RR 2 Log

Anti-malware scan started at: 15.08.
2018 07:53:17
15.08.2018 07:58:16 Running Processes
Suspicious: SmartByteTelemetry.exe = C:\PROGRAM FILES\RIVET
NETWORKS\SMARTBYTE\SMARTBYTETELEMETRY.EXE
15.08.2018 08:01:46 Unwanted Software Files
Probably Malicious: NOTIFIER.EXE = C:\WINDOWS\SYSNATIVE\NOTIFIER.EXE
15.08.2018 08:01:46 Multi AV Detected Files
Suspicious: SVCHOST.EXE = C:\USERS\BIMOS\APPDATA\ROAMING\MICROSOFT\WINDOWS\START
MENU\PROGRAMS\STARTUP\SVCHOST.EXE
Delete Marked Items Auto Start Apps->Unwanted Software Files.
NOTIFIER.EXE=C:\WINDOWS\SYSNATIVE\NOTIFIER.EXE
Delete the File:C:\WINDOWS\SYSNATIVE\NOTIFIER.EXE. You must restart your computer
to fully delete this file.
-------------------------------------------------------
15.08.2018 08:02:07 Approved File Replacement
Delete: \??\C:\Windows\system32\drivers\asw40b30c9e3cca0118.tmp
Delete: \??\C:\Windows\system32\drivers\asw dcc6fee3884c1e9.tmp
Delete: \??\C:\Windows\system32\drivers\asw2f6395c58970283d.tmp
Delete: \??\C:\Windows\system32\drivers\aswb9106ed4ba3801f9.tmp
Delete: \??\C:\Windows\system32\drivers\asw456009a7cd6286fd.tmp
Delete: \??\C:\Windows\system32\drivers\asw8dbb2d3386c6ca54.tmp
Delete: \??\C:\Windows\system32\drivers\asw2fc70a76b97db53d.tmp
Delete: \??\C:\Windows\system32\drivers\asw9a593e74b977faf7.tmp
Delete: \??\C:\Windows\system32\drivers\asw12efdcb6db4858aa.tmp
Delete: \??\C:\Windows\system32\drivers\asw9e0f7aa69a73f59f.tmp
Delete: \??\C:\Windows\system32\drivers\asw6254ff9799bbe4e6.tmp
Delete: \??\C:\Windows\system32\drivers\asw4a37eb8d4e3b79d3.tmp
Delete: \??\C:\Windows\system32\drivers\aswddafd1624ca9e509.tmp
Delete: \??\C:\Windows\system32\drivers\asw7a1c7c443a6ee843.tmp
Delete: \??\C:\Windows\system32\drivers\aswa001c5788446b7e6.tmp
Delete: \??\C:\Program Files\AVAST Software\Avast\aswcmlx.dll
Delete: \??\C:\Program Files\AVAST Software\Avast
Delete: \??\C:\Program Files\AVAST Software\Avast\aswsysx.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Inf\x64\aswbdiska.sys
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Inf\x64
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Inf\x64\aswbidsdrivera.sys
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Inf\x64\aswbidsha.sys
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Inf\x64\aswbloga.sys
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Inf\x64\aswbuniva.sys
Delete: \??\C:\Program Files\AVAST Software\Avast\BrowserCleanup.ini
Delete: \??\C:\Program Files\AVAST Software\Avast\TuneupBin\TuneupSmartScan.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\TuneupBin
Delete: \??\C:\Program Files\AVAST
Software\Avast\TuneupBin\avast_cleanup_setup_online.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\TuneupBin
Delete: \??\C:\Program Files\AVAST Software\Avast\aswDataScan.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\dnd_helper.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\gaming_hook.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\gaming_mode.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\gaming_probe.dll
Delete: \??\C:\ProgramData\AVAST Software\Avast\gaming_mode\detection2.dat
Delete: \??\C:\ProgramData\AVAST Software\Avast\gaming_mode
Delete: \??\C:\ProgramData\AVAST Software\Avast\gaming_mode\detection2.dat.ver
Delete: \??\C:\ProgramData\AVAST Software\Avast\gaming_mode\rules.dat
Delete: \??\C:\ProgramData\AVAST Software\Avast\gaming_mode\rules.dat.ver
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\dnd_helper.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\gaming_hook.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\hns_tools.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Inf\x64\aswHdsKe.sys
Delete: \??\C:\Program Files\AVAST Software\Avast\Morphisec\Protector32.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\Morphisec
Delete: \??\C:\Program Files\AVAST Software\Avast\AhResIdp.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswcommx.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswdetallocatorx.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswhookx.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswidpmx.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswidpsdkx.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswlogx.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswntsqlitex.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswpsicx.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswremovalx.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswsecapix.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswwinamapix.dll
Delete: \??\C:\ProgramData\AVAST Software\Avast\cfg\diskdrvlog.cfg
Delete: \??\C:\ProgramData\AVAST Software\Avast\cfg
Delete: \??\C:\ProgramData\AVAST Software\Avast\cfg\idpdrvlog.cfg
Delete: \??\C:\ProgramData\AVAST Software\Avast\cfg\idpehlog.cfg
Delete: \??\C:\ProgramData\AVAST Software\Avast\cfg\idplog.cfg
Delete: \??\C:\ProgramData\AVAST Software\Avast\cfg\privlog.cfg
Delete: \??\C:\ProgramData\AVAST Software\Avast\cfg\remlog.cfg
Delete: \??\C:\ProgramData\AVAST Software\Avast\cfg\secapilog.cfg
Delete: \??\C:\ProgramData\AVAST Software\Avast\cfg\univdrv.cfg
Delete: \??\C:\Program Files\AVAST Software\Avast\Morphisec\MorphiApi.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\Morphisec\MorphiDriver.sys
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswcerta.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswcmla.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswcomma.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswdetallocatora.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswfilevaulta.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswhooka.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswloga.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswnetclia.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswntsqlitea.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswpsica.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswsysa.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\vaarclient.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\pam.ico
Delete: \??\C:\Program Files\AVAST Software\Avast\pam.dll
Delete: \??\C:\ProgramData\AVAST Software\Avast\pam\pam.json
Delete: \??\C:\ProgramData\AVAST Software\Avast\pam
Delete: \??\C:\Program Files\AVAST Software\Avast\RescueDisk\waikamd64.mst
Delete: \??\C:\Program Files\AVAST Software\Avast\RescueDisk
Delete: \??\C:\Program Files\AVAST Software\Avast\RescueDisk\waikx86.mst
Delete: \??\C:\Program Files\AVAST Software\Avast\RescueDisk\AvastPE2.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\RescueDisk\Base.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\RescueDisk\aswRegLib.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\RescueDisk\aswShMin.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\RescueDisk\uiLangRes.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\rescue_disk.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\CRT\InstallCrt.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\CRT
Delete: \??\C:\Program Files\AVAST Software\Avast\SafePrice\FF
Delete: \??\C:\Program Files\AVAST Software\Avast\SafePrice\FF\sp@avast.com.xpi
Delete: \??\C:\Program Files\AVAST Software\Avast\SafePrice\FF
Delete: \??\C:\Program Files\AVAST Software\Avast\aswSecDns.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\OpenVPN\libeay32.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\OpenVPN
Delete: \??\C:\Program Files\AVAST Software\Avast\OpenVPN\ssleay32.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\OpenVPN\libpkcs11-helper-1.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\OpenVPN\lzo2.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\OpenVPN\openvpn.exe
Delete: \??\C:\ProgramData\AVAST Software\Avast\SecureLine\secureline.cfg
Delete: \??\C:\ProgramData\AVAST Software\Avast\SecureLine
Software\Avast\OpenVPN\driver\win64\ndis6\addtap.bat
Delete: \??\C:\Program Files\AVAST Software\Avast\OpenVPN\driver\win64\ndis6
Software\Avast\OpenVPN\driver\win64\ndis6\aswTap.cat
Software\Avast\OpenVPN\driver\win64\ndis6\aswTap.inf
Software\Avast\OpenVPN\driver\win64\ndis6\aswTap.sys
Software\Avast\OpenVPN\driver\win64\ndis6\deltapall.bat
Software\Avast\OpenVPN\driver\win64\ndis6\tapinstall.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\snxhk.dll
Delete: \??\C:\ProgramData\AVAST Software\Avast\snx_gconfig.xml
Delete: \??\C:\ProgramData\AVAST Software\Avast
Delete: \??\C:\Program Files\AVAST Software\Avast\snxhk64.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Inf\x64\aswSnx.sys
Delete: \??\C:\Program Files\AVAST Software\Avast\asulaunch.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\aswPatchMgt.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\FF
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\FF\wrc@avast.com.xpi
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\FF
Software\Avast\WebRep\IE\_locales\ar\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\ar
Software\Avast\WebRep\IE\_locales\be\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\be
Software\Avast\WebRep\IE\_locales\bg\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\bg
Software\Avast\WebRep\IE\_locales\bn\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\bn
Software\Avast\WebRep\IE\_locales\ca\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\ca
Software\Avast\WebRep\IE\_locales\cs\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\cs
Software\Avast\WebRep\IE\_locales\da\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\da
Software\Avast\WebRep\IE\_locales\de\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\de
Software\Avast\WebRep\IE\_locales\el\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\el
Software\Avast\WebRep\IE\_locales\en\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\en
Software\Avast\WebRep\IE\_locales\en_GB\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\en_GB
Software\Avast\WebRep\IE\_locales\es\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\es
Software\Avast\WebRep\IE\_locales\et\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\et
Software\Avast\WebRep\IE\_locales\fa\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\fa
Software\Avast\WebRep\IE\_locales\fi\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\fi
Software\Avast\WebRep\IE\_locales\fr\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\fr
Software\Avast\WebRep\IE\_locales\he\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\he
Software\Avast\WebRep\IE\_locales\hi\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\hi
Software\Avast\WebRep\IE\_locales\hr\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\hr
Software\Avast\WebRep\IE\_locales\hu\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\hu
Software\Avast\WebRep\IE\_locales\id\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\id
Software\Avast\WebRep\IE\_locales\it\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\it
Software\Avast\WebRep\IE\_locales\ja\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\ja
Software\Avast\WebRep\IE\_locales\ko\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\ko
Software\Avast\WebRep\IE\_locales\lv\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\lv
Software\Avast\WebRep\IE\_locales\ms\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\ms
Software\Avast\WebRep\IE\_locales\nb\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\nb
Software\Avast\WebRep\IE\_locales\nl\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\nl
Software\Avast\WebRep\IE\_locales\pl\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\pl
Software\Avast\WebRep\IE\_locales\pt_BR\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\pt_BR
Software\Avast\WebRep\IE\_locales\pt_PT\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\pt_PT
Software\Avast\WebRep\IE\_locales\ro\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\ro
Software\Avast\WebRep\IE\_locales\ru\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\ru
Software\Avast\WebRep\IE\_locales\sk\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\sk
Software\Avast\WebRep\IE\_locales\sl\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\sl
Software\Avast\WebRep\IE\_locales\sr\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\sr
Software\Avast\WebRep\IE\_locales\sv\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\sv
Software\Avast\WebRep\IE\_locales\th\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\th
Software\Avast\WebRep\IE\_locales\tr\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\tr
Software\Avast\WebRep\IE\_locales\uk\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\uk
Software\Avast\WebRep\IE\_locales\ur\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\ur
Software\Avast\WebRep\IE\_locales\vi\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\vi
Software\Avast\WebRep\IE\_locales\zh_CN\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\zh_CN
Software\Avast\WebRep\IE\_locales\zh_TW\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\zh_TW
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\mocks\empty.js
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\mocks
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\mocks\ga.js
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\mocks\gpt.js
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\mocks\map.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\mocks\omniture.js
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\bal.js
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates
Software\Avast\WebRep\IE\templates\blocker\blocker.html
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\blocker
Software\Avast\WebRep\IE\templates\blocker\blocker.js
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\blocker
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\clear_page.js
Software\Avast\WebRep\IE\templates\credentials\credentials.html
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\credentials
Software\Avast\WebRep\IE\templates\credentials\credentials.js
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\credentials
Software\Avast\WebRep\IE\templates\credentials_watcher.js
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\extension.css
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\ial.js
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\img\arrow.png
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\img
Software\Avast\WebRep\IE\templates\img\fblike.png
Software\Avast\WebRep\IE\templates\img\flattr.png
Software\Avast\WebRep\IE\templates\img\google+.png
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\img\grey0-
16.png
Software\Avast\WebRep\IE\templates\img\icn_bug.png
Software\Avast\WebRep\IE\templates\img\icn_bug@2x.png
Software\Avast\WebRep\IE\templates\img\icn_check.png
Software\Avast\WebRep\IE\templates\img\icn_check@2x.png
Software\Avast\WebRep\IE\templates\img\icn_checkbig.png
Software\Avast\WebRep\IE\templates\img\icn_checkbig@2x.png
Software\Avast\WebRep\IE\templates\img\icn_close.png
Software\Avast\WebRep\IE\templates\img\icn_close@2x.png
Software\Avast\WebRep\IE\templates\img\icn_close_small.png
Software\Avast\WebRep\IE\templates\img\icn_close_small@2x.png
Software\Avast\WebRep\IE\templates\img\icn_exclamationmark.png
Software\Avast\WebRep\IE\templates\img\icn_exclamationmark@2x.png
Software\Avast\WebRep\IE\templates\img\icn_extensiontop.png
Software\Avast\WebRep\IE\templates\img\icn_extensiontop_green.png
Software\Avast\WebRep\IE\templates\img\icn_extensiontop_orange.png
Software\Avast\WebRep\IE\templates\img\icn_extensiontop_red.png
Software\Avast\WebRep\IE\templates\img\icn_eye.png
Software\Avast\WebRep\IE\templates\img\icn_eye@2x.png
Software\Avast\WebRep\IE\templates\img\icn_interm.png
Software\Avast\WebRep\IE\templates\img\icn_maleware.png
Software\Avast\WebRep\IE\templates\img\icn_maleware@2x.png
Software\Avast\WebRep\IE\templates\img\icn_norating_big.png
Software\Avast\WebRep\IE\templates\img\icn_norating_big2.png
Software\Avast\WebRep\IE\templates\img\icn_norating_big2@2x.png
Software\Avast\WebRep\IE\templates\img\icn_norating_big@2x.png
Software\Avast\WebRep\IE\templates\img\icn_rates.png
Software\Avast\WebRep\IE\templates\img\icn_rates@2x.png
Software\Avast\WebRep\IE\templates\img\icn_siteforward.png
Software\Avast\WebRep\IE\templates\img\icn_siteforward@2x.png
Software\Avast\WebRep\IE\templates\img\icn_thumbdown_big.png
Software\Avast\WebRep\IE\templates\img\icn_thumbdown_big@2x.png
Software\Avast\WebRep\IE\templates\img\icn_thumblearn.png
Software\Avast\WebRep\IE\templates\img\icn_thumblearn@2x.png
Software\Avast\WebRep\IE\templates\img\icn_thumbright_big.png
Software\Avast\WebRep\IE\templates\img\icn_thumbright_big@2x.png
Software\Avast\WebRep\IE\templates\img\icn_thumbup_big.png
Software\Avast\WebRep\IE\templates\img\icn_thumbup_big@2x.png
Software\Avast\WebRep\IE\templates\img\icn_unknown.png
Software\Avast\WebRep\IE\templates\img\icn_warning.png
Software\Avast\WebRep\IE\templates\img\icn_warning@2x.png
Software\Avast\WebRep\IE\templates\img\icnclose_small.png
Software\Avast\WebRep\IE\templates\img\icnthumbdownsmall.png
Software\Avast\WebRep\IE\templates\img\icnthumbdownsmall@2x.png
Software\Avast\WebRep\IE\templates\img\icnthumbsmall.png
Software\Avast\WebRep\IE\templates\img\icnthumbsmall@2x.png
Software\Avast\WebRep\IE\templates\img\icon128.png
Software\Avast\WebRep\IE\templates\img\img_bg.jpg
Software\Avast\WebRep\IE\templates\img\inshare.png
Software\Avast\WebRep\IE\templates\img\logo_webrep.png
Software\Avast\WebRep\IE\templates\img\logo_webrepblack.png
Software\Avast\WebRep\IE\templates\img\logo_webrepblack@2x.png
Software\Avast\WebRep\IE\templates\img\logo_webrepcolor.png
Software\Avast\WebRep\IE\templates\img\logo_webrepcolor@2x.png
Software\Avast\WebRep\IE\templates\img\logo_webrepsmall.png
Software\Avast\WebRep\IE\templates\img\logo_webrepsmall@2x.png
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\img\pin.png
Software\Avast\WebRep\IE\templates\img\sas_close.png
Software\Avast\WebRep\IE\templates\img\sas_conf.png
Software\Avast\WebRep\IE\templates\img\sas_drop.png
Software\Avast\WebRep\IE\templates\img\sas_help.png
Software\Avast\WebRep\IE\templates\img\sas_logo.png
Software\Avast\WebRep\IE\templates\img\se_icn_green.png
Software\Avast\WebRep\IE\templates\img\se_icn_grey.png
Software\Avast\WebRep\IE\templates\img\se_icn_norating.png
Software\Avast\WebRep\IE\templates\img\se_icn_orange.png
Software\Avast\WebRep\IE\templates\img\se_icn_red.png
Software\Avast\WebRep\IE\templates\img\se_icn_thumbdown.png
Software\Avast\WebRep\IE\templates\img\se_icn_thumbneutral.png
Software\Avast\WebRep\IE\templates\img\se_icn_thumbup.png
Software\Avast\WebRep\IE\templates\img\switcher_dotgreen.png
Software\Avast\WebRep\IE\templates\img\switcher_dotgreen@2x.png
Software\Avast\WebRep\IE\templates\img\switcher_dotorange.png
Software\Avast\WebRep\IE\templates\img\switcher_dotorange@2x.png
Software\Avast\WebRep\IE\templates\img\switcher_dotred.png
Software\Avast\WebRep\IE\templates\img\switcher_dotred@2x.png
Software\Avast\WebRep\IE\templates\img\switcher_greenbg.png
Software\Avast\WebRep\IE\templates\img\switcher_greenbg@2x.png
Software\Avast\WebRep\IE\templates\img\switcher_orangebg.png
Software\Avast\WebRep\IE\templates\img\switcher_orangebg@2x.png
Software\Avast\WebRep\IE\templates\img\switcher_redbg.png
Software\Avast\WebRep\IE\templates\img\switcher_redbg@2x.png
Software\Avast\WebRep\IE\templates\img\switchersmall_dotgreen.png
Software\Avast\WebRep\IE\templates\img\switchersmall_dotgreen@2x.png
Software\Avast\WebRep\IE\templates\img\switchersmall_dotred.png
Software\Avast\WebRep\IE\templates\img\switchersmall_dotred@2x.png
Software\Avast\WebRep\IE\templates\img\transparent-bg.png
Software\Avast\WebRep\IE\templates\img\tumblr.png
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\img\tweet.png
Software\Avast\WebRep\IE\templates\img\vklike.png
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\img\webrep-
logo.png
Software\Avast\WebRep\IE\templates\img\webreplogo@2x.png
Software\Avast\WebRep\IE\templates\img\xinglike.png
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\jquery-
1.8.2.min.js
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\jquery.1.8.js
Software\Avast\WebRep\IE\templates\jquery.mustache.js
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\lodash.js
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\main.js
Software\Avast\WebRep\IE\templates\phishing\phishing.html
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\phishing
Software\Avast\WebRep\IE\templates\phishing\phishing.js
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\phishing
Software\Avast\WebRep\IE\templates\quirks_fix.css
Software\Avast\WebRep\IE\templates\safeshop\csl.parser.js
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\safeshop
Software\Avast\WebRep\IE\templates\safeshop\safeshop.html
Software\Avast\WebRep\IE\templates\safeshop\safeshop.js
Software\Avast\WebRep\IE\templates\safeshop\safeshop_query.js
Software\Avast\WebRep\IE\templates\safeshop\safeshophelper.html
Software\Avast\WebRep\IE\templates\safeshop\webrep.min.js
Software\Avast\WebRep\IE\templates\safezone\safezone.html
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\safezone
Software\Avast\WebRep\IE\templates\safezone\safezone.js
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\safezone
Software\Avast\WebRep\IE\templates\searchresults.js
Software\Avast\WebRep\IE\templates\searchresults_document_ready.js
Software\Avast\WebRep\IE\templates\settings\options.html
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\settings
Software\Avast\WebRep\IE\templates\settings\options.js
Software\Avast\WebRep\IE\templates\settings\settings.css
Software\Avast\WebRep\IE\templates\show_blocker_dialog.js
Software\Avast\WebRep\IE\templates\show_phishing_dialog.js
Software\Avast\WebRep\IE\templates\show_safeshop_toolbar.js
Software\Avast\WebRep\IE\templates\show_safezone_toolbar.js
Software\Avast\WebRep\IE\templates\show_sitecorrect_dialog.js
Software\Avast\WebRep\IE\templates\show_slidebar.js
Software\Avast\WebRep\IE\templates\show_welcome_page.js
Software\Avast\WebRep\IE\templates\sitecorrect\sitecorrect.html
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\sitecorrect
Software\Avast\WebRep\IE\templates\sitecorrect\sitecorrect.js
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\sitecorrect
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\templates.js
Software\Avast\WebRep\IE\templates\winbar\test_messages.js
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\winbar
Software\Avast\WebRep\IE\templates\winbar\test_winbar.html
Software\Avast\WebRep\IE\templates\winbar\winbar.html
Software\Avast\WebRep\IE\templates\winbar\winbar.js
Software\Avast\WebRep\IE\templates\winbar\winext.css
Delete: \??\C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswWrcIEBroker32.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswWrcIELoader32.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\1033\aswClnTg.htm
Delete: \??\C:\Program Files\AVAST Software\Avast\1033
Delete: \??\C:\Program Files\AVAST Software\Avast\1033\aswClnTg.txt
Delete: \??\C:\Program Files\AVAST Software\Avast\1033\aswInfTg.htm
Delete: \??\C:\Program Files\AVAST Software\Avast\1033\aswInfTg.txt
Delete: \??\C:\Program Files\AVAST Software\Avast\1033\Base.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\1033\Boot.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\1033\uiLangRes.dll
Delete: \??\C:\ProgramData\AVAST Software\Avast\sounds\1033\pup_detected.wav
Delete: \??\C:\ProgramData\AVAST Software\Avast\sounds\1033
Delete: \??\C:\ProgramData\AVAST Software\Avast\sounds\1033\scan_completed.wav
Delete: \??\C:\ProgramData\AVAST Software\Avast\sounds\1033\suspicious_detected.wav
Delete: \??\C:\ProgramData\AVAST Software\Avast\sounds\1033\threat_detected.wav
Delete: \??\C:\ProgramData\AVAST Software\Avast\sounds\1033\virus_db_updated.wav
Delete: \??\C:\ProgramData\AVAST Software\Avast\sounds\1033\welcome.wav
Delete: \??\C:\Program Files\AVAST Software\Avast\AvastSvc.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\Certificates\digicert_ca_77.der
Delete: \??\C:\Program Files\AVAST Software\Avast\Certificates
Delete: \??\C:\Program Files\AVAST Software\Avast\dll_loader.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\fltlib_wrapper.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\gui_cache.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\module_lifetime.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\shepherdsync.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\Aavm4h.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\AavmRpch.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\AvastNM.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\CommChannel.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\CommonRes.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\VisthAux.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\ashBase.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\ashQuick.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\ashServ.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\ashShell.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\ashTask.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\ashTaskEx.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\ashUpd.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\aswAMSI.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswAux.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswBrowser.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswChLic.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\aswCmnBS.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswCmnIS.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswCmnOS.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswData.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswDld.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswEngLdr.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswIP.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswLSRun.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswLog.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswProperty.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswRvrt.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswSqLt.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswStrm.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswUtil.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswVmm.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswW8ntf.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\browser_pass.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\burger_client.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\custody.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\event_manager.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\event_manager_burger.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\event_manager_er.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\event_manager_ga.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\event_routing.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\event_routing_rpc.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\ffl2.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\lim.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\log.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\network_notifications.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\process_monitor.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\sched.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\streamback.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\tasks_core.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\wsc.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\wsc_proxy.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\wsc_proxy.exe.manifest
Delete: \??\C:\ProgramData\AVAST Software\Avast\Fonts\OpenSans-Bold.ttf
Delete: \??\C:\ProgramData\AVAST Software\Avast\Fonts
Delete: \??\C:\ProgramData\AVAST Software\Avast\Fonts\OpenSans-Italic.ttf
Delete: \??\C:\ProgramData\AVAST Software\Avast\Fonts\OpenSans-Light.ttf
Delete: \??\C:\ProgramData\AVAST Software\Avast\Fonts\OpenSans-Regular.ttf
Delete: \??\C:\ProgramData\AVAST Software\Avast\Fonts\RobotoCondensed-Bold.ttf
Delete: \??\C:\ProgramData\AVAST Software\Avast\Fonts\RobotoCondensed-Regular.ttf
Delete: \??\C:\ProgramData\AVAST Software\Avast\Fonts\proximanova-bold.otf
Delete: \??\C:\ProgramData\AVAST Software\Avast\Fonts\proximanova-light.otf
Delete: \??\C:\ProgramData\AVAST Software\Avast\Fonts\proximanova-regular.otf
Delete: \??\C:\ProgramData\AVAST Software\Avast\avast5.ini
Delete: \??\C:\ProgramData\AVAST Software\Avast\sounds\fw_question.wav
Delete: \??\C:\ProgramData\AVAST Software\Avast\sounds
Delete: \??\C:\ProgramData\AVAST Software\Avast\sounds\scan_completed.wav
Delete: \??\C:\ProgramData\AVAST Software\Avast\sounds\threat_detected.wav
Delete: \??\C:\ProgramData\AVAST Software\Avast\sounds\virus_db_updated.wav
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\CommChannel.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswAMSI.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswCmnBS.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswCmnIS.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswCmnOS.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswIP.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswSqLt.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\browser_pass.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\dll_loader.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\ffl2.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\log.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\module_lifetime.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\streamback.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\tasks_core.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\Avast.VC140.CRT.cat
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\Avast.VC140.CRT.manifest
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-console-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-datetime-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-debug-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-errorhandling-
l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-file-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-handle-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-heap-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-interlocked-l1-
1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-libraryloader-
l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-localization-
l1-2-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-memory-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-namedpipe-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-
processenvironment-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-processthreads-
l1-1-0.dll
l1-1-1.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-profile-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-rtlsupport-l1-
1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-string-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-synch-l1-1-
0.dll
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-sysinfo-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-timezone-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-util-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-crt-conio-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-crt-convert-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-crt-environment-l1-
1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-crt-filesystem-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-crt-heap-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-crt-locale-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-crt-math-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-crt-multibyte-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-crt-private-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-crt-process-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-crt-runtime-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-crt-stdio-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-crt-string-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-crt-time-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-crt-utility-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\concrt140.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\msvcp140.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\ucrtbase.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\vcruntime140.dll
Software\Avast\setup\CRT\data\policy.14.0.avast.vc140.crt\amd64\Policy.14.0.Avast.V
C140.CRT.cat
Software\Avast\setup\CRT\data\policy.14.0.avast.vc140.crt\amd64
C140.CRT.manifest
Software\Avast\setup\CRT\data\policy.14.0.avast.vc140.crt\amd64
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\Avast.VC140.CRT.cat
Software\Avast\setup\CRT\data\avast.vc140.crt\x86
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\Avast.VC140.CRT.manifest
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-console-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-datetime-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-debug-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-errorhandling-l1-
1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-file-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-handle-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-heap-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-interlocked-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-libraryloader-l1-
1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-localization-l1-
2-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-memory-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-namedpipe-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-processthreads-
l1-1-0.dll
l1-1-1.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-profile-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-rtlsupport-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-string-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-synch-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-sysinfo-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-timezone-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-util-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-conio-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-convert-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-environment-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-filesystem-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-heap-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-locale-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-math-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-multibyte-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-private-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-process-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-runtime-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-stdio-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-string-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-time-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-utility-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\concrt140.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\msvcp140.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\ucrtbase.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\vcruntime140.dll
Software\Avast\setup\CRT\data\avast.vc140.mfc\x86\Avast.VC140.MFC.cat
Software\Avast\setup\CRT\data\avast.vc140.mfc\x86
Software\Avast\setup\CRT\data\avast.vc140.mfc\x86\Avast.VC140.MFC.manifest
Software\Avast\setup\CRT\data\avast.vc140.mfc\x86\mfc140u.dll
Software\Avast\setup\CRT\data\policy.14.0.avast.vc140.crt\x86\Policy.14.0.Avast.VC1
40.CRT.cat
Software\Avast\setup\CRT\data\policy.14.0.avast.vc140.crt\x86
40.CRT.manifest
Software\Avast\setup\CRT\data\policy.14.0.avast.vc140.crt\x86
Software\Avast\setup\CRT\data\policy.14.0.avast.vc140.mfc\x86\Policy.14.0.Avast.VC1
40.MFC.cat
Software\Avast\setup\CRT\data\policy.14.0.avast.vc140.mfc\x86
40.MFC.manifest
Software\Avast\setup\CRT\data\policy.14.0.avast.vc140.mfc\x86
Delete: \??\C:\Program Files\AVAST Software\Avast\AvastUI.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\CommonUI.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\anen.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\AvLaunch.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\cef.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\cef_100_percent.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\cef_extensions.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\icudtl.dat
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\am.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\ar.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\bg.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\bn.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\ca.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\cs.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\da.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\de.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\el.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\en-GB.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\en-US.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\es-419.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\es.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\et.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\fa.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\fi.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\fil.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\fr.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\gu.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\he.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\hi.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\hr.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\hu.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\id.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\it.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\ja.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\kn.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\ko.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\lt.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\lv.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\ml.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\mr.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\ms.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\nb.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\nl.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\pl.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\pt-BR.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\pt-PT.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\ro.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\ru.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\sk.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\sl.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\sr.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\sv.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\sw.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\ta.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\te.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\th.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\tr.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\uk.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\vi.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\zh-CN.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\zh-TW.pak
Delete: \??\C:\Program Files\AVAST Software\Avast\natives_blob.bin
Delete: \??\C:\Program Files\AVAST Software\Avast\snapshot_blob.bin
Delete: \??\C:\Program Files\AVAST Software\Avast\AvChrome.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\chrome_elf.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\libEGL.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\libGLESv2.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\libcef.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\libcrypto-1_1.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\libssl-1_1.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\libcrypto-1_1-x64.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\libssl-1_1-x64.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Inf\x64\aswRdr2.sys
Delete: \??\C:\Program Files\AVAST Software\Avast\License\EULA.txt
Delete: \??\C:\Program Files\AVAST Software\Avast\License
Delete: \??\C:\Program Files\AVAST Software\Avast\ashShA64.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\AavmRpch.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswProperty.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Inf\x64\aswArPot.sys
Delete: \??\C:\Windows\system32\aswBoot.exe
Delete: \??\C:\Windows\system32
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Inf\x64\aswBoot.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Inf\x64\aswElam.sys
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Inf\x64\aswHwid.sys
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Inf\x64\aswMonFlt.sys
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Inf\x64\aswRvrt.sys
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Inf\x64\aswSP.sys
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Inf\x64\aswVmm.sys
Delete: \??\C:\Program Files\AVAST Software\Avast\aswDnsCache.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswStreamFilter.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswUrlCache.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Inf\x64\aswStm.sys
Delete: \??\C:\Program Files\AVAST Software\Avast\RegSvr.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\aswRunDll.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\RegSvr.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\SetupInf.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\overseer.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\setup
Delete: \??\C:\Program Files\AVAST Software\Avast\setup
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\About.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\AntiRansomware.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\CleanupPp.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Compatibility.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Dashboard.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Debug.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Feedback.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Fusion.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Help.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\HomeSecurity.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\HomeSecurityCss.css
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\HomeSecurityHtml.html
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-ar.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-be.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-bg.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-bn.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-bn_IN.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-ca.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-cs.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-da.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-de.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-el.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-en.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-en_GB.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-en_PF.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-en_PT.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-es.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-es_ES.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-et.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-fa.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-fi.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-fr.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-he.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-hi.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-hr.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-hu.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-id.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-it.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-ja.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-ko.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-lt.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-lv.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-ms.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-nb.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-nb_NO.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-nl.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-no.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-pl.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-pt.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-pt_BR.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-pt_PT.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-ro.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-ru.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-sk.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-sl.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-sr.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-sr_CS.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-sv.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-sv_SE.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-th.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-tr.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-uk.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-ur.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-ur_IN.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-ur_PK.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-vi.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-zh.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-zh_CN.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Locale-zh_TW.json
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Localization.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Macro.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\MainCss.css
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\MainFont.css
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\MainLayout.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\MainUI.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\MainWindow.html
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Notifications.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Overlay.html
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\PerformanceBcu.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\PerformanceCleanup.js
Software\Avast\resources\PerformanceDriverUpdater.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\PerformanceGaming.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\PrivacyAntiTrack.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\PrivacyDataShredder.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\PrivacyPasswords.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\PrivacySecureLine.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Recommendations.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Scans.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\SecurityAntispam.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\SecurityFirewall.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\SecurityNetwork.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\SecurityRescueDisk.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\SecuritySandbox.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\SecuritySecureDNS.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\SecuritySoftware.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\SensitiveData.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Settings.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\SettingsComponents.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Shields.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\SmartScan.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Subscriptions.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\SvgFlags.css
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\System.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\VirusChest.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\WebCam.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Window.html
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\airbond_setup.htm
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\ask.ogg
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\check_radio_sheet.png
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\common.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\d3.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\done.ogg
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\dragIcon.gif
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\empty_page.htm
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\expand.png
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\icon_star.png
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\jquery.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\key.png
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\lens.png
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\loading.gif
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\loading.htm
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\lodash.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\logo-chrome.png
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\logo-firefox.png
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\logo-ie.png
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\moment.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\napi.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\notify.ogg
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\offline.htm
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\offline.png
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\offline_help.htm
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\offline_license.htm
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\ok.png
Software\Avast\resources\password_score_widget.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\passwords_back.png
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\passwords_backup.htm
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\passwords_browsers.htm
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\passwords_ico.png
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\ractive.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\threat.ogg
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\updatefile.json
Delete: \??\C:\Program Files\AVAST Software\Avast\AhResStd.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\AhResMai.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\asOutExt.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\ashMaiSv.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\asOutExt.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\AhAScr.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\AhResWS2.dll
Delete: \??\C:\ProgramData\AVAST Software\Avast\HtmlData\Blocked.htm
Delete: \??\C:\ProgramData\AVAST Software\Avast\HtmlData
Delete: \??\C:\ProgramData\AVAST Software\Avast\HtmlData\image001.png
Delete: \??\C:\ProgramData\AVAST Software\Avast\HtmlData
Delete: \??\C:\Program Files\AVAST Software\Avast\1033\aswClnTg.htm
Delete: \??\C:\Program Files\AVAST Software\Avast\1033\aswClnTg.txt
Delete: \??\C:\Program Files\AVAST Software\Avast\1033\aswInfTg.htm
Delete: \??\C:\Program Files\AVAST Software\Avast\1033\aswInfTg.txt
Delete: \??\C:\Program Files\AVAST Software\Avast\1033\Base.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\1033\Boot.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\1033\uiLangRes.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\1033\
Delete: \??\C:\Program Files\AVAST Software\Avast\Aavm4h.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\Aavm4h.dll.sum
Delete: \??\C:\Program Files\AVAST Software\Avast\AavmRpch.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\AhAScr.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\AhResIdp.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\AhResMai.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\AhResStd.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\AhResWS2.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\ashBase.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\ashMaiSv.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\ashQuick.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\ashServ.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\ashServ.dll.sum
Delete: \??\C:\Program Files\AVAST Software\Avast\ashShA64.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\ashShell.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\ashTask.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\ashTaskEx.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\ashUpd.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\asOutExt.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\asulaunch.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\aswAMSI.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswAux.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswBrowser.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswChLic.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\aswcmlx.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswCmnBS.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswCmnIS.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswCmnOS.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswcommx.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswData.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswDataScan.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswDataScan.dll.sum
Delete: \??\C:\Program Files\AVAST Software\Avast\aswdetallocatorx.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswDld.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswDnsCache.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswEngLdr.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswhookx.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswidpmx.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswidpsdkx.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswIP.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswJsFlt.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswLog.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswlogx.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswLSRun.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswntsqlitex.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswPatchMgt.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswProperty.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswpsicx.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswremovalx.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswRunDll.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\aswRvrt.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswsecapix.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswSecDns.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswSqLt.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswStreamFilter.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswStreamFilter.dll.sum
Delete: \??\C:\Program Files\AVAST Software\Avast\aswStrm.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswsysx.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswUrlCache.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswUtil.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswVmm.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswW8ntf.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\aswwinamapix.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\AvastNM.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\AvastNM.json
Delete: \??\C:\Program Files\AVAST Software\Avast\AvastSvc.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\AvastUI.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\AvastUI.exe.sum
Delete: \??\C:\Program Files\AVAST Software\Avast\avBugReport.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\AvChrome.dll.sum
Delete: \??\C:\Program Files\AVAST Software\Avast\AvDump32.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\AvLaunch.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\BrowserCleanup.ini
Delete: \??\C:\Program Files\AVAST Software\Avast\browser_pass.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\burger_client.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\Certificates\digicert_ca_77.der
Delete: \??\C:\Program Files\AVAST Software\Avast\Certificates\
Delete: \??\C:\Program Files\AVAST Software\Avast\chrome_elf.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\CommChannel.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\CommonRes.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\CommonUI.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\CommonUI.dll.sum
Delete: \??\C:\Program Files\AVAST Software\Avast\custody.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\algo.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\algo64.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\ArPot.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\aswAR.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\aswArray.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\aswBoot64.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\aswCleanerDLL.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\aswCmnBS.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\aswCmnIS.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\aswCmnIS64.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\aswCmnOS.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\aswEngin.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\aswFiDb.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\aswHds.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\aswJsFlt.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\aswJsFlt64.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\aswRawFS.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\aswRawFS64.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\aswRep.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\aswScan.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\BCUEngine.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\certs.map
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_agdx.dat
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_ap2.dat
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_as.dat
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_bank.dat
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_cmd.map
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_cmd.nmp
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_cmd.sig
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_dex.map
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_dex.nmp
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_dex.sig
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_dsign.dat
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_dsql.dat
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_dsql.map
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_dyna.map
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_dyna.nmp
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_dyna.sig
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_el.dat
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_elf.map
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_elf.nmp
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_elf.sig
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_elfa.map
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_elfa.nmp
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_elfa.sig
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_evope.dat
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_ext.dat
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_java.map
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_java.nmp
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_java.sig
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_js.map
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_js.nmp
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_js.sig
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_mx4.map
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_mx4.nmp
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_mx4.sig
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_mx95.map
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_mx95.nmp
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_mx95.sig
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_o7.map
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_o7.nmp
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_o7.sig
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_o7c.dat
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_o7c.map
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_ob2.dat
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_pay.dat
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_pe.map
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_pe.nmp
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_pe.sig
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_pe3.dat
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_pph.dat
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_sc.dat
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_sl.map
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_sl.nmp
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_sl.sig
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_snh.dat
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_str.map
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_str.nmp
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_str.sig
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_swf.map
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_swf.nmp
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_swf.sig
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_tx.dat
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_u.dat
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_w6.map
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_w6.nmp
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_w6.sig
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_w6c.dat
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_w6c.map
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_wat.map
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_wat.nmp
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_wat.sig
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_wh2.dat
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\db_xtn.map
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\def.ini
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\exts.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\fwAux.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\gvma64.dat
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\idp.dat
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\list_d.txt
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\list_i.txt
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\PushPin.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\Sf2.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\SWCUEngine.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\swhealthex2.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\uiext.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400\
Software\Avast\defs\18081400_stream\pkg1808140000000000.bin
Software\Avast\defs\18081400_stream\pkg180814000000000a.bin
Software\Avast\defs\18081400_stream\pkg180814000000000c.bin
Software\Avast\defs\18081400_stream\pkg180814000000000d.bin
Software\Avast\defs\18081400_stream\pkg180814000000000e.bin
Software\Avast\defs\18081400_stream\pkg180814000000000f.bin
Software\Avast\defs\18081400_stream\pkg180814000000001b.bin
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\18081400_stream\
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\aswdefs.ini
Delete: \??\C:\Program Files\AVAST Software\Avast\defs\
Delete: \??\C:\Program Files\AVAST Software\Avast\dll_loader.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\dnd_helper.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\event_manager.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\event_manager_burger.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\event_manager_er.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\event_manager_ga.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\event_routing.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\event_routing_rpc.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\ffl2.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\fltlib_wrapper.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\gaming_hook.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\gaming_mode.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\gaming_probe.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\gui_cache.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\hns_tools.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\HTMLayout.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\jsflt\
Delete: \??\C:\Program Files\AVAST Software\Avast\libcrypto-1_1.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\libssl-1_1.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\License\EULA.txt
Delete: \??\C:\Program Files\AVAST Software\Avast\License\
Delete: \??\C:\Program Files\AVAST Software\Avast\lim.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\locales\
Delete: \??\C:\Program Files\AVAST Software\Avast\log.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\module_lifetime.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\Morphisec\
Delete: \??\C:\Program Files\AVAST Software\Avast\network_notifications.dll
Software\Avast\OpenVPN\driver\win64\ndis6\addtap.bat
Software\Avast\OpenVPN\driver\win64\ndis6\aswTap.cat
Software\Avast\OpenVPN\driver\win64\ndis6\aswTap.inf
Software\Avast\OpenVPN\driver\win64\ndis6\aswTap.sys
Software\Avast\OpenVPN\driver\win64\ndis6\deltapall.bat
Software\Avast\OpenVPN\driver\win64\ndis6\tapinstall.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\OpenVPN\driver\win64\ndis6\
Delete: \??\C:\Program Files\AVAST Software\Avast\OpenVPN\driver\win64\
Delete: \??\C:\Program Files\AVAST Software\Avast\OpenVPN\driver\
Delete: \??\C:\Program Files\AVAST Software\Avast\OpenVPN\libpkcs11-helper-1.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\OpenVPN\lzo2.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\OpenVPN\openvpn.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\OpenVPN\
Delete: \??\C:\Program Files\AVAST Software\Avast\pam.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\pam.dll.sum
Delete: \??\C:\Program Files\AVAST Software\Avast\pam.ico
Delete: \??\C:\Program Files\AVAST Software\Avast\process_monitor.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\RegSvr.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\RescueDisk\aswRegLib.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\RescueDisk\aswShMin.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\RescueDisk\AvastPE2.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\RescueDisk\Base.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\RescueDisk\uiLangRes.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\RescueDisk\waikamd64.mst
Delete: \??\C:\Program Files\AVAST Software\Avast\RescueDisk\waikx86.mst
Delete: \??\C:\Program Files\AVAST Software\Avast\RescueDisk\
Delete: \??\C:\Program Files\AVAST Software\Avast\rescue_disk.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\DoNotDisturb.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Overlay.html
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Settings.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\Tuneup.js
Delete: \??\C:\Program Files\AVAST Software\Avast\resources\
Delete: \??\C:\Program Files\AVAST Software\Avast\SafePrice\FF\
Delete: \??\C:\Program Files\AVAST Software\Avast\SafePrice\
Delete: \??\C:\Program Files\AVAST Software\Avast\sched.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\SecurityProductInformation.ini
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\ais_cmp_bpc-7e7.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\ais_cmp_cleanup-7d7.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\ais_cmp_datascan-7f9.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\ais_cmp_gamingmode-809.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\ais_cmp_idp_x64-808.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\ais_cmp_pwdman-838.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\ais_cmp_rescuedisk-872.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\ais_cmp_safeprice-7d4.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\ais_cmp_secdns-85c.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\ais_cmp_secureline-7db.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\ais_cmp_secureline_x64-
7d2.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\ais_cmp_swhealth-872.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\ais_cmp_webrep-81f.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\ais_core-872.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\ais_dll_eng-872.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\ais_gen_crt_x64-826.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\ais_gen_crt_x86-825.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\ais_gen_gui-852.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\ais_gen_gui_cef-83e.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\ais_gen_openssl-7e8.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\ais_gen_openssl_x64-7d2.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\ais_gen_streamfilter-
872.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\ais_gen_streamfilter_x64-
865.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\ais_gen_tools-85f.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\ais_gen_tools_x64-85f.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\ais_gui_res-7f9.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\ais_res-872.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\ais_x64-872.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\aswOfferTool.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\avBugReport.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\avbugreport_ais-926.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\AvDump32.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\AvDump64.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\avdump_x64_ais-926.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\avdump_x86_ais-926.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\config.def
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\config.def.vpx
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-console-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-datetime-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-debug-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-errorhandling-
l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-handle-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-heap-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-interlocked-l1-
1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-libraryloader-
l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-localization-
l1-2-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-memory-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-namedpipe-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-
l1-1-0.dll
l1-1-1.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-profile-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-rtlsupport-l1-
1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-string-l1-1-
0.dll
0.dll
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-sysinfo-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-timezone-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-core-util-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-crt-conio-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-crt-convert-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-crt-environment-l1-
1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-crt-filesystem-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-crt-heap-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-crt-locale-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-crt-math-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-crt-multibyte-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-crt-private-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-crt-process-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-crt-runtime-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-crt-stdio-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-crt-string-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-crt-time-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\api-ms-win-crt-utility-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\Avast.VC140.CRT.cat
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\Avast.VC140.CRT.manifest
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\concrt140.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\msvcp140.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\ucrtbase.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\vcruntime140.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\amd64\
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-console-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-datetime-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-debug-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-errorhandling-l1-
1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-handle-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-heap-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-interlocked-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-libraryloader-l1-
1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-localization-l1-
2-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-memory-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-namedpipe-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-
l1-1-0.dll
l1-1-1.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-profile-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-rtlsupport-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-string-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-sysinfo-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-timezone-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-core-util-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-conio-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-convert-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-environment-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-filesystem-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-heap-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-locale-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-math-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-multibyte-l1-1-
0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-private-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-process-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-runtime-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-stdio-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-string-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-time-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\api-ms-win-crt-utility-l1-1-0.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\Avast.VC140.CRT.cat
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\Avast.VC140.CRT.manifest
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\concrt140.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\msvcp140.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\ucrtbase.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\vcruntime140.dll
Software\Avast\setup\CRT\data\avast.vc140.crt\x86\
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\CRT\data\avast.vc140.crt\
Software\Avast\setup\CRT\data\avast.vc140.mfc\x86\Avast.VC140.MFC.cat
Software\Avast\setup\CRT\data\avast.vc140.mfc\x86\Avast.VC140.MFC.manifest
Software\Avast\setup\CRT\data\avast.vc140.mfc\x86\mfc140u.dll
Software\Avast\setup\CRT\data\avast.vc140.mfc\x86\
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\CRT\data\avast.vc140.mfc\
C140.CRT.cat
C140.CRT.manifest
Software\Avast\setup\CRT\data\policy.14.0.avast.vc140.crt\amd64\
40.CRT.cat
40.CRT.manifest
Software\Avast\setup\CRT\data\policy.14.0.avast.vc140.crt\x86\
Software\Avast\setup\CRT\data\policy.14.0.avast.vc140.crt\
40.MFC.cat
40.MFC.manifest
Software\Avast\setup\CRT\data\policy.14.0.avast.vc140.mfc\x86\
Software\Avast\setup\CRT\data\policy.14.0.avast.vc140.mfc\
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\CRT\data\
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\CRT\InstallCrt.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\CRT\
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\HTMLayout.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Inf\x64\aswArPot.sys
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Inf\x64\aswbdiska.sys
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Inf\x64\aswbidsdrivera.sys
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Inf\x64\aswbidsha.sys
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Inf\x64\aswbloga.sys
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Inf\x64\aswBoot.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Inf\x64\aswbuniva.sys
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Inf\x64\aswElam.sys
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Inf\x64\aswHdsKe.sys
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Inf\x64\aswHwid.sys
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Inf\x64\aswMonFlt.sys
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Inf\x64\aswRdr2.sys
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Inf\x64\aswRvrt.sys
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Inf\x64\aswSnx.sys
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Inf\x64\aswSP.sys
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Inf\x64\aswSP.sys.sum
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Inf\x64\aswStm.sys
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Inf\x64\aswVmm.sys
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Inf\x64\
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Inf\
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\instcont_ais-926.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Instup.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\instup.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\instup_ais-926.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\jrog2-1810.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Offers.ini
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\offertool_ais-926.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\part-jrog2-1810.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\part-prg_ais-12050926.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\part-setup_ais-12050926.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\part-vps_win32-18081400.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\prod-pgm.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\prod-vps.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\products.def
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Proxy.ini
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\sbr.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\servers.def
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\servers.def.lkg
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\servers.def.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\setgui_ais-926.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\settings.ori
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\setup.ini
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Stats.ini
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\Stats.txt
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\uat.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\usn_cache.tsv
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\vps_32-18d2.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\vps_bootwin64-5cf.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\vps_win32-18dc.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\vps_win64-1547.vpx
Delete: \??\C:\Program Files\AVAST Software\Avast\setup\
Delete: \??\C:\Program Files\AVAST Software\Avast\shepherdsync.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\snxhk.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\snxhk64.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\streamback.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\tasks_core.dll
Software\Avast\TuneupBin\avast_cleanup_setup_online.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\TuneupBin\TuneupSmartScan.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\TuneupBin\
Delete: \??\C:\Program Files\AVAST Software\Avast\VisthAux.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\FF\
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\mocks\empty.js
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\mocks\ga.js
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\mocks\gpt.js
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\mocks\map.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\mocks\omniture.js
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\mocks\
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\bal.js
Software\Avast\WebRep\IE\templates\blocker\blocker.html
Software\Avast\WebRep\IE\templates\blocker\blocker.js
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\blocker\
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\clear_page.js
Software\Avast\WebRep\IE\templates\credentials\credentials.html
Software\Avast\WebRep\IE\templates\credentials\credentials.js
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\credentials\
Software\Avast\WebRep\IE\templates\credentials_watcher.js
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\extension.css
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\ial.js
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\img\arrow.png
Software\Avast\WebRep\IE\templates\img\fblike.png
Software\Avast\WebRep\IE\templates\img\flattr.png
Software\Avast\WebRep\IE\templates\img\google+.png
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\img\grey0-
16.png
Software\Avast\WebRep\IE\templates\img\icnclose_small.png
Software\Avast\WebRep\IE\templates\img\icnthumbdownsmall.png
Software\Avast\WebRep\IE\templates\img\icnthumbdownsmall@2x.png
Software\Avast\WebRep\IE\templates\img\icnthumbsmall.png
Software\Avast\WebRep\IE\templates\img\icnthumbsmall@2x.png
Software\Avast\WebRep\IE\templates\img\icn_bug.png
Software\Avast\WebRep\IE\templates\img\icn_bug@2x.png
Software\Avast\WebRep\IE\templates\img\icn_check.png
Software\Avast\WebRep\IE\templates\img\icn_check@2x.png
Software\Avast\WebRep\IE\templates\img\icn_checkbig.png
Software\Avast\WebRep\IE\templates\img\icn_checkbig@2x.png
Software\Avast\WebRep\IE\templates\img\icn_close.png
Software\Avast\WebRep\IE\templates\img\icn_close@2x.png
Software\Avast\WebRep\IE\templates\img\icn_close_small.png
Software\Avast\WebRep\IE\templates\img\icn_close_small@2x.png
Software\Avast\WebRep\IE\templates\img\icn_exclamationmark.png
Software\Avast\WebRep\IE\templates\img\icn_exclamationmark@2x.png
Software\Avast\WebRep\IE\templates\img\icn_extensiontop.png
Software\Avast\WebRep\IE\templates\img\icn_extensiontop_green.png
Software\Avast\WebRep\IE\templates\img\icn_extensiontop_orange.png
Software\Avast\WebRep\IE\templates\img\icn_extensiontop_red.png
Software\Avast\WebRep\IE\templates\img\icn_eye.png
Software\Avast\WebRep\IE\templates\img\icn_eye@2x.png
Software\Avast\WebRep\IE\templates\img\icn_interm.png
Software\Avast\WebRep\IE\templates\img\icn_maleware.png
Software\Avast\WebRep\IE\templates\img\icn_maleware@2x.png
Software\Avast\WebRep\IE\templates\img\icn_norating_big.png
Software\Avast\WebRep\IE\templates\img\icn_norating_big2.png
Software\Avast\WebRep\IE\templates\img\icn_norating_big2@2x.png
Software\Avast\WebRep\IE\templates\img\icn_norating_big@2x.png
Software\Avast\WebRep\IE\templates\img\icn_rates.png
Software\Avast\WebRep\IE\templates\img\icn_rates@2x.png
Software\Avast\WebRep\IE\templates\img\icn_siteforward.png
Software\Avast\WebRep\IE\templates\img\icn_siteforward@2x.png
Software\Avast\WebRep\IE\templates\img\icn_thumbdown_big.png
Software\Avast\WebRep\IE\templates\img\icn_thumbdown_big@2x.png
Software\Avast\WebRep\IE\templates\img\icn_thumblearn.png
Software\Avast\WebRep\IE\templates\img\icn_thumblearn@2x.png
Software\Avast\WebRep\IE\templates\img\icn_thumbright_big.png
Software\Avast\WebRep\IE\templates\img\icn_thumbright_big@2x.png
Software\Avast\WebRep\IE\templates\img\icn_thumbup_big.png
Software\Avast\WebRep\IE\templates\img\icn_thumbup_big@2x.png
Software\Avast\WebRep\IE\templates\img\icn_unknown.png
Software\Avast\WebRep\IE\templates\img\icn_warning.png
Software\Avast\WebRep\IE\templates\img\icn_warning@2x.png
Software\Avast\WebRep\IE\templates\img\img_bg.jpg
Software\Avast\WebRep\IE\templates\img\inshare.png
Software\Avast\WebRep\IE\templates\img\logo_webrep.png
Software\Avast\WebRep\IE\templates\img\logo_webrepblack.png
Software\Avast\WebRep\IE\templates\img\logo_webrepblack@2x.png
Software\Avast\WebRep\IE\templates\img\logo_webrepcolor.png
Software\Avast\WebRep\IE\templates\img\logo_webrepcolor@2x.png
Software\Avast\WebRep\IE\templates\img\logo_webrepsmall.png
Software\Avast\WebRep\IE\templates\img\logo_webrepsmall@2x.png
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\img\pin.png
Software\Avast\WebRep\IE\templates\img\sas_close.png
Software\Avast\WebRep\IE\templates\img\sas_conf.png
Software\Avast\WebRep\IE\templates\img\sas_drop.png
Software\Avast\WebRep\IE\templates\img\sas_help.png
Software\Avast\WebRep\IE\templates\img\sas_logo.png
Software\Avast\WebRep\IE\templates\img\se_icn_green.png
Software\Avast\WebRep\IE\templates\img\se_icn_grey.png
Software\Avast\WebRep\IE\templates\img\se_icn_norating.png
Software\Avast\WebRep\IE\templates\img\se_icn_orange.png
Software\Avast\WebRep\IE\templates\img\se_icn_red.png
Software\Avast\WebRep\IE\templates\img\se_icn_thumbdown.png
Software\Avast\WebRep\IE\templates\img\se_icn_thumbneutral.png
Software\Avast\WebRep\IE\templates\img\se_icn_thumbup.png
Software\Avast\WebRep\IE\templates\img\switchersmall_dotgreen.png
Software\Avast\WebRep\IE\templates\img\switchersmall_dotgreen@2x.png
Software\Avast\WebRep\IE\templates\img\switchersmall_dotred.png
Software\Avast\WebRep\IE\templates\img\switchersmall_dotred@2x.png
Software\Avast\WebRep\IE\templates\img\switcher_dotgreen.png
Software\Avast\WebRep\IE\templates\img\switcher_dotgreen@2x.png
Software\Avast\WebRep\IE\templates\img\switcher_dotorange.png
Software\Avast\WebRep\IE\templates\img\switcher_dotorange@2x.png
Software\Avast\WebRep\IE\templates\img\switcher_dotred.png
Software\Avast\WebRep\IE\templates\img\switcher_dotred@2x.png
Software\Avast\WebRep\IE\templates\img\switcher_greenbg.png
Software\Avast\WebRep\IE\templates\img\switcher_greenbg@2x.png
Software\Avast\WebRep\IE\templates\img\switcher_orangebg.png
Software\Avast\WebRep\IE\templates\img\switcher_orangebg@2x.png
Software\Avast\WebRep\IE\templates\img\switcher_redbg.png
Software\Avast\WebRep\IE\templates\img\switcher_redbg@2x.png
Software\Avast\WebRep\IE\templates\img\transparent-bg.png
Software\Avast\WebRep\IE\templates\img\tumblr.png
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\img\tweet.png
Software\Avast\WebRep\IE\templates\img\vklike.png
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\img\webrep-
logo.png
Software\Avast\WebRep\IE\templates\img\webreplogo@2x.png
Software\Avast\WebRep\IE\templates\img\xinglike.png
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\img\
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\jquery-
1.8.2.min.js
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\jquery.1.8.js
Software\Avast\WebRep\IE\templates\jquery.mustache.js
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\lodash.js
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\main.js
Software\Avast\WebRep\IE\templates\phishing\phishing.html
Software\Avast\WebRep\IE\templates\phishing\phishing.js
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\phishing\
Software\Avast\WebRep\IE\templates\quirks_fix.css
Software\Avast\WebRep\IE\templates\safeshop\csl.parser.js
Software\Avast\WebRep\IE\templates\safeshop\safeshop.html
Software\Avast\WebRep\IE\templates\safeshop\safeshop.js
Software\Avast\WebRep\IE\templates\safeshop\safeshophelper.html
Software\Avast\WebRep\IE\templates\safeshop\safeshop_query.js
Software\Avast\WebRep\IE\templates\safeshop\webrep.min.js
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\safeshop\
Software\Avast\WebRep\IE\templates\safezone\safezone.html
Software\Avast\WebRep\IE\templates\safezone\safezone.js
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\safezone\
Software\Avast\WebRep\IE\templates\searchresults.js
Software\Avast\WebRep\IE\templates\searchresults_document_ready.js
Software\Avast\WebRep\IE\templates\settings\options.html
Software\Avast\WebRep\IE\templates\settings\options.js
Software\Avast\WebRep\IE\templates\settings\settings.css
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\settings\
Software\Avast\WebRep\IE\templates\show_blocker_dialog.js
Software\Avast\WebRep\IE\templates\show_phishing_dialog.js
Software\Avast\WebRep\IE\templates\show_safeshop_toolbar.js
Software\Avast\WebRep\IE\templates\show_safezone_toolbar.js
Software\Avast\WebRep\IE\templates\show_sitecorrect_dialog.js
Software\Avast\WebRep\IE\templates\show_slidebar.js
Software\Avast\WebRep\IE\templates\show_welcome_page.js
Software\Avast\WebRep\IE\templates\sitecorrect\sitecorrect.html
Software\Avast\WebRep\IE\templates\sitecorrect\sitecorrect.js
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\sitecorrect\
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\templates.js
Software\Avast\WebRep\IE\templates\winbar\test_messages.js
Software\Avast\WebRep\IE\templates\winbar\test_winbar.html
Software\Avast\WebRep\IE\templates\winbar\winbar.html
Software\Avast\WebRep\IE\templates\winbar\winbar.js
Software\Avast\WebRep\IE\templates\winbar\winext.css
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\winbar\
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\templates\
Software\Avast\WebRep\IE\_locales\ar\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\ar\
Software\Avast\WebRep\IE\_locales\be\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\be\
Software\Avast\WebRep\IE\_locales\bg\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\bg\
Software\Avast\WebRep\IE\_locales\bn\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\bn\
Software\Avast\WebRep\IE\_locales\ca\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\ca\
Software\Avast\WebRep\IE\_locales\cs\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\cs\
Software\Avast\WebRep\IE\_locales\da\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\da\
Software\Avast\WebRep\IE\_locales\de\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\de\
Software\Avast\WebRep\IE\_locales\el\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\el\
Software\Avast\WebRep\IE\_locales\en\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\en\
Software\Avast\WebRep\IE\_locales\en_GB\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\en_GB\
Software\Avast\WebRep\IE\_locales\es\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\es\
Software\Avast\WebRep\IE\_locales\et\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\et\
Software\Avast\WebRep\IE\_locales\fa\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\fa\
Software\Avast\WebRep\IE\_locales\fi\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\fi\
Software\Avast\WebRep\IE\_locales\fr\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\fr\
Software\Avast\WebRep\IE\_locales\he\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\he\
Software\Avast\WebRep\IE\_locales\hi\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\hi\
Software\Avast\WebRep\IE\_locales\hr\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\hr\
Software\Avast\WebRep\IE\_locales\hu\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\hu\
Software\Avast\WebRep\IE\_locales\id\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\id\
Software\Avast\WebRep\IE\_locales\it\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\it\
Software\Avast\WebRep\IE\_locales\ja\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\ja\
Software\Avast\WebRep\IE\_locales\ko\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\ko\
Software\Avast\WebRep\IE\_locales\lv\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\lv\
Software\Avast\WebRep\IE\_locales\ms\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\ms\
Software\Avast\WebRep\IE\_locales\nb\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\nb\
Software\Avast\WebRep\IE\_locales\nl\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\nl\
Software\Avast\WebRep\IE\_locales\pl\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\pl\
Software\Avast\WebRep\IE\_locales\pt_BR\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\pt_BR\
Software\Avast\WebRep\IE\_locales\pt_PT\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\pt_PT\
Software\Avast\WebRep\IE\_locales\ro\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\ro\
Software\Avast\WebRep\IE\_locales\ru\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\ru\
Software\Avast\WebRep\IE\_locales\sk\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\sk\
Software\Avast\WebRep\IE\_locales\sl\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\sl\
Software\Avast\WebRep\IE\_locales\sr\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\sr\
Software\Avast\WebRep\IE\_locales\sv\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\sv\
Software\Avast\WebRep\IE\_locales\th\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\th\
Software\Avast\WebRep\IE\_locales\tr\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\tr\
Software\Avast\WebRep\IE\_locales\uk\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\uk\
Software\Avast\WebRep\IE\_locales\ur\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\ur\
Software\Avast\WebRep\IE\_locales\vi\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\vi\
Software\Avast\WebRep\IE\_locales\zh_CN\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\zh_CN\
Software\Avast\WebRep\IE\_locales\zh_TW\messages.json
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\zh_TW\
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\_locales\
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\IE\
Delete: \??\C:\Program Files\AVAST Software\Avast\WebRep\
Delete: \??\C:\Program Files\AVAST Software\Avast\wsc.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\wsc_proxy.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\wsc_proxy.exe.manifest
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\AavmRpch.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\asOutExt.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswAMSI.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswcerta.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswcmla.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswCmnBS.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswCmnIS.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswCmnOS.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswcomma.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswdetallocatora.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswfilevaulta.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswhooka.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswIP.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswJsFlt.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswloga.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswnetclia.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswntsqlitea.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswProperty.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswpsica.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswSqLt.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\aswsysa.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\AvDump64.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\browser_pass.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\CommChannel.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\dll_loader.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\dnd_helper.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\ffl2.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\gaming_hook.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\libcrypto-1_1-x64.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\libssl-1_1-x64.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\log.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\module_lifetime.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\RegSvr.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\SetupInf.exe
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\streamback.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\tasks_core.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\vaarclient.dll
Delete: \??\C:\Program Files\AVAST Software\Avast\x64\
Delete: \??\C:\Program Files\AVAST Software\Avast\
Delete: \??\C:\Program Files\AVAST Software
Delete: \??\C:\Program Files
Delete: \??\C:\ProgramData\AVAST Software\Avast\aswResp.dat
Delete: \??\C:\ProgramData\AVAST Software\Avast\avast5.ini
Delete: \??\C:\ProgramData\AVAST Software\Avast\AvEmUpdate.ini
Delete: \??\C:\ProgramData\AVAST Software\Avast\burger_client\825E3DD4-926B-4EB9-
A66E-9F88AAD28A0F\
Delete: \??\C:\ProgramData\AVAST Software\Avast\burger_client\8866F8A9-70C9-43A2-
BFBE-EE00AA2DC417\44ED97C8-2D40-4A50-913D-673F6858B9AF
Delete: \??\C:\ProgramData\AVAST Software\Avast\burger_client\8866F8A9-70C9-43A2-
BFBE-EE00AA2DC417\
Delete: \??\C:\ProgramData\AVAST Software\Avast\burger_client\
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\Cache.dat
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\generic_uninstaller.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\3FB06EEC-
013D-4366-9918-71B97DFB84EB
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\Avast
Antivirus
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\DAEMON Tools
Lite
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\Google Chrome
Delete: \??\C:\ProgramData\AVAST
Software\Avast\Cache\InstallLocation\HomeStudentRetail - en-us
Software\Avast\Cache\InstallLocation\InstallShield_{457EFE69-8F49-43E0-80F9-
1DEF4F7690C2}
Software\Avast\Cache\InstallLocation\InstallShield_{48114909-3C3B-43E6-BF98-
AE9C396500A3}
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\Mozilla
Firefox 61.0.2 (x64 en-US)
Software\Avast\Cache\InstallLocation\MozillaMaintenanceService
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\Steam
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\Steam App
431960
578080
582010
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\Tom Clancys
Ghost Recon Wildlands_is1
Software\Avast\Cache\InstallLocation\VulkanRT1.0.26.0
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\{050d4fc8-
5d48-4b8f-8972-47c82c46020f}
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\{1CEAC85D-
2590-4760-800F-8DE5E91F3700}
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\{33E712C1-
2183-421C-9BC8-C902DB9C596C}
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\{35BEC446-
269E-42E4-8EED-191A38CCFF3D}
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\{409CB30E-
E457-4008-9B1A-ED1B9EA21140}
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\{5BC2B5AB-
80DE-4E83-B8CF-426902051D0A}
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\{5c045b7f-
e561-4794-91f8-c6cda0893107}
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\{638b58cc-
a268-482a-b0b2-4f2e25993cc1}
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\{654EE65D-
FAA4-4EA6-8C07-DC94E6A304D4}
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\{670B1B49-
9FD3-4827-9B41-471EFF580AA8}
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\{7474cd6e-
76cc-4257-837e-5b9261e526af}
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\{74d58082-
09be-4059-afb8-50334cde261d}
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\{7f51bdb9-
ee21-49ee-94d6-90afc321780e}
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\{7FADF1ED-
241A-4F82-B8FD-19BD0A82FFA0}
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\{84D8451D-
2ED6-3A59-ABA5-2A447F7C6310}
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\{87CF757E-
C1F1-4D22-865C-00C6950B5258}
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\{8ce1a5ae-
856e-4b8e-a0e8-27dd7a209276}
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\{917c2887-
4ed0-4389-9b51-616905bcf34f}
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\{99B7C4B5-
DC14-441D-A5B6-7340F682BC81}
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\{A951B9A0-
13C0-4A4B-8E04-3CCF05701086}
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\{B2FE1952-
0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver
0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience
0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX
0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\{c9e1b9ee-
1986-4d09-a1f3-004aaa57701e}
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\{ce085a78-
074e-4823-8dc1-8a721b94b76d}
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\{D8AE5F9D-
647C-49B4-A666-1C20B44EC0E1}
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\{EC62F71A-
6CFA-4918-9EBC-99BFF86DB3C9}
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\{F0E3AD40-
2BBD-4360-9C76-B9AC9A5886EA}
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\{F132AF7F-
7BCA-4EDE-8A7C-958108FE7DBC}
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\{F6B5BD59-
21F0-47F8-A6C6-63BAEB1A6569}
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\{F7E7F0CB-
AA41-4D5A-B6F2-8E6738EB063F}
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\{F8AAFD5D-
FCCC-493D-80EA-1E8EFE588021}_is1
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\InstallLocation\
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cache\
Delete: \??\C:\ProgramData\AVAST Software\Avast\CatCache.dat
Delete: \??\C:\ProgramData\AVAST Software\Avast\cfg\diskdrvlog.cfg
Delete: \??\C:\ProgramData\AVAST Software\Avast\cfg\idpdrvlog.cfg
Delete: \??\C:\ProgramData\AVAST Software\Avast\cfg\idpehlog.cfg
Delete: \??\C:\ProgramData\AVAST Software\Avast\cfg\idplog.cfg
Delete: \??\C:\ProgramData\AVAST Software\Avast\cfg\privlog.cfg
Delete: \??\C:\ProgramData\AVAST Software\Avast\cfg\remlog.cfg
Delete: \??\C:\ProgramData\AVAST Software\Avast\cfg\secapilog.cfg
Delete: \??\C:\ProgramData\AVAST Software\Avast\cfg\univdrv.cfg
Delete: \??\C:\ProgramData\AVAST Software\Avast\cfg\
Delete: \??\C:\ProgramData\AVAST Software\Avast\chest\index.xml
Delete: \??\C:\ProgramData\AVAST Software\Avast\chest\
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cleanup\scan_results.json
Delete: \??\C:\ProgramData\AVAST Software\Avast\Cleanup\
Delete: \??\C:\ProgramData\AVAST Software\Avast\custody\
Delete: \??\C:\ProgramData\AVAST Software\Avast\datascan\datascan.ini
Delete: \??\C:\ProgramData\AVAST Software\Avast\datascan\
Delete: \??\C:\ProgramData\AVAST Software\Avast\DB\removal.dat
Delete: \??\C:\ProgramData\AVAST Software\Avast\DB\
Delete: \??\C:\ProgramData\AVAST Software\Avast\db1d2b5409bcf23cd-86acba86.dat
Delete: \??\C:\ProgramData\AVAST Software\Avast\db1d432c32103203d-2e938882.dat
Delete: \??\C:\ProgramData\AVAST Software\Avast\db_dstorage.dat
Delete: \??\C:\ProgramData\AVAST Software\Avast\db_qstorage.dat
Delete: \??\C:\ProgramData\AVAST Software\Avast\db_storage.dat
Delete: \??\C:\ProgramData\AVAST Software\Avast\db_submit2.time.dat
Delete: \??\C:\ProgramData\AVAST Software\Avast\doodlebug.dat
Delete: \??\C:\ProgramData\AVAST Software\Avast\dwjobs\
Delete: \??\C:\ProgramData\AVAST Software\Avast\ffl2.dat
Delete: \??\C:\ProgramData\AVAST Software\Avast\FileInfo2.db
Delete: \??\C:\ProgramData\AVAST Software\Avast\Fonts\OpenSans-Bold.ttf
Delete: \??\C:\ProgramData\AVAST Software\Avast\Fonts\OpenSans-Italic.ttf
Delete: \??\C:\ProgramData\AVAST Software\Avast\Fonts\OpenSans-Light.ttf
Delete: \??\C:\ProgramData\AVAST Software\Avast\Fonts\OpenSans-Regular.ttf
Delete: \??\C:\ProgramData\AVAST Software\Avast\Fonts\proximanova-bold.otf
Delete: \??\C:\ProgramData\AVAST Software\Avast\Fonts\proximanova-light.otf
Delete: \??\C:\ProgramData\AVAST Software\Avast\Fonts\proximanova-regular.otf
Delete: \??\C:\ProgramData\AVAST Software\Avast\Fonts\RobotoCondensed-Bold.ttf
Delete: \??\C:\ProgramData\AVAST Software\Avast\Fonts\RobotoCondensed-Regular.ttf
Delete: \??\C:\ProgramData\AVAST Software\Avast\Fonts\
Delete: \??\C:\ProgramData\AVAST Software\Avast\fw\
Delete: \??\C:\ProgramData\AVAST Software\Avast\gaming_mode\blocked_windows.json
Delete: \??\C:\ProgramData\AVAST Software\Avast\gaming_mode\detection2.dat
Delete: \??\C:\ProgramData\AVAST Software\Avast\gaming_mode\detection2.dat.ver
Delete: \??\C:\ProgramData\AVAST Software\Avast\gaming_mode\games.json
Delete: \??\C:\ProgramData\AVAST Software\Avast\gaming_mode\rules.dat
Delete: \??\C:\ProgramData\AVAST Software\Avast\gaming_mode\rules.dat.ver
Delete: \??\C:\ProgramData\AVAST Software\Avast\gaming_mode\tested_apps.json
Delete: \??\C:\ProgramData\AVAST Software\Avast\gaming_mode\
Delete: \??\C:\ProgramData\AVAST Software\Avast\gf2engine\analyzeitems.txt
Delete: \??\C:\ProgramData\AVAST Software\Avast\gf2engine\diskAnalyze.dat
Delete: \??\C:\ProgramData\AVAST Software\Avast\gf2engine\diskSimpleAnalyze.dat
Delete: \??\C:\ProgramData\AVAST Software\Avast\gf2engine\gf2engine.ini
Delete: \??\C:\ProgramData\AVAST Software\Avast\gf2engine\regAnalyze.dat
Delete: \??\C:\ProgramData\AVAST Software\Avast\gf2engine\regSimpleAnalyze.dat
Delete: \??\C:\ProgramData\AVAST Software\Avast\gf2engine\
Delete: \??\C:\ProgramData\AVAST Software\Avast\hns\Hns.ini
Delete: \??\C:\ProgramData\AVAST Software\Avast\hns\universe.blob
Delete: \??\C:\ProgramData\AVAST Software\Avast\hns\
Delete: \??\C:\ProgramData\AVAST Software\Avast\HtmlData\Blocked.htm
Delete: \??\C:\ProgramData\AVAST Software\Avast\HtmlData\image001.png
Delete: \??\C:\ProgramData\AVAST Software\Avast\HtmlData\
Software\Avast\icons\0d7a29843a98dc4f24935aafe4398890d55091cf.ico
Software\Avast\icons\17ed03fa129f15fe248a6a7d9e9745f4562bf4e1.ico
Software\Avast\icons\1a05201945e28c62f42e33883264fc679686bb62.ico
Software\Avast\icons\1b929cf7754fa0d4de8aa9f5ed8f332b9d08a7e5.ico
Software\Avast\icons\1d8d2adc55c9ba67389a9626289a74f21590e1e0.ico
Software\Avast\icons\24c0d8b9af774a19635784aaa935bb52a70b3212.ico
Software\Avast\icons\24cb49a2237614b66499d79a3a07bd24d2f72e59.ico
Software\Avast\icons\371523095b4f3882b1f20a9fd993f28923e7c9ca.ico
Software\Avast\icons\45f4b75733d716ddd04bc4ab49d53397aa32a794.ico
Software\Avast\icons\4d4fc0addc672ea0436dc0573e3d92582b9e1ee4.ico
Software\Avast\icons\4d692c312797eb0b2d19eee9f5427e1e48494342.ico
Software\Avast\icons\4d96f4a1a7ca540a4f69472eee80c72bd7609b90.ico
Software\Avast\icons\517c842e36e505312460023c9aba79950d3ce61b.ico
Software\Avast\icons\5684f52eb3f54e866da3e44e2e90bb2206479840.ico
Software\Avast\icons\571499dac8606b06d2d041d6b796b130d47dc621.ico
Software\Avast\icons\5f95e2afc022999cb99b11275dce2efdfe032481.ico
Software\Avast\icons\61285bc15d20f1146f28063ee616d6f947b5d1d7.ico
Software\Avast\icons\63c0409a3ceffee2b223f05738324d7c8a70d075.ico
Software\Avast\icons\648122e61c51f11e003ccf6f0d73f234df867e38.ico
Software\Avast\icons\65ac26bf65fb736a39cdf9c2ec94b74da2e605f3.ico
Software\Avast\icons\752aebd2f503ab979b441c1a3667d4effb05112b.ico
Software\Avast\icons\7602556177916c48686e324ccb0b1c2446589950.ico
Software\Avast\icons\7fd6c1cc5231ee01fd00cfbbef039b1e1a0952cc.ico
Software\Avast\icons\816d5101539b830a5ef351f85a075c96171fbe68.ico
Software\Avast\icons\9cc9d15771422682c142cfabec8ba27cd22a5078.ico
Software\Avast\icons\a83970f5ed966b5c0993705075bd5541ce69283f.ico
Software\Avast\icons\a86ce36a4c96939196be45ff7411ce9bcb89fb9e.ico
Software\Avast\icons\b07d32ceabff6b9a347b5846293c38a7f1285403.ico
Software\Avast\icons\b261cca99dd7a684ca091603446b56c27c414478.ico
Software\Avast\icons\b3c18e4bad2f30ce2640143a0c0688c277437be2.ico
Software\Avast\icons\b6a076f033381c7d08d926181a7e00ef2264e712.ico
Software\Avast\icons\c6006e123e4ee81e83d4656d41ff40801938486c.ico
Software\Avast\icons\d5a96e84ef7cae2fae5c8e3c16757440728b62cc.ico
Software\Avast\icons\d5c08d2fd63c061758430ff0a88475b2685015ee.ico
Software\Avast\icons\d8a54a8c3737deb25ee1430c8ce302ca5ebe7d81.ico
Software\Avast\icons\df0d316e6c85d487fb57d7d8c0da67cde4f3904d.ico
Software\Avast\icons\eb185685e51a59832ca0fdbc32b65ad7fda3cfab.ico
Software\Avast\icons\f6735295d373fc78751e1742ced0732f2dff5127.ico
Software\Avast\icons\f758fe895bddf667042a39c4538f0b9f069f054c.ico
Software\Avast\icons\f9997e23eec2c16511341e45279f34f928c30cd5.ico
Software\Avast\icons\ff9edebcc5b3b178253d204bae4c7d9c7a2f1d8d.ico
Delete: \??\C:\ProgramData\AVAST Software\Avast\icons\msiexec.ico
Delete: \??\C:\ProgramData\AVAST Software\Avast\icons\
Delete: \??\C:\ProgramData\AVAST Software\Avast\IDP.ini
Delete: \??\C:\ProgramData\AVAST Software\Avast\IDS\config\ShortcutCache.dat
Delete: \??\C:\ProgramData\AVAST Software\Avast\IDS\config\
Delete: \??\C:\ProgramData\AVAST Software\Avast\IDS\malwareprofile\backup.dat
Delete: \??\C:\ProgramData\AVAST Software\Avast\IDS\malwareprofile\cache.dat
Delete: \??\C:\ProgramData\AVAST Software\Avast\IDS\malwareprofile\nodes.dat
Delete: \??\C:\ProgramData\AVAST Software\Avast\IDS\malwareprofile\
Delete: \??\C:\ProgramData\AVAST Software\Avast\IDS\outbox\
Delete: \??\C:\ProgramData\AVAST Software\Avast\IDS\profile\globalLoadable.dat
Delete: \??\C:\ProgramData\AVAST Software\Avast\IDS\profile\
Delete: \??\C:\ProgramData\AVAST Software\Avast\IDS\quarantine\
Delete: \??\C:\ProgramData\AVAST Software\Avast\IDS\
Delete: \??\C:\ProgramData\AVAST Software\Avast\journal\
Delete: \??\C:\ProgramData\AVAST Software\Avast\jsperf.dat
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\Amsi.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\arpot.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\aswAr.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\avastopm.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\AvastSvc.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\AvastUI.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\BCUEngine-trace.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\BCUEngine.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\Browser-Cleanup-silent.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\Browser-Cleanup.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\BugReport.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\CommChannel.Protocol.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\commonpriv.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\commonpriv.log.lock
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\dnd_helper.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\DumpProcess.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\event_manager.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\FilterEngine.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\GamingMode.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\gf2engine.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\Hns.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\HtmlRemoteContent.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\idpagent.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\idpagent.log.1
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\idpagent.log.lock
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\idpagentmonitor.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\idpagentmonitor.log.lock
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\idpeh.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\idpeh.log.lock
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\idpluascript.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\idpluascript.log.1
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\idpluascript.log.lock
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\lim.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\LogFilesWithReport.status
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\Mail.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\psi.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\psi.log.lock
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\PushPin0.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\removal.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\removal.log.lock
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\Resident.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\secapi.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\secapi.log.lock
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\selfdef.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\softwarehealth.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\StreamFilter.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\StreamingUpdate.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\SWCUEngine.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\swhealthex.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\szb.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\UITracking.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\univdrv.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\univdrv.log.lock
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\unp306840541454335727x-
manual.mdmp
manual.mdmp.status
unhandled.mdmp
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\UrlInfoQuery.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\vpn_engine.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\vps.etl
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\vps.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\wsc.log
Delete: \??\C:\ProgramData\AVAST Software\Avast\log\
Delete: \??\C:\ProgramData\AVAST Software\Avast\Log.db
Delete: \??\C:\ProgramData\AVAST Software\Avast\lscache.dat
Delete: \??\C:\ProgramData\AVAST Software\Avast\lsdb2.json
Delete: \??\C:\ProgramData\AVAST Software\Avast\lsdb2.json.old
Delete: \??\C:\ProgramData\AVAST Software\Avast\moved\
Delete: \??\C:\ProgramData\AVAST Software\Avast\nsf\
Delete: \??\C:\ProgramData\AVAST Software\Avast\opm\temp\
Delete: \??\C:\ProgramData\AVAST Software\Avast\opm\
Delete: \??\C:\ProgramData\AVAST Software\Avast\pam\pam.json
Delete: \??\C:\ProgramData\AVAST Software\Avast\pam\
Delete: \??\C:\ProgramData\AVAST Software\Avast\psi.db
Delete: \??\C:\ProgramData\AVAST Software\Avast\report\BehaviorShield.txt
Delete: \??\C:\ProgramData\AVAST Software\Avast\report\EmailShield.txt
Delete: \??\C:\ProgramData\AVAST Software\Avast\report\FileSystemShield.txt
Delete: \??\C:\ProgramData\AVAST Software\Avast\report\WebShield.txt
Delete: \??\C:\ProgramData\AVAST Software\Avast\report\
Delete: \??\C:\ProgramData\AVAST Software\Avast\requests.gdpr
Delete: \??\C:\ProgramData\AVAST Software\Avast\RouterChangeNotif.ini
Delete: \??\C:\ProgramData\AVAST Software\Avast\ScanStats.ini
Delete: \??\C:\ProgramData\AVAST Software\Avast\SecureLine\secureline.cfg
Delete: \??\C:\ProgramData\AVAST Software\Avast\SecureLine\
Delete: \??\C:\ProgramData\AVAST Software\Avast\SecurityProductInformation.ini
Delete: \??\C:\ProgramData\AVAST Software\Avast\snx_gconfig.xml
Delete: \??\C:\ProgramData\AVAST Software\Avast\snx_lconfig.xml
Delete: \??\C:\ProgramData\AVAST Software\Avast\sounds\1033\pup_detected.wav
Delete: \??\C:\ProgramData\AVAST Software\Avast\sounds\1033\scan_completed.wav
Delete: \??\C:\ProgramData\AVAST Software\Avast\sounds\1033\suspicious_detected.wav
Delete: \??\C:\ProgramData\AVAST Software\Avast\sounds\1033\threat_detected.wav
Delete: \??\C:\ProgramData\AVAST Software\Avast\sounds\1033\virus_db_updated.wav
Delete: \??\C:\ProgramData\AVAST Software\Avast\sounds\1033\welcome.wav
Delete: \??\C:\ProgramData\AVAST Software\Avast\sounds\1033\
Delete: \??\C:\ProgramData\AVAST Software\Avast\sounds\fw_question.wav
Delete: \??\C:\ProgramData\AVAST Software\Avast\sounds\scan_completed.wav
Delete: \??\C:\ProgramData\AVAST Software\Avast\sounds\threat_detected.wav
Delete: \??\C:\ProgramData\AVAST Software\Avast\sounds\virus_db_updated.wav
Delete: \??\C:\ProgramData\AVAST Software\Avast\sounds\
Delete: \??\C:\ProgramData\AVAST Software\Avast\spool\suspic\
Delete: \??\C:\ProgramData\AVAST Software\Avast\spool\
Delete: \??\C:\ProgramData\AVAST Software\Avast\SWCUData\Cache\Cache.dat
Software\Avast\SWCUData\Cache\generic_uninstaller.log
Software\Avast\SWCUData\Cache\InstallLocation\3FB06EEC-013D-4366-9918-71B97DFB84EB
Software\Avast\SWCUData\Cache\InstallLocation\Avast Antivirus
Software\Avast\SWCUData\Cache\InstallLocation\DAEMON Tools Lite
Software\Avast\SWCUData\Cache\InstallLocation\Google Chrome
Software\Avast\SWCUData\Cache\InstallLocation\HomeStudentRetail - en-us
Software\Avast\SWCUData\Cache\InstallLocation\InstallShield_{457EFE69-8F49-43E0-
80F9-1DEF4F7690C2}
Software\Avast\SWCUData\Cache\InstallLocation\InstallShield_{48114909-3C3B-43E6-
BF98-AE9C396500A3}
Software\Avast\SWCUData\Cache\InstallLocation\Mozilla Firefox 61.0.2 (x64 en-US)
Software\Avast\SWCUData\Cache\InstallLocation\MozillaMaintenanceService
Software\Avast\SWCUData\Cache\InstallLocation\Steam
Software\Avast\SWCUData\Cache\InstallLocation\Steam App 431960
Delete: \??\C:\ProgramData\AVAST Software\Avast\SWCUData\Cache\InstallLocation\Tom
Clancys Ghost Recon Wildlands_is1
Software\Avast\SWCUData\Cache\InstallLocation\VulkanRT1.0.26.0
Delete: \??\C:\ProgramData\AVAST Software\Avast\SWCUData\Cache\InstallLocation\
{050d4fc8-5d48-4b8f-8972-47c82c46020f}
{1CEAC85D-2590-4760-800F-8DE5E91F3700}
{33E712C1-2183-421C-9BC8-C902DB9C596C}
{35BEC446-269E-42E4-8EED-191A38CCFF3D}
{409CB30E-E457-4008-9B1A-ED1B9EA21140}
{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}
{5c045b7f-e561-4794-91f8-c6cda0893107}
{638b58cc-a268-482a-b0b2-4f2e25993cc1}
{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}
{670B1B49-9FD3-4827-9B41-471EFF580AA8}
{7474cd6e-76cc-4257-837e-5b9261e526af}
{74d58082-09be-4059-afb8-50334cde261d}
{7f51bdb9-ee21-49ee-94d6-90afc321780e}
{7FADF1ED-241A-4F82-B8FD-19BD0A82FFA0}
{84D8451D-2ED6-3A59-ABA5-2A447F7C6310}
{87CF757E-C1F1-4D22-865C-00C6950B5258}
{8ce1a5ae-856e-4b8e-a0e8-27dd7a209276}
{917c2887-4ed0-4389-9b51-616905bcf34f}
{99B7C4B5-DC14-441D-A5B6-7340F682BC81}
{A951B9A0-13C0-4A4B-8E04-3CCF05701086}
{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver
{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience
{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX
{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver
{c9e1b9ee-1986-4d09-a1f3-004aaa57701e}
{ce085a78-074e-4823-8dc1-8a721b94b76d}
{D8AE5F9D-647C-49B4-A666-1C20B44EC0E1}
{EC62F71A-6CFA-4918-9EBC-99BFF86DB3C9}
{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}
{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
{F6B5BD59-21F0-47F8-A6C6-63BAEB1A6569}
{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}
{F8AAFD5D-FCCC-493D-80EA-1E8EFE588021}_is1
Delete: \??\C:\ProgramData\AVAST Software\Avast\SWCUData\Cache\
Software\Avast\SWCUData\icons\0d7a29843a98dc4f24935aafe4398890d55091cf.ico
Software\Avast\SWCUData\icons\17ed03fa129f15fe248a6a7d9e9745f4562bf4e1.ico
Software\Avast\SWCUData\icons\1a05201945e28c62f42e33883264fc679686bb62.ico
Software\Avast\SWCUData\icons\1b929cf7754fa0d4de8aa9f5ed8f332b9d08a7e5.ico
Software\Avast\SWCUData\icons\1d8d2adc55c9ba67389a9626289a74f21590e1e0.ico
Software\Avast\SWCUData\icons\24c0d8b9af774a19635784aaa935bb52a70b3212.ico
Software\Avast\SWCUData\icons\24cb49a2237614b66499d79a3a07bd24d2f72e59.ico
Software\Avast\SWCUData\icons\371523095b4f3882b1f20a9fd993f28923e7c9ca.ico
Software\Avast\SWCUData\icons\45f4b75733d716ddd04bc4ab49d53397aa32a794.ico
Software\Avast\SWCUData\icons\4d4fc0addc672ea0436dc0573e3d92582b9e1ee4.ico
Software\Avast\SWCUData\icons\4d692c312797eb0b2d19eee9f5427e1e48494342.ico
Software\Avast\SWCUData\icons\517c842e36e505312460023c9aba79950d3ce61b.ico
Software\Avast\SWCUData\icons\5684f52eb3f54e866da3e44e2e90bb2206479840.ico
Software\Avast\SWCUData\icons\571499dac8606b06d2d041d6b796b130d47dc621.ico
Software\Avast\SWCUData\icons\5f95e2afc022999cb99b11275dce2efdfe032481.ico
Software\Avast\SWCUData\icons\61285bc15d20f1146f28063ee616d6f947b5d1d7.ico
Software\Avast\SWCUData\icons\63c0409a3ceffee2b223f05738324d7c8a70d075.ico
Software\Avast\SWCUData\icons\648122e61c51f11e003ccf6f0d73f234df867e38.ico
Software\Avast\SWCUData\icons\65ac26bf65fb736a39cdf9c2ec94b74da2e605f3.ico
Software\Avast\SWCUData\icons\752aebd2f503ab979b441c1a3667d4effb05112b.ico
Software\Avast\SWCUData\icons\7602556177916c48686e324ccb0b1c2446589950.ico
Software\Avast\SWCUData\icons\7fd6c1cc5231ee01fd00cfbbef039b1e1a0952cc.ico
Software\Avast\SWCUData\icons\816d5101539b830a5ef351f85a075c96171fbe68.ico
Software\Avast\SWCUData\icons\9cc9d15771422682c142cfabec8ba27cd22a5078.ico
Software\Avast\SWCUData\icons\a83970f5ed966b5c0993705075bd5541ce69283f.ico
Software\Avast\SWCUData\icons\a86ce36a4c96939196be45ff7411ce9bcb89fb9e.ico
Software\Avast\SWCUData\icons\b07d32ceabff6b9a347b5846293c38a7f1285403.ico
Software\Avast\SWCUData\icons\b261cca99dd7a684ca091603446b56c27c414478.ico
Software\Avast\SWCUData\icons\b3c18e4bad2f30ce2640143a0c0688c277437be2.ico
Software\Avast\SWCUData\icons\b6a076f033381c7d08d926181a7e00ef2264e712.ico
Software\Avast\SWCUData\icons\c6006e123e4ee81e83d4656d41ff40801938486c.ico
Software\Avast\SWCUData\icons\d5a96e84ef7cae2fae5c8e3c16757440728b62cc.ico
Software\Avast\SWCUData\icons\d5c08d2fd63c061758430ff0a88475b2685015ee.ico
Software\Avast\SWCUData\icons\df0d316e6c85d487fb57d7d8c0da67cde4f3904d.ico
Software\Avast\SWCUData\icons\eb185685e51a59832ca0fdbc32b65ad7fda3cfab.ico
Software\Avast\SWCUData\icons\f6735295d373fc78751e1742ced0732f2dff5127.ico
Software\Avast\SWCUData\icons\f758fe895bddf667042a39c4538f0b9f069f054c.ico
Software\Avast\SWCUData\icons\f9997e23eec2c16511341e45279f34f928c30cd5.ico
Software\Avast\SWCUData\icons\ff9edebcc5b3b178253d204bae4c7d9c7a2f1d8d.ico
Delete: \??\C:\ProgramData\AVAST Software\Avast\SWCUData\icons\msiexec.ico
Delete: \??\C:\ProgramData\AVAST Software\Avast\SWCUData\icons\
Delete: \??\C:\ProgramData\AVAST Software\Avast\SWCUData\
Delete: \??\C:\ProgramData\AVAST Software\Avast\swh_stats.json
Delete: \??\C:\ProgramData\AVAST Software\Avast\swh_stats.proc
Delete: \??\C:\ProgramData\AVAST Software\Avast\tuneupcfg.ini
Delete: \??\C:\ProgramData\AVAST Software\Avast\TUProgMan.10.tudb
Delete: \??\C:\ProgramData\AVAST Software\Avast\TUProgManagerCache.10.tudb
Delete: \??\C:\ProgramData\AVAST Software\Avast\URL.db
Delete: \??\C:\ProgramData\AVAST Software\Avast\WebmailStat.dat
Delete: \??\C:\ProgramData\AVAST Software\Avast\wscert.der
Delete: \??\C:\ProgramData\AVAST Software\Avast\
Delete: \??\C:\ProgramData\AVAST Software
Delete: \??\C:\ProgramData
Delete: \??\C:\Users\bimos\AppData\Roaming\AVAST Software\Avast\Cache\Cache\data_0
Delete: \??\C:\Users\bimos\AppData\Roaming\AVAST Software\Avast\Cache\Cache\index
Delete: \??\C:\Users\bimos\AppData\Roaming\AVAST Software\Avast\Cache\Cache\
Delete: \??\C:\Users\bimos\AppData\Roaming\AVAST Software\Avast\Cache\Cookies
Delete: \??\C:\Users\bimos\AppData\Roaming\AVAST Software\Avast\Cache\Cookies-
journal
Delete: \??\C:\Users\bimos\AppData\Roaming\AVAST Software\Avast\Cache\Local
Storage\https_local.avast.com_0.localstorage
Storage\https_local.avast.com_0.localstorage-journal
Storage\
Delete: \??\C:\Users\bimos\AppData\Roaming\AVAST Software\Avast\Cache\NCcache.dat
Delete: \??\C:\Users\bimos\AppData\Roaming\AVAST
Software\Avast\Cache\NCcacheIpm.dat
Delete: \??\C:\Users\bimos\AppData\Roaming\AVAST Software\Avast\Cache\Visited Links
Delete: \??\C:\Users\bimos\AppData\Roaming\AVAST Software\Avast\Cache\
Delete: \??\C:\Users\bimos\AppData\Roaming\AVAST Software\Avast\log\cef_log.txt
Delete: \??\C:\Users\bimos\AppData\Roaming\AVAST Software\Avast\log\
Delete: \??\C:\Users\bimos\AppData\Roaming\AVAST Software\Avast\uicred2.dat
Delete: \??\C:\Users\bimos\AppData\Roaming\AVAST Software\Avast\
Delete: \??\C:\Users\bimos\AppData\Roaming\AVAST Software\Avast
Delete: \??\C:\Users\bimos\AppData\Roaming\AVAST Software
Delete: \??\C:\Users\bimos\AppData\Roaming
Delete: \??\C:\Users\bimos\AppData
Delete: \??\C:\Users\bimos
Delete: \??\C:\Users
Delete: \??\C:\Users\bimos\AppData\Local\AVAST Software\Avast\Bodyguard\
Delete: \??\C:\Users\bimos\AppData\Local\AVAST Software\Avast\
Delete: \??\C:\Users\bimos\AppData\Local\AVAST Software\Avast
Delete: \??\C:\Users\bimos\AppData\Local\AVAST Software
Delete: \??\C:\Users\bimos\AppData\Local
Delete: \??\C:\Users\bimos\AppData
Delete: \??\C:\Users\bimos
Delete: \??\C:\Users
Delete: \??\C:\ProgramData\AVAST Software\Persistent Data\Avast\Reboot.txt
Delete: \??\C:\ProgramData\AVAST Software\Persistent Data\Avast
Delete: \??\C:\ProgramData\AVAST Software\Persistent Data
Delete: \??\C:\ProgramData\AVAST Software
Delete: \??\C:\ProgramData
Delete: \??\C:\Windows\SysWOW64
Delete: C:\WINDOWS\SYSNATIVE\NOTIFIER.EXE
Delete Marked Items Auto Start Apps->Multi AV Detected Files.
SVCHOST.EXE=C:\USERS\BIMOS\APPDATA\ROAMING\MICROSOFT\WINDOWS\START
MENU\PROGRAMS\STARTUP\SVCHOST.EXE
Anti-malware scan started at: 15.08.2018 08:04:43
15.08.2018 08:06:43 Unwanted Software Files
Probably Malicious: NOTIFIER.EXE = C:\WINDOWS\SYSNATIVE\NOTIFIER.EXE
15.08.2018 08:06:43 Multi AV Detected Files
Suspicious: SYSTEM.EXE = C:\USERS\BIMOS\APPDATA\ROAMING\SYSTEM.EXE
Delete Marked Items Auto Start Apps->Unwanted Software Files.
NOTIFIER.EXE=C:\WINDOWS\SYSNATIVE\NOTIFIER.EXE
Delete the File:C:\WINDOWS\SYSNATIVE\NOTIFIER.EXE. You must restart your computer
to fully delete this file.
-------------------------------------------------------
Delete: \??\D:\Program
Files\Echobit\Evolve\Temp\pb3ghuqf.ty1\EvolveEasyHook_32.dll_dcum3k3i.55w
Files\Echobit\Evolve\Temp\pb3ghuqf.ty1\EvolveEasyHook_64.dll_tk3ninqr.ba0
Files\Echobit\Evolve\Temp\pb3ghuqf.ty1\EvoVideoHelper.dll_bg1el0wt.2hq
Delete: \??\D:\Program Files\Echobit\Evolve\Temp\pb3ghuqf.ty1\avcodec-53-
evo.dll_ssxhdezx.xd0
Delete: \??\D:\Program Files\Echobit\Evolve\Temp\pb3ghuqf.ty1\avformat-53-
evo.dll_s4sjro1s.hzt
Delete: \??\D:\Program Files\Echobit\Evolve\Temp\pb3ghuqf.ty1\avutil-51-
evo.dll_vq20z3se.jrz
Delete: \??\D:\Program Files\Echobit\Evolve\Temp\pb3ghuqf.ty1\swscale-2-
evo.dll_0yw2qjn4.cnw
Files\Echobit\Evolve\Temp\pb3ghuqf.ty1\dbghelp.dll_cj4r5hgu.mh1
Files\Echobit\Evolve\Temp\pb3ghuqf.ty1\LAVAudio.ax_5b3p0432.tjs
Files\Echobit\Evolve\Temp\pb3ghuqf.ty1\LAVSplitter.ax_ri25orgz.vqb
Files\Echobit\Evolve\Temp\pb3ghuqf.ty1\LAVVideo.ax_j3kjsblk.awh
Delete: \??\D:\Program Files\Echobit\Evolve\Temp\pb3ghuqf.ty1\avcodec-lav-
53.dll_4ppeyb0x.ffm
Delete: \??\D:\Program Files\Echobit\Evolve\Temp\pb3ghuqf.ty1\avfilter-lav-
2.dll_tolfgqgj.qys
Delete: \??\D:\Program Files\Echobit\Evolve\Temp\pb3ghuqf.ty1\avformat-lav-
53.dll_ljutgtnj.zh5
Delete: \??\D:\Program Files\Echobit\Evolve\Temp\pb3ghuqf.ty1\avutil-lav-
51.dll_japygozx.spu
Delete: \??\D:\Program Files\Echobit\Evolve\Temp\pb3ghuqf.ty1\swscale-lav-
2.dll_jdllvm2x.pgt
Files\Echobit\Evolve\Temp\pb3ghuqf.ty1\libbluray.dll_ynqq2wpe.f2e
Files\Echobit\Evolve\Temp\pb3ghuqf.ty1\EvolveOverlayHelper_32.dll_0ffncr2b.qdy
Files\Echobit\Evolve\Temp\pb3ghuqf.ty1\EvolveOverlayHelperDX8_32.dll_2bfjlsj3.i4p
Files\Echobit\Evolve\Temp\pb3ghuqf.ty1\EvolveOverlayHelperOGL_32.dll_02fnfdmd.a2g
Files\Echobit\Evolve\Temp\pb3ghuqf.ty1\EvolveOverlayHelper_64.dll_2c3vj03z.0xv
Files\Echobit\Evolve\Temp\pb3ghuqf.ty1\EvolveOverlayHelperDX8_64.dll_hcpmccyy.k3w
Files\Echobit\Evolve\Temp\pb3ghuqf.ty1\EvolveOverlayHelperOGL_64.dll_lyhpwiln.zht
Files\Echobit\Evolve\Temp\pb3ghuqf.ty1\EvolveInstallerHelper.dll_vdc0pvpz.wd0
Files\Echobit\Evolve\Temp\pb3ghuqf.ty1\EvolveTracker_32.exe_kxplu0dz.sv0
Files\Echobit\Evolve\Temp\pb3ghuqf.ty1\EvolveTracker_64.exe_lpq2vwvp.obz
Files\Echobit\Evolve\Temp\pb3ghuqf.ty1\EvolveGameTracker_32.dll_erxh2bek.4od
Files\Echobit\Evolve\Temp\pb3ghuqf.ty1\EvolveGameTracker_64.dll_0rdfztn1.oep
Files\Echobit\Evolve\Temp\pb3ghuqf.ty1\CustomControls.dll_hllrme10.pgv
Files\Echobit\Evolve\Temp\pb3ghuqf.ty1\Updater.exe_5hlhhpms.gzq
Files\Echobit\Evolve\Temp\pb3ghuqf.ty1\UpdaterBootstrapper.exe_1mw2ofjx.bhx
Files\Echobit\Evolve\Temp\pb3ghuqf.ty1\UpdaterHelper.dll_vk1hk5ga.l1o
Delete: \??\D:\Program Files\Echobit\Evolve\Temp\pb3ghuqf.ty1\
Delete: C:\WINDOWS\SYSNATIVE\NOTIFIER.EXE
Delete Marked Items Auto Start Apps->Multi AV Detected Files.
SYSTEM.EXE=C:\USERS\BIMOS\APPDATA\ROAMING\SYSTEM.EXE
15.08.2018 08:09:57 User Shortcuts
Unknown: C:\Users\Public\Desktop\Tom Clancy's Ghost Recon Wildlands.lnk =
D:\PROGRAM FILES\TOM CLANCY'S GHOST RECON WILDLANDS\STP-GRW.EXE
15.08.2018 08:09:57 Registry Run
Probably Malicious: Web Companion = C:\Program Files (x86)\Lavasoft\Web
Companion\Application\WebCompanion.exe --minimize
15.08.2018 08:09:57 Scheduled Tasks 2
Probably Malicious: C:\WINDOWS\SYSNATIVE\TASKS\Dell Cleanup =
C:\WINDOWS\SYSTEM32\OEM\STARTMENUFIX.VBS
15.08.2018 08:09:57 Scheduled Tasks 2
Unknown: C:\WINDOWS\SYSNATIVE\TASKS\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 =
C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
15.08.2018 08:09:57 Scheduled Tasks 2
Unknown: C:\WINDOWS\SYSNATIVE\TASKS\Nvbackend_{B2FE1952-0186-46C3-BAEC-
A80AA35AC5B8} = C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
15.08.2018 08:09:57 Scheduled Tasks 2
Unknown: C:\WINDOWS\SYSNATIVE\TASKS\Opera scheduled Autoupdate 1529715426 =
C:\Users\bimos\AppData\Local\Programs\Opera\launcher.exe
15.08.2018 08:09:57 Scheduled Tasks 2
Suspicious: C:\WINDOWS\SYSNATIVE\TASKS\SmartByte Telemetry = C:\PROGRAM FILES\RIVET
15.08.2018 08:09:57 Scheduled Tasks 2.0 Cached
Probably Malicious: Dell Cleanup = C:\WINDOWS\SYSTEM32\OEM\STARTMENUFIX.VBS
Unknown: IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 = C:\Program Files
(x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
Unknown: Nvbackend_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} = C:\Program Files
(x86)\NVIDIA Corporation\Update Core\NvBackend.exe
Unknown: Opera scheduled Autoupdate 1529715426 =
Suspicious: SmartByte Telemetry = C:\PROGRAM FILES\RIVET
Delete Marked Items Auto Start Apps->Registry Run. Web Companion=C:\Program Files
(x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize
Delete Marked Items Auto Start Apps->Scheduled Tasks 2.
C:\WINDOWS\SYSNATIVE\TASKS\Dell Cleanup=C:\WINDOWS\SYSTEM32\OEM\STARTMENUFIX.VBS
-------------------------------------------------------
53.dll_4ppeyb0x.ffm
2.dll_tolfgqgj.qys
53.dll_ljutgtnj.zh5
51.dll_japygozx.spu
2.dll_jdllvm2x.pgt
Delete: C:\WINDOWS\SYSNATIVE\TASKS\Dell Cleanup
Delete Marked Items Auto Start Apps->Scheduled Tasks 2.0 Cached. Dell
Cleanup=C:\WINDOWS\SYSTEM32\OEM\STARTMENUFIX.VBS
Deleted Key:SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Schedule\TaskCache\Tree\Dell Cleanup
Deleted Key:SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\
{55F8B8B9-3721-4CBB-8995-3A7840DCA2FB}
Error deleting registry key:SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Schedule\TaskCache\Logon\{55F8B8B9-3721-4CBB-8995-3A7840DCA2FB}
The DelAnyKey failed too.
NT\CurrentVersion\Schedule\TaskCache\Maintenance\{55F8B8B9-3721-4CBB-8995-
3A7840DCA2FB}
NT\CurrentVersion\Schedule\TaskCache\Plain\{55F8B8B9-3721-4CBB-8995-3A7840DCA2FB}
Deleted Key:SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\
{55F8B8B9-3721-4CBB-8995-3A7840DCA2FB}
C:\WINDOWS\SYSNATIVE\TASKS\SmartByte Telemetry=C:\PROGRAM FILES\RIVET
-------------------------------------------------------
53.dll_4ppeyb0x.ffm
2.dll_tolfgqgj.qys
53.dll_ljutgtnj.zh5
51.dll_japygozx.spu
2.dll_jdllvm2x.pgt
Delete: \??\C:\WINDOWS\SYSNATIVE\TASKS\Dell Cleanup
Delete: C:\WINDOWS\SYSNATIVE\TASKS\SmartByte Telemetry
Delete Marked Items Auto Start Apps->Scheduled Tasks 2.0 Cached. SmartByte
Telemetry=C:\PROGRAM FILES\RIVET NETWORKS\SMARTBYTE\SMARTBYTETELEMETRY.EXE
NT\CurrentVersion\Schedule\TaskCache\Tree\SmartByte Telemetry
NT\CurrentVersion\Schedule\TaskCache\Boot\{21400F6A-53DB-431B-8560-42DADA2C0625}
Deleted Key:SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\
{21400F6A-53DB-431B-8560-42DADA2C0625}
NT\CurrentVersion\Schedule\TaskCache\Maintenance\{21400F6A-53DB-431B-8560-
42DADA2C0625}
NT\CurrentVersion\Schedule\TaskCache\Plain\{21400F6A-53DB-431B-8560-42DADA2C0625}
{21400F6A-53DB-431B-8560-42DADA2C0625}
15.08.2018 08:10:09 User Shortcuts
Unknown: C:\Users\Public\Desktop\Tom Clancy's Ghost Recon Wildlands.lnk =
D:\PROGRAM FILES\TOM CLANCY'S GHOST RECON WILDLANDS\STP-GRW.EXE
15.08.2018 08:10:09 Scheduled Tasks 2
15.08.2018 08:10:09 Scheduled Tasks 2
Unknown: C:\WINDOWS\SYSNATIVE\TASKS\Nvbackend_{B2FE1952-0186-46C3-BAEC-
A80AA35AC5B8} = C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
15.08.2018 08:10:09 Scheduled Tasks 2
Unknown: C:\WINDOWS\SYSNATIVE\TASKS\Opera scheduled Autoupdate 1529715426 =
Unknown: Nvbackend_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} = C:\Program Files
(x86)\NVIDIA Corporation\Update Core\NvBackend.exe
Unknown: Opera scheduled Autoupdate 1529715426 =
C:\WINDOWS\SYSNATIVE\TASKS\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473=C:\Program
Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
-------------------------------------------------------
53.dll_4ppeyb0x.ffm
2.dll_tolfgqgj.qys
53.dll_ljutgtnj.zh5
51.dll_japygozx.spu
2.dll_jdllvm2x.pgt
Delete: \??\C:\WINDOWS\SYSNATIVE\TASKS\SmartByte Telemetry
Delete: C:\WINDOWS\SYSNATIVE\TASKS\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473
C:\WINDOWS\SYSNATIVE\TASKS\Nvbackend_{B2FE1952-0186-46C3-BAEC-
A80AA35AC5B8}=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
-------------------------------------------------------
53.dll_4ppeyb0x.ffm
2.dll_tolfgqgj.qys
53.dll_ljutgtnj.zh5
51.dll_japygozx.spu
2.dll_jdllvm2x.pgt
Delete: \??\C:\WINDOWS\SYSNATIVE\TASKS\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473
Delete: C:\WINDOWS\SYSNATIVE\TASKS\Nvbackend_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
C:\WINDOWS\SYSNATIVE\TASKS\Opera scheduled Autoupdate
1529715426=C:\Users\bimos\AppData\Local\Programs\Opera\launcher.exe
-------------------------------------------------------
53.dll_4ppeyb0x.ffm
2.dll_tolfgqgj.qys
53.dll_ljutgtnj.zh5
51.dll_japygozx.spu
2.dll_jdllvm2x.pgt
Delete: \??\C:\WINDOWS\SYSNATIVE\TASKS\Nvbackend_{B2FE1952-0186-46C3-BAEC-
A80AA35AC5B8}
Delete: C:\WINDOWS\SYSNATIVE\TASKS\Opera scheduled Autoupdate 1529715426
Delete Marked Items Auto Start Apps->Scheduled Tasks 2.0 Cached. Opera scheduled
Autoupdate 1529715426=C:\Users\bimos\AppData\Local\Programs\Opera\launcher.exe
NT\CurrentVersion\Schedule\TaskCache\Tree\Opera scheduled Autoupdate 1529715426
NT\CurrentVersion\Schedule\TaskCache\Boot\{CC8A5D99-D391-4A75-BB50-4BF8677E616B}
{CC8A5D99-D391-4A75-BB50-4BF8677E616B}
NT\CurrentVersion\Schedule\TaskCache\Maintenance\{CC8A5D99-D391-4A75-BB50-
4BF8677E616B}
NT\CurrentVersion\Schedule\TaskCache\Plain\{CC8A5D99-D391-4A75-BB50-4BF8677E616B}
{CC8A5D99-D391-4A75-BB50-4BF8677E616B}
Delete Marked Items Auto Start Apps->Scheduled Tasks 2.0 Cached. IUM-F1E24CA0-B63E-
4F13-A9E3-4ADE3BFF3473=C:\Program Files (x86)\Intel\Intel(R) Update
Manager\bin\iumsvc.exe
NT\CurrentVersion\Schedule\TaskCache\Tree\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473
NT\CurrentVersion\Schedule\TaskCache\Boot\{414B757C-5797-4B44-A0AF-9C1F63BB4F88}
NT\CurrentVersion\Schedule\TaskCache\Logon\{414B757C-5797-4B44-A0AF-9C1F63BB4F88}
NT\CurrentVersion\Schedule\TaskCache\Maintenance\{414B757C-5797-4B44-A0AF-
9C1F63BB4F88}
Deleted Key:SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\
{414B757C-5797-4B44-A0AF-9C1F63BB4F88}
{414B757C-5797-4B44-A0AF-9C1F63BB4F88}
Delete Marked Items Auto Start Apps->Scheduled Tasks 2.0 Cached.
Nvbackend_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}=C:\Program Files (x86)\NVIDIA
Corporation\Update Core\NvBackend.exe
NT\CurrentVersion\Schedule\TaskCache\Tree\Nvbackend_{B2FE1952-0186-46C3-BAEC-
A80AA35AC5B8}
NT\CurrentVersion\Schedule\TaskCache\Boot\{AD19566B-A333-4979-9A40-6FDCBC72F13E}
{AD19566B-A333-4979-9A40-6FDCBC72F13E}
NT\CurrentVersion\Schedule\TaskCache\Maintenance\{AD19566B-A333-4979-9A40-
6FDCBC72F13E}
NT\CurrentVersion\Schedule\TaskCache\Plain\{AD19566B-A333-4979-9A40-6FDCBC72F13E}
{AD19566B-A333-4979-9A40-6FDCBC72F13E}
Delete Marked Items Windows Shell->User Shortcuts. C:\Users\Public\Desktop\Tom
Clancy's Ghost Recon Wildlands.lnk=D:\PROGRAM FILES\TOM CLANCY'S GHOST RECON
WILDLANDS\STP-GRW.EXE
15.08.2018 08:12:16 Auto Services
Unknown: EvoSvc = D:\PROGRAM FILES\ECHOBIT\EVOLVE\EVOSVC.EXE
Delete Marked Items Kernel Auto Boot->Auto Services. EvoSvc=D:\PROGRAM
FILES\ECHOBIT\EVOLVE\EVOSVC.EXE
15.08.2018 08:12:34 IE Extensions - All Users
Unknown: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} =
15.08.2018 08:12:34 Google Chrome Addons
Probably Malicious: nahhmpbckpgdidfnmfkfgiflpjijilce =
C:\Users\bimos\AppData\Local\Google\Chrome\User
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0
Probably Malicious: nladljmabboanhihfkjacnnkgjhnokhj =
Data\Default\Extensions\nladljmabboanhihfkjacnnkgjhnokhj\1.3.8.14_0
Probably Malicious: pilplloabdedfmialnfchjomjmpjcoej =
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0
15.08.2018 08:12:34 Pre-installed extensions
https://clients2.google.com/service/update2/crx
Probably Malicious: nladljmabboanhihfkjacnnkgjhnokhj =
Probably Malicious: pilplloabdedfmialnfchjomjmpjcoej =
Delete Marked Items Browsers->Google Chrome Addons.
nahhmpbckpgdidfnmfkfgiflpjijilce=C:\Users\bimos\AppData\Local\Google\Chrome\User
Chrome profile has been saved to:
C:\@RestoreQuarantine\2018-Aug-15_08hour\Chrome-Default\Secure Preferences
Added restore batch file to \@RestoreQuarantine
Deleted: C:\Users\bimos\AppData\Local\Google\Chrome\User
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\2bfc185be71f44
cd73ac81511fc1f5a5.woff
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\b495e340f4ef89
24fea0284c1bf9e7ac.woff
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\background.htm
l
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\background.v0.
0.1.min.js
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\c5a5cbf4dbcaa7
064f2bc77f52101aec.otf
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\client.v0.0.1.
min.js
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\common.js.v0.0
.1.min.js
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\bundle
.v0.0.1.min.css
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\fonts\
HelveticaNeue-Thin.otf
HelveticaNeueLT-Roman.woff
neue-bold.woff
neue.woff
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\fonts
Cannot delete: C:\Users\bimos\AppData\Local\Google\Chrome\User
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images
\alot.png
\angle-arrow-down.png
\bing.png
\bing_large.png
\bluesky-bg.jpg
\brush.png
\bt.png
\clock.png
\cloud.png
\converter\close-FF8A5A.svg
\converter\collection-9B9B9B.svg
\converter\collection-FF691E.svg
\converter\doc-icon-FFFFFF.svg
\converter\error-FF691E.svg
\converter\pdf-2-doc-9B9B9B.svg
\converter\pdf-2-doc-FFFFFF.svg
\converter\pdf-icon-FFFFFF.svg
\converter\success-FF8A5A.svg
\converter\tab-arrow-FF691E.svg
\converter\upload-FF691E.svg
\converter
\converter
\cupcake-bg.jpg
\desk-bg.jpg
\doodle.png
\down.png
\enhanced_google.png
\eyeglass.png
\eyeglass_transparent.png
\films\amazon-FFFFFF.svg
\films\amazon.svg
\films\close.svg
\films\enlarge-000000-FFFFFF.svg
\films\enlarge-FFCA00-000000.svg
\films\hulu-FFFFFF.svg
\films\hulu.svg
\films\minimize-000000-FFFFFF.svg
\films\netflix-FFFFFF.svg
\films\netflix.svg
\films\refresh-FFFFFF-000000.svg
\films\shrink-FFCA00-000000.svg
\films\shuffle-000000.svg
\films\shuffle-FFFFFF.svg
\films\vudu-FFFFFF.svg
\films\vudu.svg
\films
\films
\films-bg.jpg
\gmx_large.png
\google.png
\google_large.png
\hero-bg.jpg
\icons\128.png
\icons\16.png
\icons\48.png
\icons\close.png
\icons\favicon.ico
\icons\trends.svg
\icons
\icons
\just-the-box-empty.png
\just-the-box.png
\maps\bing-maps-FFFFFF.svg
\maps\from-to-icon-8881FF.svg
\maps\google-maps-FFFFFF.svg
\maps\location-icon-8881FF.svg
\maps\search-4A4A4A.svg
\maps\search-8881FF.svg
\maps\switch-8881FF.svg
\maps\tab-arrow-8881FF.svg
\maps\whereto-logo-8881FF.svg
\maps\whereto-logo-FFFFFF.svg
\maps
\maps
\mountain-bg.jpg
\pointer2.png
\radio-selected.svg
\radio-unselected.svg
\sea-bg.jpg
\search-D7D7D7.svg
\search-FFFFFF.svg
\settings.png
\sitesThumbnails\aliexpress.png
\sitesThumbnails\aliexpress_tile_v2.png
\sitesThumbnails\amazon.png
\sitesThumbnails\amazon_tile_v2.png
\sitesThumbnails\booking.png
\sitesThumbnails\booking_tile_v2.png
\sitesThumbnails\ebay.png
\sitesThumbnails\ebay_tile_v2.png
\sitesThumbnails\expedia.png
\sitesThumbnails\expedia_tile_v2.png
\sitesThumbnails\facebook.png
\sitesThumbnails\facebook_tile_v2.png
\sitesThumbnails\gmail.png
\sitesThumbnails\gmail_tile_v2.png
\sitesThumbnails\google-translate-icon-FFFFFF.svg
\sitesThumbnails\gtranslte.png
\sitesThumbnails\pinterest.png
\sitesThumbnails\pinterest_tile_v2.png
\sitesThumbnails\twitter.png
\sitesThumbnails\twitter_tile_v2.png
\sitesThumbnails\wix.png
\sitesThumbnails\wix_tile_v2.png
\sitesThumbnails\yahoo.png
\sitesThumbnails\yahoo_tile_v2.png
\sitesThumbnails\youtube.png
\sitesThumbnails\youtube_tile_v2.png
\sitesThumbnails
\sitesThumbnails
\smallMagnifier.png
\star-unselected.svg
\star.svg
\tiles\DOC-to-PDF.jpg
\tiles\PDF-to-DOC.jpg
\tiles\Translation.jpg
\tiles\View-PDF.jpg
\tiles
\tiles
\todoc.png
\toggle-off.svg
\toggle-on.svg
\topdf.png
\transparent_img.png
\weather\01d.svg
\weather\01n.svg
\weather\02d.svg
\weather\02n.svg
\weather\03d.svg
\weather\03n.svg
\weather\04d.svg
\weather\04n.svg
\weather\09d.svg
\weather\09n.svg
\weather\10d.svg
\weather\10n.svg
\weather\11d.svg
\weather\11n.svg
\weather\13d.svg
\weather\13n.svg
\weather\50d.svg
\weather\50n.svg
\weather
\weather
\yahoo.png
\yahoo.svg
\yahoo_large.png
\yandex.png
\_enhanced_google.png
\_gmx_large.png
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\e5d3501d500d07
b0a1e952b0f8a81d78.woff
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\e_.json
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\index.html
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\manifest.json
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\popupTab2.html
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\popupTab2.js
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\responseConfig
.json
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\skin\icons\16.
png
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\skin\icons
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\skin
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\vendor\md5.min
.js
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\vendor\react-
dom.min.js
with-addons.min.js
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\vendor
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\_locales\en\me
ssages.json
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\_locales\en
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\_locales\fr\me
ssages.json
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\_locales\fr
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\_locales\hi\me
ssages.json
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\_locales\hi
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\_locales\pt_BR
\messages.json
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\_locales\vi\me
ssages.json
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\_locales\vi
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\_locales
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\_metadata\veri
fied_contents.json
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\_metadata
Cannot remove folder: C:\Users\bimos\AppData\Local\Google\Chrome\User
Error: 0
Delete At reboot: C:\Users\bimos\AppData\Local\Google\Chrome\User
-------------------------------------------------------
53.dll_4ppeyb0x.ffm
2.dll_tolfgqgj.qys
53.dll_ljutgtnj.zh5
51.dll_japygozx.spu
2.dll_jdllvm2x.pgt
A80AA35AC5B8}
Delete: \??\C:\WINDOWS\SYSNATIVE\TASKS\Opera scheduled Autoupdate 1529715426
Delete: C:\Users\bimos\AppData\Local\Google\Chrome\User
nladljmabboanhihfkjacnnkgjhnokhj=C:\Users\bimos\AppData\Local\Google\Chrome\User
Error: 2 File delete failed: C:\Users\bimos\AppData\Local\Google\Chrome\User
Data\Default\Extensions\nladljmabboanhihfkjacnnkgjhnokhj\1.3.8.14_0\css\fonts\canar
o-bookitalic.ttf
Delete at reboot: C:\Users\bimos\AppData\Local\Google\Chrome\User
o-bookitalic.ttf
Error: 0 Ownership failed: C:\Users\bimos\AppData\Local\Google\Chrome\User
o-bookitalic.ttf
o-light.ttf
o-light.ttf
o-light.ttf
o-lightitalic.ttf
o-lightitalic.ttf
o-lightitalic.ttf
o-medium.ttf
o-medium.ttf
o-medium.ttf
o-mediumitalic.ttf
o-mediumitalic.ttf
o-mediumitalic.ttf
o-semibold.ttf
o-semibold.ttf
o-semibold.ttf
o-semibolditalic.ttf
Data\Default\Extensions\nladljmabboanhihfkjacnnkgjhnokhj\1.3.8.14_0\css\fonts\fonta
wesome-webfont.ttf
wesome-webfont.ttf
wesome-webfont.ttf
Data\Default\Extensions\nladljmabboanhihfkjacnnkgjhnokhj\1.3.8.14_0\css\fonts\segoe
ui.ttf
ui.ttf
ui.ttf
Data\Default\Extensions\nladljmabboanhihfkjacnnkgjhnokhj\1.3.8.14_0\css\fonts
Data\Default\Extensions\nladljmabboanhihfkjacnnkgjhnokhj\1.3.8.14_0\css\fonts
Data\Default\Extensions\nladljmabboanhihfkjacnnkgjhnokhj\1.3.8.14_0\css\new-tab.css
Data\Default\Extensions\nladljmabboanhihfkjacnnkgjhnokhj\1.3.8.14_0\css\normalize.c
ss
ss
ss
Data\Default\Extensions\nladljmabboanhihfkjacnnkgjhnokhj\1.3.8.14_0\css\roboto.css
Data\Default\Extensions\nladljmabboanhihfkjacnnkgjhnokhj\1.3.8.14_0\css
Data\Default\Extensions\nladljmabboanhihfkjacnnkgjhnokhj\1.3.8.14_0\css
Data\Default\Extensions\nladljmabboanhihfkjacnnkgjhnokhj\1.3.8.14_0\img\browsericon
s\icon19.png
s\icon19.png
s\icon19.png
s\icon38.png
s\icon38.png
s\icon38.png
s
s
Data\Default\Extensions\nladljmabboanhihfkjacnnkgjhnokhj\1.3.8.14_0\img\dot.png
Data\Default\Extensions\nladljmabboanhihfkjacnnkgjhnokhj\1.3.8.14_0\img\dot_color.p
ng
ng
ng
Data\Default\Extensions\nladljmabboanhihfkjacnnkgjhnokhj\1.3.8.14_0\img\dropdown_ar
row.png
row.png
row.png
Data\Default\Extensions\nladljmabboanhihfkjacnnkgjhnokhj\1.3.8.14_0\img\icon_128.pn
g
g
g
Data\Default\Extensions\nladljmabboanhihfkjacnnkgjhnokhj\1.3.8.14_0\img\icon_16.png
Data\Default\Extensions\nladljmabboanhihfkjacnnkgjhnokhj\1.3.8.14_0\img\icon_check.
png
png
png
Data\Default\Extensions\nladljmabboanhihfkjacnnkgjhnokhj\1.3.8.14_0\img\magnifier_i
con.png
con.png
con.png
Data\Default\Extensions\nladljmabboanhihfkjacnnkgjhnokhj\1.3.8.14_0\img\nature_defa
ult.jpg
ult.jpg
ult.jpg
Data\Default\Extensions\nladljmabboanhihfkjacnnkgjhnokhj\1.3.8.14_0\img\settings_ic
on.png
on.png
on.png
Data\Default\Extensions\nladljmabboanhihfkjacnnkgjhnokhj\1.3.8.14_0\img\urban_defau
lt.jpg
lt.jpg
lt.jpg
Data\Default\Extensions\nladljmabboanhihfkjacnnkgjhnokhj\1.3.8.14_0\img
Data\Default\Extensions\nladljmabboanhihfkjacnnkgjhnokhj\1.3.8.14_0\img
Data\Default\Extensions\nladljmabboanhihfkjacnnkgjhnokhj\1.3.8.14_0\js
Data\Default\Extensions\nladljmabboanhihfkjacnnkgjhnokhj\1.3.8.14_0\js
Data\Default\Extensions\nladljmabboanhihfkjacnnkgjhnokhj\1.3.8.14_0\LICENSE.txt
Data\Default\Extensions\nladljmabboanhihfkjacnnkgjhnokhj\1.3.8.14_0\load-new.html
Data\Default\Extensions\nladljmabboanhihfkjacnnkgjhnokhj\1.3.8.14_0\manifest.json
Data\Default\Extensions\nladljmabboanhihfkjacnnkgjhnokhj\1.3.8.14_0\new-tab.html
Data\Default\Extensions\nladljmabboanhihfkjacnnkgjhnokhj\1.3.8.14_0\_locales
Data\Default\Extensions\nladljmabboanhihfkjacnnkgjhnokhj\1.3.8.14_0\_locales
Data\Default\Extensions\nladljmabboanhihfkjacnnkgjhnokhj\1.3.8.14_0\_metadata
Data\Default\Extensions\nladljmabboanhihfkjacnnkgjhnokhj\1.3.8.14_0\_metadata
Error: 0
-------------------------------------------------------
53.dll_4ppeyb0x.ffm
2.dll_tolfgqgj.qys
53.dll_ljutgtnj.zh5
51.dll_japygozx.spu
2.dll_jdllvm2x.pgt
A80AA35AC5B8}
Delete: \??\C:\Users\bimos\AppData\Local\Google\Chrome\User
pilplloabdedfmialnfchjomjmpjcoej=C:\Users\bimos\AppData\Local\Google\Chrome\User
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\2bfc185be71f44
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\b495e340f4ef89
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\background.htm
l
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\background.v0.
0.1.min.js
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\c5a5cbf4dbcaa7
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\client.v0.0.1.
min.js
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\common.js.v0.0
.1.min.js
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\bundle
.v0.0.1.min.css
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\fonts\
neue-bold.woff
neue.woff
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\fonts
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\fonts
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images
\alot.png
\bing.png
\bing_large.png
\bluesky-bg.jpg
\brush.png
\bt.png
\clock.png
\cloud.png
\converter
\converter
\cupcake-bg.jpg
\desk-bg.jpg
\doodle.png
\down.png
\eyeglass.png
\films\amazon.svg
\films\close.svg
\films\hulu.svg
\films\netflix.svg
\films\vudu.svg
\films
\films
\films-bg.jpg
\gmx_large.png
\google.png
\google_large.png
\hero-bg.jpg
\icons\128.png
\icons\16.png
\icons\48.png
\icons\close.png
\icons\favicon.ico
\icons\trends.svg
\icons
\icons
\just-the-box.png
\maps
\maps
\mountain-bg.jpg
\pointer2.png
\radio-selected.svg
\sea-bg.jpg
\search-D7D7D7.svg
\search-FFFFFF.svg
\settings.png
\sitesThumbnails
\sitesThumbnails
\smallMagnifier.png
\star.svg
\tiles\View-PDF.jpg
\tiles
\tiles
\todoc.png
\toggle-off.svg
\toggle-on.svg
\topdf.png
\weather\01d.svg
\weather\01n.svg
\weather\02d.svg
\weather\02n.svg
\weather\03d.svg
\weather\03n.svg
\weather\04d.svg
\weather\04n.svg
\weather\09d.svg
\weather\09n.svg
\weather\10d.svg
\weather\10n.svg
\weather\11d.svg
\weather\11n.svg
\weather\13d.svg
\weather\13n.svg
\weather\50d.svg
\weather\50n.svg
\weather
\weather
\yahoo.png
\yahoo.svg
\yahoo_large.png
\yandex.png
\_gmx_large.png
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\e5d3501d500d07
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\e_.json
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\index.html
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\manifest.json
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\popupTab2.html
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\popupTab2.js
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\responseConfig
.json
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\skin\icons\16.
png
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\skin\icons
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\skin\icons
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\skin
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\skin
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\vendor\md5.min
.js
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\vendor\react-
dom.min.js
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\vendor\react-
with-addons.min.js
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\vendor
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\vendor
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\_locales\en\me
ssages.json
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\_locales\en
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\_locales\en
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\_locales\fr\me
ssages.json
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\_locales\fr
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\_locales\fr
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\_locales\hi\me
ssages.json
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\_locales\hi
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\_locales\hi
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\_locales\pt_BR
\messages.json
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\_locales\vi\me
ssages.json
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\_locales\vi
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\_locales\vi
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\_locales
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\_locales
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\_metadata\veri
fied_contents.json
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\_metadata
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\_metadata
Error: 0
-------------------------------------------------------
53.dll_4ppeyb0x.ffm
2.dll_tolfgqgj.qys
53.dll_ljutgtnj.zh5
51.dll_japygozx.spu
2.dll_jdllvm2x.pgt
A80AA35AC5B8}
Delete Marked Items Browsers->Pre-installed extensions.
pilplloabdedfmialnfchjomjmpjcoej=https://clients2.google.com/service/update2/crx
nahhmpbckpgdidfnmfkfgiflpjijilce=https://clients2.google.com/service/update2/crx
nladljmabboanhihfkjacnnkgjhnokhj=https://clients2.google.com/service/update2/crx
Delete Marked Items Internet Explorer->IE Extensions - All Users. {789FE86F-6FC4-
46A1-9849-EDE0DB0C95CA}=
15.08.2018 08:12:46 Current Home Page
Probably Malicious: Start Page = http://securedsearch.lavasoft.com/?
pr=vmn&id=webcompa&ent=hp_WCYID10440__180813
Unknown: Default_Page_URL = http://dell17win10.msn.com/?pc=DCTE
15.08.2018 08:12:46 Search Provider
Probably Malicious: {0CE02FFA-A6B0-46F6-BA2F-BD32C3630126} =
https://id.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-
fullyhosted_003&type=wny_dmontlsfs_18_25&param1=1&param2=f%3D4%26b%3DIE%26cc%3Did
%26pa%3Dwinyahoo%26cd
%3D2XzuyEtN2Y1L1QzuyCyEtDtDyC0A0F0B0EtCyByC0B0AzzyCtN0D0Tzu0StBtAyCyEtN1L2XzuyEtFtB
yDtFtDtFyCyDtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2SyByEtCtAyDtC0AyEtGtDyEtDyDtGyEtDzyyCtGyEy
ByBtDtGyDyB0D0FtCtCzztCtAyByCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzztC1SyEzz1OyEtCtGyB1TzztC
tGyEtAyE1RtGzyyEyD1StGzytDyC1Q1SyDzytAyCyD1Q1O2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCzztDyEy
BtN1Q2Z1B1P1RzutCyDtBzyyCyCyEzyyBtD%26cr%3D54898687%26a
%3Dwny_dmontlsfs_18_25%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms}
Probably Malicious: {BDF61FAE-9D19-40F0-8F34-688DEB334CA9} =
http://securedsearch.lavasoft.com/results.php?
pr=vmn&id=webcompa&ent=ch_WCYID10440__180813&q={searchTerms}
Unknown: DefaultScope = {E47139BB-500B-464C-8895-9ACBB027EAB6}
15.08.2018 08:12:46 Search Provider for All Users
Probably Malicious: {E47139BB-500B-464C-8895-9ACBB027EAB6} =
15.08.2018 08:12:46 Search Provider for All Users
15.08.2018 08:12:46 Search Provider for All Users(x64)
Probably Malicious: {E47139BB-500B-464C-8895-9ACBB027EAB6} =
15.08.2018 08:12:46 Search Provider for All Users(x64)
15.08.2018 08:12:46 Search Provider(x64)
Probably Malicious: {0CE02FFA-A6B0-46F6-BA2F-BD32C3630126} =
Probably Malicious: {BDF61FAE-9D19-40F0-8F34-688DEB334CA9} =
http://securedsearch.lavasoft.com/results.php?
15.08.2018 08:12:46 FireFox Settings
Probably Malicious: browser.startup.homepage = http://securedsearch.lavasoft.com/?
pr=vmn&id=webcompa&ent=hp_wcyid10440__180813
Unknown: browser.search.selectedEngine = ad-aware securesearch
Unknown: browser.search.defaultEnginename = ad-aware securesearch
Probably Malicious: browser.newtab.url = http://securedsearch.lavasoft.com/?
pr=vmn&id=webcompa&ent=hp_wcyid10440__180813
15.08.2018 08:12:46 Firefox Search Engine (search-metadata)
Unknown: [global].current = Ad-Aware SecureSearch
15.08.2018 08:12:46 Firefox SearchDefault (mozlz4)
Unknown: metaData.current = Ad-Aware SecureSearch
Delete Marked Items Internet Explorer->Search Provider. {BDF61FAE-9D19-40F0-8F34-
688DEB334CA9}=http://securedsearch.lavasoft.com/results.php?
Delete Marked Items Internet Explorer->Search Provider. {0CE02FFA-A6B0-46F6-BA2F-
BD32C3630126}=https://id.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-
Delete Marked Items Internet Explorer->Search Provider(x64). {0CE02FFA-A6B0-46F6-
BA2F-BD32C3630126}=https://id.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-
Delete Marked Items Internet Explorer->Search Provider for All Users(x64).
{E47139BB-500B-464C-8895-9ACBB027EAB6}=https://id.search.yahoo.com/yhs/search?
hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_dmontlsfs_18_25&param1=1&param2=f
%3D4%26b%3DIE%26cc%3Did%26pa%3Dwinyahoo%26cd
Delete Marked Items Internet Explorer->Search Provider for All Users. {E47139BB-
500B-464C-8895-9ACBB027EAB6}=https://id.search.yahoo.com/yhs/search?
hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_dmontlsfs_18_25&param1=1&param2=f
%3D4%26b%3DIE%26cc%3Did%26pa%3Dwinyahoo%26cd
Delete Marked Items Internet Explorer->Search Provider(x64). {BDF61FAE-9D19-40F0-
8F34-688DEB334CA9}=http://securedsearch.lavasoft.com/results.php?
Unknown: Default_Page_URL = http://dell17win10.msn.com/?pc=DCTE
Unknown: browser.search.defaultEnginename = ad-aware securesearch
15.08.2018 08:12:50 Firefox Search Engine (search-metadata)
Unknown: [global].current = Ad-Aware SecureSearch
15.08.2018 08:12:50 Firefox SearchDefault (mozlz4)
Unknown: metaData.current = Ad-Aware SecureSearch
File has been saved to:
C:\@RestoreQuarantine\2018-Aug-15_08hour\search-metadata.json
Deleting file:
C:\Users\bimos\AppData\Roaming\Mozilla\Firefox\Profiles\3bsj0vyc.default\search-
metadata.json
File will be deleted at next reboot.
-------------------------------------------------------
53.dll_4ppeyb0x.ffm
2.dll_tolfgqgj.qys
53.dll_ljutgtnj.zh5
51.dll_japygozx.spu
2.dll_jdllvm2x.pgt
A80AA35AC5B8}
Delete:
C:\Users\bimos\AppData\Roaming\Mozilla\Firefox\Profiles\3bsj0vyc.default\search-
metadata.json
C:\@RestoreQuarantine\2018-Aug-15_08hour\search.json.mozlz4
Deleting file:
C:\Users\bimos\AppData\Roaming\Mozilla\Firefox\Profiles\3bsj0vyc.default\search.jso
n.mozlz4
File will be deleted at next reboot.
-------------------------------------------------------
53.dll_4ppeyb0x.ffm
2.dll_tolfgqgj.qys
53.dll_ljutgtnj.zh5
51.dll_japygozx.spu
2.dll_jdllvm2x.pgt
A80AA35AC5B8}
Delete: \??\C:\Users\bimos\AppData\Roaming\Mozilla\Firefox\Profiles\3bsj0vyc.defaul
t\search-metadata.json
Delete:
C:\Users\bimos\AppData\Roaming\Mozilla\Firefox\Profiles\3bsj0vyc.default\search.jso
n.mozlz4
Anti-malware scan finished at: 15.08.2018 08:13:06
15/08/2018 15:58:39 Auto Services
Suspicious: nvsvc = "C:\WINDOWS\SYSTEM32\NVVSVC.EXE"
15/08/2018 15:58:41 Google Chrome Addons
Anti-malware scan finished at: 15/08/2018 15:58:42
15.08.2018 23:36:20 Auto Services
16.08.2018 10:37:27 Auto Services
16.08.2018 14:38:25 Auto Services
16.08.2018 18:40:38 Auto Services
16.08.2018 23:46:38 Auto Services
17.08.2018 12:29:00 Auto Services
17.08.2018 19:33:14 Auto Services
17.08.2018 23:33:56 Scheduled Tasks 2
17.08.2018 23:35:12 Auto Services
OpenService Update Orchestrator Service :Access is denied
17.08.2018 23:37:48 Scheduled Tasks 2
-------------------------------------------------------
Delete: \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{A407C598-
C1BE-4516-98AF-84BA4C6EF2CC}\MpKsl94564b71.sys
NT\CurrentVersion\Schedule\TaskCache\Boot\{FDD0CF6B-36AE-4219-8134-24773A41B01C}
NT\CurrentVersion\Schedule\TaskCache\Logon\{FDD0CF6B-36AE-4219-8134-24773A41B01C}
NT\CurrentVersion\Schedule\TaskCache\Maintenance\{FDD0CF6B-36AE-4219-8134-
24773A41B01C}
{FDD0CF6B-36AE-4219-8134-24773A41B01C}
{FDD0CF6B-36AE-4219-8134-24773A41B01C}
17.08.2018 23:40:00 Auto Services
Delete Marked Items Kernel Auto Boot->Auto Services.
nvsvc="C:\WINDOWS\SYSTEM32\NVVSVC.EXE"
nahhmpbckpgdidfnmfkfgiflpjijilce=C:\Users\bimos\AppData\Local\Google\Chrome\User
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.54_0\2bfc185be71f44
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.54_0\b495e340f4ef89
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.54_0\background.htm
l
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.54_0\background.v0.
0.1.min.js
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.54_0\c5a5cbf4dbcaa7
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.54_0\client.v0.0.1.
min.js
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.54_0\common.js.v0.0
.1.min.js
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.54_0\content\bundle
.v0.0.1.min.css
neue-bold.woff
neue.woff
\alot.png
\bing.png
\bing_large.png
\bluesky-bg.jpg
\brush.png
\bt.png
\clock.png
\cloud.png
\converter
\converter
\cupcake-bg.jpg
\desk-bg.jpg
\doodle.png
\down.png
\eyeglass.png
\films\amazon.svg
\films\close.svg
\films\hulu.svg
\films\netflix.svg
\films\vudu.svg
\films
\films
\films-bg.jpg
\gmx_large.png
\google.png
\google_large.png
\hero-bg.jpg
\icons\128.png
\icons\16.png
\icons\48.png
\icons\close.png
\icons\favicon.ico
\icons\trends.svg
\icons
\icons
\just-the-box.png
\maps
\maps
\mountain-bg.jpg
\pointer2.png
\radio-selected.svg
\sea-bg.jpg
\search-D7D7D7.svg
\search-FFFFFF.svg
\settings.png
\sitesThumbnails
\sitesThumbnails
\smallMagnifier.png
\star.svg
\tiles\View-PDF.jpg
\tiles
\tiles
\todoc.png
\toggle-off.svg
\toggle-on.svg
\topdf.png
\weather\01d.svg
\weather\01n.svg
\weather\02d.svg
\weather\02n.svg
\weather\03d.svg
\weather\03n.svg
\weather\04d.svg
\weather\04n.svg
\weather\09d.svg
\weather\09n.svg
\weather\10d.svg
\weather\10n.svg
\weather\11d.svg
\weather\11n.svg
\weather\13d.svg
\weather\13n.svg
\weather\50d.svg
\weather\50n.svg
\weather
\weather
\yahoo.png
\yahoo.svg
\yahoo_large.png
\yandex.png
\_gmx_large.png
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.54_0\e5d3501d500d07
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.54_0\e_.json
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.54_0\index.html
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.54_0\manifest.json
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.54_0\popupTab2.html
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.54_0\responseConfig
.json
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.54_0\skin\icons\16.
png
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.54_0\vendor\md5.min
.js
dom.min.js
with-addons.min.js
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.54_0\_locales\en\me
ssages.json
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.54_0\_locales\fr\me
ssages.json
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.54_0\_locales\hi\me
ssages.json
\messages.json
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.54_0\_locales\vi\me
ssages.json
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.54_0\_metadata\veri
fied_contents.json
Error: 0
-------------------------------------------------------
Delete: \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{A407C598-
C1BE-4516-98AF-84BA4C6EF2CC}\MpKsl94564b71.sys
20.08.2018 07:07:35 Chrome Protected Settings
Unknown: search_web_data.url = {google:baseURL}search?q={searchTerms}&{google:RLZ}
{google:originalQueryForSuggestion}{google:assistedQueryStats}
{google:searchFieldtrialParameter}{google:iOSSearchLanguage}{google:searchClient}
{google:sourceId}{google:contextualSearchVersion}ie={inputEncoding}
Unknown: search_web_data.new_tab_url = {google:baseURL}_/chrome/newtab?
{google:RLZ}ie={inputEncoding}
Delete Marked Items Browsers->Chrome Protected Settings.
search_web_data.url={google:baseURL}search?q={searchTerms}&{google:RLZ}
C:\@RestoreQuarantine\2018-Aug-20_07hour\Preferences
C:\@RestoreQuarantine\2018-Aug-20_07hour\Secure Preferences
C:\@RestoreQuarantine\2018-Aug-20_07hour\Web Data
Delete Marked Items Browsers->Chrome Protected Settings.
search_web_data.new_tab_url={google:baseURL}_/chrome/newtab?


C:\@RestoreQuarantine\2018-Aug-20_07hour\Web Data
21.08.2018 13:48:03 Scheduled Tasks 2
21.08.2018 17:59:31 Scheduled Tasks 2
21.08.2018 22:01:25 Scheduled Tasks 2
22.08.2018 02:11:58 Registry Run
Unknown: AdobeBridge =
22.08.2018 02:11:58 Scheduled Tasks 2
Unknown: menkifleemblimdogmoihpfopnplikde =
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0
Unknown: ophjlpahpchlmihnnnihgmmeilfjmjjc =
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0
Unknown: default_search_provider_data.template_url_data.favicon_url =
https://www.google.co.id/images/branding/product/ico/googleg_lodp.ico
Unknown: default_search_provider_data.template_url_data.new_tab_url =
{google:baseURL}_/chrome/newtab?{google:RLZ}ie={inputEncoding}
Unknown: default_search_provider_data.template_url_data.url =
{google:baseURL}search?q={searchTerms}&{google:RLZ}
22.08.2018 06:13:08 Registry Run
22.08.2018 06:13:08 Scheduled Tasks 2
22.08.2018 10:15:23 Registry Run
22.08.2018 10:15:23 Scheduled Tasks 2
22.08.2018 14:59:03 Registry Run
22.08.2018 14:59:03 Scheduled Tasks 2
23.08.2018 00:22:26 Registry Run
23.08.2018 00:22:26 Scheduled Tasks 2
23.08.2018 04:23:27 Registry Run
23.08.2018 04:23:27 Scheduled Tasks 2
23.08.2018 10:11:48 Registry Run
23.08.2018 10:11:48 Scheduled Tasks 2
23.08.2018 14:13:30 Registry Run
23.08.2018 14:13:30 Scheduled Tasks 2
23.08.2018 18:14:39 Registry Run
23.08.2018 18:14:39 Scheduled Tasks 2
24.08.2018 00:17:56 Registry Run
24.08.2018 00:17:56 Scheduled Tasks 2
24.08.2018 04:18:53 Registry Run
24.08.2018 04:18:53 Scheduled Tasks 2
24.08.2018 11:30:08 Registry Run
24.08.2018 11:30:08 Scheduled Tasks 2
24.08.2018 15:31:25 Registry Run
24.08.2018 15:31:25 Scheduled Tasks 2
24.08.2018 19:32:34 Registry Run
24.08.2018 19:32:34 Scheduled Tasks 2
24.08.2018 23:33:28 Registry Run
24.08.2018 23:33:28 Scheduled Tasks 2
25.08.2018 07:26:17 Registry Run
25.08.2018 07:26:17 Scheduled Tasks 2
25.08.2018 11:27:29 Registry Run
25.08.2018 11:27:29 Scheduled Tasks 2
25.08.2018 15:57:58 Registry Run
25.08.2018 15:57:58 Scheduled Tasks 2
25.08.2018 19:58:56 Registry Run
25.08.2018 19:58:56 Scheduled Tasks 2
25.08.2018 23:59:54 Registry Run
25.08.2018 23:59:54 Scheduled Tasks 2
26.08.2018 09:30:39 Registry Run
26.08.2018 09:30:39 Scheduled Tasks 2
26.08.2018 13:31:45 Registry Run
26.08.2018 13:31:45 Scheduled Tasks 2
26.08.2018 17:32:59 Registry Run
26.08.2018 17:32:59 Scheduled Tasks 2
26.08.2018 21:33:55 Registry Run
26.08.2018 21:33:55 Scheduled Tasks 2
27.08.2018 02:11:00 Registry Run
27.08.2018 02:11:00 Scheduled Tasks 2
27.08.2018 06:14:10 Registry Run
27.08.2018 06:14:10 Scheduled Tasks 2
27.08.2018 12:17:44 Registry Run
27.08.2018 12:17:44 Scheduled Tasks 2
28.08.2018 02:23:20 Registry Run
28.08.2018 02:23:20 Scheduled Tasks 2
28.08.2018 06:24:58 Registry Run
28.08.2018 06:24:58 Scheduled Tasks 2
28.08.2018 10:26:16 Registry Run
28.08.2018 10:26:16 Scheduled Tasks 2
28.08.2018 14:27:25 Registry Run
28.08.2018 14:27:25 Scheduled Tasks 2
28.08.2018 18:28:46 Registry Run
28.08.2018 18:28:46 Scheduled Tasks 2
28.08.2018 22:30:05 Registry Run
28.08.2018 22:30:05 Scheduled Tasks 2
29.08.2018 02:31:21 Registry Run
29.08.2018 02:31:21 Scheduled Tasks 2
29.08.2018 06:33:25 Registry Run
29.08.2018 06:33:25 Scheduled Tasks 2
29.08.2018 11:51:37 Registry Run
29.08.2018 11:51:37 Scheduled Tasks 2
29.08.2018 16:21:39 Registry Run
29.08.2018 16:21:39 Scheduled Tasks 2
29.08.2018 20:23:29 Registry Run
29.08.2018 20:23:29 Scheduled Tasks 2
30.08.2018 06:00:40 Registry Run
30.08.2018 06:00:40 Scheduled Tasks 2
30.08.2018 06:08:24 Registry Run
30.08.2018 06:08:24 Scheduled Tasks 2
Delete Marked Items Auto Start Apps->Registry Run. AdobeBridge=
-------------------------------------------------------
NT\CurrentVersion\Schedule\TaskCache\Boot\{8B487E8F-E0D0-4437-9E65-D2094148818B}
NT\CurrentVersion\Schedule\TaskCache\Logon\{8B487E8F-E0D0-4437-9E65-D2094148818B}
NT\CurrentVersion\Schedule\TaskCache\Maintenance\{8B487E8F-E0D0-4437-9E65-
D2094148818B}
{8B487E8F-E0D0-4437-9E65-D2094148818B}
{8B487E8F-E0D0-4437-9E65-D2094148818B}
Delete Marked Items Internet Explorer->IE Extensions - All Users. {789FE86F-6FC4-
46A1-9849-EDE0DB0C95CA}=
menkifleemblimdogmoihpfopnplikde=C:\Users\bimos\AppData\Local\Google\Chrome\User
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\capture.html
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\index.html
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\main.js
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\manifest.json
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\audio\Bell.wa
v
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\audio
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\card\card.pro
perties
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\card
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\countries\cou
ntries.txt
ntry_language.txt
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\countries
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\css\line_chro
me.min.css
me_capture.min.css
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\css
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\0023-
20e3.png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\002a-
20e3.png
20e3.png
20e3.png
20e3.png
20e3.png
20e3.png
20e3.png
20e3.png
20e3.png
20e3.png
20e3.png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\00a9.pn
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\00ae.pn
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f004.p
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f0cf.p
ng
ng
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f17e.p
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f17f.p
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f19a.p
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f1e6-
1f1e8.png
1f1e9.png
1f1ea.png
1f1eb.png
1f1ec.png
1f1ee.png
1f1f1.png
1f1f2.png
1f1f4.png
1f1f6.png
1f1f7.png
1f1f8.png
1f1f9.png
1f1fa.png
1f1fc.png
1f1fd.png
1f1ff.png
1f1e6.png
1f1e7.png
1f1e9.png
1f1ea.png
1f1eb.png
1f1ec.png
1f1ed.png
1f1ee.png
1f1ef.png
1f1f1.png
1f1f2.png
1f1f3.png
1f1f4.png
1f1f6.png
1f1f7.png
1f1f8.png
1f1f9.png
1f1fb.png
1f1fc.png
1f1fe.png
1f1ff.png
1f1e6.png
1f1e8.png
1f1e9.png
1f1eb.png
1f1ec.png
1f1ed.png
1f1ee.png
1f1f0.png
1f1f1.png
1f1f2.png
1f1f3.png
1f1f4.png
1f1f5.png
1f1f7.png
1f1fa.png
1f1fb.png
1f1fc.png
1f1fd.png
1f1fe.png
1f1ff.png
1f1ea.png
1f1ec.png
1f1ef.png
1f1f0.png
1f1f2.png
1f1f4.png
1f1ff.png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f1ea-
1f1e6.png
1f1e8.png
1f1ea.png
1f1ec.png
1f1ed.png
1f1f7.png
1f1f8.png
1f1f9.png
1f1fa.png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f1eb-
1f1ee.png
1f1ef.png
1f1f0.png
1f1f2.png
1f1f4.png
1f1f7.png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f1ec-
1f1e6.png
1f1e7.png
1f1e9.png
1f1ea.png
1f1eb.png
1f1ec.png
1f1ed.png
1f1ee.png
1f1f1.png
1f1f2.png
1f1f3.png
1f1f5.png
1f1f6.png
1f1f7.png
1f1f8.png
1f1f9.png
1f1fa.png
1f1fc.png
1f1fe.png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f1ed-
1f1f0.png
1f1f2.png
1f1f3.png
1f1f7.png
1f1f9.png
1f1fa.png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f1ee-
1f1e8.png
1f1e9.png
1f1ea.png
1f1f1.png
1f1f2.png
1f1f3.png
1f1f4.png
1f1f6.png
1f1f7.png
1f1f8.png
1f1f9.png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f1ef-
1f1ea.png
1f1f2.png
1f1f4.png
1f1f5.png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f1f0-
1f1ea.png
1f1ec.png
1f1ed.png
1f1ee.png
1f1f2.png
1f1f3.png
1f1f5.png
1f1f7.png
1f1fc.png
1f1fe.png
1f1ff.png
1f1e6.png
1f1e7.png
1f1e8.png
1f1ee.png
1f1f0.png
1f1f7.png
1f1f8.png
1f1f9.png
1f1fa.png
1f1fb.png
1f1fe.png
1f1e6.png
1f1e8.png
1f1e9.png
1f1ea.png
1f1eb.png
1f1ec.png
1f1ed.png
1f1f0.png
1f1f1.png
1f1f2.png
1f1f3.png
1f1f4.png
1f1f5.png
1f1f6.png
1f1f7.png
1f1f8.png
1f1f9.png
1f1fa.png
1f1fb.png
1f1fc.png
1f1fd.png
1f1fe.png
1f1ff.png
1f1e6.png
1f1e8.png
1f1ea.png
1f1eb.png
1f1ec.png
1f1ee.png
1f1f1.png
1f1f4.png
1f1f5.png
1f1f7.png
1f1fa.png
1f1ff.png
1f1f2.png
1f1e6.png
1f1ea.png
1f1eb.png
1f1ec.png
1f1ed.png
1f1f0.png
1f1f1.png
1f1f2.png
1f1f3.png
1f1f7.png
1f1f8.png
1f1f9.png
1f1fc.png
1f1fe.png
1f1e6.png
1f1ea.png
1f1f4.png
1f1f8.png
1f1fa.png
1f1fc.png
1f1e6.png
1f1e7.png
1f1e8.png
1f1e9.png
1f1ea.png
1f1ec.png
1f1ed.png
1f1ee.png
1f1ef.png
1f1f0.png
1f1f1.png
1f1f2.png
1f1f3.png
1f1f4.png
1f1f7.png
1f1f8.png
1f1f9.png
1f1fb.png
1f1fd.png
1f1fe.png
1f1ff.png
1f1e6.png
1f1e8.png
1f1e9.png
1f1eb.png
1f1ec.png
1f1ed.png
1f1ef.png
1f1f0.png
1f1f1.png
1f1f2.png
1f1f3.png
1f1f4.png
1f1f7.png
1f1f9.png
1f1fb.png
1f1fc.png
1f1ff.png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f1fa-
1f1e6.png
1f1ec.png
1f1f2.png
1f1f8.png
1f1fe.png
1f1ff.png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f1fb-
1f1e6.png
1f1e8.png
1f1ea.png
1f1ec.png
1f1ee.png
1f1f3.png
1f1fa.png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f1fc-
1f1eb.png
1f1f8.png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f1fd-
1f1f0.png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f1fe-
1f1ea.png
1f1f9.png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f1ff-
1f1e6.png
1f1f2.png
1f1fc.png
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f30b.p
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f30c.p
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f30d.p
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f385-
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3a0.p
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3aa.p
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3ab.p
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3ac.p
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3ad.p
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3ae.p
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3af.p
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3b0.p
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3ba.p
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3bb.p
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3bc.p
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3bd.p
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3be.p
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3bf.p
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3c0.p
ng
ng
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3c3-
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3ca-
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3ca.p
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3cb-
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3cb.p
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3cc.p
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3cd.p
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3ce.p
ng
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3d0.p
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3da.p
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3db.p
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3dc.p
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3dd.p
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3de.p
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3df.p
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3e0.p
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3ea.p
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3eb.p
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3ec.p
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3ed.p
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3ee.p
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3ef.p
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3f0.p
ng
ng
ng
ng
ng
ng
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3fa.p
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3fb.p
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3fc.p
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3fd.p
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3fe.p
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f3ff.p
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
1f5e8.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f44a-
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f44b-
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f44c-
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f44d-
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f44e-
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f44f-
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
1f468-1f466-1f466.png
1f468-1f466.png
1f468-1f467-1f466.png
1f468-1f467-1f467.png
1f468-1f467.png
1f469-1f466-1f466.png
1f469-1f467-1f466.png
1f469-1f467-1f467.png
1f469-1f467.png
2764-1f468.png
2764-1f48b-1f468.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
1f469-1f466-1f466.png
1f469-1f466.png
1f469-1f467-1f466.png
1f469-1f467-1f467.png
1f469-1f467.png
2764-1f469.png
2764-1f48b-1f469.png
ng
ng
ng
ng
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
ng
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
ng
ng
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f4aa-
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
ng
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f6a3-
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f6b4-
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
ng
ng
ng
ng
ng
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\203c.pn
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\2049.pn
g
g
g
g
g
g
g
g
g
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\21aa.pn
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\231a.pn
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\231b.pn
g
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\23e9.pn
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\23ea.pn
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\23eb.pn
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\23ec.pn
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\23ed.pn
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\23ee.pn
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\23ef.pn
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\23f0.pn
g
g
g
g
g
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\23fa.pn
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\24c2.pn
g
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\25ab.pn
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\25b6.pn
g
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\25fb.pn
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\25fc.pn
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\25fd.pn
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\25fe.pn
g
g
g
g
g
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\260e.pn
g
g
g
g
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\261d-
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\261d.pn
g
g
g
g
g
g
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\262f.pn
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\26bd.pn
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\26be.pn
g
g
g
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\26ce.pn
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\26cf.pn
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\26d1.pn
g
g
g
g
g
g
g
g
g
g
g
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
g
g
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\270b-
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\270c-
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\27bf.pn
g
g
g
g
g
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\2b1b.pn
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\2b1c.pn
g
g
g
g
g
g
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\img\close_bt.
png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\img\common\em
ail_mobile_en.png
ail_mobile_ja.png
ail_mobile_ko.png
ail_mobile_th.png
ail_mobile_zh_CN.png
ail_mobile_zh_TW.png
ail_pc_en.png
ail_pc_ja.png
ail_pc_ko.png
ail_pc_th.png
ail_pc_zh_CN.png
ail_pc_zh_TW.png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\img\common\gi
ft\gift_1.png
ft\gift_2.png
ft\gift_3.png
ft\gift_4.png
ft\gift_5.png
ft\gift_6.png
ft\gift_7.png
ft\gift_8.png
ft
ft
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\img\common\ic
o_cursor_crosshair.png
o_cursor_resize.png
o_history_off.png
o_history_on.png
o_location.png
o_mdBtn01Cancel.png
o_mdBtn01Save.png
o_mdBtn01Send.png
o_mdBtn02Edit.png
o_mdCheckbox01_checked.png
o_mdLYR01_arrow.png
o_mdRadio01_checked.png
o_mdRGT07TextLink_other.png
o_mdRGT07TextLink_own.png
o_mdRGT07Video_Other.png
o_mdRGT07Video_Own.png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\img\common\im
g_clip.png
g_clip_failed.png
g_clip_failed_own.png
g_clip_other.png
g_clip_play.png
g_clip_ready.png
g_mdLFT05Error_404.png
g_mdLYR03Arrow.png
g_mdRGT07Loading.png
g_mdRGT07Loading_voice.png
g_mdRGT07Loading_voice_own.png
g_mdRGT07Mic_voice.png
g_mdRGT07Mic_voice_own.png
g_mdRGT07Pause_voice.png
g_mdRGT07Pause_voice_own.png
g_mdRGT07Play_voice.png
g_mdRGT07Play_voice_own.png
g_mdTxtCaution01.png
g_zero_01.png
g_zero_02.png
g_zero_03.png
g_zero_04.png
g_zero_chat_room.png
g_zero_note.png
g_zero_welcome.png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\img\common
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\img\groupDefI
mage\111x111\01.png
mage\111x111\02.png
mage\111x111\03.png
mage\111x111\04.png
mage\111x111\05.png
mage\111x111\06.png
mage\111x111\07.png
mage\111x111\08.png
mage\111x111\09.png
mage\111x111\10.png
mage\111x111\11.png
mage\111x111\12.png
mage\111x111\13.png
mage\111x111\14.png
mage\111x111\15.png
mage\111x111\16.png
mage\111x111\17.png
mage\111x111\18.png
mage\111x111\19.png
mage\111x111\20.png
mage\111x111\21.png
mage\111x111
mage\111x111
mage\35x35\01.png
mage\35x35\02.png
mage\35x35\03.png
mage\35x35\04.png
mage\35x35\05.png
mage\35x35\06.png
mage\35x35\07.png
mage\35x35\08.png
mage\35x35\09.png
mage\35x35\10.png
mage\35x35\11.png
mage\35x35\12.png
mage\35x35\13.png
mage\35x35\14.png
mage\35x35\15.png
mage\35x35\16.png
mage\35x35\17.png
mage\35x35\18.png
mage\35x35\19.png
mage\35x35\20.png
mage\35x35\21.png
mage\35x35
mage\35x35
mage\46x46\01.png
mage\46x46\02.png
mage\46x46\03.png
mage\46x46\04.png
mage\46x46\05.png
mage\46x46\06.png
mage\46x46\07.png
mage\46x46\08.png
mage\46x46\09.png
mage\46x46\10.png
mage\46x46\11.png
mage\46x46\12.png
mage\46x46\13.png
mage\46x46\14.png
mage\46x46\15.png
mage\46x46\16.png
mage\46x46\17.png
mage\46x46\18.png
mage\46x46\19.png
mage\46x46\20.png
mage\46x46\21.png
mage\46x46
mage\46x46
mage
mage
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\img\img_error
.png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\img\img_line_
qr.png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\img\img_login
_mail1.png
_mail2.png
_qr1.png
_qr2.png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\img\line_logo
_128x128.png
_16x16.png
_16x16_alpha_channel.png
_32x32.png
_48x48.png
_80x80.png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\img\logo\logo
_x2.png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\img\logo
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\img\noimg\img
_error_File_Other.png
_error_File_Own.png
_error_Image_Other.png
_error_Image_Own.png
_friend_profile_111x111_1.png
_group_profile_111x111.png
_Link_Other_70x70.png
_Link_Own_70x70.png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\img\noimg
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\img\skin\bg_i
llustration_01.png
llustration_02.png
llustration_03.png
llustration_04.png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\img\skin\bg_p
attern_01.png
attern_02.png
attern_03.png
hoto_01.jpg
hoto_02.jpg
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\img\skin\img_
color_01.png
illustration_01.png
illustration_02.png
illustration_03.png
illustration_04.png
pattern_01.png
pattern_02.png
pattern_03.png
photo_01.png
photo_02.png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\img\skin
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\img\sprite\ca
pture.png
rd.png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\img\sprite\co
mmon.png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\img\sprite\Md
GHD.png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\img\sprite
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\img\timeline_
dim.png
normal.png
over.png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\img
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\locales\chrom
e.en.properties
e.ja.properties
e.ko.properties
e.th.properties
e.zh_CN.properties
e.zh_TW.properties
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\locales
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\src\AhcN.js
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\src\cOfrg.js
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\src\kfVXG.js
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\src\LCWfE.js
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\src\mHevs.js
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\src\SiHpV.js
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\src\sZgaf.js
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\src\vAYSj.js
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\src\vFzGY.js
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\src\whPqb.js
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\src\wwLPx.js
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\src\zDih_.js
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\src
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\_locales\en\messa
ges.json
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\_locales\en
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\_locales\ja\messa
ges.json
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\_locales\ja
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\_locales\ko\messa
ges.json
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\_locales\ko
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\_locales\th\messa
ges.json
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\_locales\th
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\_locales\zh_CN\me
ssages.json
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\_locales\zh_CN
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\_locales\zh_TW\me
ssages.json
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\_locales\zh_TW
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\_locales
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\_metadata\verifie
d_contents.json
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\_metadata
Error: 0
-------------------------------------------------------
ophjlpahpchlmihnnnihgmmeilfjmjjc=C:\Users\bimos\AppData\Local\Google\Chrome\User
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\capture.html
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\index.html
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\main.js
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\manifest.json
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\audio\Bell.wav
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\audio
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\card\card.prop
erties
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\card
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\countries\coun
tries.txt
try_language.txt
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\countries
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\css\line_chrom
e.min.css
e_capture.min.css
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\css
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\0023-
20e3.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\002a-
20e3.png
20e3.png
20e3.png
20e3.png
20e3.png
20e3.png
20e3.png
20e3.png
20e3.png
20e3.png
20e3.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\00a9.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\00ae.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f004.pn
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f0cf.pn
g
g
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f17e.pn
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f17f.pn
g
g
g
g
g
g
g
g
g
g
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f19a.pn
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f1e6-
1f1e8.png
1f1e9.png
1f1ea.png
1f1eb.png
1f1ec.png
1f1ee.png
1f1f1.png
1f1f2.png
1f1f4.png
1f1f6.png
1f1f7.png
1f1f8.png
1f1f9.png
1f1fa.png
1f1fc.png
1f1fd.png
1f1ff.png
1f1e6.png
1f1e7.png
1f1e9.png
1f1ea.png
1f1eb.png
1f1ec.png
1f1ed.png
1f1ee.png
1f1ef.png
1f1f1.png
1f1f2.png
1f1f3.png
1f1f4.png
1f1f6.png
1f1f7.png
1f1f8.png
1f1f9.png
1f1fb.png
1f1fc.png
1f1fe.png
1f1ff.png
1f1e6.png
1f1e8.png
1f1e9.png
1f1eb.png
1f1ec.png
1f1ed.png
1f1ee.png
1f1f0.png
1f1f1.png
1f1f2.png
1f1f3.png
1f1f4.png
1f1f5.png
1f1f7.png
1f1fa.png
1f1fb.png
1f1fc.png
1f1fd.png
1f1fe.png
1f1ff.png
1f1ea.png
1f1ec.png
1f1ef.png
1f1f0.png
1f1f2.png
1f1f4.png
1f1ff.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f1ea-
1f1e6.png
1f1e8.png
1f1ea.png
1f1ec.png
1f1ed.png
1f1f7.png
1f1f8.png
1f1f9.png
1f1fa.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f1eb-
1f1ee.png
1f1ef.png
1f1f0.png
1f1f2.png
1f1f4.png
1f1f7.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f1ec-
1f1e6.png
1f1e7.png
1f1e9.png
1f1ea.png
1f1eb.png
1f1ec.png
1f1ed.png
1f1ee.png
1f1f1.png
1f1f2.png
1f1f3.png
1f1f5.png
1f1f6.png
1f1f7.png
1f1f8.png
1f1f9.png
1f1fa.png
1f1fc.png
1f1fe.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f1ed-
1f1f0.png
1f1f2.png
1f1f3.png
1f1f7.png
1f1f9.png
1f1fa.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f1ee-
1f1e8.png
1f1e9.png
1f1ea.png
1f1f1.png
1f1f2.png
1f1f3.png
1f1f4.png
1f1f6.png
1f1f7.png
1f1f8.png
1f1f9.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f1ef-
1f1ea.png
1f1f2.png
1f1f4.png
1f1f5.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f1f0-
1f1ea.png
1f1ec.png
1f1ed.png
1f1ee.png
1f1f2.png
1f1f3.png
1f1f5.png
1f1f7.png
1f1fc.png
1f1fe.png
1f1ff.png
1f1e6.png
1f1e7.png
1f1e8.png
1f1ee.png
1f1f0.png
1f1f7.png
1f1f8.png
1f1f9.png
1f1fa.png
1f1fb.png
1f1fe.png
1f1e6.png
1f1e8.png
1f1e9.png
1f1ea.png
1f1eb.png
1f1ec.png
1f1ed.png
1f1f0.png
1f1f1.png
1f1f2.png
1f1f3.png
1f1f4.png
1f1f5.png
1f1f6.png
1f1f7.png
1f1f8.png
1f1f9.png
1f1fa.png
1f1fb.png
1f1fc.png
1f1fd.png
1f1fe.png
1f1ff.png
1f1e6.png
1f1e8.png
1f1ea.png
1f1eb.png
1f1ec.png
1f1ee.png
1f1f1.png
1f1f4.png
1f1f5.png
1f1f7.png
1f1fa.png
1f1ff.png
1f1f2.png
1f1e6.png
1f1ea.png
1f1eb.png
1f1ec.png
1f1ed.png
1f1f0.png
1f1f1.png
1f1f2.png
1f1f3.png
1f1f7.png
1f1f8.png
1f1f9.png
1f1fc.png
1f1fe.png
1f1e6.png
1f1ea.png
1f1f4.png
1f1f8.png
1f1fa.png
1f1fc.png
1f1e6.png
1f1e7.png
1f1e8.png
1f1e9.png
1f1ea.png
1f1ec.png
1f1ed.png
1f1ee.png
1f1ef.png
1f1f0.png
1f1f1.png
1f1f2.png
1f1f3.png
1f1f4.png
1f1f7.png
1f1f8.png
1f1f9.png
1f1fb.png
1f1fd.png
1f1fe.png
1f1ff.png
1f1e6.png
1f1e8.png
1f1e9.png
1f1eb.png
1f1ec.png
1f1ed.png
1f1ef.png
1f1f0.png
1f1f1.png
1f1f2.png
1f1f3.png
1f1f4.png
1f1f7.png
1f1f9.png
1f1fb.png
1f1fc.png
1f1ff.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f1fa-
1f1e6.png
1f1ec.png
1f1f2.png
1f1f8.png
1f1fe.png
1f1ff.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f1fb-
1f1e6.png
1f1e8.png
1f1ea.png
1f1ec.png
1f1ee.png
1f1f3.png
1f1fa.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f1fc-
1f1eb.png
1f1f8.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f1fd-
1f1f0.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f1fe-
1f1ea.png
1f1f9.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f1ff-
1f1e6.png
1f1f2.png
1f1fc.png
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f30b.pn
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f30c.pn
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f30d.pn
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f385-
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3a0.pn
g
g
g
g
g
g
g
g
g
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3aa.pn
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3ab.pn
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3ac.pn
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3ad.pn
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3ae.pn
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3af.pn
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3b0.pn
g
g
g
g
g
g
g
g
g
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3ba.pn
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3bb.pn
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3bc.pn
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3bd.pn
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3be.pn
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3bf.pn
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3c0.pn
g
g
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3c3-
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3ca-
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3ca.pn
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3cb-
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3cb.pn
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3cc.pn
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3cd.pn
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3ce.pn
g
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3d0.pn
g
g
g
g
g
g
g
g
g
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3da.pn
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3db.pn
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3dc.pn
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3dd.pn
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3de.pn
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3df.pn
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3e0.pn
g
g
g
g
g
g
g
g
g
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3ea.pn
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3eb.pn
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3ec.pn
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3ed.pn
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3ee.pn
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3ef.pn
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3f0.pn
g
g
g
g
g
g
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3fa.pn
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3fb.pn
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3fc.pn
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3fd.pn
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3fe.pn
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f3ff.pn
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
1f5e8.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f44a-
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f44b-
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f44c-
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f44d-
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f44e-
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f44f-
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
1f468-1f466-1f466.png
1f468-1f466.png
1f468-1f467-1f466.png
1f468-1f467-1f467.png
1f468-1f467.png
1f469-1f466-1f466.png
1f469-1f467-1f466.png
1f469-1f467-1f467.png
1f469-1f467.png
2764-1f468.png
2764-1f48b-1f468.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
1f469-1f466-1f466.png
1f469-1f466.png
1f469-1f467-1f466.png
1f469-1f467-1f467.png
1f469-1f467.png
2764-1f469.png
2764-1f48b-1f469.png
g
g
g
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f4aa-
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
g
g
g
g
g
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f6a3-
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f6b4-
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
g
g
g
g
g
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
g
g
g
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\203c.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\2049.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\21aa.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\231a.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\231b.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\23e9.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\23ea.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\23eb.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\23ec.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\23ed.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\23ee.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\23ef.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\23f0.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\23fa.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\24c2.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\25ab.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\25b6.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\25fb.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\25fc.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\25fd.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\25fe.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\260e.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\261d-
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\261d.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\262f.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\26bd.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\26be.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\26ce.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\26cf.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\26d1.png
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\270b-
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\270c-
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\27bf.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\2b1b.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\2b1c.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\common\ema
il_mobile_en.png
il_mobile_ja.png
il_mobile_ko.png
il_mobile_th.png
il_mobile_zh_CN.png
il_mobile_zh_TW.png
il_pc_en.png
il_pc_ja.png
il_pc_ko.png
il_pc_th.png
il_pc_zh_CN.png
il_pc_zh_TW.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\common\gif
t\gift_1.png
t\gift_2.png
t\gift_3.png
t\gift_4.png
t\gift_5.png
t\gift_6.png
t\gift_7.png
t\gift_8.png
t
t
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\common\ico
_cursor_crosshair.png
_cursor_resize.png
_history_off.png
_history_on.png
_location.png
_mdBtn01Cancel.png
_mdBtn01Save.png
_mdBtn01Send.png
_mdBtn02Edit.png
_mdCheckbox01_checked.png
_mdLYR01_arrow.png
_mdRadio01_checked.png
_mdRGT07TextLink_other.png
_mdRGT07TextLink_own.png
_mdRGT07Video_Other.png
_mdRGT07Video_Own.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\common\img
_clip.png
_clip_failed.png
_clip_failed_own.png
_clip_other.png
_clip_play.png
_clip_ready.png
_mdLFT05Error_404.png
_mdLYR03Arrow.png
_mdRGT07Loading.png
_mdRGT07Loading_voice.png
_mdRGT07Loading_voice_own.png
_mdRGT07Mic_voice.png
_mdRGT07Mic_voice_own.png
_mdRGT07Pause_voice.png
_mdRGT07Pause_voice_own.png
_mdRGT07Play_voice.png
_mdRGT07Play_voice_own.png
_mdTxtCaution01.png
_mdTxtCaution02.png
_zero_01.png
_zero_02.png
_zero_03.png
_zero_04.png
_zero_chat_room.png
_zero_note.png
_zero_welcome.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\common
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\groupDefIm
age\111x111\01.png
age\111x111\02.png
age\111x111\03.png
age\111x111\04.png
age\111x111\05.png
age\111x111\06.png
age\111x111\07.png
age\111x111\08.png
age\111x111\09.png
age\111x111\10.png
age\111x111\11.png
age\111x111\12.png
age\111x111\13.png
age\111x111\14.png
age\111x111\15.png
age\111x111\16.png
age\111x111\17.png
age\111x111\18.png
age\111x111\19.png
age\111x111\20.png
age\111x111\21.png
age\111x111
age\111x111
age\35x35\01.png
age\35x35\02.png
age\35x35\03.png
age\35x35\04.png
age\35x35\05.png
age\35x35\06.png
age\35x35\07.png
age\35x35\08.png
age\35x35\09.png
age\35x35\10.png
age\35x35\11.png
age\35x35\12.png
age\35x35\13.png
age\35x35\14.png
age\35x35\15.png
age\35x35\16.png
age\35x35\17.png
age\35x35\18.png
age\35x35\19.png
age\35x35\20.png
age\35x35\21.png
age\35x35
age\35x35
age\46x46\01.png
age\46x46\02.png
age\46x46\03.png
age\46x46\04.png
age\46x46\05.png
age\46x46\06.png
age\46x46\07.png
age\46x46\08.png
age\46x46\09.png
age\46x46\10.png
age\46x46\11.png
age\46x46\12.png
age\46x46\13.png
age\46x46\14.png
age\46x46\15.png
age\46x46\16.png
age\46x46\17.png
age\46x46\18.png
age\46x46\19.png
age\46x46\20.png
age\46x46\21.png
age\46x46
age\46x46
age
age
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\img_error.
png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\img_line_q
r.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\img_login_
mail1.png
mail2.png
qr1.png
qr2.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\line_ext_l
ogo_40.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\line_logo_
128x128_off.png
128x128_on.png
16x16.png
16x16_alpha_channel.png
32x32_off.png
32x32_on.png
48x48_off.png
48x48_on.png
64x64_off.png
64x64_on.png
80x80_off.png
80x80_on.png
96x96_off.png
96x96_on.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\logo\logo_
x2.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\logo
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\noimg\img_
error_File_Other.png
error_File_Own.png
error_Image_Other.png
error_Image_Own.png
friend_profile_111x111_1.png
group_profile_111x111.png
Link_Other_70x70.png
Link_Own_70x70.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\noimg
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\skin\bg_il
lustration_01.png
lustration_02.png
lustration_03.png
lustration_04.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\skin\bg_pa
ttern_01.png
ttern_02.png
ttern_03.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\skin\bg_ph
oto_01.jpg
oto_02.jpg
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\skin\img_c
olor_01.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\skin\img_i
llustration_01.png
llustration_02.png
llustration_03.png
llustration_04.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\skin\img_p
attern_01.png
attern_02.png
attern_03.png
hoto_01.png
hoto_02.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\skin
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\sprite\cap
ture.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\sprite\car
d.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\sprite\com
mon.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\sprite\MdG
HD.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\sprite
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\timeline_d
im.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\timeline_n
ormal.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\timeline_o
ver.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\locales\chrome
.en.properties
.ja.properties
.ko.properties
.th.properties
.zh_CN.properties
.zh_TW.properties
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\locales
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\src\BABUb.js
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\src\BpUKe.js
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\src\ELIDj.js
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\src\GQJGE.js
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\src\GtVUl.js
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\src\oQPr.js
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\src\PAPAh.js
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\src\sFiYn.js
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\src\tAoIE.js
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\src\yuKuE.js
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\src\zhqbH.js
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\src\ZLDRp.js
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\src
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\_locales\en\messag
es.json
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\_locales\en
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\_locales\ja\messag
es.json
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\_locales\ja
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\_locales\ko\messag
es.json
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\_locales\ko
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\_locales\th\messag
es.json
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\_locales\th
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\_locales\zh_CN\mes
sages.json
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\_locales\zh_CN
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\_locales\zh_TW\mes
sages.json
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\_locales\zh_TW
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\_locales
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\_metadata\computed
_hashes.json
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\_metadata\verified
_contents.json
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\_metadata
Error: 0
-------------------------------------------------------
01.09.2018 11:01:46 Scheduled Tasks 2
01.09.2018 15:55:29 Scheduled Tasks 2
01.09.2018 15:55:29 Scheduled Tasks 2
Probably Malicious: C:\WINDOWS\SYSNATIVE\TASKS\SystemMaintanceTask =
C:\USERS\BIMOS\APPDATA\ROAMING\DIRT.4.V1.04-ENG.REPACK\UHRHPCT.EXE
Probably Malicious: SystemMaintanceTask =
01.09.2018 15:55:46 Auto Services
Unknown: RNDBWM = "C:\PROGRAM FILES\RIVET NETWORKS\SMARTBYTE\RNDBWMSERVICE.EXE"
01.09.2018 17:03:59 Scheduled Tasks 2
01.09.2018 17:03:59 Scheduled Tasks 2
Probably Malicious: C:\WINDOWS\SYSNATIVE\TASKS\SystemMaintanceTask =
Probably Malicious: SystemMaintanceTask =
Delete Marked Items Auto Start Apps->Scheduled Tasks 2.0 Cached.
SystemMaintanceTask=C:\USERS\BIMOS\APPDATA\ROAMING\DIRT.4.V1.04-
ENG.REPACK\UHRHPCT.EXE
NT\CurrentVersion\Schedule\TaskCache\Tree\SystemMaintanceTask
NT\CurrentVersion\Schedule\TaskCache\Boot\{01533A20-7AE2-4964-872E-616916835EB2}
NT\CurrentVersion\Schedule\TaskCache\Logon\{01533A20-7AE2-4964-872E-616916835EB2}
NT\CurrentVersion\Schedule\TaskCache\Maintenance\{01533A20-7AE2-4964-872E-
616916835EB2}
{01533A20-7AE2-4964-872E-616916835EB2}
{01533A20-7AE2-4964-872E-616916835EB2}
C:\WINDOWS\SYSNATIVE\TASKS\SystemMaintanceTask=C:\USERS\BIMOS\APPDATA\ROAMING\DIRT.
4.V1.04-ENG.REPACK\UHRHPCT.EXE
-------------------------------------------------------
Delete: C:\WINDOWS\SYSNATIVE\TASKS\SystemMaintanceTask
NT\CurrentVersion\Schedule\TaskCache\Boot\{E022C0F4-289F-47A4-9CC6-1660CA6FEEB1}
NT\CurrentVersion\Schedule\TaskCache\Logon\{E022C0F4-289F-47A4-9CC6-1660CA6FEEB1}
NT\CurrentVersion\Schedule\TaskCache\Maintenance\{E022C0F4-289F-47A4-9CC6-
1660CA6FEEB1}
{E022C0F4-289F-47A4-9CC6-1660CA6FEEB1}
{E022C0F4-289F-47A4-9CC6-1660CA6FEEB1}
-------------------------------------------------------
Delete: \??\C:\WINDOWS\SYSNATIVE\TASKS\SystemMaintanceTask
menkifleemblimdogmoihpfopnplikde=C:\Users\bimos\AppData\Local\Google\Chrome\User
C:\@RestoreQuarantine\2018-Sep-01_17hour\Chrome-Default\Secure Preferences
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\audio\Bell.wa
v
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\card\card.pro
perties
ntries.txt
ntry_language.txt
me.min.css
me_capture.min.css
20e3.png
20e3.png
20e3.png
20e3.png
20e3.png
20e3.png
20e3.png
20e3.png
20e3.png
20e3.png
20e3.png
20e3.png
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\00ae.pn
g
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
1f1e8.png
1f1e9.png
1f1ea.png
1f1eb.png
1f1ec.png
1f1ee.png
1f1f1.png
1f1f2.png
1f1f4.png
1f1f6.png
1f1f7.png
1f1f8.png
1f1f9.png
1f1fa.png
1f1fc.png
1f1fd.png
1f1ff.png
1f1e6.png
1f1e7.png
1f1e9.png
1f1ea.png
1f1eb.png
1f1ec.png
1f1ed.png
1f1ee.png
1f1ef.png
1f1f1.png
1f1f2.png
1f1f3.png
1f1f4.png
1f1f6.png
1f1f7.png
1f1f8.png
1f1f9.png
1f1fb.png
1f1fc.png
1f1fe.png
1f1ff.png
1f1e6.png
1f1e8.png
1f1e9.png
1f1eb.png
1f1ec.png
1f1ed.png
1f1ee.png
1f1f0.png
1f1f1.png
1f1f2.png
1f1f3.png
1f1f4.png
1f1f5.png
1f1f7.png
1f1fa.png
1f1fb.png
1f1fc.png
1f1fd.png
1f1fe.png
1f1ff.png
1f1ea.png
1f1ec.png
1f1ef.png
1f1f0.png
1f1f2.png
1f1f4.png
1f1ff.png
1f1e6.png
1f1e8.png
1f1ea.png
1f1ec.png
1f1ed.png
1f1f7.png
1f1f8.png
1f1f9.png
1f1fa.png
1f1ee.png
1f1ef.png
1f1f0.png
1f1f2.png
1f1f4.png
1f1f7.png
1f1e6.png
1f1e7.png
1f1e9.png
1f1ea.png
1f1eb.png
1f1ec.png
1f1ed.png
1f1ee.png
1f1f1.png
1f1f2.png
1f1f3.png
1f1f5.png
1f1f6.png
1f1f7.png
1f1f8.png
1f1f9.png
1f1fa.png
1f1fc.png
1f1fe.png
1f1f0.png
1f1f2.png
1f1f3.png
1f1f7.png
1f1f9.png
1f1fa.png
1f1e8.png
1f1e9.png
1f1ea.png
1f1f1.png
1f1f2.png
1f1f3.png
1f1f4.png
1f1f6.png
1f1f7.png
1f1f8.png
1f1f9.png
1f1ea.png
1f1f2.png
1f1f4.png
1f1f5.png
1f1ea.png
1f1ec.png
1f1ed.png
1f1ee.png
1f1f2.png
1f1f3.png
1f1f5.png
1f1f7.png
1f1fc.png
1f1fe.png
1f1ff.png
1f1e6.png
1f1e7.png
1f1e8.png
1f1ee.png
1f1f0.png
1f1f7.png
1f1f8.png
1f1f9.png
1f1fa.png
1f1fb.png
1f1fe.png
1f1e6.png
1f1e8.png
1f1e9.png
1f1ea.png
1f1eb.png
1f1ec.png
1f1ed.png
1f1f0.png
1f1f1.png
1f1f2.png
1f1f3.png
1f1f4.png
1f1f5.png
1f1f6.png
1f1f7.png
1f1f8.png
1f1f9.png
1f1fa.png
1f1fb.png
1f1fc.png
1f1fd.png
1f1fe.png
1f1ff.png
1f1e6.png
1f1e8.png
1f1ea.png
1f1eb.png
1f1ec.png
1f1ee.png
1f1f1.png
1f1f4.png
1f1f5.png
1f1f7.png
1f1fa.png
1f1ff.png
1f1f2.png
1f1e6.png
1f1ea.png
1f1eb.png
1f1ec.png
1f1ed.png
1f1f0.png
1f1f1.png
1f1f2.png
1f1f3.png
1f1f7.png
1f1f8.png
1f1f9.png
1f1fc.png
1f1fe.png
1f1e6.png
1f1ea.png
1f1f4.png
1f1f8.png
1f1fa.png
1f1fc.png
1f1e6.png
1f1e7.png
1f1e8.png
1f1e9.png
1f1ea.png
1f1ec.png
1f1ed.png
1f1ee.png
1f1ef.png
1f1f0.png
1f1f1.png
1f1f2.png
1f1f3.png
1f1f4.png
1f1f7.png
1f1f8.png
1f1f9.png
1f1fb.png
1f1fd.png
1f1fe.png
1f1ff.png
1f1e6.png
1f1e8.png
1f1e9.png
1f1eb.png
1f1ec.png
1f1ed.png
1f1ef.png
1f1f0.png
1f1f1.png
1f1f2.png
1f1f3.png
1f1f4.png
1f1f7.png
1f1f9.png
1f1fb.png
1f1fc.png
1f1ff.png
1f1e6.png
1f1ec.png
1f1f2.png
1f1f8.png
1f1fe.png
1f1ff.png
1f1e6.png
1f1e8.png
1f1ea.png
1f1ec.png
1f1ee.png
1f1f3.png
1f1fa.png
1f1eb.png
1f1f8.png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\1f1fd-
1f1f0.png
1f1ea.png
1f1f9.png
1f1e6.png
1f1f2.png
1f1fc.png
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
1f5e8.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
1f468-1f466-1f466.png
1f468-1f466.png
1f468-1f467-1f466.png
1f468-1f467-1f467.png
1f468-1f467.png
1f469-1f466-1f466.png
1f469-1f467-1f466.png
1f469-1f467-1f467.png
1f469-1f467.png
2764-1f468.png
2764-1f48b-1f468.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
1f469-1f466-1f466.png
1f469-1f466.png
1f469-1f467-1f466.png
1f469-1f467-1f467.png
1f469-1f467.png
2764-1f469.png
2764-1f48b-1f469.png
ng
ng
ng
ng
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
ng
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
ng
ng
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
ng
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
ng
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
ng
ng
ng
ng
ng
ng
ng
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\23eb.pn
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\23ec.pn
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\23ed.pn
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\23ee.pn
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\23ef.pn
g
g
g
g
g
g
g
g
g
g
g
g
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\25fb.pn
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\25fc.pn
g
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\25fe.pn
g
g
g
g
g
g
g
g
g
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\26bd.pn
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\26be.pn
g
g
g
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\26ce.pn
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\26cf.pn
g
g
g
g
g
g
g
g
g
g
g
g
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
g
g
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\27bf.pn
g
g
g
g
g
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\2b1b.pn
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\emoji\2b1c.pn
g
g
g
g
g
g
g
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\img\close_bt.
png
ail_mobile_en.png
ail_mobile_ja.png
ail_mobile_ko.png
ail_mobile_th.png
ail_mobile_zh_CN.png
ail_mobile_zh_TW.png
ail_pc_en.png
ail_pc_ja.png
ail_pc_ko.png
ail_pc_th.png
ail_pc_zh_CN.png
ail_pc_zh_TW.png
ft\gift_1.png
ft\gift_2.png
ft\gift_3.png
ft\gift_4.png
ft\gift_5.png
ft\gift_6.png
ft\gift_7.png
ft\gift_8.png
ft
ft
o_cursor_crosshair.png
o_cursor_resize.png
o_history_off.png
o_history_on.png
o_location.png
o_mdBtn01Cancel.png
o_mdBtn01Save.png
o_mdBtn01Send.png
o_mdBtn02Edit.png
o_mdCheckbox01_checked.png
o_mdLYR01_arrow.png
o_mdRadio01_checked.png
o_mdRGT07TextLink_other.png
o_mdRGT07TextLink_own.png
o_mdRGT07Video_Other.png
o_mdRGT07Video_Own.png
g_clip.png
g_clip_failed.png
g_clip_failed_own.png
g_clip_other.png
g_clip_play.png
g_clip_ready.png
g_mdLFT05Error_404.png
g_mdLYR03Arrow.png
g_mdRGT07Loading.png
g_mdRGT07Loading_voice.png
g_mdRGT07Loading_voice_own.png
g_mdRGT07Mic_voice.png
g_mdRGT07Mic_voice_own.png
g_mdRGT07Pause_voice.png
g_mdRGT07Pause_voice_own.png
g_mdRGT07Play_voice.png
g_mdRGT07Play_voice_own.png
g_zero_01.png
g_zero_02.png
g_zero_03.png
g_zero_04.png
g_zero_chat_room.png
g_zero_note.png
g_zero_welcome.png
mage\111x111\01.png
mage\111x111\02.png
mage\111x111\03.png
mage\111x111\04.png
mage\111x111\05.png
mage\111x111\06.png
mage\111x111\07.png
mage\111x111\08.png
mage\111x111\09.png
mage\111x111\10.png
mage\111x111\11.png
mage\111x111\12.png
mage\111x111\13.png
mage\111x111\14.png
mage\111x111\15.png
mage\111x111\16.png
mage\111x111\17.png
mage\111x111\18.png
mage\111x111\19.png
mage\111x111\20.png
mage\111x111\21.png
mage\111x111
mage\111x111
mage\35x35\01.png
mage\35x35\02.png
mage\35x35\03.png
mage\35x35\04.png
mage\35x35\05.png
mage\35x35\06.png
mage\35x35\07.png
mage\35x35\08.png
mage\35x35\09.png
mage\35x35\10.png
mage\35x35\11.png
mage\35x35\12.png
mage\35x35\13.png
mage\35x35\14.png
mage\35x35\15.png
mage\35x35\16.png
mage\35x35\17.png
mage\35x35\18.png
mage\35x35\19.png
mage\35x35\20.png
mage\35x35\21.png
mage\35x35
mage\35x35
mage\46x46\01.png
mage\46x46\02.png
mage\46x46\03.png
mage\46x46\04.png
mage\46x46\05.png
mage\46x46\06.png
mage\46x46\07.png
mage\46x46\08.png
mage\46x46\09.png
mage\46x46\10.png
mage\46x46\11.png
mage\46x46\12.png
mage\46x46\13.png
mage\46x46\14.png
mage\46x46\15.png
mage\46x46\16.png
mage\46x46\17.png
mage\46x46\18.png
mage\46x46\19.png
mage\46x46\20.png
mage\46x46\21.png
mage\46x46
mage\46x46
mage
mage
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\img\img_error
.png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\img\img_line_
qr.png
_mail1.png
_mail2.png
_qr1.png
_qr2.png
_128x128.png
_16x16.png
_16x16_alpha_channel.png
_32x32.png
_48x48.png
_80x80.png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\img\logo\logo
_x2.png
_error_File_Other.png
_error_File_Own.png
_error_Image_Other.png
_error_Image_Own.png
_Link_Other_70x70.png
_Link_Own_70x70.png
llustration_01.png
llustration_02.png
llustration_03.png
llustration_04.png
attern_01.png
attern_02.png
attern_03.png
hoto_01.jpg
hoto_02.jpg
color_01.png
illustration_01.png
illustration_02.png
illustration_03.png
illustration_04.png
pattern_01.png
pattern_02.png
pattern_03.png
photo_01.png
photo_02.png
pture.png
rd.png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\img\sprite\co
mmon.png
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\res\img\sprite\Md
GHD.png
dim.png
normal.png
over.png
e.en.properties
e.ja.properties
e.ko.properties
e.th.properties
e.zh_CN.properties
e.zh_TW.properties
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\src\AhcN.js
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\src\cOfrg.js
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\src\kfVXG.js
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\src\LCWfE.js
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\src\mHevs.js
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\src\SiHpV.js
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\src\sZgaf.js
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\src\vAYSj.js
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\src\vFzGY.js
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\src\whPqb.js
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\src\wwLPx.js
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\src\zDih_.js
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\_locales\en\messa
ges.json
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\_locales\ja\messa
ges.json
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\_locales\ko\messa
ges.json
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\_locales\th\messa
ges.json
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\_locales\zh_CN\me
ssages.json
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\_locales\zh_TW\me
ssages.json
Data\Default\Extensions\menkifleemblimdogmoihpfopnplikde\1.4.21_0\_metadata\verifie
d_contents.json
Error: 0
-------------------------------------------------------
ophjlpahpchlmihnnnihgmmeilfjmjjc=C:\Users\bimos\AppData\Local\Google\Chrome\User
C:\@RestoreQuarantine\2018-Sep-01_17hour\Chrome-Default\Secure Preferences
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\capture.html
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\index.html
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\main.js
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\manifest.json
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\audio\Bell.wav
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\card\card.prop
erties
tries.txt
try_language.txt
e.min.css
e_capture.min.css
20e3.png
20e3.png
20e3.png
20e3.png
20e3.png
20e3.png
20e3.png
20e3.png
20e3.png
20e3.png
20e3.png
20e3.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\00ae.png
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
1f1e8.png
1f1e9.png
1f1ea.png
1f1eb.png
1f1ec.png
1f1ee.png
1f1f1.png
1f1f2.png
1f1f4.png
1f1f6.png
1f1f7.png
1f1f8.png
1f1f9.png
1f1fa.png
1f1fc.png
1f1fd.png
1f1ff.png
1f1e6.png
1f1e7.png
1f1e9.png
1f1ea.png
1f1eb.png
1f1ec.png
1f1ed.png
1f1ee.png
1f1ef.png
1f1f1.png
1f1f2.png
1f1f3.png
1f1f4.png
1f1f6.png
1f1f7.png
1f1f8.png
1f1f9.png
1f1fb.png
1f1fc.png
1f1fe.png
1f1ff.png
1f1e6.png
1f1e8.png
1f1e9.png
1f1eb.png
1f1ec.png
1f1ed.png
1f1ee.png
1f1f0.png
1f1f1.png
1f1f2.png
1f1f3.png
1f1f4.png
1f1f5.png
1f1f7.png
1f1fa.png
1f1fb.png
1f1fc.png
1f1fd.png
1f1fe.png
1f1ff.png
1f1ea.png
1f1ec.png
1f1ef.png
1f1f0.png
1f1f2.png
1f1f4.png
1f1ff.png
1f1e6.png
1f1e8.png
1f1ea.png
1f1ec.png
1f1ed.png
1f1f7.png
1f1f8.png
1f1f9.png
1f1fa.png
1f1ee.png
1f1ef.png
1f1f0.png
1f1f2.png
1f1f4.png
1f1f7.png
1f1e6.png
1f1e7.png
1f1e9.png
1f1ea.png
1f1eb.png
1f1ec.png
1f1ed.png
1f1ee.png
1f1f1.png
1f1f2.png
1f1f3.png
1f1f5.png
1f1f6.png
1f1f7.png
1f1f8.png
1f1f9.png
1f1fa.png
1f1fc.png
1f1fe.png
1f1f0.png
1f1f2.png
1f1f3.png
1f1f7.png
1f1f9.png
1f1fa.png
1f1e8.png
1f1e9.png
1f1ea.png
1f1f1.png
1f1f2.png
1f1f3.png
1f1f4.png
1f1f6.png
1f1f7.png
1f1f8.png
1f1f9.png
1f1ea.png
1f1f2.png
1f1f4.png
1f1f5.png
1f1ea.png
1f1ec.png
1f1ed.png
1f1ee.png
1f1f2.png
1f1f3.png
1f1f5.png
1f1f7.png
1f1fc.png
1f1fe.png
1f1ff.png
1f1e6.png
1f1e7.png
1f1e8.png
1f1ee.png
1f1f0.png
1f1f7.png
1f1f8.png
1f1f9.png
1f1fa.png
1f1fb.png
1f1fe.png
1f1e6.png
1f1e8.png
1f1e9.png
1f1ea.png
1f1eb.png
1f1ec.png
1f1ed.png
1f1f0.png
1f1f1.png
1f1f2.png
1f1f3.png
1f1f4.png
1f1f5.png
1f1f6.png
1f1f7.png
1f1f8.png
1f1f9.png
1f1fa.png
1f1fb.png
1f1fc.png
1f1fd.png
1f1fe.png
1f1ff.png
1f1e6.png
1f1e8.png
1f1ea.png
1f1eb.png
1f1ec.png
1f1ee.png
1f1f1.png
1f1f4.png
1f1f5.png
1f1f7.png
1f1fa.png
1f1ff.png
1f1f2.png
1f1e6.png
1f1ea.png
1f1eb.png
1f1ec.png
1f1ed.png
1f1f0.png
1f1f1.png
1f1f2.png
1f1f3.png
1f1f7.png
1f1f8.png
1f1f9.png
1f1fc.png
1f1fe.png
1f1e6.png
1f1ea.png
1f1f4.png
1f1f8.png
1f1fa.png
1f1fc.png
1f1e6.png
1f1e7.png
1f1e8.png
1f1e9.png
1f1ea.png
1f1ec.png
1f1ed.png
1f1ee.png
1f1ef.png
1f1f0.png
1f1f1.png
1f1f2.png
1f1f3.png
1f1f4.png
1f1f7.png
1f1f8.png
1f1f9.png
1f1fb.png
1f1fd.png
1f1fe.png
1f1ff.png
1f1e6.png
1f1e8.png
1f1e9.png
1f1eb.png
1f1ec.png
1f1ed.png
1f1ef.png
1f1f0.png
1f1f1.png
1f1f2.png
1f1f3.png
1f1f4.png
1f1f7.png
1f1f9.png
1f1fb.png
1f1fc.png
1f1ff.png
1f1e6.png
1f1ec.png
1f1f2.png
1f1f8.png
1f1fe.png
1f1ff.png
1f1e6.png
1f1e8.png
1f1ea.png
1f1ec.png
1f1ee.png
1f1f3.png
1f1fa.png
1f1eb.png
1f1f8.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\1f1fd-
1f1f0.png
1f1ea.png
1f1f9.png
1f1e6.png
1f1f2.png
1f1fc.png
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
1f5e8.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
1f468-1f466-1f466.png
1f468-1f466.png
1f468-1f467-1f466.png
1f468-1f467-1f467.png
1f468-1f467.png
1f469-1f466-1f466.png
1f469-1f467-1f466.png
1f469-1f467-1f467.png
1f469-1f467.png
2764-1f468.png
2764-1f48b-1f468.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
1f469-1f466-1f466.png
1f469-1f466.png
1f469-1f467-1f466.png
1f469-1f467-1f467.png
1f469-1f467.png
2764-1f469.png
2764-1f48b-1f469.png
g
g
g
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
g
g
g
g
g
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
g
g
g
g
g
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
g
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
g
g
g
g
g
g
g
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\23eb.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\23ec.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\23ed.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\23ee.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\23ef.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\25fb.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\25fc.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\25fe.png
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\26bd.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\26be.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\26ce.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\26cf.png
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
1f3fb.png
1f3fc.png
1f3fd.png
1f3fe.png
1f3ff.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\27bf.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\2b1b.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\emoji\2b1c.png
il_mobile_en.png
il_mobile_ja.png
il_mobile_ko.png
il_mobile_th.png
il_mobile_zh_CN.png
il_mobile_zh_TW.png
il_pc_en.png
il_pc_ja.png
il_pc_ko.png
il_pc_th.png
il_pc_zh_CN.png
il_pc_zh_TW.png
t\gift_1.png
t\gift_2.png
t\gift_3.png
t\gift_4.png
t\gift_5.png
t\gift_6.png
t\gift_7.png
t\gift_8.png
t
t
_cursor_crosshair.png
_cursor_resize.png
_history_off.png
_history_on.png
_location.png
_mdBtn01Cancel.png
_mdBtn01Save.png
_mdBtn01Send.png
_mdBtn02Edit.png
_mdCheckbox01_checked.png
_mdLYR01_arrow.png
_mdRadio01_checked.png
_mdRGT07TextLink_other.png
_mdRGT07TextLink_own.png
_mdRGT07Video_Other.png
_mdRGT07Video_Own.png
_clip.png
_clip_failed.png
_clip_failed_own.png
_clip_other.png
_clip_play.png
_clip_ready.png
_mdLFT05Error_404.png
_mdLYR03Arrow.png
_mdRGT07Loading.png
_mdRGT07Loading_voice.png
_mdRGT07Loading_voice_own.png
_mdRGT07Mic_voice.png
_mdRGT07Mic_voice_own.png
_mdRGT07Pause_voice.png
_mdRGT07Pause_voice_own.png
_mdRGT07Play_voice.png
_mdRGT07Play_voice_own.png
_mdTxtCaution01.png
_mdTxtCaution02.png
_zero_01.png
_zero_02.png
_zero_03.png
_zero_04.png
_zero_chat_room.png
_zero_note.png
_zero_welcome.png
age\111x111\01.png
age\111x111\02.png
age\111x111\03.png
age\111x111\04.png
age\111x111\05.png
age\111x111\06.png
age\111x111\07.png
age\111x111\08.png
age\111x111\09.png
age\111x111\10.png
age\111x111\11.png
age\111x111\12.png
age\111x111\13.png
age\111x111\14.png
age\111x111\15.png
age\111x111\16.png
age\111x111\17.png
age\111x111\18.png
age\111x111\19.png
age\111x111\20.png
age\111x111\21.png
age\111x111
age\111x111
age\35x35\01.png
age\35x35\02.png
age\35x35\03.png
age\35x35\04.png
age\35x35\05.png
age\35x35\06.png
age\35x35\07.png
age\35x35\08.png
age\35x35\09.png
age\35x35\10.png
age\35x35\11.png
age\35x35\12.png
age\35x35\13.png
age\35x35\14.png
age\35x35\15.png
age\35x35\16.png
age\35x35\17.png
age\35x35\18.png
age\35x35\19.png
age\35x35\20.png
age\35x35\21.png
age\35x35
age\35x35
age\46x46\01.png
age\46x46\02.png
age\46x46\03.png
age\46x46\04.png
age\46x46\05.png
age\46x46\06.png
age\46x46\07.png
age\46x46\08.png
age\46x46\09.png
age\46x46\10.png
age\46x46\11.png
age\46x46\12.png
age\46x46\13.png
age\46x46\14.png
age\46x46\15.png
age\46x46\16.png
age\46x46\17.png
age\46x46\18.png
age\46x46\19.png
age\46x46\20.png
age\46x46\21.png
age\46x46
age\46x46
age
age
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\img_error.
png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\img_line_q
r.png
mail1.png
mail2.png
qr1.png
qr2.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\line_ext_l
ogo_40.png
128x128_off.png
128x128_on.png
16x16.png
16x16_alpha_channel.png
32x32_off.png
32x32_on.png
48x48_off.png
48x48_on.png
64x64_off.png
64x64_on.png
80x80_off.png
80x80_on.png
96x96_off.png
96x96_on.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\logo\logo_
x2.png
error_File_Other.png
error_File_Own.png
error_Image_Other.png
error_Image_Own.png
Link_Other_70x70.png
Link_Own_70x70.png
lustration_01.png
lustration_02.png
lustration_03.png
lustration_04.png
ttern_01.png
ttern_02.png
ttern_03.png
oto_01.jpg
oto_02.jpg
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\skin\img_c
olor_01.png
llustration_01.png
llustration_02.png
llustration_03.png
llustration_04.png
attern_01.png
attern_02.png
attern_03.png
hoto_01.png
hoto_02.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\sprite\cap
ture.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\sprite\car
d.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\sprite\com
mon.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\sprite\MdG
HD.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\timeline_d
im.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\timeline_n
ormal.png
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\res\img\timeline_o
ver.png
.en.properties
.ja.properties
.ko.properties
.th.properties
.zh_CN.properties
.zh_TW.properties
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\src\BABUb.js
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\src\BpUKe.js
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\src\ELIDj.js
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\src\GQJGE.js
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\src\GtVUl.js
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\src\oQPr.js
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\src\PAPAh.js
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\src\sFiYn.js
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\src\tAoIE.js
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\src\yuKuE.js
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\src\zhqbH.js
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\src\ZLDRp.js
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\_locales\en\messag
es.json
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\_locales\ja\messag
es.json
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\_locales\ko\messag
es.json
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\_locales\th\messag
es.json
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\_locales\zh_CN\mes
sages.json
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\_locales\zh_TW\mes
sages.json
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\_metadata\computed
_hashes.json
Data\Default\Extensions\ophjlpahpchlmihnnnihgmmeilfjmjjc\2.1.5_0\_metadata\verified
_contents.json
Error: 0
-------------------------------------------------------
01.09.2018 21:08:51 User Shortcuts
Unknown: C:\Users\bimos\AppData\Roaming\Microsoft\Internet Explorer\Quick
Launch\User Pinned\TaskBar\DiRT 4 Executable.lnk = D:\PROGRAM FILES (X86)\DIRT
4\DIRT4.EXE
02.09.2018 06:18:08 User Shortcuts
4\DIRT4.EXE
02.09.2018 10:19:08 User Shortcuts
4\DIRT4.EXE
02.09.2018 10:19:08 Scheduled Tasks 2
02.09.2018 14:20:02 User Shortcuts
4\DIRT4.EXE
02.09.2018 14:20:02 Scheduled Tasks 2
03.09.2018 06:38:22 User Shortcuts
4\DIRT4.EXE
03.09.2018 06:38:22 Scheduled Tasks 2
Probably Malicious: C:\WINDOWS\SYSNATIVE\TASKS\SmartByte Telemetry = C:\PROGRAM
FILES\RIVET NETWORKS\SMARTBYTE\SMARTBYTETELEMETRY.EXE
Probably Malicious: SmartByte Telemetry = C:\PROGRAM FILES\RIVET
Probably Malicious: SmartByteTelemetry.exe = C:\PROGRAM FILES\RIVET
03.09.2018 10:39:13 User Shortcuts
4\DIRT4.EXE
03.09.2018 10:39:13 Scheduled Tasks 2
03.09.2018 10:39:13 Scheduled Tasks 2
03.09.2018 14:40:03 User Shortcuts
4\DIRT4.EXE
03.09.2018 14:40:03 Scheduled Tasks 2
03.09.2018 14:40:03 Scheduled Tasks 2
03.09.2018 21:24:16 User Shortcuts
4\DIRT4.EXE
03.09.2018 21:24:16 Scheduled Tasks 2
03.09.2018 21:24:16 Scheduled Tasks 2
04.09.2018 08:26:22 User Shortcuts
4\DIRT4.EXE
04.09.2018 08:26:22 Scheduled Tasks 2
04.09.2018 08:26:22 Scheduled Tasks 2
04.09.2018 12:27:21 User Shortcuts
4\DIRT4.EXE
04.09.2018 12:27:21 Scheduled Tasks 2
04.09.2018 12:27:21 Scheduled Tasks 2
04.09.2018 16:38:09 User Shortcuts
4\DIRT4.EXE
04.09.2018 16:38:09 Scheduled Tasks 2
04.09.2018 16:38:09 Scheduled Tasks 2
04.09.2018 21:40:54 User Shortcuts
4\DIRT4.EXE
04.09.2018 21:40:54 Scheduled Tasks 2
04.09.2018 21:40:54 Scheduled Tasks 2
05.09.2018 07:49:07 User Shortcuts
4\DIRT4.EXE
05.09.2018 07:49:07 Scheduled Tasks 2
05.09.2018 07:49:07 Scheduled Tasks 2
05.09.2018 12:49:32 User Shortcuts
4\DIRT4.EXE
05.09.2018 12:49:32 Scheduled Tasks 2
05.09.2018 12:49:32 Scheduled Tasks 2
05.09.2018 17:04:23 User Shortcuts
4\DIRT4.EXE
05.09.2018 17:04:23 Scheduled Tasks 2
05.09.2018 17:04:23 Scheduled Tasks 2
05.09.2018 21:05:40 User Shortcuts
4\DIRT4.EXE
05.09.2018 21:05:40 Scheduled Tasks 2
05.09.2018 21:05:40 Scheduled Tasks 2
06.09.2018 07:04:41 User Shortcuts
4\DIRT4.EXE
06.09.2018 07:04:41 Scheduled Tasks 2
06.09.2018 07:04:41 Scheduled Tasks 2
06.09.2018 11:07:06 User Shortcuts
4\DIRT4.EXE
06.09.2018 11:07:06 Scheduled Tasks 2
06.09.2018 11:07:06 Scheduled Tasks 2
06.09.2018 16:14:39 User Shortcuts
4\DIRT4.EXE
06.09.2018 16:14:39 Scheduled Tasks 2
06.09.2018 16:14:39 Scheduled Tasks 2
06.09.2018 21:18:31 User Shortcuts
4\DIRT4.EXE
06.09.2018 21:18:31 Scheduled Tasks 2
06.09.2018 21:18:31 Scheduled Tasks 2
07.09.2018 11:40:30 User Shortcuts
4\DIRT4.EXE
07.09.2018 11:40:30 Scheduled Tasks 2
07.09.2018 11:40:30 Scheduled Tasks 2
08.09.2018 08:33:17 User Shortcuts
4\DIRT4.EXE
08.09.2018 08:33:17 Scheduled Tasks 2
08.09.2018 08:33:17 Scheduled Tasks 2
08.09.2018 12:34:24 User Shortcuts
4\DIRT4.EXE
08.09.2018 12:34:24 Scheduled Tasks 2
08.09.2018 12:34:24 Scheduled Tasks 2

RR 2 Log

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

RR 2 Log

Uploaded by

Copyright:

Available Formats

Anti-malware scan started at: 15.08.

Added restore batch file to \@RestoreQuarantine

Added restore batch file to \@RestoreQuarantine

You might also like