000,008,200 | -H-- | C] () -- C:\Users\Ali\etilqs_AIqE2PlyX5bqFVF
[2016/04/10 09:08:15 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_hVWgMMuzFua12mY
[2016/04/10 09:00:14 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_f60e5rBJrfJBKo4
[2016/04/10 08:51:26 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_K0gBN0lGnBkQSdK
[2016/04/10 08:50:58 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_jvqU3GRemCCk9xz
[2016/04/09 15:06:37 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_ZehsFr4bSFW5WL5
[2016/04/09 15:03:08 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_GwnMFX9Q3t3IPcJ
[2016/04/09 15:02:41 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_OtLUdIa2Dboh032
[2016/04/08 17:00:00 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_AcKqpfq6D29Ojdy
[2016/04/08 16:13:03 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_uqQDI9DsEydJssG
[2016/04/08 16:09:59 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_HvATpxxb8zRekPs
[2016/04/08 15:25:00 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_7TXnPwh6qIcrhOD
[2016/04/07 17:55:10 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_Iutu7cqPgv8ioZE
[2016/04/07 17:23:52 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_hx4a0jy89S5uG6Y
[2016/04/07 17:23:33 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_IW785snKe4RgVNv
[2016/04/07 16:07:40 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_g3m8hx4sngNgPmJ
[2016/04/07 16:07:25 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_pLT2Mv6KPHKVBgQ
[2016/04/07 16:06:12 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_GNOtqIzyniVOSdW
[2016/04/06 12:43:48 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_Khgu7DVwgejDqD7
[2016/04/06 11:30:10 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_wdI65pZkmb1PIAm
[2016/04/06 11:29:43 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_DQ2xrhwT24LPkZs
[2016/04/05 18:58:36 | 000,816,418 | ---- | C] () -- C:\Users\Ali\bd269b2a-b472-49d5-b21f-ed5f0352b4c3.dmp
[2016/04/05 02:00:38 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_pTAHZBIBKQdrWVT
[2016/04/05 01:13:42 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_7CcrcrDV1Tnka5v
[2016/04/04 18:48:27 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_tdhHZC88K1DLFpr
[2016/04/04 18:48:17 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_nfgxGsntDbONyLL
[2016/04/04 18:47:18 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_fThmqQXlxdzjsbQ
[2016/04/03 19:00:07 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_tqIDlXUKPSwzYJM
[2016/04/03 12:50:35 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_sL2KkiYSE4cEPH0
[2016/04/03 09:51:39 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_8mY8fve4KB2DYs2
[2016/04/01 20:05:12 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_hbEUJXFkf5XlP74
[2016/04/01 13:55:21 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_15RXptfzDPOx0wq
[2016/04/01 13:52:53 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_haUwINrqgDpcY7d
[2016/03/31 11:14:52 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_4KedBY9bd1SDDPl
[2016/03/31 11:13:18 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_N8gHZmutqYk66Dq
[2016/03/31 10:59:45 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_AgI0SkAXnq8AIwQ
[2016/03/30 13:17:54 | 000,002,052 | -H-- | C] () -- C:\Users\Ali\etilqs_zpGeulvALjY55e7
[2016/03/30 10:19:13 | 000,020,500 | -H-- | C] () -- C:\Users\Ali\etilqs_gtWX1V202HBAboE
[2016/03/30 08:47:16 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_NeoDZCQrEyBFcPH
[2016/03/29 19:47:38 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_1LD7q77nMXleqBw
[2016/03/29 18:24:59 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_6xZvNOahvCIE34p
[2016/03/28 18:10:19 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_qNXTFsEr8O503Pp
[2016/03/28 13:18:10 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_4BPmcnUAzAbMDX5
[2016/03/26 20:19:51 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_UAIWRxKQcmGJna7
[2016/03/26 13:51:58 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_O7CiSChBylbeH3N
[2016/03/26 11:52:57 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_2gIJGKFewHxllzB
[2016/03/26 08:59:40 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_uKNCDpJVHOZljcU
[2016/03/26 07:50:39 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_cOo8wQqIISt5hu5
[2016/03/26 00:05:41 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_vIVU55fWLnrmwNI
[2016/03/25 22:46:08 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_tUMRjBKAVNap4LP
[2016/03/25 19:43:37 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_HzlY1bfehI4Sag9
[2016/03/25 17:11:03 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_UkxLdeqBrDaM8RP
[2016/03/25 16:28:08 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_djamHfsceKrvSMc
[2016/03/25 12:56:56 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_aq9KMUREIVjJvNE
[2016/03/23 11:32:59 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_bfCRpywcSNsd2HI
[2016/03/22 18:34:33 | 000,002,052 | -H-- | C] () -- C:\Users\Ali\etilqs_LxQUh6PXZ9F4hdY
[2016/03/22 18:34:06 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_3XSl2rgvjhhxyzY
[2016/03/22 18:07:36 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_3kmII3XjbKcxVhv
[2016/03/22 17:43:01 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_jtzkflHBOOaEgZK
[2016/03/20 00:15:07 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_5ZJAhgaRA3oSRJH
[2016/03/19 21:34:35 | 000,002,052 | -H-- | C] () -- C:\Users\Ali\etilqs_eXVk28ae2O5E1FA
[2016/03/19 21:05:39 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_nJBU93LStX9N8wd
[2016/03/18 17:04:42 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_Dh9NktrpDPb3fiL
[2016/03/18 16:55:57 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_inSndhpnlHYuXKs
[2016/03/18 16:47:54 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_JBwZZMdloNNNDO5
[2016/03/18 10:56:48 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_Bgd9h6YapdoNPQN
[2016/03/18 10:49:58 | 000,000,000 | ---- | C] () -- C:\Users\Ali\9fa81067-c598-471e-b51a-145021666729.dmp
[2016/03/18 10:47:30 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_x7TzMv1FV1IiJlR
[2016/03/18 07:22:32 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_ZR2gW2NkXijI0DP
[2016/03/18 01:22:25 | 000,002,052 | -H-- | C] () -- C:\Users\Ali\etilqs_0h4Qr1s8WN4N5mf
[2016/03/18 01:21:44 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_m24kw490vcvGdCX
[2016/03/18 01:21:16 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_xtahwaNsyg7dVBH
[2016/03/17 20:35:32 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_Avd0S9t4VPmjy11
[2016/03/17 16:28:23 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_5uuQKm2H8EJAcKa
[2016/03/16 15:07:48 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_kP7QxV7SUfYFMAG
[2016/03/16 11:49:48 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_si1DaVASPgQkmeF
[2016/03/14 19:26:01 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_apksFg2aPRnaiq0
[2016/03/14 18:15:22 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_Y45YlFKlECOO9zo
[2016/03/13 08:32:37 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_dfUDtp0qtDCtzAd
[2016/03/12 09:10:15 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_kPzRRw0UxEbXw8a
[2016/03/12 08:02:29 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_aTVtbsNL8HuLSKx
[2016/03/12 07:40:40 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_jZZpQtfe5qESuOX
[2016/03/11 19:08:23 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_KOv9QLcG7sYLXen
[2016/03/09 20:37:25 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_ovbGbtBABadbKii
[2016/03/09 11:55:04 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_QOUvEAWX74243M2
[2016/03/09 11:34:32 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_ICWOgb893a40kAW
[2016/03/09 11:20:56 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_U3TcabshaupLErp
[2016/03/08 14:59:43 | 000,781,896 | ---- | C] () -- C:\Users\Ali\c6a3c23f-5350-4ae0-8d4f-2e95949e5edf.dmp
[2016/03/06 12:25:37 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_1vpS2iRjGVDHmG7
[2016/03/06 12:00:39 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_8xB6437ECCrGZAK
[2016/03/06 02:50:17 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_iTvxoKCmHYbg7I9
[2016/03/06 01:27:50 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_dLaLtcWg7va8kQ0
[2016/03/05 19:09:36 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_EjHqdLsOcttwLGz
[2016/03/05 14:59:52 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_75McLc8smqrbKqs
[2016/03/05 10:06:00 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_lufSzsfBbYVj9um
[2016/03/05 10:04:42 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_lXuOnNjlUfeHunA
[2016/03/04 15:39:12 | 000,002,052 | -H-- | C] () -- C:\Users\Ali\etilqs_G0Q8LT5zD1cUXQ7
[2016/03/04 15:38:00 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_HdZvy0mSv7sj6lO
[2016/03/02 12:15:16 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_Mm6WjXoHih9T0od
[2016/03/02 11:54:27 | 000,002,052 | -H-- | C] () -- C:\Users\Ali\etilqs_M84syJHs1Ly3K5M
[2016/03/02 11:51:48 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_ht9aBfzClCIhI5B
[2016/03/02 03:02:14 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_pyLs9XVD4UnWzvw
[2016/03/02 01:56:28 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_rDjBeaHnCD9OZFv
[2016/03/02 00:21:47 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_FgDZrBaecfexOtN
[2016/03/01 23:53:46 | 000,002,052 | -H-- | C] () -- C:\Users\Ali\etilqs_SkLOYQRx2lfCBRn
[2016/03/01 23:53:42 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_YmVlj3dQd0L6b2g
[2016/03/01 23:53:25 | 000,012,300 | -H-- | C] () -- C:\Users\Ali\etilqs_ftLcBg9l7ipGBAd
[2016/02/24 11:20:13 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_Q6N6oMQCBkQWqgj
[2016/02/23 11:57:20 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_F4PX2icuyPQJSOb
[2016/02/23 11:05:01 | 000,008,200 | -H-- | C] () -- C:\Users\Ali\etilqs_gNB3RAU4Rwp8Zk8
[2016/02/22 18:48:01 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_IYDKRo1ScJKnO95
[2016/02/22 16:39:41 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_nuakzOBxrDSfaMM
[2016/02/22 15:29:22 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_Sa0YLtnczIUZxa3
[2016/02/22 15:19:51 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_lPA2fC67rhD1MIL
[2016/02/21 13:11:25 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_WIZNpd2TRjZPDNB
[2016/02/21 10:48:56 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_FEk1yfGdURnLJJi
[2016/02/20 17:36:19 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_g8D4ofgPgsliso6
[2016/02/20 12:08:07 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_sSwl0qWPYDUc84L
[2016/02/20 11:09:43 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_tnpEu8fNpW17i8M
[2016/02/20 10:50:19 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_ejGS6Gv9frY4zIY
[2016/02/20 07:24:18 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_CIUvOlmD5hvj9fM
[2016/02/19 00:09:10 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_sVvVcsvCISlgO1y
[2016/02/17 20:37:07 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_uby8sVzxQCBSQ6v
[2016/02/17 18:11:31 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_1jbbNFTRbm7fKO4
[2016/02/16 21:10:05 | 000,002,052 | -H-- | C] () -- C:\Users\Ali\etilqs_fq36Adh60px8cX9
[2016/02/16 17:54:26 | 000,020,500 | -H-- | C] () -- C:\Users\Ali\etilqs_S7pjf4hZ5cNWKRQ
[2016/02/16 15:29:13 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_nzpTgHCprmWN5Cd
[2016/02/15 19:31:25 | 000,002,052 | -H-- | C] () -- C:\Users\Ali\etilqs_3RHpKbpMRLML29I
[2016/02/15 19:31:00 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_OseXfIqxhgFzh6L
[2016/02/14 20:27:40 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_9F2wO5fJUo19723
[2016/02/14 20:02:51 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_yU2YCJ9BddH1Nx2
[2016/02/14 13:30:36 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_XLcfrQTbQzzVUDI
[2016/02/14 13:30:06 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_MFLdIHxohl1O9Ak
[2016/02/14 10:54:20 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_F3kzYGPFMqoBSsQ
[2016/02/13 15:54:16 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_Hlv37CyiCAqCaxo
[2016/02/12 17:00:35 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_93jhRT0tR2Or9Sa
[2016/02/12 16:18:19 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_dEglQMI4iDQgBvR
[2016/02/10 13:41:50 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_1aypCyFNzFQENe6
[2016/02/10 13:38:46 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_u53Al38JZ4k9myO
[2016/02/07 11:29:54 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_fs3mN47epqamBUZ
[2016/02/07 11:27:44 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_qZP1XayBSeHGdjV
[2016/02/07 07:57:28 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_6083QhAVbR0bbjp
[2016/02/07 01:28:49 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_jNn0CkMG7omAiIM
[2016/02/06 13:05:11 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_8nWKi97NneTZuJg
[2016/02/06 08:56:32 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_Cw57H3jD28Sasom
[2016/02/06 08:48:40 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_2x4hGCuGHCo4avr
[2016/02/06 02:53:18 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_tV5HHn8AKUi9t1o
[2016/02/05 20:24:36 | 000,024,600 | -H-- | C] () -- C:\Users\Ali\etilqs_HGnNXQYXe7D7KEo
[2016/02/05 18:42:31 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_wNngBH0myHilhSB
[2016/02/05 16:47:24 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_UjmA6fIjtmaQkzL
[2016/02/04 14:25:06 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_QoTmiXItZSFZc48
[2016/02/03 14:10:08 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_9ciarTDpElJfgyY
[2016/02/03 12:10:40 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_IQxQiC4XWbZx1Eh
[2016/02/03 05:41:43 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_ggXvpXU95eOT08m
[2016/02/02 18:58:00 | 000,002,052 | -H-- | C] () -- C:\Users\Ali\etilqs_J80xwak4l01dKRk
[2016/02/02 18:56:08 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_o7ukQaGuGvbGe24
[2016/02/01 16:30:03 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_MytSKs8fi2ngbUb
[2016/01/31 20:41:27 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_4oDzl27Vdx8dSnh
[2016/01/30 13:00:03 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_InefhavWffcHCJT
[2016/01/30 12:50:20 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_8SmNrM16gUtMMYB
[2016/01/30 12:10:24 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_auBGuAukgbJ8aEg
[2016/01/30 09:31:21 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_HHai6fkaSKOXuUR
[2016/01/30 09:19:27 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_JDW0cgonlmhnSHE
[2016/01/29 23:59:11 | 000,798,857 | ---- | C] () -- C:\Users\Ali\5a16e7d5-316b-4963-b2fc-5b8a272f8ae8.dmp
[2016/01/28 17:14:17 | 000,002,052 | -H-- | C] () -- C:\Users\Ali\etilqs_0Vk13yxP8xFvsRb
[2016/01/28 17:11:56 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_YUY2JVOenetvyHr
[2016/01/27 10:18:53 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_DbC26TQTFC7Jx2o
[2016/01/26 12:22:28 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_2TYr96i9EYoJRSU
[2016/01/26 12:21:08 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_cvwH4MbjUaG6eo7
[2016/01/25 23:17:29 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_6NnxKe3mF5Rl1Ji
[2016/01/25 22:21:42 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_pItIR5780fhfoFU
[2016/01/25 16:43:14 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_zCthsojthJgjtiW
[2016/01/25 16:40:52 | 000,004,104 | -H-- | C] () -- C:\Users\Ali\etilqs_TrvlEcYuyYgUir9
[2016/01/25 16:40:51 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_GP65NVY5e9DpufB
[2016/01/16 20:03:52 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_0CtVX9KMXzghRnK
[2016/01/14 08:34:29 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_32ONw3LW9GF1OCI
[2016/01/14 00:48:02 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_U5zbwiSYNs2utwP
[2016/01/13 23:11:46 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_GxnbYlhhsfxvlkY
[2016/01/13 12:24:56 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_yJYzLVBFo5wpsof
[2016/01/13 11:58:56 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_KiX7tJXzMeiuAOq
[2016/01/12 19:27:41 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_oKLWHONJ17saELL
[2016/01/12 16:12:32 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_cHG8OE33n32WJ7j
[2016/01/08 16:23:06 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_ysZA0RACy6CXbkC
[2016/01/08 10:41:02 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_eSr0cRhbnyUZzs7
[2016/01/07 20:02:03 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_WcsrzulNxoKIuez
[2016/01/07 15:09:39 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_IUga7UlDXGLbl3b
[2016/01/06 16:14:52 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_MVvnzDcpfFFhbWQ
[2016/01/06 11:35:09 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_ahiNvs9vpkaamff
[2016/01/06 08:09:22 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_bP5t6nVNCpCkYYd
[2016/01/02 22:20:40 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_e0kEfbPULbgToWk
[2016/01/02 20:39:33 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_cvNfzKZCBDNKH9j
[2016/01/02 20:31:37 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_gd70Bidfb5gN6sy
[2016/01/02 20:17:12 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_h3JNgJi1jbybHpK
[2016/01/02 15:32:50 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_LwejBtnEDc1iI5r
[2016/01/02 13:28:25 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_PIQvFzXKLw6LSmA
[2016/01/02 10:58:59 | 000,000,004 | -H-- | C] () -- C:\Users\Ali\etilqs_z7h4l0EvfdpqnTn
[2016/01/02 10:41:17 | 000,012,304 | -H-- | C] () -- C:\Users\Ali\etilqs_D1LjUxUMIDulG82
[2016/01/01 22:01:17 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_SuyvWJSnOarCuww
[2016/01/01 22:01:16 | 000,004,100 | -H-- | C] () -- C:\Users\Ali\etilqs_2JOhUogUB96u40n
[2015/12/31 20:53:03 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_ZAGPSHQpAso1gKk
[2015/12/31 20:53:03 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_axCRzx3WxHAm6SJ
[2015/12/31 00:38:00 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_ckYHD5racarh71k
[2015/12/31 00:38:00 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_ygGUvuc1OBcqzkR
[2015/12/29 17:05:03 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_SW9anZ9VwFhV9hb
[2015/12/29 17:05:03 | 000,000,000 | -H-- | C] () -- C:\Users\Ali\etilqs_9dLaYw1dcho3IZH
[2015/12/28 18:35:54 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_r9cKpMKpkenUTaQ
[2015/12/28 18:35:54 | 000,000,000 | -H-- | C] () -- C:\Users\Ali\etilqs_vRoaHSIjfiNwfkB
[2015/12/28 13:09:39 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_uXXOtOtfYsF0Itj
[2015/12/28 13:09:39 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_PTxCS9dC5zzozUc
[2015/12/27 21:31:19 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_fNHl6ZgQXlCjlgZ
[2015/12/27 21:31:19 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_zQglz7oU0n6eZTe
[2015/12/27 21:31:17 | 000,016,400 | -H-- | C] () -- C:\Users\Ali\etilqs_Jryx4gJuoqcBEdJ
[2015/12/27 18:28:01 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_KdDoyxx5hZwBVW8
[2015/12/27 18:28:01 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_eEoiWsF5JgOsJhY
[2015/12/27 17:00:30 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_b1E5gCJdgetOTEt
[2015/12/27 17:00:30 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_SAQOSu1BHFKOPjM
[2015/12/27 13:30:14 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_2cGReb8lPDCBIqr
[2015/12/27 13:30:14 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_uX6kkuIOKgKhwOn
[2015/12/22 18:45:13 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_MexFkeJshvtsUce
[2015/12/22 18:45:13 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_NQU1iUvSqpLl2Q2
[2015/12/22 17:14:39 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_WnhSydSPXNeDf0c
[2015/12/22 17:14:39 | 000,000,000 | -H-- | C] () -- C:\Users\Ali\etilqs_4rIIzYhm5ZvOaPu
[2015/12/21 19:32:19 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_q4b8ilcliWSQ8ag
[2015/12/21 19:32:19 | 000,000,000 | -H-- | C] () -- C:\Users\Ali\etilqs_moj8VheidQ4QKsG
[2015/12/20 13:46:25 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_Tfua8d7YbRABres
[2015/12/20 13:46:25 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_436M6Stb8TKByVb
[2015/12/20 11:29:09 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_RRVKWnbLnGUCwWX
[2015/12/20 11:29:09 | 000,000,000 | -H-- | C] () -- C:\Users\Ali\etilqs_l4LHrc3QUKR3s3o
[2015/12/19 15:12:54 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_QAEEfhH1bEKcxY9
[2015/12/19 15:12:54 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_a3g6AVj51SJXBG2
[2015/12/19 12:48:28 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_rOHWjBJaJXb4ZF7
[2015/12/19 12:48:28 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_8Ke8pI8uXxcWfNm
[2015/12/17 21:20:52 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_maicGwZmAYhafyF
[2015/12/17 21:20:52 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_khBnrIsgbL2LcXi
[2015/12/17 18:45:11 | 000,000,516 | -H-- | C] () -- C:\Users\Ali\etilqs_27h8dmxEap6N7Is
[2015/12/17 18:45:11 | 000,000,000 | -H-- | C] () -- C:\Users\Ali\etilqs_VbX0sfFewpjrb7K
[2015/12/17 18:33:30 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_tPk01Ckwnh6aP6d
[2015/12/17 18:33:30 | 000,000,000 | -H-- | C] () -- C:\Users\Ali\etilqs_UWrjNU4aFToVnOu
[2015/12/15 19:43:27 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_AqdczAVXkshMv5a
[2015/12/15 19:43:27 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_C0kHdq87Swv00ih
[2015/12/14 19:34:24 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_BNa3bXTabhXXnMg
[2015/12/14 19:34:24 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_jVXlNKce1k0Zpfk
[2015/12/14 04:34:53 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_ZF8eedJWHB0kmNT
[2015/12/14 04:34:53 | 000,000,000 | -H-- | C] () -- C:\Users\Ali\etilqs_jA4IOGd4vDsnyzx
[2015/12/13 03:36:57 | 002,392,064 | R--- | C] () -- C:\Users\Ali\VTS_01_1-1.mpg
[2015/12/13 03:30:09 | 002,392,064 | R--- | C] () -- C:\Users\Ali\VTS_01_1.mpg
[2015/12/13 03:22:10 | 000,000,516 | -H-- | C] () -- C:\Users\Ali\etilqs_lSt5cjOWeLE42KX
[2015/12/13 03:22:10 | 000,000,000 | -H-- | C] () -- C:\Users\Ali\etilqs_dBCpg7kSGzd37LM
[2015/12/13 03:17:18 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_dCB2WgvPOC164zR
[2015/12/13 03:17:18 | 000,000,000 | -H-- | C] () -- C:\Users\Ali\etilqs_dv0emdXrdsDvvq6
[2015/12/12 13:39:55 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_GK5E9ZKBt9a0agc
[2015/12/12 13:39:55 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_muEuOiS3ODMmGMQ
[2015/12/11 17:47:44 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_w0jfpfnNqYViLT1
[2015/12/11 17:47:44 | 000,000,000 | -H-- | C] () -- C:\Users\Ali\etilqs_Ep5xCIOyFlTrrOh
[2015/12/10 19:28:23 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_gyVEjCtiS26tqzo
[2015/12/10 19:28:23 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_CBRLpudh3ICOxiI
[2015/12/09 17:33:09 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_94MOATkRaJfpxRl
[2015/12/09 17:33:09 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_gcnRftgXpLwdoRC
[2015/12/07 00:42:17 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_9A3M7AwT5NsfcfW
[2015/12/07 00:42:16 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_S4B8Q6KXLfgmbgg
[2015/12/06 06:43:07 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_I41oqsGFaY9vt40
[2015/12/06 06:43:07 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_jDm0VezvXe9E2Id
[2015/12/03 20:58:02 | 000,201,209 | ---- | C] () -- C:\Users\Ali\EOQhEaAU.htm.part
[2015/12/02 14:17:04 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_9LHpYn1tWngQ21P
[2015/12/02 14:17:04 | 000,000,000 | -H-- | C] () -- C:\Users\Ali\etilqs_L3UDRcgWjMY3S5u
[2015/12/01 05:51:36 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_tehpAg5NX5aN5Jc
[2015/12/01 05:51:36 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_D4u3dhcYLDdtKZX
[2015/12/01 00:22:05 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_EQk3IMnf7gndt32
[2015/12/01 00:22:05 | 000,000,000 | -H-- | C] () -- C:\Users\Ali\etilqs_Z8PB9fZPNzW8K7P
[2015/11/29 12:49:07 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_6RbaFPvn4WNhFKd
[2015/11/29 12:49:07 | 000,000,000 | -H-- | C] () -- C:\Users\Ali\etilqs_9Pvbn2P9JJrR7HV
[2015/11/27 19:41:14 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_Kjb2y4YQdfj1Ioh
[2015/11/27 19:41:14 | 000,000,000 | -H-- | C] () -- C:\Users\Ali\etilqs_AP6a0zsGarZrZmn
[2015/11/27 03:27:10 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_Ux6dQbhMbEFRzSe
[2015/11/27 03:27:10 | 000,000,000 | -H-- | C] () -- C:\Users\Ali\etilqs_ieDveYDeGeZ3vSv
[2015/11/26 01:39:32 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_9fxZke6lmowVsNm
[2015/11/26 01:39:32 | 000,000,000 | -H-- | C] () -- C:\Users\Ali\etilqs_WbX4XTQsljkXnTT
[2015/11/25 22:49:38 | 000,384,704 | ---- | C] () -- C:\Users\Ali\CO_FLAM_Lancelot_ou_le_chevalier_a_la_charette.pdf
[2015/11/25 22:48:22 | 000,129,583 | ---- | C] () -- C:\Users\Ali\chevalier-de-la-charrette_resume-par-chap-1.pdf
[2015/11/20 21:39:39 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_KwN9tH0jrflGNfC
[2015/11/20 21:39:39 | 000,000,000 | -H-- | C] () -- C:\Users\Ali\etilqs_Zchnn08eNVtaa2S
[2015/11/19 19:58:15 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_qDIsnTKerqMNMlt
[2015/11/19 19:58:15 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_gP9qwbDTHmG2Glr
[2015/11/19 06:29:21 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_Qa5B6seYaBmIwGE
[2015/11/19 06:29:21 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_UeKLTwkMdQFAdxv
[2015/11/18 06:12:37 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_26vKWjbIQJwDrJQ
[2015/11/18 06:12:37 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_gDIxx6P6HfqDsDG
[2015/11/17 05:51:22 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_GgtUyNshIkWJ6B5
[2015/11/17 05:51:21 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_IkLtg6Y2TI1Q8Jt
[2015/11/13 06:02:53 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_s9q5woDDVEhivzN
[2015/11/13 06:02:53 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_yGU7qr9iFFrfWly
[2015/11/12 18:25:45 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_GZbDal1o1P5ARh1
[2015/11/12 18:25:45 | 000,000,000 | -H-- | C] () -- C:\Users\Ali\etilqs_7td2Ohjz0jSiaZh
[2015/11/12 06:09:51 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_sh67abj6Pyrxfpg
[2015/11/12 06:09:51 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_FdZhQklkmiGDVmZ
[2015/11/07 14:31:56 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_eJz6rwadySNI6J9
[2015/11/07 14:31:56 | 000,000,000 | -H-- | C] () -- C:\Users\Ali\etilqs_Ytr05FsVFmHX4ob
[2015/11/04 23:33:51 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_bXi4EK97BTCzbUS
[2015/11/04 23:33:51 | 000,000,000 | -H-- | C] () -- C:\Users\Ali\etilqs_HzWnBDNN2rcxsvg
[2015/11/04 23:06:55 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_MjxqGztu5KUW3h7
[2015/11/04 23:06:55 | 000,000,000 | -H-- | C] () -- C:\Users\Ali\etilqs_smUbnAKyaDxADjc
[2015/11/01 22:40:24 | 000,104,960 | R--- | C] () -- C:\Users\Ali\308-2.pdf
[2015/11/01 22:28:39 | 006,027,491 | R--- | C] () -- C:\Users\Ali\sitbus2014-3.pdf
[2015/11/01 22:28:27 | 006,027,491 | R--- | C] () -- C:\Users\Ali\sitbus2014-2.pdf
[2015/11/01 22:28:25 | 006,027,491 | R--- | C] () -- C:\Users\Ali\sitbus2014-1.pdf
[2015/11/01 22:28:21 | 006,027,491 | R--- | C] () -- C:\Users\Ali\sitbus2014.pdf
[2015/10/29 21:49:28 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_8r0VyadSfKapIaX
[2015/10/29 21:49:28 | 000,000,000 | -H-- | C] () -- C:\Users\Ali\etilqs_Hi6Qy4Dd3b0Yfhb
[2015/10/28 18:16:57 | 000,144,975 | R--- | C] () -- C:\Users\Ali\LG_G4_50Euros.pdf
[2015/10/28 14:20:21 | 000,000,516 | -H-- | C] () -- C:\Users\Ali\etilqs_qhYr6mtEqjoarBY
[2015/10/28 14:20:21 | 000,000,000 | -H-- | C] () -- C:\Users\Ali\etilqs_gF65eIrc4B6AXZq
[2015/10/28 11:27:20 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_MSEi7zFLCU8YYo4
[2015/10/28 11:27:20 | 000,000,000 | -H-- | C] () -- C:\Users\Ali\etilqs_smcW1XnutSXSyu3
[2015/10/21 10:59:47 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_rL72F0dLHjVpQmi
[2015/10/21 10:59:47 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_bUAhruvkxVj2Fq5
[2015/10/20 04:34:47 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_neNpLk0iRUQ65Wc
[2015/10/20 04:34:47 | 000,000,000 | -H-- | C] () -- C:\Users\Ali\etilqs_o3YArVkchfoOadI
[2015/09/23 18:12:59 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_erYkPGcXaf15sZ2
[2015/09/23 18:12:59 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_AWVrZePDV2f5qMb
[2015/09/20 10:55:49 | 000,000,000 | -H-- | C] () -- C:\Users\Ali\etilqs_AhsdlIIwSN59v2p
[2015/09/20 10:55:48 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_Z9z3BRDdH9gHgxZ
[2015/09/20 09:12:57 | 000,000,516 | -H-- | C] () -- C:\Users\Ali\etilqs_Mp4jkBCUmw6K5X0
[2015/09/20 09:12:57 | 000,000,000 | -H-- | C] () -- C:\Users\Ali\etilqs_gEFpFi0rUNLttdn
[2015/09/20 08:28:45 | 000,000,000 | -H-- | C] () -- C:\Users\Ali\etilqs_YRMkH9Y9m3uOXQa
[2015/09/20 08:28:44 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_jlSBQwYeHeMyGWz
[2015/09/20 08:02:58 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_oLFVK2X8LTx8ceX
[2015/09/20 08:02:58 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_kVoGYV42RtNdfTd
[2015/09/18 21:26:29 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_Uu92Ydo8Jknnt3W
[2015/09/18 21:26:29 | 000,000,000 | -H-- | C] () -- C:\Users\Ali\etilqs_w7kaN2DeQIlyvbL
[2015/09/16 12:46:55 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_CZ9oHVevaObuEbe
[2015/09/16 12:46:55 | 000,000,000 | -H-- | C] () -- C:\Users\Ali\etilqs_aCYTxeabvy75kXG
[2015/09/13 22:34:42 | 000,013,894 | ---- | C] () -- C:\Users\Ali\FICHE_TRAME_DU_CONTE.pdf
[2015/09/11 21:55:30 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_R6CfdcuTRDb3uEq
[2015/09/11 21:55:30 | 000,000,000 | -H-- | C] () -- C:\Users\Ali\etilqs_RRghZlIqcK4VsEM
[2015/09/08 18:37:58 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_ixefyOHRi7TfSFj
[2015/09/08 18:37:58 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_yrHof22cKvPyIPH
[2015/09/08 04:48:07 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_9Xg1pfBs5qTAkiR
[2015/09/08 04:48:07 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_3dD7ZlEnwTKrTnr
[2015/09/07 13:05:36 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_BDCOICBByTUyurv
[2015/09/07 13:05:36 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_Su2z8cIN5uHIGkL
[2015/09/07 06:09:34 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_n8Hzg5Sz3f8noOF
[2015/09/07 06:09:34 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_3pur0p2rSIQviJ5
[2015/09/04 14:46:54 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_sG2tEgQYfkUQJW8
[2015/09/04 14:46:54 | 000,000,000 | -H-- | C] () -- C:\Users\Ali\etilqs_zHTqsI9nXohca9B
[2015/09/04 07:33:55 | 000,033,288 | -H-- | C] () -- C:\Users\Ali\etilqs_BglouoP6UeCWjMA
[2015/09/04 07:33:55 | 000,000,000 | -H-- | C] () -- C:\Users\Ali\etilqs_9bN0Op0T2kd3ZgC
[2015/09/04 06:14:23 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_GTJ3onpiMEJSiNJ
[2015/09/04 06:14:23 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_EWakUbr0BGW1MoB
[2015/09/03 07:16:51 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_K0mATlHtZUkJv5v
[2015/09/03 07:16:50 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_kqnArv1qnYgGa6I
[2015/09/02 21:04:36 | 000,104,960 | R--- | C] () -- C:\Users\Ali\308-1.pdf
[2015/09/02 21:02:00 | 000,104,960 | R--- | C] () -- C:\Users\Ali\308.pdf
[2015/08/31 01:59:46 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_G340MYbKuFiC0Nd
[2015/08/31 01:59:46 | 000,000,000 | -H-- | C] () -- C:\Users\Ali\etilqs_qZNO9PeVNL4Du05
[2015/08/31 01:57:21 | 000,098,305 | R--- | C] () -- C:\Users\Ali\220.pdf
[2015/08/31 01:57:19 | 000,262,229 | R--- | C] () -- C:\Users\Ali\h_220.pdf
[2015/08/31 01:57:11 | 000,456,567 | R--- | C] () -- C:\Users\Ali\e_220.pdf
[2015/08/31 01:27:00 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_AzJIs6iDu4Oq0gR
[2015/08/31 01:27:00 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_Cvfm0KtYJUaSKz6
[2015/08/30 11:27:15 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_VfpfaasPSxoVeYA
[2015/08/30 11:27:15 | 000,000,000 | -H-- | C] () -- C:\Users\Ali\etilqs_IGhByrkWfJp60Vq
[2015/08/29 21:24:36 | 000,573,910 | R--- | C] () -- C:\Users\Ali\2357_ag_octobre_2007.pdf
[2015/08/29 17:59:01 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_Shb8fSlV5Ed9pm6
[2015/08/29 17:59:01 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_1rheV0XRy2wGJ3V
[2015/08/29 06:43:37 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_o75hGTK0SpEzESQ
[2015/08/29 06:43:37 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_bCetC8msnu04xWz
[2015/08/28 13:01:37 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_UxdpcYbYl3piEbH
[2015/08/28 13:01:37 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_vVcdCyhxm3CbOTC
[2015/08/23 07:28:06 | 000,032,768 | -H-- | C] () -- C:\Users\Ali\etilqs_3giT5gB1g98DlLO
[2015/08/23 07:28:06 | 000,000,512 | -H-- | C] () -- C:\Users\Ali\etilqs_FN5cXMzxbjNhhyq
[2015/08/15 20:52:32 | 000,007,606 | ---- | C] () -- C:\Users\Ali\AppData\Local\Resmon.ResmonCfg
[2015/03/24 19:45:57 | 000,000,008 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2014/07/21 13:59:33 | 000,000,664 | RHS- | C] () -- C:\Users\Ali\ntuser.pol
[2014/05/24 07:40:05 | 000,000,095 | ---- | C] () -- C:\Users\Ali\AppData\Roaming\WB.CFG

[color=#E56717]========== ZeroAccess Check ==========[/color]

[2009/07/14 06:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2015/07/10 19:34:07 | 012,875,776 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009/07/14 03:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[color=#E56717]========== LOP Check ==========[/color]

[2014/03/27 21:56:46 | 000,000,000 | ---D | M] -- C:\Users\Ali\AppData\Roaming\Activeris
[2014/06/21 22:05:08 | 000,000,000 | ---D | M] -- C:\Users\Ali\AppData\Roaming\ARecEngine
[2014/01/22 14:23:17 | 000,000,000 | ---D | M] -- C:\Users\Ali\AppData\Roaming\AVAST Software
[2016/07/15 20:17:12 | 000,000,000 | ---D | M] -- C:\Users\Ali\AppData\Roaming\cacaoweb
[2015/04/05 07:59:51 | 000,000,000 | ---D | M] -- C:\Users\Ali\AppData\Roaming\Dropbox
[2015/03/25 07:44:12 | 000,000,000 | ---D | M] -- C:\Users\Ali\AppData\Roaming\DropboxMaster
[2014/08/08 13:04:14 | 000,000,000 | -H-D | M] -- C:\Users\Ali\AppData\Roaming\GoldenGate
[2015/10/04 15:47:21 | 000,000,000 | ---D | M] -- C:\Users\Ali\AppData\Roaming\iLinker
[2014/02/09 09:22:59 | 000,000,000 | ---D | M] -- C:\Users\Ali\AppData\Roaming\IminentToolbar
[2015/02/23 15:09:26 | 000,000,000 | ---D | M] -- C:\Users\Ali\AppData\Roaming\Leadertech
[2014/02/09 09:22:58 | 000,000,000 | ---D | M] -- C:\Users\Ali\AppData\Roaming\OfferBox
[2014/06/21 22:05:16 | 000,000,000 | ---D | M] -- C:\Users\Ali\AppData\Roaming\OpenCandy
[2015/02/01 10:18:05 | 000,000,000 | ---D | M] -- C:\Users\Ali\AppData\Roaming\Origin
[2014/06/28 00:34:18 | 000,000,000 | ---D | M] -- C:\Users\Ali\AppData\Roaming\SimplyTech
[2014/02/09 09:22:58 | 000,000,000 | ---D | M] -- C:\Users\Ali\AppData\Roaming\System Speedup
[2015/09/21 04:18:21 | 000,000,000 | ---D | M] -- C:\Users\Ali\AppData\Roaming\Systweak
[2014/02/02 11:38:53 | 000,000,000 | ---D | M] -- C:\Users\Ali\AppData\Roaming\Unity
[2015/03/10 21:58:30 | 000,000,000 | ---D | M] -- C:\Users\Ali\AppData\Roaming\webssearches
[2015/08/12 18:29:32 | 000,000,000 | ---D | M] -- C:\Users\Ali\AppData\Roaming\WTools

[color=#E56717]========== Purity Check ==========[/color]



[color=#E56717]========== Custom Scans ==========[/color]

[color=#A23BEC]< >[/color]
[2009/07/14 06:53:46 | 000,032,482 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU(14).TXT
[2009/07/14 06:53:46 | 000,032,482 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2009/07/14 06:53:46 | 000,032,496 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU(19).TXT
[2009/07/14 06:53:47 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2014/01/26 22:34:50 | 000,001,002 | ---- | C] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
[2014/01/26 22:35:12 | 000,001,046 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2014/01/26 22:35:12 | 000,001,050 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
[2014/03/27 21:28:48 | 000,003,106 | ---- | C] () -- C:\Windows\Tasks\905be836-b0dc-452a-a46c-7eba1ce8d790-3.job
[2014/03/27 21:29:11 | 000,002,348 | ---- | C] () -- C:\Windows\Tasks\905be836-b0dc-452a-a46c-7eba1ce8d790-4.job
[2014/03/27 21:29:34 | 000,003,442 | ---- | C] () -- C:\Windows\Tasks\1d58acf1-29e5-4c8e-a536-e04dd320ab01-3.job
[2014/03/27 21:30:17 | 000,002,404 | ---- | C] () -- C:\Windows\Tasks\1d58acf1-29e5-4c8e-a536-e04dd320ab01-4.job
[2014/03/27 21:30:21 | 000,001,448 | ---- | C] () -- C:\Windows\Tasks\905be836-b0dc-452a-a46c-7eba1ce8d790-2.job
[2014/03/27 21:30:42 | 000,001,604 | ---- | C] () -- C:\Windows\Tasks\905be836-b0dc-452a-a46c-7eba1ce8d790-5.job
[2014/03/27 21:31:05 | 000,001,496 | ---- | C] () -- C:\Windows\Tasks\1d58acf1-29e5-4c8e-a536-e04dd320ab01-2.job
[2014/03/27 21:31:26 | 000,001,652 | ---- | C] () -- C:\Windows\Tasks\1d58acf1-29e5-4c8e-a536-e04dd320ab01-5.job
[2014/06/28 00:29:59 | 000,003,092 | ---- | C] () -- C:\Windows\Tasks\359574b4-2a49-4687-a222-c0866f5b7f22-3.job
[2014/06/28 00:30:53 | 000,003,430 | ---- | C] () -- C:\Windows\Tasks\359574b4-2a49-4687-a222-c0866f5b7f22-11.job
[2014/06/28 00:32:02 | 000,001,504 | ---- | C] () -- C:\Windows\Tasks\359574b4-2a49-4687-a222-c0866f5b7f22-6.job
[2014/06/28 00:32:41 | 000,002,150 | ---- | C] () -- C:\Windows\Tasks\359574b4-2a49-4687-a222-c0866f5b7f22-4.job
[2014/06/28 00:33:09 | 000,001,512 | ---- | C] () -- C:\Windows\Tasks\359574b4-2a49-4687-a222-c0866f5b7f22-1.job
[2014/06/28 00:33:16 | 000,001,292 | ---- | C] () -- C:\Windows\Tasks\359574b4-2a49-4687-a222-c0866f5b7f22-2.job
[2014/06/28 00:33:34 | 000,001,382 | ---- | C] () -- C:\Windows\Tasks\359574b4-2a49-4687-a222-c0866f5b7f22-5.job
[2014/06/28 00:33:38 | 000,001,402 | ---- | C] () -- C:\Windows\Tasks\359574b4-2a49-4687-a222-c0866f5b7f22-5_user.job
[2016/05/10 21:12:02 | 000,000,214 | ---- | C] () -- C:\Windows\Tasks\CreateChoiceProcessTask.job

[color=#A23BEC]< %SYSTEMDRIVE%\*.* >[/color]
[2015/08/17 13:15:48 | 000,003,224 | ---- | M] () -- C:\bootsqm.dat
[2016/07/15 20:18:28 | 1583,276,032 | -HS- | M] () -- C:\hiberfil.sys
[2016/05/10 20:49:07 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2016/05/10 20:49:07 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2016/07/15 20:18:28 | 2111,037,440 | -HS- | M] () -- C:\pagefile.sys
[2016/07/15 20:24:40 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin

[color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]

[color=#A23BEC]< %PROGRAMFILES%\*.* >[/color]
[2009/07/14 06:41:57 | 000,000,174 | -HS- | M] () -- C:\Program Files\desktop.ini

[color=#A23BEC]< %PROGRAMFILES%\*. >[/color]
[2014/03/31 21:10:40 | 000,000,000 | ---D | M] -- C:\Program Files\Activeris AntiMalware
[2014/01/22 14:07:28 | 000,000,000 | ---D | M] -- C:\Program Files\Adobe
[2016/05/20 16:20:18 | 000,000,000 | ---D | M] -- C:\Program Files\Advanced System Protector
[2016/07/12 02:18:11 | 000,000,000 | ---D | M] -- C:\Program Files\AVAST Software
[2015/07/19 08:52:22 | 000,000,000 | ---D | M] -- C:\Program Files\Avira
[2016/02/04 23:04:34 | 000,000,000 | ---D | M] -- C:\Program Files\Common Files
[2014/07/12 13:36:12 | 000,000,000 | ---D | M] -- C:\Program Files\DVD Maker
[2015/03/08 12:58:09 | 000,000,000 | ---D | M] -- C:\Program Files\Electronic Arts
[2014/01/22 14:36:44 | 000,000,000 | -HSD | M] -- C:\Program Files\Fichiers communs
[2015/08/13 06:14:19 | 000,000,000 | ---D | M] -- C:\Program Files\Google
[2015/08/13 06:14:32 | 000,000,000 | ---D | M] -- C:\Program Files\Internet Explorer
[2015/08/15 22:20:26 | 000,000,000 | ---D | M] -- C:\Program Files\Java
[2016/07/14 22:39:31 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Games
[2015/05/13 06:11:47 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Security Client
[2015/08/13 03:49:21 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Silverlight
[2016/01/02 04:53:06 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox
[2016/01/02 04:53:06 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Maintenance Service
[2016/07/14 22:58:00 | 000,000,000 | ---D | M] -- C:\Program Files\MSBuild
[2016/05/10 20:59:30 | 000,000,000 | ---D | M] -- C:\Program Files\NVIDIA Corporation
[2015/08/18 16:11:29 | 000,000,000 | ---D | M] -- C:\Program Files\Razer
[2009/07/14 06:52:30 | 000,000,000 | ---D | M] -- C:\Program Files\Reference Assemblies
[2016/07/14 22:37:07 | 000,000,000 | ---D | M] -- C:\Program Files\ROUTES
[2014/02/07 19:22:22 | 000,000,000 | ---D | M] -- C:\Program Files\Software
[2016/07/15 20:17:06 | 000,000,000 | ---D | M] -- C:\Program Files\Steam
[2009/07/14 06:53:23 | 000,000,000 | -H-D | M] -- C:\Program Files\Uninstall Information
[2014/01/31 05:13:55 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Defender
[2015/05/13 23:20:23 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Journal
[2014/01/30 04:59:42 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Mail
[2015/06/11 19:44:04 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Media Player
[2014/01/22 14:36:44 | 000,000,000 | ---D | M] -- C:\Program Files\Windows NT
[2014/01/30 04:59:42 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Photo Viewer
[2014/01/30 04:59:42 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Portable Devices
[2014/01/30 04:59:42 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Sidebar
[2015/08/15 22:25:21 | 000,000,000 | ---D | M] -- C:\Program Files\Yahoo!

[color=#A23BEC]< MD5 for: AGP440.SYS >[/color]
[2009/07/14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\drivers\AGP440.sys
[2009/07/14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_a97a2a0d0fbc6696\AGP440.sys
[2009/07/14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_bc1a57271cf2f285\AGP440.sys

[color=#A23BEC]< MD5 for: APPMGMTS.DLL >[/color]
[2009/07/14 03:14:53 | 000,149,504 | ---- | M] (Microsoft Corporation) MD5=A45D184DF6A8803DA13A0B329517A64A -- C:\Windows\winsxs\x86_microsoft-windows-g..oftwareinstallation_31bf3856ad364e35_6.1.7600.16385_none_81a53e87bd5d36aa\appmgmts.dll

[color=#A23BEC]< MD5 for: ATAPI.SYS >[/color]
[2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys
[2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_a5025d31bee4647c\atapi.sys
[2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_fab873f3e8a3315c\atapi.sys
[2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_df3f92057fcbe7a7\atapi.sys
[2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.18231_none_df26d4d57fdef5b0\atapi.sys
[2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.22414_none_dfc9143c98e9a6c4\atapi.sys

[color=#A23BEC]< MD5 for: AUTOCHK.EXE >[/color]
[2010/11/20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\System32\autochk.exe
[2010/11/20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

[color=#A23BEC]< MD5 for: BEEP.SYS >[/color]
[2009/07/14 01:45:01 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=505506526A9D467307B3C393DEDAF858 -- C:\Windows\System32\drivers\beep.sys
[2009/07/14 01:45:01 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=505506526A9D467307B3C393DEDAF858 -- C:\Windows\winsxs\x86_microsoft-windows-beepsys_31bf3856ad364e35_6.1.7600.16385_none_c3f6f77668f0ddcc\beep.sys

[color=#A23BEC]< MD5 for: CNGAUDIT.DLL >[/color]
[2009/07/14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\System32\cngaudit.dll
[2009/07/14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll

[color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color]
[2011/02/26 07:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_54149f9ef14031fc\explorer.exe
[2010/11/20 14:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_53bc10fdd7fe87ca\explorer.exe
[2011/02/25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\explorer.exe
[2011/02/25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_5389023fd8245f84\explorer.exe

[color=#A23BEC]< MD5 for: HIDSERV.DLL >[/color]
[2009/07/14 03:15:24 | 000,049,152 | ---- | M] (Microsoft Corporation) MD5=2BC6F6A1992B3A77F5F41432CA6B3B6B -- C:\Windows\System32\hidserv.dll
[2009/07/14 03:15:24 | 000,049,152 | ---- | M] (Microsoft Corporation) MD5=2BC6F6A1992B3A77F5F41432CA6B3B6B -- C:\Windows\winsxs\x86_microsoft-windows-hid-user_31bf3856ad364e35_6.1.7600.16385_none_d6829e90e8c23da8\hidserv.dll

[color=#A23BEC]< MD5 for: IASTORV.SYS >[/color]
[2011/03/11 07:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- C:\Windows\System32\drivers\iaStorV.sys
[2011/03/11 07:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_0bcee2057afcc090\iaStorV.sys
[2011/03/11 07:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_b0daddb9e6380745\iaStorV.sys
[2011/03/11 07:28:00 | 000,332,160 | ---- | M] (Intel Corporation) MD5=778D0E6D7D9EBA0C403BADBAAD41DB20 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_b152a892ff64119f\iaStorV.sys
[2010/11/20 14:29:54 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_668286aa35d55928\iaStorV.sys
[2010/11/20 14:29:54 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_b118bc63e60a139a\iaStorV.sys

[color=#A23BEC]< MD5 for: IMM32.DLL >[/color]
[2010/11/20 14:19:22 | 000,118,272 | ---- | M] (Microsoft Corporation) MD5=4A8E2F20809CC161107FAA94F6CF2685 -- C:\Windows\System32\imm32.dll
[2010/11/20 14:19:22 | 000,118,272 | ---- | M] (Microsoft Corporation) MD5=4A8E2F20809CC161107FAA94F6CF2685 -- C:\Windows\winsxs\x86_microsoft-windows-imm32_31bf3856ad364e35_6.1.7601.17514_none_5e5d8801d8ad160d\imm32.dll

[color=#A23BEC]< MD5 for: KERNEL32.DLL >[/color]
[2014/04/12 04:06:41 | 000,872,448 | ---- | M] (Microsoft Corporation) MD5=0ACC3056081E646E242A8EAB2348271A -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22653_none_96229535cdccb191\kernel32.dll
[2010/11/20 14:19:26 | 000,857,600 | ---- | M] (Microsoft Corporation) MD5=5553784D774CA845380650E010BBDA2C -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.17514_none_95c54f2cb48da1b9\kernel32.dll
[2012/11/30 07:01:46 | 000,868,352 | ---- | M] (Microsoft Corporation) MD5=6D0D4B00C7CB4FA829F396A83B327894 -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22177_none_9610ed07cdd95d0c\kernel32.dll
[2015/05/09 07:41:31 | 000,872,448 | ---- | M] (Microsoft Corporation) MD5=8D5CC74BFA8F947CB283527806DB7B1F -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23049_none_963344b1cdbf5861\kernel32.dll
[2015/05/09 05:13:42 | 000,868,352 | ---- | M] (Microsoft Corporation) MD5=957655757F43858692289B96F73716D8 -- C:\Windows\System32\kernel32.dll
[2015/05/09 05:13:42 | 000,868,352 | ---- | M] (Microsoft Corporation) MD5=957655757F43858692289B96F73716D8 -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18847_none_95a7cf30b4a352a7\kernel32.dll
[2012/11/30 06:47:44 | 000,868,352 | ---- | M] (Microsoft Corporation) MD5=AE09B85158C66E2C154C5C9B3C0027B3 -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18015_none_95c62f30b48ce2ee\kernel32.dll
[2014/03/04 11:17:13 | 000,868,352 | ---- | M] (Microsoft Corporation) MD5=F74FFA7654702F81884BDB41EB80DAC2 -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18409_none_95d507dcb48120f5\kernel32.dll

[color=#A23BEC]< MD5 for: MSWSOCK.DLL >[/color]
[2013/09/07 04:04:16 | 000,231,424 | ---- | M] (Microsoft Corporation) MD5=6547D445C4B69DC0083B619AC642DF04 -- C:\Windows\winsxs\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.1.7601.22444_none_bac3d364a4c3ea89\mswsock.dll
[2010/11/20 14:19:56 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=8999B8631C7FD9F7F9EC3CAFD953BA24 -- C:\Windows\winsxs\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.1.7601.17514_none_ba5ac0f18b8dd799\mswsock.dll
[2013/09/08 04:03:58 | 000,231,424 | ---- | M] (Microsoft Corporation) MD5=E94C583CDE2348950155F2AF2876F34D -- C:\Windows\System32\mswsock.dll
[2013/09/08 04:03:58 | 000,231,424 | ---- | M] (Microsoft Corporation) MD5=E94C583CDE2348950155F2AF2876F34D -- C:\Windows\winsxs\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.1.7601.18254_none_ba2f64c78bae6989\mswsock.dll

[color=#A23BEC]< MD5 for: NDIS.SYS >[/color]
[2012/08/22 19:05:16 | 000,712,048 | ---- | M] (Microsoft Corporation) MD5=15B74B6283CEBCCE3054C1001CA01B5E -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.22097_none_aa0491cf93ad1c31\ndis.sys
[2012/08/22 19:16:46 | 000,712,048 | ---- | M] (Microsoft Corporation) MD5=8C9C922D71F1CD4DEF73F186416B7896 -- C:\Windows\System32\drivers\ndis.sys
[2012/08/22 19:16:46 | 000,712,048 | ---- | M] (Microsoft Corporation) MD5=8C9C922D71F1CD4DEF73F186416B7896 -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17939_none_a9bdfee47a5cd154\ndis.sys
[2010/11/20 14:30:06 | 000,712,576 | ---- | M] (Microsoft Corporation) MD5=E7C54812A2AAF43316EB6930C1FFA108 -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17514_none_a9ce95b27a512623\ndis.sys

[color=#A23BEC]< MD5 for: NETLOGON.DLL >[/color]
[2010/11/20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\System32\netlogon.dll
[2010/11/20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_ffbf212e963c0162\netlogon.dll

[color=#A23BEC]< MD5 for: NTFS.SYS >[/color]
[2010/11/20 14:30:06 | 001,211,264 | ---- | M] (Microsoft Corporation) MD5=33C3093D09017CFE2E219F2472BFF6EB -- C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.17514_none_a87893a87b2db29e\ntfs.sys
[2011/03/11 07:39:00 | 001,211,264 | ---- | M] (Microsoft Corporation) MD5=81189C3D7763838E55C397759D49007A -- C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.17577_none_a83ab4fe7b5ba649\ntfs.sys
[2014/01/24 04:00:31 | 001,213,376 | ---- | M] (Microsoft Corporation) MD5=90EE3C4BD199287D2630C5232F459367 -- C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.22580_none_a8b267299487cd1d\ntfs.sys
[2014/01/24 04:18:22 | 001,212,352 | ---- | M] (Microsoft Corporation) MD5=C8DFF8D07755A66C7A4A738930F0FEAC -- C:\Windows\System32\drivers\ntfs.sys
[2014/01/24 04:18:22 | 001,212,352 | ---- | M] (Microsoft Corporation) MD5=C8DFF8D07755A66C7A4A738930F0FEAC -- C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.18378_none_a83b9ab47b5adef3\ntfs.sys
[2011/03/11 07:28:10 | 001,211,264 | ---- | M] (Microsoft Corporation) MD5=E2EDE3F02F95B896A1C7C6F0CC0C4083 -- C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.21680_none_a8b27fd79487b0a3\ntfs.sys

[color=#A23BEC]< MD5 for: NVSTOR.SYS >[/color]
[2011/03/11 07:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- C:\Windows\System32\drivers\nvstor.sys
[2011/03/11 07:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_0276fc3b3ea60d41\nvstor.sys
[2011/03/11 07:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_3ba44e691d6eb11d\nvstor.sys
[2011/03/11 07:28:10 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=66D468654A58594F5F3BA63D5AD5B1AF -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_3c1c1942369abb77\nvstor.sys
[2010/11/20 14:30:06 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_dd659ed032d28a14\nvstor.sys
[2010/11/20 14:30:06 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_3be22d131d40bd72\nvstor.sys

[color=#A23BEC]< MD5 for: PROQUOTA.EXE >[/color]
[2010/11/20 14:17:30 | 000,028,672 | ---- | M] (Microsoft Corporation) MD5=2E77BAB79F078654782F83F0A0AEFE31 -- C:\Windows\System32\proquota.exe
[2010/11/20 14:17:30 | 000,028,672 | ---- | M] (Microsoft Corporation) MD5=2E77BAB79F078654782F83F0A0AEFE31 -- C:\Windows\winsxs\x86_microsoft-windows-proquota_31bf3856ad364e35_6.1.7601.17514_none_29ce61c2f0a740f4\proquota.exe

[color=#A23BEC]< MD5 for: QMGR.DLL >[/color]
[2010/11/20 14:20:58 | 000,585,728 | ---- | M] (Microsoft Corporation) MD5=E585445D5021971FAE10393F0F1C3961 -- C:\Windows\System32\qmgr.dll
[2010/11/20 14:20:58 | 000,585,728 | ---- | M] (Microsoft Corporation) MD5=E585445D5021971FAE10393F0F1C3961 -- C:\Windows\winsxs\x86_microsoft-windows-bits-client_31bf3856ad364e35_6.1.7601.17514_none_25982ed857b42497\qmgr.dll

[color=#A23BEC]< MD5 for: SCECLI.DLL >[/color]
[2010/11/20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\System32\scecli.dll
[2010/11/20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_3a154c47375d881d\scecli.dll

[color=#A23BEC]< MD5 for: SPOOLSV.EXE >[/color]
[2010/11/20 14:17:45 | 000,317,440 | ---- | M] (Microsoft Corporation) MD5=866A43013535DC8587C258E43579C764 -- C:\Windows\winsxs\x86_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.1.7601.17514_none_d8530d0d1fcade21\spoolsv.exe
[2012/02/11 07:37:49 | 000,317,440 | ---- | M] (Microsoft Corporation) MD5=9AEA093B8F9C37CF45538382CABA2475 -- C:\Windows\System32\spoolsv.exe
[2012/02/11 07:37:49 | 000,317,440 | ---- | M] (Microsoft Corporation) MD5=9AEA093B8F9C37CF45538382CABA2475 -- C:\Windows\winsxs\x86_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.1.7601.17777_none_d815322f1ff8cc1a\spoolsv.exe
[2012/02/11 07:21:14 | 000,317,952 | ---- | M] (Microsoft Corporation) MD5=CAE10A25F936C053E41CBE0FA06FF15D -- C:\Windows\winsxs\x86_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.1.7601.21921_none_d8cedec038f3454c\spoolsv.exe

[color=#A23BEC]< MD5 for: SVCHOST.EXE >[/color]
[2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\System32\svchost.exe
[2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe

[color=#A23BEC]< MD5 for: TERMSRV.DLL >[/color]
[2014/07/16 04:56:37 | 000,525,824 | ---- | M] (Microsoft Corporation) MD5=278F31DD3BFDE48F2E1FFF882FBD24B5 -- C:\Windows\winsxs\x86_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.22750_none_9100f2c4cbc7f167\termsrv.dll
[2010/11/20 14:21:28 | 000,521,216 | ---- | M] (Microsoft Corporation) MD5=382C804C92811BE57829D8E550A900E2 -- C:\Windows\winsxs\x86_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.17514_none_90a6abb3b286306d\termsrv.dll
[2014/10/14 03:50:04 | 000,526,848 | ---- | M] (Microsoft Corporation) MD5=DD01319264B6D19E379BDD079A27DA91 -- C:\Windows\winsxs\x86_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.22843_none_910ec574cbbd1ea2\termsrv.dll
[2014/07/17 03:39:49 | 000,523,264 | ---- | M] (Microsoft Corporation) MD5=E05E31F7BF577228E27CFFCA5B54ABBD -- C:\Windows\winsxs\x86_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.18540_none_908223ffb2a23885\termsrv.dll
[2014/10/14 03:50:50 | 000,523,776 | ---- | M] (Microsoft Corporation) MD5=FCFD4F50419B4BC72E80066DA10D2E54 -- C:\Windows\System32\termsrv.dll
[2014/10/14 03:50:50 | 000,523,776 | ---- | M] (Microsoft Corporation) MD5=FCFD4F50419B4BC72E80066DA10D2E54 -- C:\Windows\winsxs\x86_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.18637_none_9093f7d7b293cb1c\termsrv.dll

[color=#A23BEC]< MD5 for: USERINIT.EXE >[/color]
[2010/11/20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\System32\userinit.exe
[2010/11/20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe

[color=#A23BEC]< MD5 for: VOLSNAP.SYS >[/color]
[2010/11/20 14:30:16 | 000,245,632 | ---- | M] (Microsoft Corporation) MD5=F497F67932C6FA693D7DE2780631CFE7 -- C:\Windows\System32\drivers\volsnap.sys
[2010/11/20 14:30:16 | 000,245,632 | ---- | M] (Microsoft Corporation) MD5=F497F67932C6FA693D7DE2780631CFE7 -- C:\Windows\System32\DriverStore\FileRepository\volume.inf_x86_neutral_6dee0205881d1a1d\volsnap.sys
[2010/11/20 14:30:16 | 000,245,632 | ---- | M] (Microsoft Corporation) MD5=F497F67932C6FA693D7DE2780631CFE7 -- C:\Windows\winsxs\x86_volume.inf_31bf3856ad364e35_6.1.7601.17514_none_17be216c5a5713d8\volsnap.sys

[color=#A23BEC]< MD5 for: WININET.DLL >[/color]
[2015/07/16 20:42:02 | 001,951,232 | ---- | M] (Microsoft Corporation) MD5=0AC8CD2138FD10C4A0E2FF08F892359C -- C:\Windows\System32\wininet.dll
[2015/07/16 20:42:02 | 001,951,232 | ---- | M] (Microsoft Corporation) MD5=0AC8CD2138FD10C4A0E2FF08F892359C -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17959_none_87ee4767fea9c0d8\wininet.dll
[2010/11/20 14:21:36 | 000,980,992 | ---- | M] (Microsoft Corporation) MD5=44214C94911C7CFB1D52CB64D5E8368D -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.17514_none_1eaaa4a07717236e\wininet.dll
[2014/11/22 03:00:20 | 001,888,256 | ---- | M] (Microsoft Corporation) MD5=5E4E0E43E0A5BF9F089696DFA7A3D677 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17501_none_88153be5fe8d0559\wininet.dll
[2015/06/19 19:15:43 | 001,951,232 | ---- | M] (Microsoft Corporation) MD5=63B01F72FD727D5736DBEF54174D8F93 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17914_none_87eab827feacdb57\wininet.dll
[2014/11/06 03:52:35 | 001,892,864 | ---- | M] (Microsoft Corporation) MD5=6DD7D61A8EF3DFEC4FAEFEB395E77424 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17420_none_8822232dfe830275\wininet.dll
[2014/05/30 09:21:10 | 001,790,976 | ---- | M] (Microsoft Corporation) MD5=771CDBC3D62437D6DB070820BB1EDCCF -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17126_none_88420a41fe6b4868\wininet.dll
[2014/09/19 01:59:11 | 001,810,944 | ---- | M] (Microsoft Corporation) MD5=7AE80F921027CF88CB9D0433088A3E55 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17358_none_882f3db7fe78ff91\wininet.dll
[2013/11/26 08:33:33 | 001,820,160 | ---- | M] (Microsoft Corporation) MD5=927FA6456AD6D7630F6854828D2FD16B -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.16476_none_88269a09fe7f1dc7\wininet.dll
[2014/02/06 10:41:35 | 001,820,160 | ---- | M] (Microsoft Corporation) MD5=9C89246184979A070B0C6CCF61C68136 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.16518_none_88159ad1fe8cd4f0\wininet.dll
[2014/03/01 04:32:16 | 001,820,160 | ---- | M] (Microsoft Corporation) MD5=AAFEAB4FC9D70253F8C7E353E879E8A2 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.16521_none_88173a93fe8b3ae0\wininet.dll
[2014/01/31 15:07:04 | 001,818,112 | ---- | M] (Microsoft Corporation) MD5=B5EB5BD3066959611E1F7A80FD6CC172 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.16428_none_88216b07fe83d256\wininet.dll
[2014/07/25 12:05:23 | 001,792,512 | ---- | M] (Microsoft Corporation) MD5=B945BAA81B4805AD6BDDF4D026DCFB47 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17239_none_8837f647fe72ca93\wininet.dll
[2015/03/13 04:20:28 | 001,888,256 | ---- | M] (Microsoft Corporation) MD5=C46904F2E9E121A91DDDABB48D7648C3 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17728_none_8800fd29fe9c2350\wininet.dll
[2015/04/21 17:02:00 | 001,882,112 | ---- | M] (Microsoft Corporation) MD5=CB5F450D21B9D76B7F01D006E4AEDB40 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17801_none_87f4cc21fea5592c\wininet.dll
[2014/06/19 00:13:59 | 001,791,488 | ---- | M] (Microsoft Corporation) MD5=CCC198257901BEEA2FBF8EB1E7678356 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17207_none_883522f9fe754b4c\wininet.dll
[2014/08/18 22:46:48 | 001,812,992 | ---- | M] (Microsoft Corporation) MD5=D58988722C72D265B51A54103DFC2C6F -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17280_none_883dc4c1fe6d629d\wininet.dll
[2014/03/06 07:41:49 | 001,789,440 | ---- | M] (Microsoft Corporation) MD5=E4E829EE073E046B0EB19B5FECB19B8C -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17041_none_884f4ca9fe60df00\wininet.dll
[2015/05/23 04:20:35 | 001,950,720 | ---- | M] (Microsoft Corporation) MD5=E4EB138060BAE0DBAB1A3B71A3141FE7 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17843_none_87f89fb9fea1f1ca\wininet.dll
[2015/02/20 03:01:25 | 001,888,256 | ---- | M] (Microsoft Corporation) MD5=EA6EA6912F27F05C61D8D747517EB47E -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17691_none_88136e93fe8d0559\wininet.dll
[2015/01/12 03:00:17 | 001,888,256 | ---- | M] (Microsoft Corporation) MD5=F285D499EC42969D963CA49EADA63218 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17633_none_880d3f47fe92a091\wininet.dll

[color=#A23BEC]< MD5 for: WININIT.EXE >[/color]
[2009/07/14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\System32\wininit.exe
[2009/07/14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe

[color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
[2014/07/16 04:56:14 | 000,304,640 | ---- | M] (Microsoft Corporation) MD5=4F37B93C14AEE313BEC52A23AFB15C2E -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22750_none_7224b2134c7555fa\winlogon.exe
[2014/07/16 04:56:14 | 000,304,640 | ---- | M] (Microsoft Corporation) MD5=4F37B93C14AEE313BEC52A23AFB15C2E -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22750_none_7224b2134c7555fa\winlogon.exe
[2014/07/17 03:39:27 | 000,304,128 | ---- | M] (Microsoft Corporation) MD5=52449FD429D6053B78AE564DEF303870 -- C:\Windows\System32\winlogon.exe
[2014/07/17 03:39:27 | 000,304,128 | ---- | M] (Microsoft Corporation) MD5=52449FD429D6053B78AE564DEF303870 -- C:\Windows\System32\winlogon.exe
[2014/07/17 03:39:27 | 000,304,128 | ---- | M] (Microsoft Corporation) MD5=52449FD429D6053B78AE564DEF303870 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18540_none_71a5e34e334f9d18\winlogon.exe
[2014/07/17 03:39:27 | 000,304,128 | ---- | M] (Microsoft Corporation) MD5=52449FD429D6053B78AE564DEF303870 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18540_none_71a5e34e334f9d18\winlogon.exe
[2010/11/20 14:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe
[2010/11/20 14:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe
[2014/03/04 11:17:02 | 000,304,128 | ---- | M] (Microsoft Corporation) MD5=998507B046BA314CE8245364C686FA67 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18409_none_71da23b23327143c\winlogon.exe
[2014/03/04 11:17:02 | 000,304,128 | ---- | M] (Microsoft Corporation) MD5=998507B046BA314CE8245364C686FA67 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18409_none_71da23b23327143c\winlogon.exe
[2014/03/04 12:39:02 | 000,304,640 | ---- | M] (Microsoft Corporation) MD5=D53972F87D850CD2EB4B29B60CAFDD77 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22616_none_7255f1994c4f8119\winlogon.exe
[2014/03/04 12:39:02 | 000,304,640 | ---- | M] (Microsoft Corporation) MD5=D53972F87D850CD2EB4B29B60CAFDD77 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22616_none_7255f1994c4f8119\winlogon.exe

[color=#A23BEC]< MD5 for: WS2_32.DLL >[/color]
[2010/11/20 14:21:38 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\System32\ws2_32.dll
[2010/11/20 14:21:38 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_f4bf1aae2c981ecf\ws2_32.dll

[color=#A23BEC]< HKEY_LOCAL_MACHINE\SYSTEM\Curr entControlSet\Control\Session Manager\SubSystems /s >[/color]

[color=#A23BEC]< %systemroot%\*. /mp /s >[/color]

[color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\system32\drivers\ *.sys /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\System32\config\* .sav >[/color]

[color=#A23BEC]< c:\$recycle.bin\*.* /s >[/color]
[2015/02/27 21:36:28 | 000,000,129 | -HS- | M] () -- c:\$recycle.bin\S-1-5-20\desktop.ini
[2014/04/21 21:15:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1000\$I25FCRM.jpg
[2014/04/30 23:14:10 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1000\$IR8G35J
[2014/01/22 14:37:37 | 000,000,129 | -HS- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1000\desktop.ini
[2014/07/25 13:02:46 | 000,000,129 | -HS- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\desktop.ini
[2015/02/27 21:09:05 | 000,170,584 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\0hQMjUA7Fo4.js
[2015/02/27 21:09:04 | 000,017,736 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\2pJHC0UvG4P.js
[2015/02/27 21:09:12 | 000,000,541 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\3Fr0roTJeXS.js
[2015/02/27 21:09:11 | 000,000,665 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\4c3uNx3Ycqa.js
[2015/02/27 21:09:10 | 001,113,529 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\4i7f9MbhvT0.js
[2015/02/27 21:09:03 | 000,000,345 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\7WA1khhK0KW.js
[2015/02/27 21:09:10 | 000,089,582 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\8Yt4591rfSv.js
[2015/02/27 21:09:04 | 000,012,330 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\9Ec5ndCdKdY.js
[2015/02/27 21:09:10 | 000,006,570 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\9ehux9SZJo4.js
[2015/02/27 21:09:11 | 000,007,983 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\AqfY13nekaD.js
[2015/02/27 21:09:04 | 000,109,258 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\B2EvHmWSBfu.js
[2015/02/27 21:09:03 | 000,000,422 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\cZpKaf70pMZ.js
[2015/02/27 21:09:05 | 000,013,101 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\d7b3rEsLHYj.js
[2015/02/27 21:09:10 | 000,001,833 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\DnToQ8phywX.js
[2015/02/27 21:09:11 | 001,034,656 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\es_RlhA77Pd.js
[2015/02/27 21:09:05 | 000,035,588 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\evao6eoMXwB.js
[2015/02/27 21:09:12 | 000,457,815 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\F_qHP1MrRFW.js
[2015/02/27 21:09:11 | 000,062,638 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\GiitJ2GWPqY.js
[2015/02/27 21:09:06 | 000,051,411 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\GzrnJqyOMs1.js
[2015/02/27 21:09:05 | 000,001,371 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\HGyhI207Zk_.js
[2015/02/27 21:09:09 | 000,098,188 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\HrLS4kHTBaa.js
[2015/02/27 21:09:09 | 000,066,691 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\HVULEUF-C9X.js
[2015/02/27 21:09:10 | 000,060,113 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\IIejIVd9sPr.js
[2015/02/27 21:09:05 | 000,041,477 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\JbCpJ8q0IkZ.js
[2015/02/27 21:09:11 | 000,010,002 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\JpDHfqbwNDh.js
[2015/02/27 21:09:12 | 000,000,871 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\JvK_C44obT2.js
[2015/02/27 21:09:04 | 000,007,626 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\Lov2MTflHBh.js
[2015/02/27 21:09:10 | 000,029,521 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\MSw6gXF-bOk.js
[2015/02/27 21:09:10 | 000,088,667 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\Mx8v2UHJSnu.js
[2015/02/27 21:09:12 | 000,000,495 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\oD3Lqqez7a-.js
[2015/02/27 21:09:12 | 000,159,423 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\oMsnhcxMrLc.js
[2015/02/27 21:09:12 | 000,085,620 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\PB05mAVO3mQ.js
[2015/02/27 21:09:10 | 000,001,869 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\rj3CD6Ea19T.js
[2015/02/27 21:09:12 | 000,104,646 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\roNn7Q7xSU4.js
[2015/02/27 21:09:06 | 000,325,713 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\rYM4VOlRP4s.js
[2015/02/27 21:09:10 | 000,186,787 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\s4Qf9_4BaS3.js
[2015/02/27 21:09:09 | 000,123,334 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\T9WE2XEBex7.js
[2015/02/27 21:09:04 | 000,036,211 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\tYp_4AlgCy1.js
[2015/02/27 21:09:04 | 000,001,838 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\uLrbOPEgXKn.js
[2015/02/27 21:09:04 | 000,001,557 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\uwRK-kK06qB.js
[2015/02/27 21:09:12 | 000,063,487 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\vKI4kw4wQdV.js
[2015/02/27 21:09:11 | 000,001,624 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\VyZuRqDcwRx.js
[2015/02/27 21:09:11 | 000,001,200 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\wg9uegj1n2H.js
[2015/02/27 21:09:10 | 000,206,989 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\wlzOhKSSRvm.js
[2015/02/27 21:09:04 | 000,003,396 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\xzijB8nHkkq.js
[2015/02/27 21:09:12 | 000,116,283 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\y6UtOKB7z7l.js
[2015/02/27 21:09:12 | 000,000,307 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-271476452-3537404256-3293841959-1001\$RGF8KIW\zKQOPC0g8Yf.js

[color=#E56717]========== Alternate Data Streams ==========[/color]

@Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:AD022376

< End of report >

Publicité


Signaler le contenu de ce document

Publicité