OTL logfile created on: 07/03/2016 09:20:16 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\NHAGA100081.ORANGE-SONATEL\Desktop Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.11.9600.17501) Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy 2,88 Gb Total Physical Memory | 1,40 Gb Available Physical Memory | 48,39% Memory free 5,77 Gb Paging File | 3,67 Gb Available in Paging File | 63,63% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 139,83 Gb Total Space | 60,24 Gb Free Space | 43,09% Space Free | Partition Type: NTFS Drive E: | 1,99 Gb Total Space | 1,97 Gb Free Space | 99,15% Space Free | Partition Type: FAT32 Drive G: | 20,24 Gb Total Space | 3,07 Gb Free Space | 15,17% Space Free | Partition Type: NTFS Drive H: | 135,72 Gb Total Space | 34,32 Gb Free Space | 25,28% Space Free | Partition Type: NTFS Computer Name: NHAGA-PC | User Name: NHAGA100081 | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2016/03/07 09:16:54 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\NHAGA100081.ORANGE-SONATEL\Desktop\OTL.exe PRC - [2016/03/05 14:48:55 | 000,097,080 | ---- | M] (Baidu Inc.) -- C:\Program Files\baidu\Baidu Browser43.19.1000.90.1\sparkservice.exe PRC - [2016/02/17 16:51:56 | 000,392,136 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2015/12/13 23:48:02 | 000,082,128 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2015/10/28 08:36:29 | 003,204,472 | ---- | M] (Koyote-Lab Inc) -- C:\Program Files\Movies App\Datamngr\DatamngrCoordinator.exe PRC - [2015/09/02 06:43:50 | 000,180,128 | ---- | M] (IAC Search and Media) -- C:\Program Files\IAC Updater\iacupdater.exe PRC - [2015/08/19 07:02:47 | 000,369,488 | ---- | M] (Elex do Brasil Participações Ltda) -- C:\Program Files\Elex-tech\YAC\iSafeTray.exe PRC - [2015/08/19 06:59:15 | 000,118,048 | ---- | M] (Elex do Brasil Participações Ltda) -- C:\Program Files\Elex-tech\YAC\iSafeSvc.exe PRC - [2015/08/19 06:59:12 | 000,118,048 | ---- | M] (Elex do Brasil Participações Ltda) -- C:\Program Files\Elex-tech\YAC\iSafeSvc2.exe PRC - [2015/05/09 11:51:53 | 004,383,008 | ---- | M] (IObit) -- C:\Program Files\IObit\Smart Defrag 4\SmartDefrag.exe PRC - [2015/04/20 10:14:37 | 000,246,072 | ---- | M] (ActivIdentity) -- C:\Program Files\ActivIdentity\SecureLogin\slnrmonitorserver.exe PRC - [2015/04/01 18:20:00 | 000,465,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\CCM\RemCtrl\CmRcService.exe PRC - [2015/03/12 14:39:35 | 001,141,848 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Real\RealPlayer\RPDS\Bin\rpdsvc.exe PRC - [2015/02/08 14:03:57 | 000,232,264 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Update\1.3.26.9\GoogleCrashHandler.exe PRC - [2015/02/04 17:52:20 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe PRC - [2015/02/04 17:51:26 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe PRC - [2015/01/08 11:12:10 | 000,415,336 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxEM.exe PRC - [2015/01/08 11:12:10 | 000,274,536 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxCUIService.exe PRC - [2015/01/06 15:40:36 | 000,409,376 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe PRC - [2015/01/06 15:40:34 | 000,158,496 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe PRC - [2014/12/14 20:39:50 | 000,209,296 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxHK.exe PRC - [2014/10/31 16:41:18 | 002,066,432 | ---- | M] (iSkySoft) -- C:\Program Files\Common Files\iSkysoft\iSkysoft Helper Compact\ISHelper.exe PRC - [2014/10/26 22:59:24 | 000,039,568 | ---- | M] () -- C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe PRC - [2014/09/23 14:10:46 | 000,180,992 | ---- | M] (Intel Corporation) -- C:\Windows\System32\IPROSetMonitor.exe PRC - [2014/08/22 12:44:44 | 000,022,192 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft Security Client\MsMpEng.exe PRC - [2014/08/22 12:44:42 | 000,306,792 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft Security Client\MpCmdRun.exe PRC - [2014/08/22 12:44:40 | 000,288,120 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft Security Client\NisSrv.exe PRC - [2014/08/22 12:41:00 | 000,974,432 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\msseces.exe PRC - [2014/07/17 05:41:36 | 002,017,664 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\Symantec DLO\DLO\DLOChangeLogSvcu.exe PRC - [2014/02/19 16:52:44 | 000,178,688 | ---- | M] (ultracopier.first-world.info) -- C:\Program Files\Supercopier\supercopier.exe PRC - [2013/11/21 08:31:44 | 000,287,592 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe PRC - [2013/11/21 08:31:44 | 000,015,720 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe PRC - [2013/09/17 14:49:49 | 000,292,088 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe PRC - [2013/09/11 04:00:00 | 001,160,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\CCM\CcmExec.exe PRC - [2013/09/11 04:00:00 | 000,642,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\CCM\SCNotification.exe PRC - [2013/06/13 14:58:34 | 002,524,912 | ---- | M] (Intel® Corporation) -- C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe PRC - [2013/06/13 14:58:18 | 000,500,976 | ---- | M] (Intel(R) Corporation) -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe PRC - [2013/06/13 14:58:04 | 000,109,296 | ---- | M] (Intel(R) Corporation) -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe PRC - [2012/08/02 12:24:36 | 000,048,744 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Policy Platform\policyHost.exe PRC - [2012/02/13 21:19:20 | 000,193,816 | ---- | M] (Microsoft Corporation.) -- C:\Program Files\Microsoft\BingBar\7.1.362.0\BBSvc.exe PRC - [2010/11/20 21:29:20 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2010/11/20 21:29:07 | 000,100,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\audiodg.exe PRC - [2010/05/31 15:57:12 | 000,056,032 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\Apoint2K\HidFind.exe PRC - [2010/04/05 19:55:01 | 000,116,104 | ---- | M] () -- C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE PRC - [2010/04/02 10:18:54 | 001,185,112 | ---- | M] (CANON INC.) -- C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE PRC - [2009/12/17 22:32:30 | 000,497,856 | ---- | M] (Cisco Systems, Inc.) -- C:\Program Files\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe PRC - [2009/06/17 11:18:42 | 006,582,912 | ---- | M] () -- c:\wamp\bin\mysql\mysql5.1.36\bin\mysqld.exe PRC - [2008/12/10 01:10:14 | 000,024,636 | ---- | M] (Apache Software Foundation) -- C:\wamp\bin\apache\Apache2.2.11\bin\httpd.exe PRC - [2008/12/10 01:10:14 | 000,024,636 | ---- | M] (Apache Software Foundation) -- c:\wamp\bin\apache\Apache2.2.11\bin\httpd.exe PRC - [2008/06/13 14:24:02 | 000,081,920 | ---- | M] (Firebird Project) -- C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe PRC - [2008/06/13 14:22:50 | 002,723,840 | ---- | M] (Firebird Project) -- C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2016/02/10 19:48:58 | 000,048,816 | ---- | M] () -- C:\Program Files\FileZilla FTP Client\fzshellext.dll MOD - [2015/08/19 06:59:15 | 000,179,200 | ---- | M] () -- C:\Program Files\Elex-tech\YAC\libpng.dll MOD - [2015/08/19 06:59:15 | 000,065,696 | ---- | M] () -- C:\Program Files\Elex-tech\YAC\zlib1.dll MOD - [2015/08/10 16:42:14 | 001,073,664 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Servf73e6522#\5c930566b541a92c65f32cfae4018d87\System.ServiceModel.Web.ni.dll MOD - [2015/08/10 16:42:08 | 019,522,560 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\ec19fdffa5eaea430a77160272ed897e\System.ServiceModel.ni.dll MOD - [2015/08/10 16:41:47 | 002,956,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\c37bcdac22f4bcd9531dfcc4b9ebda56\System.IdentityModel.ni.dll MOD - [2015/08/10 16:40:55 | 000,901,632 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\SCNotification\e5347b88baa01448a21c65e7708f2fae\SCNotification.ni.exe MOD - [2015/08/10 16:40:54 | 000,482,304 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\SCClient.Data\69134c481c3dacd6ff9450a421be9efb\SCClient.Data.ni.dll MOD - [2015/08/10 16:40:53 | 000,444,416 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\SCClient.Common\99b87d8b1c23c39f3485a034697ed8f1\SCClient.Common.ni.dll MOD - [2015/08/10 15:48:59 | 018,524,672 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio5ae0f00f#\97e6b67983d07a066b68b3ae8be2f53d\PresentationFramework.ni.dll MOD - [2015/08/10 15:48:54 | 001,920,000 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V9921e851#\536f3c2e6e4137a628f2f64e0dfd407e\Microsoft.VisualBasic.ni.dll MOD - [2015/08/10 15:48:51 | 002,785,280 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\293cfe2c05a8ee921726927fd00ea81c\System.Runtime.Serialization.ni.dll MOD - [2015/08/10 15:48:50 | 000,121,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\98e3281d79512c9a2a0a89e3bc2e554f\SMDiagnostics.ni.dll MOD - [2015/08/10 15:48:49 | 000,802,816 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Servd1dec626#\df55f04bc0ebe6c1abde4bc467bf4d03\System.ServiceModel.Internals.ni.dll MOD - [2015/08/10 15:48:40 | 010,914,304 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\b52bc540630c3aa5de542c382af35c20\PresentationCore.ni.dll MOD - [2015/08/10 15:48:35 | 000,786,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runt73a1fc9d#\4cfa42c8b69a64e192f3255ec900457d\System.Runtime.Remoting.ni.dll MOD - [2015/08/10 15:48:34 | 001,870,848 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\cc4d9093563dadee370788bbc3ecf4fb\System.Xaml.ni.dll MOD - [2015/08/10 15:48:30 | 012,692,992 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\22ae167d586450ad3a9b9a9ee43ebc86\System.Windows.Forms.ni.dll MOD - [2015/08/10 15:48:28 | 006,995,456 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\b9f7adbc90a2bcbe8eb9e6e8d2bb975b\System.Core.ni.dll MOD - [2015/08/10 15:48:27 | 007,559,680 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\9ba07396ae369d010c5c3927a82ef426\System.Xml.ni.dll MOD - [2015/08/10 15:48:26 | 003,905,024 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\cd235caf797fb017f140016be88f33b7\WindowsBase.ni.dll MOD - [2015/08/10 15:48:19 | 001,630,720 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\72269ea7cc6281139e4d155e7c57dc67\System.Drawing.ni.dll MOD - [2015/08/10 15:48:19 | 001,156,608 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Management\95623e12dc6a64d28bad5b85f4c730ae\System.Management.ni.dll MOD - [2015/08/10 15:48:19 | 000,958,464 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\28586400bcaf94c13a9fd0dff4a1e090\System.Configuration.ni.dll MOD - [2015/08/10 15:48:18 | 009,925,120 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\e40da7a49f8c3f0108e7c835b342f382\System.ni.dll MOD - [2015/08/10 15:48:10 | 016,501,248 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\51e2934144ba15628ba5a31be2dae7dc\mscorlib.ni.dll MOD - [2015/02/27 14:38:12 | 000,214,528 | ---- | M] () -- C:\Windows\System32\ISCM32.dll MOD - [2014/10/31 16:40:40 | 001,498,112 | ---- | M] () -- C:\Program Files\Common Files\iSkysoft\iSkysoft Helper Compact\DAQExp.dll MOD - [2014/07/17 09:24:54 | 000,044,544 | ---- | M] () -- C:\Program Files\ActivIdentity\SecureLogin\XalanMessages_1_11wcus.dll MOD - [2014/05/19 17:19:02 | 000,137,728 | ---- | M] () -- C:\Program Files\Common Files\iSkysoft\iSkysoft Helper Compact\CBSCreateVC.dll MOD - [2014/05/12 09:49:04 | 000,260,608 | ---- | M] () -- C:\Program Files\Notepad++\NppShell_06.dll MOD - [2014/02/19 16:52:44 | 001,026,560 | ---- | M] () -- C:\Program Files\Supercopier\qt-plugins\platforms\qwindows.dll MOD - [2014/02/19 16:52:44 | 000,377,856 | ---- | M] () -- C:\Program Files\Supercopier\libstdc++-6.dll MOD - [2014/02/19 16:52:44 | 000,052,224 | ---- | M] () -- C:\Program Files\Supercopier\libgcc_s_sjlj-1.dll MOD - [2013/01/15 18:47:56 | 000,893,248 | ---- | M] () -- C:\Program Files\IObit\Smart Defrag 4\webres.dll MOD - [2010/03/15 11:28:22 | 000,141,824 | ---- | M] () -- C:\Program Files\WinRAR\rarext.dll MOD - [2010/01/30 02:41:12 | 004,254,560 | ---- | M] () -- C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf [color=#E56717]========== Services (SafeList) ==========[/color] SRV - File not found [Auto | Stopped] -- C:\Program Files\Clock Hand\bin\utilClockHand.exe -- (Util Clock Hand) SRV - File not found [Auto | Stopped] -- C:\Program Files\Clock Hand\updateClockHand.exe -- (Update Clock Hand) SRV - File not found [Auto | Stopped] -- C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe -- (LiveUpdateSvc) SRV - File not found [Auto | Stopped] -- C:\Program Files\GOSafer\GOSafer.exe -- (GOSafer) SRV - File not found [Auto | Stopped] -- C:\Program Files\ActSys\ActSys.exe -- (ActSys) SRV - [2016/03/05 14:48:55 | 000,097,080 | ---- | M] (Baidu Inc.) [Auto | Running] -- C:\Program Files\baidu\Baidu Browser43.19.1000.90.1\sparkservice.exe -- (SparkSvc) SRV - [2016/02/17 16:51:54 | 000,146,888 | ---- | M] (Mozilla Foundation) [Disabled | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2015/12/17 06:52:01 | 001,372,472 | ---- | M] (Baidu.com, Inc.) [On_Demand | Stopped] -- C:\Program Files\Baidu\SparkUpdate\Sparkupdate.exe -- (SparkUpdater) SRV - [2015/12/13 23:48:02 | 000,082,128 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2015/10/28 08:36:29 | 003,204,472 | ---- | M] (Koyote-Lab Inc) [Auto | Running] -- C:\Program Files\Movies App\Datamngr\DatamngrCoordinator.exe -- (DatamngrCoordinator) SRV - [2015/10/15 08:47:22 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2015/09/02 06:43:50 | 000,180,128 | ---- | M] (IAC Search and Media) [Auto | Running] -- C:\Program Files\IAC Updater\iacupdater.exe -- (IAC Update Service) SRV - [2015/08/19 06:59:15 | 000,118,048 | ---- | M] (Elex do Brasil Participações Ltda) [Auto | Running] -- C:\Program Files\Elex-tech\YAC\iSafeSvc.exe -- (iSafeService) SRV - [2015/08/17 12:51:30 | 003,035,240 | ---- | M] (Adiscon GmbH (info@adiscon.com, http://www.adiscon.com)) [Auto | Stopped] -- C:\Program Files\RSyslog\Agent\rsyslogcl.exe -- (RSyslogWindowsAgent) SRV - [2015/08/15 19:48:12 | 000,269,000 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2015/04/29 22:39:56 | 003,482,624 | ---- | M] (MySolutions Nordic (Michael Medin)) [Disabled | Stopped] -- C:\Program Files\NSClient++\nscp.exe -- (nscp) SRV - [2015/04/20 10:14:37 | 000,246,072 | ---- | M] (ActivIdentity) [Auto | Running] -- C:\Program Files\ActivIdentity\SecureLogin\slnrmonitorserver.exe -- (ActivIdentity SecureLogin Monitor Logoff) SRV - [2015/04/17 10:14:31 | 005,448,976 | ---- | M] (TeamViewer GmbH) [Disabled | Stopped] -- C:\Program Files\TeamViewer\TeamViewer_Service.exe -- (TeamViewer) SRV - [2015/04/01 18:20:00 | 000,465,072 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\CCM\RemCtrl\CmRcService.exe -- (CmRcService) SRV - [2015/03/12 14:39:35 | 001,141,848 | ---- | M] (RealNetworks, Inc.) [Auto | Running] -- C:\Program Files\Real\RealPlayer\RPDS\Bin\rpdsvc.exe -- (RealPlayer Cloud Service) SRV - [2015/03/06 10:44:13 | 001,343,400 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc) SRV - [2015/02/18 19:11:32 | 000,315,488 | ---- | M] (Skype Technologies) [Disabled | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2015/02/04 17:53:55 | 000,102,912 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\IEEtwCollector.exe -- (IEEtwCollectorService) SRV - [2015/01/08 11:12:10 | 000,274,536 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Windows\System32\igfxCUIService.exe -- (igfxCUIService1.0.0.0) SRV - [2015/01/08 11:12:08 | 000,280,680 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\System32\IntelCpHeciSvc.exe -- (cphs) SRV - [2015/01/06 15:40:36 | 000,409,376 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) SRV - [2015/01/06 15:40:34 | 000,158,496 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe -- (jhi_service) SRV - [2014/10/30 05:41:44 | 000,031,856 | ---- | M] () [Disabled | Stopped] -- C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe -- (RealPlayerUpdateSvc) SRV - [2014/10/26 22:59:24 | 000,039,568 | ---- | M] () [Auto | Running] -- C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe -- (RealNetworks Downloader Resolver Service) SRV - [2014/10/15 16:26:12 | 002,117,448 | ---- | M] (CybelSoft) [Disabled | Stopped] -- C:\Program Files\ma-config.com\MaConfigAgent.exe -- (MaConfigAgent) SRV - [2014/09/23 14:10:46 | 000,180,992 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Windows\System32\IPROSetMonitor.exe -- (Intel(R) SRV - [2014/08/22 12:44:44 | 000,022,192 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc) SRV - [2014/08/22 12:44:40 | 000,288,120 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- c:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv) SRV - [2014/07/17 05:41:36 | 002,017,664 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Symantec\Symantec DLO\DLO\DLOChangeLogSvcu.exe -- (DLOChangeJournalSvc) SRV - [2014/05/13 14:25:04 | 000,686,552 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe -- (Intel(R) SRV - [2013/11/21 08:31:44 | 000,015,720 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) SRV - [2013/09/11 04:00:00 | 001,160,888 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\CCM\CcmExec.exe -- (CcmExec) SRV - [2013/09/11 04:00:00 | 000,217,272 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\CCM\TSManager.exe -- (smstsmgr) SRV - [2013/06/13 14:58:34 | 002,524,912 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe -- (ZeroConfigService) SRV - [2013/06/13 14:58:24 | 000,242,928 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe -- (MyWiFiDHCPDNS) SRV - [2013/06/13 14:58:18 | 000,500,976 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng) SRV - [2013/06/13 14:58:04 | 000,109,296 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc) SRV - [2013/03/01 01:48:58 | 000,118,520 | ---- | M] (Riverbed Technology, Inc.) [On_Demand | Stopped] -- C:\Program Files\WinPcap\rpcapd.exe -- (rpcapd) SRV - [2012/08/02 12:24:36 | 000,048,744 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Policy Platform\policyHost.exe -- (lppsvc) SRV - [2012/08/02 12:24:36 | 000,048,744 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Microsoft Policy Platform\policyHost.exe -- (lpasvc) SRV - [2012/04/24 14:37:56 | 000,169,752 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe -- (ICCS) SRV - [2012/02/13 21:19:20 | 000,240,408 | ---- | M] (Microsoft Corporation.) [On_Demand | Running] -- C:\Program Files\Microsoft\BingBar\7.1.362.0\SeaPort.exe -- (BBUpdate) SRV - [2012/02/13 21:19:20 | 000,193,816 | ---- | M] (Microsoft Corporation.) [Auto | Running] -- C:\Program Files\Microsoft\BingBar\7.1.362.0\BBSvc.exe -- (BBSvc) SRV - [2010/11/20 21:29:25 | 000,397,824 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\inetsrv\iisw3adm.dll -- (WAS) SRV - [2010/11/20 21:29:25 | 000,397,824 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\inetsrv\iisw3adm.dll -- (W3SVC) SRV - [2010/11/20 21:29:25 | 000,061,440 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\inetsrv\apphostsvc.dll -- (AppHostSvc) SRV - [2010/04/05 19:55:01 | 000,116,104 | ---- | M] () [Auto | Running] -- C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE -- (IJPLMSVC) SRV - [2010/03/25 10:25:22 | 030,969,208 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service) SRV - [2009/12/17 22:32:30 | 000,497,856 | ---- | M] (Cisco Systems, Inc.) [Auto | Running] -- C:\Program Files\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe -- (vpnagent) SRV - [2009/07/14 01:16:15 | 000,016,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\StorSvc.dll -- (StorSvc) SRV - [2009/07/14 01:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc) SRV - [2009/07/14 01:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc) SRV - [2009/07/14 01:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend) SRV - [2009/06/17 11:18:42 | 006,582,912 | ---- | M] () [Auto | Running] -- c:\wamp\bin\mysql\mysql5.1.36\bin\mysqld.exe -- (wampmysqld) SRV - [2008/12/10 01:10:14 | 000,024,636 | ---- | M] (Apache Software Foundation) [Auto | Running] -- c:\wamp\bin\apache\Apache2.2.11\bin\httpd.exe -- (wampapache) SRV - [2008/06/13 14:24:02 | 000,081,920 | ---- | M] (Firebird Project) [Auto | Running] -- C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe -- (FirebirdGuardianDefaultInstance) SRV - [2008/06/13 14:22:50 | 002,723,840 | ---- | M] (Firebird Project) [On_Demand | Running] -- C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe -- (FirebirdServerDefaultInstance) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | System | Stopped] -- system32\drivers\ssfilterdrv.sys -- (ssfilterdrv) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\iSafeKrnlBoot.sys -- (iSafeKrnlBoot) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_wwanecm.sys -- (hwusb_wwanecm) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_cdcacm.sys -- (hwusb_cdcacm) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_jubusenum.sys -- (huawei_enumerator) DRV - File not found [Kernel | System | Stopped] -- C:\Program Files\Movies App\Datamngr\setmgrc3.cfg -- (F06DEFF2-5B9C-490D-910F-35D3A9119622) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_usbenumfilter.sys -- (ew_usbenumfilter) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_hwusbdev.sys -- (ew_hwusbdev) DRV - File not found [Kernel | System | Stopped] -- system32\drivers\{f4191bb0-3007-4fbd-b83f-cc45648f3845}Gw.sys -- ({f4191bb0-3007-4fbd-b83f-cc45648f3845}Gw) DRV - File not found [Kernel | System | Stopped] -- system32\drivers\{cb70d938-64a3-429a-9de7-76efb8483eb3}Gw.sys -- ({cb70d938-64a3-429a-9de7-76efb8483eb3}Gw) DRV - File not found [Kernel | System | Stopped] -- system32\drivers\{b4e11afe-4c35-4044-965f-6641cc18f62e}Gw.sys -- ({b4e11afe-4c35-4044-965f-6641cc18f62e}Gw) DRV - File not found [Kernel | System | Stopped] -- system32\drivers\{674829ea-f837-40f8-b8e1-613b1b2d47c8}w.sys -- ({674829ea-f837-40f8-b8e1-613b1b2d47c8}w) DRV - File not found [Kernel | System | Stopped] -- system32\drivers\{674829ea-f837-40f8-b8e1-613b1b2d47c8}Gw.sys -- ({674829ea-f837-40f8-b8e1-613b1b2d47c8}Gw) DRV - File not found [Kernel | System | Stopped] -- system32\drivers\{0bb5bb01-951b-4223-8fcb-b066d3518b73}Gw.sys -- ({0bb5bb01-951b-4223-8fcb-b066d3518b73}Gw) DRV - [2016/03/07 09:08:09 | 000,039,168 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{841F37E3-5983-4E06-9D71-6B06220B676A}\MpKsl1245e895.sys -- (MpKsl1245e895) DRV - [2016/03/07 08:16:44 | 000,039,168 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{841F37E3-5983-4E06-9D71-6B06220B676A}\MpKsle72fca72.sys -- (MpKsle72fca72) DRV - [2015/08/19 07:02:09 | 000,045,032 | ---- | M] (Elex do Brasil Participações Ltda) [File_System | System | Running] -- C:\Program Files\Elex-tech\YAC\iSafeKrnlMon.sys -- (iSafeKrnlMon) DRV - [2015/08/19 07:02:07 | 000,097,912 | ---- | M] (Elex do Brasil Participações Ltda) [Kernel | System | Running] -- C:\Program Files\Elex-tech\YAC\iSafeKrnlKit.sys -- (iSafeKrnlKit) DRV - [2015/08/19 07:02:02 | 000,073,232 | ---- | M] (Elex do Brasil Participações Ltda) [Kernel | System | Running] -- C:\Program Files\Elex-tech\YAC\iSafeKrnlR3.sys -- (iSafeKrnlR3) DRV - [2015/08/12 13:12:56 | 000,048,440 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | System | Running] -- C:\Windows\System32\drivers\asfilterdrv.sys -- (asfilterdrv) DRV - [2015/06/30 02:50:17 | 000,044,712 | ---- | M] (Elex do Brasil Participações Ltda) [Kernel | System | Running] -- C:\Windows\System32\drivers\iSafeNetFilter.sys -- (iSafeNetFilter) DRV - [2015/05/14 03:50:42 | 000,225,896 | ---- | M] (Elex do Brasil Participações Ltda) [File_System | System | Running] -- C:\Program Files\Elex-tech\YAC\iSafeKrnl.sys -- (iSafeKrnl) DRV - [2015/01/19 14:37:22 | 000,043,824 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | System | Running] -- C:\Windows\System32\drivers\gosaferdrv.sys -- (gosaferdrv) DRV - [2015/01/06 15:40:34 | 000,111,904 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\TeeDriver.sys -- (MEI) DRV - [2014/09/09 04:13:28 | 000,368,912 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\IntcDAud.sys -- (IntcDAud) DRV - [2014/07/17 18:05:08 | 000,095,920 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\NisDrvWFP.sys -- (NisDrv) DRV - [2014/06/04 15:17:30 | 000,018,624 | ---- | M] (IObit) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\SmartDefragDriver.sys -- (SmartDefragDriver) DRV - [2014/05/02 19:01:44 | 000,368,392 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\e1c6232.sys -- (e1cexpress) DRV - [2014/02/24 17:33:46 | 000,016,160 | ---- | M] (CybelSoft) [Kernel | On_Demand | Stopped] -- C:\Program Files\ma-config.com\Drivers\ma-config_x86.sys -- (ma-config_x86) DRV - [2013/11/21 08:31:26 | 000,489,832 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\iaStorA.sys -- (iaStorA) DRV - [2013/11/21 08:31:26 | 000,024,424 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\iaStorF.sys -- (iaStorF) DRV - [2013/09/17 14:48:31 | 000,016,880 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\iusb3hcs.sys -- (iusb3hcs) DRV - [2013/09/11 13:07:24 | 000,020,840 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\PrepDrv.sys -- (prepdrvr) DRV - [2013/04/26 11:40:18 | 000,148,720 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\jmcr.sys -- (JMCR) DRV - [2013/03/01 01:48:42 | 000,036,600 | ---- | M] (Riverbed Technology, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\npf.sys -- (NPF) DRV - [2013/02/20 17:30:56 | 000,188,176 | ---- | M] (Oracle Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\VBoxDrv.sys -- (VBoxDrv) DRV - [2013/02/20 17:30:38 | 000,104,720 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\VBoxNetAdp.sys -- (VBoxNetAdp) DRV - [2013/02/20 17:30:38 | 000,094,480 | ---- | M] (Oracle Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\VBoxUSBMon.sys -- (VBoxUSBMon) DRV - [2013/02/20 17:29:42 | 000,115,984 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\VBoxNetFlt.sys -- (VBoxNetFlt) DRV - [2012/08/27 19:51:26 | 000,034,800 | ---- | M] (CyberLink Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\clwvd.sys -- (clwvd) DRV - [2012/03/27 09:13:20 | 000,792,856 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\iusb3xhc.sys -- (iusb3xhc) DRV - [2012/03/27 09:13:20 | 000,349,976 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\iusb3hub.sys -- (iusb3hub) DRV - [2010/11/20 21:29:24 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV - [2010/11/20 21:29:03 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus) DRV - [2010/11/20 21:29:03 | 000,062,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\dmvsc.sys -- (dmvsc) DRV - [2010/11/20 21:29:03 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt) DRV - [2010/11/20 21:29:03 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb) DRV - [2010/11/20 21:29:03 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc) DRV - [2010/11/20 21:29:03 | 000,027,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbGD.sys -- (TsUsbGD) DRV - [2010/11/20 21:29:03 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID) DRV - [2010/11/20 21:29:03 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap) DRV - [2010/06/21 19:59:30 | 000,255,096 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Apfiltr.sys -- (ApfiltrService) DRV - [2010/01/15 10:01:54 | 000,020,080 | ---- | M] (JMicron ) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\johci.sys -- (johci) DRV - [2009/07/13 23:12:52 | 000,030,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tpm.sys -- (TPM) DRV - [2009/06/17 20:02:02 | 000,020,152 | ---- | M] (Cisco Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vpnva.sys -- (vpnva) DRV - [2008/07/23 09:31:38 | 000,044,800 | ---- | M] (Infineon Technologies AG) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ifxtpm.sys -- (IFXTPM) DRV - [2008/02/04 16:43:06 | 000,006,144 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files\EditHexa\EditHexaDisk.sys -- (EditHexaDisk) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?type=hp&ts=1444683834&from=mych123&uid=toshibaxmk3261gsyn_83g5po8itxx83g5po8it&z=a296158cb1d49977f7c3672gdz5z7zbq1b7z7e9e1m IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.v9.com/?type=hp&ts=1444683834&from=mych123&uid=toshibaxmk3261gsyn_83g5po8itxx83g5po8it&z=a296158cb1d49977f7c3672gdz5z7zbq1b7z7e9e1m IE - HKLM\..\SearchScopes,DefaultScope = {425ED333-6083-428a-92C9-0CFC28B9D1BF} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE IE - HKLM\..\SearchScopes\{425ED333-6083-428a-92C9-0CFC28B9D1BF}: "URL" = http://www.v9.com/web?type=ds&ts=1450126020&from=zzgbkk123&uid=toshibaxmk3261gsyn_83g5po8itxx83g5po8it&z=3278960644e3f4dc0d941cag1z1w5e9gfo0qeeeofo&q={searchTerms} IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}: "URL" = http://www.default-search.net/search?sid=503&aid=100&itype=n&ver=15625&tm=628&src=ds&p={searchTerms} IE - HKLM\..\SearchScopes\Yandex: "URL" = http://yandex.ru/yandsearch?clid=154468&text={searchTerms} IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?type=hp&ts=1444683834&from=mych123&uid=toshibaxmk3261gsyn_83g5po8itxx83g5po8it&z=a296158cb1d49977f7c3672gdz5z7zbq1b7z7e9e1m IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.v9.com/?type=hp&ts=1444683834&from=mych123&uid=toshibaxmk3261gsyn_83g5po8itxx83g5po8it&z=a296158cb1d49977f7c3672gdz5z7zbq1b7z7e9e1m IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = {425ED333-6083-428a-92C9-0CFC28B9D1BF} IE - HKU\.DEFAULT\..\SearchScopes\{425ED333-6083-428a-92C9-0CFC28B9D1BF}: "URL" = http://www.v9.com/web?type=ds&ts=1450126020&from=zzgbkk123&uid=toshibaxmk3261gsyn_83g5po8itxx83g5po8it&z=3278960644e3f4dc0d941cag1z1w5e9gfo0qeeeofo&q={searchTerms} IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?type=hp&ts=1444683834&from=mych123&uid=toshibaxmk3261gsyn_83g5po8itxx83g5po8it&z=a296158cb1d49977f7c3672gdz5z7zbq1b7z7e9e1m IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.v9.com/?type=hp&ts=1444683834&from=mych123&uid=toshibaxmk3261gsyn_83g5po8itxx83g5po8it&z=a296158cb1d49977f7c3672gdz5z7zbq1b7z7e9e1m IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = {425ED333-6083-428a-92C9-0CFC28B9D1BF} IE - HKU\S-1-5-18\..\SearchScopes\{425ED333-6083-428a-92C9-0CFC28B9D1BF}: "URL" = http://www.v9.com/web?type=ds&ts=1450126020&from=zzgbkk123&uid=toshibaxmk3261gsyn_83g5po8itxx83g5po8it&z=3278960644e3f4dc0d941cag1z1w5e9gfo0qeeeofo&q={searchTerms} IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?type=hp&ts=1444683834&from=mych123&uid=toshibaxmk3261gsyn_83g5po8itxx83g5po8it&z=a296158cb1d49977f7c3672gdz5z7zbq1b7z7e9e1m IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.v9.com/?type=hp&ts=1444683834&from=mych123&uid=toshibaxmk3261gsyn_83g5po8itxx83g5po8it&z=a296158cb1d49977f7c3672gdz5z7zbq1b7z7e9e1m IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = {425ED333-6083-428a-92C9-0CFC28B9D1BF} IE - HKU\S-1-5-19\..\SearchScopes\{425ED333-6083-428a-92C9-0CFC28B9D1BF}: "URL" = http://www.v9.com/web?type=ds&ts=1450126020&from=zzgbkk123&uid=toshibaxmk3261gsyn_83g5po8itxx83g5po8it&z=3278960644e3f4dc0d941cag1z1w5e9gfo0qeeeofo&q={searchTerms} IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?type=hp&ts=1444683834&from=mych123&uid=toshibaxmk3261gsyn_83g5po8itxx83g5po8it&z=a296158cb1d49977f7c3672gdz5z7zbq1b7z7e9e1m IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.v9.com/?type=hp&ts=1444683834&from=mych123&uid=toshibaxmk3261gsyn_83g5po8itxx83g5po8it&z=a296158cb1d49977f7c3672gdz5z7zbq1b7z7e9e1m IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = {425ED333-6083-428a-92C9-0CFC28B9D1BF} IE - HKU\S-1-5-20\..\SearchScopes\{425ED333-6083-428a-92C9-0CFC28B9D1BF}: "URL" = http://www.v9.com/web?type=ds&ts=1450126020&from=zzgbkk123&uid=toshibaxmk3261gsyn_83g5po8itxx83g5po8it&z=3278960644e3f4dc0d941cag1z1w5e9gfo0qeeeofo&q={searchTerms} IE - HKU\S-1-5-21-1648212374-108316283-1031727223-10215\..\SearchScopes,DefaultScope = {425ED333-6083-428a-92C9-0CFC28B9D1BF} IE - HKU\S-1-5-21-1648212374-108316283-1031727223-10215\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02 IE - HKU\S-1-5-21-1648212374-108316283-1031727223-10215\..\SearchScopes\{425ED333-6083-428a-92C9-0CFC28B9D1BF}: "URL" = http://www.v9.com/web?type=ds&ts=1450126020&from=zzgbkk123&uid=toshibaxmk3261gsyn_83g5po8itxx83g5po8it&z=3278960644e3f4dc0d941cag1z1w5e9gfo0qeeeofo&q={searchTerms} IE - HKU\S-1-5-21-1648212374-108316283-1031727223-10215\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1 IE - HKU\S-1-5-21-1648212374-108316283-1031727223-10215\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = [String data over 1000 bytes] IE - HKU\S-1-5-21-1648212374-108316283-1031727223-10215\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = diao.di:8080 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.countryCode: "SN" FF - prefs.js..browser.search.order.1: "V9" FF - prefs.js..browser.search.region: "SN" FF - prefs.js..browser.search.selectedEngine: "V9" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..extensions.enabledAddons: eDataPluginv4%40multimedia-conference.com:4.9.0.0 FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:44.0.2 FF - prefs.js..network.proxy.http: "diao.di" FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_18_0_0_232.dll () FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.56: C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.75.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.75.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll () FF - HKLM\Software\MozillaPlugins\@microsoft.com/Lync,version=15.0: C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.448: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.3.448: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprndlhtml5videoshim;version=17.0.15: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.5: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.1: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{338950EA-82DB-44C1-930D-0C28E023C9F0}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ [2015/03/12 14:40:13 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2015/03/12 14:40:13 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\ISVCU@iSkysoft.com: C:\ProgramData\iSkysoft\Video Converter Ultimate\ISVCU@iSkysoft.com\ [2016/01/05 10:24:02 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 44.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2015/09/28 13:03:27 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 44.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2016/01/23 21:45:40 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Netscape Navigator 9.0.0.6\extensions\\Components: C:\Program Files\Netscape\Navigator 9\components [2015/08/07 08:41:19 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Netscape Navigator 9.0.0.6\extensions\\Plugins: C:\Program Files\Netscape\Navigator 9\plugins [2016/01/23 21:45:40 | 000,000,000 | ---D | M] [2015/10/30 12:01:15 | 000,000,000 | ---D | M] (No name found) -- C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Roaming\mozilla\Extensions [2016/01/30 11:55:57 | 000,000,000 | ---D | M] (No name found) -- C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Roaming\mozilla\Firefox\Profiles\mdmfl239.default\extensions [2015/12/03 17:06:57 | 000,000,000 | ---D | M] (Multimedia Conference Extension) -- C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Roaming\mozilla\Firefox\Profiles\mdmfl239.default\extensions\eDataPluginv4@multimedia-conference.com [2015/11/02 13:53:08 | 000,002,369 | ---- | M] () -- C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Roaming\mozilla\firefox\profiles\mdmfl239.default\searchplugins\V9.xml [2015/09/29 13:06:15 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\browser\extensions [2016/02/17 16:51:58 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [2014/01/23 07:55:50 | 000,034,072 | ---- | M] (Microsoft Corporation) -- C:\Program Files\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [color=#E56717]========== Chrome ==========[/color] CHR - Extension: No name found = C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaafeopjhkcolncjbedbhofpocmdbn\5.5_0\ CHR - Extension: No name found = C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\ CHR - Extension: No name found = C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\ CHR - Extension: No name found = C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\ CHR - Extension: No name found = C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\ CHR - Extension: No name found = C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\ CHR - Extension: No name found = C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Local\Google\Chrome\User Data\Default\Extensions\dfachbhccemanebkkbeppgnnhkpicifp\2.2.3.38_0\ CHR - Extension: No name found = C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\ CHR - Extension: No name found = C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.5_0\ CHR - Extension: No name found = C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\ CHR - Extension: No name found = C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\ O1 HOSTS File: ([2015/10/27 03:27:48 | 000,001,687 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 mpa.one.microsoft.com O1 - Hosts: 127.0.0.1 mpa.one.microsoft.com O1 - Hosts: 127.0.0.1 mpa.one.microsoft.com O1 - Hosts: 10.100.252.7 REFA_SON3 O1 - Hosts: 10.100.252.8 REFA O1 - Hosts: 10.100.252.21 refb_son O1 - Hosts: 10.100.252.6 refc_son O1 - Hosts: 10.100.235.8 REFA_SON4 O1 - Hosts: 10.100.235.49 REFE_SON O1 - Hosts: 10.100.235.50 REFD_SON O1 - Hosts: 10.100.252.221 PLATOSN1 O1 - Hosts: 10.100.252.169 platosn REFA O1 - Hosts: 10.100.99.19 PLATOGB1 O1 - Hosts: 10.100.252.129 PLATOGC1 O1 - Hosts: 10.100.252.176 platoml O1 - Hosts: 10.100.252.174 platogb O1 - Hosts: 10.100.252.177 platogc O1 - Hosts: 10.100.252.55 ref_son_part2 O1 - Hosts: 10.100.252.54 refa_son_part1 O1 - Hosts: 10.100.252.50 refd_part1 O1 - Hosts: 10.100.252.51 REFD_PART2 O1 - Hosts: 10.100.252.52 REFE_PART1 O1 - Hosts: 10.100.252.57 refb_part2 O1 - Hosts: 10.100.252.56 refb_part1 O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Movies Search App (Dist. by Koyote-Lab, Inc.)) - {08ae5e13-70cc-4fbb-ad00-ef4b90a44451} - C:\PROGRA~1\MOVIES~1\Datamngr\SRTOOL~1\IE\searchresultsDx.dll (IAC Search and Media, Inc.) O2 - BHO: (Clock Hand 1.0.0.7) - {2f3dc1cf-3023-4906-9b17-c022e853c2d8} - C:\Program Files\Clock Hand\ClockHandBHO.dll File not found O2 - BHO: (Lync Browser Helper) - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL (Microsoft Corporation) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (IESSOObj Class) - {7DE7B623-A17E-4A0B-94BA-D1B3BA646792} - C:\Program Files\ActivIdentity\SecureLogin\iesso.dll (ActivIdentity) O2 - BHO: (iSkysoft iMedia Converter Deluxe 5.1.0) - {AEAF002F-E6D8-4A21-ABD3-2B309B79A6CE} - C:\ProgramData\iSkysoft\Video Converter Ultimate\WSBrowserAppMgr.dll (Wondershare) O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL (Microsoft Corporation) O2 - BHO: (Âèçóàëüíûå Çàêëàäêè) - {C93F72A2-2162-4BBA-A07A-F13663C297A6} - C:\Program Files\Yandex\YandexBarIE\fastdial.dll (ООО «ЯНДЕКС») O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\7.1.362.0\BingExt.dll (Microsoft Corporation.) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O3 - HKLM\..\Toolbar: (Movies Search App (Dist. by Koyote-Lab, Inc.)) - {08ae5e13-70cc-4fbb-ad00-ef4b90a44451} - C:\PROGRA~1\MOVIES~1\Datamngr\SRTOOL~1\IE\searchresultsDx.dll (IAC Search and Media, Inc.) O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\7.1.362.0\BingExt.dll (Microsoft Corporation.) O3 - HKLM\..\Toolbar: (Яндекс.Бар) - {91397D20-1446-11D4-8AF4-0040CA1127B6} - C:\Program Files\Yandex\YandexBarIE\yndbar.dll (ООО «ЯНДЕКС») O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found. O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (Яндекс.Бар) - {91397D20-1446-11D4-8AF4-0040CA1127B6} - C:\Program Files\Yandex\YandexBarIE\yndbar.dll (ООО «ЯНДЕКС») O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (Яндекс.Бар) - {91397D20-1446-11D4-8AF4-0040CA1127B6} - C:\Program Files\Yandex\YandexBarIE\yndbar.dll (ООО «ЯНДЕКС») O4 - HKLM..\Run: [AdobeCS4ServiceManager] C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [BCSSync] C:\Program Files\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation) O4 - HKLM..\Run: [CanonSolutionMenuEx] C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE (CANON INC.) O4 - HKLM..\Run: [DelaypluginInstall] C:\ProgramData\iSkysoft\Video Converter Ultimate\DelayPluginI.exe () O4 - HKLM..\Run: [IAStorIcon] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe (Intel Corporation) O4 - HKLM..\Run: [InternetEverywhere_InternetEverywhere_Launcher.exe] C:\Program Files\InternetEverywhere\InternetEverywhere_Launcher.exe File not found O4 - HKLM..\Run: [iSkysoft Helper Compact.exe] C:\Program Files\Common Files\iSkysoft\iSkysoft Helper Compact\ISHelper.exe (iSkySoft) O4 - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation) O4 - HKLM..\Run: [SecureLogin] C:\Program Files\ActivIdentity\SecureLogin\slproto.exe (ActivIdentity) O4 - HKLM..\Run: [USB3MON] C:\Program Files\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Intel Corporation) O4 - HKU\S-1-5-21-1648212374-108316283-1031727223-10215..\Run: [ACTIVIDENTITY PC Token] C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Local\ACTIVIDENTITY\PC Token\EzTokenTray.exe (ACTIVIDENTITY) O4 - HKU\S-1-5-21-1648212374-108316283-1031727223-10215..\Run: [ultracopier] C:\Program Files\Supercopier\supercopier.exe (ultracopier.first-world.info) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Low Rights present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O7 - HKU\S-1-5-21-1648212374-108316283-1031727223-10215\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: &Envoyer à OneNote - res://C:\PROGRA~1\MICROS~3\Office14\ONBttnIE.dll/105 File not found O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office14\EXCEL.EXE/3000 File not found O9 - Extra 'Tools' menuitem : Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre7\bin\jp2iexp.dll () O9 - Extra Button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Cliquer pour appeler Lync - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Cliquer pour appeler Lync - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) O9 - Extra Button: Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation) O13 - gopher Prefix: missing O15 - HKU\S-1-5-21-1648212374-108316283-1031727223-10215\..Trusted Domains: mesvevapp01 ([]* in Local intranet) O15 - HKU\S-1-5-21-1648212374-108316283-1031727223-10215\..Trusted Domains: orange-business.com ([coopnet.multimedia-conference] https in Trusted sites) O15 - HKU\S-1-5-21-1648212374-108316283-1031727223-10215\..Trusted Domains: orange-sonatel.com ([evserver] * in Local intranet) O15 - HKU\S-1-5-21-1648212374-108316283-1031727223-10215\..Trusted Domains: orange-sonatel.com ([evserver2] * in Local intranet) O15 - HKU\S-1-5-21-1648212374-108316283-1031727223-10215\..Trusted Domains: tnsvevapp01 ([]* in Local intranet) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = orange-sonatel.com O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{180DC492-CD32-47F8-AF1F-341AB44B5D38}: DhcpNameServer = 192.168.42.129 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A4782FC2-D30D-4087-A768-0F3F918E581B}: NameServer = 10.100.55.80,10.100.55.81 O18 - Protocol\Handler\osf {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation) O18 - Protocol\Handler\WSISVCUchrome - No CLSID value found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009/06/10 21:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) NetSvcs: FastUserSwitchingCompatibility - File not found NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation) NetSvcs: Nla - File not found NetSvcs: Ntmssvc - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: SRService - File not found NetSvcs: WmdmPmSp - File not found NetSvcs: LogonHours - File not found NetSvcs: PCAudit - File not found NetSvcs: helpsvc - File not found NetSvcs: uploadmgr - File not found MsConfig - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^RealPlayer Cloud Service UI.lnk - C:\PROGRA~1\Real\REALPL~1\RPDS\Bin\RPSYST~1.EXE - (RealNetworks, Inc.) MsConfig - StartUpFolder: C:^Users^NHAGA100081^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Download.lnk - - File not found MsConfig - StartUpFolder: C:^Users^NHAGA100081^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MyPC Backup.lnk - - File not found MsConfig - StartUpReg: [b]ACTIVIDENTITY PC Token[/b] - hkey= - key= - File not found MsConfig - StartUpReg: [b]CCleaner Monitoring[/b] - hkey= - key= - C:\Program Files\CCleaner\CCleaner.exe (Piriform Ltd) MsConfig - StartUpReg: [b]Skype[/b] - hkey= - key= - C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.) MsConfig - StartUpReg: [b]TkBellExe[/b] - hkey= - key= - C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.) MsConfig - StartUpReg: [b]ultracopier[/b] - hkey= - key= - C:\Program Files\Supercopier\supercopier.exe (ultracopier.first-world.info) MsConfig - StartUpReg: [b]WGA Remover[/b] - hkey= - key= - C:\Program Files\WGA Remover\wgaremover.exe () MsConfig - StartUpReg: [b]YouCam Mirage[/b] - hkey= - key= - C:\Program Files\CyberLink\YouCam\YCMMirage.exe (CyberLink) MsConfig - StartUpReg: [b]YouCam Tray[/b] - hkey= - key= - C:\Program Files\CyberLink\YouCam\YouCamTray.exe (CyberLink Corp.) MsConfig - State: "services" - 2 MsConfig - State: "bootini" - 2 MsConfig - State: "startup" - 2 SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: HelpSvc - Service SafeBootMin: MsMpSvc - c:\Program Files\Microsoft Security Client\MsMpEng.exe (Microsoft Corporation) SafeBootMin: NTDS - File not found SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PNP Filter - Driver Group SafeBootMin: Primary disk - Driver Group SafeBootMin: sacsvr - Service SafeBootMin: SCSI Class - Driver Group SafeBootMin: System Bus Extender - Driver Group SafeBootMin: vmms - Service SafeBootMin: WinDefend - C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation) SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: HelpSvc - Service SafeBootNet: Messenger - Service SafeBootNet: MsMpSvc - c:\Program Files\Microsoft Security Client\MsMpEng.exe (Microsoft Corporation) SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: NTDS - File not found SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Primary disk - Driver Group SafeBootNet: rdsessmgr - Service SafeBootNet: sacsvr - Service SafeBootNet: SCSI Class - Driver Group SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TDI - Driver Group SafeBootNet: vmms - Service SafeBootNet: WinDefend - C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation) SafeBootNet: WudfUsbccidDriver - Driver SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun) ActiveX: {1AEC7E4A-E3E8-3406-4BAC-71EB620C7289} - Microsoft Windows Media Player 12.0 ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0 ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework ActiveX: {42A6C2A7-4DB0-A97D-3EE0-AF626ECEB29E} - Microsoft Windows Media Player ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -UserConfig ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install ActiveX: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files\Google\Chrome\Application\44.0.2403.157\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX: {9F612429-4A00-3D44-88CF-146DA2EE1F92} - .NET Framework ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX: {DB213A15-3138-46C6-9D52-3D4B23C147EB} - EIEDPLauncher ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP ActiveX: >{53124C25-17B2-4835-B924-AF914D063766} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation) Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.) PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2016/03/07 09:16:49 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\NHAGA100081.ORANGE-SONATEL\Desktop\OTL.exe [2016/03/03 08:51:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft System Center 2012 R2 [2016/03/03 08:49:23 | 000,000,000 | ---D | C] -- C:\Windows\ms [2016/03/03 08:49:23 | 000,000,000 | ---D | C] -- C:\Windows\System32\{3DA228BE-34DA-49f4-A081-66465B077429} [2016/03/01 01:14:21 | 000,000,000 | ---D | C] -- C:\Windows\Minidump [2016/02/22 17:41:17 | 000,000,000 | ---D | C] -- C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Roaming\EasternGraphics [2016/02/22 17:36:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\pCon Tools [2016/02/22 17:32:35 | 000,000,000 | ---D | C] -- C:\Users\NHAGA100081.ORANGE-SONATEL\EasternGraphics [2016/02/22 17:32:31 | 000,000,000 | -H-D | C] -- C:\ProgramData\{0ADFD9B5-DE61-4915-9B79-1B8FF79919DC} [2016/02/22 17:32:30 | 000,000,000 | ---D | C] -- C:\Program Files\EasternGraphics [2016/02/22 17:32:21 | 000,000,000 | ---D | C] -- C:\ProgramData\EasternGraphics [2016/02/22 17:29:35 | 000,000,000 | ---D | C] -- C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Local\III [2016/02/17 10:37:00 | 000,000,000 | ---D | C] -- C:\Users\NHAGA100081.ORANGE-SONATEL\Desktop\controleaudit [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2016/03/07 09:24:09 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin [2016/03/07 09:19:19 | 000,001,058 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2016/03/07 09:16:54 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\NHAGA100081.ORANGE-SONATEL\Desktop\OTL.exe [2016/03/07 09:10:33 | 000,000,581 | ---- | M] () -- C:\Windows\SMSCFG.ini [2016/03/07 09:08:30 | 000,001,054 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2016/03/07 09:07:03 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2016/03/07 09:07:00 | 2322,763,776 | -HS- | M] () -- C:\hiberfil.sys [2016/03/07 09:05:10 | 000,000,600 | ---- | M] () -- C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Local\PUTTY.RND [2016/03/07 08:50:03 | 000,000,498 | ---- | M] () -- C:\Windows\tasks\HP Photo Creations Communicator.job [2016/03/05 13:01:18 | 000,033,712 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2016/03/05 13:01:18 | 000,033,712 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2016/03/03 18:12:19 | 000,001,791 | ---- | M] () -- C:\Users\NHAGA100081.ORANGE-SONATEL\Documents\MFM_contract_create.sql [2016/03/03 15:10:22 | 000,001,199 | ---- | M] () -- C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Local\RAExpertHistory.xml [2016/03/03 08:50:25 | 000,001,875 | ---- | M] () -- C:\Windows\System32\InstallUtil.InstallLog [2016/03/03 08:50:20 | 000,800,536 | ---- | M] () -- C:\Windows\System32\perfh00C.dat [2016/03/03 08:50:20 | 000,699,362 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2016/03/03 08:50:20 | 000,168,136 | ---- | M] () -- C:\Windows\System32\perfc00C.dat [2016/03/03 08:50:20 | 000,136,020 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2016/03/03 08:50:19 | 000,009,616 | ---- | M] () -- C:\Windows\System32\CcmFramework.ini [2016/03/03 08:50:19 | 000,000,621 | ---- | M] () -- C:\Windows\System32\CcmFramework.h [2016/03/01 01:14:20 | 309,502,036 | ---- | M] () -- C:\Windows\MEMORY.DMP [2016/02/29 08:24:05 | 000,003,084 | RHS- | M] () -- C:\Users\NHAGA100081.ORANGE-SONATEL\ntuser.pol [2016/02/26 23:41:35 | 000,005,240 | ---- | M] () -- C:\Users\NHAGA100081.ORANGE-SONATEL\Desktop\Abonnes.csv [2016/02/26 22:25:24 | 000,002,043 | ---- | M] () -- C:\Users\Public\Desktop\FileZilla Client.lnk [2016/02/22 17:36:25 | 000,002,273 | ---- | M] () -- C:\Users\Public\Desktop\pCon.planner STD.lnk [2016/02/17 08:46:24 | 000,031,744 | ---- | M] () -- C:\Users\NHAGA100081.ORANGE-SONATEL\Desktop\ZebraOGW DWH sur Binterco.msg [2016/02/09 13:45:29 | 000,000,061 | ---- | M] () -- C:\Users\NHAGA100081.ORANGE-SONATEL\Documents\carro da Katia [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2016/03/07 09:24:09 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin [2016/03/03 08:50:19 | 000,009,616 | ---- | C] () -- C:\Windows\System32\CcmFramework.ini [2016/03/03 08:50:19 | 000,000,621 | ---- | C] () -- C:\Windows\System32\CcmFramework.h [2016/03/01 01:14:20 | 309,502,036 | ---- | C] () -- C:\Windows\MEMORY.DMP [2016/02/26 23:37:29 | 000,005,240 | ---- | C] () -- C:\Users\NHAGA100081.ORANGE-SONATEL\Desktop\Abonnes.csv [2016/02/22 17:36:24 | 000,002,273 | ---- | C] () -- C:\Users\Public\Desktop\pCon.planner STD.lnk [2016/02/22 17:36:23 | 000,002,283 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\pCon.planner STD.lnk [2016/02/17 08:46:23 | 000,031,744 | ---- | C] () -- C:\Users\NHAGA100081.ORANGE-SONATEL\Desktop\ZebraOGW DWH sur Binterco.msg [2016/01/05 10:18:47 | 000,721,263 | ---- | C] () -- C:\Windows\System32\ISCM64.dll [2016/01/05 10:18:46 | 000,214,528 | ---- | C] () -- C:\Windows\System32\ISCM32.dll [2016/01/02 22:53:51 | 000,484,352 | ---- | C] () -- C:\Windows\System32\lame_enc.dll [2015/12/04 10:52:56 | 000,005,106 | ---- | C] () -- C:\Users\NHAGA100081.ORANGE-SONATEL\advanced_ip_scanner_MAC.bin [2015/11/09 09:19:47 | 000,001,199 | ---- | C] () -- C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Local\RAExpertHistory.xml [2015/10/31 22:01:42 | 000,000,600 | ---- | C] () -- C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Local\PUTTY.RND [2015/10/30 11:41:35 | 000,003,084 | RHS- | C] () -- C:\Users\NHAGA100081.ORANGE-SONATEL\ntuser.pol [2015/06/11 08:59:18 | 000,004,096 | ---- | C] () -- C:\Windows\System32\ntwdblib.dll [2015/05/09 12:44:31 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat [2015/03/18 16:22:37 | 000,180,000 | ---- | C] () -- C:\Windows\aaRemove.exe [2015/02/26 08:59:17 | 000,393,256 | ---- | C] () -- C:\Windows\System32\CNQ2414N.DAT [2015/02/04 17:26:21 | 000,344,522 | ---- | C] () -- C:\Windows\System32\perfi00C.dat [2015/02/04 17:26:20 | 000,800,536 | ---- | C] () -- C:\Windows\System32\perfh00C.dat [2015/02/04 17:26:20 | 000,168,136 | ---- | C] () -- C:\Windows\System32\perfc00C.dat [2015/02/04 17:26:20 | 000,038,160 | ---- | C] () -- C:\Windows\System32\perfd00C.dat [2015/02/04 11:15:29 | 000,378,880 | ---- | C] () -- C:\Windows\System32\KXauth.dll [2015/02/04 11:15:06 | 000,000,188 | ---- | C] () -- C:\Windows\ODBC.INI [2015/02/04 11:15:06 | 000,000,023 | ---- | C] () -- C:\Windows\ODBCINST.INI [2015/02/04 10:06:49 | 000,000,581 | ---- | C] () -- C:\Windows\SMSCFG.ini [2015/02/04 10:02:45 | 000,039,373 | RHS- | C] () -- C:\ProgramData\ntuser.pol [2014/12/14 20:35:16 | 000,184,832 | ---- | C] () -- C:\Windows\System32\igdde32.dll [2014/12/14 20:35:16 | 000,143,872 | ---- | C] () -- C:\Windows\System32\igdail32.dll [2014/12/14 20:35:12 | 000,005,120 | ---- | C] ( ) -- C:\Windows\System32\igfxLHMLibv2_0.dll [2014/12/14 20:35:12 | 000,005,120 | ---- | C] ( ) -- C:\Windows\System32\igfxLHMLib.dll [2014/12/14 20:35:10 | 000,010,240 | ---- | C] ( ) -- C:\Windows\System32\igfxEMLibv2_0.dll [2014/12/14 20:35:10 | 000,010,240 | ---- | C] ( ) -- C:\Windows\System32\igfxEMLib.dll [2014/12/14 20:35:08 | 000,069,632 | ---- | C] ( ) -- C:\Windows\System32\igfxDHLibv2_0.dll [2014/12/14 20:35:08 | 000,059,392 | ---- | C] ( ) -- C:\Windows\System32\igfxDHLib.dll [2014/12/14 20:35:08 | 000,010,752 | ---- | C] ( ) -- C:\Windows\System32\igfxDILib.dll [2014/12/14 20:35:08 | 000,010,240 | ---- | C] ( ) -- C:\Windows\System32\igfxDILibv2_0.dll [2014/12/14 20:35:06 | 000,080,384 | ---- | C] () -- C:\Windows\System32\igfxCUIServicePS.dll [2014/12/14 20:35:04 | 000,000,895 | ---- | C] () -- C:\Windows\System32\Gfxv2_0.exe.config [2014/12/14 20:35:04 | 000,000,895 | ---- | C] () -- C:\Windows\System32\DPTopologyAppv2_0.exe.config [2014/12/14 20:35:04 | 000,000,889 | ---- | C] () -- C:\Windows\System32\Gfxv4_0.exe.config [2014/12/14 20:35:04 | 000,000,889 | ---- | C] () -- C:\Windows\System32\DPTopologyApp.exe.config [2014/12/14 20:35:02 | 000,000,895 | ---- | C] () -- C:\Windows\System32\CustomModeAppv2_0.exe.config [2014/12/14 20:35:02 | 000,000,889 | ---- | C] () -- C:\Windows\System32\CustomModeApp.exe.config [2014/12/14 20:26:54 | 000,094,208 | ---- | C] () -- C:\Windows\System32\IccLibDll.dll [color=#E56717]========== ZeroAccess Check ==========[/color] [2009/07/14 04:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2010/11/20 21:29:11 | 012,872,192 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 21:29:20 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = %systemroot%\system32\wbem\wbemess.dll -- [2009/07/14 01:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [color=#E56717]========== LOP Check ==========[/color] [2015/05/07 10:29:45 | 000,000,000 | ---D | M] -- C:\Users\gomes100060\AppData\Roaming\IObit [2015/05/07 10:30:02 | 000,000,000 | ---D | M] -- C:\Users\gomes100060\AppData\Roaming\SecureLogin [2015/04/15 18:01:57 | 000,000,000 | ---D | M] -- C:\Users\gomes100073\AppData\Roaming\SecureLogin [2015/08/20 10:10:40 | 000,000,000 | ---D | M] -- C:\Users\gomes100083\AppData\Roaming\IObit [2015/08/20 10:11:17 | 000,000,000 | ---D | M] -- C:\Users\gomes100083\AppData\Roaming\SecureLogin [2015/08/20 10:12:29 | 000,000,000 | ---D | M] -- C:\Users\gomes100083\AppData\Roaming\TeamViewer [2015/09/29 09:48:01 | 000,000,000 | ---D | M] -- C:\Users\gomes100083.ORANGE-SONATEL\AppData\Roaming\Elex-tech [2015/09/29 09:49:19 | 000,000,000 | ---D | M] -- C:\Users\gomes100083.ORANGE-SONATEL\AppData\Roaming\SecureLogin [2015/09/29 09:49:56 | 000,000,000 | ---D | M] -- C:\Users\gomes100083.ORANGE-SONATEL\AppData\Roaming\TeamViewer [2015/10/27 05:27:30 | 000,000,000 | ---D | M] -- C:\Users\NHAGA\AppData\Roaming\Elex-tech [2015/10/28 11:38:56 | 000,000,000 | ---D | M] -- C:\Users\NHAGA\AppData\Roaming\Notepad++ [2015/02/04 09:45:27 | 000,000,000 | ---D | M] -- C:\Users\NHAGA\AppData\Roaming\Opera [2015/10/27 05:30:31 | 000,000,000 | ---D | M] -- C:\Users\NHAGA\AppData\Roaming\SecureLogin [2015/02/04 09:45:28 | 000,000,000 | ---D | M] -- C:\Users\NHAGA\AppData\Roaming\Yandex [2015/10/01 00:14:19 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081\AppData\Roaming\Apowersoft [2015/10/05 12:23:50 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081\AppData\Roaming\Ashampoo [2015/02/07 17:24:08 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081\AppData\Roaming\Binary data [2015/02/10 17:04:07 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081\AppData\Roaming\Bodet_Client [2015/09/30 12:57:01 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081\AppData\Roaming\BSplayer [2015/09/30 12:47:13 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081\AppData\Roaming\BSplayer Pro [2015/03/11 14:46:20 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081\AppData\Roaming\Canon [2015/10/12 21:04:07 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081\AppData\Roaming\com.adobe.ExMan [2015/02/04 17:26:04 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081\AppData\Roaming\driveridentifier [2015/02/07 17:36:17 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081\AppData\Roaming\DRPSu [2015/07/29 10:28:11 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081\AppData\Roaming\EasyNet [2015/09/29 13:21:15 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081\AppData\Roaming\Elex-tech [2015/10/23 12:19:07 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081\AppData\Roaming\FileZilla [2015/08/06 17:57:23 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081\AppData\Roaming\InternetEverywhere [2015/08/21 20:45:35 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081\AppData\Roaming\IObit [2015/10/27 17:15:01 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081\AppData\Roaming\mRemoteNG [2015/10/29 17:42:26 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081\AppData\Roaming\MySQL [2015/05/09 12:44:27 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081\AppData\Roaming\Netscape [2015/02/20 09:33:15 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081\AppData\Roaming\Notepad++ [2015/02/11 10:56:54 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081\AppData\Roaming\Opera Software [2015/03/18 16:22:54 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081\AppData\Roaming\PLSQL Developer [2015/10/04 17:22:45 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081\AppData\Roaming\ProductData [2015/02/04 11:26:42 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081\AppData\Roaming\Quest Software [2015/04/07 23:02:09 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081\AppData\Roaming\SecureLogin [2015/02/04 11:15:52 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081\AppData\Roaming\Software [2015/02/09 12:42:47 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081\AppData\Roaming\SQL Developer [2015/02/04 12:19:57 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081\AppData\Roaming\sqldeveloper [2015/02/04 13:21:04 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081\AppData\Roaming\Subversion [2015/05/10 14:35:51 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081\AppData\Roaming\TeamViewer [2015/04/07 09:56:31 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081\AppData\Roaming\TuneUp Software [2015/03/05 10:52:52 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081\AppData\Roaming\webex [2015/07/27 17:23:54 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081\AppData\Roaming\Wireshark [2015/02/04 10:06:40 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081\AppData\Roaming\Yandex [2015/02/19 00:10:48 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081\AppData\Roaming\Youtube Downloader HD [2015/08/06 10:22:46 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081\AppData\Roaming\ZHP [2015/12/23 22:34:06 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Roaming\Apowersoft [2016/02/04 12:46:44 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Roaming\Baidu [2015/12/01 09:21:38 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Roaming\Canon [2016/02/22 17:41:17 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Roaming\EasternGraphics [2015/10/30 11:41:07 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Roaming\Elex-tech [2016/03/04 13:30:46 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Roaming\FileZilla [2016/01/02 22:55:51 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Roaming\FreeAudioPack [2015/10/30 11:41:06 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Roaming\IObit [2016/01/05 10:31:14 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Roaming\iSkysoft iMedia Converter Deluxe [2016/03/07 09:05:53 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Roaming\mRemoteNG [2016/02/04 18:04:58 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Roaming\MySQL [2015/11/03 12:18:14 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Roaming\Notepad++ [2015/11/02 13:42:51 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Roaming\ProductData [2015/10/30 11:42:15 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Roaming\SecureLogin [2016/02/03 18:02:52 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Roaming\SQL Developer [2015/10/30 15:23:21 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Roaming\Subversion [2015/10/30 12:23:00 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Roaming\TeamViewer [2016/01/09 21:53:26 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Roaming\Visan [2015/10/30 11:42:22 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Roaming\Yandex [2016/01/05 10:32:02 | 000,000,000 | ---D | M] -- C:\Users\NHAGA100081.ORANGE-SONATEL\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A} [2015/02/04 10:00:40 | 000,000,000 | ---D | M] -- C:\Users\support\AppData\Roaming\Yandex [color=#E56717]========== Custom Scans ==========[/color] [color=#A23BEC]< %SYSTEMDRIVE%\*.* >[/color] [2009/06/10 21:42:20 | 000,000,024 | ---- | M] () -- C:\autoexec.bat [2009/06/10 21:42:20 | 000,000,010 | ---- | M] () -- C:\config.sys [2016/03/07 09:07:00 | 2322,763,776 | -HS- | M] () -- C:\hiberfil.sys [2015/03/12 12:14:48 | 000,000,000 | RHS- | M] () -- C:\IO.SYS [2015/03/12 12:14:48 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS [2016/03/07 09:07:01 | 3097,022,464 | -HS- | M] () -- C:\pagefile.sys [2015/08/06 10:24:03 | 000,000,512 | ---- | M] () -- C:\PhysicalDisk0_MBR.bin [2016/03/07 09:24:09 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin [2015/04/07 14:42:44 | 000,810,606 | ---- | M] () -- C:\silentlogs.txt [color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color] [color=#A23BEC]< %PROGRAMFILES%\*.* >[/color] [2009/07/14 04:41:57 | 000,000,174 | -HS- | M] () -- C:\Program Files\desktop.ini [color=#A23BEC]< %PROGRAMFILES%\*. >[/color] [2015/02/04 11:11:05 | 000,000,000 | ---D | M] -- C:\Program Files\7-Zip [2015/04/07 14:42:15 | 000,000,000 | ---D | M] -- C:\Program Files\ActivIdentity [2015/09/29 07:58:41 | 000,000,000 | ---D | M] -- C:\Program Files\ActSys [2015/10/15 08:56:00 | 000,000,000 | ---D | M] -- C:\Program Files\Adobe [2015/10/12 20:30:03 | 000,000,000 | ---D | M] -- C:\Program Files\Adobe Media Player [2015/10/13 21:51:54 | 000,000,000 | ---D | M] -- C:\Program Files\Adobem [2015/05/11 10:22:55 | 000,000,000 | ---D | M] -- C:\Program Files\Advanced IP Scanner [2015/02/04 09:44:47 | 000,000,000 | ---D | M] -- C:\Program Files\Apoint2K [2015/10/01 00:12:40 | 000,000,000 | ---D | M] -- C:\Program Files\Apowersoft [2015/07/22 19:07:27 | 000,000,000 | ---D | M] -- C:\Program Files\Ashampoo [2016/02/04 12:45:27 | 000,000,000 | ---D | M] -- C:\Program Files\baidu [2015/02/26 09:00:02 | 000,000,000 | ---D | M] -- C:\Program Files\Canon [2015/02/26 08:58:53 | 000,000,000 | -H-D | M] -- C:\Program Files\CanonBJ [2015/05/09 15:21:01 | 000,000,000 | ---D | M] -- C:\Program Files\CCleaner [2015/04/02 09:20:19 | 000,000,000 | ---D | M] -- C:\Program Files\Cisco [2016/01/05 10:24:54 | 000,000,000 | ---D | M] -- C:\Program Files\Common Files [2015/04/02 09:23:22 | 000,000,000 | ---D | M] -- C:\Program Files\CyberLink [2015/02/04 17:40:01 | 000,000,000 | ---D | M] -- C:\Program Files\DIFX [2015/02/04 17:25:40 | 000,000,000 | ---D | M] -- C:\Program Files\Driver Identifier [2015/02/07 17:27:43 | 000,000,000 | ---D | M] -- C:\Program Files\Driver Updater [2015/02/04 17:32:19 | 000,000,000 | ---D | M] -- C:\Program Files\DriverPack Solution Installer 13 [2015/02/04 17:57:58 | 000,000,000 | ---D | M] -- C:\Program Files\DVD Maker [2016/02/22 17:33:56 | 000,000,000 | ---D | M] -- C:\Program Files\EasternGraphics [2015/02/17 11:32:13 | 000,000,000 | ---D | M] -- C:\Program Files\EditHexa [2015/09/28 11:55:24 | 000,000,000 | ---D | M] -- C:\Program Files\Elex-tech [2015/02/05 08:35:17 | 000,000,000 | ---D | M] -- C:\Program Files\Enterprise Vault [2015/02/04 09:35:36 | 000,000,000 | -HSD | M] -- C:\Program Files\Fichiers communs [2016/02/26 22:25:24 | 000,000,000 | ---D | M] -- C:\Program Files\FileZilla FTP Client [2015/03/28 22:16:04 | 000,000,000 | ---D | M] -- C:\Program Files\Firebird [2015/11/30 13:17:15 | 000,000,000 | ---D | M] -- C:\Program Files\FormatFactory [2015/08/29 15:03:48 | 000,000,000 | ---D | M] -- C:\Program Files\fPrivacy [2016/01/02 22:54:47 | 000,000,000 | ---D | M] -- C:\Program Files\Free mp3 Wma Converter [2015/08/14 13:58:36 | 000,000,000 | ---D | M] -- C:\Program Files\GIMP 2 [2015/03/19 22:01:04 | 000,000,000 | ---D | M] -- C:\Program Files\Google [2015/02/06 16:13:31 | 000,000,000 | ---D | M] -- C:\Program Files\GRETECH [2015/11/03 10:11:41 | 000,000,000 | ---D | M] -- C:\Program Files\HEXwrite [2015/07/27 14:38:48 | 000,000,000 | ---D | M] -- C:\Program Files\Huawei [2016/01/02 21:22:10 | 000,000,000 | ---D | M] -- C:\Program Files\IAC Updater [2015/02/11 11:05:13 | 000,000,000 | ---D | M] -- C:\Program Files\IDM Computer Solutions [2015/04/02 09:24:12 | 000,000,000 | ---D | M] -- C:\Program Files\InstallShield Installation Information [2015/04/02 11:20:11 | 000,000,000 | ---D | M] -- C:\Program Files\Intel [2015/08/10 15:50:15 | 000,000,000 | ---D | M] -- C:\Program Files\Intel Driver Update Utility [2015/09/29 13:18:05 | 000,000,000 | ---D | M] -- C:\Program Files\Internet Explorer [2016/02/27 22:30:30 | 000,000,000 | ---D | M] -- C:\Program Files\IObit [2016/01/05 10:09:11 | 000,000,000 | ---D | M] -- C:\Program Files\iskysoft [2015/02/04 13:06:36 | 000,000,000 | ---D | M] -- C:\Program Files\Java [2015/02/06 11:41:53 | 000,000,000 | ---D | M] -- C:\Program Files\JMicron [2015/02/07 11:26:04 | 000,000,000 | ---D | M] -- C:\Program Files\ma-config.com [2015/10/12 20:17:27 | 000,000,000 | ---D | M] -- C:\Program Files\Macromedia [2015/02/25 11:25:17 | 000,000,000 | ---D | M] -- C:\Program Files\mbot_br_620 [2015/03/29 13:57:36 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft [2015/02/04 10:08:31 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Analysis Services [2015/08/22 11:16:10 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Office [2015/02/04 10:05:52 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Policy Platform [2015/02/04 17:22:42 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Security Client [2015/02/04 10:06:08 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Silverlight [2015/03/28 23:02:33 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft SQL Server [2015/02/04 10:09:56 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft SQL Server Compact Edition [2015/02/04 10:09:56 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Sync Framework [2015/02/04 10:10:10 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Synchronization Services [2015/02/04 10:09:25 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Visual Studio 8 [2015/03/28 20:49:16 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft.NET [2016/01/02 21:20:58 | 000,000,000 | ---D | M] -- C:\Program Files\Movies App [2016/02/17 16:52:09 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox [2016/02/18 08:27:49 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Maintenance Service [2015/11/14 18:01:44 | 000,000,000 | ---D | M] -- C:\Program Files\mRemoteNG [2015/02/04 10:10:24 | 000,000,000 | ---D | M] -- C:\Program Files\MSBuild [2015/02/04 11:15:47 | 000,000,000 | ---D | M] -- C:\Program Files\MSXML 4.0 [2015/05/13 15:10:56 | 000,000,000 | ---D | M] -- C:\Program Files\MySQL [2015/05/09 15:55:37 | 000,000,000 | ---D | M] -- C:\Program Files\Netscape [2015/11/14 22:40:58 | 000,000,000 | ---D | M] -- C:\Program Files\Notepad++ [2015/06/23 16:16:07 | 000,000,000 | ---D | M] -- C:\Program Files\NSClient++ [2015/10/02 23:20:09 | 000,000,000 | ---D | M] -- C:\Program Files\Opera [2015/03/24 11:54:37 | 000,000,000 | ---D | M] -- C:\Program Files\PLSQL Developer [2015/08/07 08:21:20 | 000,000,000 | ---D | M] -- C:\Program Files\PowerDataRecovery [2015/02/04 11:10:15 | 000,000,000 | ---D | M] -- C:\Program Files\Raize [2015/08/07 08:40:00 | 000,000,000 | ---D | M] -- C:\Program Files\Real [2015/03/12 14:40:14 | 000,000,000 | ---D | M] -- C:\Program Files\RealNetworks [2015/11/02 19:17:05 | 000,000,000 | ---D | M] -- C:\Program Files\Recuva [2009/07/14 04:52:30 | 000,000,000 | ---D | M] -- C:\Program Files\Reference Assemblies [2015/10/15 00:02:15 | 000,000,000 | ---D | M] -- C:\Program Files\RSyslog [2015/08/21 21:40:12 | 000,000,000 | ---D | M] -- C:\Program Files\SaveSys [2015/04/07 09:54:03 | 000,000,000 | R--D | M] -- C:\Program Files\Skype [2015/02/04 11:58:52 | 000,000,000 | ---D | M] -- C:\Program Files\Sun [2015/11/03 19:00:20 | 000,000,000 | ---D | M] -- C:\Program Files\Supercopier [2015/07/06 08:50:11 | 000,000,000 | ---D | M] -- C:\Program Files\Symantec [2015/02/04 09:43:26 | 000,000,000 | ---D | M] -- C:\Program Files\Synaptics [2015/05/04 12:06:28 | 000,000,000 | ---D | M] -- C:\Program Files\TeamViewer [2015/07/28 15:17:24 | 000,000,000 | ---D | M] -- C:\Program Files\Tool & Asset Manager 2.0 [2009/07/14 04:53:23 | 000,000,000 | -H-D | M] -- C:\Program Files\Uninstall Information [2015/02/05 15:21:39 | 000,000,000 | ---D | M] -- C:\Program Files\VideoLAN [2015/09/30 12:47:06 | 000,000,000 | ---D | M] -- C:\Program Files\Webteh [2015/03/13 08:05:52 | 000,000,000 | ---D | M] -- C:\Program Files\WGA Remover [2015/02/04 17:57:57 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Defender [2015/02/04 17:57:58 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Journal [2015/02/04 17:57:58 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Mail [2015/02/04 17:57:58 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Media Player [2015/02/04 09:35:36 | 000,000,000 | ---D | M] -- C:\Program Files\Windows NT [2015/02/04 17:57:58 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Photo Viewer [2010/11/20 21:33:48 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Portable Devices [2015/02/04 17:57:58 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Sidebar [2015/07/27 14:41:24 | 000,000,000 | ---D | M] -- C:\Program Files\WinPcap [2015/03/02 18:00:23 | 000,000,000 | ---D | M] -- C:\Program Files\WinRAR [2015/02/04 10:46:11 | 000,000,000 | ---D | M] -- C:\Program Files\WinZip [2015/07/27 14:43:11 | 000,000,000 | ---D | M] -- C:\Program Files\Wireshark [2015/02/04 09:45:27 | 000,000,000 | ---D | M] -- C:\Program Files\Yandex [2015/10/08 22:53:05 | 000,000,000 | ---D | M] -- C:\Program Files\Youtube Downloader HD [color=#A23BEC]< MD5 for: AGP440.SYS >[/color] [2009/07/14 01:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\drivers\AGP440.sys [2009/07/14 01:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_a97a2a0d0fbc6696\AGP440.sys [2009/07/14 01:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_bc1a57271cf2f285\AGP440.sys [color=#A23BEC]< MD5 for: APPMGMTS.DLL >[/color] [2009/07/14 01:14:53 | 000,149,504 | ---- | M] (Microsoft Corporation) MD5=A45D184DF6A8803DA13A0B329517A64A -- C:\Windows\System32\appmgmts.dll [2009/07/14 01:14:53 | 000,149,504 | ---- | M] (Microsoft Corporation) MD5=A45D184DF6A8803DA13A0B329517A64A -- C:\Windows\winsxs\x86_microsoft-windows-g..oftwareinstallation_31bf3856ad364e35_6.1.7600.16385_none_81a53e87bd5d36aa\appmgmts.dll [color=#A23BEC]< MD5 for: ATAPI.SYS >[/color] [2009/07/14 01:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys [2009/07/14 01:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_fab873f3e8a3315c\atapi.sys [2009/07/14 01:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_df3f92057fcbe7a7\atapi.sys [color=#A23BEC]< MD5 for: AUTOCHK.EXE >[/color] [2010/11/20 21:29:06 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\System32\autochk.exe [2010/11/20 21:29:06 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe [color=#A23BEC]< MD5 for: BEEP.SYS >[/color] [2009/07/13 23:45:01 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=505506526A9D467307B3C393DEDAF858 -- C:\Windows\System32\drivers\beep.sys [2009/07/13 23:45:01 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=505506526A9D467307B3C393DEDAF858 -- C:\Windows\winsxs\x86_microsoft-windows-beepsys_31bf3856ad364e35_6.1.7600.16385_none_c3f6f77668f0ddcc\beep.sys [color=#A23BEC]< MD5 for: CNGAUDIT.DLL >[/color] [2009/07/14 01:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\System32\cngaudit.dll [2009/07/14 01:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll [color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color] [2010/11/20 21:29:20 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\explorer.exe [2010/11/20 21:29:20 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_53bc10fdd7fe87ca\explorer.exe [color=#A23BEC]< MD5 for: HIDSERV.DLL >[/color] [2009/07/14 01:15:24 | 000,049,152 | ---- | M] (Microsoft Corporation) MD5=2BC6F6A1992B3A77F5F41432CA6B3B6B -- C:\Windows\System32\hidserv.dll [2009/07/14 01:15:24 | 000,049,152 | ---- | M] (Microsoft Corporation) MD5=2BC6F6A1992B3A77F5F41432CA6B3B6B -- C:\Windows\winsxs\x86_microsoft-windows-hid-user_31bf3856ad364e35_6.1.7600.16385_none_d6829e90e8c23da8\hidserv.dll [color=#A23BEC]< MD5 for: IASTORV.SYS >[/color] [2010/11/20 21:29:03 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\System32\drivers\iaStorV.sys [2010/11/20 21:29:03 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_668286aa35d55928\iaStorV.sys [2010/11/20 21:29:03 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_b118bc63e60a139a\iaStorV.sys [color=#A23BEC]< MD5 for: IMM32.DLL >[/color] [2010/11/20 21:29:20 | 000,118,272 | ---- | M] (Microsoft Corporation) MD5=4A8E2F20809CC161107FAA94F6CF2685 -- C:\Windows\System32\imm32.dll [2010/11/20 21:29:20 | 000,118,272 | ---- | M] (Microsoft Corporation) MD5=4A8E2F20809CC161107FAA94F6CF2685 -- C:\Windows\winsxs\x86_microsoft-windows-imm32_31bf3856ad364e35_6.1.7601.17514_none_5e5d8801d8ad160d\imm32.dll [color=#A23BEC]< MD5 for: KERNEL32.DLL >[/color] [2015/02/04 17:50:49 | 000,868,352 | ---- | M] (Microsoft Corporation) MD5=02D5E2D9D9497F314C97E082A1CB9808 -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.17617_none_95c851f0b48aeae5\kernel32.dll [2010/11/20 21:29:19 | 000,857,600 | ---- | M] (Microsoft Corporation) MD5=5553784D774CA845380650E010BBDA2C -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.17514_none_95c54f2cb48da1b9\kernel32.dll [2015/02/04 17:50:49 | 000,868,352 | ---- | M] (Microsoft Corporation) MD5=5717FC9D2A1DAA0596DC7D940F2D613C -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.21728_none_96481f19cdafbff7\kernel32.dll [2015/02/04 17:51:26 | 000,868,352 | ---- | M] (Microsoft Corporation) MD5=6F93A0F455963DC8A9A16BB682C8D589 -- C:\Windows\System32\kernel32.dll [2015/02/04 17:51:26 | 000,868,352 | ---- | M] (Microsoft Corporation) MD5=6F93A0F455963DC8A9A16BB682C8D589 -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.17932_none_95adb658b49f9b89\kernel32.dll [2015/02/04 17:51:26 | 000,868,352 | ---- | M] (Microsoft Corporation) MD5=9139B25AA9CA8749A11F2BE863EF391B -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22091_none_95f5498dcdeeffbd\kernel32.dll [color=#A23BEC]< MD5 for: MSWSOCK.DLL >[/color] [2015/02/04 17:52:43 | 000,231,424 | ---- | M] (Microsoft Corporation) MD5=6547D445C4B69DC0083B619AC642DF04 -- C:\Windows\winsxs\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.1.7601.22444_none_bac3d364a4c3ea89\mswsock.dll [2010/11/20 21:29:12 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=8999B8631C7FD9F7F9EC3CAFD953BA24 -- C:\Windows\winsxs\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.1.7601.17514_none_ba5ac0f18b8dd799\mswsock.dll [2015/02/04 17:52:43 | 000,231,424 | ---- | M] (Microsoft Corporation) MD5=E94C583CDE2348950155F2AF2876F34D -- C:\Windows\System32\mswsock.dll [2015/02/04 17:52:43 | 000,231,424 | ---- | M] (Microsoft Corporation) MD5=E94C583CDE2348950155F2AF2876F34D -- C:\Windows\winsxs\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.1.7601.18254_none_ba2f64c78bae6989\mswsock.dll [color=#A23BEC]< MD5 for: NDIS.SYS >[/color] [2010/11/20 21:29:12 | 000,712,576 | ---- | M] (Microsoft Corporation) MD5=E7C54812A2AAF43316EB6930C1FFA108 -- C:\Windows\System32\drivers\ndis.sys [2010/11/20 21:29:12 | 000,712,576 | ---- | M] (Microsoft Corporation) MD5=E7C54812A2AAF43316EB6930C1FFA108 -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17514_none_a9ce95b27a512623\ndis.sys [color=#A23BEC]< MD5 for: NETLOGON.DLL >[/color] [2010/11/20 21:29:12 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\System32\netlogon.dll [2010/11/20 21:29:12 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_ffbf212e963c0162\netlogon.dll [color=#A23BEC]< MD5 for: NTFS.SYS >[/color] [2010/11/20 21:29:12 | 001,211,264 | ---- | M] (Microsoft Corporation) MD5=33C3093D09017CFE2E219F2472BFF6EB -- C:\Windows\System32\drivers\ntfs.sys [2010/11/20 21:29:12 | 001,211,264 | ---- | M] (Microsoft Corporation) MD5=33C3093D09017CFE2E219F2472BFF6EB -- C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.17514_none_a87893a87b2db29e\ntfs.sys [color=#A23BEC]< MD5 for: NVSTOR.SYS >[/color] [2010/11/20 21:29:03 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\System32\drivers\nvstor.sys [2010/11/20 21:29:03 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_dd659ed032d28a14\nvstor.sys [2010/11/20 21:29:03 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_3be22d131d40bd72\nvstor.sys [color=#A23BEC]< MD5 for: PROQUOTA.EXE >[/color] [2010/11/20 21:29:21 | 000,028,672 | ---- | M] (Microsoft Corporation) MD5=2E77BAB79F078654782F83F0A0AEFE31 -- C:\Windows\System32\proquota.exe [2010/11/20 21:29:21 | 000,028,672 | ---- | M] (Microsoft Corporation) MD5=2E77BAB79F078654782F83F0A0AEFE31 -- C:\Windows\winsxs\x86_microsoft-windows-proquota_31bf3856ad364e35_6.1.7601.17514_none_29ce61c2f0a740f4\proquota.exe [color=#A23BEC]< MD5 for: QMGR.DLL >[/color] [2010/11/20 21:29:08 | 000,585,728 | ---- | M] (Microsoft Corporation) MD5=E585445D5021971FAE10393F0F1C3961 -- C:\Windows\System32\qmgr.dll [2010/11/20 21:29:08 | 000,585,728 | ---- | M] (Microsoft Corporation) MD5=E585445D5021971FAE10393F0F1C3961 -- C:\Windows\winsxs\x86_microsoft-windows-bits-client_31bf3856ad364e35_6.1.7601.17514_none_25982ed857b42497\qmgr.dll [color=#A23BEC]< MD5 for: SCECLI.DLL >[/color] [2010/11/20 21:29:07 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\System32\scecli.dll [2010/11/20 21:29:07 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_3a154c47375d881d\scecli.dll [color=#A23BEC]< MD5 for: SPOOLSV.EXE >[/color] [2010/11/20 21:29:06 | 000,317,440 | ---- | M] (Microsoft Corporation) MD5=866A43013535DC8587C258E43579C764 -- C:\Windows\System32\spoolsv.exe [2010/11/20 21:29:06 | 000,317,440 | ---- | M] (Microsoft Corporation) MD5=866A43013535DC8587C258E43579C764 -- C:\Windows\winsxs\x86_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.1.7601.17514_none_d8530d0d1fcade21\spoolsv.exe [color=#A23BEC]< MD5 for: SVCHOST.EXE >[/color] [2009/07/14 01:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\System32\svchost.exe [2009/07/14 01:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe [color=#A23BEC]< MD5 for: TERMSRV.DLL >[/color] [2010/11/20 21:29:19 | 000,521,216 | ---- | M] (Microsoft Corporation) MD5=382C804C92811BE57829D8E550A900E2 -- C:\Windows\System32\termsrv.dll [2010/11/20 21:29:19 | 000,521,216 | ---- | M] (Microsoft Corporation) MD5=382C804C92811BE57829D8E550A900E2 -- C:\Windows\winsxs\x86_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.17514_none_90a6abb3b286306d\termsrv.dll [color=#A23BEC]< MD5 for: USERINIT.EXE >[/color] [2010/11/20 21:29:06 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\System32\userinit.exe [2010/11/20 21:29:06 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe [color=#A23BEC]< MD5 for: VOLSNAP.SYS >[/color] [2010/11/20 21:29:03 | 000,245,632 | ---- | M] (Microsoft Corporation) MD5=F497F67932C6FA693D7DE2780631CFE7 -- C:\Windows\System32\drivers\volsnap.sys [2010/11/20 21:29:03 | 000,245,632 | ---- | M] (Microsoft Corporation) MD5=F497F67932C6FA693D7DE2780631CFE7 -- C:\Windows\System32\DriverStore\FileRepository\volume.inf_x86_neutral_6dee0205881d1a1d\volsnap.sys [2010/11/20 21:29:03 | 000,245,632 | ---- | M] (Microsoft Corporation) MD5=F497F67932C6FA693D7DE2780631CFE7 -- C:\Windows\winsxs\x86_volume.inf_31bf3856ad364e35_6.1.7601.17514_none_17be216c5a5713d8\volsnap.sys [color=#A23BEC]< MD5 for: WININET.DLL >[/color] [2010/11/20 21:29:12 | 000,980,992 | ---- | M] (Microsoft Corporation) MD5=44214C94911C7CFB1D52CB64D5E8368D -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.17514_none_1eaaa4a07717236e\wininet.dll [2015/02/04 17:53:56 | 001,888,256 | ---- | M] (Microsoft Corporation) MD5=5E4E0E43E0A5BF9F089696DFA7A3D677 -- C:\Windows\System32\wininet.dll [2015/02/04 17:53:56 | 001,888,256 | ---- | M] (Microsoft Corporation) MD5=5E4E0E43E0A5BF9F089696DFA7A3D677 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17501_none_88153be5fe8d0559\wininet.dll [color=#A23BEC]< MD5 for: WININIT.EXE >[/color] [2009/07/14 01:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\System32\wininit.exe [2009/07/14 01:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe [color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color] [2010/11/20 21:29:06 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\System32\winlogon.exe [2010/11/20 21:29:06 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\System32\winlogon.exe [2010/11/20 21:29:06 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe [2010/11/20 21:29:06 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe [color=#A23BEC]< MD5 for: WS2_32.DLL >[/color] [2010/11/20 21:29:06 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\System32\ws2_32.dll [2010/11/20 21:29:06 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_f4bf1aae2c981ecf\ws2_32.dll [color=#A23BEC]< HKEY_LOCAL_MACHINE\SYSTEM\Curr​entControlSet\Control\Session Manager\SubSystems /s >[/color] [color=#A23BEC]< %systemroot%\*. /mp /s >[/color] [color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color] [color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color] [color=#A23BEC]< %systemroot%\system32\drivers\​*.sys /lockedfiles >[/color] [color=#A23BEC]< %systemroot%\System32\config\*​.sav >[/color] [color=#A23BEC]< c:\$recycle.bin\*.* /s >[/color] [2016/02/23 14:53:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I00XNNM.dat [2016/02/23 14:51:24 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I035098.WMC [2016/02/23 14:52:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I06Y3HJ.cvr [2016/02/23 14:53:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I08TF90.cvr [2016/02/23 14:53:24 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I0CNPUR.cvr [2016/02/23 14:52:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I0JN2Q4.cvr [2016/02/23 14:52:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I0MV9WC.cvr [2016/02/23 14:52:05 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I0SXNDM.cvr [2016/02/23 14:51:28 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I0TUZ33.ico [2016/02/23 14:54:04 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I0VOBRE.hdmp [2016/02/23 14:51:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I0W1X0K.cvr [2016/02/23 14:51:27 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I0WGH11.ico [2016/02/23 14:52:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I0XA943.cvr [2016/02/23 14:53:45 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I0ZRV8D.txt [2016/02/23 14:53:54 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I13RB7O.ico [2016/02/27 22:30:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I171LLK [2016/02/23 14:52:21 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I17JT8U.cvr [2016/02/23 14:51:54 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I18BHCU.cvr [2016/03/03 15:57:13 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I19UAWJ.xls [2016/02/23 14:53:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I1AUHPQ.txt [2016/02/23 14:51:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I1AVCVY.SHD [2016/02/23 14:54:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I1BYJGP.sql [2016/02/23 14:51:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I1DWFER.html [2016/02/23 14:53:13 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I1EVUKA.cvr [2016/02/23 14:53:11 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I1FIFFM.cvr [2016/02/23 14:52:05 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I1GU4CG.cvr [2016/02/23 14:52:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I1M29WO.cvr [2016/02/23 14:50:58 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I1O340K [2016/02/23 14:52:17 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I1PGZVH.cvr [2016/02/23 14:53:56 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I1RHEOF.dat [2016/02/23 14:51:24 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I1TC3BF.WMC [2016/02/23 14:52:02 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I1UEG7W.cvr [2016/02/23 14:52:54 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I1V3AY3.cvr [2016/02/02 09:16:27 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I1Z0WE1.jpg [2016/02/23 14:53:24 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I236US9.cvr [2016/02/23 14:52:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I23AKMM.cvr [2016/02/23 14:53:27 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I26N4H3.cvr [2016/02/23 14:52:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I28NXQ1.cvr [2016/02/23 14:51:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I29OOQU.dat [2016/02/09 20:30:00 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I2DICAE.sql [2016/02/23 14:54:05 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I2H200U.sql [2016/02/23 14:52:35 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I2HHXCY.cvr [2016/02/23 14:54:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I2O7AAV.exe [2016/02/23 14:52:21 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I2PVSUR.cvr [2016/02/23 14:51:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I2UVCXR.etl [2016/02/23 14:52:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I2X7KY8.cvr [2016/02/23 14:51:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I2YHE9D [2016/02/23 14:53:02 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I2YQC6E.cvr [2016/02/23 14:53:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I31ZVZ2.cvr [2016/02/23 14:54:05 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I34HG2V.sql [2016/02/23 14:53:27 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I3BJYOD.cvr [2016/02/17 10:46:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I3CH3K6.msg [2016/02/23 14:52:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I3E3CHB.cvr [2016/02/23 14:51:24 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I3H1JRF [2016/02/23 14:52:58 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I3M5MWV.cvr [2016/02/23 14:51:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I3MZMKD.dat [2016/02/23 14:52:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I3N5HT5.cvr [2016/02/23 14:51:02 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I3NT3QM [2016/02/23 14:52:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I3SY49F.cvr [2016/02/23 14:52:21 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I3TRJSW.cvr [2016/02/23 14:52:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I3Y0KDL.cvr [2016/02/23 14:53:24 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I3YAMHN.cvr [2016/02/23 14:52:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I41KTMK.cvr [2016/02/23 14:52:24 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I42MPXG.cvr [2016/02/23 14:51:55 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I44OI5A.cvr [2016/02/23 14:53:11 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I4535JD.cvr [2016/02/23 14:51:29 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I496B5P.html [2016/02/23 14:52:45 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I4DHQR5.cvr [2016/02/23 14:51:05 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I4DP901 [2016/02/23 14:52:29 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I4FKOZX.cvr [2016/02/23 14:52:18 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I4HZ9JO.cvr [2016/02/23 14:52:13 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I4HZAJM.cvr [2016/02/23 14:52:10 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I4KNJW2.cvr [2016/02/23 14:51:46 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I4M31L1.txt [2016/02/23 14:53:41 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I4N3ZAU.txt [2016/02/23 14:52:29 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I4NFUR3.cvr [2016/02/23 14:52:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I4NWWDA.cvr [2016/02/23 14:53:27 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I4YONR8.cvr [2016/02/23 14:51:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I4ZVB55.exe [2016/02/23 14:53:20 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I50YU7F.cvr [2016/02/23 14:52:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I511O8J.cvr [2016/02/23 14:53:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I51N7NE.doc [2016/02/23 14:52:02 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I51TWEL.cvr [2016/02/23 14:50:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I51U3RJ [2016/02/23 14:52:18 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I527RUR.cvr [2016/02/23 14:52:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I52PS6R.cvr [2016/02/23 14:53:17 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I53AAP1.cvr [2016/02/23 14:52:10 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I53KZUK.cvr [2016/02/23 14:52:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I54MMQ7.cvr [2016/02/23 14:52:09 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I56EL5I.cvr [2016/02/23 14:51:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I57GYX0.xml [2016/02/23 14:52:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I58EX8F.cvr [2016/02/23 14:52:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I5C3KDO.cvr [2016/02/23 14:53:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I5EGJ51.cvr [2016/02/23 14:52:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I5G2H86.cvr [2016/02/23 14:52:06 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I5H3QGG.cvr [2016/02/23 14:53:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I5JP9N5.txt [2016/02/23 14:52:10 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I5JTQP2.cvr [2016/02/23 14:52:33 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I5LXF3S.cvr [2016/02/23 14:52:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I5O2G6L.cvr [2016/02/17 10:46:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I5RU8XJ.msg [2016/02/23 14:53:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I5TU75A.DLL [2016/02/23 14:53:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I5ZQKSI.cvr [2016/02/23 14:52:41 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I6021QS.cvr [2016/02/23 14:52:16 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I63EHMD.cvr [2016/02/23 14:53:00 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I64AYTI.cvr [2016/02/23 14:53:13 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I64SH7A.cvr [2016/02/23 14:52:16 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I65RBEY.cvr [2016/02/23 14:52:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I66C3VQ.cvr [2016/02/08 12:00:46 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I67F3GA.msg [2016/02/23 14:51:46 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I69URFD.log [2016/02/23 14:53:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I69XN3D.LOG [2016/02/23 14:51:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I69ZGQZ.etl [2016/02/23 14:51:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I6B32QF.cvr [2016/02/23 14:53:13 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I6BCYKK.cvr [2016/02/23 14:52:24 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I6LTZ5A.cvr [2016/02/23 14:53:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I6PSD6B.cvr [2016/02/23 14:54:00 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I6RRR8K.etl [2016/02/23 14:52:12 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I6SPVS7.cvr [2016/02/23 14:52:41 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I6W5JXK.cvr [2016/02/23 14:53:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I70DIWP.txt [2016/02/23 14:53:19 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I73QKD2.cvr [2016/02/23 14:53:05 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I73UMU6.cvr [2016/02/23 14:54:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I74NHM8.sql [2016/02/23 14:52:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I7DHQXR.cvr [2016/02/23 14:54:05 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I7DOAKD.sql [2016/02/23 14:52:31 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I7E14DJ.cvr [2016/02/23 14:54:04 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I7E38FW.txt [2016/02/23 14:53:13 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I7HY7KE.cvr [2016/02/23 14:51:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I7KYPFH.dat [2016/02/23 14:53:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I7MCGGX.dat [2016/02/04 20:16:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I7SAVKU.csv [2016/02/23 14:54:09 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I7SYDN5.dat [2016/02/23 14:53:41 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I7T1N1S.txt [2016/02/23 14:52:55 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I7W5WQS.cvr [2016/02/23 14:53:17 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I7WZM6M.cvr [2016/02/23 14:51:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I7YCVFD.dat [2016/02/23 14:50:56 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I7YOL4T [2016/02/23 14:52:00 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I8066SE.cvr [2016/02/23 14:53:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I843NR4.cvr [2016/02/23 14:52:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I863A1Q.cvr [2016/02/23 14:53:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I86QFDT.cvr [2016/02/23 14:52:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I8ACCRS.cvr [2016/02/23 14:54:05 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I8FHFEQ.sql [2016/02/23 14:53:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I8GD25Y.txt [2016/02/09 13:07:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I8I5NGC.xlsb [2016/02/23 14:51:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I8J6NU6.html [2016/02/23 14:52:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I8O18M8.cvr [2016/02/23 14:51:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I8PKDS6.cvr [2016/02/23 14:52:18 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I8T3VPU.cvr [2016/02/23 14:54:06 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I8VVUKD.sql [2016/02/23 14:52:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I8W99VA.cvr [2016/02/23 14:52:31 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I8YI28U.cvr [2016/02/23 14:53:10 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I91CVTB.cvr [2016/02/23 14:52:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I922ZB9.cvr [2016/02/23 14:52:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I93UW39.cvr [2016/02/23 14:52:24 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I9D3S4G.cvr [2016/02/23 14:50:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I9DWLVI [2016/01/27 08:31:06 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I9E8K4B.xlsb [2016/02/23 14:52:58 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I9FZY92.cvr [2016/02/23 14:53:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I9IL9Y2.log [2016/02/23 14:52:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I9KA6LZ.cvr [2016/02/23 14:53:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I9ODRSV.cvr [2016/02/17 10:41:17 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I9PS4BG.msg [2016/02/23 14:51:29 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I9R14LV.html [2016/02/23 14:51:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I9RN1K8.SHD [2016/02/23 14:52:13 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I9W9HSB.cvr [2016/02/23 14:54:04 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I9W9MQK.sql [2016/02/23 14:52:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I9YXQW1.cvr [2016/02/23 14:53:27 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$I9ZI3GV.cvr [2016/02/23 14:53:48 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IA3EN16.log [2016/02/23 14:53:06 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IA5U9DP.cvr [2016/02/23 14:52:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IA9K9SU.cvr [2016/02/23 14:52:54 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IAACVDB.cvr [2016/02/23 14:51:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IACZY1W [2016/02/23 14:51:27 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IAGWR4N.ico [2016/02/23 14:50:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IAIK8D6 [2016/02/23 14:52:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IAINC92.cvr [2016/02/23 14:52:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IAISUL0.cvr [2016/02/23 14:53:20 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IAJ4G4E.cvr [2016/02/23 14:53:33 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IALGP1D.dat [2016/02/23 14:54:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IAMIBS5.log [2016/02/17 10:41:17 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IAMNE3Q.msg [2016/02/23 14:54:05 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IAMQ8OC.sql [2016/02/23 14:51:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IAOX500.cvr [2016/02/23 14:51:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IAUF532.html [2016/02/23 14:53:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IAV2SSS.cvr [2016/02/23 14:51:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IAWMO5T.png [2016/02/23 14:53:33 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IAWQZKD.dat [2016/02/23 14:52:29 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IAWTCK4.cvr [2016/02/23 14:53:28 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IAWZ2S8.cvr [2016/02/23 14:53:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IAXJTRW.txt [2016/02/23 14:52:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IAYDA3L.cvr [2016/02/23 14:50:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IB0PY9P [2016/02/23 14:50:58 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IB0XLYJ [2016/02/23 14:52:24 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IB2AYAA.cvr [2016/02/23 14:50:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IB5IH3Z [2016/02/23 14:51:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IB65I5Z.etl [2016/02/23 14:52:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IB7EASK.cvr [2016/02/23 14:51:28 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IB81BFC.png [2016/02/23 14:53:28 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IB9H89J.cvr [2016/02/23 14:52:32 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IBAMF8N.cvr [2016/02/23 14:53:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IBAYEY5.exe [2016/02/23 14:53:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IBB713Q.xml [2016/02/23 14:51:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IBBMINC.dat [2016/02/23 14:53:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IBH4NQP.cvr [2016/02/23 14:54:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IBJ9SLM.dat [2016/02/23 14:51:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IBJMX40 [2016/02/23 14:52:21 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IBK2O74.cvr [2016/02/23 14:53:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IBLRHK3.log [2016/02/23 14:52:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IBQCXJ5.cvr [2016/02/23 14:54:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IBV35T4.sql [2016/02/23 14:52:11 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IBVYORT.cvr [2016/02/23 14:52:18 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IBY0W6V.cvr [2016/02/23 14:53:27 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IBZXR2M.cvr [2016/02/22 09:43:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IC1ZIZM.xls [2016/02/23 14:52:55 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IC2GRUR.cvr [2016/02/23 14:54:10 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IC2GYMO.exe [2016/02/23 14:51:24 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IC2VFHM.0 [2016/02/23 14:52:35 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IC3PXNU.cvr [2016/02/10 11:38:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IC4O0LS.xlsx [2016/02/23 14:51:46 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IC4ZMKX.log [2016/02/23 14:52:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IC7WC88.cvr [2016/02/23 14:52:45 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IC8FOWE.cvr [2016/02/23 14:53:17 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IC8VRCM.cvr [2016/02/23 14:52:31 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ICB94WX.cvr [2016/02/23 14:53:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ICBDDC5.dat [2016/02/23 14:51:55 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ICD09ET.cvr [2016/02/23 14:52:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ICFYJ2U.cvr [2016/02/23 14:53:24 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ICGFBUZ.cvr [2016/02/23 14:52:46 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ICGNWCW.cvr [2016/02/23 14:52:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ICIFYK2.cvr [2016/02/23 14:52:20 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ICK0KWM.cvr [2016/02/23 14:52:19 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ICK9XQG.cvr [2016/02/18 08:42:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ICNZ3YZ.xls [2016/02/23 14:51:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ICRD7C4.dat [2016/02/23 14:53:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ICWCKSW.cvr [2016/02/23 14:53:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ICYMZNC.xml [2016/02/23 14:53:21 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ICYMZPR.cvr [2016/02/23 14:52:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ID1S2R6.cvr [2016/02/23 14:52:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ID2YST3.cvr [2016/02/23 14:50:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ID4U9QO [2016/02/23 14:53:10 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ID50421.cvr [2016/02/23 14:52:17 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ID5QYHF.cvr [2016/02/23 14:53:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IDA357K.cvr [2016/02/23 14:52:12 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IDAI23J.cvr [2016/02/23 14:52:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IDBIFZT.cvr [2016/02/23 14:50:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IDBMU02 [2016/02/23 14:52:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IDCIFP8.cvr [2016/02/23 14:52:31 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IDFQL0O.cvr [2016/02/23 14:53:24 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IDHQ3SP.cvr [2016/02/23 14:53:35 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IDJMX0I.dat [2016/02/23 14:52:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IDK2PR6.cvr [2016/02/23 14:52:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IDMZGD6.cvr [2016/02/23 14:52:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IDNX3LY.cvr [2016/02/23 14:53:48 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IDOY482.msrcincident [2016/02/23 14:52:28 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IDQX0U4.cvr [2016/02/23 14:50:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IDQXHFI [2016/02/23 14:52:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IDTI29D.cvr [2016/02/23 14:51:00 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IDURZT2 [2016/02/01 10:28:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IDUYEKO.ini [2016/02/23 14:54:06 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IDWWDU4.sql [2016/02/23 14:52:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IDXMZIR.cvr [2016/02/23 14:52:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IDXZA2Y.cvr [2016/02/23 14:53:58 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IE5AODX.log [2016/02/23 14:53:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IE8FKMJ.cvr [2016/02/23 14:54:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IEB3EDM.MTX [2016/02/23 14:53:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IEHC192.dat [2016/02/23 14:53:10 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IEHQJYQ.cvr [2016/02/17 10:46:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IEL6UIY.msg [2016/02/23 14:53:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IEMI7A6.cvr [2016/02/04 20:23:09 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IEQVZLR.xlsx [2016/02/23 14:53:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IERUKIO.cvr [2016/02/23 14:53:00 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IES2OEN.cvr [2016/02/23 14:52:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IEU8TT9.cvr [2016/02/23 14:52:54 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IEX454C.cvr [2016/02/23 14:52:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IEZLMHF.cvr [2016/02/23 14:53:05 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IF06N8K.cvr [2016/02/23 14:52:20 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IF19AYC.cvr [2016/02/23 14:52:33 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IF1F2BE.cvr [2016/02/23 14:51:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IF9PHEV.cvr [2016/02/23 14:54:06 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IFD60GN.sql [2016/02/23 14:53:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IFDEL07.cvr [2016/02/23 14:51:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IFFBDIU.xml [2016/02/23 14:51:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IFG17IH.html [2016/02/23 14:51:46 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IFG55WE.txt [2016/02/23 14:53:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IFGTE7N.txt [2016/02/23 14:54:05 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IFHV219.sql [2016/02/23 14:53:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IFL57B7.out [2016/02/27 22:30:28 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IFM3PFI [2016/02/23 14:52:41 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IFOGU2Z.cvr [2016/02/23 14:52:06 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IFUAE6W.cvr [2016/02/23 14:52:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IFVDWSW.cvr [2016/02/23 14:52:48 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IFVS92W.cvr [2016/02/23 14:54:05 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IFX2GB4.sql [2016/02/23 14:54:05 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IFXIN6W.sql [2016/02/23 14:52:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IFY2LCL.cvr [2016/02/23 14:51:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IG0L4WE.ico [2016/02/23 14:53:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IG3PYM3.txt [2016/02/23 14:51:00 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IGARM3I [2016/02/23 14:52:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IGDBR83.cvr [2016/02/23 14:53:09 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IGDEMOX.cvr [2016/02/23 14:54:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IGGU1RK.sql [2016/02/23 14:53:58 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IGGVF3J.log [2016/02/23 14:51:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IGJPSCK.cvr [2016/02/23 14:54:05 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IGLAOML.sql [2016/02/23 14:53:28 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IGLOQWX.cvr [2016/02/23 14:52:24 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IGO8IYE.cvr [2016/02/23 14:52:20 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IGPRB13.cvr [2016/02/23 14:51:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IGRRN1B.xml [2016/02/23 14:52:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IGV1Q6D.cvr [2016/02/23 14:51:36 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IGV7CJQ.dat [2016/02/23 14:50:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IGWOYCO [2016/02/23 14:53:28 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IH0LYNC.cvr [2016/02/23 14:51:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IH0Z9V4.cvr [2016/02/23 14:53:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IH31W2N.txt [2016/02/23 14:51:41 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IH3BS1T.xml [2016/02/23 14:53:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IH3JU8Z.cvr [2016/02/27 22:30:28 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IH9FKSJ [2016/02/23 14:53:11 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IHBIWWK.cvr [2016/02/23 14:52:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IHCRNOF.cvr [2016/02/23 14:53:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IHEOAO3.cvr [2016/02/23 14:53:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IHGENKK.cvr [2016/02/23 14:53:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IHGZ901.cvr [2016/02/23 14:52:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IHMFRFP.cvr [2016/02/23 14:52:28 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IHOFXA6.cvr [2016/02/23 14:54:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IHOJOAZ.sql [2016/02/23 14:51:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IHSUZ0G [2016/02/23 14:52:05 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IHUUP0K.cvr [2016/02/23 14:51:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IHZT75J.dat [2016/02/23 14:53:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IHZVP4U.cvr [2016/02/23 14:53:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$II349AJ.dat [2016/02/23 14:52:16 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$II4TNCT.cvr [2016/02/23 14:51:29 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$II8M1PI.png [2016/02/23 14:52:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IIA2N7D.cvr [2016/02/23 14:52:12 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IICKOQL.cvr [2016/02/23 14:52:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IIIE3M9.cvr [2016/02/23 14:52:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IIIESBS.cvr [2016/02/23 14:51:28 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IIIUM7N.png [2016/03/04 14:13:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IIO39QD.asd [2016/02/23 14:53:18 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IIP4IGC.cvr [2016/02/23 14:52:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IIPQXI3.cvr [2016/02/23 14:52:09 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IIQEN79.cvr [2016/02/23 14:50:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IIROGU9 [2016/02/23 14:52:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IIRYC02.cvr [2016/02/23 14:52:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IIV1WD6.cvr [2016/02/23 14:51:24 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IIWBT9V.WMC [2016/02/23 14:53:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IIWGXIA.cvr [2016/01/27 08:25:34 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IIYZTNL.DAT [2016/02/23 14:53:12 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IJ252WH.cvr [2016/02/23 14:53:11 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IJ2RW9V.cvr [2016/02/23 14:54:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IJAL5ZD.sql [2016/02/23 14:53:09 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IJBNWX6.cvr [2016/02/23 14:53:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IJBW7NY.log [2016/02/23 14:52:10 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IJD6IYX.cvr [2016/02/23 14:52:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IJGIJZ5.cvr [2016/02/23 14:54:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IJHY4T6.exe [2016/02/23 14:51:55 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IJJT5ZY.cvr [2016/02/23 14:51:55 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IJKNQTX.cvr [2016/02/23 14:52:02 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IJKYWJ7.cvr [2016/02/23 14:53:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IJMQ13P.txt [2016/02/23 14:52:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IJQ2XXY.cvr [2016/02/23 14:52:54 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IJSU31A.cvr [2016/02/23 14:52:46 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IJSZUV3.cvr [2016/02/23 14:52:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IJUBMKR.cvr [2016/02/23 14:53:12 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IJUCXFQ.cvr [2016/02/23 14:52:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IJX004I.cvr [2016/02/23 14:52:02 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IJX6SWK.cvr [2016/02/23 14:53:13 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IJYARDA.cvr [2016/02/23 14:52:27 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IJYX9P0.cvr [2016/02/23 14:52:18 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IK1DTQ7.cvr [2016/02/23 14:53:29 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IK2ESVM.etl [2016/02/23 14:53:16 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IK4RZ7V.cvr [2016/02/23 14:53:29 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IK5BZYU.cvr [2016/02/23 14:51:56 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IK6VSQ0.cvr [2016/02/23 14:53:21 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IK7NRKT.cvr [2016/02/23 14:53:29 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IK9B1SK.cvr [2016/02/23 14:53:45 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IKAUNYX.txt [2016/02/23 14:52:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IKIF1LU.cvr [2016/02/23 14:54:06 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IKJLK4G.sql [2016/02/23 14:52:21 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IKN2PZW.cvr [2016/02/23 14:53:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IKO49RG.txt [2016/02/23 14:53:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IKQO9CO.dat [2016/02/23 14:53:46 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IKRIFJK.dat [2016/02/23 14:51:04 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IKUJGMY [2016/02/23 14:52:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IKWFUFJ.cvr [2016/02/23 14:51:41 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IKWGZD0.etl [2016/02/23 14:52:48 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IKWQ3GB.cvr [2016/02/23 14:53:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IKYOARH.LOG [2016/02/23 14:53:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IKZBSSV.cvr [2016/02/23 14:53:18 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IL01KLS.cvr [2016/02/23 14:52:56 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IL1I9TD.cvr [2016/02/23 14:52:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IL2O1BQ.cvr [2016/02/23 14:52:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IL5AY3R.cvr [2016/02/23 14:52:19 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ILBS5W6.cvr [2016/02/23 14:51:46 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ILE0XM2.txt [2016/02/23 14:51:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ILEQC2G.dat [2016/02/17 10:46:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ILHQMHN.msg [2016/02/23 14:51:06 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ILJOSJE [2016/02/23 14:52:17 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ILJZUAW.cvr [2016/02/23 14:52:27 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ILOVWYY.cvr [2016/02/23 14:52:56 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ILQ3622.cvr [2016/02/23 14:51:27 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ILRB2K0.png [2016/03/01 15:23:00 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ILRSF1C [2016/02/23 14:52:48 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ILSQBZF.cvr [2016/02/23 14:52:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ILTQBWJ.cvr [2016/02/23 14:52:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ILUETQZ.cvr [2016/02/23 14:54:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ILV8K50.sql [2016/02/23 14:54:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ILWLVH0.LOG [2016/02/23 14:52:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ILXP4GW.cvr [2016/02/23 14:52:16 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ILXUT7D.cvr [2016/02/23 14:53:13 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ILY7TNS.cvr [2016/02/23 14:52:41 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ILYOP6N.cvr [2016/02/23 14:51:04 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ILZ9MWI [2016/02/23 14:53:05 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ILZLIT9.cvr [2016/02/23 14:54:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ILZTR2H.log [2016/02/23 14:51:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IM2KEP0.cvr [2016/02/23 14:53:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IM2KHJ6.cvr [2016/02/23 14:53:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IM3EUBX.log [2016/02/23 14:51:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IM4J0HP.SHD [2016/02/23 14:50:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IM4JELU [2016/02/23 14:53:58 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IM6VDX2.txt [2016/02/23 14:52:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IM8JY7F.cvr [2016/02/04 19:44:31 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IMDRZ2D.xls [2016/02/23 14:53:21 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IMFG060.cvr [2016/02/23 14:52:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IMN0EUF.cvr [2016/02/23 14:52:28 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IMNSFVG.cvr [2016/02/23 14:52:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IMOBT40.cvr [2016/02/23 14:53:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IMQ2BA0.dat [2016/02/23 14:54:05 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IMSI8QH.sql [2016/02/23 14:53:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IN0A0CS.cvr [2016/02/23 14:51:29 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IN4QAWD.html [2016/02/23 14:51:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IN6E4NB.xml [2016/02/23 14:52:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IN72YZ8.cvr [2016/02/23 14:51:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$INAU067.cvr [2016/02/23 14:52:45 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$INGU2W3.cvr [2016/02/04 21:24:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$INHQ4QT.xlsx [2016/02/23 14:53:48 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ININCES.xml [2016/02/23 14:53:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$INJV999.xml [2016/02/23 14:52:06 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$INKZSG2.cvr [2016/02/23 14:52:58 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$INMU036.cvr [2016/02/23 14:53:10 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$INOP87Z.cvr [2016/02/24 17:20:21 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$INU4VIS.zip [2016/02/23 14:53:02 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$INUVKM9.cvr [2016/02/23 14:51:00 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$INXTWIC [2016/02/23 14:53:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$INYEGAL.txt [2016/02/23 14:53:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$INZP2AT.txt [2016/02/10 11:24:13 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$INZXA3J.xlsx [2016/02/23 14:52:34 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IO02E9U.cvr [2016/02/23 14:52:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IO02R6L.cvr [2016/02/23 14:52:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IO4B99M.cvr [2016/02/23 14:51:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IO4N6OZ.cvr [2016/02/23 14:51:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IO9FD9V.html [2016/02/23 14:53:12 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IO9MBKA.cvr [2016/02/23 14:53:12 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IOFQH5Y.cvr [2016/02/23 14:53:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IOFSW9B.dat [2016/02/11 17:46:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IOL6IO5.lnk [2016/02/23 14:51:56 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IOOFG6M.cvr [2016/02/23 14:51:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IOR0CFW.cvr [2016/02/23 14:53:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IORGSHQ.cvr [2016/02/23 14:53:29 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IOSOINA.doc [2016/02/23 14:52:34 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IOSXEUQ.cvr [2016/02/23 14:54:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IOTDYV1.sql [2016/02/23 14:52:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IOV0GHY.cvr [2016/02/23 14:54:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IOWV4GO.Mtx [2016/02/23 14:51:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IOX71RZ.cvr [2016/02/23 14:52:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IOXPUYF.cvr [2016/02/23 14:53:16 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IOXXGNX.cvr [2016/02/23 14:50:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IOZTZQQ [2016/02/23 14:52:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IOZV8A4.cvr [2016/02/23 14:52:20 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IP0IDEI.cvr [2016/02/23 14:51:28 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IP0OPDG.png [2016/02/23 14:53:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IP5HKAK.xml [2016/02/23 14:51:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IP7BAPS.html [2016/02/23 14:52:33 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IP9B28Z.cvr [2016/02/23 14:53:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IPCP9MN.dat [2016/02/04 20:27:29 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IPFAW7D.xlsx [2016/02/23 14:50:54 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IPK6VVG [2016/02/23 14:53:13 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IPM5EUO.cvr [2016/02/23 14:52:11 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IPNMYDV.cvr [2016/02/23 14:54:01 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IPRXQUB.MTX [2016/02/23 14:52:31 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IPSQJIU.cvr [2016/02/23 14:53:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IPU3I2B.log [2016/02/23 14:53:18 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IPYXB5B.cvr [2016/02/23 14:53:18 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IQ1TIKD.cvr [2016/02/23 14:53:06 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IQ1X27W.cvr [2016/02/23 14:51:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IQ3M222.etl [2016/02/23 14:52:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IQ3YYPP.cvr [2016/02/23 14:54:06 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IQ4F6VI.sql [2016/02/23 14:53:45 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IQ4K3ZB.dat [2016/02/03 09:02:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IQA9HC0 [2016/02/23 14:54:06 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IQDLGYU.sql [2016/02/23 14:51:24 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IQE8S66 [2016/02/23 14:52:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IQFBORD.cvr [2016/02/23 14:51:06 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IQFEWZJ [2016/02/09 20:52:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IQJHNNS.xlsx [2016/02/23 14:54:04 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IQKMDH1.log [2016/02/23 14:52:17 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IQKV1CJ.cvr [2016/02/23 14:52:41 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IQLKUP3.cvr [2016/01/28 11:26:16 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IQNFKBT.ppt [2016/02/23 14:52:31 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IQNKOXD.cvr [2016/02/23 14:52:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IQNVLSH.cvr [2016/02/23 14:52:29 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IQUZ7O8.cvr [2016/02/23 14:54:04 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IQWF9NF.xml [2016/02/23 14:53:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IQXGSEB.txt [2016/02/23 14:52:54 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IQY86PK.cvr [2016/02/23 14:53:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IR31MFG.cvr [2016/02/23 14:50:54 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IR6H4RT [2016/02/23 14:53:19 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IR9EZ9I.cvr [2016/02/23 14:53:28 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IR9FXF2.cvr [2016/02/23 14:52:27 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IR9KG58.cvr [2016/02/23 14:52:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IR9Q7QA.cvr [2016/02/23 14:53:18 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IRAMBD4.cvr [2016/02/23 14:52:13 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IRCEWDF.cvr [2016/02/23 14:54:04 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IREJ0K4.sql [2016/02/23 14:51:56 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IRGXQ8B.cvr [2016/02/23 14:52:35 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IRHUM75.cvr [2016/02/23 14:51:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IRM3ROG.xml [2016/02/04 19:44:31 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IRPZPXC.xlsx [2016/02/23 14:52:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IRQ5XLB.cvr [2016/02/23 14:52:17 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IRSRKPP.cvr [2016/02/23 14:52:20 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IRYOAXL.cvr [2016/02/23 14:53:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IRZSVMJ.cvr [2016/02/23 14:52:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IS2FFFL.cvr [2016/02/23 14:51:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IS2JMH7.etl [2016/02/23 14:53:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ISCJERP.cvr [2016/02/23 14:50:58 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ISDX20J [2016/02/23 14:52:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ISGH9N9.cvr [2016/02/23 14:52:30 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ISGTCFP.cvr [2016/02/23 14:53:45 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ISJXN6K.xml [2016/02/23 14:52:16 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ISKKOY0.cvr [2016/02/23 14:53:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ISP15LL.dat [2016/02/17 10:41:17 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ISPYWWE.msg [2016/02/23 14:52:41 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ISQ1OQD.cvr [2016/02/23 14:52:43 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ISS5OKE.cvr [2016/02/23 14:52:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ISTC7WP.cvr [2016/02/23 14:53:18 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ISTFHF9.cvr [2016/02/23 14:51:27 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ISU8A4X.png [2016/02/23 14:52:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ISWFC39.cvr [2016/02/23 14:52:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ISWFOC4.cvr [2016/02/23 14:53:17 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ISWUEBM.cvr [2016/02/23 14:52:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ISX2OLZ.cvr [2016/02/23 14:51:45 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IT1FNBF.cvr [2016/02/23 14:52:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IT1GK04.cvr [2016/02/23 14:53:29 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IT2MDNJ.cvr [2016/02/23 14:53:48 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IT6BZHL.dat [2016/02/23 14:52:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IT724OV.cvr [2016/02/23 14:53:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IT7SDOB.LOG [2016/02/23 14:51:46 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IT92VEB.log [2016/02/23 14:51:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ITC5A9N.png [2016/02/23 14:52:21 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ITG4E7T.cvr [2016/02/23 14:51:58 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ITGPW9L.cvr [2016/02/23 14:51:55 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ITK7MU5.cvr [2016/02/23 14:52:21 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ITLQTFM.cvr [2016/02/08 09:02:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ITM7ZFP.xls [2016/02/23 14:53:12 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ITMVI3H.cvr [2016/02/23 14:52:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ITSO3EV.cvr [2016/02/23 14:52:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ITTQ5HV.cvr [2016/02/23 14:52:27 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ITY8C9A.cvr [2016/02/10 11:28:24 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IU6CF8A.xlsx [2016/02/23 14:51:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IU7WVXQ.SHD [2016/02/23 14:51:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IU830GV.SHD [2016/02/24 21:53:02 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IU89N66.xlsb [2016/02/23 14:53:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IUAR7T7.txt [2016/02/23 14:54:10 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IUDYRN3.dat [2016/02/23 14:52:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IUFW1C1.cvr [2016/02/23 14:54:06 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IUGMHN6.sql [2016/02/23 14:54:10 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IUHJ14M.dat [2016/02/23 14:51:54 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IUJIGP1.cvr [2016/02/23 14:52:17 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IUK1V2T.cvr [2016/02/23 14:53:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IUK9AZI.cvr [2016/02/23 14:52:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IULP21W.cvr [2016/02/23 14:52:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IUM2S8B.cvr [2016/02/23 14:53:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IUN6RFM.txt [2016/02/23 14:52:12 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IUNRUTH.cvr [2016/02/23 14:54:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IUU1APS.sql [2016/02/23 14:51:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IUZ04TO.etl [2016/02/24 17:20:29 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IUZ32O3.zip [2016/02/23 14:54:06 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IUZ6SIG.sql [2016/02/23 14:50:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IUZDO7T [2016/02/23 14:53:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IUZTR2A.cvr [2016/02/23 14:52:35 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IV02AF6.cvr [2016/02/23 14:53:54 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IV76MIX.dat [2016/02/23 14:52:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IVANFVK.cvr [2016/02/23 14:52:24 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IVEA5H9.cvr [2016/02/23 14:51:06 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IVEWQ29 [2016/02/23 14:52:48 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IVFVXAZ.cvr [2016/02/07 16:52:37 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IVH3FRT.pdf [2016/02/17 10:46:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IVIUQCW.msg [2016/02/23 14:52:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IVQHG3I.cvr [2016/02/23 14:51:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IVSGP3L [2016/02/23 14:54:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IVTESPG.sql [2016/02/23 14:52:33 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IVV2896.cvr [2016/02/23 14:50:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IVX262N [2016/02/23 14:51:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IVXW26W.dat [2016/02/23 14:54:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IVY1AYY.sql [2016/02/23 14:51:29 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IVZWUEQ.png [2016/02/23 14:53:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IW30MRI.cvr [2016/02/23 14:52:02 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IW41M6S.cvr [2016/02/23 14:50:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IW4FI4V [2016/02/23 14:53:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IW4I0DA.cvr [2016/02/23 14:51:58 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IW7YPRW.cvr [2016/02/23 14:51:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IW8B738.png [2016/02/23 14:53:10 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IW8F8A8.cvr [2016/02/27 22:30:28 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IWDVILX [2016/02/23 14:52:58 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IWL3U5J.cvr [2016/02/23 14:52:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IWMTSMO.cvr [2016/02/23 14:51:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IWPDDUP.xml [2016/02/23 14:52:13 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IWQ1CK3.cvr [2016/02/23 14:51:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IWTDQTV.cvr [2016/02/23 14:54:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IWUPH37.sql [2016/02/23 14:51:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IWWXM3J.dat [2016/02/23 14:50:55 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IX1HHNK [2016/02/23 14:52:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IX30W9Y.cvr [2016/02/23 14:53:19 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IX4A2WQ.cvr [2016/02/23 14:51:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IX5O196.dat [2016/02/23 14:50:55 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IXDHU5V [2016/02/17 10:46:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IXDPNZ6.msg [2016/02/23 14:52:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IXEI1UT.cvr [2016/02/23 14:53:27 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IXEQF8R.cvr [2016/02/23 14:52:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IXF3XGR.cvr [2016/02/23 14:53:27 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IXFI027.cvr [2016/02/23 14:51:29 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IXG9ZDF.png [2016/02/23 14:53:47 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IXJ0ZA2.dat [2016/02/23 14:53:16 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IXJUCVW.cvr [2016/02/23 14:53:18 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IXKDNS7.cvr [2016/02/23 14:51:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IXLDE41.dat [2016/02/23 14:52:21 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IXMJ3FT.cvr [2016/02/23 14:52:45 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IXN3TVA.cvr [2016/02/04 20:23:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IXZSJ63.sql [2016/02/23 14:52:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IXZXENN.cvr [2016/02/23 14:53:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IY20PZ5.xml [2016/02/23 14:52:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IY5LASY.cvr [2016/02/23 14:52:40 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IY5PVKK.cvr [2016/02/23 14:52:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IY72ABT.cvr [2016/02/23 14:51:27 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IY7A9FM.ico [2016/02/23 14:52:00 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IY8FNYJ.cvr [2016/02/23 14:54:05 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IY9R4H6.sql [2016/02/23 14:53:11 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IYAF735.cvr [2016/02/11 17:46:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IYDVD3M.lnk [2016/02/23 14:54:05 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IYE90S0.sql [2016/02/23 14:53:06 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IYFW8D7.cvr [2016/02/23 14:50:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IYHDX7O [2016/02/23 14:52:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IYIM5DD.cvr [2016/02/23 14:51:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IYMEKB5.SHD [2016/02/23 14:53:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IYN9V63.cvr [2016/02/23 14:52:48 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IYPBQHR.cvr [2016/02/23 14:53:58 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IYSU7FD.log [2016/02/23 14:53:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IYTWZHB.cvr [2016/02/23 14:51:24 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IYWBEMI.WMC [2016/02/23 14:51:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IYYI4B2.cvr [2016/02/23 14:53:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IZ0D55C.dat [2016/02/23 14:52:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IZ3LXRT.cvr [2016/02/23 14:53:10 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IZ4D7OK.cvr [2016/02/23 14:50:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IZ5Q7DQ [2016/02/23 14:53:39 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IZ86GRD.txt [2016/02/23 14:53:51 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IZCBKF6.xml [2016/02/23 14:52:57 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IZE9I0E.cvr [2016/02/23 14:52:06 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IZG5AIR.cvr [2016/02/23 14:52:54 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IZJBVKY.cvr [2016/02/23 14:51:26 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IZPWV6D.sif [2016/02/23 14:51:06 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IZRTZBJ [2016/02/17 10:46:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IZT5YMW.msg [2016/02/23 14:53:46 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IZUBL8H.etl [2016/02/23 14:51:55 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IZV75IA.cvr [2016/02/23 14:52:33 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IZWBZYI.cvr [2016/02/23 14:51:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$IZZYY8Q.doc [2015/12/26 12:04:23 | 000,000,404 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R00XNNM.dat [2015/11/26 18:10:46 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R06Y3HJ.cvr [2016/02/10 08:31:03 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R08TF90.cvr [2015/12/29 13:53:20 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R0CNPUR.cvr [2016/02/10 15:16:27 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R0JN2Q4.cvr [2016/01/13 10:01:34 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R0MV9WC.cvr [2015/11/25 08:43:12 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R0SXNDM.cvr [2015/11/13 10:59:14 | 000,037,628 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R0TUZ33.ico [2015/12/14 13:13:47 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R0VOBRE.hdmp [2015/12/21 18:13:01 | 000,000,896 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R0W1X0K.cvr [2015/11/13 10:59:18 | 000,292,878 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R0WGH11.ico [2015/12/17 08:14:16 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R0XA943.cvr [2016/02/22 17:48:30 | 000,042,019 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R0ZRV8D.txt [2015/05/15 21:36:12 | 000,007,406 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R13RB7O.ico [2016/01/19 16:00:55 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R17JT8U.cvr [2016/01/14 09:35:44 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R18BHCU.cvr [2016/03/03 12:00:55 | 000,016,896 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R19UAWJ.xls [2016/02/10 17:54:07 | 000,010,554 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R1AUHPQ.txt [2015/12/01 09:21:45 | 000,007,773 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R1AVCVY.SHD [2015/11/26 11:22:39 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R1BYJGP.sql [2016/01/27 10:28:41 | 000,340,028 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R1DWFER.html [2015/12/22 08:23:49 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R1EVUKA.cvr [2016/02/23 11:08:53 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R1FIFFM.cvr [2015/11/29 17:16:28 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R1GU4CG.cvr [2016/02/07 13:08:39 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R1M29WO.cvr [2015/11/14 16:21:21 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R1PGZVH.cvr [2016/02/09 20:01:31 | 000,000,404 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R1RHEOF.dat [2015/12/24 08:27:31 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R1UEG7W.cvr [2016/01/28 08:20:29 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R1V3AY3.cvr [2016/02/02 09:16:02 | 000,110,935 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R1Z0WE1.jpg [2016/02/09 13:48:46 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R236US9.cvr [2015/12/07 16:43:15 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R23AKMM.cvr [2015/11/27 10:17:57 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R26N4H3.cvr [2016/02/17 15:51:06 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R28NXQ1.cvr [2015/11/13 20:17:39 | 000,000,404 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R29OOQU.dat [2016/02/09 20:29:06 | 000,010,806 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R2DICAE.sql [2016/02/05 09:07:28 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R2H200U.sql [2015/12/14 13:15:00 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R2HHXCY.cvr [2015/11/14 18:00:36 | 003,044,672 | ---- | M] (Next Generation Software) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R2O7AAV.exe [2015/11/28 20:24:27 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R2PVSUR.cvr [2015/12/04 00:37:18 | 000,262,144 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R2UVCXR.etl [2015/12/03 16:25:10 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R2X7KY8.cvr [2016/02/01 08:59:34 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R2YQC6E.cvr [2015/12/23 08:29:06 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R31ZVZ2.cvr [2015/11/11 08:43:53 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R34HG2V.sql [2016/01/13 08:44:45 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3BJYOD.cvr [2016/02/17 10:44:48 | 000,052,224 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3CH3K6.msg [2015/11/19 14:42:39 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3E3CHB.cvr [2016/01/21 10:44:47 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3M5MWV.cvr [2015/12/20 10:30:51 | 000,000,404 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3MZMKD.dat [2015/12/20 11:49:51 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3N5HT5.cvr [2016/01/26 15:55:26 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3SY49F.cvr [2016/01/12 21:55:04 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3TRJSW.cvr [2015/12/20 12:08:44 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3Y0KDL.cvr [2016/01/28 16:16:04 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3YAMHN.cvr [2016/02/04 14:47:18 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R41KTMK.cvr [2015/12/06 19:19:45 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R42MPXG.cvr [2015/12/19 14:39:06 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R44OI5A.cvr [2016/01/25 15:06:16 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R4535JD.cvr [2015/11/09 17:19:36 | 000,006,640 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R496B5P.html [2016/01/04 08:31:51 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R4DHQR5.cvr [2015/11/30 09:23:02 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R4FKOZX.cvr [2016/01/04 11:32:22 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R4HZ9JO.cvr [2016/01/27 10:52:29 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R4HZAJM.cvr [2015/11/13 11:37:39 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R4KNJW2.cvr [2016/01/28 09:41:50 | 004,458,364 | R--- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R4M31L1.txt [2016/02/15 18:18:14 | 000,066,491 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R4N3ZAU.txt [2016/01/19 08:43:58 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R4NFUR3.cvr [2015/12/14 13:14:12 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R4NWWDA.cvr [2015/11/14 14:36:52 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R4YONR8.cvr [2015/08/02 23:58:50 | 000,069,632 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R4ZVB55.exe [2016/02/18 08:29:43 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R50YU7F.cvr [2015/12/04 14:10:18 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R511O8J.cvr [2015/12/29 13:53:19 | 000,423,424 | R--- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R51N7NE.doc [2016/01/21 08:20:56 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R51TWEL.cvr [2016/01/06 16:25:41 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R527RUR.cvr [2015/12/05 12:06:22 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R52PS6R.cvr [2016/01/14 08:23:17 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R53AAP1.cvr [2016/02/05 20:59:42 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R53KZUK.cvr [2016/01/27 14:58:46 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R54MMQ7.cvr [2015/12/04 17:27:55 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R56EL5I.cvr [2016/02/23 14:50:07 | 000,000,010 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R57GYX0.xml [2016/02/05 08:29:32 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R58EX8F.cvr [2015/12/20 13:20:51 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R5C3KDO.cvr [2016/02/08 11:29:14 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R5EGJ51.cvr [2015/12/02 08:57:00 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R5G2H86.cvr [2016/01/26 10:50:42 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R5H3QGG.cvr [2016/02/17 18:02:07 | 000,021,663 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R5JP9N5.txt [2015/11/30 09:22:52 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R5JTQP2.cvr [2015/12/18 13:44:06 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R5LXF3S.cvr [2016/01/04 11:32:47 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R5O2G6L.cvr [2016/02/17 10:42:23 | 000,052,224 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R5RU8XJ.msg [2015/10/28 08:36:28 | 001,792,888 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R5TU75A.DLL [2015/12/14 12:58:21 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R5ZQKSI.cvr [2016/01/22 14:51:52 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R6021QS.cvr [2015/12/07 08:39:59 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R63EHMD.cvr [2016/02/08 08:39:49 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R64AYTI.cvr [2016/02/15 08:28:16 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R64SH7A.cvr [2015/12/10 09:30:58 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R65RBEY.cvr [2015/12/08 08:54:23 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R66C3VQ.cvr [2016/02/08 11:36:15 | 000,103,936 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R67F3GA.msg [2016/02/22 16:20:55 | 000,000,227 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R69URFD.log [2016/01/08 12:15:25 | 000,000,466 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R69XN3D.LOG [2015/12/04 09:35:23 | 000,262,144 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R69ZGQZ.etl [2016/01/16 11:19:57 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R6B32QF.cvr [2016/01/19 16:00:29 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R6BCYKK.cvr [2015/12/04 13:09:55 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R6LTZ5A.cvr [2016/01/20 17:38:46 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R6PSD6B.cvr [2015/11/15 01:01:34 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R6RRR8K.etl [2016/02/19 08:36:47 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R6SPVS7.cvr [2016/01/11 12:57:58 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R6W5JXK.cvr [2016/02/18 18:27:53 | 000,066,042 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R70DIWP.txt [2015/12/14 14:20:44 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R73QKD2.cvr [2016/01/29 09:23:28 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R73UMU6.cvr [2015/11/28 20:20:50 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R74NHM8.sql [2016/01/19 20:06:50 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R7DHQXR.cvr [2016/02/03 21:06:19 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R7DOAKD.sql [2016/01/23 13:42:45 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R7E14DJ.cvr [2015/12/14 13:13:42 | 000,190,880 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R7E38FW.txt [2016/01/06 11:34:24 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R7HY7KE.cvr [2015/11/22 23:41:25 | 000,000,404 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R7KYPFH.dat [2015/12/14 20:45:12 | 000,000,404 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R7MCGGX.dat [2016/01/06 12:24:47 | 010,462,660 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R7SAVKU.csv [2016/01/06 11:34:18 | 000,000,404 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R7SYDN5.dat [2016/02/12 15:05:40 | 000,013,535 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R7T1N1S.txt [2015/12/26 15:31:08 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R7W5WQS.cvr [2016/02/01 08:16:02 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R7WZM6M.cvr [2016/01/02 21:23:40 | 000,000,016 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R7YCVFD.dat [2016/01/19 20:10:18 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R8066SE.cvr [2015/11/12 12:45:56 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R843NR4.cvr [2016/01/19 08:46:49 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R863A1Q.cvr [2016/02/02 08:18:23 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R86QFDT.cvr [2016/02/04 21:55:47 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R8ACCRS.cvr [2015/12/16 15:02:18 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R8FHFEQ.sql [2016/02/19 16:30:32 | 000,061,917 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R8GD25Y.txt [2016/02/08 11:36:00 | 000,010,618 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R8I5NGC.xlsb [2015/12/15 17:32:44 | 000,006,640 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R8J6NU6.html [2016/01/30 16:34:19 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R8O18M8.cvr [2016/01/11 15:12:16 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R8PKDS6.cvr [2016/02/12 13:43:19 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R8T3VPU.cvr [2015/12/28 11:55:22 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R8VVUKD.sql [2015/12/04 08:29:05 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R8W99VA.cvr [2016/02/21 13:59:07 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R8YI28U.cvr [2015/12/21 10:40:58 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R91CVTB.cvr [2016/01/31 11:33:22 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R922ZB9.cvr [2016/01/04 08:50:02 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R93UW39.cvr [2016/02/18 09:06:15 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R9D3S4G.cvr [2016/01/26 10:00:48 | 004,187,949 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R9E8K4B.xlsb [2015/12/02 08:20:20 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R9FZY92.cvr [2016/02/20 15:40:59 | 000,025,274 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R9IL9Y2.log [2016/01/18 08:41:34 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R9KA6LZ.cvr [2015/11/07 14:58:50 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R9ODRSV.cvr [2016/02/17 10:39:56 | 000,066,048 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R9PS4BG.msg [2016/01/28 11:25:06 | 000,383,134 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R9R14LV.html [2015/12/10 10:06:58 | 000,000,004 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R9RN1K8.SHD [2016/02/05 20:56:56 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R9W9HSB.cvr [2015/11/08 12:39:38 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R9W9MQK.sql [2016/02/17 11:13:39 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R9YXQW1.cvr [2015/11/09 13:15:58 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R9ZI3GV.cvr [2016/02/16 08:57:29 | 000,006,688 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RA3EN16.log [2015/11/19 09:00:00 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RA5U9DP.cvr [2016/02/11 16:43:20 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RA9K9SU.cvr [2016/01/04 10:38:51 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RAACVDB.cvr [2015/11/13 10:59:18 | 000,037,490 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RAGWR4N.ico [2015/11/24 08:20:43 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RAINC92.cvr [2016/02/05 10:07:48 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RAISUL0.cvr [2016/02/09 20:15:14 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RAJ4G4E.cvr [2016/01/06 15:40:06 | 000,000,404 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RALGP1D.dat [2016/01/05 10:25:47 | 000,695,575 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RAMIBS5.log [2016/02/17 10:40:47 | 000,066,048 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RAMNE3Q.msg [2015/12/21 10:33:18 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RAMQ8OC.sql [2015/12/01 10:44:29 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RAOX500.cvr [2016/02/08 12:06:27 | 000,006,640 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RAUF532.html [2016/01/04 10:21:30 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RAV2SSS.cvr [2015/11/13 10:59:12 | 000,075,384 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RAWMO5T.png [2015/12/19 13:34:39 | 000,000,404 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RAWQZKD.dat [2015/11/09 08:16:16 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RAWTCK4.cvr [2015/12/08 08:22:24 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RAWZ2S8.cvr [2016/02/21 16:11:14 | 000,036,781 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RAXJTRW.txt [2015/12/30 09:29:26 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RAYDA3L.cvr [2016/02/05 10:54:41 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RB2AYAA.cvr [2015/11/30 17:31:33 | 000,262,144 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RB65I5Z.etl [2016/01/25 09:58:57 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RB7EASK.cvr [2015/11/13 10:59:13 | 000,002,603 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RB81BFC.png [2016/01/07 10:18:55 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RB9H89J.cvr [2016/01/27 14:26:57 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RBAMF8N.cvr [2015/11/14 22:39:02 | 004,103,179 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RBAYEY5.exe [2015/05/15 21:36:12 | 000,000,192 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RBB713Q.xml [2015/11/08 10:25:17 | 000,000,404 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RBBMINC.dat [2016/02/17 08:41:59 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RBH4NQP.cvr [2016/01/02 21:23:40 | 000,000,006 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RBJ9SLM.dat [2016/01/19 20:07:52 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RBK2O74.cvr [2015/12/19 14:18:20 | 000,002,953 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RBLRHK3.log [2015/11/07 14:59:37 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RBQCXJ5.cvr [2015/12/04 12:58:18 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RBV35T4.sql [2015/11/07 09:50:18 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RBVYORT.cvr [2015/12/19 13:34:32 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RBY0W6V.cvr [2015/12/24 08:28:14 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RBZXR2M.cvr [2016/02/22 09:33:59 | 000,006,144 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RC1ZIZM.xls [2016/01/09 16:46:49 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RC2GRUR.cvr [2015/08/02 23:58:50 | 000,118,784 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RC2GYMO.exe [2016/01/09 22:39:12 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RC3PXNU.cvr [2016/02/10 11:29:26 | 000,006,889 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RC4O0LS.xlsx [2015/11/13 13:24:52 | 000,005,690 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RC4ZMKX.log [2016/01/28 15:01:07 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RC7WC88.cvr [2016/01/04 08:46:02 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RC8FOWE.cvr [2015/12/03 16:03:28 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RC8VRCM.cvr [2016/01/26 10:48:44 | 000,028,036 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RCB94WX.cvr [2016/01/10 12:59:37 | 000,000,404 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RCBDDC5.dat [2016/01/25 15:14:20 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RCD09ET.cvr [2016/01/27 09:15:40 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RCFYJ2U.cvr [2016/02/09 13:06:15 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RCGFBUZ.cvr [2016/02/09 20:14:39 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RCGNWCW.cvr [2016/02/08 10:44:00 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RCIFYK2.cvr [2015/11/24 19:14:59 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RCK0KWM.cvr [2015/11/24 14:40:27 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RCK9XQG.cvr [2016/02/18 08:40:41 | 000,006,144 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RCNZ3YZ.xls [2016/01/16 11:19:27 | 000,000,404 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RCRD7C4.dat [2015/12/21 08:36:45 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RCWCKSW.cvr [2015/05/15 21:36:12 | 000,000,244 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RCYMZNC.xml [2015/12/15 09:14:23 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RCYMZPR.cvr [2015/12/03 20:03:49 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RD1S2R6.cvr [2015/12/09 12:09:21 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RD2YST3.cvr [2015/12/15 16:03:03 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RD50421.cvr [2016/01/27 08:25:42 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RD5QYHF.cvr [2015/11/24 16:50:01 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RDA357K.cvr [2016/02/22 12:39:22 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RDAI23J.cvr [2016/01/29 22:06:16 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RDBIFZT.cvr [2015/11/14 14:35:03 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RDCIFP8.cvr [2015/12/09 08:21:08 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RDFQL0O.cvr [2015/11/06 08:08:24 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RDHQ3SP.cvr [2016/01/23 22:51:50 | 000,000,404 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RDJMX0I.dat [2015/12/20 13:00:58 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RDK2PR6.cvr [2016/02/05 08:34:11 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RDMZGD6.cvr [2015/11/08 10:25:29 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RDNX3LY.cvr [2015/11/09 09:18:25 | 000,001,595 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RDOY482.msrcincident [2016/01/05 09:09:06 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RDQX0U4.cvr [2016/01/30 11:30:37 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RDTI29D.cvr [2016/02/01 10:23:08 | 000,000,784 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RDUYEKO.ini [2016/01/21 15:30:34 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RDWWDU4.sql [2016/02/17 10:31:03 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RDXMZIR.cvr [2015/12/15 08:57:28 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RDXZA2Y.cvr [2016/02/01 11:12:23 | 000,008,989 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RE5AODX.log [2016/01/04 10:29:20 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RE8FKMJ.cvr [2015/11/06 08:07:57 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$REB3EDM.MTX [2016/01/27 20:38:10 | 000,000,404 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$REHC192.dat [2016/01/25 17:40:15 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$REHQJYQ.cvr [2016/02/17 10:42:57 | 000,052,224 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$REL6UIY.msg [2015/11/27 19:51:44 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$REMI7A6.cvr [2016/02/04 20:06:32 | 000,058,516 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$REQVZLR.xlsx [2016/01/04 21:43:33 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RERUKIO.cvr [2015/11/27 19:39:21 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RES2OEN.cvr [2015/11/26 10:45:18 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$REU8TT9.cvr [2016/01/08 13:26:01 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$REX454C.cvr [2016/02/11 12:53:44 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$REZLMHF.cvr [2015/11/30 16:45:44 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RF06N8K.cvr [2015/12/29 08:28:03 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RF19AYC.cvr [2015/11/07 09:58:05 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RF1F2BE.cvr [2015/12/01 08:24:47 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RF9PHEV.cvr [2015/11/11 12:32:54 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RFD60GN.sql [2016/02/12 09:25:20 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RFDEL07.cvr [2016/02/23 14:50:06 | 000,000,010 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RFFBDIU.xml [2016/01/26 10:48:09 | 000,006,640 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RFG17IH.html [2016/01/28 09:45:01 | 004,458,364 | R--- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RFG55WE.txt [2016/02/09 13:53:14 | 000,010,603 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RFGTE7N.txt [2016/01/26 09:28:32 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RFHV219.sql [2016/01/10 18:22:35 | 000,011,536 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RFL57B7.out [2016/02/01 10:05:39 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RFOGU2Z.cvr [2016/02/01 11:02:42 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RFUAE6W.cvr [2015/11/18 14:42:22 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RFVDWSW.cvr [2016/02/10 17:49:08 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RFVS92W.cvr [2015/11/19 09:09:10 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RFX2GB4.sql [2016/01/11 10:10:10 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RFXIN6W.sql [2016/01/31 11:34:05 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RFY2LCL.cvr [2015/11/13 10:59:11 | 000,044,158 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RG0L4WE.ico [2016/02/10 17:49:38 | 000,023,247 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RG3PYM3.txt [2015/12/19 14:05:38 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RGDBR83.cvr [2016/01/12 21:24:16 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RGDEMOX.cvr [2015/11/09 09:33:44 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RGGU1RK.sql [2016/02/01 10:56:33 | 000,026,563 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RGGVF3J.log [2015/11/15 18:25:04 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RGJPSCK.cvr [2015/12/05 12:40:04 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RGLAOML.sql [2016/01/02 18:32:18 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RGLOQWX.cvr [2016/01/11 15:32:55 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RGO8IYE.cvr [2016/01/18 16:21:10 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RGPRB13.cvr [2015/05/15 21:36:12 | 000,000,193 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RGRRN1B.xml [2015/12/04 13:44:01 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RGV1Q6D.cvr [2015/12/06 19:19:40 | 000,000,404 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RGV7CJQ.dat [2015/11/20 08:27:54 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RH0LYNC.cvr [2015/12/22 16:18:11 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RH0Z9V4.cvr [2016/02/09 22:25:12 | 000,021,112 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RH31W2N.txt [2016/02/23 14:50:08 | 000,000,010 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RH3BS1T.xml [2015/11/10 14:48:39 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RH3JU8Z.cvr [2015/12/04 13:44:11 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RHBIWWK.cvr [2015/12/27 12:11:36 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RHCRNOF.cvr [2016/01/15 08:34:30 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RHEOAO3.cvr [2015/12/14 13:13:34 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RHGENKK.cvr [2016/01/03 11:16:51 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RHGZ901.cvr [2015/11/27 15:10:56 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RHMFRFP.cvr [2016/02/10 15:10:01 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RHOFXA6.cvr [2015/12/03 11:54:21 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RHOJOAZ.sql [2016/02/12 12:34:52 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RHUUP0K.cvr [2015/11/14 13:53:03 | 000,000,404 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RHZT75J.dat [2016/02/08 11:57:42 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RHZVP4U.cvr [2016/02/20 12:43:02 | 000,000,404 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RI349AJ.dat [2016/02/02 09:05:13 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RI4TNCT.cvr [2015/11/13 10:59:11 | 000,001,645 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RI8M1PI.png [2015/12/18 21:16:48 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RIA2N7D.cvr [2016/01/21 10:45:16 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RICKOQL.cvr [2016/02/15 11:48:01 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RIIE3M9.cvr [2015/12/04 12:00:00 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RIIESBS.cvr [2015/11/13 10:59:14 | 000,002,317 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RIIUM7N.png [2016/03/04 13:15:47 | 000,940,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RIO39QD.asd [2015/12/14 21:58:46 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RIP4IGC.cvr [2015/12/04 14:09:53 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RIPQXI3.cvr [2015/12/01 12:38:57 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RIQEN79.cvr [2016/01/26 08:15:14 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RIRYC02.cvr [2015/11/26 19:11:28 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RIV1WD6.cvr [2016/02/22 08:38:25 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RIWGXIA.cvr [2016/01/26 16:15:56 | 001,793,586 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RIYZTNL.DAT [2015/11/24 12:38:47 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RJ252WH.cvr [2015/11/08 18:09:33 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RJ2RW9V.cvr [2015/11/12 09:00:58 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RJAL5ZD.sql [2015/12/10 08:34:20 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RJBNWX6.cvr [2015/12/30 09:07:19 | 000,000,454 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RJBW7NY.log [2015/11/13 20:24:35 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RJD6IYX.cvr [2016/01/25 15:24:45 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RJGIJZ5.cvr [2016/02/09 13:40:25 | 002,699,264 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RJHY4T6.exe [2016/01/21 09:57:48 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RJJT5ZY.cvr [2015/11/06 20:25:51 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RJKNQTX.cvr [2016/01/26 13:28:57 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RJKYWJ7.cvr [2015/12/04 22:48:36 | 000,001,432 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RJMQ13P.txt [2016/01/19 20:08:00 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RJQ2XXY.cvr [2015/11/17 16:13:12 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RJSU31A.cvr [2016/01/06 16:29:18 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RJSZUV3.cvr [2015/12/07 09:33:21 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RJUBMKR.cvr [2015/11/11 15:07:52 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RJUCXFQ.cvr [2016/01/10 18:23:24 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RJX004I.cvr [2015/12/22 10:52:54 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RJX6SWK.cvr [2015/12/28 08:46:39 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RJYARDA.cvr [2016/02/09 11:58:06 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RJYX9P0.cvr [2015/12/01 11:56:24 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RK1DTQ7.cvr [2016/02/11 09:27:10 | 000,262,144 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RK2ESVM.etl [2016/02/09 13:36:39 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RK4RZ7V.cvr [2016/01/29 09:55:26 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RK5BZYU.cvr [2015/12/22 16:11:45 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RK6VSQ0.cvr [2015/12/22 16:10:17 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RK7NRKT.cvr [2016/02/03 15:36:03 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RK9B1SK.cvr [2016/02/22 11:42:50 | 000,031,197 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RKAUNYX.txt [2015/12/09 17:30:03 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RKIF1LU.cvr [2015/12/07 09:15:02 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RKJLK4G.sql [2016/01/08 08:51:22 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RKN2PZW.cvr [2016/02/19 19:33:26 | 000,009,903 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RKO49RG.txt [2016/01/02 21:23:46 | 000,000,003 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RKQO9CO.dat [2016/01/12 21:46:17 | 000,000,404 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RKRIFJK.dat [2015/11/26 13:12:52 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RKWFUFJ.cvr [2015/12/04 09:34:44 | 000,262,144 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RKWGZD0.etl [2016/02/01 14:55:52 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RKWQ3GB.cvr [2015/11/13 11:36:21 | 000,001,274 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RKYOARH.LOG [2016/01/04 08:58:49 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RKZBSSV.cvr [2016/01/12 09:09:29 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RL01KLS.cvr [2015/12/30 08:45:05 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RL1I9TD.cvr [2016/02/09 13:49:08 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RL2O1BQ.cvr [2015/11/25 08:41:14 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RL5AY3R.cvr [2015/11/27 12:23:29 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RLBS5W6.cvr [2016/01/02 21:24:10 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RLE0XM2.txt [2016/01/23 21:29:05 | 000,000,404 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RLEQC2G.dat [2016/02/17 10:42:35 | 000,052,224 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RLHQMHN.msg [2015/12/22 11:32:34 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RLJZUAW.cvr [2015/11/18 08:37:26 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RLOVWYY.cvr [2016/02/01 17:25:44 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RLQ3622.cvr [2015/11/13 10:59:18 | 000,017,239 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RLRB2K0.png [2015/12/22 21:15:48 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RLSQBZF.cvr [2015/11/28 13:24:07 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RLTQBWJ.cvr [2016/01/28 11:50:38 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RLUETQZ.cvr [2015/11/26 13:07:10 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RLV8K50.sql [2016/02/23 10:48:18 | 000,000,701 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RLWLVH0.LOG [2015/11/15 18:25:17 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RLXP4GW.cvr [2015/12/04 16:54:41 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RLXUT7D.cvr [2015/12/16 16:35:52 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RLY7TNS.cvr [2015/11/09 13:15:08 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RLYOP6N.cvr [2016/01/23 21:28:37 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RLZLIT9.cvr [2016/02/23 12:05:05 | 000,423,186 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RLZTR2H.log [2015/12/22 21:16:33 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RM2KEP0.cvr [2016/01/22 11:13:08 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RM2KHJ6.cvr [2016/02/23 10:59:52 | 000,088,295 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RM3EUBX.log [2015/12/01 09:21:44 | 000,015,525 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RM4J0HP.SHD [2016/01/28 09:39:59 | 000,000,028 | R--- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RM6VDX2.txt [2016/01/19 20:15:02 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RM8JY7F.cvr [2015/12/16 15:31:35 | 000,599,040 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMDRZ2D.xls [2015/12/01 11:37:38 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMFG060.cvr [2015/12/03 08:30:44 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMN0EUF.cvr [2015/12/11 08:46:09 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMNSFVG.cvr [2016/02/15 08:48:45 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMOBT40.cvr [2015/12/05 11:07:45 | 000,000,404 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMQ2BA0.dat [2015/11/24 12:48:37 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMSI8QH.sql [2016/01/09 22:37:37 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RN0A0CS.cvr [2015/12/01 12:30:31 | 000,006,640 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RN4QAWD.html [2015/11/13 10:59:09 | 000,003,284 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RN6E4NB.xml [2015/12/16 08:11:36 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RN72YZ8.cvr [2015/11/22 16:19:05 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RNAU067.cvr [2016/01/25 12:27:24 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RNGU2W3.cvr [2016/02/04 20:44:50 | 000,081,755 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RNHQ4QT.xlsx [2015/09/02 06:43:50 | 000,009,866 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RNINCES.xml [2015/10/13 20:24:22 | 000,271,810 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RNJV999.xml [2016/02/19 19:31:15 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RNKZSG2.cvr [2016/01/06 11:59:24 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RNMU036.cvr [2015/12/21 16:20:40 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RNOP87Z.cvr [2016/02/24 17:09:02 | 001,997,299 | R--- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RNU4VIS.zip [2015/12/03 16:58:21 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RNUVKM9.cvr [2016/02/20 16:46:11 | 000,043,257 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RNYEGAL.txt [2016/02/12 13:44:10 | 000,034,435 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RNZP2AT.txt [2016/02/09 20:55:24 | 000,006,503 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RNZXA3J.xlsx [2016/01/03 14:10:00 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RO02E9U.cvr [2015/11/09 09:16:07 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RO02R6L.cvr [2015/11/17 08:40:56 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RO4B99M.cvr [2016/01/22 12:23:23 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RO4N6OZ.cvr [2015/12/15 17:32:44 | 000,006,640 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RO9FD9V.html [2015/12/28 11:42:29 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RO9MBKA.cvr [2016/02/04 22:04:47 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ROFQH5Y.cvr [2016/01/31 11:25:32 | 000,000,404 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ROFSW9B.dat [2016/02/04 12:43:31 | 000,002,264 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ROL6IO5.lnk [2016/02/03 09:03:04 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ROOFG6M.cvr [2016/02/12 14:38:07 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ROR0CFW.cvr [2015/11/14 14:36:34 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RORGSHQ.cvr [2015/12/22 10:20:22 | 001,674,240 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ROSOINA.doc [2016/01/19 20:11:21 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ROSXEUQ.cvr [2016/02/09 12:31:56 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ROTDYV1.sql [2016/01/19 20:09:40 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ROV0GHY.cvr [2016/02/23 10:48:18 | 000,000,005 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ROWV4GO.Mtx [2016/01/12 21:51:44 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ROX71RZ.cvr [2015/11/06 15:08:16 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ROXPUYF.cvr [2015/11/14 22:51:34 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ROXXGNX.cvr [2016/02/08 10:39:48 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ROZV8A4.cvr [2015/11/06 11:02:20 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RP0IDEI.cvr [2015/11/13 10:59:13 | 000,020,029 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RP0OPDG.png [2015/05/15 21:36:12 | 000,000,821 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RP5HKAK.xml [2016/02/08 12:06:26 | 000,006,640 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RP7BAPS.html [2015/12/04 12:39:08 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RP9B28Z.cvr [2015/11/28 12:59:23 | 000,000,404 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RPCP9MN.dat [2016/02/04 20:24:42 | 000,006,355 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RPFAW7D.xlsx [2015/11/23 08:31:43 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RPM5EUO.cvr [2016/01/11 14:59:34 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RPNMYDV.cvr [2016/02/23 10:48:18 | 000,000,156 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RPRXQUB.MTX [2015/12/08 11:31:24 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RPSQJIU.cvr [2016/02/16 08:56:54 | 000,005,594 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RPU3I2B.log [2016/01/11 15:22:56 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RPYXB5B.cvr [2016/01/15 09:18:19 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RQ1TIKD.cvr [2016/01/25 17:44:37 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RQ1X27W.cvr [2015/11/30 17:38:33 | 000,262,144 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RQ3M222.etl [2016/02/23 10:48:37 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RQ3YYPP.cvr [2016/02/20 13:29:14 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RQ4F6VI.sql [2016/02/21 13:26:54 | 000,000,404 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RQ4K3ZB.dat [2016/01/07 10:24:38 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RQDLGYU.sql [2016/02/09 13:49:29 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RQFBORD.cvr [2016/02/09 20:30:15 | 000,006,502 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RQJHNNS.xlsx [2016/02/03 16:38:25 | 000,005,888 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RQKMDH1.log [2015/12/31 08:49:50 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RQKV1CJ.cvr [2016/01/26 09:50:22 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RQLKUP3.cvr [2016/01/28 11:25:36 | 000,241,168 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RQNFKBT.ppt [2016/01/25 15:05:34 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RQNKOXD.cvr [2016/02/03 11:33:05 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RQNVLSH.cvr [2015/12/03 09:52:21 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RQUZ7O8.cvr [2015/12/14 13:13:43 | 000,003,498 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RQWF9NF.xml [2016/02/16 17:44:15 | 000,032,113 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RQXGSEB.txt [2016/01/11 14:54:18 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RQY86PK.cvr [2016/01/11 09:45:37 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RR31MFG.cvr [2015/12/01 12:44:16 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RR9EZ9I.cvr [2015/12/07 10:22:00 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RR9FXF2.cvr [2016/01/06 11:51:35 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RR9KG58.cvr [2016/02/04 17:59:16 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RR9Q7QA.cvr [2015/12/09 17:31:24 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RRAMBD4.cvr [2016/02/03 12:09:07 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RRCEWDF.cvr [2015/12/15 12:05:24 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RREJ0K4.sql [2015/11/26 19:11:26 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RRGXQ8B.cvr [2015/11/27 10:15:48 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RRHUM75.cvr [2016/02/05 20:59:18 | 000,008,945 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RRM3ROG.xml [2015/12/16 15:33:13 | 000,142,216 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RRPZPXC.xlsx [2015/11/26 11:19:41 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RRQ5XLB.cvr [2016/01/14 13:20:31 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RRSRKPP.cvr [2015/12/04 14:09:44 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RRYOAXL.cvr [2016/01/09 20:43:55 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RRZSVMJ.cvr [2015/11/15 19:22:59 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RS2FFFL.cvr [2015/11/30 17:33:25 | 000,262,144 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RS2JMH7.etl [2016/02/09 11:59:39 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RSCJERP.cvr [2015/11/11 08:26:04 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RSGH9N9.cvr [2015/11/19 14:42:15 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RSGTCFP.cvr [2016/02/23 14:50:06 | 000,000,010 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RSJXN6K.xml [2015/12/21 16:18:19 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RSKKOY0.cvr [2016/01/30 14:30:42 | 000,000,404 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RSP15LL.dat [2016/02/17 10:40:10 | 000,066,048 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RSPYWWE.msg [2015/11/15 14:32:21 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RSQ1OQD.cvr [2015/11/11 09:10:09 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RSS5OKE.cvr [2015/12/26 12:23:08 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RSTC7WP.cvr [2016/02/21 13:27:17 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RSTFHF9.cvr [2015/11/13 10:59:10 | 000,002,558 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RSU8A4X.png [2015/12/04 09:46:14 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RSWFC39.cvr [2015/12/28 13:31:28 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RSWFOC4.cvr [2015/11/08 18:07:28 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RSWUEBM.cvr [2015/11/09 15:23:22 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RSX2OLZ.cvr [2016/01/07 18:24:37 | 000,033,812 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RT1FNBF.cvr [2015/12/23 08:18:50 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RT1GK04.cvr [2015/11/27 13:36:33 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RT2MDNJ.cvr [2016/02/09 20:12:19 | 000,000,404 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RT6BZHL.dat [2016/01/19 20:09:02 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RT724OV.cvr [2016/01/08 12:32:35 | 000,000,466 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RT7SDOB.LOG [2016/02/23 14:31:23 | 000,704,446 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RT92VEB.log [2015/11/13 10:59:11 | 000,055,261 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RTC5A9N.png [2016/02/16 08:21:04 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RTG4E7T.cvr [2016/01/10 12:59:47 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RTGPW9L.cvr [2015/11/06 10:03:23 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RTK7MU5.cvr [2016/02/20 12:44:51 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RTLQTFM.cvr [2016/02/08 09:01:15 | 000,006,144 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RTM7ZFP.xls [2016/01/12 21:53:34 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RTMVI3H.cvr [2015/12/23 17:02:44 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RTSO3EV.cvr [2015/11/12 08:39:52 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RTTQ5HV.cvr [2015/12/16 08:08:25 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RTY8C9A.cvr [2016/02/10 11:24:39 | 000,006,879 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RU6CF8A.xlsx [2015/12/01 09:21:43 | 000,000,025 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RU7WVXQ.SHD [2015/12/01 09:21:41 | 000,031,029 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RU830GV.SHD [2016/02/24 09:43:56 | 000,030,571 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RU89N66.xlsb [2016/02/11 17:17:52 | 000,045,036 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RUAR7T7.txt [2015/11/15 14:32:36 | 000,000,404 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RUDYRN3.dat [2016/02/12 14:39:15 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RUFW1C1.cvr [2015/12/18 17:45:55 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RUGMHN6.sql [2016/02/09 13:37:15 | 000,000,404 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RUHJ14M.dat [2015/12/27 12:58:13 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RUJIGP1.cvr [2016/02/04 09:58:51 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RUK1V2T.cvr [2016/01/11 15:22:45 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RUK9AZI.cvr [2016/02/23 12:00:07 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RULP21W.cvr [2015/12/22 14:48:50 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RUM2S8B.cvr [2016/02/17 15:44:38 | 000,038,669 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RUN6RFM.txt [2015/12/16 16:33:20 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RUNRUTH.cvr [2015/11/09 10:31:04 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RUU1APS.sql [2015/11/30 17:37:29 | 000,262,144 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RUZ04TO.etl [2016/02/24 16:45:36 | 001,997,159 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RUZ32O3.zip [2016/02/23 12:06:22 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RUZ6SIG.sql [2015/11/20 08:34:25 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RUZTR2A.cvr [2016/01/27 12:05:21 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RV02AF6.cvr [2015/11/15 15:58:52 | 000,000,404 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RV76MIX.dat [2016/01/09 12:39:07 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RVANFVK.cvr [2016/02/03 20:55:47 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RVEA5H9.cvr [2015/11/16 08:46:40 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RVFVXAZ.cvr [2016/02/07 16:51:41 | 000,120,142 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RVH3FRT.pdf [2016/02/17 10:44:10 | 000,052,224 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RVIUQCW.msg [2016/01/07 09:01:52 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RVQHG3I.cvr [2016/02/19 09:35:57 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RVTESPG.sql [2016/02/10 17:49:57 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RVV2896.cvr [2015/11/22 20:22:21 | 000,000,404 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RVXW26W.dat [2015/11/06 09:48:38 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RVY1AYY.sql [2015/11/13 10:59:14 | 000,002,317 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RVZWUEQ.png [2016/01/21 15:16:03 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RW30MRI.cvr [2015/12/04 09:41:53 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RW41M6S.cvr [2015/11/14 13:53:09 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RW4I0DA.cvr [2015/12/01 09:26:10 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RW7YPRW.cvr [2015/11/13 10:59:10 | 000,025,324 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RW8B738.png [2015/11/28 12:59:28 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RW8F8A8.cvr [2016/02/20 12:43:11 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWL3U5J.cvr [2016/02/03 20:48:06 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWMTSMO.cvr [2015/06/18 20:00:14 | 000,004,780 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWPDDUP.xml [2016/01/27 21:49:24 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWQ1CK3.cvr [2016/01/09 21:10:33 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWTDQTV.cvr [2015/12/03 17:02:48 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWUPH37.sql [2016/02/06 11:06:07 | 000,000,404 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWWXM3J.dat [2016/01/28 11:59:23 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RX30W9Y.cvr [2015/11/13 08:36:50 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RX4A2WQ.cvr [2016/01/02 21:23:46 | 000,000,001 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RX5O196.dat [2016/02/17 10:43:12 | 000,052,224 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXDPNZ6.msg [2016/02/06 11:06:15 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXEI1UT.cvr [2016/01/27 12:19:14 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXEQF8R.cvr [2015/11/30 14:05:54 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXF3XGR.cvr [2015/11/30 18:03:32 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXFI027.cvr [2015/11/13 10:59:18 | 000,071,963 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXG9ZDF.png [2016/02/06 19:52:09 | 000,000,404 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXJ0ZA2.dat [2016/02/17 10:46:29 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXJUCVW.cvr [2015/11/23 12:12:26 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXKDNS7.cvr [2016/01/16 13:16:32 | 000,000,404 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXLDE41.dat [2015/11/07 23:26:23 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXMJ3FT.cvr [2015/11/12 17:08:40 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXN3TVA.cvr [2015/12/16 15:30:48 | 000,643,285 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXZSJ63.sql [2015/12/19 14:09:55 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXZXENN.cvr [2015/10/16 19:14:28 | 000,101,433 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RY20PZ5.xml [2016/01/11 14:59:31 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RY5LASY.cvr [2016/02/22 10:44:18 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RY5PVKK.cvr [2015/12/14 08:29:17 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RY72ABT.cvr [2015/11/13 10:59:10 | 000,054,602 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RY7A9FM.ico [2015/12/22 20:45:00 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RY8FNYJ.cvr [2015/11/15 18:52:54 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RY9R4H6.sql [2016/01/24 22:46:43 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RYAF735.cvr [2016/02/04 12:43:30 | 000,002,280 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RYDVD3M.lnk [2015/12/19 14:38:38 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RYE90S0.sql [2016/01/12 21:54:37 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RYFW8D7.cvr [2016/01/20 20:24:23 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RYIM5DD.cvr [2015/12/01 09:21:48 | 000,062,037 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RYMEKB5.SHD [2015/11/25 09:12:11 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RYN9V63.cvr [2015/11/17 09:58:21 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RYPBQHR.cvr [2016/02/01 14:41:56 | 000,058,336 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RYSU7FD.log [2015/12/01 14:40:07 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RYTWZHB.cvr [2015/11/13 20:41:43 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RYYI4B2.cvr [2016/01/03 11:15:02 | 000,000,404 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RZ0D55C.dat [2016/01/30 15:10:22 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RZ3LXRT.cvr [2015/12/04 11:47:19 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RZ4D7OK.cvr [2016/02/10 15:10:21 | 000,050,616 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RZ86GRD.txt [2015/05/15 21:36:12 | 000,000,191 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RZCBKF6.xml [2016/02/12 13:42:53 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RZE9I0E.cvr [2016/01/09 20:47:57 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RZG5AIR.cvr [2016/02/12 15:00:24 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RZJBVKY.cvr [2015/11/13 10:59:09 | 000,017,328 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RZPWV6D.sif [2016/02/17 10:43:26 | 000,052,224 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RZT5YMW.msg [2015/12/04 09:16:05 | 000,196,608 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RZUBL8H.etl [2016/01/27 15:17:14 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RZV75IA.cvr [2015/11/19 15:46:47 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RZWBZYI.cvr [2015/11/30 14:05:51 | 000,021,504 | R--- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RZZYY8Q.doc [2015/02/04 10:03:57 | 000,000,129 | -HS- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\desktop.ini [458 c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\*.tmp files -> c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\*.tmp -> ] [2016/01/13 16:40:09 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R035098.WMC\allservices.xml [2015/08/16 10:39:57 | 000,000,483 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R171LLK\DownError.txt [2015/08/21 20:51:49 | 000,005,971 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R171LLK\DownErrorConfig.txt [2015/04/17 09:48:34 | 000,000,643 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R171LLK\Extensions.plist [2014/10/17 16:15:20 | 000,669,984 | ---- | M] (IObit) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R171LLK\BrowerProtect\ASCPlugin_Protection.dll [2014/07/28 15:53:24 | 000,773,920 | ---- | M] (IObit) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R171LLK\BrowerProtect\ASCUrlScanner.dll [2015/08/20 20:59:59 | 005,102,324 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R171LLK\Database\base_safe_browse_0814 [1 c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R1O340K\*.tmp files -> c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R1O340K\*.tmp -> ] [2016/01/26 08:39:23 | 000,001,215 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R1TC3BF.WMC\serviceinfo.xml [2016/02/02 08:21:21 | 000,059,094 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R2WUIFP.tmp\CleanGradient.thmx [2015/12/17 06:52:06 | 000,623,416 | ---- | M] (Baidu.com, Inc.) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R2YHE9D\bdcommon.dll [2015/12/17 06:52:15 | 000,430,904 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R2YHE9D\bdminiopenssl.dll [2015/12/17 06:52:22 | 000,581,432 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R2YHE9D\bdstatreport.dll [2015/12/17 06:51:49 | 000,897,336 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R2YHE9D\bdutil.exe [2015/12/17 06:52:26 | 000,410,936 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R2YHE9D\bdxctrl.dll [2015/12/17 06:52:27 | 001,018,168 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R2YHE9D\bdxui.dll [2015/11/06 14:20:34 | 000,421,200 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R2YHE9D\msvcp100.dll [2015/11/06 14:20:34 | 000,773,968 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R2YHE9D\msvcr100.dll [2015/12/17 06:52:03 | 000,983,352 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R2YHE9D\Spark.exe [2015/12/17 06:52:52 | 000,272,184 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R2YHE9D\Win10SetDefaultBrowser.dll [2015/07/18 23:26:36 | 000,029,077 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\afrikaans.xml [2015/08/26 17:27:48 | 000,057,197 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\albanian.xml [2015/07/18 23:26:36 | 000,015,530 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\arabic.xml [2015/07/18 23:26:36 | 000,049,810 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\aragonese.xml [2015/07/18 23:26:36 | 000,020,821 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\aranese.xml [2015/07/18 23:26:36 | 000,035,482 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\azerbaijani.xml [2015/07/18 23:26:36 | 000,052,813 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\basque.xml [2015/07/18 23:26:36 | 000,023,558 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\belarusian.xml [2015/10/09 18:37:10 | 000,070,025 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\bengali.xml [2015/07/18 23:26:36 | 000,032,084 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\bosnian.xml [2015/07/18 23:26:36 | 000,050,443 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\brazilian_portuguese.xml [2015/09/03 20:18:08 | 000,062,890 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\bulgarian.xml [2015/10/29 00:05:16 | 000,047,153 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\catalan.xml [2015/08/16 22:32:40 | 000,054,468 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\chinese.xml [2015/09/03 20:20:12 | 000,055,278 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\chineseSimplified.xml [2015/07/18 23:26:36 | 000,061,435 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\croatian.xml [2015/07/28 19:35:36 | 000,052,122 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\czech.xml [2015/07/20 23:04:02 | 000,054,959 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\danish.xml [2015/08/02 23:58:50 | 000,044,138 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\dutch.xml [2015/10/29 00:05:16 | 000,054,582 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\english.xml [2015/08/30 00:50:48 | 000,054,595 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\english_customizable.xml [2015/07/18 23:26:36 | 000,048,285 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\esperanto.xml [2015/07/18 23:26:36 | 000,051,979 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\estonian.xml [2015/07/18 23:26:36 | 000,025,399 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\extremaduran.xml [2015/07/18 23:26:36 | 000,046,077 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\farsi.xml [2015/07/18 23:26:36 | 000,044,055 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\finnish.xml [2015/08/16 22:13:38 | 000,056,888 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\french.xml [2015/07/18 23:26:36 | 000,034,362 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\friulian.xml [2015/07/18 23:26:36 | 000,025,339 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\galician.xml [2015/07/18 23:26:36 | 000,060,005 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\georgian.xml [2015/10/16 18:30:14 | 000,047,775 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\german.xml [2015/07/18 23:26:36 | 000,041,094 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\greek.xml [2015/07/18 23:26:36 | 000,069,803 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\gujarati.xml [2015/07/18 23:26:36 | 000,022,692 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\hebrew.xml [2015/07/18 23:26:36 | 000,046,688 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\hindi.xml [2015/09/03 20:20:12 | 000,060,749 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\hungarian.xml [2015/07/18 23:26:36 | 000,034,245 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\indonesian.xml [2015/10/29 00:05:16 | 000,062,132 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\italian.xml [2015/07/18 23:26:36 | 000,062,596 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\japanese.xml [2015/07/18 23:26:36 | 000,050,327 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\kabyle.xml [2015/07/18 23:26:36 | 000,074,866 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\kannada.xml [2015/07/18 23:26:36 | 000,033,034 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\kazakh.xml [2015/09/03 21:18:04 | 000,043,722 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\korean.xml [2015/07/18 23:26:36 | 000,038,731 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\kyrgyz.xml [2015/07/18 23:26:36 | 000,046,317 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\latvian.xml [2015/07/18 23:26:36 | 000,034,480 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\ligurian.xml [2015/07/18 23:26:36 | 000,042,938 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\lithuanian.xml [2015/07/18 23:26:36 | 000,025,260 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\luxembourgish.xml [2015/07/18 23:26:36 | 000,036,460 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\macedonian.xml [2015/07/18 23:26:36 | 000,019,084 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\malay.xml [2015/07/18 23:26:36 | 000,048,008 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\marathi.xml [2015/07/18 23:26:36 | 000,064,376 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\mongolian.xml [2015/08/30 00:35:14 | 000,027,778 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\norwegian.xml [2015/08/30 00:33:56 | 000,041,202 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\nynorsk.xml [2015/07/18 23:26:36 | 000,026,116 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\occitan.xml [2015/10/16 18:30:14 | 000,057,668 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\polish.xml [2015/08/17 21:28:18 | 000,052,599 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\portuguese.xml [2015/07/18 23:26:36 | 000,052,733 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\romanian.xml [2015/09/03 20:20:12 | 000,068,911 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\russian.xml [2015/07/18 23:26:36 | 000,010,160 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\samogitian.xml [2015/07/18 23:26:36 | 000,040,982 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\sardinian.xml [2015/07/18 23:26:36 | 000,024,098 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\serbian.xml [2015/07/18 23:26:36 | 000,047,833 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\serbianCyrillic.xml [2015/07/18 23:26:36 | 000,056,893 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\sinhala.xml [2015/07/18 23:26:36 | 000,038,676 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\slovak.xml [2015/09/03 21:26:12 | 000,052,052 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\slovenian.xml [2015/08/20 21:19:10 | 000,043,716 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\spanish.xml [2015/07/18 23:26:36 | 000,045,235 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\spanish_ar.xml [2015/07/18 23:26:36 | 000,043,606 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\swedish.xml [2015/07/18 23:26:36 | 000,030,395 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\tagalog.xml [2015/07/18 23:26:36 | 000,066,798 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\tajikCyrillic.xml [2015/07/18 23:26:36 | 000,054,196 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\tamil.xml [2015/07/18 23:26:36 | 000,066,622 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\tatar.xml [2015/07/18 23:26:36 | 000,053,577 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\telugu.xml [2015/07/18 23:26:36 | 000,041,406 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\thai.xml [2015/09/03 20:20:12 | 000,046,369 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\turkish.xml [2015/09/03 20:20:12 | 000,063,331 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\ukrainian.xml [2015/07/18 23:26:36 | 000,015,658 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\urdu.xml [2015/07/18 23:26:36 | 000,047,839 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\uyghur.xml [2015/07/18 23:26:36 | 000,030,177 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\uzbek.xml [2015/07/18 23:26:36 | 000,035,714 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\uzbekCyrillic.xml [2015/07/18 23:26:36 | 000,052,737 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\vietnamese.xml [2015/07/18 23:26:36 | 000,053,261 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R3NT3QM\welsh.xml [2016/02/22 17:41:17 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R4DP901\.lock [2015/12/03 19:29:20 | 018,675,363 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R7YOL4T\MovieSubtitler-1449168003985\1449168003985.log [2015/12/03 19:32:20 | 000,003,184 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R7YOL4T\MovieSubtitler-1449171130837\1449171130837.log [2015/12/11 15:36:02 | 001,520,233 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R7YOL4T\MovieSubtitler-1449839551449\1449839551449.log [2015/12/11 15:36:02 | 2478,993,408 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R7YOL4T\MovieSubtitler-1449839551449\1449839551449.mpg [2015/12/11 15:35:46 | 000,000,004 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R7YOL4T\MovieSubtitler-1449839551449\1449839551449.pid [2015/12/11 13:12:36 | 017,318,912 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R7YOL4T\MovieSubtitler-1449839551449\avconv.exe [2015/12/11 13:12:55 | 005,848,064 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R7YOL4T\MovieSubtitler-1449839551449\mencoder.exe [2015/12/24 00:02:20 | 000,889,590 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R7YOL4T\MovieSubtitler-1450910685495\1450910685495.log [2015/12/24 00:02:20 | 3683,667,968 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R7YOL4T\MovieSubtitler-1450910685495\1450910685495.mpg [2015/12/24 00:02:09 | 000,000,004 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R7YOL4T\MovieSubtitler-1450910685495\1450910685495.pid [2015/12/23 22:44:48 | 017,318,912 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R7YOL4T\MovieSubtitler-1450910685495\avconv.exe [2015/12/23 22:45:01 | 005,848,064 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R7YOL4T\MovieSubtitler-1450910685495\mencoder.exe [2016/02/16 09:00:31 | 000,001,424 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R9DWLVI\JavaDeployReg.log [3 c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R9DWLVI\*.tmp files -> c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R9DWLVI\*.tmp -> ] [3 c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R9DWLVI\Google Toolbar\*.tmp files -> c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$R9DWLVI\Google Toolbar\*.tmp -> ] [2015/09/02 06:43:52 | 000,215,456 | ---- | M] (IAC Search and Media, Inc.) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RB5IH3Z\Reporting\ReportingHelper.dll [2015/12/17 06:52:06 | 000,623,416 | ---- | M] (Baidu.com, Inc.) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RBJMX40\bdcommon.dll [2015/12/17 06:52:26 | 000,410,936 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RBJMX40\bdxctrl.dll [2015/12/17 06:52:26 | 001,018,168 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RBJMX40\bdxui.dll [2015/11/09 09:10:55 | 000,166,724 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RC2VFHM.0\MSForms.exd [2015/11/09 09:15:22 | 000,017,004 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RC2VFHM.0\ShockwaveFlashObjects.exd [2015/11/30 13:15:53 | 000,069,441 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RHSUZ0G\02BBB612_stp.CIS [2015/11/30 13:15:53 | 000,000,293 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RHSUZ0G\02BBB612_stp.CIS.part [2015/11/30 13:15:55 | 000,152,064 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RHSUZ0G\02BBB612_stp\icmac.dll [2016/01/26 12:06:08 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RIWBT9V.WMC\allservices.xml [2010/03/28 00:05:36 | 000,742,274 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RLJOSJE\BRANDING.XML [2010/03/22 00:14:12 | 000,238,464 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RLJOSJE\OSETUPUI.DLL [2010/03/28 05:13:00 | 000,072,327 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RLJOSJE\SETUP.CHM [2016/02/01 09:47:10 | 000,000,234 | -H-- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RLRSF1C\desktop.ini [2016/02/01 09:47:10 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RLRSF1C\Favoris.vss [2016/02/01 09:47:10 | 000,029,926 | -H-- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RLRSF1C\_private\folder.ico [2010/03/23 19:56:42 | 000,000,175 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\autorun.inf [2010/03/24 12:17:42 | 000,002,017 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\LISEZMOI.HTM [2010/03/30 09:51:02 | 001,100,664 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\setup.exe [2010/03/30 23:36:00 | 003,285,039 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Catalog\files14.cat [2010/03/28 00:05:36 | 000,742,274 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Office.fr-fr\branding.xml [2010/03/23 19:55:52 | 000,838,536 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Office.fr-fr\DW20.EXE [2010/03/23 19:56:04 | 000,526,176 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Office.fr-fr\dwdcw20.dll [2010/03/23 19:56:06 | 000,519,584 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Office.fr-fr\dwtrig20.exe [2010/03/23 19:56:32 | 000,001,857 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Office.fr-fr\Microsoft.VC90.CRT.manifest [2010/03/29 13:47:04 | 000,655,872 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Office.fr-fr\msvcr90.dll [2010/03/30 23:36:58 | 014,677,307 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Office.fr-fr\OfficeLR.cab [2010/03/30 23:37:08 | 003,066,368 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Office.fr-fr\OfficeMUI.msi [2010/03/30 23:37:44 | 000,005,612 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Office.fr-fr\OfficeMUI.xml [2010/03/22 00:14:12 | 000,238,464 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Office.fr-fr\osetupui.dll [2010/03/29 13:53:42 | 000,027,691 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Office.fr-fr\pss10r.chm [2010/03/28 05:13:00 | 000,072,327 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Office.fr-fr\setup.chm [2010/03/30 23:37:42 | 000,009,329 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Office.fr-fr\setup.xml [2010/03/28 00:06:00 | 000,081,408 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Office.fr-fr\ShellUI.MST [2010/03/22 00:14:14 | 000,112,544 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Office.fr-fr\1036\dwintl20.dll [2010/03/30 23:37:36 | 000,672,768 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Office64.fr-fr\Office64MUI.msi [2010/03/30 23:37:52 | 000,001,576 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Office64.fr-fr\Office64MUI.xml [2010/03/30 23:37:28 | 001,209,129 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Office64.fr-fr\OWOW64LR.cab [2010/03/30 23:37:50 | 000,002,151 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Office64.fr-fr\setup.xml [2010/03/31 03:36:04 | 000,653,824 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Proofing.fr-fr\Proofing.msi [2010/03/31 03:42:08 | 000,000,811 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Proofing.fr-fr\Proofing.xml [2010/03/31 03:41:30 | 000,009,805 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Proofing.fr-fr\setup.xml [2010/03/31 03:33:18 | 018,232,276 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Proofing.fr-fr\Proof.ar\Proof.cab [2010/03/31 03:35:46 | 000,663,552 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Proofing.fr-fr\Proof.ar\Proof.msi [2010/03/31 03:42:04 | 000,001,151 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Proofing.fr-fr\Proof.ar\Proof.xml [2010/03/31 03:32:22 | 019,088,870 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Proofing.fr-fr\Proof.de\Proof.cab [2010/03/31 03:35:52 | 000,663,040 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Proofing.fr-fr\Proof.de\Proof.msi [2010/03/31 03:41:48 | 000,001,459 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Proofing.fr-fr\Proof.de\Proof.xml [2010/03/31 03:34:00 | 010,918,653 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Proofing.fr-fr\Proof.en\Proof.cab [2010/03/31 03:35:54 | 000,656,896 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Proofing.fr-fr\Proof.en\Proof.msi [2010/03/31 03:41:56 | 000,001,347 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Proofing.fr-fr\Proof.en\Proof.xml [2010/03/31 03:33:56 | 013,184,516 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Proofing.fr-fr\Proof.es\Proof.cab [2010/03/31 03:35:50 | 000,663,040 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Proofing.fr-fr\Proof.es\Proof.msi [2010/03/31 03:41:52 | 000,001,457 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Proofing.fr-fr\Proof.es\Proof.xml [2010/03/31 03:32:16 | 020,451,562 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Proofing.fr-fr\Proof.fr\Proof.cab [2010/03/31 03:35:42 | 000,667,648 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Proofing.fr-fr\Proof.fr\Proof.msi [2010/03/31 03:41:50 | 000,001,458 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Proofing.fr-fr\Proof.fr\Proof.xml [2010/03/31 03:34:22 | 006,578,835 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Proofing.fr-fr\Proof.nl\Proof.cab [2010/03/31 03:36:00 | 000,654,848 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Proofing.fr-fr\Proof.nl\Proof.msi [2010/03/31 03:42:02 | 000,001,232 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Proofing.fr-fr\Proof.nl\Proof.xml [2010/03/31 03:35:08 | 001,566,278 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Rosebud.fr-fr\RbudLR.cab [2010/03/31 03:40:26 | 000,050,688 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Rosebud.fr-fr\RosebudMUI.msi [2010/03/31 03:42:10 | 000,000,809 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Rosebud.fr-fr\RosebudMUI.xml [2010/03/31 03:42:00 | 000,001,251 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Rosebud.fr-fr\setup.xml [2010/03/28 10:38:20 | 000,000,075 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Updates\LISEZMOI.TXT [2010/03/31 05:05:10 | 000,004,798 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Visio.fr-fr\setup.xml [2010/03/31 05:01:18 | 038,722,864 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Visio.fr-fr\VisioLR.cab [2010/03/31 05:04:48 | 002,003,456 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Visio.fr-fr\VisioMUI.msi [2010/03/31 05:05:08 | 000,006,130 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Visio.fr-fr\VisioMUI.xml [2010/03/24 00:17:56 | 000,000,900 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Visior.WW\config.xml [2010/03/30 23:37:10 | 003,025,408 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Visior.WW\Office64WW.msi [2010/03/30 23:37:46 | 000,004,685 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Visior.WW\Office64WW.xml [2010/03/29 13:50:34 | 000,149,352 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Visior.WW\ose.exe [2010/03/30 09:50:32 | 005,789,544 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Visior.WW\osetup.dll [2010/03/30 23:36:16 | 023,865,400 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Visior.WW\OWOW64WW.cab [2010/03/23 19:55:46 | 001,248,016 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Visior.WW\PidGenX.dll [2010/03/23 19:55:56 | 000,715,834 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Visior.WW\pkeyconfig-office.xrm-ms [2010/03/31 06:26:04 | 000,021,246 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Visior.WW\setup.xml [2010/03/31 06:25:56 | 156,681,182 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Visior.WW\VisiorWW.cab [2010/03/31 06:26:02 | 009,695,232 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Visior.WW\VisiorWW.msi [2010/03/31 06:26:06 | 000,008,917 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RMMBXTS.tmp\Visior.WW\VisiorWW.xml [2016/01/02 21:22:10 | 000,000,166 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$ROZTZQQ\geodata.xml [2016/01/04 09:46:03 | 000,043,520 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RQA9HC0\Ob_who_1 (contrôle MSC vs Platine).xls [2016/01/04 09:45:42 | 000,038,400 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RQA9HC0\ob_who_2 (rejets Platine).xls [2016/01/06 13:33:34 | 000,018,897 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RQA9HC0\ob_who_3(Contrôle de l'exhaustivité du trafic envoyé par Platine à Reporting Trafic ).xlsx [2015/07/27 11:58:34 | 007,670,840 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RSDX20J\InstallCore0028c40a\setup.exe [2015/12/31 12:14:05 | 000,059,094 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RSI8BPA.tmp\CleanGradient.thmx [1 c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RUZDO7T\*.tmp files -> c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RUZDO7T\*.tmp -> ] [2015/11/06 14:05:08 | 000,000,429 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RVEWQ29\DefaultConfig.xml [2016/01/30 23:06:44 | 000,001,554 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RVSGP3L\OHotfix(00001).log [2016/01/30 23:06:36 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RVSGP3L\OHotfix(00001)_Msi.log [2016/01/31 00:12:14 | 000,001,466 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RVSGP3L\OHotfix(00002).log [2016/01/31 00:12:08 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RVSGP3L\OHotfix(00002)_Msi.log [2015/07/31 12:59:38 | 002,909,472 | ---- | M] (IObit) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\LiveUpdate.exe [2016/02/27 22:29:36 | 002,083,452 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\LiveUpdate.log [2016/02/27 22:29:44 | 002,907,514 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\LiveUpdateSrvUpt.log [2015/11/13 08:36:17 | 000,000,922 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\LiveUpdate_1.log [2014/10/16 10:26:28 | 000,622,880 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\ProductStatistics.dll [2015/08/28 10:23:37 | 000,018,310 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\ProductStatistics.log [2015/08/21 22:01:29 | 000,006,938 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\ProductUpt.log [2015/04/17 09:49:43 | 000,000,058 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\system.ini [2015/04/17 09:48:34 | 000,002,258 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\Language\Arabic.lng [2015/04/17 09:48:34 | 000,002,408 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\Language\Belarusian.lng [2015/04/17 09:48:34 | 000,001,472 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\Language\ChineseSimp.lng [2015/04/17 09:48:34 | 000,001,488 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\Language\ChineseTrad.lng [2015/04/17 09:48:34 | 000,002,286 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\Language\Czech.lng [2015/04/17 09:48:34 | 000,002,290 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\Language\Danish.lng [2015/04/17 09:48:34 | 000,002,340 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\Language\Dinka.lng [2015/04/17 09:48:34 | 000,002,302 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\Language\Dutch.lng [2015/04/17 09:48:34 | 000,002,248 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\Language\English.lng [2015/04/17 09:48:34 | 000,002,264 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\Language\Finnish.lng [2015/04/17 09:48:34 | 000,002,434 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\Language\Flemish.lng [2015/04/17 09:48:34 | 000,002,632 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\Language\French.lng [2015/04/17 09:48:34 | 000,002,656 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\Language\German.lng [2015/04/17 09:48:34 | 000,002,530 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\Language\Greek.lng [2015/04/17 09:48:34 | 000,002,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\Language\Hebrew.lng [2015/04/17 09:48:34 | 000,002,316 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\Language\Hungarian.lng [2015/04/17 09:48:34 | 000,002,322 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\Language\Indonesia.lng [2015/04/17 09:48:34 | 000,002,406 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\Language\Italian.lng [2015/04/17 09:48:34 | 000,001,712 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\Language\Japanese.lng [2015/04/17 09:48:34 | 000,001,728 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\Language\Korean.lng [2015/04/17 09:48:34 | 000,002,494 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\Language\Latvian.lng [2015/04/17 09:48:34 | 000,002,098 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\Language\Malayalam.lng [2015/04/17 09:48:34 | 000,002,410 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\Language\Polish.lng [2015/04/17 09:48:34 | 000,002,504 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\Language\Portuguese(PT-BR).lng [2015/04/17 09:48:34 | 000,002,516 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\Language\Portuguese(PT-PT).lng [2015/04/17 09:48:34 | 000,002,468 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\Language\Romanian.lng [2015/04/17 09:48:34 | 000,002,294 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\Language\Russian.lng [2015/04/17 09:48:34 | 000,002,234 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\Language\Serbian (cyrillic).lng [2015/04/17 09:48:34 | 000,002,258 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\Language\Serbian (latin).lng [2015/04/17 09:48:34 | 000,002,366 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\Language\Slovak.lng [2015/04/17 09:48:34 | 000,002,386 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\Language\Slovenian.lng [2015/04/17 09:48:34 | 000,002,474 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\Language\Spanish.lng [2015/04/17 09:48:34 | 000,002,334 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\Language\Swedish.lng [2015/04/17 09:48:34 | 000,002,398 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\Language\Turkish.lng [2015/04/17 09:48:34 | 000,002,322 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\Language\Ukrainian.lng [2015/04/17 09:48:34 | 000,002,246 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\Language\Vietnamese.lng [2015/07/31 12:59:38 | 002,909,472 | ---- | M] (IObit) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\update\LiveUpdate.exe [2015/07/31 12:59:39 | 000,000,440 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\update\LiveUpdate.exe.dat [2015/07/31 12:59:40 | 000,000,174 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\update\LiveUpdate.log [2016/02/27 22:29:43 | 000,014,481 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\update\update.spt [2015/08/21 08:28:32 | 000,000,432 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RWDVILX\update\Surfing Protection\Database\ASCSpecialUrl.db.dat [2016/02/23 14:45:37 | 000,000,332 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RX1HHNK\Spark\errors\BugReportConfig.ini [2010/11/20 21:29:03 | 000,541,184 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXDHU5V\CbsProvider.dll [2010/11/20 21:29:04 | 000,141,312 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXDHU5V\CompatProvider.dll [2010/11/20 21:29:12 | 000,230,912 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXDHU5V\DismCore.dll [2010/11/20 21:29:12 | 000,050,688 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXDHU5V\DismCorePS.dll [2010/11/20 21:29:12 | 000,082,944 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXDHU5V\DismHost.exe [2010/11/20 21:29:12 | 000,141,312 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXDHU5V\DismProv.dll [2010/11/20 21:29:03 | 000,318,464 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXDHU5V\DmiProvider.dll [2010/11/20 21:29:12 | 000,049,152 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXDHU5V\FolderProvider.dll [2010/11/20 21:29:04 | 000,250,880 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXDHU5V\IntlProvider.dll [2010/11/20 21:29:12 | 000,089,600 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXDHU5V\LogProvider.dll [2010/11/20 21:29:19 | 000,159,744 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXDHU5V\MsiProvider.dll [2010/11/20 21:29:03 | 000,102,912 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXDHU5V\OSProvider.dll [2010/11/20 21:29:04 | 000,220,160 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXDHU5V\SmiProvider.dll [2010/11/20 21:29:12 | 000,347,648 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXDHU5V\TransmogProvider.dll [2010/11/20 21:29:04 | 000,242,688 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXDHU5V\UnattendProvider.dll [2010/11/20 21:29:04 | 000,189,952 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXDHU5V\wdscore.dll [2010/11/20 21:29:04 | 000,345,600 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXDHU5V\WimProvider.dll [2010/11/20 11:59:18 | 000,037,888 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXDHU5V\fr-FR\CbsProvider.dll.mui [2009/07/14 01:44:32 | 000,013,824 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXDHU5V\fr-FR\CompatProvider.dll.mui [2009/07/14 02:43:12 | 000,007,168 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXDHU5V\fr-FR\DismCore.dll.mui [2009/07/14 02:39:58 | 000,002,048 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXDHU5V\fr-FR\DismProv.dll.mui [2009/07/14 01:37:52 | 000,018,432 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXDHU5V\fr-FR\DmiProvider.dll.mui [2009/07/14 02:41:14 | 000,002,048 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXDHU5V\fr-FR\FolderProvider.dll.mui [2009/07/14 01:35:50 | 000,031,744 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXDHU5V\fr-FR\IntlProvider.dll.mui [2009/07/14 02:40:04 | 000,006,144 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXDHU5V\fr-FR\LogProvider.dll.mui [2009/07/14 02:41:54 | 000,017,408 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXDHU5V\fr-FR\MsiProvider.dll.mui [2009/07/14 01:43:16 | 000,002,560 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXDHU5V\fr-FR\OSProvider.dll.mui [2009/07/14 01:35:32 | 000,002,048 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXDHU5V\fr-FR\SmiProvider.dll.mui [2009/07/14 02:48:52 | 000,013,312 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXDHU5V\fr-FR\TransmogProvider.dll.mui [2009/07/14 01:46:36 | 000,005,120 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXDHU5V\fr-FR\UnattendProvider.dll.mui [2009/07/14 01:44:40 | 000,013,824 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RXDHU5V\fr-FR\WimProvider.dll.mui [2016/01/27 16:29:43 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RYWBEMI.WMC\allservices.xml [2016/01/10 13:02:08 | 000,001,785 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RZRTZBJ\156893216\eee [2016/01/10 13:01:51 | 000,034,290 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RZRTZBJ\156893216\ui.jpg [2016/01/09 21:54:18 | 000,001,785 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RZRTZBJ\157417504\eee [2016/01/09 21:54:01 | 000,034,290 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-10215\$RZRTZBJ\157417504\ui.jpg [2015/08/20 10:10:29 | 000,000,129 | -HS- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-12281\desktop.ini [2015/04/15 18:01:15 | 000,000,129 | -HS- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-5974\desktop.ini [2015/05/07 10:29:34 | 000,000,129 | -HS- | M] () -- c:\$recycle.bin\S-1-5-21-1648212374-108316283-1031727223-6299\desktop.ini [2015/02/04 09:35:51 | 000,000,129 | -HS- | M] () -- c:\$recycle.bin\S-1-5-21-2940128472-3717663772-376358547-1000\desktop.ini [2015/02/04 10:00:12 | 000,000,129 | -HS- | M] () -- c:\$recycle.bin\S-1-5-21-2940128472-3717663772-376358547-1001\desktop.ini [2009/07/14 04:53:46 | 000,032,496 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT [2009/07/14 04:53:47 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT [2015/02/04 11:09:25 | 000,001,054 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [2015/02/04 11:09:25 | 000,001,058 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [2015/03/30 17:21:28 | 000,000,358 | ---- | C] () -- C:\Windows\Tasks\DriverToolkit Autorun.job [2016/01/09 21:45:56 | 000,000,498 | ---- | C] () -- C:\Windows\Tasks\HP Photo Creations Communicator.job [color=#E56717]========== Files - Unicode (All) ==========[/color] (C:\ProgramData\Microsoft\Windows\Start Menu\Programs\??????) -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Яндекс < End of report >