GMER 1.0.15.15570 - http://www.gmer.net Rootkit scan 2011-04-11 09:12:57 Windows 5.1.2600 Dodatek Service Pack 3 Running: 9m7pvzj7.exe ---- Registry - GMER 1.0.15 ---- Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@p0 D:\Programy_i\Alcohol 120\ Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@h0 0 Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@ujdew 0x7A 0xEB 0x51 0x8B ... Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001@a0 0x20 0x01 0x00 0x00 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s1 771343423 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s2 285507792 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@h0 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@p0 D:\Programy_i\Alcohol 120\ Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@h0 0 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@ujdew 0x7A 0xEB 0x51 0x8B ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001@a0 0x20 0x01 0x00 0x00 ... Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@p0 D:\Programy_i\Alcohol 120\ Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@h0 0 Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@ujdew 0x7A 0xEB 0x51 0x8B ... Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001@a0 0x20 0x01 0x00 0x00 ... Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows@AppInit_DLLs Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows@DeviceNotSelectedTimeout 15 Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows@GDIProcessHandleQuota 10000 Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows@Spooler yes Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows@swapdisk Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows@TransmissionRetryTimeout 90 Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows@USERProcessHandleQuota 10000 Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows@LoadAppInit_DLLs 1 ---- Files - GMER 1.0.15 ---- File C:\Programy\Comodo\COMODO\COMODO Internet Security\Quarantine\7z.exe 211456 bytes executable File C:\Programy\Comodo\COMODO\COMODO Internet Security\Quarantine\7z.exe.info 118 bytes File C:\Programy\Comodo\COMODO\COMODO Internet Security\Quarantine\7zG.exe 272896 bytes executable File C:\Programy\Comodo\COMODO\COMODO Internet Security\Quarantine\7zG.exe.info 120 bytes File C:\Programy\Comodo\COMODO\COMODO Internet Security\Quarantine\Temp 0 bytes File C:\Programy\Comodo\COMODO\COMODO Internet Security\Quarantine\Temp\baseupd 0 bytes File C:\Programy\Comodo\COMODO\COMODO Internet Security\Quarantine\Uninstall.exe 120797 bytes executable File C:\Programy\Comodo\COMODO\COMODO Internet Security\Quarantine\Uninstall.exe.info 132 bytes File C:\System Volume Information\ISwift3.dat 604140 bytes File C:\System Volume Information\mdllog.dat 26148 bytes File C:\System Volume Information\MountPointManagerRemoteDatabase 0 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A} 0 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\drivetable.txt 542 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\fifo.log 1880 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47 0 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017825.exe 187352 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017826.sdb 36864 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017827.ini 7674 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017828.dll 76808 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017829.dll 1673224 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017831.config 5654 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017837.exe 5837800 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017838.exe 1175552 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017846.exe 763904 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017857.exe 1649664 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017858.exe 1649664 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017859.exe 1649664 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017861.exe 97200 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017862.exe 1295664 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017864.exe 1649664 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017865.exe 1649664 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017867.exe 1649664 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017868.exe 1946112 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017869.exe 1946112 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017870.exe 1618432 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017871.exe 1617408 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017872.exe 1617408 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017873.exe 1617408 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017874.lnk 996 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017875.lnk 466 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017876.lnk 372 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017877.lnk 588 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017878.lnk 564 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017879.lnk 588 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017880.lnk 725 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017881.lnk 795 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017882.lnk 588 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017883.lnk 415 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017885.lnk 415 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017886.lnk 777 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017887.lnk 718 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017888.lnk 372 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017889.lnk 471 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017890.lnk 372 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017891.lnk 466 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017892.lnk 478 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017893.lnk 336 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017894.lnk 669 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017895.lnk 652 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017896.lnk 726 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017897.lnk 726 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017898.lnk 726 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017899.lnk 430 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017900.lnk 699 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017902.lnk 614 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017903.lnk 995 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017904.lnk 570 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017905.lnk 621 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017906.lnk 460 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017907.lnk 514 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017908.lnk 1280 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017909.lnk 377 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017910.lnk 788 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017911.lnk 468 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017912.lnk 1429 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017913.lnk 293 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017914.lnk 545 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017915.lnk 646 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017916.lnk 631 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017917.lnk 356 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017918.lnk 599 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017920.lnk 473 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017921.lnk 635 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017922.lnk 647 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017923.lnk 647 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017924.lnk 589 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017925.lnk 611 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017926.lnk 407 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017927.lnk 590 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017928.lnk 476 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017929.lnk 476 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017930.lnk 471 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017931.lnk 1078 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017932.lnk 343 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017933.lnk 336 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017934.lnk 807 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017935.lnk 506 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017936.lnk 451 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017938.lnk 360 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017939.lnk 511 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017940.lnk 628 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017941.lnk 427 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017942.lnk 476 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017943.lnk 437 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017944.lnk 495 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017945.lnk 541 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017946.lnk 521 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017947.lnk 1387 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017948.lnk 546 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017949.lnk 667 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017950.lnk 403 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017951.lnk 355 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017952.lnk 1499 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017953.lnk 1508 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017954.lnk 554 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017866.exe 1649664 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017884.lnk 466 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017901.lnk 508 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017919.lnk 640 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017937.lnk 709 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017955.lnk 640 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017973.lnk 451 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017991.exe 1004912 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018009.exe 1175552 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018027.lnk 518 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018045.exe 910544 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018063.sdb 36864 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018081.exe 415152 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017956.lnk 550 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017957.lnk 469 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017958.lnk 1005 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017959.lnk 652 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017960.lnk 616 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017961.lnk 478 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017962.lnk 408 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017963.lnk 467 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017964.lnk 885 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017965.lnk 633 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017966.lnk 593 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017967.lnk 619 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017968.lnk 619 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017969.lnk 619 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017970.lnk 703 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017971.lnk 652 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017972.lnk 399 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017974.lnk 531 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017975.lnk 336 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017976.lnk 623 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017977.lnk 628 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017978.lnk 484 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017979.lnk 432 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017980.lnk 477 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017981.lnk 568 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017982.lnk 591 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017983.lnk 485 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017984.lnk 755 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017985.ini 188 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017986.ini 62 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017987.ini 62 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017988.exe 145184 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017989.inf 0 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017990.PNF 0 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017992.exe 1053240 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017993.exe 976896 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017994.exe 986072 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017995.dll 2029056 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017996.exe 910544 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017997.exe 457728 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017998.exe 125440 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0017999.exe 2868040 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018000.exe 94720 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018001.exe 415152 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018002.EXE 700256 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018003.exe 975872 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018004.dll 663040 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018005.exe 993728 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018006.EXE 120592 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018007.exe 256984 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018008.exe 5837800 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018010.exe 3623736 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018011.EXE 388096 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018012.exe 395776 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018013.exe 235168 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018014.sdb 6627328 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018015.sdb 36864 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018016.lnk 408 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018017.lnk 552 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018018.lnk 667 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018019.lnk 561 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018020.lnk 564 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018021.lnk 631 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018022.lnk 631 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018023.lnk 631 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018024.lnk 501 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018025.lnk 500 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018026.lnk 671 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018028.lnk 502 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018029.lnk 547 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018030.lnk 506 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018031.lnk 490 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018032.lnk 517 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018033.lnk 508 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018034.lnk 490 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018035.lnk 330 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018036.ini 188 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018037.ini 62 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018038.ini 62 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018039.exe 206624 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018040.exe 1004912 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018041.exe 1053240 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018042.exe 976896 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018043.exe 986072 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018044.dll 2090496 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018046.exe 457728 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018047.exe 125440 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018048.exe 2868040 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018049.exe 94720 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018050.exe 415152 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018051.EXE 700256 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018052.exe 975872 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018053.dll 663040 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018054.exe 993728 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018055.EXE 120592 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018056.exe 256984 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018057.exe 5837800 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018058.exe 1175552 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018059.exe 3693368 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018060.EXE 449536 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018061.exe 457216 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018062.sdb 6627328 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018064.exe 296608 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018065.ini 150 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018066.ini 188 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018067.ini 62 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018068.ini 62 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018069.exe 206624 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018070.exe 1004912 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018071.exe 1053240 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018072.exe 976896 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018073.exe 986072 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018074.dll 2090496 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018075.exe 910544 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018076.vdb 163 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018077.exe 457728 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018078.exe 125440 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018079.exe 2868040 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018080.exe 94720 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018082.EXE 700256 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018083.sdb 6631424 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018084.exe 975872 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018085.dll 663040 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018086.exe 993728 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018087.EXE 120592 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018088.exe 5837800 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018089.exe 1175552 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018090.EXE 449536 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018091.exe 457216 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018092.exe 296608 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018093.exe 4569928 bytes executable File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\A0018094.sdb 36864 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\change.log.1 102040 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\change.log.2 38564 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\change.log.3 24804 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\change.log.4 24520 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\RestorePointSize 8 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\rp.log 536 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\snapshot 0 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\snapshot\ComDb.Dat 23416 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\snapshot\domain.txt 38 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\snapshot\Repository 0 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\snapshot\Repository\$WinMgmt.CFG 20 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\snapshot\Repository\FS 0 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\snapshot\Repository\FS\INDEX.BTR 1515520 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\snapshot\Repository\FS\INDEX.MAP 788 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\snapshot\Repository\FS\MAPPING.VER 4 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\snapshot\Repository\FS\MAPPING1.MAP 13076 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\snapshot\Repository\FS\MAPPING2.MAP 13076 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\snapshot\Repository\FS\OBJECTS.DATA 25075712 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\snapshot\Repository\FS\OBJECTS.MAP 12292 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\snapshot\_REGISTRY_MACHINE_SAM 24576 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\snapshot\_REGISTRY_MACHINE_SECURITY 49152 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\snapshot\_REGISTRY_MACHINE_SOFTWARE 31739904 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\snapshot\_REGISTRY_MACHINE_SYSTEM 4861952 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\snapshot\_REGISTRY_USER_.DEFAULT 380928 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\snapshot\_REGISTRY_USER_NTUSER_S-1-5-18 380928 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19 262144 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\snapshot\_REGISTRY_USER_NTUSER_S-1-5-20 536576 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-682003330-1677128483-2147132391-500 4980736 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-20 8192 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\RP47\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-682003330-1677128483-2147132391-500 258048 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\_driver.cfg 24 bytes File C:\System Volume Information\_restore{4AC20EB3-B97F-4674-9460-CCC5B91B3A4A}\_filelst.cfg 23112 bytes ---- EOF - GMER 1.0.15 ----