cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

ÿþOTL logfile created on: 31/08/2018 21:32:54 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Steve\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.18537)
Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy

3,98 Gb Total Physical Memory | 1,92 Gb Available Physical Memory | 48,11% Memory free
7,96 Gb Paging File | 5,53 Gb Available in Paging File | 69,46% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 80,00 Gb Total Space | 38,00 Gb Free Space | 47,49% Space Free | Partition Type: NTFS
Drive D: | 1762,98 Gb Total Space | 1741,36 Gb Free Space | 98,77% Space Free | Partition Type: NTFS

Computer Name: STEVE-PC | User Name: Steve | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - [2018/08/31 21:26:34 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Steve\Downloads\OTL.exe
PRC - [2018/08/28 13:54:48 | 003,750,208 | ---- | M] (Dropbox, Inc.) -- C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
PRC - [2018/05/18 19:26:58 | 000,288,848 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler.exe
PRC - [2017/03/27 13:30:06 | 002,751,760 | ---- | M] (Lavasoft Limited) -- C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.3.4.7\LavasoftTcpService.exe
PRC - [2011/04/27 09:35:24 | 000,136,488 | ---- | M] (CyberLink) -- C:\Program Files (x86)\ASUS\ASUS Cam\YCMMirage.exe
PRC - [2011/02/25 20:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
PRC - [2011/02/01 07:24:42 | 002,656,280 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
PRC - [2011/02/01 07:24:40 | 000,326,168 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
PRC - [2010/11/27 07:50:04 | 002,931,328 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
PRC - [2010/10/21 19:52:26 | 000,586,880 | ---- | M] () -- C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe
PRC - [2010/08/04 20:20:28 | 000,232,064 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files (x86)\ASUS\ASUS Manager Suite\AsShellApplication.exe
PRC - [2009/12/31 03:20:16 | 000,195,200 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files (x86)\ASUS\ASUS Easy Update\ALU.exe
PRC - [2009/12/22 13:16:18 | 000,330,368 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files (x86)\ASUS\Message Controller\AsMessageController.exe


[color=#E56717]========== Modules (No Company Name) ==========[/color]

MOD - [2018/08/28 13:59:16 | 000,029,040 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\winverifysignature.compiled._VerifySignature.cp35-win32.pyd
MOD - [2018/08/28 13:59:14 | 000,059,744 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\winshell.compiled._winshell.cp35-win32.pyd
MOD - [2018/08/28 13:59:12 | 000,028,520 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.cp35-win32.pyd
MOD - [2018/08/28 13:59:10 | 000,051,552 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\winrpcserver.compiled._RPCServer.cp35-win32.pyd
MOD - [2018/08/28 13:59:08 | 000,033,632 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\winreindex.compiled._winreindex.cp35-win32.pyd
MOD - [2018/08/28 13:59:04 | 000,024,032 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\winffi.wininet.compiled._winffi_wininet.cp35-win32.pyd
MOD - [2018/08/28 13:59:00 | 000,029,544 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\winffi.winhttp.compiled._winffi_winhttp.cp35-win32.pyd
MOD - [2018/08/28 13:58:58 | 000,025,448 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\winffi.winerror.compiled._winffi_winerror.cp35-win32.pyd
MOD - [2018/08/28 13:58:56 | 000,027,496 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\winffi.user32.compiled._winffi_user32.cp35-win32.pyd
MOD - [2018/08/28 13:58:52 | 000,034,664 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\winffi.kernel32.compiled._winffi_kernel32.cp35-win32.pyd
MOD - [2018/08/28 13:58:50 | 000,025,960 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\winffi.iphlpapi.compiled._winffi_iphlpapi.cp35-win32.pyd
MOD - [2018/08/28 13:58:44 | 000,025,960 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\winffi.advapi32.compiled._winffi_advapi32.cp35-win32.pyd
MOD - [2018/08/28 13:58:42 | 000,068,968 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\winenumhandles.compiled._WinEnumHandles.cp35-win32.pyd
MOD - [2018/08/28 13:58:38 | 000,035,680 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\wind3d11.compiled._wind3d11.cp35-win32.pyd
MOD - [2018/08/28 13:58:34 | 000,401,240 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.cp35-win32.pyd
MOD - [2018/08/28 13:58:30 | 000,023,888 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\tornado.speedups.cp35-win32.pyd
MOD - [2018/08/28 13:58:28 | 000,090,560 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\sip.cp35-win32.pyd
MOD - [2018/08/28 13:57:20 | 003,822,416 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.cp35-win32.pyd
MOD - [2018/08/28 13:57:16 | 000,218,456 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.cp35-win32.pyd
MOD - [2018/08/28 13:57:14 | 000,132,944 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.cp35-win32.pyd
MOD - [2018/08/28 13:57:12 | 000,156,504 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineWidgets.cp35-win32.pyd
MOD - [2018/08/28 13:57:10 | 000,052,056 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineCore.cp35-win32.pyd
MOD - [2018/08/28 13:57:08 | 000,037,200 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngine.cp35-win32.pyd
MOD - [2018/08/28 13:57:04 | 000,044,888 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebChannel.cp35-win32.pyd
MOD - [2018/08/28 13:56:58 | 000,205,656 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.cp35-win32.pyd
MOD - [2018/08/28 13:56:56 | 000,519,504 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.cp35-win32.pyd
MOD - [2018/08/28 13:56:54 | 001,929,552 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.cp35-win32.pyd
MOD - [2018/08/28 13:56:50 | 001,779,024 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.cp35-win32.pyd
MOD - [2018/08/28 13:56:46 | 000,074,584 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.cp35-win32.pyd
MOD - [2018/08/28 13:56:42 | 000,029,024 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.cp35-win32.pyd
MOD - [2018/08/28 13:56:40 | 001,592,128 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\libGLESv2.dll
MOD - [2018/08/28 13:56:38 | 000,025,920 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\libEGL.dll
MOD - [2018/08/28 13:56:36 | 000,083,784 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\fastpath.cp35-win32.pyd
MOD - [2018/08/28 13:56:30 | 000,441,672 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.dll
MOD - [2018/08/28 13:56:24 | 000,031,600 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\dropbox.infinite.win.compiled._driverinstallation.cp35-win32.pyd
MOD - [2018/08/28 13:56:20 | 000,025,960 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.cp35-win32.pyd
MOD - [2018/08/28 13:56:18 | 001,958,760 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.cp35-win32.pyd
MOD - [2018/08/28 13:56:16 | 000,025,456 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.cp35-win32.pyd
MOD - [2018/08/28 13:56:14 | 000,027,488 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\crashpad.compiled._Crashpad.cp35-win32.pyd
MOD - [2018/08/28 13:55:50 | 000,025,944 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.cp35-win32.pyd
MOD - [2018/08/28 13:53:40 | 002,247,496 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\dropbox_crashpad.dll
MOD - [2018/08/28 13:53:40 | 001,111,880 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\dropbox_watchdog.dll
MOD - [2018/08/28 13:53:40 | 000,418,776 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\pythoncom35.dll
MOD - [2018/08/28 13:53:40 | 000,118,232 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\pywintypes35.dll
MOD - [2018/08/28 13:53:40 | 000,036,312 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\librsync.dll
MOD - [2018/08/28 13:53:28 | 000,494,048 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\winxpgui.cp35-win32.pyd
MOD - [2018/08/28 13:53:28 | 000,182,752 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32gui.cp35-win32.pyd
MOD - [2018/08/28 13:53:28 | 000,142,824 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\_cffi_backend.cp35-win32.pyd
MOD - [2018/08/28 13:53:28 | 000,131,552 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32file.cp35-win32.pyd
MOD - [2018/08/28 13:53:28 | 000,119,272 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32security.cp35-win32.pyd
MOD - [2018/08/28 13:53:28 | 000,109,024 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32api.cp35-win32.pyd
MOD - [2018/08/28 13:53:28 | 000,065,504 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32evtlog.cp35-win32.pyd
MOD - [2018/08/28 13:53:28 | 000,061,408 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32print.cp35-win32.pyd
MOD - [2018/08/28 13:53:28 | 000,053,736 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32service.cp35-win32.pyd
MOD - [2018/08/28 13:53:28 | 000,049,128 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32process.cp35-win32.pyd
MOD - [2018/08/28 13:53:28 | 000,032,736 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32ts.cp35-win32.pyd
MOD - [2018/08/28 13:53:28 | 000,028,640 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32job.cp35-win32.pyd
MOD - [2018/08/28 13:53:28 | 000,027,624 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32profile.cp35-win32.pyd
MOD - [2018/08/28 13:53:28 | 000,027,616 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32pipe.cp35-win32.pyd
MOD - [2018/08/28 13:53:28 | 000,027,616 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32event.cp35-win32.pyd
MOD - [2018/08/28 13:53:28 | 000,026,600 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\win32clipboard.cp35-win32.pyd
MOD - [2018/08/28 13:53:28 | 000,023,520 | ---- | M] () -- C:\Program Files (x86)\Dropbox\Client\mmapfile.cp35-win32.pyd


[color=#E56717]========== Services (SafeList) ==========[/color]

SRV:[b]64bit:[/b] - File not found [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV:[b]64bit:[/b] - File not found [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\3.11.766\McCHSvc.exe -- (McComponentHostService)
SRV:[b]64bit:[/b] - File not found [On_Demand | Stopped] -- C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe coreFrameworkHost.exe -- (Amsp)
SRV:[b]64bit:[/b] - [2018/08/28 13:53:40 | 000,051,024 | ---- | M] (Dropbox, Inc.) [Auto | Running] -- C:\Windows\SysNative\DbxSvc.exe -- (DbxSvc)
SRV:[b]64bit:[/b] - [2016/11/12 21:08:26 | 000,114,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:[b]64bit:[/b] - [2016/08/22 18:19:43 | 001,386,496 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\diagtrack.dll -- (DiagTrack)
SRV:[b]64bit:[/b] - [2013/05/27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:[b]64bit:[/b] - [2011/05/31 03:42:06 | 000,210,024 | ---- | M] (DTS) [Auto | Running] -- C:\Program Files\Realtek\Audio\HDA\DTSAudioService64.exe -- (DTSAudioService)
SRV:[b]64bit:[/b] - [2010/09/18 10:32:56 | 000,241,488 | ---- | M] (Trend Micro Inc.) [Auto | Running] -- C:\Program Files\Trend Micro\Titanium\TiMiniService.exe -- (TiMiniService)
SRV - [2018/08/27 22:11:38 | 001,684,256 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2018/08/15 17:16:06 | 000,335,872 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2017/05/25 14:59:04 | 003,253,664 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe -- (CltMngSvc)
SRV - [2017/03/27 13:30:06 | 002,751,760 | ---- | M] (Lavasoft Limited) [Auto | Running] -- C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.3.4.7\LavasoftTcpService.exe -- (LavasoftTcpService)
SRV - [2017/03/27 13:30:05 | 000,025,232 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe -- (WCAssistantService)
SRV - [2017/01/02 05:37:36 | 000,143,144 | ---- | M] (Dropbox, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe -- (dbupdatem)
SRV - [2017/01/02 05:37:36 | 000,143,144 | ---- | M] (Dropbox, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe -- (dbupdate)
SRV - [2016/05/11 17:19:25 | 000,351,744 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- winhttp.dll -- (WinHttpAutoProxySvc)
SRV - [2014/03/21 00:49:18 | 000,067,224 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2011/02/25 20:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE -- (SeaPort)
SRV - [2011/02/18 18:20:54 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
SRV - [2011/02/01 07:24:42 | 002,656,280 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
SRV - [2011/02/01 07:24:40 | 000,326,168 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2010/11/21 05:24:51 | 000,397,824 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\inetsrv\iisw3adm.dll -- (WAS)
SRV - [2010/11/21 05:24:51 | 000,397,824 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\inetsrv\iisw3adm.dll -- (W3SVC)
SRV - [2010/11/21 05:24:51 | 000,061,440 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\inetsrv\apphostsvc.dll -- (AppHostSvc)
SRV - [2010/10/21 19:52:26 | 000,586,880 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe -- (AsSysCtrlService)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV:[b]64bit:[/b] - [2015/06/17 18:04:24 | 000,054,784 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:[b]64bit:[/b] - [2012/03/01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2011/07/20 12:32:19 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2011/07/20 12:32:19 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2011/05/25 07:08:54 | 000,016,152 | ---- | M] (n/a) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NWWakeFilterV.sys -- (NWWakeFilterV)
DRV:[b]64bit:[/b] - [2011/05/25 07:08:50 | 000,028,440 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NWVoltron.sys -- (NWVoltron)
DRV:[b]64bit:[/b] - [2011/05/25 07:08:50 | 000,016,152 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidkmdf.sys -- (hidkmdf)
DRV:[b]64bit:[/b] - [2011/05/14 01:37:54 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr)
DRV:[b]64bit:[/b] - [2011/05/04 09:45:28 | 000,031,216 | ---- | M] (CyberLink Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\clwvd.sys -- (clwvd)
DRV:[b]64bit:[/b] - [2011/05/02 11:45:06 | 000,175,192 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\jmcr.sys -- (JMCR)
DRV:[b]64bit:[/b] - [2011/03/21 15:22:06 | 000,452,200 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:[b]64bit:[/b] - [2011/03/03 17:59:20 | 000,174,184 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:[b]64bit:[/b] - [2011/02/18 18:11:54 | 000,439,320 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:[b]64bit:[/b] - [2011/01/03 08:16:24 | 000,994,304 | ---- | M] (DiBcom) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dvb7700all.sys -- (DVB7700ALL)
DRV:[b]64bit:[/b] - [2010/11/21 05:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:[b]64bit:[/b] - [2010/11/21 05:23:47 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:[b]64bit:[/b] - [2010/11/21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2010/11/21 05:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:[b]64bit:[/b] - [2010/10/19 10:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
DRV:[b]64bit:[/b] - [2010/09/26 17:52:12 | 001,577,984 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:[b]64bit:[/b] - [2010/09/18 10:33:02 | 000,144,464 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\tmcomm.sys -- (tmcomm)
DRV:[b]64bit:[/b] - [2010/09/18 10:33:02 | 000,105,552 | ---- | M] (Trend Micro Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\tmtdi.sys -- (tmtdi)
DRV:[b]64bit:[/b] - [2010/09/18 10:33:02 | 000,090,704 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\tmactmon.sys -- (tmactmon)
DRV:[b]64bit:[/b] - [2010/09/18 10:33:02 | 000,067,664 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\tmevtmgr.sys -- (tmevtmgr)
DRV:[b]64bit:[/b] - [2010/07/07 14:44:10 | 000,136,192 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\archlp.sys -- (archlp)
DRV:[b]64bit:[/b] - [2009/12/25 08:09:36 | 000,076,112 | ---- | M] (ENE TECHNOLOGY INC.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\enecir.sys -- (enecir)
DRV:[b]64bit:[/b] - [2009/07/14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009/07/14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009/07/14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009/06/10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009/06/10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009/06/10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009/06/10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV - [2009/07/14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2008/01/04 15:34:48 | 000,011,832 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysWOW64\drivers\AsInsHelp64.sys -- (ASInsHelp)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0CE02FFA-A6B0-46F6-BA2F-BD32C3630126}: "URL" = [String data over 1000 bytes]
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{2211d4a5-48d0-47f5-a7cd-81e861470f7f}: "URL" = [String data over 1000 bytes]
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.bing.com/search?q={searchTerms}&form=MSERBM&pc=MSERT1
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{f7bb050c-e116-44da-89c2-6f2b68c54836}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP09&src=IE-SearchBox
IE - HKLM\..\SearchScopes\{0CE02FFA-A6B0-46F6-BA2F-BD32C3630126}: "URL" = [String data over 1000 bytes]
IE - HKLM\..\SearchScopes\{2211d4a5-48d0-47f5-a7cd-81e861470f7f}: "URL" = [String data over 1000 bytes]
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.bing.com/search?q={searchTerms}&form=MSERBM&pc=MSERT1
IE - HKLM\..\SearchScopes\{f7bb050c-e116-44da-89c2-6f2b68c54836}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-2109558472-4217242841-2029953956-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default Download Directory = C:\Users\Steve\Pictures
IE - HKU\S-1-5-21-2109558472-4217242841-2029953956-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com/
IE - HKU\S-1-5-21-2109558472-4217242841-2029953956-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = [String data over 1000 bytes]
IE - HKU\S-1-5-21-2109558472-4217242841-2029953956-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page_TIMESTAMP = 60 F9 CA 73 23 20 D3 01 [binary data]
IE - HKU\S-1-5-21-2109558472-4217242841-2029953956-1001\SOFTWARE\Microsoft\Internet Explorer\Main,SyncHomePage Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy = Reg Error: Value error.
IE - HKU\S-1-5-21-2109558472-4217242841-2029953956-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-2109558472-4217242841-2029953956-1001\..\SearchScopes\{015DB5FA-EAFB-4592-A95B-F44D3EE87FA9}: "URL" = http://www.trovi.com/Results.aspx?gd=&ctid=CT3333673&octid=EB_ORIGINAL_CTID&ISID=B19BC0DC-37E3-4584-B80C-CA548E585EE6&SearchSource=58&CUI=&UM=8&UP=SP95E7C284-08EF-4735-B6E3-D2DB911991C6&D=123016&q={searchTerms}&SSPV=&SSPV=&SSPV=&SSPV=&SSPV=
IE - HKU\S-1-5-21-2109558472-4217242841-2029953956-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = [String data over 1000 bytes]
IE - HKU\S-1-5-21-2109558472-4217242841-2029953956-1001\..\SearchScopes\{0CE02FFA-A6B0-46F6-BA2F-BD32C3630126}: "URL" = [String data over 1000 bytes]
IE - HKU\S-1-5-21-2109558472-4217242841-2029953956-1001\..\SearchScopes\{2211d4a5-48d0-47f5-a7cd-81e861470f7f}: "URL" = [String data over 1000 bytes]
IE - HKU\S-1-5-21-2109558472-4217242841-2029953956-1001\..\SearchScopes\{26080cad-4adc-49ac-8c63-eda16e595cbd}: "URL" = http://www.bing.com/search?pc=COSP&ptag=D010217-A3313553B8E1247E9AFF&form=CONBDF&conlogo=CT3332012&q={searchTerms}
IE - HKU\S-1-5-21-2109558472-4217242841-2029953956-1001\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKU\S-1-5-21-2109558472-4217242841-2029953956-1001\..\SearchScopes\{f7bb050c-e116-44da-89c2-6f2b68c54836}: "URL" = http://www.bing.com/search?pc=COSP&ptag=D010217-A3313553B8E1247E9AFF&form=CONBDF&conlogo=CT3332012&q={searchTerms}
IE - HKU\S-1-5-21-2109558472-4217242841-2029953956-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-2109558472-4217242841-2029953956-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..browser.search.countryCode: "FR"
FF - prefs.js..browser.search.defaultenginename: "search.yahoo.com"
FF - prefs.js..browser.search.region: "FR"
FF - prefs.js..browser.search.selectedEngine: "search.yahoo.com"
FF - prefs.js..browser.startup.homepage: "https://fr.search.yahoo.com/yhs/web?hspart=arh&hsimp=yhs-001&type=zxy_2df3e7917c20933025&param1=ArFaIWVoNqArQGMVInobADAevXFbMnMqQGMVAmRoNqAdBHFaISoeATVoNqAqAXFaIWQBvmE4ICILNopcGWUIvmFdIWYWwVJdIGYYwVM3vqYXvFE9J6IWNVFdJGYWNVI9JmILNVJdESk8NUM9JmIWvmk9JCILNFdbDSk8wVU9ImIXvmo9ImoUwVA4ISoWwV5cGWUWvmFbEGUINF89JCoUwVA9JmITvFE9GqUNNFxcJqUDNF5bDGUNNEU3wGQGvFQ4JmIYNVI3vmk3NVA4ISISvFM3vCk3vFQ9IaYTvFI9IWYUwVw9J6IVvFE9JmISvFI9IWYTwVU9JmoWNVU4ISIXwVRdJ6IWNoU9GqUMNFBcJqQzNEBcGqQANFdcFCk8NoM4JqYUNVI9ISIYvFQ9JmIWwVw9JCoVvmpdICISvFE4ISoUvFI9I6k3wVQ4ISIWwVw4JmoVwVM4ICIYvFRdIGYTvFFdJ6IVvFJbFCILNVVdGSk8vFFoNqAqxrFaIWV9NqZ4LWxdNatoNqAsQGMVvDIlC6MuNGwuMGUuBmQiC7QnB7s8BE1cM81dN80rwTA9x6JoNqAex807ACRoN9J7OqVoNqAexbFaIUwkynIew6NoNpR6QGQXHT0gAHFbJoYbAD8kwD9%3D&param2=LGBdNWBaMGB9"
FF - prefs.js..keyword.URL: true
FF - user.js - File not found

FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@unity3d.com/UnityPlayer64,version=1.0: C:\Program Files\Unity\WebPlayer64\loader-x64\npUnity3D64.dll File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll (Google Inc.)

64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 57.0.4\extensions\\Components: C:\PROGRAM FILES\MOZILLA FIREFOX\COMPONENTS
64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 57.0.4\extensions\\Plugins: C:\PROGRAM FILES\MOZILLA FIREFOX\PLUGINS
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{22C7F6C6-8D67-4534-92B5-529A0EC09405}: C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\firefoxextension\
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 57.0.4\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 57.0.4\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins

[2017/11/29 23:44:11 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Steve\AppData\Roaming\Mozilla\Extensions
[2017/11/29 23:44:12 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Steve\AppData\Roaming\Mozilla\SystemExtensionsDev
[2017/11/29 23:44:20 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Steve\AppData\Roaming\Mozilla\Firefox\Profiles\vzutfrb7.default\browser-extension-data
[2018/01/10 17:36:57 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Steve\AppData\Roaming\Mozilla\Firefox\Profiles\vzutfrb7.default\browser-extension-data\screenshots@mozilla.org
[2018/01/10 17:33:10 | 000,005,324 | ---- | M] () (No name found) -- C:\Users\Steve\AppData\Roaming\Mozilla\Firefox\Profiles\vzutfrb7.default\features\{9f3744ad-348d-4e9f-8a9a-37ce31d10e8c}\disable-js-shared-memory@mozilla.org.xpi
[2018/01/10 17:33:10 | 000,005,507 | ---- | M] () (No name found) -- C:\Users\Steve\AppData\Roaming\Mozilla\Firefox\Profiles\vzutfrb7.default\features\{9f3744ad-348d-4e9f-8a9a-37ce31d10e8c}\disable-media-wmf-nv12@mozilla.org.xpi
[2017/12/23 13:49:06 | 000,002,008 | ---- | M] () -- C:\Users\Steve\AppData\Roaming\Mozilla\Firefox\Profiles\vzutfrb7.default\searchplugins\search.yahoo.com.xml

[color=#E56717]========== Chrome ==========[/color]

CHR - Extension: No name found = C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.10_0\
CHR - Extension: No name found = C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.10_0\
CHR - Extension: No name found = C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\
CHR - Extension: No name found = C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\
CHR - Extension: No name found = C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.2_0\
CHR - Extension: No name found = C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.7_0\
CHR - Extension: No name found = C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.4_0\
CHR - Extension: No name found = C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\
CHR - Extension: No name found = C:\Users\Steve\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\6818.528.0.0_0\

O1 HOSTS File: ([2018/07/20 03:01:37 | 000,000,867 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 0.0.0.1 mssplus.mcafee.com
O2:[b]64bit:[/b] - BHO: (TmIEPlugInBHO Class) - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll File not found
O2:[b]64bit:[/b] - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll File not found
O2:[b]64bit:[/b] - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll File not found
O2:[b]64bit:[/b] - BHO: (TmBpIeBHO Class) - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe64.dll File not found
O2 - BHO: (TmIEPlugInBHO Class) - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll File not found
O2 - BHO: (ArcSoft Video Helper) - {4E18E9A4-95B3-4F8B-AE3B-AB7478DE92EE} - C:\PROGRA~2\ArcSoft\TOTALM~1\codec\ArcIEVideoUp.dll File not found
O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll File not found
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll File not found
O2 - BHO: (TmBpIeBHO Class) - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll File not found
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" File not found
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll File not found
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll File not found
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" File not found
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3:[b]64bit:[/b] - HKU\S-1-5-21-2109558472-4217242841-2029953956-1001\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll File not found
O3 - HKU\S-1-5-21-2109558472-4217242841-2029953956-1001\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll File not found
O4:[b]64bit:[/b] - HKLM..\Run: [ASUS Docking] C:\Program Files\ASUS\ASUS Docking\ASUS Docking.exe autorun File not found
O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVBg_DTS] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor)
O4:[b]64bit:[/b] - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:[b]64bit:[/b] - HKLM..\Run: [Trend Micro Client Framework] "C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe" File not found
O4:[b]64bit:[/b] - HKLM..\Run: [Trend Micro Titanium] C:\Program Files\Trend Micro\Titanium\VizorShortCut.exe -ReFlush "none" "none" File not found
O4:[b]64bit:[/b] - HKLM..\Run: [VizorHtmlDialog.exe] "C:\Program Files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe" "DEF" "EULA" "C:\Program Files\Trend Micro\Titanium\UI\Installer.cmpt\resources\preinstall_01_welcome_trial.html" "DEF" "DEF" "DEF" File not found
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" File not found
O4 - HKLM..\Run: [AsShellApplication] C:\Program Files (x86)\ASUS\ASUS Manager Suite\AsShellApplication.exe (ASUSTeK Computer Inc.)
O4 - HKLM..\Run: [ASUS Easy Update] C:\Program Files (x86)\ASUS\ASUS Easy Update\ALU.exe (ASUSTeK Computer Inc.)
O4 - HKLM..\Run: [ASUSWebStorage] C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.102.211\AsusWSPanel.exe /S File not found
O4 - HKLM..\Run: [Dropbox] C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc.)
O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
O4 - HKLM..\Run: [OOBESetup] C:\Program Files (x86)\asus\OOBERegBackup\OOBERegBackup.exe /restore -"C:\Program Files (x86)\asus\OOBERegBackup\OOBEReg.ini" File not found
O4 - HKLM..\Run: [YouCam Mirage] C:\Program Files (x86)\ASUS\ASUS Cam\YCMMirage.exe (CyberLink)
O4 - HKLM..\Run: [YouCam Tray] C:\Program Files (x86)\ASUS\ASUS Cam\YouCam.exe (CyberLink Corp.)
O4 - HKU\.DEFAULT..\Run: [Web Companion] C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe (Lavasoft)
O4 - HKU\S-1-5-18..\Run: [Web Companion] C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe (Lavasoft)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-2109558472-4217242841-2029953956-1001..\Run: [Chromium] c:\users\steve\appdata\local\chromium\application\chrome.exe (The Chromium Authors)
O4 - HKU\S-1-5-21-2109558472-4217242841-2029953956-1001..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent File not found
O4 - HKU\S-1-5-21-2109558472-4217242841-2029953956-1001..\Run: [uTorrent] "C:\Users\Steve\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED File not found
O4 - HKU\S-1-5-21-2109558472-4217242841-2029953956-1001..\Run: [Web Companion] C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe (Lavasoft)
O4 - HKLM..\RunOnce: [Bagobobunaf] C:\Windows\SysWOW64\wscript.exe /E:vbscript /B "C:\Users\Steve\AppData\Roaming\747988~1\Goralofadiha.dat" File not found
O4 - HKLM..\RunOnce: [Safehon] C:\Windows\SysWOW64\wscript.exe /E:vbscript /B "C:\Users\Steve\AppData\Roaming\02005A~1\Kurutucatof.dat" File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9 - Extra Button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll File not found
O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll File not found
O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Windows\SysNative\LavasoftTcpService64.dll (Lavasoft Limited)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Windows\SysNative\LavasoftTcpService64.dll (Lavasoft Limited)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Windows\SysNative\LavasoftTcpService64.dll (Lavasoft Limited)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Windows\SysNative\LavasoftTcpService64.dll (Lavasoft Limited)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000015 - C:\Windows\SysNative\LavasoftTcpService64.dll (Lavasoft Limited)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\SysWow64\LavasoftTcpService.dll (Lavasoft Limited)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\SysWow64\LavasoftTcpService.dll (Lavasoft Limited)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\SysWow64\LavasoftTcpService.dll (Lavasoft Limited)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\SysWow64\LavasoftTcpService.dll (Lavasoft Limited)
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Windows\SysWow64\LavasoftTcpService.dll (Lavasoft Limited)
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKU\.DEFAULT\..Trusted Domains: localhost ([]* in Trusted sites)
O15 - HKU\.DEFAULT\..Trusted Domains: webcompanion.com ([]http in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: localhost ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: webcompanion.com ([]http in Trusted sites)
O15 - HKU\S-1-5-21-2109558472-4217242841-2029953956-1001\..Trusted Domains: localhost ([]* in Trusted sites)
O15 - HKU\S-1-5-21-2109558472-4217242841-2029953956-1001\..Trusted Domains: webcompanion.com ([]http in Trusted sites)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7E04C58C-82C3-444B-A9C9-949A6D147C1C}: DhcpNameServer = 192.168.1.254
O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\tmbp {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe64.dll File not found
O18:[b]64bit:[/b] - Protocol\Handler\tmpx {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll File not found
O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll File not found
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll File not found
O18 - Protocol\Handler\tmbp {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll File not found
O18 - Protocol\Handler\tmpx {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll File not found
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll File not found
O18 - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll File not found
O18:[b]64bit:[/b] - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O20:[b]64bit:[/b] - AppInit_DLLs: (_C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC64LO~1.DLL) - C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC64Loader.dll ()
O20 - AppInit_DLLs: (_C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC32LO~2.DLL) - C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC32Loader.dll ()
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - SystemPropertiesPerformance.exe (Microsoft Corporation)
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O29:[b]64bit:[/b] - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)



SafeBootMin:[b]64bit:[/b] AppMgmt - Service
SafeBootMin:[b]64bit:[/b] Base - Driver Group
SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group
SafeBootMin:[b]64bit:[/b] File system - Driver Group
SafeBootMin:[b]64bit:[/b] Filter - Driver Group
SafeBootMin:[b]64bit:[/b] HelpSvc - Service
SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group
SafeBootMin:[b]64bit:[/b] sacsvr - Service
SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] TBS - Service
SafeBootMin:[b]64bit:[/b] vmms - Service
SafeBootMin:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: AppMgmt - Service
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: TBS - Service
SafeBootMin: vmms - Service
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet:[b]64bit:[/b] AppMgmt - Service
SafeBootNet:[b]64bit:[/b] Base - Driver Group
SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group
SafeBootNet:[b]64bit:[/b] File system - Driver Group
SafeBootNet:[b]64bit:[/b] Filter - Driver Group
SafeBootNet:[b]64bit:[/b] HelpSvc - Service
SafeBootNet:[b]64bit:[/b] Messenger - Service
SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group
SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group
SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group
SafeBootNet:[b]64bit:[/b] Network - Driver Group
SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group
SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group
SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group
SafeBootNet:[b]64bit:[/b] rdsessmgr - Service
SafeBootNet:[b]64bit:[/b] sacsvr - Service
SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group
SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] TBS - Service
SafeBootNet:[b]64bit:[/b] TDI - Driver Group
SafeBootNet:[b]64bit:[/b] vmms - Service
SafeBootNet:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver
SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: AppMgmt - Service
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TBS - Service
SafeBootNet: TDI - Driver Group
SafeBootNet: vmms - Service
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

ActiveX:[b]64bit:[/b] {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:[b]64bit:[/b] {26784146-6E05-3FF9-9335-786C7C0FB5BE} - .NET Framework
ActiveX:[b]64bit:[/b] {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:[b]64bit:[/b] {2D46B6DC-2207-486B-B523-A557E6D54B47} - C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
ActiveX:[b]64bit:[/b] {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:[b]64bit:[/b] {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:[b]64bit:[/b] {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:[b]64bit:[/b] {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:[b]64bit:[/b] {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:[b]64bit:[/b] {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:[b]64bit:[/b] {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:[b]64bit:[/b] {66C64F22-FC60-4E6C-A6B5-F0D580E680CE} - C:\Windows\System32\ie4uinit.exe -EnableTLS
ActiveX:[b]64bit:[/b] {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:[b]64bit:[/b] {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:[b]64bit:[/b] {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:[b]64bit:[/b] {7D715857-A67C-4C2F-A929-038448584D63} - C:\Windows\System32\ie4uinit.exe -DisableSSL3
ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -UserConfig
ActiveX:[b]64bit:[/b] {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX:[b]64bit:[/b] {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\68.0.3440.106\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
ActiveX:[b]64bit:[/b] {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:[b]64bit:[/b] {BCF0C1F7-671C-3922-A7EA-8AC11F4FC0EB} - .NET Framework
ActiveX:[b]64bit:[/b] {BD6F5371-DAC1-30F0-9DDE-CAC6791E28C3} - .NET Framework
ActiveX:[b]64bit:[/b] {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:[b]64bit:[/b] {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:[b]64bit:[/b] {E0C7523C-686B-3EE6-8FB1-CB4339E30EDD} - .NET Framework
ActiveX:[b]64bit:[/b] {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:[b]64bit:[/b] {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:[b]64bit:[/b] >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {26784146-6E05-3FF9-9335-786C7C0FB5BE} - .NET Framework
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {2D46B6DC-2207-486B-B523-A557E6D54B47} - C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} -
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {BCF0C1F7-671C-3922-A7EA-8AC11F4FC0EB} - .NET Framework
ActiveX: {BD6F5371-DAC1-30F0-9DDE-CAC6791E28C3} - .NET Framework
ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E0C7523C-686B-3EE6-8FB1-CB4339E30EDD} - .NET Framework
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP

Drivers32:[b]64bit:[/b] aux - wdmaud.drv (Microsoft Corporation)
Drivers32:[b]64bit:[/b] midi - wdmaud.drv (Microsoft Corporation)
Drivers32:[b]64bit:[/b] midi1 - wdmaud.drv (Microsoft Corporation)
Drivers32:[b]64bit:[/b] midimapper - midimap.dll (Microsoft Corporation)
Drivers32:[b]64bit:[/b] mixer - wdmaud.drv (Microsoft Corporation)
Drivers32:[b]64bit:[/b] mixer1 - wdmaud.drv (Microsoft Corporation)
Drivers32:[b]64bit:[/b] msacm.imaadpcm - imaadp32.acm (Microsoft Corporation)
Drivers32:[b]64bit:[/b] msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:[b]64bit:[/b] msacm.msadpcm - msadp32.acm (Microsoft Corporation)
Drivers32:[b]64bit:[/b] msacm.msg711 - msg711.acm (Microsoft Corporation)
Drivers32:[b]64bit:[/b] msacm.msgsm610 - msgsm32.acm (Microsoft Corporation)
Drivers32:[b]64bit:[/b] MSVideo8 - VfWWDM32.dll (Microsoft Corporation)
Drivers32:[b]64bit:[/b] vidc.i420 - iyuv_32.dll (Microsoft Corporation)
Drivers32:[b]64bit:[/b] VIDC.IYUV - iyuv_32.dll (Microsoft Corporation)
Drivers32:[b]64bit:[/b] vidc.mrle - msrle32.dll (Microsoft Corporation)
Drivers32:[b]64bit:[/b] vidc.msvc - msvidc32.dll (Microsoft Corporation)
Drivers32:[b]64bit:[/b] VIDC.UYVY - msyuv.dll (Microsoft Corporation)
Drivers32:[b]64bit:[/b] VIDC.YUY2 - msyuv.dll (Microsoft Corporation)
Drivers32:[b]64bit:[/b] VIDC.YVU9 - tsbyuv.dll (Microsoft Corporation)
Drivers32:[b]64bit:[/b] VIDC.YVYU - msyuv.dll (Microsoft Corporation)
Drivers32:[b]64bit:[/b] wave - wdmaud.drv (Microsoft Corporation)
Drivers32:[b]64bit:[/b] wave1 - wdmaud.drv (Microsoft Corporation)
Drivers32:[b]64bit:[/b] wavemapper - msacm32.drv (Microsoft Corporation)
Drivers32: aux - wdmaud.drv (Microsoft Corporation)
Drivers32: midi - wdmaud.drv (Microsoft Corporation)
Drivers32: midi1 - wdmaud.drv (Microsoft Corporation)
Drivers32: midimapper - midimap.dll (Microsoft Corporation)
Drivers32: mixer - wdmaud.drv (Microsoft Corporation)
Drivers32: mixer1 - wdmaud.drv (Microsoft Corporation)
Drivers32: msacm.imaadpcm - imaadp32.acm (Microsoft Corporation)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.msadpcm - msadp32.acm (Microsoft Corporation)
Drivers32: msacm.msg711 - msg711.acm (Microsoft Corporation)
Drivers32: msacm.msgsm610 - msgsm32.acm (Microsoft Corporation)
Drivers32: msacm.siren - sirenacm.dll (Microsoft Corporation)
Drivers32: vidc.cvid - iccvid.dll (Radius Inc.)
Drivers32: vidc.i420 - iyuv_32.dll (Microsoft Corporation)
Drivers32: vidc.iyuv - iyuv_32.dll (Microsoft Corporation)
Drivers32: vidc.mrle - msrle32.dll (Microsoft Corporation)
Drivers32: vidc.msvc - msvidc32.dll (Microsoft Corporation)
Drivers32: vidc.uyvy - msyuv.dll (Microsoft Corporation)
Drivers32: vidc.yuy2 - msyuv.dll (Microsoft Corporation)
Drivers32: vidc.yvu9 - tsbyuv.dll (Microsoft Corporation)
Drivers32: vidc.yvyu - msyuv.dll (Microsoft Corporation)
Drivers32: wave - wdmaud.drv (Microsoft Corporation)
Drivers32: wave1 - wdmaud.drv (Microsoft Corporation)
Drivers32: wavemapper - msacm32.drv (Microsoft Corporation)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2018/08/31 20:56:43 | 000,000,000 | -H-D | C] -- C:\$Windows.~WS
[2018/08/31 20:56:21 | 000,000,000 | R--D | C] -- C:\Users\Steve\Searches
[2018/08/31 18:22:05 | 000,000,000 | ---D | C] -- C:\Windows\appcompat
[2018/08/31 18:17:39 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2018/08/31 18:16:08 | 000,000,000 | -HSD | C] -- C:\found.000
[2018/08/30 05:16:00 | 000,000,000 | ---D | C] -- C:\ESD
[2018/08/30 05:14:09 | 000,000,000 | ---D | C] -- C:\$WINDOWS.~BT
[2018/08/30 05:14:03 | 000,000,000 | ---D | C] -- C:\Windows\Panther
[2018/08/29 22:02:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
[2018/08/28 13:53:40 | 000,051,024 | ---- | C] (Dropbox, Inc.) -- C:\Windows\SysNative\DbxSvc.exe
[2018/08/28 13:53:40 | 000,050,232 | ---- | C] (Dropbox, Inc.) -- C:\Windows\SysNative\drivers\dbx-dev.sys
[2018/08/28 13:53:40 | 000,050,232 | ---- | C] (Dropbox, Inc.) -- C:\Windows\SysNative\drivers\dbx-canary.sys
[2018/08/28 13:53:40 | 000,045,640 | ---- | C] (Dropbox, Inc.) -- C:\Windows\SysNative\drivers\dbx-stable.sys
[1 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2018/08/31 21:34:33 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2018/08/31 21:08:20 | 000,000,274 | ---- | M] () -- C:\Windows\tasks\{747988CB-369A-67E1-79AD-1F97CF92EB24}.job
[2018/08/31 21:08:00 | 000,000,986 | ---- | M] () -- C:\Windows\tasks\Secured Yahoo Powered riser.job
[2018/08/31 21:07:05 | 000,016,976 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2018/08/31 21:07:05 | 000,016,976 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2018/08/31 20:56:59 | 000,001,184 | ---- | M] () -- C:\Windows\tasks\DropboxUpdateTaskMachineUA.job
[2018/08/31 20:44:02 | 000,000,274 | ---- | M] () -- C:\Windows\tasks\{02005ADA-C75C-1CE7-E1A1-7E7803BFF895}.job
[2018/08/31 19:12:02 | 000,001,908 | ---- | M] () -- C:\Windows\diagwrn.xml
[2018/08/31 19:12:02 | 000,001,908 | ---- | M] () -- C:\Windows\diagerr.xml
[2018/08/31 18:18:15 | 000,001,180 | ---- | M] () -- C:\Windows\tasks\DropboxUpdateTaskMachineCore.job
[2018/08/30 04:18:00 | 000,000,274 | ---- | M] () -- C:\Windows\tasks\Opera_helper.job
[2018/08/29 22:38:20 | 000,000,343 | ---- | M] () -- C:\Users\Steve\AppData\Roaming\WB.CFG
[2018/08/28 13:53:40 | 000,051,024 | ---- | M] (Dropbox, Inc.) -- C:\Windows\SysNative\DbxSvc.exe
[2018/08/28 13:53:40 | 000,050,232 | ---- | M] (Dropbox, Inc.) -- C:\Windows\SysNative\drivers\dbx-dev.sys
[2018/08/28 13:53:40 | 000,050,232 | ---- | M] (Dropbox, Inc.) -- C:\Windows\SysNative\drivers\dbx-canary.sys
[2018/08/28 13:53:40 | 000,045,640 | ---- | M] (Dropbox, Inc.) -- C:\Windows\SysNative\drivers\dbx-stable.sys
[2018/08/15 17:16:06 | 000,842,240 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2018/08/15 17:16:06 | 000,175,104 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2018/08/15 17:16:03 | 005,450,752 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerInstaller.exe
[1 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2018/08/31 21:34:33 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2018/08/31 19:12:00 | 000,001,908 | ---- | C] () -- C:\Windows\diagwrn.xml
[2018/08/31 19:12:00 | 000,001,908 | ---- | C] () -- C:\Windows\diagerr.xml
[2018/08/30 03:23:06 | 000,001,082 | ---- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2018/04/18 14:58:32 | 000,000,232 | ---- | C] () -- C:\Windows\SysWow64\dllhost.exe.config
[2017/12/18 01:08:27 | 000,000,068 | ---- | C] () -- C:\Users\Steve\AppData\Local\8wne5tkb2q
[2017/12/15 01:30:19 | 000,625,664 | ---- | C] () -- C:\Users\Steve\AppData\Roaming\Makegabi.exe
[2017/12/07 22:08:26 | 000,000,068 | ---- | C] () -- C:\Users\Steve\AppData\Local\mLeDWpOhGZ
[2017/03/14 11:22:54 | 000,000,290 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2017/03/04 19:09:31 | 000,016,384 | ---- | C] () -- C:\Users\Steve\AppData\Roaming\Lifesomu.exe
[2017/01/17 23:37:11 | 000,000,343 | ---- | C] () -- C:\Users\Steve\AppData\Roaming\WB.CFG
[2017/01/02 05:37:52 | 000,002,888 | ---- | C] () -- C:\Windows\SysWow64\LavasoftTcpServiceOff.ini
[2011/07/21 05:17:26 | 000,131,984 | ---- | C] () -- C:\ProgramData\FullRemove.exe

[color=#E56717]========== ZeroAccess Check ==========[/color]


[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2016/08/29 17:31:19 | 014,183,424 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2016/08/29 17:12:50 | 012,880,384 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

[color=#E56717]========== LOP Check ==========[/color]

[2018/08/29 21:44:43 | 000,000,000 | ---D | M] -- C:\Users\Steve\AppData\Roaming\02005adac75c1ce7e1a17e7803bff895
[2018/08/21 00:08:29 | 000,000,000 | ---D | M] -- C:\Users\Steve\AppData\Roaming\747988CB-369A-67E1-79AD-1F97CF92EB24
[2016/01/20 01:30:44 | 000,000,000 | ---D | M] -- C:\Users\Steve\AppData\Roaming\ASUS WebStorage
[2018/04/04 20:18:38 | 000,000,000 | ---D | M] -- C:\Users\Steve\AppData\Roaming\bodor
[2017/01/02 05:38:34 | 000,000,000 | ---D | M] -- C:\Users\Steve\AppData\Roaming\Dropbox
[2017/01/02 04:37:02 | 000,000,000 | ---D | M] -- C:\Users\Steve\AppData\Roaming\OpenOffice
[2017/01/04 20:29:28 | 000,000,000 | ---D | M] -- C:\Users\Steve\AppData\Roaming\Opera Software
[2018/08/30 04:52:54 | 000,000,000 | ---D | M] -- C:\Users\Steve\AppData\Roaming\opera_helper
[2017/01/07 22:44:05 | 000,000,000 | ---D | M] -- C:\Users\Steve\AppData\Roaming\PRO PC Cleaner
[2018/08/30 05:00:53 | 000,000,000 | ---D | M] -- C:\Users\Steve\AppData\Roaming\uTorrent
[2018/08/30 04:54:10 | 000,000,000 | ---D | M] -- C:\Users\Steve\AppData\Roaming\WhatsApp
[2018/04/18 14:57:07 | 000,000,000 | ---D | M] -- C:\Users\Steve\AppData\Roaming\Wondershare

[color=#E56717]========== Purity Check ==========[/color]



[color=#E56717]========== Custom Scans ==========[/color]

[color=#A23BEC]< %SYSTEMDRIVE%\*.* >[/color]
[2010/11/21 05:23:51 | 000,383,786 | RHS- | M] () -- C:\bootmgr
[2011/05/18 00:09:06 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
[2018/08/31 18:17:49 | 4276,551,680 | -HS- | M] () -- C:\pagefile.sys
[2018/08/31 21:34:33 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin

[color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]

[color=#A23BEC]< %PROGRAMFILES%\*.* >[/color]

[color=#A23BEC]< %PROGRAMFILES%\*. >[/color]
[2011/07/21 05:12:19 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Adobe
[2017/01/02 03:21:02 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ASUS
[2017/01/02 03:21:02 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Bonjour
[2018/01/11 20:04:56 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files
[2018/08/29 22:02:32 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Dropbox
[2017/08/28 19:51:15 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Google
[2017/01/02 03:21:06 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Intel
[2017/01/02 03:21:07 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Internet Explorer
[2017/01/02 05:37:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Lavasoft
[2011/07/21 05:29:42 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft
[2009/07/14 07:32:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSBuild
[2009/07/14 07:32:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Reference Assemblies
[2017/06/05 00:56:54 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\SearchProtect
[2016/01/21 06:52:16 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Defender
[2016/01/20 19:29:21 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Mail
[2017/01/02 03:21:23 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Media Player
[2009/07/14 07:32:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows NT
[2016/01/20 19:29:21 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Photo Viewer
[2010/11/21 05:31:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Portable Devices
[2017/01/02 03:21:24 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Sidebar

[color=#A23BEC]< MD5 for: AGP440.SYS >[/color]
[2018/02/10 20:35:38 | 000,060,608 | ---- | M] (Microsoft Corporation) MD5=466BF4170DC41BB939F1F9AB8F97F8F5 -- C:\Windows\SoftwareDistribution\Download\9393cda5a5da654a516fa81c7ce7e44f\amd64_machine.inf_31bf3856ad364e35_6.1.7601.24056_none_1899009dee8d03f0\AGP440.sys
[2009/07/14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\drivers\AGP440.sys
[2009/07/14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\AGP440.sys
[2009/07/14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\AGP440.sys

[color=#A23BEC]< MD5 for: APPMGMTS.DLL >[/color]
[2009/07/14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) MD5=4ABA3E75A76195A3E38ED2766C962899 -- C:\Windows\winsxs\amd64_microsoft-windows-g..oftwareinstallation_31bf3856ad364e35_6.1.7600.16385_none_ddc3da0b75baa7e0\appmgmts.dll
[2009/07/14 03:14:53 | 000,149,504 | ---- | M] (Microsoft Corporation) MD5=A45D184DF6A8803DA13A0B329517A64A -- C:\Windows\winsxs\wow64_microsoft-windows-g..oftwareinstallation_31bf3856ad364e35_6.1.7600.16385_none_e818845daa1b69db\appmgmts.dll

[color=#A23BEC]< MD5 for: ATAPI.SYS >[/color]
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_552ea5111ec825a6\atapi.sys
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.18231_none_3b457059383c66e6\atapi.sys
[2009/07/14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.22414_none_3be7afc0514717fa\atapi.sys

[color=#A23BEC]< MD5 for: AUTOCHK.EXE >[/color]
[2010/11/21 05:24:27 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\SysNative\autochk.exe
[2010/11/21 05:24:27 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_4019f2b8d860ad30\autochk.exe
[2010/11/21 05:23:53 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\SysWOW64\autochk.exe
[2010/11/21 05:23:53 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

[color=#A23BEC]< MD5 for: BEEP.SYS >[/color]
[2009/07/14 02:00:13 | 000,006,656 | ---- | M] (Microsoft Corporation) MD5=16A47CE2DECC9B099349A5F840654746 -- C:\Windows\SysNative\drivers\beep.sys
[2009/07/14 02:00:13 | 000,006,656 | ---- | M] (Microsoft Corporation) MD5=16A47CE2DECC9B099349A5F840654746 -- C:\Windows\winsxs\amd64_microsoft-windows-beepsys_31bf3856ad364e35_6.1.7600.16385_none_201592fa214e4f02\beep.sys

[color=#A23BEC]< MD5 for: CNGAUDIT.DLL >[/color]
[2009/07/14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
[2009/07/14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
[2009/07/14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\SysNative\cngaudit.dll
[2009/07/14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll

[color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color]
[2016/08/29 17:04:37 | 003,229,696 | ---- | M] (Microsoft Corporation) MD5=38AE1B3C38FAEF56FE4907922F0385BA -- C:\Windows\explorer.exe
[2016/08/29 17:04:37 | 003,229,696 | ---- | M] (Microsoft Corporation) MD5=38AE1B3C38FAEF56FE4907922F0385BA -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.23537_none_b0517adca98752cc\explorer.exe
[2010/11/21 05:24:25 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2016/08/29 16:55:07 | 002,972,672 | ---- | M] (Microsoft Corporation) MD5=6DDCA324434FFA506CF7DC4E51DB7935 -- C:\Windows\SysWOW64\explorer.exe
[2016/08/29 16:55:07 | 002,972,672 | ---- | M] (Microsoft Corporation) MD5=6DDCA324434FFA506CF7DC4E51DB7935 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.23537_none_baa6252edde814c7\explorer.exe
[2010/11/21 05:24:11 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe

[color=#A23BEC]< MD5 for: HIDSERV.DLL >[/color]
[2009/07/14 03:15:24 | 000,049,152 | ---- | M] (Microsoft Corporation) MD5=2BC6F6A1992B3A77F5F41432CA6B3B6B -- C:\Windows\SysWOW64\hidserv.dll
[2009/07/14 03:15:24 | 000,049,152 | ---- | M] (Microsoft Corporation) MD5=2BC6F6A1992B3A77F5F41432CA6B3B6B -- C:\Windows\winsxs\wow64_microsoft-windows-hid-user_31bf3856ad364e35_6.1.7600.16385_none_3cf5e466d58070d9\hidserv.dll
[2009/07/14 03:41:00 | 000,038,912 | ---- | M] (Microsoft Corporation) MD5=BD9EB3958F213F96B97B1D897DEE006D -- C:\Windows\SysNative\hidserv.dll
[2009/07/14 03:41:00 | 000,038,912 | ---- | M] (Microsoft Corporation) MD5=BD9EB3958F213F96B97B1D897DEE006D -- C:\Windows\winsxs\amd64_microsoft-windows-hid-user_31bf3856ad364e35_6.1.7600.16385_none_32a13a14a11faede\hidserv.dll

[color=#A23BEC]< MD5 for: IASTOR.SYS >[/color]
[2011/02/18 18:11:54 | 000,439,320 | ---- | M] (Intel Corporation) MD5=53CC5BF8B5A219119953C7ABB19A7705 -- C:\Windows\SysNative\drivers\iaStor.sys
[2011/02/18 18:11:54 | 000,439,320 | ---- | M] (Intel Corporation) MD5=53CC5BF8B5A219119953C7ABB19A7705 -- C:\Windows\SysNative\DriverStore\FileRepository\iaahci.inf_amd64_neutral_52b32c0ad3e84c62\iaStor.sys

[color=#A23BEC]< MD5 for: IASTORV.SYS >[/color]
[2010/11/21 05:23:47 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_668286aa35d55928\iaStorV.sys
[2010/11/21 05:23:47 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_0d3757e79e6784d0\iaStorV.sys
[2011/07/20 12:32:19 | 000,410,496 | ---- | M] (Intel Corporation) MD5=5B3DE7208E5000D5B451B9D290D2579C -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_0d714416b7c182d5\iaStorV.sys
[2011/07/20 12:32:19 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\drivers\iaStorV.sys
[2011/07/20 12:32:19 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_0bcee2057afcc090\iaStorV.sys
[2011/07/20 12:32:19 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_0cf9793d9e95787b\iaStorV.sys

[color=#A23BEC]< MD5 for: IMM32.DLL >[/color]
[2010/11/21 05:24:25 | 000,119,808 | ---- | M] (Microsoft Corporation) MD5=A6F09E5669D9A19035F6D942CAA15882 -- C:\Windows\SysWOW64\imm32.dll
[2010/11/21 05:24:25 | 000,119,808 | ---- | M] (Microsoft Corporation) MD5=A6F09E5669D9A19035F6D942CAA15882 -- C:\Windows\winsxs\wow64_microsoft-windows-imm32_31bf3856ad364e35_6.1.7601.17514_none_c4d0cdd7c56b493e\imm32.dll
[2009/07/14 03:41:09 | 000,167,424 | ---- | M] (Microsoft Corporation) MD5=AA2C08CE85653B1A0D2E4AB407FA176C -- C:\Windows\SysNative\imm32.dll
[2009/07/14 03:41:09 | 000,167,424 | ---- | M] (Microsoft Corporation) MD5=AA2C08CE85653B1A0D2E4AB407FA176C -- C:\Windows\winsxs\amd64_microsoft-windows-imm32_31bf3856ad364e35_6.1.7600.16385_none_b84b0fbd941c03a9\imm32.dll

[color=#A23BEC]< MD5 for: KERNEL32.DLL >[/color]
[2016/03/18 00:31:09 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=002E17D37479281C5D241A189F973C5F -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23392_none_fc697e97baac5d5b\kernel32.dll
[2016/01/22 08:06:30 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=0395FCC1F6DE5155ACB84F6BBF771B45 -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23338_none_fcb05fdbba764dbf\kernel32.dll
[2016/01/22 08:15:31 | 001,163,264 | ---- | M] (Microsoft Corporation) MD5=0547E50F916294862FDAF11A4D701547 -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.19135_none_f1cf15fa6cfaa2ce\kernel32.dll
[2015/07/15 05:20:03 | 001,164,288 | ---- | M] (Microsoft Corporation) MD5=093861BB2A36B95CE824683714737CAD -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23126_none_f2648115860f42d7\kernel32.dll
[2016/10/11 17:31:56 | 001,163,264 | ---- | M] (Microsoft Corporation) MD5=0B5A8B1E0A3CF06802CEF191FC802736 -- C:\Windows\SysNative\kernel32.dll
[2016/10/11 17:31:56 | 001,163,264 | ---- | M] (Microsoft Corporation) MD5=0B5A8B1E0A3CF06802CEF191FC802736 -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23572_none_f22a77e9863b5dcc\kernel32.dll
[2015/07/22 19:52:03 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=1E679BB6671C67B2097A5E53D884D4D0 -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18939_none_fc27e76ca15799bc\kernel32.dll
[2015/07/23 00:03:57 | 001,164,288 | ---- | M] (Microsoft Corporation) MD5=313D319AB74D0218F44CC66BE393E38A -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23142_none_f24ae0158623155d\kernel32.dll
[2015/05/25 20:22:03 | 001,163,776 | ---- | M] (Microsoft Corporation) MD5=3A2E4CB43CC4AE0195F686146ADCAD3D -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23072_none_f22a6e6b863b6c09\kernel32.dll
[2016/10/11 17:18:43 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=43FF98F4DEDA983D5B5B5F5FBE914CAB -- C:\Windows\SysWOW64\kernel32.dll
[2016/10/11 17:18:43 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=43FF98F4DEDA983D5B5B5F5FBE914CAB -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23572_none_fc7f223bba9c1fc7\kernel32.dll
[2017/09/13 17:09:10 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=461E66E464906659438E351F90DC2F07 -- C:\Windows\SoftwareDistribution\Download\7dac5810eb3c91e1b34c143349eab14c\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23915_none_fcc30a39ba68b8c2\kernel32.dll
[2015/07/15 19:48:28 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=50159C0AEE9029D43B7E27022B6C0B37 -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23136_none_fcae5b7bba7820c3\kernel32.dll
[2016/01/22 08:28:09 | 001,164,288 | ---- | M] (Microsoft Corporation) MD5=57194C298622069B98BC40FD80A2BEFF -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23338_none_f25bb58986158bc4\kernel32.dll
[2015/05/25 20:05:29 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=5EA4D6D52DB2679B8F9DE67A7F8BC41A -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23072_none_fc7f18bdba9c2e04\kernel32.dll
[2012/11/30 07:41:07 | 001,161,216 | ---- | M] (Microsoft Corporation) MD5=65C113214F7B05820F6D8A65B1485196 -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18015_none_f1e4cab46cea5424\kernel32.dll
[2015/07/23 01:56:40 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=6F5C056D1AEB8713E403259B5FB38EE8 -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23142_none_fc9f8a67ba83d758\kernel32.dll
[2015/05/25 20:19:02 | 001,162,752 | ---- | M] (Microsoft Corporation) MD5=6FDF03A3B110C5264F52F979335AE301 -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18869_none_f1b2cb706d0f2e6d\kernel32.dll
[2015/07/15 20:10:48 | 001,163,264 | ---- | M] (Microsoft Corporation) MD5=72585BDAF2EC5237EBD71D540657D6A2 -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18933_none_f1cd3b5e6cfc3fb7\kernel32.dll
[2014/03/04 11:16:17 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=76161B9D78A275F8F28DD67436013110 -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18409_none_fc484db2a13f5426\kernel32.dll
[2014/04/12 04:32:01 | 001,164,800 | ---- | M] (Microsoft Corporation) MD5=77BBBF70BCE286CD19E1E68F248363FA -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22653_none_f24130b9862a22c7\kernel32.dll
[2016/01/21 05:37:06 | 001,162,240 | ---- | M] (Microsoft Corporation) MD5=786D234A90FCAC72633AE6FC52653A49 -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22436_none_f259cda386173c9c\kernel32.dll
[2010/11/21 05:24:07 | 001,161,216 | ---- | M] (Microsoft Corporation) MD5=7A6326D96D53048FDEC542DF23D875A0 -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.17514_none_f1e3eab06ceb12ef\kernel32.dll
[2018/08/02 04:42:04 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=849A6C725314D2BCECADE590E5F9A30D -- C:\Windows\SoftwareDistribution\Download\9393cda5a5da654a516fa81c7ce7e44f\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.24214_none_fcc1e5ddba69ccfb\kernel32.dll
[2016/01/22 08:06:50 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=8A4577DE02C55182ED46202BA2E06DA5 -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.19135_none_fc23c04ca15b64c9\kernel32.dll
[2016/03/16 20:48:33 | 001,163,264 | ---- | M] (Microsoft Corporation) MD5=97027CD66BA95E4C832600EE57F97241 -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23391_none_f213d3fb864c8209\kernel32.dll
[2016/03/16 20:31:52 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=991D33667BEB392CD6C9828893F165B0 -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23391_none_fc687e4dbaad4404\kernel32.dll
[2015/07/23 02:02:40 | 001,163,264 | ---- | M] (Microsoft Corporation) MD5=9C261AB78DE420AA52FC08D69FD5745D -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18939_none_f1d33d1a6cf6d7c1\kernel32.dll
[2012/11/30 06:57:47 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=9CC2571E3646B9A24296AD7ADCC71682 -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22177_none_fc8432ddba97903d\kernel32.dll
[2015/07/15 05:19:54 | 001,163,264 | ---- | M] (Microsoft Corporation) MD5=9D0A88DF1CCB89596DDB876093CD16A4 -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18923_none_f1d80b4a6cf423c6\kernel32.dll
[2018/08/02 04:58:55 | 001,163,264 | ---- | M] (Microsoft Corporation) MD5=9E88C8A7212F69CEC07CD32FCA58774A -- C:\Windows\SoftwareDistribution\Download\9393cda5a5da654a516fa81c7ce7e44f\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.24214_none_f26d3b8b86090b00\kernel32.dll
[2016/09/02 17:16:47 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=9FFAA819B32476804ED0FED6DD245094 -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23539_none_fcb163f1ba756164\kernel32.dll
[2015/07/15 19:53:35 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=A38E10B4143A19F32D64517B6A1FCB98 -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18933_none_fc21e5b0a15d01b2\kernel32.dll
[2015/07/15 20:09:09 | 001,164,288 | ---- | M] (Microsoft Corporation) MD5=A3A71E4BEE2BA121C969B39AD1EB30FC -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23136_none_f259b12986175ec8\kernel32.dll
[2012/11/30 06:53:59 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=AC0B6F41882FC6ED186962D770EBF1D2 -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18015_none_fc397506a14b161f\kernel32.dll
[2012/11/30 07:52:53 | 001,163,264 | ---- | M] (Microsoft Corporation) MD5=B3BEA6420D482356E53B7C728E05C637 -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22177_none_f22f888b8636ce42\kernel32.dll
[2016/03/18 00:53:15 | 001,163,264 | ---- | M] (Microsoft Corporation) MD5=B46D03BABD31B23E6FCB226CB22D4D6B -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23392_none_f214d445864b9b60\kernel32.dll
[2015/07/15 04:54:33 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=C3856345C4FB053140237236D1146242 -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18923_none_fc2cb59ca154e5c1\kernel32.dll
[2014/04/12 04:05:53 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=C8C41EBEE097FEB29FB816854D3AD1E7 -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22653_none_fc95db0bba8ae4c2\kernel32.dll
[2016/09/02 17:30:50 | 001,163,264 | ---- | M] (Microsoft Corporation) MD5=C9805CDE0B275E7554F9023497169B9B -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23539_none_f25cb99f86149f69\kernel32.dll
[2015/07/15 04:58:52 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=CA1A5EE549FE248BC127C1A5CAB72B70 -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23126_none_fcb92b67ba7004d2\kernel32.dll
[2014/03/04 11:44:00 | 001,163,264 | ---- | M] (Microsoft Corporation) MD5=D2A513EE880D71BDE7F0257F38B9D019 -- C:\Windows\winsxs\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18409_none_f1f3a3606cde922b\kernel32.dll
[2017/09/13 17:27:59 | 001,163,264 | ---- | M] (Microsoft Corporation) MD5=DFBB8D70152995D249D687A3A4A239C3 -- C:\Windows\SoftwareDistribution\Download\7dac5810eb3c91e1b34c143349eab14c\amd64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23915_none_f26e5fe78607f6c7\kernel32.dll
[2010/11/21 05:24:15 | 000,837,632 | ---- | M] (Microsoft Corporation) MD5=E80758CF485DB142FCA1EE03A34EAD05 -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.17514_none_fc389502a14bd4ea\kernel32.dll
[2016/01/21 05:37:06 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=EE751CBD5D0C332FDF3DF7187B612416 -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22436_none_fcae77f5ba77fe97\kernel32.dll
[2015/05/25 19:59:51 | 001,114,112 | ---- | M] (Microsoft Corporation) MD5=F81920ADB15012CF4E9FF8238C85686A -- C:\Windows\winsxs\wow64_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18869_none_fc0775c2a16ff068\kernel32.dll

[color=#A23BEC]< MD5 for: MSWSOCK.DLL >[/color]
[2010/11/21 05:24:00 | 000,326,144 | ---- | M] (Microsoft Corporation) MD5=1D5185A4C7E6695431AE4B55C3D7D333 -- C:\Windows\winsxs\amd64_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.1.7601.17514_none_16795c7543eb48cf\mswsock.dll
[2010/11/21 05:24:09 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=8999B8631C7FD9F7F9EC3CAFD953BA24 -- C:\Windows\winsxs\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.1.7601.17514_none_ba5ac0f18b8dd799\mswsock.dll
[2016/05/11 19:02:42 | 000,327,168 | ---- | M] (Microsoft Corporation) MD5=963D7FA2110EB9E03AB0D200E6AE2614 -- C:\Windows\SysNative\mswsock.dll
[2016/05/11 19:02:42 | 000,327,168 | ---- | M] (Microsoft Corporation) MD5=963D7FA2110EB9E03AB0D200E6AE2614 -- C:\Windows\winsxs\amd64_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.1.7601.23451_none_16d487565d2c454c\mswsock.dll
[2016/05/11 17:19:16 | 000,231,424 | ---- | M] (Microsoft Corporation) MD5=A88241C2A519AFD2C99A40000F9113E6 -- C:\Windows\SysWOW64\mswsock.dll
[2016/05/11 17:19:16 | 000,231,424 | ---- | M] (Microsoft Corporation) MD5=A88241C2A519AFD2C99A40000F9113E6 -- C:\Windows\winsxs\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.1.7601.23451_none_bab5ebd2a4ced416\mswsock.dll

[color=#A23BEC]< MD5 for: NDIS.SYS >[/color]
[2012/08/22 20:06:07 | 000,950,128 | ---- | M] (Microsoft Corporation) MD5=5E74508FCB5820B29EEAFE24E6035BCF -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.22097_none_06232d534c0a8d67\ndis.sys
[2012/08/22 20:12:40 | 000,950,128 | ---- | M] (Microsoft Corporation) MD5=760E38053BF56E501D562B70AD796B88 -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17939_none_05dc9a6832ba428a\ndis.sys
[2010/11/21 05:23:55 | 000,951,680 | ---- | M] (Microsoft Corporation) MD5=79B47FD40D9A817E932F9D26FAC0A81C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17514_none_05ed313632ae9759\ndis.sys
[2015/10/13 01:04:07 | 000,949,184 | ---- | M] (Microsoft Corporation) MD5=901D1BE3F8567B5D02747B1174FF708F -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.23235_none_0661f94b4bdbc702\ndis.sys
[2018/07/06 18:09:54 | 000,947,904 | ---- | M] (Microsoft Corporation) MD5=CBE5C2A3353A367734989E335D6AF194 -- C:\Windows\SoftwareDistribution\Download\9393cda5a5da654a516fa81c7ce7e44f\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.24203_none_068051b34bc55a22\ndis.sys
[2015/10/13 06:57:21 | 000,950,720 | ---- | M] (Microsoft Corporation) MD5=F7309F42555F8AAB7144A51A1F2585B0 -- C:\Windows\SysNative\drivers\ndis.sys
[2015/10/13 06:57:21 | 000,950,720 | ---- | M] (Microsoft Corporation) MD5=F7309F42555F8AAB7144A51A1F2585B0 -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.19030_none_05d3592832c2ab5e\ndis.sys

[color=#A23BEC]< MD5 for: NETLOGON.DLL >[/color]
[2010/11/21 05:24:01 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\SysNative\netlogon.dll
[2010/11/21 05:24:01 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll
[2010/11/21 05:24:09 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\SysWOW64\netlogon.dll
[2010/11/21 05:24:09 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll

[color=#A23BEC]< MD5 for: NTFS.SYS >[/color]
[2010/11/21 05:23:55 | 001,659,776 | ---- | M] (Microsoft Corporation) MD5=05D78AA5CB5F3F5C31160BDB955D0B7C -- C:\Windows\winsxs\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.17514_none_04972f2c338b23d4\ntfs.sys
[2017/10/17 01:07:21 | 001,680,616 | ---- | M] (Microsoft Corporation) MD5=1065D9AFE491706EB00AD3CBB76C9E54 -- C:\Windows\SoftwareDistribution\Download\7dac5810eb3c91e1b34c143349eab14c\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.23932_none_050903ad4cbaf389\ntfs.sys
[2016/01/08 21:20:23 | 001,683,904 | ---- | M] (Microsoft Corporation) MD5=3ABD1BD4844C446FF1423B983566EB47 -- C:\Windows\winsxs\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.23318_none_052499dd4ca564c7\ntfs.sys
[2016/01/11 21:11:08 | 001,684,416 | ---- | M] (Microsoft Corporation) MD5=47B2D0B31BDC3EBE6090228E2BA3764D -- C:\Windows\SysNative\drivers\ntfs.sys
[2016/01/11 21:11:08 | 001,684,416 | ---- | M] (Microsoft Corporation) MD5=47B2D0B31BDC3EBE6090228E2BA3764D -- C:\Windows\winsxs\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.19116_none_0498fa9833899528\ntfs.sys
[2018/05/15 06:16:10 | 001,681,088 | ---- | M] (Microsoft Corporation) MD5=8422AFBD1C2D30FFC913309D7F1A366D -- C:\Windows\SoftwareDistribution\Download\9393cda5a5da654a516fa81c7ce7e44f\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.24146_none_05020ef14cbfa53f\ntfs.sys
[2011/07/20 12:32:19 | 001,659,776 | ---- | M] (Microsoft Corporation) MD5=87B104128D4D3BA3C13098BAEBF38082 -- C:\Windows\winsxs\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.21680_none_04d11b5b4ce521d9\ntfs.sys
[2011/07/20 12:32:19 | 001,659,776 | ---- | M] (Microsoft Corporation) MD5=A2F74975097F52A00745F9637451FDD8 -- C:\Windows\winsxs\amd64_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.17577_none_0459508233b9177f\ntfs.sys

[color=#A23BEC]< MD5 for: NVSTOR.SYS >[/color]
[2011/07/20 12:32:19 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=D23C7E8566DA2B8A7C0DBBB761D54888 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvstor.sys
[2011/07/20 12:32:19 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\drivers\nvstor.sys
[2011/07/20 12:32:19 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_0276fc3b3ea60d41\nvstor.sys
[2011/07/20 12:32:19 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvstor.sys
[2010/11/21 05:23:47 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvstor.sys
[2010/11/21 05:23:47 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvstor.sys

[color=#A23BEC]< MD5 for: PROQUOTA.EXE >[/color]
[2010/11/21 05:24:32 | 000,028,672 | ---- | M] (Microsoft Corporation) MD5=2E77BAB79F078654782F83F0A0AEFE31 -- C:\Windows\SysWOW64\proquota.exe
[2010/11/21 05:24:32 | 000,028,672 | ---- | M] (Microsoft Corporation) MD5=2E77BAB79F078654782F83F0A0AEFE31 -- C:\Windows\winsxs\x86_microsoft-windows-proquota_31bf3856ad364e35_6.1.7601.17514_none_29ce61c2f0a740f4\proquota.exe
[2010/11/21 05:24:16 | 000,031,744 | ---- | M] (Microsoft Corporation) MD5=C6C83C0DF40E11FA1F06625E95E41DE7 -- C:\Windows\SysNative\proquota.exe
[2010/11/21 05:24:16 | 000,031,744 | ---- | M] (Microsoft Corporation) MD5=C6C83C0DF40E11FA1F06625E95E41DE7 -- C:\Windows\winsxs\amd64_microsoft-windows-proquota_31bf3856ad364e35_6.1.7601.17514_none_85ecfd46a904b22a\proquota.exe

[color=#A23BEC]< MD5 for: QMGR.DLL >[/color]
[2010/11/21 05:23:51 | 000,849,920 | ---- | M] (Microsoft Corporation) MD5=1EA7969E3271CBC59E1730697DC74682 -- C:\Windows\SysNative\qmgr.dll
[2010/11/21 05:23:51 | 000,849,920 | ---- | M] (Microsoft Corporation) MD5=1EA7969E3271CBC59E1730697DC74682 -- C:\Windows\winsxs\amd64_microsoft-windows-bits-client_31bf3856ad364e35_6.1.7601.17514_none_81b6ca5c101195cd\qmgr.dll

[color=#A23BEC]< MD5 for: SCECLI.DLL >[/color]
[2010/11/21 05:23:54 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
[2010/11/21 05:23:54 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010/11/21 05:24:32 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
[2010/11/21 05:24:32 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll

[color=#A23BEC]< MD5 for: SPOOLSV.EXE >[/color]
[2018/01/01 04:04:05 | 000,559,616 | ---- | M] (Microsoft Corporation) MD5=8003D39B386EDCCFB08DC21AACC0683A -- C:\Windows\SoftwareDistribution\Download\9393cda5a5da654a516fa81c7ce7e44f\amd64_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.1.7601.24000_none_3501c463f141cbcd\spoolsv.exe
[2010/11/21 05:24:27 | 000,559,104 | ---- | M] (Microsoft Corporation) MD5=B96C17B5DC1424D56EEA3A99E97428CD -- C:\Windows\SysNative\spoolsv.exe
[2010/11/21 05:24:27 | 000,559,104 | ---- | M] (Microsoft Corporation) MD5=B96C17B5DC1424D56EEA3A99E97428CD -- C:\Windows\winsxs\amd64_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.1.7601.17514_none_3471a890d8284f57\spoolsv.exe

[color=#A23BEC]< MD5 for: SVCHOST.EXE >[/color]
[2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
[2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2009/07/14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
[2009/07/14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe

[color=#A23BEC]< MD5 for: TERMSRV.DLL >[/color]
[2014/10/14 04:13:06 | 000,683,520 | ---- | M] (Microsoft Corporation) MD5=008CD4EBFABCF78D0F19B3778492648C -- C:\Windows\SysNative\termsrv.dll
[2014/10/14 04:13:06 | 000,683,520 | ---- | M] (Microsoft Corporation) MD5=008CD4EBFABCF78D0F19B3778492648C -- C:\Windows\winsxs\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.18637_none_ecb2935b6af13c52\termsrv.dll
[2010/11/21 05:24:07 | 000,680,960 | ---- | M] (Microsoft Corporation) MD5=2E648163254233755035B46DD7B89123 -- C:\Windows\winsxs\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.17514_none_ecc547376ae3a1a3\termsrv.dll
[2014/07/17 04:07:44 | 000,681,984 | ---- | M] (Microsoft Corporation) MD5=4FC4C50985E5B840F4D72E57286887B8 -- C:\Windows\winsxs\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.18540_none_eca0bf836affa9bb\termsrv.dll
[2014/10/14 04:16:40 | 000,686,592 | ---- | M] (Microsoft Corporation) MD5=6A5B600AD0041E9AF564DE73B716F3D2 -- C:\Windows\winsxs\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.22843_none_ed2d60f8841a8fd8\termsrv.dll
[2014/07/16 05:23:41 | 000,686,080 | ---- | M] (Microsoft Corporation) MD5=F4D7114060C034134A440846F411BB7F -- C:\Windows\winsxs\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.22750_none_ed1f8e488425629d\termsrv.dll

[color=#A23BEC]< MD5 for: USERINIT.EXE >[/color]
[2010/11/21 05:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010/11/21 05:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2010/11/21 05:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010/11/21 05:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe

[color=#A23BEC]< MD5 for: VOLSNAP.SYS >[/color]
[2010/11/21 05:23:47 | 000,295,808 | ---- | M] (Microsoft Corporation) MD5=0D08D2F3B3FF84E433346669B5E0F639 -- C:\Windows\SysNative\drivers\volsnap.sys
[2010/11/21 05:23:47 | 000,295,808 | ---- | M] (Microsoft Corporation) MD5=0D08D2F3B3FF84E433346669B5E0F639 -- C:\Windows\SysNative\DriverStore\FileRepository\volume.inf_amd64_neutral_df8bea40ac96ca21\volsnap.sys
[2010/11/21 05:23:47 | 000,295,808 | ---- | M] (Microsoft Corporation) MD5=0D08D2F3B3FF84E433346669B5E0F639 -- C:\Windows\winsxs\amd64_volume.inf_31bf3856ad364e35_6.1.7601.17514_none_73dcbcf012b4850e\volsnap.sys

[color=#A23BEC]< MD5 for: WININET.DLL >[/color]
[2018/07/19 05:31:48 | 004,510,720 | ---- | M] (Microsoft Corporation) MD5=0E21DDF0628BBC88F9F5AD026E5AD2EE -- C:\Windows\SoftwareDistribution\Download\9393cda5a5da654a516fa81c7ce7e44f\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.19100_none_e45f31adb6c9e778\wininet.dll
[2016/11/12 19:35:33 | 002,920,960 | ---- | M] (Microsoft Corporation) MD5=105954F9BEAD700A6DF4B5B489FCCB4B -- C:\Windows\SysNative\wininet.dll
[2016/11/12 19:35:33 | 002,920,960 | ---- | M] (Microsoft Corporation) MD5=105954F9BEAD700A6DF4B5B489FCCB4B -- C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18537_none_e436517db6e85981\wininet.dll
[2015/12/12 19:06:02 | 002,487,808 | ---- | M] (Microsoft Corporation) MD5=1258BDEE548BCD771DD35485CDD176EA -- C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18163_none_e464ed2bb6c4cf3e\wininet.dll
[2016/08/02 07:23:24 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=33821B684222F236711F7F8C78AA9247 -- C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18426_none_e44037e7b6e10a98\wininet.dll
[2018/07/19 05:09:40 | 004,037,632 | ---- | M] (Microsoft Corporation) MD5=3763CF6F445A84FA639B48B96E6243E5 -- C:\Windows\SoftwareDistribution\Download\9393cda5a5da654a516fa81c7ce7e44f\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.19100_none_88409629fe6c7642\wininet.dll
[2016/01/21 05:39:25 | 002,426,880 | ---- | M] (Microsoft Corporation) MD5=417F80E4AFBA1AA9EBBD618F1C6D9165 -- C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17843_none_e4173b3db6ff6300\wininet.dll
[2016/09/01 02:43:05 | 002,445,824 | ---- | M] (Microsoft Corporation) MD5=42B01C859A89EEA6237DBD9A290DF857 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18449_none_8823589ffe8218f3\wininet.dll
[2010/11/21 05:24:08 | 000,980,992 | ---- | M] (Microsoft Corporation) MD5=44214C94911C7CFB1D52CB64D5E8368D -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.17514_none_1eaaa4a07717236e\wininet.dll
[2017/11/14 04:39:43 | 003,241,472 | ---- | M] (Microsoft Corporation) MD5=52353FAF152495D1D7998B836298C3FA -- C:\Windows\SoftwareDistribution\Download\7dac5810eb3c91e1b34c143349eab14c\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18860_none_e419820fb6fd45f2\wininet.dll
[2016/01/22 07:07:28 | 002,120,704 | ---- | M] (Microsoft Corporation) MD5=5CB71C6DB91BAC78E1F0E9953CAB8969 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18204_none_88356937fe74fb90\wininet.dll
[2016/08/02 06:56:28 | 002,393,088 | ---- | M] (Microsoft Corporation) MD5=64829F4ED34D8339EC39D32204718ADD -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18426_none_88219c63fe839962\wininet.dll
[2016/04/23 05:12:38 | 002,121,216 | ---- | M] (Microsoft Corporation) MD5=8EF022E16150BFAFC7DBB795C43C6BA2 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18314_none_882b9995fe7c30d8\wininet.dll
[2016/02/08 19:19:35 | 002,597,376 | ---- | M] (Microsoft Corporation) MD5=C15649DEABA6B45562009663673E23D1 -- C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18230_none_e45760b9b6cf5247\wininet.dll
[2016/01/22 07:31:43 | 002,597,376 | ---- | M] (Microsoft Corporation) MD5=CB10939701B2B334E5AC019823FD43EF -- C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18204_none_e45404bbb6d26cc6\wininet.dll
[2017/11/07 22:04:46 | 002,767,872 | ---- | M] (Microsoft Corporation) MD5=CB2127A702BC900B9C903376FAD4215F -- C:\Windows\SoftwareDistribution\Download\7dac5810eb3c91e1b34c143349eab14c\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18860_none_87fae68bfe9fd4bc\wininet.dll
[2016/03/31 01:30:51 | 002,596,864 | ---- | M] (Microsoft Corporation) MD5=D2E3B1DEDF6F6177D8C32B2516703A93 -- C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18282_none_e45c349bb6cb043c\wininet.dll
[2016/04/23 05:51:54 | 002,596,864 | ---- | M] (Microsoft Corporation) MD5=D88379C0F2BDCEA5ADBDAD175B2F23E9 -- C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18314_none_e44a3519b6d9a20e\wininet.dll
[2016/01/21 05:39:25 | 001,950,720 | ---- | M] (Microsoft Corporation) MD5=E4EB138060BAE0DBAB1A3B71A3141FE7 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17843_none_87f89fb9fea1f1ca\wininet.dll
[2016/05/20 22:46:53 | 002,597,888 | ---- | M] (Microsoft Corporation) MD5=EA1B9D3C7D11CA407AA89CBB266139CF -- C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18349_none_e44cc40fb6d76e38\wininet.dll
[2016/02/08 21:43:04 | 002,121,216 | ---- | M] (Microsoft Corporation) MD5=EDB9618FF3238EF0FC2734F584B13A33 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18230_none_8838c535fe71e111\wininet.dll
[2016/03/31 01:05:23 | 002,121,216 | ---- | M] (Microsoft Corporation) MD5=EE3825FFE3F31B7FCB7B4A284197361B -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18282_none_883d9917fe6d9306\wininet.dll
[2016/09/01 01:10:42 | 002,921,472 | ---- | M] (Microsoft Corporation) MD5=F28B26DE031D6C7AC3F393417191A22F -- C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18449_none_e441f423b6df8a29\wininet.dll
[2016/11/12 19:05:59 | 002,444,800 | ---- | M] (Microsoft Corporation) MD5=F4F5123B45BFCFD2F035280FDCB5BBBE -- C:\Windows\SysWOW64\wininet.dll
[2016/11/12 19:05:59 | 002,444,800 | ---- | M] (Microsoft Corporation) MD5=F4F5123B45BFCFD2F035280FDCB5BBBE -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18537_none_8817b5f9fe8ae84b\wininet.dll
[2010/11/21 05:23:55 | 001,188,864 | ---- | M] (Microsoft Corporation) MD5=F6C5302E1F4813D552F41A0AC82455E5 -- C:\Windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.17514_none_7ac940242f7494a4\wininet.dll
[2016/05/20 22:42:45 | 002,121,216 | ---- | M] (Microsoft Corporation) MD5=FDD35A049C278F21F475C488FDA918AB -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18349_none_882e288bfe79fd02\wininet.dll
[2015/12/12 18:41:25 | 002,011,136 | ---- | M] (Microsoft Corporation) MD5=FFA261B9252C71A6910B4F19FDC1EA57 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18163_none_884651a7fe675e08\wininet.dll

[color=#A23BEC]< MD5 for: WININIT.EXE >[/color]
[2009/07/14 03:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\SysNative\wininit.exe
[2009/07/14 03:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\winsxs\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_8ce7aa761e01ad49\wininit.exe
[2009/07/14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\SysWOW64\wininit.exe
[2009/07/14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe

[color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
[2010/11/21 05:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2010/11/21 05:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2018/01/01 03:50:14 | 000,455,680 | ---- | M] (Microsoft Corporation) MD5=11D6A262B617130F7C16E308C12E0D41 -- C:\Windows\SoftwareDistribution\Download\9393cda5a5da654a516fa81c7ce7e44f\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.24000_none_ce79225904aa82ac\winlogon.exe
[2018/01/01 03:50:14 | 000,455,680 | ---- | M] (Microsoft Corporation) MD5=11D6A262B617130F7C16E308C12E0D41 -- C:\Windows\SoftwareDistribution\Download\9393cda5a5da654a516fa81c7ce7e44f\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.24000_none_ce79225904aa82ac\winlogon.exe
[2014/03/04 13:08:14 | 000,455,680 | ---- | M] (Microsoft Corporation) MD5=6CE2AE073BD21C542FC2C707CAE944CC -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22616_none_ce748d1d04acf24f\winlogon.exe
[2014/03/04 13:08:14 | 000,455,680 | ---- | M] (Microsoft Corporation) MD5=6CE2AE073BD21C542FC2C707CAE944CC -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22616_none_ce748d1d04acf24f\winlogon.exe
[2014/03/04 11:43:50 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=88AB9B72B4BF3963A0DE0820B4B0B06C -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18409_none_cdf8bf35eb848572\winlogon.exe
[2014/03/04 11:43:50 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=88AB9B72B4BF3963A0DE0820B4B0B06C -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18409_none_cdf8bf35eb848572\winlogon.exe
[2014/07/17 04:07:24 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=8CEBD9D0A0A879CDE9F36F4383B7CAEA -- C:\Windows\SysNative\winlogon.exe
[2014/07/17 04:07:24 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=8CEBD9D0A0A879CDE9F36F4383B7CAEA -- C:\Windows\SysNative\winlogon.exe
[2014/07/17 04:07:24 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=8CEBD9D0A0A879CDE9F36F4383B7CAEA -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18540_none_cdc47ed1ebad0e4e\winlogon.exe
[2014/07/17 04:07:24 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=8CEBD9D0A0A879CDE9F36F4383B7CAEA -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18540_none_cdc47ed1ebad0e4e\winlogon.exe
[2014/07/16 05:23:23 | 000,455,680 | ---- | M] (Microsoft Corporation) MD5=98AA0BFEE089C7E5DADB94190D93456C -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22750_none_ce434d9704d2c730\winlogon.exe
[2014/07/16 05:23:23 | 000,455,680 | ---- | M] (Microsoft Corporation) MD5=98AA0BFEE089C7E5DADB94190D93456C -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22750_none_ce434d9704d2c730\winlogon.exe

[color=#A23BEC]< MD5 for: WS2_32.DLL >[/color]
[2010/11/21 05:24:28 | 000,297,984 | ---- | M] (Microsoft Corporation) MD5=4BBFA57F594F7E8A8EDC8F377184C3F0 -- C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_50ddb631e4f59005\ws2_32.dll
[2016/05/11 17:19:26 | 000,206,336 | ---- | M] (Microsoft Corporation) MD5=59EA5753EBDAE42CF92FD5B6E7AE4D53 -- C:\Windows\SysWOW64\ws2_32.dll
[2016/05/11 17:19:26 | 000,206,336 | ---- | M] (Microsoft Corporation) MD5=59EA5753EBDAE42CF92FD5B6E7AE4D53 -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.23451_none_f51a458f45d91b4c\ws2_32.dll
[2010/11/21 05:23:55 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_f4bf1aae2c981ecf\ws2_32.dll
[2016/05/11 19:02:50 | 000,296,448 | ---- | M] (Microsoft Corporation) MD5=FBE1086227040618A569C27F74A12F3D -- C:\Windows\SysNative\ws2_32.dll
[2016/05/11 19:02:50 | 000,296,448 | ---- | M] (Microsoft Corporation) MD5=FBE1086227040618A569C27F74A12F3D -- C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.23451_none_5138e112fe368c82\ws2_32.dll

[color=#A23BEC]< HKEY_LOCAL_MACHINE\SYSTEM\Curr entControlSet\Control\Session Manager\SubSystems /s >[/color]

[color=#A23BEC]< %systemroot%\*. /mp /s >[/color]

[color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\system32\drivers\ *.sys /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\System32\config\* .sav >[/color]

[color=#A23BEC]< c:\$recycle.bin\*.* /s >[/color]
[2016/12/31 04:45:41 | 000,000,129 | -HS- | M] () -- c:\$recycle.bin\S-1-5-20\desktop.ini
[2018/08/30 05:00:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I00W1CP.dat
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I053980.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I07OTNZ.png
[2018/08/30 05:06:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I0H4PYV.jpg
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I0US2LD.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I0VULZZ.png
[2018/08/30 05:00:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I0WKN7G
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I0WLM8L.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I1BVYC4.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I1CZGZ9.png
[2018/08/30 05:07:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I1JVN5C.exe
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I1O2UZN.exe
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I1SRHRS.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I1UK8GK.exe
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I1VH2I1.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I1WIP4W.png
[2018/08/30 05:06:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I21WJ18.png
[2018/08/30 05:06:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I24VJX0.jpg
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I262PHJ.png
[2018/08/30 05:03:24 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I27BE3F
[2018/08/30 05:06:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I2CRKVE.jpg
[2018/08/30 05:07:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I2FMTPR
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I2SMBQE.png
[2018/08/31 21:15:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I2U094R.lnk
[2018/08/30 05:06:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I2UFVXS.png
[2018/08/30 05:07:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I2VI7NP.ini
[2018/08/30 05:06:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I2W9RC2.odt
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I2ZO8FM.png
[2018/08/30 05:04:20 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I33HNEM
[2018/08/30 05:07:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I3BIZXW.lnk
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I3IAWXN.png
[2018/08/31 18:22:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I3JD21D.dat
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I3QXT2D.png
[2018/08/30 05:04:16 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I4CH61S.url
[2018/08/30 05:06:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I4I5BMY.pdf
[2018/08/30 05:07:27 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I4I9MSW
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I4MK665.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I4T6ASC.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I4X95Y9.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I52D4I8.png
[2018/08/30 05:02:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I54Q298.chk
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I5DV2D6.exe
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I5JRU7F.png
[2018/08/30 05:06:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I5PEOF7.jpg
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I5PXI0V.mp4
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I5RQCOP.png
[2018/08/30 05:06:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I5VCV59.jpg
[2018/08/30 05:07:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I61RL1O
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I620VCF.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I66IYOW.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I69WMOB.png
[2018/08/30 05:06:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I6CJ9EK.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I6DHTBS.png
[2018/08/30 05:06:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I6EK5LZ.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I6I3GC5.exe
[2018/08/30 05:06:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I6K8QHE.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I6LQ3CE.png
[2018/08/30 05:06:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I6M653T.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I6MYG2U.exe
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I6PDS3Q.png
[2018/08/30 05:06:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I6TFRRZ.png
[2018/08/30 05:10:11 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I6XLOCR
[2018/08/30 05:00:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I7370RG.old
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I7FQH8A.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I7JOWPA.png
[2018/08/30 05:06:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I7JXQZE.jpg
[2018/08/30 05:00:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I7MJ5SW.old
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I7MTHPJ.png
[2018/08/30 05:06:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I7SG6F4.jpg
[2018/08/30 05:05:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I88N8SY.android
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I89ZZWE.png
[2018/08/30 05:00:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I8FNYG5
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I8MBRMT.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I8PISE1.png
[2018/08/30 05:06:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I8PL2NQ.jpg
[2018/08/30 05:06:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I8UC6R9.odt
[2018/08/30 05:00:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I92OECJ.ico
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I93WMPS.pdf
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I9IU1A6.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I9Q7G69.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I9SBTAE.exe
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I9SMT5K.exe
[2018/08/30 05:06:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$I9WU7JN.odt
[2018/08/30 05:06:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IAAVXGP.odt
[2018/08/30 05:06:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IAG41SV.jpg
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IAKZDL5.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IAM5NZQ.png
[2018/08/30 05:06:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IAZ8UVV.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IB69N10.exe
[2018/08/30 05:06:28 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IB6I63J.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IB6K9MF.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IBH7W0Q.png
[2018/08/30 05:03:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IBIK82X.chk
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IBMYQSB.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IBO3I7J.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IBP7WIL.dmg
[2018/08/30 05:04:16 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IBRHYV0.url
[2018/08/30 05:02:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IBXZQ8U.chk
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IC0Y9XC.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IC5ARFD.exe
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IC8CEV3.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$ICDMFMT.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$ICE8UMY.exe
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$ICEU7TK.png
[2018/08/30 05:07:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$ICGMVVF.msi
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$ICR4U1C.png
[2018/08/30 05:07:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$ICXO1T3.ini
[2018/08/30 05:06:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$ICYV9WW.jpg
[2018/08/30 05:06:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$ID411O8.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$ID4NTNP.png
[2018/08/30 05:06:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$ID5YDLZ.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$ID8N6PG.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IDRF0PT.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IDVZJZQ.exe
[2018/08/30 05:07:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IE2AIIW.cab
[2018/08/30 05:03:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IE3OHV8.chk
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IE9W5XL.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IEAWH8F.pdf
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IEJ816F.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IEMO3IR.png
[2018/08/30 05:07:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IEQGIRH.exe
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IETA02G.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IETAAJD.jpg
[2018/08/30 05:07:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IF40PYZ
[2018/08/30 05:00:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IF6U9BP.torrent
[2018/08/30 05:06:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IF7X783.png
[2018/08/30 05:06:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IFBIC4E.url
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IFBJ1U9.png
[2018/08/30 05:03:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IFMJKHA
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IFRADQ9.png
[2018/08/30 05:06:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IFVEKJU.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IG0WQDJ.png
[2018/08/30 05:06:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IG4JKP0.png
[2018/08/30 05:07:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IG7MW38.msi
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IGD5LLJ.png
[2018/08/30 05:06:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IGIWZ8O.rtf
[2018/08/30 05:02:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IGL88FN.000
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IGSOKPV.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IGTC3KA.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IH18WDV.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IH31547.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IH64ABO.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IHNJT1F.png
[2018/08/30 05:03:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IHRMZLH.chk
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IHYGIQD.png
[2018/08/30 05:06:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IHYI59J.jpg
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$II166UB.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$II83WDM.exe
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IIBA9XZ.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IIFZDXZ.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IIR754W.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IIROV1B.png
[2018/08/30 05:06:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IIS7328.odt
[2018/08/30 05:07:48 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IITBNZ7
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IIUD6J2.pdf
[2018/08/30 05:07:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IIXH7EB
[2018/08/30 05:00:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IJ22PQT.old
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IJ2LVNO.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IJ30D57.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IJ52VB1.png
[2018/08/30 05:03:24 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IJ5B010
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IJH905Y.zip
[2018/08/30 05:00:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IJIPROX.dat
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IJK9BN2.jpg
[2018/08/30 05:07:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IJLPWHX
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IJM70VQ.docx
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IJUUUEX.png
[2018/08/30 05:06:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IK0NMMC.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IK0YMU0.png
[2018/08/30 05:00:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IK39W1P.dat
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IK4CXE9.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IKD3VTS
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IKDQ4N9.mp4
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IKF2Z7C.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IKGQ5EV.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IKGTO1V.png
[2018/08/30 05:06:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IKKS067.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IKOKDXG.png
[2018/08/30 05:07:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IKOX0DY.lnk
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IKS1U0I.png
[2018/08/30 05:00:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IL1JZL4.lng
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$ILCY4Z1.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$ILDHSU8.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$ILJ21R2.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$ILOLC2P.zip
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$ILPXLYX.png
[2018/08/30 05:05:34 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$ILR24GC.ini
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$ILTRHY5.png
[2018/08/30 05:06:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$ILY7MTD.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IM1ABDR.png
[2018/08/30 05:06:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IM75Z7F.jpg
[2018/08/30 05:06:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IM7S4N7.webp
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IM8ZPZ6.png
[2018/08/30 05:00:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IM9AUJK.old
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IMG2TSW.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IMIH9AN.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IMJNMUP.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IMMP6QO.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IMRNSN0.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IMXKY5I.png
[2018/08/30 05:06:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IMYXQZG.jpg
[2018/08/30 05:06:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IN48KOI.png
[2018/08/30 05:06:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IN83X95.odt
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IN8FXF3.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$INAE14W.png
[2018/08/30 05:04:16 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$INGVZAL.url
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IO7JDWR.exe
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IOAWI98.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IOCOKOB.png
[2018/08/30 05:00:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IOI9I7H
[2018/08/30 05:07:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IOILFIT
[2018/08/30 05:06:28 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IOKLUG8.jpg
[2018/08/30 05:06:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IONPQCM.png
[2018/08/30 05:06:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IORM2J2.odt
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IOXMDIE.exe
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IP48JXQ.exe
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IP7CLMH.png
[2018/08/30 05:00:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IP84VZ4.dat
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IPA76SM.pdf
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IPHI6ZV.exe
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IPHQENO.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IPNIOQD.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IPSB0S6.rar
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IPUJ5MG.png
[2018/08/30 05:06:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IPYDCYG.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IQ1638P.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IQ1MDWE.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IQ2OFAD.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IQ3HRRG.png
[2018/08/30 05:06:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IQDJB42
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IQEYERP.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IQK29XY.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IQL3LAJ.jpg
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IQM3PE7.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IQOC9DS.pdf
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IQQWYH8.png
[2018/08/30 05:07:18 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IQXAJ4F
[2018/08/30 05:00:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IQYP7I6.old
[2018/08/30 05:06:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IR37S23.png
[2018/08/30 05:04:16 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IR3K236.url
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IR41A91.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IR5LXTM.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IRBUDZP.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IRG7CHR.png
[2018/08/30 05:07:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IRO0DA3.exe
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IRQZ5ZN.exe
[2018/08/30 05:06:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IRRYGY7.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$ISJ4VWU.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$ISV2R5Z.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$ISZVTT8.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IT155BF.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IT50BDQ.exe
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$ITIF204.png
[2018/08/30 04:56:05 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$ITLSHO9.lnk
[2018/08/30 05:07:23 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$ITRRO1V.exe
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$ITYB6IQ.png
[2018/08/30 05:06:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IU313SR.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IU40JI2.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IU7QYUO.exe
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IU9LDD5.png
[2018/08/30 05:00:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IUMU5Y2
[2018/08/30 05:06:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IUNNNL6.jpg
[2018/08/30 05:07:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IUUS75F.cab
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IUZ2922.jpg
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IVDGLXS.png
[2018/08/30 05:06:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IVE299C.jpg
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IVFC3UN.png
[2018/08/30 05:06:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IVJ6HDU.odt
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IVJRKXL.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IVN4GSA.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IVN824P.png
[2018/08/30 05:06:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IVPZSHL.rtf
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IW085QY.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IW4TRNN.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IW6TNAN.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IW8P9N0.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IWAV26A.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IWB15L1.png
[2018/08/30 05:05:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IWCSCQZ
[2018/08/30 05:00:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IWDMG4Y.dat
[2018/08/30 05:00:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IWF6721.exe
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IWIEC6Y.doc
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IWJS4VJ.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IWKRI9K.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IWP51D6.exe
[2018/08/30 05:06:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IWT2N9L.jpg
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IX4RN5U.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IX572XI.png
[2018/08/31 21:15:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IXD202T.lnk
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IXI3SKW.png
[2018/08/30 05:07:44 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IXN78HO.xml
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IXO9PC1.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IXQAMDL.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IXROJGT.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IXTQR6L.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IY13FZR.png
[2018/08/30 05:03:07 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IY2FJFW.002
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IY40FYJ.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IY7FG3O.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IYPG19C.mp4
[2018/08/30 05:02:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IYQB6VH.chk
[2018/08/30 05:00:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IYRRL7H.dat
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IYSM4YE.png
[2018/08/30 05:06:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IZ0SXKI.jpg
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IZJSVNV.png
[2018/08/30 05:06:14 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IZKHTFD.jpg
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IZKXAFY.png
[2018/08/30 05:06:42 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IZX9D1I.odt
[2018/08/30 05:06:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IZXF3L7.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IZYU0QO.exe
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IZZNJEI.png
[2018/08/30 05:05:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$IZZT6JA.png
[2018/06/21 03:01:16 | 000,009,918 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R00W1CP.dat
[2018/06/21 16:58:07 | 001,575,065 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R053980.png
[2018/04/23 06:04:49 | 000,141,923 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R07OTNZ.png
[2018/06/19 19:52:45 | 001,246,265 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R0H4PYV.jpg
[2018/06/17 02:41:22 | 000,327,970 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R0US2LD.png
[2018/05/13 21:32:57 | 000,255,370 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R0VULZZ.png
[2018/04/26 01:10:22 | 000,137,370 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R0WLM8L.png
[2018/04/16 02:57:28 | 000,070,315 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R1BVYC4.png
[2018/04/26 00:57:11 | 000,139,018 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R1CZGZ9.png
[2018/04/18 14:56:59 | 048,787,384 | ---- | M] (Wondershare ) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R1JVN5C.exe
[2018/05/13 23:08:42 | 131,245,160 | ---- | M] (WhatsApp) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R1O2UZN.exe
[2018/05/19 23:44:12 | 000,393,954 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R1SRHRS.png
[2017/11/29 18:04:47 | 001,106,840 | ---- | M] (Unity Technologies ApS) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R1UK8GK.exe
[2018/04/26 00:53:11 | 000,144,173 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R1VH2I1.png
[2018/04/23 01:06:06 | 000,408,674 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R1WIP4W.png
[2018/06/24 22:32:43 | 000,834,050 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R21WJ18.png
[2018/05/28 19:42:49 | 000,127,053 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R24VJX0.jpg
[2018/05/05 21:28:49 | 000,410,796 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R262PHJ.png
[2018/06/08 17:01:15 | 000,487,251 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R2CRKVE.jpg
[2018/04/08 13:32:19 | 001,095,477 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R2SMBQE.png
[2017/08/28 01:13:30 | 000,000,931 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R2U094R.lnk
[2018/06/21 16:35:09 | 000,342,417 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R2UFVXS.png
[2017/12/12 05:24:08 | 000,000,279 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R2VI7NP.ini
[2018/01/03 04:11:20 | 000,013,438 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R2W9RC2.odt
[2018/04/17 03:03:07 | 000,375,369 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R2ZO8FM.png
[2017/11/29 23:44:06 | 000,000,888 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R3BIZXW.lnk
[2018/04/25 23:49:32 | 000,284,057 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R3IAWXN.png
[2018/08/31 18:17:10 | 000,003,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R3JD21D.dat
[2018/04/26 01:53:01 | 000,137,638 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R3QXT2D.png
[2017/01/19 16:44:14 | 000,000,427 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R4CH61S.url
[2017/04/06 12:37:08 | 000,067,744 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R4I5BMY.pdf
[2018/04/17 02:22:37 | 000,522,710 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R4MK665.png
[2018/04/17 02:27:50 | 000,521,973 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R4T6ASC.png
[2018/04/27 01:30:03 | 000,532,288 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R4X95Y9.png
[2018/04/20 06:06:45 | 000,095,585 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R52D4I8.png
[2018/01/11 19:56:19 | 203,947,336 | ---- | M] (Apple Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R5DV2D6.exe
[2018/04/20 05:21:54 | 000,069,292 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R5JRU7F.png
[2018/05/22 17:02:53 | 000,179,110 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R5PEOF7.jpg
[2018/05/19 02:32:56 | 000,168,844 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R5PXI0V.mp4
[2018/04/18 03:13:58 | 001,927,227 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R5RQCOP.png
[2018/06/17 23:12:52 | 000,282,281 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R5VCV59.jpg
[2018/04/18 04:22:09 | 001,777,379 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R620VCF.png
[2018/04/26 03:26:01 | 000,033,904 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R66IYOW.png
[2018/04/20 02:53:12 | 000,434,050 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R69WMOB.png
[2018/08/16 18:48:50 | 000,067,331 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R6CJ9EK.png
[2018/06/14 00:20:05 | 000,798,274 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R6DHTBS.png
[2018/06/21 16:21:21 | 000,513,337 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R6EK5LZ.png
[2017/11/29 18:04:44 | 001,106,840 | ---- | M] (Unity Technologies ApS) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R6I3GC5.exe
[2018/06/19 22:19:31 | 000,470,115 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R6K8QHE.png
[2018/04/28 03:54:09 | 000,214,565 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R6LQ3CE.png
[2018/06/08 16:43:41 | 000,120,034 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R6M653T.png
[2017/11/29 18:05:41 | 001,106,840 | ---- | M] (Unity Technologies ApS) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R6MYG2U.exe
[2018/04/20 05:48:41 | 000,094,687 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R6PDS3Q.png
[2018/06/19 19:34:22 | 000,779,570 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R6TFRRZ.png
[2018/06/19 22:36:40 | 000,000,099 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R7370RG.old
[2018/08/16 18:50:31 | 000,644,671 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R7FQH8A.png
[2018/04/18 01:39:44 | 000,342,870 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R7JOWPA.png
[2018/06/13 23:07:08 | 000,030,167 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R7JXQZE.jpg
[2018/06/21 03:00:26 | 000,000,002 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R7MJ5SW.old
[2018/04/05 00:47:03 | 000,614,300 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R7MTHPJ.png
[2018/07/09 23:05:11 | 000,005,109 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R7SG6F4.jpg
[2018/05/22 23:22:36 | 000,314,416 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R89ZZWE.png
[2018/04/18 04:17:21 | 000,417,229 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R8MBRMT.png
[2018/04/20 05:21:48 | 000,069,292 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R8PISE1.png
[2018/06/21 16:39:50 | 000,135,314 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R8PL2NQ.jpg
[2018/03/30 00:27:45 | 000,017,358 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R8UC6R9.odt
[2017/01/02 03:48:35 | 000,063,148 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R92OECJ.ico
[2017/12/19 19:18:00 | 000,059,260 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R93WMPS.pdf
[2018/06/19 22:33:03 | 000,533,300 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R9IU1A6.png
[2018/04/17 02:57:27 | 000,642,268 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R9Q7G69.png
[2017/11/29 18:04:47 | 001,106,840 | ---- | M] (Unity Technologies ApS) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R9SBTAE.exe
[2017/10/30 01:06:42 | 132,430,193 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R9SMT5K.exe
[2018/04/23 07:21:05 | 000,016,091 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R9WU7JN.odt
[2018/04/20 04:08:24 | 000,020,875 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RAAVXGP.odt
[2018/06/20 16:55:28 | 000,288,669 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RAG41SV.jpg
[2018/05/01 18:58:19 | 000,159,803 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RAKZDL5.png
[2018/06/13 23:21:20 | 000,061,980 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RAM5NZQ.png
[2018/06/19 21:13:40 | 000,013,334 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RAZ8UVV.png
[2017/11/29 18:04:26 | 001,106,840 | ---- | M] (Unity Technologies ApS) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RB69N10.exe
[2018/06/19 19:55:58 | 000,652,538 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RB6I63J.png
[2018/04/25 23:51:08 | 000,524,527 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RB6K9MF.png
[2018/06/08 17:18:13 | 003,520,450 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RBH7W0Q.png
[2018/05/14 01:28:03 | 001,578,064 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RBMYQSB.png
[2018/05/23 17:33:37 | 000,392,360 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RBO3I7J.png
[2018/01/11 20:10:11 | 276,948,094 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RBP7WIL.dmg
[2018/08/30 05:04:12 | 000,000,427 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RBRHYV0.url
[2018/05/14 01:28:52 | 003,284,673 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RC0Y9XC.png
[2017/11/29 18:04:45 | 001,106,840 | ---- | M] (Unity Technologies ApS) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RC5ARFD.exe
[2018/06/19 21:23:13 | 000,074,671 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RC8CEV3.png
[2018/05/24 21:49:23 | 000,313,977 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RCDMFMT.png
[2017/11/29 23:43:21 | 000,311,328 | ---- | M] (Mozilla) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RCE8UMY.exe
[2018/05/05 23:14:40 | 000,409,735 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RCEU7TK.png
[2017/12/12 05:24:08 | 002,314,240 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RCGMVVF.msi
[2018/04/23 06:12:25 | 000,141,740 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RCR4U1C.png
[2017/10/12 06:54:46 | 000,000,279 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RCXO1T3.ini
[2018/06/21 16:39:43 | 000,031,656 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RCYV9WW.jpg
[2018/06/24 22:29:04 | 000,050,878 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RD411O8.png
[2018/04/20 05:19:25 | 000,247,798 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RD4NTNP.png
[2018/06/19 19:04:31 | 002,175,659 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RD5YDLZ.png
[2018/05/06 03:33:43 | 000,211,337 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RD8N6PG.png
[2018/05/19 23:09:14 | 000,394,150 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RDRF0PT.png
[2017/11/29 18:05:55 | 001,106,840 | ---- | M] (Unity Technologies ApS) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RDVZJZQ.exe
[2017/12/12 05:26:32 | 122,122,830 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RE2AIIW.cab
[2018/04/18 04:44:13 | 000,465,863 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RE9W5XL.png
[2018/04/15 06:20:02 | 000,037,417 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$REAWH8F.pdf
[2018/04/15 20:47:17 | 000,080,721 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$REJ816F.png
[2018/04/20 02:49:28 | 000,440,171 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$REMO3IR.png
[2018/04/18 14:55:23 | 000,006,144 | ---- | M] (Wondershare) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$REQGIRH.exe
[2018/04/28 03:27:28 | 000,129,497 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RETA02G.png
[2018/04/08 04:07:26 | 000,111,289 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RETAAJD.jpg
[2017/04/26 12:46:11 | 000,012,847 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RF6U9BP.torrent
[2018/06/08 16:44:48 | 000,047,588 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RF7X783.png
[2018/05/19 02:28:23 | 000,000,155 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFBIC4E.url
[2018/04/17 02:46:46 | 000,647,561 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFBJ1U9.png
[2018/06/17 23:23:11 | 000,968,337 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFRADQ9.png
[2018/06/24 22:32:36 | 000,678,600 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFVEKJU.png
[2018/05/14 22:17:20 | 001,408,805 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RG0WQDJ.png
[2018/05/22 17:07:49 | 000,466,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RG4JKP0.png
[2017/10/12 06:54:46 | 002,314,240 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RG7MW38.msi
[2018/04/25 23:49:16 | 000,013,497 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RGD5LLJ.png
[2017/10/31 15:18:42 | 000,001,145 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RGIWZ8O.rtf
[2018/04/17 02:49:29 | 000,647,531 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RGSOKPV.png
[2018/04/08 13:18:17 | 001,254,704 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RGTC3KA.png
[2018/04/20 03:02:31 | 001,872,762 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RH18WDV.png
[2018/04/08 04:16:47 | 000,701,108 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RH31547.png
[2018/06/19 20:01:58 | 003,805,932 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RH64ABO.png
[2018/04/17 02:51:13 | 000,647,439 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RHNJT1F.png
[2018/04/20 16:58:41 | 000,091,537 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RHYGIQD.png
[2018/06/17 23:10:08 | 000,223,948 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RHYI59J.jpg
[2018/05/13 21:35:25 | 000,255,370 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RI166UB.png
[2018/04/18 14:51:24 | 000,997,008 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RI83WDM.exe
[2018/04/17 03:25:18 | 000,937,521 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RIBA9XZ.png
[2018/06/16 04:44:05 | 000,777,903 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RIFZDXZ.png
[2018/04/23 06:20:56 | 000,501,752 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RIR754W.png
[2018/04/18 01:39:19 | 000,360,968 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RIROV1B.png
[2018/01/14 01:50:33 | 000,018,211 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RIS7328.odt
[2018/05/05 21:19:09 | 000,561,270 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RIUD6J2.pdf
[2018/06/21 03:01:16 | 000,044,781 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ22PQT.old
[2018/05/24 21:48:21 | 000,314,389 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ2LVNO.png
[2018/05/01 00:36:06 | 000,682,748 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ30D57.png
[2018/05/09 20:46:15 | 000,487,535 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ52VB1.png
[2017/11/20 21:46:14 | 000,024,169 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJH905Y.zip
[2018/06/21 03:01:55 | 000,000,077 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJIPROX.dat
[2018/05/01 23:27:12 | 000,214,259 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJK9BN2.jpg
[2018/05/28 17:08:13 | 000,248,412 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJM70VQ.docx
[2018/05/14 01:06:18 | 001,578,064 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJUUUEX.png
[2018/06/19 21:08:42 | 000,025,917 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RK0NMMC.png
[2018/04/18 01:42:20 | 001,477,583 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RK0YMU0.png
[2018/08/29 21:44:24 | 000,001,272 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RK39W1P.dat
[2018/04/08 04:25:22 | 000,705,180 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RK4CXE9.png
[2018/08/12 20:44:04 | 000,001,319 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RKD3VTS
[2018/02/18 15:53:18 | 127,191,843 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RKDQ4N9.mp4
[2018/05/01 18:44:20 | 000,003,109 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RKF2Z7C.png
[2018/04/15 05:54:58 | 000,010,926 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RKGQ5EV.png
[2018/04/25 23:53:15 | 000,025,381 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RKGTO1V.png
[2018/05/22 23:32:32 | 000,031,329 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RKKS067.png
[2018/05/06 02:15:51 | 000,338,289 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RKOKDXG.png
[2017/08/28 01:26:48 | 000,000,817 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RKOX0DY.lnk
[2018/05/12 00:28:12 | 000,758,751 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RKS1U0I.png
[2017/01/02 03:48:32 | 001,368,993 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RL1JZL4.lng
[2018/05/05 23:14:26 | 000,439,788 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RLCY4Z1.png
[2018/05/01 19:06:30 | 000,224,276 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RLDHSU8.png
[2018/04/20 02:59:10 | 000,512,641 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RLJ21R2.png
[2018/04/18 01:38:50 | 001,091,761 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RLOLC2P.zip
[2018/04/26 03:47:49 | 000,445,926 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RLPXLYX.png
[2017/01/12 12:08:46 | 000,000,312 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RLR24GC.ini
[2018/05/14 22:15:06 | 001,410,765 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RLTRHY5.png
[2018/06/13 23:33:10 | 000,352,414 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RLY7MTD.png
[2018/05/01 18:01:11 | 000,019,169 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RM1ABDR.png
[2018/06/19 21:11:46 | 000,013,272 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RM75Z7F.jpg
[2018/06/08 16:57:41 | 000,406,566 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RM7S4N7.webp
[2018/04/16 02:52:19 | 000,062,524 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RM8ZPZ6.png
[2018/06/20 22:13:01 | 000,009,814 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RM9AUJK.old
[2018/05/19 23:10:11 | 000,393,969 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RMG2TSW.png
[2018/06/21 16:56:32 | 002,656,056 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RMIH9AN.png
[2018/04/20 06:07:14 | 000,095,249 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RMJNMUP.png
[2018/04/18 03:07:39 | 000,455,835 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RMMP6QO.png
[2018/05/05 21:02:36 | 000,280,527 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RMRNSN0.png
[2018/06/19 20:07:56 | 003,721,707 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RMXKY5I.png
[2018/05/22 23:30:17 | 000,036,507 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RMYXQZG.jpg
[2018/06/19 19:29:40 | 000,310,433 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RN48KOI.png
[2018/04/22 16:31:26 | 000,011,113 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RN83X95.odt
[2018/05/05 21:59:19 | 000,420,514 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RN8FXF3.png
[2018/04/15 20:43:50 | 000,087,491 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RNAE14W.png
[2018/08/30 05:04:12 | 000,000,188 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RNGVZAL.url
[2017/11/29 18:04:45 | 001,106,840 | ---- | M] (Unity Technologies ApS) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RO7JDWR.exe
[2018/05/05 21:19:24 | 001,196,843 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$ROAWI98.png
[2018/06/19 22:31:52 | 000,533,300 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$ROCOKOB.png
[2018/08/16 18:47:48 | 000,086,039 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$ROKLUG8.jpg
[2018/06/19 22:26:22 | 000,348,220 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RONPQCM.png
[2018/04/20 06:09:15 | 000,019,291 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RORM2J2.odt
[2018/04/18 14:35:01 | 272,307,016 | ---- | M] (Apple Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$ROXMDIE.exe
[2018/01/11 19:58:41 | 264,339,784 | ---- | M] (Apple Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RP48JXQ.exe
[2018/05/12 00:28:27 | 000,154,414 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RP7CLMH.png
[2018/06/21 03:01:16 | 000,000,099 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RP84VZ4.dat
[2018/05/05 21:11:25 | 000,561,254 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RPA76SM.pdf
[2018/01/11 19:56:22 | 203,947,336 | ---- | M] (Apple Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RPHI6ZV.exe
[2018/04/23 06:33:18 | 000,592,531 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RPHQENO.png
[2018/04/18 03:07:56 | 000,455,698 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RPNIOQD.png
[2018/05/28 17:11:43 | 448,570,915 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RPSB0S6.rar
[2018/06/16 04:30:04 | 000,778,432 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RPUJ5MG.png
[2018/06/08 16:43:20 | 000,025,927 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RPYDCYG.png
[2018/06/17 02:39:09 | 000,330,034 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RQ1638P.png
[2018/04/25 23:52:27 | 000,048,620 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RQ1MDWE.png
[2018/05/05 22:21:37 | 000,409,020 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RQ2OFAD.png
[2018/04/18 01:39:33 | 000,387,487 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RQ3HRRG.png
[2018/06/08 16:59:43 | 000,406,566 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RQDJB42
[2018/04/21 04:59:03 | 000,219,028 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RQEYERP.png
[2018/04/18 04:10:40 | 000,493,018 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RQK29XY.png
[2018/05/01 18:57:49 | 000,010,109 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RQL3LAJ.jpg
[2018/04/25 23:53:02 | 000,297,062 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RQM3PE7.png
[2018/04/15 06:17:39 | 000,042,322 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RQOC9DS.pdf
[2018/05/01 00:26:52 | 000,713,672 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RQQWYH8.png
[2018/06/21 03:00:27 | 000,000,077 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RQYP7I6.old
[2018/06/19 19:36:18 | 000,832,833 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RR37S23.png
[2017/01/19 16:40:37 | 000,000,188 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RR3K236.url
[2018/04/27 01:29:33 | 000,469,216 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RR41A91.png
[2018/04/25 23:49:48 | 000,014,802 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RR5LXTM.png
[2018/06/24 22:49:59 | 002,182,096 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RRBUDZP.png
[2018/04/17 03:35:05 | 000,408,463 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RRG7CHR.png
[2017/10/12 06:54:46 | 000,479,232 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RRO0DA3.exe
[2018/04/18 14:55:21 | 000,997,008 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RRQZ5ZN.exe
[2018/06/19 21:11:37 | 000,003,189 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RRRYGY7.png
[2018/06/14 00:01:22 | 000,804,392 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RSJ4VWU.png
[2018/04/17 03:18:55 | 000,331,935 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RSV2R5Z.png
[2018/04/18 04:43:59 | 000,443,180 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RSZVTT8.png
[2018/04/27 01:29:06 | 000,428,117 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RT155BF.png
[2017/11/29 18:04:39 | 001,106,840 | ---- | M] (Unity Technologies ApS) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RT50BDQ.exe
[2018/06/18 04:27:07 | 001,169,096 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RTIF204.png
[2018/08/15 23:02:12 | 000,002,309 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RTLSHO9.lnk
[2017/12/12 05:24:08 | 000,479,232 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RTRRO1V.exe
[2018/04/18 02:51:19 | 000,455,835 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RTYB6IQ.png
[2018/06/21 16:31:03 | 000,038,637 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RU313SR.png
[2018/04/12 00:46:43 | 000,138,660 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RU40JI2.png
[2017/08/28 01:23:51 | 001,446,792 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RU7QYUO.exe
[2018/06/20 17:07:30 | 001,345,493 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RU9LDD5.png
[2018/06/19 21:10:31 | 000,005,812 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RUNNNL6.jpg
[2017/10/12 06:57:14 | 122,151,424 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RUUS75F.cab
[2018/05/01 00:05:33 | 000,136,257 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RUZ2922.jpg
[2018/04/26 03:48:01 | 000,503,337 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RVDGLXS.png
[2018/06/19 19:32:07 | 000,111,146 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RVE299C.jpg
[2018/05/19 19:39:17 | 000,313,691 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RVFC3UN.png
[2018/04/08 13:08:01 | 000,022,150 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RVJ6HDU.odt
[2018/04/18 04:44:29 | 000,368,093 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RVJRKXL.png
[2018/04/26 01:46:47 | 000,138,120 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RVN4GSA.png
[2018/05/19 19:45:33 | 000,319,187 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RVN824P.png
[2017/10/08 22:36:01 | 000,000,218 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RVPZSHL.rtf
[2018/05/12 00:34:47 | 000,749,351 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RW085QY.png
[2018/04/26 03:47:06 | 000,405,005 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RW4TRNN.png
[2018/04/25 23:51:44 | 000,038,314 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RW6TNAN.png
[2018/05/01 00:41:39 | 000,698,054 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RW8P9N0.png
[2018/06/20 17:06:05 | 001,325,431 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RWAV26A.png
[2018/04/17 02:11:41 | 000,493,763 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RWB15L1.png
[2018/06/21 03:02:00 | 000,044,810 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RWDMG4Y.dat
[2018/04/17 15:27:47 | 001,983,672 | ---- | M] (BitTorrent Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RWF6721.exe
[2017/09/20 23:40:04 | 000,564,736 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RWIEC6Y.doc
[2018/04/17 03:37:28 | 001,482,224 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RWJS4VJ.png
[2018/04/18 04:46:51 | 001,713,957 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RWKRI9K.png
[2018/05/06 01:58:15 | 132,403,128 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RWP51D6.exe
[2018/06/19 17:35:48 | 000,032,107 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RWT2N9L.jpg
[2018/04/20 23:27:47 | 001,541,510 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RX4RN5U.png
[2018/04/25 02:35:58 | 000,060,968 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RX572XI.png
[2018/07/20 03:01:37 | 000,001,928 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RXD202T.lnk
[2018/04/26 01:41:49 | 000,138,115 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RXI3SKW.png
[2018/04/18 14:59:31 | 000,000,182 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RXN78HO.xml
[2018/06/09 00:58:49 | 003,506,067 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RXO9PC1.png
[2018/04/26 00:24:06 | 000,019,030 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RXQAMDL.png
[2018/05/23 17:31:47 | 000,394,269 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RXROJGT.png
[2018/04/17 03:09:14 | 000,358,315 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RXTQR6L.png
[2018/05/06 02:15:18 | 000,338,407 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RY13FZR.png
[2018/04/18 04:07:08 | 000,407,778 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RY40FYJ.png
[2018/04/27 01:52:03 | 001,598,511 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RY7FG3O.png
[2018/05/19 02:38:46 | 000,618,846 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RYPG19C.mp4
[2018/06/21 03:01:16 | 000,000,002 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RYRRL7H.dat
[2018/05/06 01:33:24 | 000,145,054 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RYSM4YE.png
[2018/06/21 16:39:57 | 000,088,802 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RZ0SXKI.jpg
[2018/04/26 01:18:40 | 000,009,217 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RZJSVNV.png
[2018/06/21 16:42:20 | 000,119,034 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RZKHTFD.jpg
[2018/04/18 03:07:46 | 000,514,793 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RZKXAFY.png
[2018/01/14 02:30:29 | 000,016,306 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RZX9D1I.odt
[2018/06/19 22:19:16 | 000,607,659 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RZXF3L7.png
[2018/04/18 14:46:35 | 272,307,016 | ---- | M] (Apple Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RZYU0QO.exe
[2018/04/15 05:57:59 | 000,256,199 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RZZNJEI.png
[2018/04/28 03:47:42 | 000,200,042 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RZZT6JA.png
[2016/01/20 01:26:55 | 000,000,129 | -HS- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\desktop.ini
[2018/06/19 23:03:33 | 000,020,109 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R0WKN7G\featuredContent.btapp
[2017/01/02 03:48:33 | 000,003,097 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R0WKN7G\player.btapp
[2018/06/19 23:03:33 | 000,000,264 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R0WKN7G\plus.btapp
[2017/01/02 03:48:33 | 000,028,315 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R0WKN7G\welcome-upsell.btapp
[2017/01/02 03:48:33 | 000,000,196 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R0WKN7G\72F0D3E2141065DACF6134D07A06A2DF20590748\btapp
[2017/01/02 03:48:33 | 000,001,334 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R0WKN7G\72F0D3E2141065DACF6134D07A06A2DF20590748\icon.bmp
[2017/01/02 03:48:33 | 000,001,901 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R0WKN7G\72F0D3E2141065DACF6134D07A06A2DF20590748\index.html
[2017/01/02 03:48:33 | 000,001,050 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R0WKN7G\72F0D3E2141065DACF6134D07A06A2DF20590748\index.js
[2017/01/02 03:48:33 | 000,000,946 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R0WKN7G\72F0D3E2141065DACF6134D07A06A2DF20590748\main.css
[2017/01/02 03:48:33 | 000,000,201 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R0WKN7G\D944B3378FAB35793B7951FA53E41B2AB9CC462B\btapp
[2017/01/02 03:48:33 | 000,000,282 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R0WKN7G\D944B3378FAB35793B7951FA53E41B2AB9CC462B\empty_movie.gif
[2017/01/02 03:48:33 | 000,003,156 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R0WKN7G\D944B3378FAB35793B7951FA53E41B2AB9CC462B\index.html
[2017/01/02 03:48:33 | 000,000,250 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R0WKN7G\D944B3378FAB35793B7951FA53E41B2AB9CC462B\info_icon.png
[2017/01/02 03:48:33 | 000,006,990 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R0WKN7G\D944B3378FAB35793B7951FA53E41B2AB9CC462B\main.css
[2017/01/02 03:48:33 | 000,023,064 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R0WKN7G\D944B3378FAB35793B7951FA53E41B2AB9CC462B\vid_thumb.jpg
[2017/01/02 03:48:33 | 000,000,265 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R0WKN7G\D944B3378FAB35793B7951FA53E41B2AB9CC462B\x.png
[2017/11/29 18:06:02 | 000,644,563 | ---- | M] (Unity Technologies ApS) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R27BE3F\WebPlayer64\Uninstall.exe
[2015/06/08 13:25:20 | 000,779,848 | ---- | M] (Unity Technologies ApS) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R27BE3F\WebPlayer64\UnityBugReporter.exe
[2015/06/08 13:25:18 | 000,586,312 | ---- | M] (Unity Technologies ApS) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R27BE3F\WebPlayer64\UnityWebPlayerUpdate.exe
[2015/06/08 13:24:12 | 000,000,192 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R27BE3F\WebPlayer64\loader-x64\info.plist
[2015/06/08 13:25:22 | 001,036,360 | ---- | M] (Unity Technologies ApS) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R27BE3F\WebPlayer64\loader-x64\npUnity3D64.dll
[2015/06/08 13:25:02 | 000,355,622 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R27BE3F\WebPlayer64\loader-x64\UnityWebPlayerNP.map
[2015/06/08 13:25:22 | 000,211,528 | ---- | M] (Unity Technologies ApS) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R27BE3F\WebPlayer64\loader-x64\UnityWebPluginAX.ocx
[2017/12/12 05:24:08 | 000,012,251 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R2FMTPR\readme_fr.html
[2017/12/12 05:24:08 | 000,011,937 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R2FMTPR\readme_fr.txt
[2017/01/02 04:13:50 | 000,000,402 | -HS- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R33HNEM\desktop.ini
[16 c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R54Q298.chk\*.tmp files -> c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R54Q298.chk\*.tmp -> ]
[2017/10/12 06:54:46 | 005,207,896 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R61RL1O\vcredist_x64.exe
[2017/10/12 06:54:46 | 004,479,832 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R61RL1O\vcredist_x86.exe
[2017/04/24 19:54:00 | 000,002,943 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$R6XLOCR\WTR\netfx45_upgradecleanup.inf
[2018/04/25 05:35:20 | 000,055,361 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RBIK82X.chk\Network Persistent State
[2018/04/25 05:35:19 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RBIK82X.chk\TransportSecurity
[10 c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RBXZQ8U.chk\*.tmp files -> c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RBXZQ8U.chk\*.tmp -> ]
[2018/04/25 05:35:03 | 000,031,959 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RE3OHV8.chk\f_004d0c
[2018/04/25 05:35:03 | 000,020,509 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RE3OHV8.chk\f_004d0d
[2017/10/12 06:54:46 | 000,212,329 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RF40PYZ\LICENSE
[2017/10/12 06:54:46 | 000,006,025 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RF40PYZ\NOTICE
[2018/07/11 15:06:08 | 000,517,848 | ---- | M] (McAfee, Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFMJKHA\uninstall.exe
[2018/07/11 15:05:20 | 000,937,992 | ---- | M] (McAfee, Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFMJKHA\3.11.766\AVScanComponent.dll
[2018/07/20 03:01:13 | 000,000,425 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFMJKHA\3.11.766\AVScanner.ini
[2013/10/29 14:05:14 | 000,078,917 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFMJKHA\3.11.766\avvclean.dat
[2013/10/29 14:05:14 | 000,014,365 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFMJKHA\3.11.766\avvnames.dat
[2013/10/29 14:05:14 | 001,376,637 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFMJKHA\3.11.766\avvscan.dat
[2014/10/28 00:55:04 | 000,005,993 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFMJKHA\3.11.766\config.dat
[2018/07/20 03:01:20 | 000,000,396 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFMJKHA\3.11.766\ftconfig.ini
[2018/03/27 07:55:06 | 000,017,542 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFMJKHA\3.11.766\McAfee.ico
[2018/07/11 15:09:46 | 000,672,464 | ---- | M] (McAfee, Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFMJKHA\3.11.766\mcbrwsr2.dll
[2018/07/11 15:05:36 | 000,405,392 | ---- | M] (McAfee, Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFMJKHA\3.11.766\McCHSvc.exe
[2016/10/13 13:12:22 | 000,000,486 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFMJKHA\3.11.766\MCCompHostConfig.ini
[2018/07/11 15:10:26 | 000,254,696 | ---- | M] (McAfee, Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFMJKHA\3.11.766\McCorePS.dll
[2018/07/11 15:09:24 | 000,335,648 | ---- | M] (McAfee, Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFMJKHA\3.11.766\McInstallerRes.dll
[2018/07/11 15:09:28 | 000,181,872 | ---- | M] (McAfee, Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFMJKHA\3.11.766\McInstallerRes_LD.dll
[2018/07/11 15:09:36 | 001,172,776 | ---- | M] (McAfee, Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFMJKHA\3.11.766\McInstallerStartup.dll
[2018/07/11 15:09:40 | 000,759,736 | ---- | M] (McAfee, Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFMJKHA\3.11.766\McUICnt.exe
[2018/07/11 15:05:40 | 000,724,504 | ---- | M] (McAfee, Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFMJKHA\3.11.766\McUpdater.dll
[2018/07/11 15:10:10 | 000,681,864 | ---- | M] (McAfee, Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFMJKHA\3.11.766\McUtil.dll
[2018/07/11 15:04:56 | 004,447,136 | ---- | M] (McAfee, Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFMJKHA\3.11.766\mscan64a.dll
[2018/07/11 15:10:14 | 001,157,752 | ---- | M] (McAfee, Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFMJKHA\3.11.766\QsLite.dll
[2018/08/25 20:07:53 | 000,252,928 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFMJKHA\3.11.766\sacore.db
[2018/07/11 15:05:00 | 001,500,408 | ---- | M] (McAfee, Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFMJKHA\3.11.766\sacore.dll
[2018/07/11 15:05:04 | 000,220,424 | ---- | M] (McAfee, Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFMJKHA\3.11.766\sa_cache_sqlite.dll
[2018/07/11 15:05:08 | 000,206,928 | ---- | M] (McAfee, Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFMJKHA\3.11.766\sa_http_win32.dll
[2018/07/11 15:05:10 | 000,208,528 | ---- | M] (McAfee, Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFMJKHA\3.11.766\sa_mbl.dll
[2018/07/11 15:05:14 | 000,190,824 | ---- | M] (McAfee, Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFMJKHA\3.11.766\sa_store_sqlite.dll
[2018/07/11 15:05:44 | 001,380,464 | ---- | M] (McAfee, Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFMJKHA\3.11.766\SecurityScanner.dll
[2018/07/11 15:05:42 | 000,251,504 | ---- | M] (McAfee, Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFMJKHA\3.11.766\SecurityScanner_LD.dll
[2014/10/28 00:55:04 | 000,007,842 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFMJKHA\3.11.766\signlic.txt
[2018/07/11 15:05:16 | 000,680,144 | ---- | M] (McAfee, Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFMJKHA\3.11.766\sqlite3.dll
[2018/07/11 15:05:48 | 000,536,912 | ---- | M] (McAfee, Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFMJKHA\3.11.766\SSScheduler.exe
[2018/07/20 03:01:08 | 000,000,623 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFMJKHA\3.11.766\uninstaller.ini
[2018/07/11 15:05:26 | 002,113,000 | ---- | M] (McAfee, Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFMJKHA\3.11.766\WebInfoScanner.dll
[2018/07/11 15:05:52 | 000,879,240 | ---- | M] (McAfee, Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFMJKHA\3.11.766\WMIScanner.dll
[2014/10/28 00:55:04 | 000,000,038 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFMJKHA\3.11.766\sacoredata\uds_filetypes.txt
[2014/10/28 00:55:04 | 000,000,137 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFMJKHA\3.11.766\sacoredata\uds_hosting.txt
[2014/10/28 00:55:04 | 000,025,680 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RFMJKHA\3.11.766\sacoredata\uds_tlds.txt
[2018/04/25 05:32:02 | 000,045,747 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RHRMZLH.chk\Local State
[2017/12/12 05:24:08 | 000,212,329 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RIXH7EB\LICENSE
[2017/12/12 05:24:08 | 000,006,025 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RIXH7EB\NOTICE
[2017/11/13 00:42:04 | 000,003,008 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\Accessible.tlb
[2018/01/10 17:00:25 | 000,127,440 | ---- | M] (Mozilla Foundation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\AccessibleHandler.dll
[2018/01/10 17:00:25 | 000,029,648 | ---- | M] (Mozilla Foundation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\AccessibleMarshal.dll
[2017/11/13 00:42:04 | 000,019,136 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-core-console-l1-1-0.dll
[2017/11/13 00:42:04 | 000,018,112 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-core-datetime-l1-1-0.dll
[2017/11/13 00:42:04 | 000,018,112 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-core-debug-l1-1-0.dll
[2017/11/13 00:42:04 | 000,018,624 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-core-errorhandling-l1-1-0.dll
[2017/11/13 00:42:04 | 000,022,208 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-core-file-l1-1-0.dll
[2017/11/13 00:42:04 | 000,018,624 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-core-file-l1-2-0.dll
[2017/11/13 00:42:04 | 000,018,624 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-core-file-l2-1-0.dll
[2017/11/13 00:42:04 | 000,018,616 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-core-handle-l1-1-0.dll
[2017/11/13 00:42:04 | 000,018,624 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-core-heap-l1-1-0.dll
[2017/11/13 00:42:04 | 000,018,616 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-core-interlocked-l1-1-0.dll
[2017/11/13 00:42:04 | 000,019,136 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-core-libraryloader-l1-1-0.dll
[2017/11/13 00:42:04 | 000,021,184 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-core-localization-l1-2-0.dll
[2017/11/13 00:42:04 | 000,019,136 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-core-memory-l1-1-0.dll
[2017/11/13 00:42:04 | 000,018,624 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-core-namedpipe-l1-1-0.dll
[2017/11/13 00:42:04 | 000,019,648 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-core-processenvironment-l1-1-0.dll
[2017/11/13 00:42:04 | 000,020,672 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-core-processthreads-l1-1-0.dll
[2017/11/13 00:42:04 | 000,019,136 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-core-processthreads-l1-1-1.dll
[2017/11/13 00:42:04 | 000,018,112 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-core-profile-l1-1-0.dll
[2017/11/13 00:42:04 | 000,018,616 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-core-rtlsupport-l1-1-0.dll
[2017/11/13 00:42:04 | 000,018,624 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-core-string-l1-1-0.dll
[2017/11/13 00:42:04 | 000,020,672 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-core-synch-l1-1-0.dll
[2017/11/13 00:42:04 | 000,019,136 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-core-synch-l1-2-0.dll
[2017/11/13 00:42:04 | 000,019,648 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-core-sysinfo-l1-1-0.dll
[2017/11/13 00:42:04 | 000,018,624 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-core-timezone-l1-1-0.dll
[2017/11/13 00:42:04 | 000,018,624 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-core-util-l1-1-0.dll
[2017/11/13 00:42:04 | 000,019,648 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-crt-conio-l1-1-0.dll
[2017/11/13 00:42:04 | 000,022,720 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-crt-convert-l1-1-0.dll
[2017/11/13 00:42:04 | 000,019,136 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-crt-environment-l1-1-0.dll
[2017/11/13 00:42:04 | 000,020,672 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-crt-filesystem-l1-1-0.dll
[2017/11/13 00:42:04 | 000,019,136 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-crt-heap-l1-1-0.dll
[2017/11/13 00:42:04 | 000,019,136 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-crt-locale-l1-1-0.dll
[2017/11/13 00:42:04 | 000,027,840 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-crt-math-l1-1-0.dll
[2017/11/13 00:42:04 | 000,026,296 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-crt-multibyte-l1-1-0.dll
[2017/11/13 00:42:04 | 000,070,848 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-crt-private-l1-1-0.dll
[2017/11/13 00:42:04 | 000,019,648 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-crt-process-l1-1-0.dll
[2017/11/13 00:42:04 | 000,023,232 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-crt-runtime-l1-1-0.dll
[2017/11/13 00:42:04 | 000,024,768 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-crt-stdio-l1-1-0.dll
[2017/11/13 00:42:04 | 000,024,768 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-crt-string-l1-1-0.dll
[2017/11/13 00:42:04 | 000,021,184 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-crt-time-l1-1-0.dll
[2017/11/13 00:42:04 | 000,019,136 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\api-ms-win-crt-utility-l1-1-0.dll
[2018/01/10 17:00:25 | 000,000,718 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\application.ini
[2018/01/10 17:00:24 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\chrome.manifest
[2018/01/10 17:00:24 | 000,191,440 | ---- | M] (Mozilla Foundation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\crashreporter.exe
[2017/11/12 17:18:42 | 000,004,686 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\crashreporter.ini
[2017/11/13 00:42:04 | 004,488,896 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\d3dcompiler_47.dll
[2017/11/13 00:42:04 | 000,000,494 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\dependentlibs.list
[2018/01/10 17:00:24 | 000,445,904 | ---- | M] (Mozilla Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\firefox.exe
[2018/01/10 17:00:24 | 000,001,449 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\firefox.exe.sig
[2017/11/13 00:42:04 | 000,000,344 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\firefox.VisualElementsManifest.xml
[2018/01/10 17:00:24 | 000,000,899 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\freebl3.chk
[2018/01/10 17:00:24 | 000,453,584 | ---- | M] (Mozilla Foundation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\freebl3.dll
[2018/01/10 17:00:25 | 000,080,848 | ---- | M] (Mozilla Foundation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\IA2Marshal.dll
[2017/11/29 23:44:09 | 000,030,532 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\install.log
[2018/01/10 17:00:24 | 000,054,224 | ---- | M] (Mozilla Foundation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\lgpllibs.dll
[2018/01/10 17:00:24 | 000,027,088 | ---- | M] (Mozilla Foundation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\libEGL.dll
[2018/01/10 17:00:24 | 001,924,560 | ---- | M] (Mozilla Foundation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\libGLESv2.dll
[2018/01/10 17:00:24 | 000,194,000 | ---- | M] (Mozilla Foundation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\maintenanceservice.exe
[2018/01/10 17:00:24 | 000,157,096 | ---- | M] (Mozilla Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\maintenanceservice_installer.exe
[2018/01/10 17:00:24 | 000,614,864 | ---- | M] (Mozilla Foundation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\minidump-analyzer.exe
[2018/01/10 17:00:24 | 001,534,416 | ---- | M] (Mozilla Foundation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\mozavcodec.dll
[2018/01/10 17:00:24 | 000,169,936 | ---- | M] (Mozilla Foundation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\mozavutil.dll
[2018/01/10 17:00:24 | 000,160,720 | ---- | M] (Mozilla Foundation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\mozglue.dll
[2017/11/13 00:42:04 | 000,633,152 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\msvcp140.dll
[2018/01/10 17:00:24 | 001,522,128 | ---- | M] (Mozilla Foundation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\nss3.dll
[2018/01/10 17:00:24 | 000,467,920 | ---- | M] (Mozilla Foundation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\nssckbi.dll
[2018/01/10 17:00:24 | 000,000,899 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\nssdbm3.chk
[2018/01/10 17:00:24 | 000,114,128 | ---- | M] (Mozilla Foundation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\nssdbm3.dll
[2018/01/10 17:00:24 | 017,380,730 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\omni.ja
[2018/01/10 17:00:24 | 000,063,440 | ---- | M] (Mozilla Foundation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\pingsender.exe
[2018/01/10 17:00:24 | 000,000,166 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\platform.ini
[2018/01/10 17:00:24 | 000,101,840 | ---- | M] (Mozilla Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\plugin-container.exe
[2018/01/10 17:00:24 | 000,001,449 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\plugin-container.exe.sig
[2018/01/10 17:00:24 | 000,036,304 | ---- | M] (Mozilla Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\plugin-hang-ui.exe
[2018/01/10 17:00:24 | 000,004,260 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\precomplete
[2018/01/10 17:00:24 | 000,018,384 | ---- | M] (Mozilla Foundation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\qipcap64.dll
[2018/01/10 17:00:24 | 000,000,646 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\removed-files
[2018/01/10 17:00:24 | 000,000,899 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\softokn3.chk
[2018/01/10 17:00:24 | 000,181,712 | ---- | M] (Mozilla Foundation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\softokn3.dll
[2017/11/13 00:42:04 | 000,997,056 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\ucrtbase.dll
[2017/11/13 00:42:04 | 000,000,132 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\update-settings.ini
[2018/01/10 17:00:24 | 000,352,720 | ---- | M] (Mozilla Foundation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\updater.exe
[2017/11/12 17:42:26 | 000,001,273 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\updater.ini
[2017/11/13 00:42:04 | 000,087,888 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\vcruntime140.dll
[2018/01/10 17:00:24 | 071,162,320 | ---- | M] (Mozilla Foundation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\xul.dll
[2018/01/10 17:00:23 | 000,001,449 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\xul.dll.sig
[2018/01/01 19:25:41 | 000,289,115 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\browser\blocklist.xml
[2017/11/13 00:42:04 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\browser\chrome.manifest
[2017/11/12 17:18:42 | 000,000,917 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\browser\crashreporter-override.ini
[2018/01/10 17:00:25 | 034,399,999 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\browser\omni.ja
[2018/01/10 17:00:25 | 000,003,606 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi
[2018/01/10 17:00:25 | 001,435,934 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\browser\features\activity-stream@mozilla.org.xpi
[2018/01/10 17:00:25 | 000,008,734 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\browser\features\aushelper@mozilla.org.xpi
[2018/01/10 17:00:25 | 000,013,725 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\browser\features\e10srollout@mozilla.org.xpi
[2018/01/10 17:00:25 | 000,924,725 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\browser\features\firefox@getpocket.com.xpi
[2017/11/12 17:42:31 | 000,019,123 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\browser\features\followonsearch@mozilla.com.xpi
[2018/01/10 17:00:25 | 000,386,869 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\browser\features\formautofill@mozilla.org.xpi
[2018/01/10 17:00:25 | 000,557,785 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\browser\features\onboarding@mozilla.org.xpi
[2017/11/12 17:42:41 | 000,904,509 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\browser\features\screenshots@mozilla.org.xpi
[2018/01/10 17:00:25 | 000,370,060 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\browser\features\shield-recipe-client@mozilla.org.xpi
[2018/01/10 17:00:25 | 000,009,914 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\browser\features\webcompat@mozilla.org.xpi
[2017/11/13 00:42:04 | 000,022,674 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\browser\VisualElements\VisualElements_150.png
[2017/11/13 00:42:04 | 000,008,555 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\browser\VisualElements\VisualElements_70.png
[2017/11/13 00:42:04 | 000,000,245 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\defaults\pref\channel-prefs.js
[2017/11/12 17:18:42 | 000,335,109 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\dictionaries\fr.aff
[2017/11/12 17:18:42 | 001,199,613 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\dictionaries\fr.dic
[2017/11/13 00:42:04 | 001,227,260 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\fonts\EmojiOneMozilla.ttf
[2018/01/10 17:00:24 | 000,097,232 | ---- | M] (Mozilla Foundation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\gmp-clearkey\0.1\clearkey.dll
[2018/01/10 17:00:24 | 000,001,449 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\gmp-clearkey\0.1\clearkey.dll.sig
[2017/11/13 00:42:04 | 000,000,227 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\gmp-clearkey\0.1\manifest.json
[2018/01/10 17:00:24 | 000,897,120 | ---- | M] (Mozilla Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\uninstall\helper.exe
[2017/11/29 23:44:06 | 000,000,322 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\uninstall\shortcuts_log.ini
[2017/11/29 23:44:08 | 000,004,033 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\uninstall\uninstall.log
[2018/01/10 17:00:27 | 000,000,127 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJ5B010\uninstall\uninstall.update
[2017/10/12 06:54:46 | 000,012,251 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJLPWHX\readme_fr.html
[2017/10/12 06:54:46 | 000,011,937 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RJLPWHX\readme_fr.txt
[2017/01/02 03:48:36 | 000,000,318 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$ROI9I7H\10E6FBE4D921B475FA5FEC6E9A535A540D6FEED1
[2017/01/02 03:48:36 | 000,001,263 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$ROI9I7H\165F6EF40A81DD175FFAEA69E77ABFD30B27E71C
[2017/12/12 05:24:08 | 005,207,896 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$ROILFIT\vcredist_x64.exe
[2017/12/12 05:24:08 | 004,479,832 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$ROILFIT\vcredist_x86.exe
[2017/08/28 01:26:47 | 002,150,336 | ---- | M] (BitTorrent Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RUMU5Y2\3.5.0_43916.exe
[2017/09/28 21:43:55 | 001,982,144 | ---- | M] (BitTorrent Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RUMU5Y2\3.5.0_44090.exe
[2017/11/28 19:17:42 | 001,981,624 | ---- | M] (BitTorrent Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RUMU5Y2\3.5.0_44294.exe
[2017/12/26 23:49:37 | 001,981,624 | ---- | M] (BitTorrent Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RUMU5Y2\3.5.1_44332.exe
[2018/02/23 18:51:11 | 002,148,024 | ---- | M] (BitTorrent Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RUMU5Y2\3.5.3_44358.exe
[2018/04/17 15:27:47 | 001,983,672 | ---- | M] (BitTorrent Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RUMU5Y2\3.5.3_44396.exe
[2018/06/21 03:01:14 | 002,936,416 | ---- | M] (BitTorrent Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RUMU5Y2\3.5.3_44428.exe
[2017/08/28 01:26:50 | 000,396,992 | ---- | M] (BitTorrent Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RUMU5Y2\3.5.0_43916\utorrentie.exe
[2017/09/28 22:06:00 | 000,396,992 | ---- | M] (BitTorrent Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RUMU5Y2\3.5.0_44090\utorrentie.exe
[2017/11/28 20:06:27 | 000,396,984 | ---- | M] (BitTorrent Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RUMU5Y2\3.5.0_44294\utorrentie.exe
[2017/12/27 00:04:39 | 000,396,984 | ---- | M] (BitTorrent Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RUMU5Y2\3.5.1_44332\utorrentie.exe
[2018/02/23 23:15:43 | 000,396,984 | ---- | M] (BitTorrent Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RUMU5Y2\3.5.3_44358\utorrentie.exe
[2018/04/17 17:36:10 | 000,396,984 | ---- | M] (BitTorrent Inc.) -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RUMU5Y2\3.5.3_44396\utorrentie.exe
[2017/08/26 18:08:58 | 000,000,524 | -HS- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RWCSCQZ\desktop.ini
[2017/08/26 18:08:58 | 000,000,248 | RH-- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RWCSCQZ\Everywhere.search-ms
[2017/01/02 03:55:11 | 000,000,248 | RH-- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RWCSCQZ\Indexed Locations.search-ms
[2017/08/11 20:59:51 | 000,000,484 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-2109558472-4217242841-2029953956-1001\$RYQB6VH.chk\sths\ac3b9aed7fa9674757159e6d7d575672f9d98100941e9bdeffeca1313b75782d.sth
[2009/07/14 07:08:49 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2009/07/14 07:08:49 | 000,032,496 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2016/12/31 03:18:17 | 000,000,274 | ---- | C] () -- C:\Windows\Tasks\Opera_helper.job
[2017/01/02 05:37:39 | 000,001,180 | ---- | C] () -- C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
[2017/01/02 05:37:39 | 000,001,184 | ---- | C] () -- C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
[2017/01/16 21:08:15 | 000,000,274 | ---- | C] () -- C:\Windows\Tasks\{747988CB-369A-67E1-79AD-1F97CF92EB24}.job
[2017/01/16 21:08:16 | 000,000,986 | ---- | C] () -- C:\Windows\Tasks\Secured Yahoo Powered riser.job
[2018/01/21 17:21:27 | 000,000,274 | ---- | C] () -- C:\Windows\Tasks\{02005ADA-C75C-1CE7-E1A1-7E7803BFF895}.job

< End of report >

Publicité


Signaler le contenu de ce document

Publicité