0% found this document useful (0 votes)
161 views39 pages

Combo Fix

The document summarizes the deletion of files and folders by the ComboFix tool. It lists over 100 folders in the C:\ProgramData directory that were deleted, as well as files and folders deleted from the user's AppData\Roaming folder related to a program called DRPSu that appears to be adware or potentially unwanted programs. The deletions indicate that ComboFix removed malware or unwanted programs from the system.

Uploaded by

Tanisha Jackson
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
161 views39 pages

Combo Fix

The document summarizes the deletion of files and folders by the ComboFix tool. It lists over 100 folders in the C:\ProgramData directory that were deleted, as well as files and folders deleted from the user's AppData\Roaming folder related to a program called DRPSu that appears to be adware or potentially unwanted programs. The deletions indicate that ComboFix removed malware or unwanted programs from the system.

Uploaded by

Tanisha Jackson
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
You are on page 1/ 39

ComboFix 16-01-19.01 - cosmo 01/21/2016 3:08.1.

8 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.16061.8459 [GMT -8:00]
Running from: c:\users\cosmo\Downloads\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other
Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\{0209395A-8E4A-48E1-A5E3-C830292F263C}\mia.lib
c:\programdata\{0221FDDB-41E3-4971-AC93-5048F8D7CAAC}\mia.lib
c:\programdata\{03149E88-061F-4C01-98FF-736811F5AEF5}\mia.lib
c:\programdata\{03697879-2B80-4810-9B4D-D8EF1EE777F0}\mia.lib
c:\programdata\{15C74247-7198-4F43-B5A7-4D9278F308F6}\mia.lib
c:\programdata\{18869C94-495B-4D97-8C75-E405CF6509CB}\mia.lib
c:\programdata\{1C7A6EB7-BED0-4444-B0DA-4BFDCF83C380}\mia.lib
c:\programdata\{1CCB05D7-901D-4CCB-816F-73AC0098D30A}\mia.lib
c:\programdata\{229D9A22-9BEA-4D2B-813E-85E0FACBA99C}\mia.lib
c:\programdata\{2FF04994-9599-464E-AD99-B09CBE2122AE}\mia.lib
c:\programdata\{34163C5E-1AE4-49D8-B5F9-A3C2422AAB96}\mia.lib
c:\programdata\{35B46D49-85E2-40EA-8EC6-43B281EDD8E7}\mia.lib
c:\programdata\{3DFBC806-D62A-4312-81FF-5F343DDCB5DC}\mia.lib
c:\programdata\{43D1C1F4-8E90-4B5F-8388-D1E602AABF0E}\mia.lib
c:\programdata\{499D67BC-046E-4931-8BFB-D5ABB500E67C}\mia.lib
c:\programdata\{4AD6F65B-2A15-4CFF-9AF7-830F277D0157}\mia.lib
c:\programdata\{4C01754A-32F9-4A34-8B9F-E06DD553B755}\mia.lib
c:\programdata\{4C99B1DC-0B59-43A6-8537-9CE9286685A3}\mia.lib
c:\programdata\{5309003E-4102-4141-A0C9-7507F0E10F52}\mia.lib
c:\programdata\{5A23829C-A66E-47B0-AD50-21A3FFE6C325}\mia.lib
c:\programdata\{6032CB49-DE54-4192-9F71-65859D0B544F}\mia.lib
c:\programdata\{624486AF-AD5B-4BB3-BEEE-A0D2D4D112DF}\mia.lib
c:\programdata\{63E9A1A4-8FB4-4448-B7E1-E635AD5344FF}\mia.lib
c:\programdata\{63F2E427-F976-4EE0-BB21-8FA7DAC2E7F2}\mia.lib
c:\programdata\{6495CC1D-C10B-40C5-A92B-241A2B2C8D20}\mia.lib
c:\programdata\{6B3E9A08-404E-4FBF-A80D-1E9DA9E75171}\mia.lib
c:\programdata\{6B991D2A-5E91-44B4-BE28-CFDCED1835AB}\mia.lib
c:\programdata\{6F97656F-AAA1-4E21-96D6-52E5526E59D2}\mia.lib
c:\programdata\{727F248C-CA81-4A68-8E01-27236ED99D98}\mia.lib
c:\programdata\{786FEDEA-8E71-4900-8D2F-40933D86B376}\mia.lib
c:\programdata\{78915E0A-25F8-47A2-9793-CEBC2D28F274}\mia.lib
c:\programdata\{7AFFCFD3-F022-420B-8E87-BBAED1C983C8}\mia.lib
c:\programdata\{7B7672F5-5EA2-4D83-BC77-1AFCA8846266}\mia.lib
c:\programdata\{7C702C5F-ADE3-4D28-9619-90BA76D4E1ED}\mia.lib
c:\programdata\{7E15FB3A-A743-4BAD-9286-E6F67959668B}\mia.lib
c:\programdata\{7FC6C6B3-C2D5-4F17-BBEF-A11135E1A668}\mia.lib
c:\programdata\{80A0A482-175E-4DE8-9D32-C8C8463D1362}\mia.lib
c:\programdata\{80E1859D-389E-4D4B-8377-121DB4A144EA}\mia.lib
c:\programdata\{81B3FE58-8826-44EC-8271-083D201CEA19}\mia.lib
c:\programdata\{849C3EA7-6C44-4D64-BFD2-FC5AF841BE83}\mia.lib
c:\programdata\{879F8AE4-E6E3-47A2-864B-EAF51C5ACC43}\mia.lib
c:\programdata\{87A1E31E-1C63-4A99-AEEA-EA57A3043C1D}\mia.lib
c:\programdata\{8A9976F0-1DB6-4A1D-823B-E9E459F6EE39}\mia.lib
c:\programdata\{926BF989-2A51-492D-8A6A-E9D533417C34}\mia.lib
c:\programdata\{929A2A2C-EEDF-4FD7-830C-278E194D1B53}\mia.lib
c:\programdata\{93015F0A-7AF2-4308-A5B3-13D4FCE429C6}\mia.lib
c:\programdata\{98F83ED2-DF89-465B-8EB3-F87E179CFA56}\mia.lib
c:\programdata\{9C588B44-42B6-434D-90BD-824BBB1F328A}\mia.lib
c:\programdata\{A360C0DF-3552-4969-AF3D-A6533A68ACA5}\mia.lib
c:\programdata\{A6377726-7317-464A-87EB-693294E9F383}\mia.lib
c:\programdata\{A793ECF9-34FC-47F0-8CBE-0B3DEA468C01}\mia.lib
c:\programdata\{A9FC06D6-E75C-4DA2-B8D2-8D91C1A269C3}\mia.lib
c:\programdata\{AD7B6000-2063-4CF8-A07D-49A34A4164E7}\mia.lib
c:\programdata\{B0CAD5CC-867E-473E-B55F-339F9635A45D}\mia.lib
c:\programdata\{B0DF9098-245E-479F-A4ED-B5F91EA4948B}\mia.lib
c:\programdata\{B49C92CB-1A73-4A41-A84C-5091582E7AA8}\mia.lib
c:\programdata\{B54CEF12-4612-4E77-B06C-403C662468E7}\mia.lib
c:\programdata\{B7072B15-6E80-42FF-A9AE-4E62AF2B2418}\mia.lib
c:\programdata\{B7CF1107-3BD9-48BA-BC77-54B909022641}\mia.lib
c:\programdata\{B8AB470F-A90B-4652-A8F5-160A08FD7411}\mia.lib
c:\programdata\{B96A0118-1095-4E34-9C27-D87092B77F67}\mia.lib
c:\programdata\{BA0B7444-2ABA-463C-862A-7EC7F0AD0FA2}\mia.lib
c:\programdata\{BCE70080-8C44-4FE4-9CEE-9ABE71A36E7E}\mia.lib
c:\programdata\{C5CAF473-C900-4049-BCE5-A93E0EBA7EF2}\mia.lib
c:\programdata\{C693A367-F08F-4F42-A5DE-8996D6AC24F0}\mia.lib
c:\programdata\{CB28D9D3-6B5D-4AFA-BA37-B4AFAAAF71B9}\mia.lib
c:\programdata\{D3CD7CDD-9759-4CF4-BE92-BA89914360B5}\mia.lib
c:\programdata\{D53B5F71-B715-494C-AFD4-BB0C94C787E5}\mia.lib
c:\programdata\{D5E8D2A2-A2FF-4A0C-A4F7-E8EF5C9B29EA}\mia.lib
c:\programdata\{DB1D6CD1-3172-48C0-B63A-490B0D2C6D72}\mia.lib
c:\programdata\{DEBC0451-D249-4B4C-B907-F6510028BC75}\mia.lib
c:\programdata\{DFAB8828-7DA2-4573-A254-15D802A10A7E}\mia.lib
c:\programdata\{E051D9C8-9503-489B-8E90-21CEB1DF11C1}\mia.lib
c:\programdata\{E2A3D3D3-946E-4752-90FB-AF37CC248734}\mia.lib
c:\programdata\{E753D955-673D-4851-B06F-9A9D0C44C02C}\mia.lib
c:\programdata\{ECD5EDEB-48B5-47BB-BD2E-1F95422B2C33}\mia.lib
c:\programdata\{EFEC7DCC-2F91-4828-B49D-8506F9F0D9FF}\mia.lib
c:\programdata\{F036CC43-6BE8-4CBD-91C3-76F4BC8FFD6F}\mia.lib
c:\programdata\{F2026C51-8509-47B4-816D-CCD2DB993FC1}\mia.lib
c:\programdata\{F409EA92-6713-4D2D-AF88-0C51B1CF1D2A}\mia.lib
c:\programdata\{F4C30B44-15B7-482B-8B80-38AA0AB0956A}\mia.lib
c:\programdata\{F57C376F-E7ED-4527-9EE2-4D50799418BC}\mia.lib
c:\programdata\{F92C204F-6C39-4D56-B100-EC929C871966}\mia.lib
c:\programdata\{FB5C60A0-15D1-4DEF-A6EF-3366AC37909F}\mia.lib
c:\users\cosmo\AppData\Roaming\DRPSu
c:\users\cosmo\AppData\Roaming\DRPSu\diagnostics\soft
c:\users\cosmo\AppData\Roaming\DRPSu\DRIVERS\Asmedia_1.16.29.1-WinAll-1.14.1-
drp.zip
c:\users\cosmo\AppData\Roaming\DRPSu\DRIVERS\Asmedia_1.16.29.1-WinAll-drp.zip
c:\users\cosmo\AppData\Roaming\DRPSu\DRIVERS\Intel-FORCED-Chipset-NTx64-10.1.1.13-
drp.zip
c:\users\cosmo\AppData\Roaming\DRPSu\DRIVERS\Intel_Chipset_9.3.0-FORCED-7x64-USB-
drp.zip
c:\users\cosmo\AppData\Roaming\DRPSu\DrvUpdater.exe
c:\users\cosmo\AppData\Roaming\DRPSu\Logs\log___2016-01-18-07-41-12.html
c:\users\cosmo\AppData\Roaming\DRPSu\Logs\log___2016-01-18-07-46-59.html
c:\users\cosmo\AppData\Roaming\DRPSu\Logs\log___2016-01-18-07-47-13.html
c:\users\cosmo\AppData\Roaming\DRPSu\Logs\log___2016-01-18-07-52-59.html
c:\users\cosmo\AppData\Roaming\DRPSu\PROGRAMS\OperaBlink.exe
c:\users\cosmo\AppData\Roaming\DRPSu\temp\wget_finished_15817.txt
c:\users\cosmo\AppData\Roaming\DRPSu\temp\wget_finished_1584.txt
c:\users\cosmo\AppData\Roaming\DRPSu\temp\wget_finished_22685.txt
c:\users\cosmo\AppData\Roaming\DRPSu\temp\wget_finished_32080.txt
c:\users\cosmo\AppData\Roaming\DRPSu\temp\wget_finished_35197.txt
c:\users\cosmo\AppData\Roaming\DRPSu\temp\wget_finished_4710.txt
c:\users\cosmo\AppData\Roaming\DRPSu\temp\wget_finished_50681.txt
c:\users\cosmo\AppData\Roaming\DRPSu\temp\wget_finished_52049.txt
c:\users\cosmo\AppData\Roaming\DRPSu\temp\wget_finished_54157.txt
c:\users\cosmo\AppData\Roaming\DRPSu\temp\wget_finished_54684.txt
c:\users\cosmo\AppData\Roaming\DRPSu\temp\wget_finished_56493.txt
c:\users\cosmo\AppData\Roaming\DRPSu\temp\wget_finished_58915.txt
c:\users\cosmo\AppData\Roaming\DRPSu\temp\wget_finished_61379.txt
c:\users\cosmo\AppData\Roaming\DRPSu\temp\wget_finished_82291.txt
c:\users\cosmo\AppData\Roaming\DRPSu\temp\wget_finished_85836.txt
c:\users\cosmo\AppData\Roaming\DRPSu\temp\wget_finished_85877.txt
c:\users\cosmo\AppData\Roaming\DRPSu\temp\wget_finished_92492.txt
c:\users\cosmo\AppData\Roaming\DRPSu\temp\wget_finished_9927.txt
c:\users\cosmo\AppData\Roaming\DRPSu\temp\wget_log_15817.log
c:\users\cosmo\AppData\Roaming\DRPSu\temp\wget_log_1584.log
c:\users\cosmo\AppData\Roaming\DRPSu\temp\wget_log_22685.log
c:\users\cosmo\AppData\Roaming\DRPSu\temp\wget_log_32080.log
c:\users\cosmo\AppData\Roaming\DRPSu\temp\wget_log_35197.log
c:\users\cosmo\AppData\Roaming\DRPSu\temp\wget_log_4710.log
c:\users\cosmo\AppData\Roaming\DRPSu\temp\wget_log_50681.log
c:\users\cosmo\AppData\Roaming\DRPSu\temp\wget_log_52049.log
c:\users\cosmo\AppData\Roaming\DRPSu\temp\wget_log_54157.log
c:\users\cosmo\AppData\Roaming\DRPSu\temp\wget_log_54684.log
c:\users\cosmo\AppData\Roaming\DRPSu\temp\wget_log_56493.log
c:\users\cosmo\AppData\Roaming\DRPSu\temp\wget_log_58915.log
c:\users\cosmo\AppData\Roaming\DRPSu\temp\wget_log_61379.log
c:\users\cosmo\AppData\Roaming\DRPSu\temp\wget_log_82291.log
c:\users\cosmo\AppData\Roaming\DRPSu\temp\wget_log_85836.log
c:\users\cosmo\AppData\Roaming\DRPSu\temp\wget_log_85877.log
c:\users\cosmo\AppData\Roaming\DRPSu\temp\wget_log_92492.log
c:\users\cosmo\AppData\Roaming\DRPSu\temp\wget_log_9927.log
c:\users\cosmo\SetupChipset.exe
c:\windows\SysWow64\hookdll.dll
.
----- File Replicators -----
.
c:\program files (x86)\Google\Update\1.3.29.1\GoogleUpdateSetup.exe
c:\programdata\AudioUTOPiA\Uninstall64.exe
c:\users\All Users\AudioUTOPiA\Uninstall64.exe
c:\users\cosmo\AppData\Local\Apps\2.0\L657HWCH.HB1\R6VOJ8YD.TAK\clic...exe_86fd5b6b
43e66935_0001.0003_none_f26368b358f225e4\GoogleUpdateSetup.exe
c:\users\cosmo\AppData\Local\Apps\2.0\L657HWCH.HB1\R6VOJ8YD.TAK\goog...app_86fd5b6b
43e66935_0001.0003_b78cbae13c700816\GoogleUpdateSetup.exe
c:\users\cosmo\Intel_Chipset_V9301019_LK_XPWin7\AsusSetup.exe
c:\users\cosmo\Intel_Chipset_V9301019_LK_XPWin7\Driver\AsusSetup.exe
c:\users\cosmo\Intel_Chipset_V9301019_LK_XPWin7\Driver\Chipset\AsusSetup.exe
c:\users\cosmo\Intel_Chipset_V9301019_LK_XPWin7\Driver\hotfix\AsusSetup.exe
c:\users\cosmo\Intel_Chipset_V9301019_LK_XPWin7\Driver\hotfix\KB2505454_x64\AsusSet
up.exe
c:\users\cosmo\Intel_Chipset_V9301019_LK_XPWin7\Driver\Usb\32\AsusSetup.exe
c:\users\cosmo\Intel_Chipset_V9301019_LK_XPWin7\Driver\Usb\64\AsusSetup.exe
c:\users\cosmo\Intel_Chipset_V9301019_LK_XPWin7\Driver\Usb\AsusSetup.exe
c:\users\cosmo\Intel_Chipset_V9301019_LK_XPWin7\Driver\Usbcopy\AsusSetup.exe
c:\users\cosmo\Intel_Rapid_V11101006_V11501207_XPWin7_8\Install\AsusSetup.exe
c:\users\cosmo\Intel_Rapid_V11101006_V11501207_XPWin7_8\Install\Others\AsusSetup.ex
e
c:\users\cosmo\Intel_Rapid_V11101006_V11501207_XPWin7_8\Install\Win8\AsusSetup.exe
c:\users\cosmo\Intel_Rapid_V11101006_V11501207_XPWin7_8\Makedisk\AsusSetup.exe
c:\windows.old\Documents and Settings\All Users\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\MAGIX\Sequoia 13\zip.exe
c:\windows.old\Documents and Settings\All Users\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application Data\ASUS\AI
Suite II\Setup.exe
c:\windows.old\Documents and Settings\All Users\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\AudioUTOPiA\Uninstall64.exe
c:\windows.old\Documents and Settings\All Users\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\MAGIX\Sequoia 13\unzip.exe
c:\windows.old\Documents and Settings\All Users\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\MAGIX\Sequoia 13\zip.exe
c:\windows.old\Documents and Settings\All Users\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\ASUS\AI Suite II\Setup.exe
c:\windows.old\Documents and Settings\All Users\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\AudioUTOPiA\Uninstall64.exe
c:\windows.old\Documents and Settings\All Users\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\MAGIX\Sequoia 13\unzip.exe
c:\windows.old\Documents and Settings\All Users\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\MAGIX\Sequoia 13\zip.exe
c:\windows.old\Documents and Settings\All Users\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\ASUS\AI Suite II\Setup.exe
c:\windows.old\Documents and Settings\All Users\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\AudioUTOPiA\Uninstall64.exe
c:\windows.old\Documents and Settings\All Users\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\MAGIX\Sequoia 13\unzip.exe
c:\windows.old\Documents and Settings\All Users\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\MAGIX\Sequoia 13\zip.exe
c:\windows.old\Documents and Settings\All Users\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\ASUS\AI Suite II\Setup.exe
c:\windows.old\Documents and Settings\All Users\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\AudioUTOPiA\Uninstall64.exe
c:\windows.old\Documents and Settings\All Users\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\MAGIX\Sequoia 13\unzip.exe
c:\windows.old\Documents and Settings\All Users\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\MAGIX\Sequoia 13\zip.exe
c:\windows.old\Documents and Settings\All Users\Application Data\Application
Data\Application Data\Application Data\Application Data\Application Data\ASUS\AI
Suite II\Setup.exe
c:\windows.old\Documents and Settings\All Users\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\AudioUTOPiA\Uninstall64.exe
c:\windows.old\Documents and Settings\All Users\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\MAGIX\Sequoia 13\unzip.exe
c:\windows.old\Documents and Settings\All Users\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\MAGIX\Sequoia 13\zip.exe
c:\windows.old\Documents and Settings\All Users\Application Data\Application
Data\Application Data\Application Data\Application Data\ASUS\AI Suite II\Setup.exe
c:\windows.old\Documents and Settings\All Users\Application Data\Application
Data\Application Data\Application Data\Application Data\AudioUTOPiA\Uninstall64.exe
c:\windows.old\Documents and Settings\All Users\Application Data\Application
Data\Application Data\Application Data\Application Data\MAGIX\Sequoia 13\unzip.exe
c:\windows.old\Documents and Settings\All Users\Application Data\Application
Data\Application Data\Application Data\Application Data\MAGIX\Sequoia 13\zip.exe
c:\windows.old\Documents and Settings\All Users\Application Data\Application
Data\Application Data\Application Data\ASUS\AI Suite II\Setup.exe
c:\windows.old\Documents and Settings\All Users\Application Data\Application
Data\Application Data\Application Data\AudioUTOPiA\Uninstall64.exe
c:\windows.old\Documents and Settings\All Users\Application Data\Application
Data\Application Data\Application Data\MAGIX\Sequoia 13\unzip.exe
c:\windows.old\Documents and Settings\All Users\Application Data\Application
Data\Application Data\Application Data\MAGIX\Sequoia 13\zip.exe
c:\windows.old\Documents and Settings\All Users\Application Data\Application
Data\Application Data\ASUS\AI Suite II\Setup.exe
c:\windows.old\Documents and Settings\All Users\Application Data\Application
Data\Application Data\AudioUTOPiA\Uninstall64.exe
c:\windows.old\Documents and Settings\All Users\Application Data\Application
Data\Application Data\MAGIX\Sequoia 13\unzip.exe
c:\windows.old\Documents and Settings\All Users\Application Data\Application
Data\Application Data\MAGIX\Sequoia 13\zip.exe
c:\windows.old\Documents and Settings\All Users\Application Data\Application
Data\ASUS\AI Suite II\Setup.exe
c:\windows.old\Documents and Settings\All Users\Application Data\Application
Data\AudioUTOPiA\Uninstall64.exe
c:\windows.old\Documents and Settings\All Users\Application Data\Application
Data\MAGIX\Sequoia 13\unzip.exe
c:\windows.old\Documents and Settings\All Users\Application Data\Application
Data\MAGIX\Sequoia 13\zip.exe
c:\windows.old\Documents and Settings\All Users\Application Data\ASUS\AI Suite
II\Setup.exe
c:\windows.old\Documents and Settings\All Users\Application
Data\AudioUTOPiA\Uninstall64.exe
c:\windows.old\Documents and Settings\All Users\Application Data\MAGIX\Sequoia
13\unzip.exe
c:\windows.old\Documents and Settings\All Users\Application Data\MAGIX\Sequoia
13\zip.exe
c:\windows.old\Documents and Settings\All Users\ASUS\AI Suite II\Setup.exe
c:\windows.old\Documents and Settings\All Users\AudioUTOPiA\Uninstall64.exe
c:\windows.old\Documents and Settings\All Users\MAGIX\Sequoia 13\unzip.exe
c:\windows.old\Documents and Settings\All Users\MAGIX\Sequoia 13\zip.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{55EABE31-72A9-4FC6-
A18F-2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{5E9E7411-1CEB-433E-
87A3-9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{680AFC97-4DCE-4909-
A614-44065904FD7A}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{7283AB5C-0307-4427-
81CD-21F875B08934}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-
81A8-3A50078C2D58}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-
81A8-3A50078C2D58}\ISBEWI64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-
81A8-3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Temp\{55EABE31-72A9-4FC6-A18F-
2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Temp\{5E9E7411-1CEB-433E-87A3-
9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Temp\{680AFC97-4DCE-4909-A614-
44065904FD7A}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Temp\{7283AB5C-0307-4427-81CD-
21F875B08934}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-
3A50078C2D58}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-
3A50078C2D58}\ISBEWI64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-
3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Temp\{55EABE31-72A9-4FC6-A18F-2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Temp\{5E9E7411-1CEB-433E-87A3-9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Temp\{680AFC97-4DCE-4909-A614-44065904FD7A}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Temp\{7283AB5C-0307-4427-81CD-21F875B08934}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEWI64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application Data\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\goog...app_86fd5b6b43e66935_0001.0003_b78cb
ae13c700816\GoogleUpdateSetup.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application Data\Application Data\Temp\
{55EABE31-72A9-4FC6-A18F-2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application Data\Application Data\Temp\
{5E9E7411-1CEB-433E-87A3-9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application Data\Application Data\Temp\
{680AFC97-4DCE-4909-A614-44065904FD7A}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application Data\Application Data\Temp\
{7283AB5C-0307-4427-81CD-21F875B08934}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application Data\Application Data\Temp\
{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application Data\Application Data\Temp\
{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEWI64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application Data\Application Data\Temp\
{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\clic...exe_86fd5b6b43e66935_0001.0003_none_
f26368b358f225e4\GoogleUpdateSetup.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\goog...app_86fd5b6b43e66935_0001.0003_b78cb
ae13c700816\GoogleUpdateSetup.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application Data\Temp\{55EABE31-72A9-4FC6-
A18F-2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application Data\Temp\{5E9E7411-1CEB-433E-
87A3-9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application Data\Temp\{680AFC97-4DCE-4909-
A614-44065904FD7A}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application Data\Temp\{7283AB5C-0307-4427-
81CD-21F875B08934}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-
81A8-3A50078C2D58}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-
81A8-3A50078C2D58}\ISBEWI64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-
81A8-3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\clic...exe_86fd5b6b43e66935_0001.0003_none_
f26368b358f225e4\GoogleUpdateSetup.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\goog...app_86fd5b6b43e66935_0001.0003_b78cb
ae13c700816\GoogleUpdateSetup.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Temp\{55EABE31-72A9-4FC6-A18F-
2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Temp\{5E9E7411-1CEB-433E-87A3-
9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Temp\{680AFC97-4DCE-4909-A614-
44065904FD7A}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Temp\{7283AB5C-0307-4427-81CD-
21F875B08934}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-
3A50078C2D58}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-
3A50078C2D58}\ISBEWI64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-
3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\clic...exe_86fd5b6b43e66935_0001.0003_none_
f26368b358f225e4\GoogleUpdateSetup.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\goog...app_86fd5b6b43e66935_0001.0003_b78cb
ae13c700816\GoogleUpdateSetup.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Temp\{55EABE31-72A9-4FC6-A18F-2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Temp\{5E9E7411-1CEB-433E-87A3-9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Temp\{680AFC97-4DCE-4909-A614-44065904FD7A}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Temp\{7283AB5C-0307-4427-81CD-21F875B08934}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEWI64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\clic...exe_86fd5b6b43e66935_0001.0003_none_
f26368b358f225e4\GoogleUpdateSetup.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\goog...app_86fd5b6b43e66935_0001.0003_b78cb
ae13c700816\GoogleUpdateSetup.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Temp\{55EABE31-72A9-4FC6-A18F-2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Temp\{5E9E7411-1CEB-433E-87A3-9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Temp\{680AFC97-4DCE-4909-A614-44065904FD7A}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Temp\{7283AB5C-0307-4427-81CD-21F875B08934}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEWI64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Documents and Settings\cosmic
law\AppData\Local\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\clic...exe_86fd5b6b43e66935_00
01.0003_none_f26368b358f225e4\GoogleUpdateSetup.exe
c:\windows.old\Documents and Settings\cosmic
law\AppData\Local\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\goog...app_86fd5b6b43e66935_00
01.0003_b78cbae13c700816\GoogleUpdateSetup.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Temp\{55EABE31-72A9-
4FC6-A18F-2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Temp\{5E9E7411-1CEB-
433E-87A3-9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Temp\{680AFC97-4DCE-
4909-A614-44065904FD7A}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Temp\{7283AB5C-0307-
4427-81CD-21F875B08934}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Temp\{B8F58690-1DAB-
4B77-81A8-3A50078C2D58}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Temp\{B8F58690-1DAB-
4B77-81A8-3A50078C2D58}\ISBEWI64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Temp\{B8F58690-1DAB-
4B77-81A8-3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Documents and Settings\cosmic
law\Intel_Rapid_V11101006_V11501207_XPWin7_8\Install\AsusSetup.exe
c:\windows.old\Documents and Settings\cosmic
law\Intel_Rapid_V11101006_V11501207_XPWin7_8\Install\Others\AsusSetup.exe
c:\windows.old\Documents and Settings\cosmic
law\Intel_Rapid_V11101006_V11501207_XPWin7_8\Install\Win8\AsusSetup.exe
c:\windows.old\Documents and Settings\cosmic
law\Intel_Rapid_V11101006_V11501207_XPWin7_8\Makedisk\AsusSetup.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{55EABE31-72A9-4FC6-
A18F-2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{5E9E7411-1CEB-433E-
87A3-9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{680AFC97-4DCE-4909-
A614-44065904FD7A}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{7283AB5C-0307-4427-
81CD-21F875B08934}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-
81A8-3A50078C2D58}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-
81A8-3A50078C2D58}\ISBEWI64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-
81A8-3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Temp\{55EABE31-72A9-4FC6-A18F-
2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Temp\{5E9E7411-1CEB-433E-87A3-
9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Temp\{680AFC97-4DCE-4909-A614-
44065904FD7A}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Temp\{7283AB5C-0307-4427-81CD-
21F875B08934}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-
3A50078C2D58}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-
3A50078C2D58}\ISBEWI64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-
3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Temp\{55EABE31-72A9-4FC6-A18F-2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Temp\{5E9E7411-1CEB-433E-87A3-9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Temp\{680AFC97-4DCE-4909-A614-44065904FD7A}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Temp\{7283AB5C-0307-4427-81CD-21F875B08934}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEWI64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Application Data\Application Data\Temp\
{55EABE31-72A9-4FC6-A18F-2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Application Data\Application Data\Temp\
{5E9E7411-1CEB-433E-87A3-9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Application Data\Application Data\Temp\
{680AFC97-4DCE-4909-A614-44065904FD7A}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Application Data\Application Data\Temp\
{7283AB5C-0307-4427-81CD-21F875B08934}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Application Data\Application Data\Temp\
{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Application Data\Application Data\Temp\
{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEWI64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Application Data\Application Data\Temp\
{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\clic...exe_86fd5b6b43e66935_0001.0003_none_
f26368b358f225e4\GoogleUpdateSetup.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\goog...app_86fd5b6b43e66935_0001.0003_b78cb
ae13c700816\GoogleUpdateSetup.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Application Data\Temp\{55EABE31-72A9-4FC6-
A18F-2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Application Data\Temp\{5E9E7411-1CEB-433E-
87A3-9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Application Data\Temp\{680AFC97-4DCE-4909-
A614-44065904FD7A}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Application Data\Temp\{7283AB5C-0307-4427-
81CD-21F875B08934}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-
81A8-3A50078C2D58}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-
81A8-3A50078C2D58}\ISBEWI64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-
81A8-3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\clic...exe_86fd5b6b43e66935_0001.0003_none_
f26368b358f225e4\GoogleUpdateSetup.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\goog...app_86fd5b6b43e66935_0001.0003_b78cb
ae13c700816\GoogleUpdateSetup.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Temp\{55EABE31-72A9-4FC6-A18F-
2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Temp\{5E9E7411-1CEB-433E-87A3-
9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Temp\{680AFC97-4DCE-4909-A614-
44065904FD7A}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Temp\{7283AB5C-0307-4427-81CD-
21F875B08934}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-
3A50078C2D58}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-
3A50078C2D58}\ISBEWI64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-
3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\clic...exe_86fd5b6b43e66935_0001.0003_none_
f26368b358f225e4\GoogleUpdateSetup.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\goog...app_86fd5b6b43e66935_0001.0003_b78cb
ae13c700816\GoogleUpdateSetup.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Temp\{55EABE31-72A9-4FC6-A18F-2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Temp\{5E9E7411-1CEB-433E-87A3-9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Temp\{680AFC97-4DCE-4909-A614-44065904FD7A}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Temp\{7283AB5C-0307-4427-81CD-21F875B08934}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEWI64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\clic...exe_86fd5b6b43e66935_0001.0003_none_
f26368b358f225e4\GoogleUpdateSetup.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\goog...app_86fd5b6b43e66935_0001.0003_b78cb
ae13c700816\GoogleUpdateSetup.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Temp\{55EABE31-72A9-4FC6-A18F-2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Temp\{5E9E7411-1CEB-433E-87A3-9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Temp\{680AFC97-4DCE-4909-A614-44065904FD7A}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Temp\{7283AB5C-0307-4427-81CD-21F875B08934}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEWI64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Documents and Settings\cosmic law\Local
Settings\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\clic...exe_86fd5b6b43e66935_0001.0003_n
one_f26368b358f225e4\GoogleUpdateSetup.exe
c:\windows.old\Documents and Settings\cosmic law\Local
Settings\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\goog...app_86fd5b6b43e66935_0001.0003_b
78cbae13c700816\GoogleUpdateSetup.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Temp\{55EABE31-
72A9-4FC6-A18F-2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Temp\{5E9E7411-
1CEB-433E-87A3-9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Temp\{680AFC97-
4DCE-4909-A614-44065904FD7A}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Temp\{7283AB5C-
0307-4427-81CD-21F875B08934}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Temp\{B8F58690-
1DAB-4B77-81A8-3A50078C2D58}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Temp\{B8F58690-
1DAB-4B77-81A8-3A50078C2D58}\ISBEWI64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Temp\{B8F58690-
1DAB-4B77-81A8-3A50078C2D58}\ISBEWX64.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\ASUS\AI Suite II\Setup.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\AudioUTOPiA\Uninstall64.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\MAGIX\Sequoia 13\unzip.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\MAGIX\Sequoia 13\zip.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application Data\ASUS\AI
Suite II\Setup.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\AudioUTOPiA\Uninstall64.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\MAGIX\Sequoia 13\unzip.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\MAGIX\Sequoia 13\zip.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\ASUS\AI Suite II\Setup.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\AudioUTOPiA\Uninstall64.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\MAGIX\Sequoia 13\unzip.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\MAGIX\Sequoia 13\zip.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\ASUS\AI Suite II\Setup.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\AudioUTOPiA\Uninstall64.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\MAGIX\Sequoia 13\unzip.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\MAGIX\Sequoia 13\zip.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\ASUS\AI Suite II\Setup.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\AudioUTOPiA\Uninstall64.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\MAGIX\Sequoia 13\unzip.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\MAGIX\Sequoia 13\zip.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application Data\ASUS\AI
Suite II\Setup.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\AudioUTOPiA\Uninstall64.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\MAGIX\Sequoia 13\unzip.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\MAGIX\Sequoia 13\zip.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\ASUS\AI Suite II\Setup.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\AudioUTOPiA\Uninstall64.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\MAGIX\Sequoia 13\unzip.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\MAGIX\Sequoia 13\zip.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\Application Data\Application Data\ASUS\AI Suite II\Setup.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\Application Data\Application Data\AudioUTOPiA\Uninstall64.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\Application Data\Application Data\MAGIX\Sequoia 13\unzip.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\Application Data\Application Data\MAGIX\Sequoia 13\zip.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\Application Data\ASUS\AI Suite II\Setup.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\Application Data\AudioUTOPiA\Uninstall64.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\Application Data\MAGIX\Sequoia 13\unzip.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\Application Data\MAGIX\Sequoia 13\zip.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\ASUS\AI Suite II\Setup.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\AudioUTOPiA\Uninstall64.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\MAGIX\Sequoia 13\unzip.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Data\MAGIX\Sequoia 13\zip.exe
c:\windows.old\ProgramData\Application Data\Application Data\ASUS\AI Suite
II\Setup.exe
c:\windows.old\ProgramData\Application Data\Application
Data\AudioUTOPiA\Uninstall64.exe
c:\windows.old\ProgramData\Application Data\Application Data\MAGIX\Sequoia
13\unzip.exe
c:\windows.old\ProgramData\Application Data\Application Data\MAGIX\Sequoia
13\zip.exe
c:\windows.old\ProgramData\Application Data\ASUS\AI Suite II\Setup.exe
c:\windows.old\ProgramData\Application Data\AudioUTOPiA\Uninstall64.exe
c:\windows.old\ProgramData\Application Data\MAGIX\Sequoia 13\unzip.exe
c:\windows.old\ProgramData\Application Data\MAGIX\Sequoia 13\zip.exe
c:\windows.old\ProgramData\ASUS\AI Suite II\Setup.exe
c:\windows.old\ProgramData\AudioUTOPiA\Uninstall64.exe
c:\windows.old\ProgramData\MAGIX\Sequoia 13\unzip.exe
c:\windows.old\ProgramData\MAGIX\Sequoia 13\zip.exe
c:\windows.old\Users\All Users\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\MAGIX\Sequoia 13\zip.exe
c:\windows.old\Users\All Users\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application Data\ASUS\AI
Suite II\Setup.exe
c:\windows.old\Users\All Users\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\AudioUTOPiA\Uninstall64.exe
c:\windows.old\Users\All Users\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\MAGIX\Sequoia 13\unzip.exe
c:\windows.old\Users\All Users\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\MAGIX\Sequoia 13\zip.exe
c:\windows.old\Users\All Users\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\ASUS\AI Suite II\Setup.exe
c:\windows.old\Users\All Users\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\AudioUTOPiA\Uninstall64.exe
c:\windows.old\Users\All Users\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\MAGIX\Sequoia 13\unzip.exe
c:\windows.old\Users\All Users\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\MAGIX\Sequoia 13\zip.exe
c:\windows.old\Users\All Users\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\ASUS\AI Suite II\Setup.exe
c:\windows.old\Users\All Users\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\AudioUTOPiA\Uninstall64.exe
c:\windows.old\Users\All Users\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\MAGIX\Sequoia 13\unzip.exe
c:\windows.old\Users\All Users\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\MAGIX\Sequoia 13\zip.exe
c:\windows.old\Users\All Users\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\ASUS\AI Suite II\Setup.exe
c:\windows.old\Users\All Users\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\AudioUTOPiA\Uninstall64.exe
c:\windows.old\Users\All Users\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\MAGIX\Sequoia 13\unzip.exe
c:\windows.old\Users\All Users\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\MAGIX\Sequoia 13\zip.exe
c:\windows.old\Users\All Users\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application Data\ASUS\AI
Suite II\Setup.exe
c:\windows.old\Users\All Users\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\AudioUTOPiA\Uninstall64.exe
c:\windows.old\Users\All Users\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\MAGIX\Sequoia 13\unzip.exe
c:\windows.old\Users\All Users\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\MAGIX\Sequoia 13\zip.exe
c:\windows.old\Users\All Users\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\ASUS\AI Suite II\Setup.exe
c:\windows.old\Users\All Users\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\AudioUTOPiA\Uninstall64.exe
c:\windows.old\Users\All Users\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\MAGIX\Sequoia 13\unzip.exe
c:\windows.old\Users\All Users\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\MAGIX\Sequoia 13\zip.exe
c:\windows.old\Users\All Users\Application Data\Application Data\Application
Data\Application Data\Application Data\ASUS\AI Suite II\Setup.exe
c:\windows.old\Users\All Users\Application Data\Application Data\Application
Data\Application Data\Application Data\AudioUTOPiA\Uninstall64.exe
c:\windows.old\Users\All Users\Application Data\Application Data\Application
Data\Application Data\Application Data\MAGIX\Sequoia 13\unzip.exe
c:\windows.old\Users\All Users\Application Data\Application Data\Application
Data\Application Data\Application Data\MAGIX\Sequoia 13\zip.exe
c:\windows.old\Users\All Users\Application Data\Application Data\Application
Data\Application Data\ASUS\AI Suite II\Setup.exe
c:\windows.old\Users\All Users\Application Data\Application Data\Application
Data\Application Data\AudioUTOPiA\Uninstall64.exe
c:\windows.old\Users\All Users\Application Data\Application Data\Application
Data\Application Data\MAGIX\Sequoia 13\unzip.exe
c:\windows.old\Users\All Users\Application Data\Application Data\Application
Data\Application Data\MAGIX\Sequoia 13\zip.exe
c:\windows.old\Users\All Users\Application Data\Application Data\Application
Data\ASUS\AI Suite II\Setup.exe
c:\windows.old\Users\All Users\Application Data\Application Data\Application
Data\AudioUTOPiA\Uninstall64.exe
c:\windows.old\Users\All Users\Application Data\Application Data\Application
Data\MAGIX\Sequoia 13\unzip.exe
c:\windows.old\Users\All Users\Application Data\Application Data\Application
Data\MAGIX\Sequoia 13\zip.exe
c:\windows.old\Users\All Users\Application Data\Application Data\ASUS\AI Suite
II\Setup.exe
c:\windows.old\Users\All Users\Application Data\Application
Data\AudioUTOPiA\Uninstall64.exe
c:\windows.old\Users\All Users\Application Data\Application Data\MAGIX\Sequoia
13\unzip.exe
c:\windows.old\Users\All Users\Application Data\Application Data\MAGIX\Sequoia
13\zip.exe
c:\windows.old\Users\All Users\Application Data\ASUS\AI Suite II\Setup.exe
c:\windows.old\Users\All Users\Application Data\AudioUTOPiA\Uninstall64.exe
c:\windows.old\Users\All Users\Application Data\MAGIX\Sequoia 13\unzip.exe
c:\windows.old\Users\All Users\Application Data\MAGIX\Sequoia 13\zip.exe
c:\windows.old\Users\All Users\ASUS\AI Suite II\Setup.exe
c:\windows.old\Users\All Users\AudioUTOPiA\Uninstall64.exe
c:\windows.old\Users\All Users\MAGIX\Sequoia 13\unzip.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{55EABE31-72A9-4FC6-
A18F-2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{5E9E7411-1CEB-433E-
87A3-9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{680AFC97-4DCE-4909-
A614-44065904FD7A}\setup.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{7283AB5C-0307-4427-
81CD-21F875B08934}\setup.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-
81A8-3A50078C2D58}\ISBEW64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-
81A8-3A50078C2D58}\ISBEWI64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-
81A8-3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Temp\{55EABE31-72A9-4FC6-A18F-
2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Temp\{5E9E7411-1CEB-433E-87A3-
9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Temp\{680AFC97-4DCE-4909-A614-
44065904FD7A}\setup.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Temp\{7283AB5C-0307-4427-81CD-
21F875B08934}\setup.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-
3A50078C2D58}\ISBEW64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-
3A50078C2D58}\ISBEWI64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-
3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Temp\{55EABE31-72A9-4FC6-A18F-2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Temp\{5E9E7411-1CEB-433E-87A3-9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Temp\{680AFC97-4DCE-4909-A614-44065904FD7A}\setup.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Temp\{7283AB5C-0307-4427-81CD-21F875B08934}\setup.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEW64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEWI64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\goog...app_86fd5b6b43e66935_0001.0003_b78cb
ae13c700816\GoogleUpdateSetup.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Application Data\Application Data\Temp\
{55EABE31-72A9-4FC6-A18F-2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Application Data\Application Data\Temp\
{5E9E7411-1CEB-433E-87A3-9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Application Data\Application Data\Temp\
{680AFC97-4DCE-4909-A614-44065904FD7A}\setup.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Application Data\Application Data\Temp\
{7283AB5C-0307-4427-81CD-21F875B08934}\setup.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Application Data\Application Data\Temp\
{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEW64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Application Data\Application Data\Temp\
{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEWI64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Application Data\Application Data\Temp\
{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\clic...exe_86fd5b6b43e66935_0001.0003_none_
f26368b358f225e4\GoogleUpdateSetup.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\goog...app_86fd5b6b43e66935_0001.0003_b78cb
ae13c700816\GoogleUpdateSetup.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{55EABE31-72A9-4FC6-
A18F-2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{5E9E7411-1CEB-433E-
87A3-9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{680AFC97-4DCE-4909-
A614-44065904FD7A}\setup.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{7283AB5C-0307-4427-
81CD-21F875B08934}\setup.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-
81A8-3A50078C2D58}\ISBEW64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-
81A8-3A50078C2D58}\ISBEWI64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-
81A8-3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\clic...exe_86fd5b6b43e66935_0001.0003_none_
f26368b358f225e4\GoogleUpdateSetup.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\goog...app_86fd5b6b43e66935_0001.0003_b78cb
ae13c700816\GoogleUpdateSetup.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Temp\{55EABE31-72A9-4FC6-A18F-
2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Temp\{5E9E7411-1CEB-433E-87A3-
9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Temp\{680AFC97-4DCE-4909-A614-
44065904FD7A}\setup.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Temp\{7283AB5C-0307-4427-81CD-
21F875B08934}\setup.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-
3A50078C2D58}\ISBEW64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-
3A50078C2D58}\ISBEWI64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-
3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\clic...exe_86fd5b6b43e66935_0001.0003_none_
f26368b358f225e4\GoogleUpdateSetup.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\goog...app_86fd5b6b43e66935_0001.0003_b78cb
ae13c700816\GoogleUpdateSetup.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Temp\{55EABE31-72A9-4FC6-A18F-2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Temp\{5E9E7411-1CEB-433E-87A3-9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Temp\{680AFC97-4DCE-4909-A614-44065904FD7A}\setup.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Temp\{7283AB5C-0307-4427-81CD-21F875B08934}\setup.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEW64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEWI64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\clic...exe_86fd5b6b43e66935_0001.0003_none_
f26368b358f225e4\GoogleUpdateSetup.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\goog...app_86fd5b6b43e66935_0001.0003_b78cb
ae13c700816\GoogleUpdateSetup.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Temp\{55EABE31-72A9-4FC6-A18F-2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Temp\{5E9E7411-1CEB-433E-87A3-9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Temp\{680AFC97-4DCE-4909-A614-44065904FD7A}\setup.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Temp\{7283AB5C-0307-4427-81CD-21F875B08934}\setup.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEW64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEWI64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\clic...exe_86fd5b6b43e66935_0001.0003_none_
f26368b358f225e4\GoogleUpdateSetup.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\goog...app_86fd5b6b43e66935_0001.0003_b78cb
ae13c700816\GoogleUpdateSetup.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Temp\{55EABE31-72A9-
4FC6-A18F-2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Temp\{5E9E7411-1CEB-
433E-87A3-9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Temp\{680AFC97-4DCE-
4909-A614-44065904FD7A}\setup.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Temp\{7283AB5C-0307-
4427-81CD-21F875B08934}\setup.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Temp\{B8F58690-1DAB-
4B77-81A8-3A50078C2D58}\ISBEW64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Temp\{B8F58690-1DAB-
4B77-81A8-3A50078C2D58}\ISBEWI64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Temp\{B8F58690-1DAB-
4B77-81A8-3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Users\cosmic
law\AppData\Local\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\clic...exe_86fd5b6b43e66935_00
01.0003_none_f26368b358f225e4\GoogleUpdateSetup.exe
c:\windows.old\Users\cosmic
law\AppData\Local\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\goog...app_86fd5b6b43e66935_00
01.0003_b78cbae13c700816\GoogleUpdateSetup.exe
c:\windows.old\Users\cosmic law\AppData\Local\Temp\{55EABE31-72A9-4FC6-A18F-
2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Temp\{5E9E7411-1CEB-433E-87A3-
9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Temp\{680AFC97-4DCE-4909-A614-
44065904FD7A}\setup.exe
c:\windows.old\Users\cosmic law\AppData\Local\Temp\{7283AB5C-0307-4427-81CD-
21F875B08934}\setup.exe
c:\windows.old\Users\cosmic law\AppData\Local\Temp\{B8F58690-1DAB-4B77-81A8-
3A50078C2D58}\ISBEW64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Temp\{B8F58690-1DAB-4B77-81A8-
3A50078C2D58}\ISBEWI64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Temp\{B8F58690-1DAB-4B77-81A8-
3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Users\cosmic
law\Intel_Rapid_V11101006_V11501207_XPWin7_8\Install\AsusSetup.exe
c:\windows.old\Users\cosmic
law\Intel_Rapid_V11101006_V11501207_XPWin7_8\Install\Others\AsusSetup.exe
c:\windows.old\Users\cosmic
law\Intel_Rapid_V11101006_V11501207_XPWin7_8\Install\Win8\AsusSetup.exe
c:\windows.old\Users\cosmic
law\Intel_Rapid_V11101006_V11501207_XPWin7_8\Makedisk\AsusSetup.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{55EABE31-72A9-4FC6-
A18F-2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{5E9E7411-1CEB-433E-
87A3-9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{680AFC97-4DCE-4909-
A614-44065904FD7A}\setup.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{7283AB5C-0307-4427-
81CD-21F875B08934}\setup.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-
81A8-3A50078C2D58}\ISBEW64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-
81A8-3A50078C2D58}\ISBEWI64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-
81A8-3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Temp\{55EABE31-72A9-4FC6-A18F-
2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Temp\{5E9E7411-1CEB-433E-87A3-
9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Temp\{680AFC97-4DCE-4909-A614-
44065904FD7A}\setup.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Temp\{7283AB5C-0307-4427-81CD-
21F875B08934}\setup.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-
3A50078C2D58}\ISBEW64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-
3A50078C2D58}\ISBEWI64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-
3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Temp\{55EABE31-72A9-4FC6-A18F-2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Temp\{5E9E7411-1CEB-433E-87A3-9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Temp\{680AFC97-4DCE-4909-A614-44065904FD7A}\setup.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Temp\{7283AB5C-0307-4427-81CD-21F875B08934}\setup.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEW64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEWI64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Application Data\Application Data\Temp\
{55EABE31-72A9-4FC6-A18F-2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Application Data\Application Data\Temp\
{5E9E7411-1CEB-433E-87A3-9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Application Data\Application Data\Temp\
{680AFC97-4DCE-4909-A614-44065904FD7A}\setup.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Application Data\Application Data\Temp\
{7283AB5C-0307-4427-81CD-21F875B08934}\setup.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Application Data\Application Data\Temp\
{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEW64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Application Data\Application Data\Temp\
{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEWI64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Application Data\Application Data\Temp\
{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\clic...exe_86fd5b6b43e66935_0001.0003_none_
f26368b358f225e4\GoogleUpdateSetup.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\goog...app_86fd5b6b43e66935_0001.0003_b78cb
ae13c700816\GoogleUpdateSetup.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{55EABE31-72A9-4FC6-
A18F-2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{5E9E7411-1CEB-433E-
87A3-9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{680AFC97-4DCE-4909-
A614-44065904FD7A}\setup.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{7283AB5C-0307-4427-
81CD-21F875B08934}\setup.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-
81A8-3A50078C2D58}\ISBEW64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-
81A8-3A50078C2D58}\ISBEWI64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-
81A8-3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\clic...exe_86fd5b6b43e66935_0001.0003_none_
f26368b358f225e4\GoogleUpdateSetup.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\goog...app_86fd5b6b43e66935_0001.0003_b78cb
ae13c700816\GoogleUpdateSetup.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Temp\{55EABE31-72A9-4FC6-A18F-
2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Temp\{5E9E7411-1CEB-433E-87A3-
9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Temp\{680AFC97-4DCE-4909-A614-
44065904FD7A}\setup.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Temp\{7283AB5C-0307-4427-81CD-
21F875B08934}\setup.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-
3A50078C2D58}\ISBEW64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-
3A50078C2D58}\ISBEWI64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-
3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\clic...exe_86fd5b6b43e66935_0001.0003_none_
f26368b358f225e4\GoogleUpdateSetup.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\goog...app_86fd5b6b43e66935_0001.0003_b78cb
ae13c700816\GoogleUpdateSetup.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Temp\{55EABE31-72A9-4FC6-A18F-2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Temp\{5E9E7411-1CEB-433E-87A3-9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Temp\{680AFC97-4DCE-4909-A614-44065904FD7A}\setup.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Temp\{7283AB5C-0307-4427-81CD-21F875B08934}\setup.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEW64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEWI64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\clic...exe_86fd5b6b43e66935_0001.0003_none_
f26368b358f225e4\GoogleUpdateSetup.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\goog...app_86fd5b6b43e66935_0001.0003_b78cb
ae13c700816\GoogleUpdateSetup.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Temp\{55EABE31-72A9-4FC6-A18F-2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Temp\{5E9E7411-1CEB-433E-87A3-9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Temp\{680AFC97-4DCE-4909-A614-44065904FD7A}\setup.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Temp\{7283AB5C-0307-4427-81CD-21F875B08934}\setup.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEW64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEWI64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\clic...exe_86fd5b6b43e66935_0001.0003_none_
f26368b358f225e4\GoogleUpdateSetup.exe
c:\windows.old\Users\cosmic law\Local Settings\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\goog...app_86fd5b6b43e66935_0001.0003_b78cb
ae13c700816\GoogleUpdateSetup.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Temp\{55EABE31-
72A9-4FC6-A18F-2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Temp\{5E9E7411-
1CEB-433E-87A3-9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Temp\{680AFC97-
4DCE-4909-A614-44065904FD7A}\setup.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Temp\{7283AB5C-
0307-4427-81CD-21F875B08934}\setup.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Temp\{B8F58690-
1DAB-4B77-81A8-3A50078C2D58}\ISBEW64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Temp\{B8F58690-
1DAB-4B77-81A8-3A50078C2D58}\ISBEWI64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Temp\{B8F58690-
1DAB-4B77-81A8-3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Users\cosmic law\Local
Settings\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\clic...exe_86fd5b6b43e66935_0001.0003_n
one_f26368b358f225e4\GoogleUpdateSetup.exe
c:\windows.old\Users\cosmic law\Local
Settings\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\goog...app_86fd5b6b43e66935_0001.0003_b
78cbae13c700816\GoogleUpdateSetup.exe
c:\windows.old\Users\cosmic law\Local Settings\Temp\{55EABE31-72A9-4FC6-A18F-
2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Users\cosmic law\Local Settings\Temp\{5E9E7411-1CEB-433E-87A3-
9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Users\cosmic law\Local Settings\Temp\{680AFC97-4DCE-4909-A614-
44065904FD7A}\setup.exe
c:\windows.old\Users\cosmic law\Local Settings\Temp\{7283AB5C-0307-4427-81CD-
21F875B08934}\setup.exe
c:\windows.old\Users\cosmic law\Local Settings\Temp\{B8F58690-1DAB-4B77-81A8-
3A50078C2D58}\ISBEW64.exe
c:\windows.old\Users\cosmic law\Local Settings\Temp\{B8F58690-1DAB-4B77-81A8-
3A50078C2D58}\ISBEWI64.exe
c:\windows.old\Users\cosmic law\Local Settings\Temp\{B8F58690-1DAB-4B77-81A8-
3A50078C2D58}\ISBEWX64.exe
c:\windows\Intel_Chipset_V9301019_LK_XPWin7\AsusSetup.exe
c:\windows\Intel_Chipset_V9301019_LK_XPWin7\Driver\AsusSetup.exe
c:\windows\Intel_Chipset_V9301019_LK_XPWin7\Driver\Chipset\AsusSetup.exe
c:\windows\Intel_Chipset_V9301019_LK_XPWin7\Driver\hotfix\AsusSetup.exe
c:\windows\Intel_Chipset_V9301019_LK_XPWin7\Driver\hotfix\KB2505454_x64\AsusSetup.e
xe
c:\windows\Intel_Chipset_V9301019_LK_XPWin7\Driver\Usb\32\AsusSetup.exe
c:\windows\Intel_Chipset_V9301019_LK_XPWin7\Driver\Usb\64\AsusSetup.exe
c:\windows\Intel_Chipset_V9301019_LK_XPWin7\Driver\Usb\AsusSetup.exe
c:\windows\Intel_Chipset_V9301019_LK_XPWin7\Driver\Usbcopy\AsusSetup.exe
d:\cosmo last\AI_SuiteII_V20101_P8Z77-V-LK_XPWin7_8\AsusSetup.exe
d:\cosmo last\AI_SuiteII_V20101_P8Z77-V-LK_XPWin7_8\Setup.exe
d:\cosmo last\AI_SuiteII_V20101_P8Z77-V-LK_XPWin7_8\TurboV
EVO\AppSetup\MEIInstall\AsusSetup.exe
d:\cosmo last\Intel_Chipset_V9301019_LK_XPWin7\AsusSetup.exe
d:\cosmo last\Intel_Chipset_V9301019_LK_XPWin7\Driver\AsusSetup.exe
d:\cosmo last\Intel_Chipset_V9301019_LK_XPWin7\Driver\Chipset\AsusSetup.exe
d:\cosmo last\Intel_Chipset_V9301019_LK_XPWin7\Driver\hotfix\AsusSetup.exe
d:\cosmo
last\Intel_Chipset_V9301019_LK_XPWin7\Driver\hotfix\KB2505454_x64\AsusSetup.exe
d:\cosmo last\Intel_Chipset_V9301019_LK_XPWin7\Driver\Usb\32\AsusSetup.exe
d:\cosmo last\Intel_Chipset_V9301019_LK_XPWin7\Driver\Usb\64\AsusSetup.exe
d:\cosmo last\Intel_Chipset_V9301019_LK_XPWin7\Driver\Usb\AsusSetup.exe
d:\cosmo last\Intel_Chipset_V9301019_LK_XPWin7\Driver\Usbcopy\AsusSetup.exe
d:\cosmo last\Intel_Graphics_V917102828_Win7_8\AsusSetup.exe
d:\cosmo last\Intel_Graphics_V917102828_Win7_8\Win32\AsusSetup.exe
d:\cosmo last\Intel_Graphics_V917102828_Win7_8\Win64\AsusSetup.exe
d:\cosmo last\Intel_Graphics_V917102828_Win7_8\Win64\hotfix\AsusSetup.exe
d:\cosmo last\Intel_Graphics_V917102828_Win7_8\Win64\hotfix\KB979903\AsusSetup.exe
d:\cosmo last\Intel_Graphics_V917102828_Win7_8\Win64\Install\AsusSetup.exe
d:\cosmo\Intel_Chipset_V9301019_LK_XPWin7\AsusSetup.exe
d:\cosmo\Intel_Chipset_V9301019_LK_XPWin7\Driver\AsusSetup.exe
d:\cosmo\Intel_Chipset_V9301019_LK_XPWin7\Driver\Chipset\AsusSetup.exe
d:\cosmo\Intel_Chipset_V9301019_LK_XPWin7\Driver\hotfix\AsusSetup.exe
d:\cosmo\Intel_Chipset_V9301019_LK_XPWin7\Driver\hotfix\KB2505454_x64\AsusSetup.exe
d:\cosmo\Intel_Chipset_V9301019_LK_XPWin7\Driver\Usb\32\AsusSetup.exe
d:\cosmo\Intel_Chipset_V9301019_LK_XPWin7\Driver\Usb\64\AsusSetup.exe
d:\cosmo\Intel_Chipset_V9301019_LK_XPWin7\Driver\Usb\AsusSetup.exe
d:\cosmo\Intel_Chipset_V9301019_LK_XPWin7\Driver\Usbcopy\AsusSetup.exe
d:\cosmo\Intel_Graphics_V917102828_Win7_8\AsusSetup.exe
d:\cosmo\Intel_Graphics_V917102828_Win7_8\Win32\AsusSetup.exe
d:\cosmo\Intel_Graphics_V917102828_Win7_8\Win64\AsusSetup.exe
d:\cosmo\Intel_Graphics_V917102828_Win7_8\Win64\hotfix\AsusSetup.exe
d:\cosmo\Intel_Graphics_V917102828_Win7_8\Win64\hotfix\KB979903\AsusSetup.exe
d:\cosmo\Intel_Graphics_V917102828_Win7_8\Win64\Install\AsusSetup.exe
.
.
((((((((((((((((((((((((( Files Created from 2015-12-21 to 2016-01-
21 )))))))))))))))))))))))))))))))
.
.
2016-01-21 11:19 . 2016-01-21 11:19 -------- d-----w-
c:\users\Default\AppData\Local\temp
2016-01-21 10:49 . 2016-01-21 10:49 -------- d-----w- C:\AdwCleaner
2016-01-21 10:27 . 2016-01-21 10:27 -------- d-----w- c:\programdata\Kaspersky
Lab
2016-01-21 10:27 . 2016-01-21 10:27 -------- d-----w- c:\program files
(x86)\Kaspersky Lab
2016-01-21 10:25 . 2016-01-21 10:25 -------- d-----w- c:\programdata\Kaspersky
Lab Setup Files
2016-01-21 09:58 . 2015-05-29 04:15 33248 ----a-w-
c:\windows\system32\drivers\gwdrv.sys
2016-01-21 09:58 . 2016-01-21 09:58 -------- d-----w- c:\programdata\GlassWire
2016-01-21 09:58 . 2016-01-21 09:58 -------- d-----w- c:\program files
(x86)\GlassWire
2016-01-20 23:01 . 2016-01-20 23:01 -------- d-----w- c:\program files
(x86)\WonderFox Soft
2016-01-20 05:10 . 2015-11-16 15:18 16376 ----a-w-
c:\windows\system32\drivers\TVMonitor.sys
2016-01-20 03:54 . 2016-01-20 05:35 -------- d-----w- c:\program files
(x86)\TeamViewer
2016-01-20 03:50 . 2016-01-20 03:50 75888 ----a-w-
c:\programdata\Microsoft\Windows Defender\Definition Updates\{5E5C53A2-4F58-
4171-A4BD-59F9892CBBF1}\offreg.4808.dll
2016-01-20 01:47 . 2016-01-20 19:38 -------- d-----w- c:\program files
(x86)\ASIO4ALL v2
2016-01-20 01:47 . 2016-01-20 01:47 -------- d-----w- c:\program files\Image-
Line
2016-01-20 01:47 . 2016-01-20 01:47 -------- d-----w- c:\program files
(x86)\DSPRobotics
2016-01-20 01:43 . 2016-01-20 19:38 -------- d-----w- c:\program files
(x86)\Image-Line
2016-01-20 01:10 . 2016-01-20 01:10 -------- d-----w- c:\program files\Common
Files\Steinberg
2016-01-20 01:10 . 2016-01-20 01:53 -------- d-----w- c:\program
files\EastWest
2016-01-20 00:59 . 2016-01-20 00:59 -------- d-----w- c:\program files\Bonjour
2016-01-20 00:59 . 2016-01-20 00:59 -------- d-----w- c:\program files
(x86)\Bonjour
2016-01-20 00:58 . 2016-01-20 01:46 -------- d-----w- c:\programdata\East West
2016-01-20 00:58 . 2016-01-20 01:46 -------- d-----w- c:\program files
(x86)\EastWest
2016-01-20 00:27 . 2016-01-20 00:27 75888 ----a-w-
c:\programdata\Microsoft\Windows Defender\Definition Updates\{5E5C53A2-4F58-
4171-A4BD-59F9892CBBF1}\offreg.3764.dll
2016-01-20 00:21 . 2016-01-20 00:21 -------- d-----w- c:\program files
(x86)\Common Files\Adobe
2016-01-19 22:17 . 2016-01-20 00:17 -------- d-----w-
c:\programdata\boost_interprocess
2016-01-19 22:15 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{80E1859D-389E-4D4B-8377-121DB4A144EA}
2016-01-19 21:15 . 2016-01-21 11:19 -------- dc-h--w- c:\programdata\
{F4C30B44-15B7-482B-8B80-38AA0AB0956A}
2016-01-19 21:15 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{EFEC7DCC-2F91-4828-B49D-8506F9F0D9FF}
2016-01-19 21:15 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{7AFFCFD3-F022-420B-8E87-BBAED1C983C8}
2016-01-19 21:14 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{03149E88-061F-4C01-98FF-736811F5AEF5}
2016-01-19 21:14 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{AD7B6000-2063-4CF8-A07D-49A34A4164E7}
2016-01-19 21:13 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{3DFBC806-D62A-4312-81FF-5F343DDCB5DC}
2016-01-19 21:13 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{929A2A2C-EEDF-4FD7-830C-278E194D1B53}
2016-01-19 21:11 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{BCE70080-8C44-4FE4-9CEE-9ABE71A36E7E}
2016-01-19 21:11 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{4C99B1DC-0B59-43A6-8537-9CE9286685A3}
2016-01-19 21:10 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{6F97656F-AAA1-4E21-96D6-52E5526E59D2}
2016-01-19 21:08 . 2016-01-21 11:19 -------- dc-h--w- c:\programdata\
{F92C204F-6C39-4D56-B100-EC929C871966}
2016-01-19 21:06 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{43D1C1F4-8E90-4B5F-8388-D1E602AABF0E}
2016-01-19 21:06 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{63E9A1A4-8FB4-4448-B7E1-E635AD5344FF}
2016-01-19 21:06 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{E753D955-673D-4851-B06F-9A9D0C44C02C}
2016-01-19 21:03 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{C5CAF473-C900-4049-BCE5-A93E0EBA7EF2}
2016-01-19 20:54 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{B7072B15-6E80-42FF-A9AE-4E62AF2B2418}
2016-01-19 20:50 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{B0CAD5CC-867E-473E-B55F-339F9635A45D}
2016-01-19 20:48 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{CB28D9D3-6B5D-4AFA-BA37-B4AFAAAF71B9}
2016-01-19 20:46 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{5A23829C-A66E-47B0-AD50-21A3FFE6C325}
2016-01-19 20:44 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{E051D9C8-9503-489B-8E90-21CEB1DF11C1}
2016-01-19 20:44 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{87A1E31E-1C63-4A99-AEEA-EA57A3043C1D}
2016-01-19 20:42 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{34163C5E-1AE4-49D8-B5F9-A3C2422AAB96}
2016-01-19 20:41 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{ECD5EDEB-48B5-47BB-BD2E-1F95422B2C33}
2016-01-19 20:39 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{7E15FB3A-A743-4BAD-9286-E6F67959668B}
2016-01-19 20:29 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{6032CB49-DE54-4192-9F71-65859D0B544F}
2016-01-19 20:29 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{78915E0A-25F8-47A2-9793-CEBC2D28F274}
2016-01-19 20:29 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{98F83ED2-DF89-465B-8EB3-F87E179CFA56}
2016-01-19 20:29 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{7C702C5F-ADE3-4D28-9619-90BA76D4E1ED}
2016-01-19 20:28 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{A9FC06D6-E75C-4DA2-B8D2-8D91C1A269C3}
2016-01-19 20:28 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{C693A367-F08F-4F42-A5DE-8996D6AC24F0}
2016-01-19 20:28 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{DEBC0451-D249-4B4C-B907-F6510028BC75}
2016-01-19 20:28 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{849C3EA7-6C44-4D64-BFD2-FC5AF841BE83}
2016-01-19 20:28 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{DB1D6CD1-3172-48C0-B63A-490B0D2C6D72}
2016-01-19 20:28 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{03697879-2B80-4810-9B4D-D8EF1EE777F0}
2016-01-19 20:27 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{63F2E427-F976-4EE0-BB21-8FA7DAC2E7F2}
2016-01-19 20:27 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{B0DF9098-245E-479F-A4ED-B5F91EA4948B}
2016-01-19 20:27 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{0209395A-8E4A-48E1-A5E3-C830292F263C}
2016-01-19 20:27 . 2016-01-21 11:19 -------- dc-h--w- c:\programdata\
{F409EA92-6713-4D2D-AF88-0C51B1CF1D2A}
2016-01-19 20:27 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{80A0A482-175E-4DE8-9D32-C8C8463D1362}
2016-01-19 20:26 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{2FF04994-9599-464E-AD99-B09CBE2122AE}
2016-01-19 20:25 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{786FEDEA-8E71-4900-8D2F-40933D86B376}
2016-01-19 20:24 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{1C7A6EB7-BED0-4444-B0DA-4BFDCF83C380}
2016-01-19 20:23 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{926BF989-2A51-492D-8A6A-E9D533417C34}
2016-01-19 20:22 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{93015F0A-7AF2-4308-A5B3-13D4FCE429C6}
2016-01-19 20:13 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{B96A0118-1095-4E34-9C27-D87092B77F67}
2016-01-19 20:12 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{727F248C-CA81-4A68-8E01-27236ED99D98}
2016-01-19 20:11 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{DFAB8828-7DA2-4573-A254-15D802A10A7E}
2016-01-19 20:09 . 2016-01-19 20:09 75888 ----a-w-
c:\programdata\Microsoft\Windows Defender\Definition Updates\{5E5C53A2-4F58-
4171-A4BD-59F9892CBBF1}\offreg.3364.dll
2016-01-19 20:08 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{B8AB470F-A90B-4652-A8F5-160A08FD7411}
2016-01-19 20:04 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{7FC6C6B3-C2D5-4F17-BBEF-A11135E1A668}
2016-01-19 20:03 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{8A9976F0-1DB6-4A1D-823B-E9E459F6EE39}
2016-01-19 19:59 . 2016-01-21 11:19 -------- dc-h--w- c:\programdata\
{F2026C51-8509-47B4-816D-CCD2DB993FC1}
2016-01-19 19:59 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{624486AF-AD5B-4BB3-BEEE-A0D2D4D112DF}
2016-01-19 19:58 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{BA0B7444-2ABA-463C-862A-7EC7F0AD0FA2}
2016-01-19 19:55 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{4AD6F65B-2A15-4CFF-9AF7-830F277D0157}
2016-01-19 19:54 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{5309003E-4102-4141-A0C9-7507F0E10F52}
2016-01-19 19:53 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{B7CF1107-3BD9-48BA-BC77-54B909022641}
2016-01-19 19:53 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{1CCB05D7-901D-4CCB-816F-73AC0098D30A}
2016-01-19 19:52 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{A793ECF9-34FC-47F0-8CBE-0B3DEA468C01}
2016-01-19 19:51 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{6B3E9A08-404E-4FBF-A80D-1E9DA9E75171}
2016-01-19 19:50 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{4C01754A-32F9-4A34-8B9F-E06DD553B755}
2016-01-19 19:49 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{0221FDDB-41E3-4971-AC93-5048F8D7CAAC}
2016-01-19 19:44 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{499D67BC-046E-4931-8BFB-D5ABB500E67C}
2016-01-19 19:43 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{7B7672F5-5EA2-4D83-BC77-1AFCA8846266}
2016-01-19 19:42 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{229D9A22-9BEA-4D2B-813E-85E0FACBA99C}
2016-01-19 19:40 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{F036CC43-6BE8-4CBD-91C3-76F4BC8FFD6F}
2016-01-19 19:37 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{A6377726-7317-464A-87EB-693294E9F383}
2016-01-19 19:34 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{6B991D2A-5E91-44B4-BE28-CFDCED1835AB}
2016-01-19 19:32 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{18869C94-495B-4D97-8C75-E405CF6509CB}
2016-01-19 19:29 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{D53B5F71-B715-494C-AFD4-BB0C94C787E5}
2016-01-19 19:27 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{B54CEF12-4612-4E77-B06C-403C662468E7}
2016-01-19 19:25 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{35B46D49-85E2-40EA-8EC6-43B281EDD8E7}
2016-01-19 19:17 . 2016-01-21 11:19 -------- dc-h--w- c:\programdata\
{FB5C60A0-15D1-4DEF-A6EF-3366AC37909F}
2016-01-19 18:50 . 2015-12-11 18:57 1164800 ----a-w-
c:\windows\system32\aeinv.dll
2016-01-19 18:43 . 2015-12-16 18:15 11154520 ----a-w-
c:\programdata\Microsoft\Windows Defender\Definition Updates\{5E5C53A2-4F58-
4171-A4BD-59F9892CBBF1}\mpengine.dll
2016-01-19 17:44 . 2016-01-19 20:44 -------- d-----w- c:\program files
(x86)\Common Files\Native Instruments
2016-01-19 17:40 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{E2A3D3D3-946E-4752-90FB-AF37CC248734}
2016-01-19 17:08 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{D3CD7CDD-9759-4CF4-BE92-BA89914360B5}
2016-01-19 16:01 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{A360C0DF-3552-4969-AF3D-A6533A68ACA5}
2016-01-19 16:00 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{879F8AE4-E6E3-47A2-864B-EAF51C5ACC43}
2016-01-19 15:59 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{15C74247-7198-4F43-B5A7-4D9278F308F6}
2016-01-19 15:53 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{D5E8D2A2-A2FF-4A0C-A4F7-E8EF5C9B29EA}
2016-01-19 15:47 . 2016-01-19 15:47 -------- d-----w- c:\program files
(x86)\Soundtoys
2016-01-19 15:46 . 2016-01-21 11:18 -------- d-----w-
c:\programdata\AudioUTOPiA
2016-01-19 15:42 . 2016-01-19 15:42 -------- d-----w- c:\programdata\MRI
Squad
2016-01-19 15:41 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{81B3FE58-8826-44EC-8271-083D201CEA19}
2016-01-19 15:40 . 2016-01-21 11:19 -------- dc-h--w- c:\programdata\
{F57C376F-E7ED-4527-9EE2-4D50799418BC}
2016-01-19 15:40 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{B49C92CB-1A73-4A41-A84C-5091582E7AA8}
2016-01-19 15:40 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{6495CC1D-C10B-40C5-A92B-241A2B2C8D20}
2016-01-19 15:40 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{9C588B44-42B6-434D-90BD-824BBB1F328A}
2016-01-19 15:40 . 2016-01-19 22:15 -------- d-----w- c:\program files\Common
Files\Native Instruments
2016-01-19 15:40 . 2016-01-19 21:15 -------- d-----w- c:\program files\Native
Instruments
2016-01-19 15:40 . 2016-01-19 16:00 -------- d-----w- c:\programdata\Native
Instruments
2016-01-19 15:17 . 2015-02-03 03:31 1424896 ----a-w-
c:\windows\system32\WindowsCodecs.dll
2016-01-19 15:17 . 2015-02-03 03:12 1230848 ----a-w-
c:\windows\SysWow64\WindowsCodecs.dll
2016-01-19 15:08 . 2016-01-19 15:08 -------- d-s---w-
c:\windows\system32\CompatTel
2016-01-19 15:08 . 2016-01-19 15:08 -------- d-----w-
c:\windows\system32\appraiser
2016-01-18 23:15 . 2015-11-06 03:25 68288 ----a-w-
c:\windows\system32\vsocklib.dll
2016-01-18 23:15 . 2015-11-06 03:25 64192 ----a-w-
c:\windows\SysWow64\vsocklib.dll
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M
Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-12-30 18:37 . 2016-01-18 15:55 44032 ----a-w-
c:\windows\apppatch\acwow64.dll
2015-12-09 21:59 . 2015-12-09 21:59 94208 ----a-w-
c:\windows\SysWow64\QuickTimeVR.qtx
2015-12-09 21:59 . 2015-12-09 21:59 69632 ----a-w-
c:\windows\SysWow64\QuickTime.qts
2015-12-02 21:18 . 2010-11-21 03:27 301728 ------w-
c:\windows\system32\MpSigStub.exe
2015-11-26 01:51 . 2015-11-26 01:51 49856 ----a-w-
c:\windows\system32\vnetinst.dll
2015-11-26 01:51 . 2015-11-26 01:51 81088 ----a-w-
c:\windows\system32\vmnetbridge.dll
2015-11-26 01:51 . 2015-11-26 01:51 48832 ----a-w-
c:\windows\system32\drivers\vmnetbridge.sys
2015-11-26 01:51 . 2015-11-26 01:51 28864 ----a-w-
c:\windows\system32\drivers\vmnetadapter.sys
2015-11-26 01:51 . 2015-11-26 01:51 27328 ----a-w-
c:\windows\system32\drivers\vmnet.sys
2015-11-11 03:03 . 2015-11-11 03:03 466728 ----a-w-
c:\windows\system32\coin99ip.dll
2015-11-06 03:25 . 2015-11-06 03:25 90816 ----a-w-
c:\windows\system32\drivers\vmci.sys
2015-10-29 17:50 . 2016-01-18 15:59 350208 ----a-w-
c:\windows\apppatch\AppPatch64\AcLayers.dll
2015-10-29 17:50 . 2016-01-18 15:59 309248 ----a-w-
c:\windows\apppatch\AppPatch64\AcGenral.dll
2015-10-29 17:50 . 2016-01-18 15:59 135168 ----a-w-
c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2015-10-29 17:50 . 2016-01-18 15:59 103424 ----a-w-
c:\windows\apppatch\AppPatch64\acspecfc.dll
2015-10-29 17:49 . 2016-01-18 15:59 562176 ----a-w-
c:\windows\apppatch\AcLayers.dll
2015-10-29 17:49 . 2016-01-18 15:59 470528 ----a-w-
c:\windows\apppatch\AcSpecfc.dll
2015-10-29 17:49 . 2016-01-18 15:59 2178560 ----a-w-
c:\windows\apppatch\AcGenral.dll
2015-10-29 17:49 . 2016-01-18 15:59 211968 ----a-w-
c:\windows\apppatch\AcXtrnal.dll
2015-10-29 17:39 . 2016-01-18 15:59 2560 ----a-w- c:\windows\apppatch\AcRes.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading
Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"EPLTarget\P0000000000000000"="c:\windows\system32\spool\DRIVERS\x64\3\E_YATIKLE.EX
E" [2013-09-12 298560]
"GlassWire"="c:\program files (x86)\GlassWire\glasswire.exe" [2015-12-25 10571776]
"KSS"="c:\program files (x86)\Kaspersky Lab\Kaspersky Security Scan\kss.exe" [2015-
12-15 1556448]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application
Support\APSDaemon.exe" [2013-09-14 59720]
"AsioThk32Reg"="CTASIO.DLL" [2009-02-23 51712]
"CTHelper"="CTHELPER.EXE" [2009-02-23 23040]
"CTxfiHlp"="CTXFIHLP.EXE" [2009-02-23 23552]
"VirtualCloneDrive"="c:\program files (x86)\Elaborate
Bytes\VirtualCloneDrive\VCDDaemon.exe" [2013-03-10 88984]
"FUFAXRCV"="c:\program files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe" [2015-
01-20 650784]
"FUFAXSTM"="c:\program files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe" [2015-
01-20 863776]
"EEventManager"="c:\program files (x86)\Epson Software\Event
Manager\EEventManager.exe" [2014-06-11 1065024]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller
Driver\Application\iusb3mon.exe" [2012-05-21 291648]
"vmware-tray.exe"="c:\program files (x86)\VMware\VMware Workstation\vmware-
tray.exe" [2015-11-26 104128]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"KSS"="c:\program files (x86)\Kaspersky Lab\Kaspersky Security Scan\kss.exe" [2015-
12-15 1556448]
.
c:\users\cosmo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Epson all-in-one Registration.lnk -
c:\users\cosmo\AppData\Roaming\Leadertech\PowerRegister\Epson all-in-one
Registration.exe /remind /language=ENU /PRNM="01246" /PRIN="all-in-one" [2016-1-18
3039248]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Kaspersky Software Updater Beta.lnk - c:\program files (x86)\Kaspersky
Lab\Kaspersky Software Updater Beta\ksu.exe -hide [2015-12-14 3529600]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows
nt\currentversion\drivers32]
"mixer"=wdmaud.drv
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN
v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\wind
ows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 kss;Kaspersky Security Scan Service;c:\program files (x86)\Kaspersky
Lab\Kaspersky Security Scan\kss.exe -r;c:\program files (x86)\Kaspersky
Lab\Kaspersky Security Scan\kss.exe -r [x]
R3
COMMONFX;COMMONFX;c:\windows\system32\drivers\COMMONFX.SYS;c:\windows\SYSNATIVE\dri
vers\COMMONFX.SYS [x]
R3
CT20XUT.SYS;CT20XUT.SYS;c:\windows\System32\drivers\CT20XUT.SYS;c:\windows\SYSNATIV
E\drivers\CT20XUT.SYS [x]
R3
CT20XUT;CT20XUT;c:\windows\system32\drivers\CT20XUT.SYS;c:\windows\SYSNATIVE\driver
s\CT20XUT.SYS [x]
R3
CTAUDFX.SYS;CTAUDFX.SYS;c:\windows\System32\drivers\CTAUDFX.SYS;c:\windows\SYSNATIV
E\drivers\CTAUDFX.SYS [x]
R3
CTAUDFX;CTAUDFX;c:\windows\system32\drivers\CTAUDFX.SYS;c:\windows\SYSNATIVE\driver
s\CTAUDFX.SYS [x]
R3
CTEAPSFX.SYS;CTEAPSFX.SYS;c:\windows\System32\drivers\CTEAPSFX.SYS;c:\windows\SYSNA
TIVE\drivers\CTEAPSFX.SYS [x]
R3
CTEAPSFX;CTEAPSFX;c:\windows\system32\drivers\CTEAPSFX.SYS;c:\windows\SYSNATIVE\dri
vers\CTEAPSFX.SYS [x]
R3
CTEDSPFX.SYS;CTEDSPFX.SYS;c:\windows\System32\drivers\CTEDSPFX.SYS;c:\windows\SYSNA
TIVE\drivers\CTEDSPFX.SYS [x]
R3
CTEDSPFX;CTEDSPFX;c:\windows\system32\drivers\CTEDSPFX.SYS;c:\windows\SYSNATIVE\dri
vers\CTEDSPFX.SYS [x]
R3
CTEDSPIO;CTEDSPIO;c:\windows\system32\drivers\CTEDSPIO.SYS;c:\windows\SYSNATIVE\dri
vers\CTEDSPIO.SYS [x]
R3
CTEDSPSY;CTEDSPSY;c:\windows\system32\drivers\CTEDSPSY.SYS;c:\windows\SYSNATIVE\dri
vers\CTEDSPSY.SYS [x]
R3
CTERFXFX.SYS;CTERFXFX.SYS;c:\windows\System32\drivers\CTERFXFX.SYS;c:\windows\SYSNA
TIVE\drivers\CTERFXFX.SYS [x]
R3
CTERFXFX;CTERFXFX;c:\windows\system32\drivers\CTERFXFX.SYS;c:\windows\SYSNATIVE\dri
vers\CTERFXFX.SYS [x]
R3
CTEXFIFX.SYS;CTEXFIFX.SYS;c:\windows\System32\drivers\CTEXFIFX.SYS;c:\windows\SYSNA
TIVE\drivers\CTEXFIFX.SYS [x]
R3
CTEXFIFX;CTEXFIFX;c:\windows\system32\drivers\CTEXFIFX.SYS;c:\windows\SYSNATIVE\dri
vers\CTEXFIFX.SYS [x]
R3
CTHWIUT.SYS;CTHWIUT.SYS;c:\windows\System32\drivers\CTHWIUT.SYS;c:\windows\SYSNATIV
E\drivers\CTHWIUT.SYS [x]
R3
CTHWIUT;CTHWIUT;c:\windows\system32\drivers\CTHWIUT.SYS;c:\windows\SYSNATIVE\driver
s\CTHWIUT.SYS [x]
R3
CTSBLFX.SYS;CTSBLFX.SYS;c:\windows\System32\drivers\CTSBLFX.SYS;c:\windows\SYSNATIV
E\drivers\CTSBLFX.SYS [x]
R3
CTSBLFX;CTSBLFX;c:\windows\system32\drivers\CTSBLFX.SYS;c:\windows\SYSNATIVE\driver
s\CTSBLFX.SYS [x]
R3
dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvs
c.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector
Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.
exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport
Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\driver
s\rdpvideominiport.sys [x]
R3
Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATI
VE\drivers\synth3dvsc.sys [x]
R3 terminpt;Microsoft Remote Desktop Input
Driver;c:\windows\system32\drivers\terminpt.sys;c:\windows\SYSNATIVE\drivers\termin
pt.sys [x]
R3
TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\dri
vers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB
Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD
.sys [x]
R3
tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\dri
vers\tsusbhub.sys [x]
R3
VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvg
kmd.sys [x]
R3 WatAdminSvc;Windows Activation Technologies
Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSv
c.exe [x]
S0
iaStorA;iaStorA;c:\windows\system32\DRIVERS\iaStorA.sys;c:\windows\SYSNATIVE\DRIVER
S\iaStorA.sys [x]
S0
iaStorF;iaStorF;c:\windows\system32\DRIVERS\iaStorF.sys;c:\windows\SYSNATIVE\DRIVER
S\iaStorF.sys [x]
S0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch
Driver;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3h
cs.sys [x]
S0 vmci;VMware VMCI Bus
Driver;c:\windows\system32\DRIVERS\vmci.sys;c:\windows\SYSNATIVE\DRIVERS\vmci.sys
[x]
S0 vsock;vSockets
Driver;c:\windows\system32\drivers\vsock.sys;c:\windows\SYSNATIVE\drivers\vsock.sys
[x]
S1 gwdrv;GlassWire
Driver;c:\windows\system32\DRIVERS\gwdrv.sys;c:\windows\SYSNATIVE\DRIVERS\gwdrv.sys
[x]
S2 DiagTrack;Diagnostics Tracking
Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 DigiNet;Digidesign Ethernet
Support;c:\windows\system32\DRIVERS\diginet.sys;c:\windows\SYSNATIVE\DRIVERS\digine
t.sys [x]
S2 EpsonCustomerResearchParticipation;EpsonCustomerResearchParticipation;c:\program
files\EPSON\EpsonCustomerResearchParticipation\EPCP.exe;c:\program
files\EPSON\EpsonCustomerResearchParticipation\EPCP.exe [x]
S2 EpsonScanSvc;Epson Scanner
Service;c:\windows\system32\EscSvc64.exe;c:\windows\SYSNATIVE\EscSvc64.exe [x]
S2 GlassWire;GlassWire Control Service;c:\program files
(x86)\GlassWire\GWCtlSrv.exe;c:\program files (x86)\GlassWire\GWCtlSrv.exe [x]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes Anti-
Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes Anti-
Malware\mbamscheduler.exe [x]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes Anti-
Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes Anti-
Malware\mbamservice.exe [x]
S2 NIHardwareService;NIHardwareService;c:\program files\Common Files\Native
Instruments\Hardware\NIHardwareService.exe;c:\program files\Common Files\Native
Instruments\Hardware\NIHardwareService.exe [x]
S2 PaceLicenseDServices;PACE License Services;c:\program files (x86)\Common
Files\PACE\Services\LicenseServices\LDSvc.exe;c:\program files (x86)\Common
Files\PACE\Services\LicenseServices\LDSvc.exe [x]
S2 VMUSBArbService;VMware USB Arbitration Service;c:\program files (x86)\Common
Files\VMware\USB\vmware-usbarbitrator64.exe;c:\program files (x86)\Common
Files\VMware\USB\vmware-usbarbitrator64.exe [x]
S2 VMwareHostd;VMware Workstation Server;c:\program files (x86)\VMware\VMware
Workstation\vmware-hostd.exe;c:\program files (x86)\VMware\VMware
Workstation\vmware-hostd.exe [x]
S2 vstor2-mntapi20-shared;Vstor2 MntApi 2.0 Driver
(shared);SysWOW64\drivers\vstor2-mntapi20-shared.sys;SysWOW64\drivers\vstor2-
mntapi20-shared.sys [x]
S3 asmthub3;ASMedia USB3 Hub
Service;c:\windows\system32\DRIVERS\asmthub3.sys;c:\windows\SYSNATIVE\DRIVERS\asmth
ub3.sys [x]
S3 asmtxhci;ASMEDIA XHCI
Service;c:\windows\system32\DRIVERS\asmtxhci.sys;c:\windows\SYSNATIVE\DRIVERS\asmtx
hci.sys [x]
S3
COMMONFX.SYS;COMMONFX.SYS;c:\windows\System32\drivers\COMMONFX.SYS;c:\windows\SYSNA
TIVE\drivers\COMMONFX.SYS [x]
S3
CTEDSPIO.SYS;CTEDSPIO.SYS;c:\windows\System32\drivers\CTEDSPIO.SYS;c:\windows\SYSNA
TIVE\drivers\CTEDSPIO.SYS [x]
S3
CTEDSPSY.SYS;CTEDSPSY.SYS;c:\windows\System32\drivers\CTEDSPSY.SYS;c:\windows\SYSNA
TIVE\drivers\CTEDSPSY.SYS [x]
S3 int0800;Intel 28F320C3 Flash Update Device Driver
v6.4;c:\windows\system32\DRIVERS\flashud.sys;c:\windows\SYSNATIVE\DRIVERS\flashud.s
ys [x]
S3 iusb3hub;Intel(R) USB 3.0 Hub
Driver;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3h
ub.sys [x]
S3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller
Driver;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3x
hc.sys [x]
S3
MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATI
VE\drivers\mbam.sys [x]
S3
MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\window
s\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]
S3
MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\w
indows\SYSNATIVE\drivers\mwac.sys [x]
S3 MonitorFunction;Driver for
Monitor;c:\windows\system32\DRIVERS\TVMonitor.sys;c:\windows\SYSNATIVE\DRIVERS\TVMo
nitor.sys [x]
S3 RTL8167;Realtek 8167 NT
Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64wi
n7.sys [x]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - GWDRV
*NewlyCreated* - MBAMSWISSARMY
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\
{ed11a0ab-bd73-11e5-b5d7-ec7aa3240876}]
\shell\AutoRun\command - U:\mri.exe
.
Contents of the 'Scheduled Tasks' folder
.
2016-01-21 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-01-18
03:50]
.
2016-01-21 c:\windows\Tasks\EPSON WF-4630 Series Invitation {3E3E5777-E2D1-4177-
85A0-E3B1225A2AAE}.job
- c:\windows\system32\spool\DRIVERS\x64\3\E_YTSKLE.EXE [2016-01-18 09:20]
.
2016-01-21 c:\windows\Tasks\EPSON WF-4630 Series Update {3E3E5777-E2D1-4177-85A0-
E3B1225A2AAE}.job
- c:\windows\system32\spool\DRIVERS\x64\3\E_YTSKLE.EXE [2016-01-18 09:20]
.
2016-01-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2016-01-18 16:03]
.
2016-01-21 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2016-01-18 16:03]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2015-06-04 173672]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2015-06-04 401512]
"Persistence"="c:\windows\system32\igfxpers.exe" [2015-06-04 444008]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
LSP: %windir%\system32\vsocklib.dll
TCP: DhcpNameServer = 75.75.76.76 75.75.75.75
.
- - - - ORPHANS REMOVED - - - -
.
Wow6432Node-HKCU-Run-DrvUpdater -
c:\users\cosmo\AppData\Roaming\DRPSu\DrvUpdater.exe
AddRemove-Killer Bugs v3 for Pro Tools 10.3.7 5.7.7 - c:\program files
(x86)\Avid\Pro Tools\Uninstall.exe
AddRemove-DRPSu Updater - c:\users\cosmo\AppData\Roaming\DRPSu\DrvUpdater.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PaceLicenseDServices]
"ImagePath"="\"c:\program files (x86)\Common
Files\PACE\Services\LicenseServices\LDSvc.exe\" -u
https://activation.paceap.com/InitiateActivation"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_20_0_0_286_
ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-
D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-
D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_20_0_0_286_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-
D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-
A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-
A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-
A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-
D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_20_0_0_286_
ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-
D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-
D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_20_0_0_286_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-
D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-
444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-
444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_20_0_0_286.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-
444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-
444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.20"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-
444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_20_0_0_286.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-
444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-
444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-
444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-
444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-
444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_20_0_0_286.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-
444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-
444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_20_0_0_286.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-
444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-
444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-
444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-
8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-
8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-
8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2016-01-21 03:20:55
ComboFix-quarantined-files.txt 2016-01-21 11:20
.
Pre-Run: 795,592,507,392 bytes free
Post-Run: 795,873,841,152 bytes free
.
- - End Of File - - 2F8F8962AFCF9F959C8E58BA51775DD7
A36C5E4F47E84449FF07ED3517B43A31

You might also like