XX \XS %bZb+` @tzres.dll,-302 @tzres.dll,-30142dzQLExplorerStartupLogC:\Users\Administrator\AppData\Local\Microsoft\Windows\Explorer\ExplorerStartupLog.etl p mEe 8 ?P\Xn30'|DQRa%%]cP\X!n30'|DQRa^j^jFcP\X[n30'|DQRawjwjkc\Xn30'|DQRaymamBc-ARC: AK: Determine if this process has write access to the state store.\X?n30'|DQRaymamJc-ARC: AK: Result hr=0 fHasWriteAccess=1 fSingleSessionEnabled=1 cOtherSessions=0 sessionType=3\Xxn30'|DQRa-L-L"a cC:\Users\Administrator\AppData\Local\Microsoft\Windows\Application Shortcuts \X_Ҽn30'|DQRa.L-LMcC:\Users\Administrator\AppData\Local\Microsoft\Windows\Application Shortcuts`þ\X׼n30'|DQRa-L-LcC:\Users\Administrator\Desktopl\XBۼn30'|DQRaSISIj"c(&IOpI \Xۼn30'|DQRa.L-L)"cC:\Users\Administrator\Desktop0ƾ\XAn30'|DQRa-L-L5cC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Xn30'|DQRa.L-LK6cC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\LibrariesǾ\Xn30'|DQRa-L-Lf;cC:\Users\Administrator\Documentsl\Xn30'|DQRaSISI^=c(&IOpI \Xsn30'|DQRa.L-LC=cC:\Users\Administrator\Documents2\X n30'|DQRa-L-LAcC:\Users\Administrator\Musicl\Xn30'|DQRaSISI Dc(&IOpI \Xn30'|DQRa.L-LkDcC:\Users\Administrator\Music4\X&n30'|DQRa-L-LHcC:\Users\Administrator\Picturesl\Xn30'|DQRaSISI8Kc(&IOpI \Xqn30'|DQRa.L-LxKcC:\Users\Administrator\Pictures0< \X n30'|DQRa-L-LJOcC:\Users\Administrator\Videosl\X$n30'|DQRaSISIRc(&IOpI \X %n30'|DQRa.L-LbwRcC:\Users\Administrator\VideosN`\X,n30'|DQRa-L-L&WcC:\Users\Administrator\Downloadsl\Xh/n30'|DQRaSISIQ6Yc(&IOpI \X/n30'|DQRa.L-LÐYcC:\Users\Administrator\Downloads0u\X ^n30'|DQRa-L-LwcC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menul\X6an30'|DQRaSISIyc(&IOpI \Xan30'|DQRa.L-L 0zcC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start MenuP~@\Xfqn30'|DQRa-L-LPlcC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programsl\Xtn30'|DQRaSISIxc(&IOpI  \Xun30'|DQRa.L-Lc؆cC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\XZn30'|DQRa-L-LqcC:\ProgramData\Microsoft\Windows\Start Menul\X#n30'|DQRaSISIkc(&IOpI  \X挽n30'|DQRa.L-LLjcC:\ProgramData\Microsoft\Windows\Start MenuP@\X8n30'|DQRa-L-La8cC:\ProgramData\Microsoft\Windows\Start Menu\Programsl\Xƽn30'|DQRaSISIFc(&IOpI  \Xoǽn30'|DQRa.L-L¾cC:\ProgramData\Microsoft\Windows\Start Menu\ProgramsP\Xֽn30'|DQRa-L-LcC:\Users\Public\Desktopl\X(ݽn30'|DQRaSISIPc(&IOpI  \Xݽn30'|DQRa.L-LpcC:\Users\Public\Desktop\XVn30'|DQRa-L-LcC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned(\Xn30'|DQRa.L-LcC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned0hXn30'|DQRa-L-LFcshell:::{4234d49b-0245-4df3-b780-3893943456e1}hX* n30'|DQRa.L-Lcshell:::{4234d49b-0245-4df3-b780-3893943456e1}Fl\Xmn30'|DQRaSISI{ tc(&IOpI  l\Xln30'|DQRaSISI(܁c(&IOpI  0 y 8?l\X n30'|DQRaSISIrc(&IOpI  l\Xnn30'|DQRaSISIac(&IOpI  l\Xin30'|DQRaSISIc(&IOpI  l\X n30'|DQRaSISIBc(&IOpI  P\XKn30'|DQRaOO3c\Xln30'|DQRaQQcSoftware\Wow6432Node\Microsoft\Active Setup\Installed Components\Xn30'|DQRaSS8:c{3af36230-a269-11d1-b5bf-0000f8051515}Administrator\X7n30'|DQRaSSc{44BBA840-CC51-11CF-AAFA-00AA00B6015C}Administrator\Xn30'|DQRaTSBc{44BBA840-CC51-11CF-AAFA-00AA00B6015C}Administrator\Xn30'|DQRaSS՞c{44BBA855-CC51-11CF-AAFA-00AA00B6015F}Administrator\X#n30'|DQRaSS]c{45ea75a0-a269-11d1-b5bf-0000f8051515}Administrator\Xn30'|DQRaSS9c{4f645220-306d-11d2-995d-00c04f98bbc9}Administrator\X)n30'|DQRaSSJc{5fd399c0-a70a-11d1-9948-00c04f98bbc9}Administrator\Xn30'|DQRaSSRc{630b1da0-b465-11d1-9948-00c04f98bbc9}Administrator\X$n30'|DQRaSSx9c{6fab99d0-bab8-11d1-994a-00c04f98bbc9}Administrator\Xn30'|DQRaSS:c{7790769C-0471-11d2-AF11-00C04FA35D02}Administrator\X n30'|DQRaSSsћc{89820200-ECBD-11cf-8B85-00AA005B4383}Administrator\Xn30'|DQRaSSn!c{89B4C1CD-B018-4511-B0A1-5476DBF70820}Administrator\Xyn30'|DQRaTSkc{89B4C1CD-B018-4511-B0A1-5476DBF70820}Administrator\Xn30'|DQRaSSҜc{9381D8F2-0288-11D0-9501-00AA00B911A5}Administrator\Xn30'|DQRaSSDc{C9E9A340-D1F1-11D0-821E-444553540600}Administrator\Xtn30'|DQRaSSdc{de5aed00-a4bf-11d1-9948-00c04f98bbc9}Administrator\Xn30'|DQRaSSc{E92B03AB-B707-11d2-9CBD-0000F87A369E}Administrator\XWn30'|DQRaSSjc{EC43E638-09F0-38CC-A585-72FCCDDF035C}Administrator\Xn30'|DQRaSSgc{89820200-ECBD-11cf-8B85-00AA005B4383}Administrator\X{n30'|DQRaSSc{3af36230-a269-11d1-b5bf-0000f8051515}Administrator\Xn30'|DQRaSSc{44BBA840-CC51-11CF-AAFA-00AA00B6015C}Administrator\X n30'|DQRaTSkc{44BBA840-CC51-11CF-AAFA-00AA00B6015C}Administrator\X^n30'|DQRaSSc{44BBA855-CC51-11CF-AAFA-00AA00B6015F}Administrator\Xn30'|DQRaSSxc{45ea75a0-a269-11d1-b5bf-0000f8051515}Administrator\Xmn30'|DQRaSSTNc{4f645220-306d-11d2-995d-00c04f98bbc9}Administrator\X̳n30'|DQRaSSc{5fd399c0-a70a-11d1-9948-00c04f98bbc9}Administrator\X-n30'|DQRaSSdc{630b1da0-b465-11d1-9948-00c04f98bbc9}Administrator\Xn30'|DQRaSS c{6fab99d0-bab8-11d1-994a-00c04f98bbc9}Administrator\Xn30'|DQRaSSlGc{7790769C-0471-11d2-AF11-00C04FA35D02}Administrator\XMn30'|DQRaSS[c{89B4C1CD-B018-4511-B0A1-5476DBF70820}Administrator\Xn30'|DQRa%% [dC:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install\Xén30'|DQRa-L-L4!dC:\Windows\SysWOW64\Rundll32.exeP\XGn30'|DQRacIcIfdPX{n30'|DQRajjE0dPXn30'|DQRakjj4dPX'n30'|DQRajj>dPX*n30'|DQRakj@dPX)jn30'|DQRajjVjdPXn30'|DQRakjۂdPX>n30'|DQRajj!sdPXn30'|DQRakjQdPXn30'|DQRarrʼdPXn30'|DQRasrq@dPXn30'|DQRarrՉdPX:n30'|DQRasr־dPXn30'|DQRarrfdPXn30'|DQRasr]d  "W 8 ?P\Xn30'|DQRadIcIdPXTn30'|DQRaxxdPXn30'|DQRayxådP\Xn30'|DQRallkdP\Xn30'|DQRamldPXn30'|DQRaxxnbdPXY n30'|DQRayx9dP\X n30'|DQRarr~dP\X4 n30'|DQRasrnd~\X9Fn30'|DQRa-L-LZqdC:\Users\Administratorm\XOGn30'|DQRa.L-L:$dC:\Users\Administrator`0\XGn30'|DQRa.L-L2dC:\Windows\SysWOW64\Rundll32.exe @@@ati\XbLn30'|DQRaL2dC:\Windows\SysWOW64\rundll32.exe:\U\Xn30'|DQRa޹|,dC:\Windows\SysWOW64\rundll32.exepI\Xn30'|DQRa,|,dC:\Windows\SysWOW64\rundll32.exeskt\X=?n30'|DQRa%%/d(&IOpIM Rundll32.exe00000000b\Xnon30'|DQRa%% edXC:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install\Xqon30'|DQRaTSmed{89B4C1CD-B018-4511-B0A1-5476DBF70820}Administrator\Xiron30'|DQRaSSCed{9381D8F2-0288-11D0-9501-00AA00B911A5}Administrator:\U\X_son30'|DQRaSSed{C9E9A340-D1F1-11D0-821E-444553540600}Administratorers\Xson30'|DQRaSS0ed{de5aed00-a4bf-11d1-9948-00c04f98bbc9}Administrator30'|D\X@ton30'|DQRaSS|wed{E92B03AB-B707-11d2-9CBD-0000F87A369E}Administrator-L\Xton30'|DQRaSSed{EC43E638-09F0-38CC-A585-72FCCDDF035C}AdministratorpIP\X`uon30'|DQRaUU3edP\Xvon30'|DQRaVUed\Xon30'|DQRaRQedSoftware\Wow6432Node\Microsoft\Active Setup\Installed ComponentsQRa\Xon30'|DQRaQQhedSoftware\Microsoft\Active Setup\Installed Componentsrat\Xܓon30'|DQRaSS-'ed{2C7339CF-2B09-4501-B3F3-F3508C9228ED}Administratorwnl\XDpn30'|DQRaTSed{2C7339CF-2B09-4501-B3F3-F3508C9228ED}AdministratorYc\XEpn30'|DQRaSS3(ed{3af36230-a269-11d1-b5bf-0000f8051515}Administrator\XEpn30'|DQRaSS.ed{44BBA840-CC51-11CF-AAFA-00AA00B6015C}AdministratorSI\XGpn30'|DQRaTSjwed{44BBA840-CC51-11CF-AAFA-00AA00B6015C}Administratorr\A\X$Gpn30'|DQRaSSڋed{44BBA855-CC51-11CF-AAFA-00AA00B6015F}Administrator\XGpn30'|DQRaSShed{45ea75a0-a269-11d1-b5bf-0000f8051515}Administrator\XXHpn30'|DQRaSSVed{4f645220-306d-11d2-995d-00c04f98bbc9}AdministratorAdm\XHpn30'|DQRaSS)ed{5fd399c0-a70a-11d1-9948-00c04f98bbc9}Administrator\X?Ipn30'|DQRaSSed{630b1da0-b465-11d1-9948-00c04f98bbc9}AdministratorSI\XIpn30'|DQRaSS9ed{6fab99d0-bab8-11d1-994a-00c04f98bbc9}Administratoroft\X$Jpn30'|DQRaSSed{7790769C-0471-11d2-AF11-00C04FA35D02}Administratorcro\XJpn30'|DQRaSS"ƞed{78E345F7-E976-3595-9C30-2458D6A8EC32}Administrator\XJpn30'|DQRaSSed{89820200-ECBD-11cf-8B85-00AA005B4340}Administrator\Xpn30'|DQRaTSed{89820200-ECBD-11cf-8B85-00AA005B4340}AdministratorQRa\Xpn30'|DQRaSSed{89820200-ECBD-11cf-8B85-00AA005B4383}Administratoresk\X-rqn30'|DQRaTSl\`fd{89820200-ECBD-11cf-8B85-00AA005B4383}Administratorami\Xcrqn30'|DQRaSS{`fd{89B4C1CD-B018-4511-B0A1-5476DBF70820}Administrator\Xsqn30'|DQRaTS6afd{89B4C1CD-B018-4511-B0A1-5476DBF70820}Administrator0\Xsqn30'|DQRaSSIafd{9381D8F2-0288-11D0-9501-00AA00B911A5}Administrator56e\Xtqn30'|DQRaSSafd{A509B1A7-37EF-4b3f-8CFC-4F3A74704073}AdministratorF\X tn30'|DQRaTShd{A509B1A7-37EF-4b3f-8CFC-4F3A74704073}Administrator  YM 8?\XItn30'|DQRaSShd{A509B1A8-37EF-4b3f-8CFC-4F3A74704073}Administrator\Xtn30'|DQRaTS<hd{A509B1A8-37EF-4b3f-8CFC-4F3A74704073}AdministratorSI\Xtn30'|DQRaSS+]hd{C9E9A340-D1F1-11D0-821E-444553540600}AdministratorQ\Xjtn30'|DQRaSSmhd{de5aed00-a4bf-11d1-9948-00c04f98bbc9}Administrator\Xtn30'|DQRaSShd{E92B03AB-B707-11d2-9CBD-0000F87A369E}Administrator\XVtn30'|DQRaSSXhd{89820200-ECBD-11cf-8B85-00AA005B4383}Administrator\X tn30'|DQRa%% %!hdC:\Windows\System32\ie4uinit.exe -UserConfig\X!tn30'|DQRa-L-L"hdC:\Windows\System32\ie4uinit.exe}A\Xt3tn30'|DQRa.L-L(.hdC:\Windows\System32\ie4uinit.exe#@@151\Xtn30'|DQRanCohdC:\Windows\System32\ie4uinit.exed-1\X tn30'|DQRahdC:\Windows\System32\ie4uinit.exe\X$tn30'|DQRaphdC:\Windows\System32\ie4uinit.exe30'|D\X[un30'|DQRa%%id(&IOpIM ie4uinit.exe00000000\Xn30'|DQRa%% =+eC:\Windows\System32\ie4uinit.exe -UserConfig\X㘞n30'|DQRaTS +e{89820200-ECBD-11cf-8B85-00AA005B4383}Administratorc\Xnn30'|DQRaSSc+e{2C7339CF-2B09-4501-B3F3-F3508C9228ED}AdministratorcP\Xۤn30'|DQRavvV/eP\Xܤn30'|DQRawvcV/eP\X-}n30'|DQRavv90eP\X~n30'|DQRawv0eP\Xn30'|DQRavvd0eP\X"n30'|DQRawvƻ0el\Xn30'|DQRaSISI0e(&IOpI  l\Xn30'|DQRaSISI90e(&IOpI  l\Xn30'|DQRaSISI0e(&IOpI  -1\X*ߨn30'|DQRaTS9AI2e{2C7339CF-2B09-4501-B3F3-F3508C9228ED}Administrator7-1\Xߨn30'|DQRaSSI2e{3af36230-a269-11d1-b5bf-0000f8051515}Administrator0-3\X.n30'|DQRaSS I2e{44BBA840-CC51-11CF-AAFA-00AA00B6015C}AdministratorD-1\Xsn30'|DQRaTS^M2e{44BBA840-CC51-11CF-AAFA-00AA00B6015C}Administrator9-1\Xn30'|DQRaSSM2e{44BBA855-CC51-11CF-AAFA-00AA00B6015F}Administrator1-1\X2n30'|DQRaSSM2e{45ea75a0-a269-11d1-b5bf-0000f8051515}Administrator1-1\Xn30'|DQRaSSN2e{4f645220-306d-11d2-995d-00c04f98bbc9}Administrator1-1\Xn30'|DQRaSS]N2e{5fd399c0-a70a-11d1-9948-00c04f98bbc9}Administrator9-1\Xcn30'|DQRaSSN2e{630b1da0-b465-11d1-9948-00c04f98bbc9}Administratord-1\Xn30'|DQRaSS N2e{6fab99d0-bab8-11d1-994a-00c04f98bbc9}Administratora-1\X-n30'|DQRaSS#O2e{7790769C-0471-11d2-AF11-00C04FA35D02}Administrator5-1\Xn30'|DQRaSS^O2e{78E345F7-E976-3595-9C30-2458D6A8EC32}Administrator8-1\Xn30'|DQRaSSٗO2e{89820200-ECBD-11cf-8B85-00AA005B4340}Administrator1-1l\Xԛn30'|DQRaSISI2e(&IOpI  '|Dl\Xn30'|DQRaSISI2e(&IOpI  BFl\Xڲn30'|DQRaSISI2e(&IOpI  dl\Xn30'|DQRaSISI2e(&IOpI  sWl\Xsn30'|DQRaSISI+t2e(&IOpI  l\XKĩn30'|DQRaSISIF2e(&IOpI  Xl\Xn30'|DQRaSISI3e(&IOpI  jl\XP n30'|DQRaSISIx 3e(&IOpI  l\Xn30'|DQRaSISID3e(&IOpI  '|Dl\Xn30'|DQRaSISI3e(&IOpI  dl\Xbn30'|DQRaSISI3e(&IOpI  Xl\X n30'|DQRaSISI^3e(&IOpI  jl\XPn30'|DQRaSISI-B;3e(&IOpI  l\X6an30'|DQRaSISIF3e(&IOpI  '|Dl\Xgn30'|DQRaSISII3e(&IOpI  dl\Xln30'|DQRaSISI`M3e(&IOpI  X  Qt 8 ?l\XBn30'|DQRaSISIq3e(&IOpI '|Dl\X8n30'|DQRaSISI`|3e(&IOpI dl\X幪n30'|DQRaSISI3e(&IOpI Xl\Xn30'|DQRaSISIу3e(&IOpI xl\X{n30'|DQRaSISIa3e(&IOpI l\X" n30'|DQRaSISI'I3e(&IOpI '|Dl\Xn30'|DQRaSISI 3e(&IOpI dl\X:n30'|DQRaSISI23e(&IOpI -Ll\X n30'|DQRaSISI3e(&IOpI l\X"n30'|DQRaSISI3e(&IOpI WOl\X^bn30'|DQRaSISIf3e(&IOpI Ral\Xtn30'|DQRaSISIb3e(&IOpI \Ul\Xzn30'|DQRaSISI73e(&IOpI WOl\Xn30'|DQRaSISI4e(&IOpI l\Xtn30'|DQRaSISI6_4e(&IOpI '|Dl\XՊn30'|DQRaSISIq4e(&IOpI l\Xn30'|DQRaSISIO4e(&IOpI Xl\X篫n30'|DQRaSISI+!4e(&IOpI Rul\Xn30'|DQRaSISI$4e(&IOpI l\X3n30'|DQRaSISI(4e(&IOpI 1-l\Xn30'|DQRaSISIL,4e(&IOpI Ral\Xƫn30'|DQRaSISIk/4e(&IOpI 1Al\X٫n30'|DQRaSISI<4e(&IOpI l\XCn30'|DQRaSISI+YI4e(&IOpI orl\Xn30'|DQRaSISI3M4e(&IOpI a4l\Xn30'|DQRaSISIR4e(&IOpI l\Xn30'|DQRaSISIV4e(&IOpI 00l\X n30'|DQRaSISI͆[4e(&IOpI l\Xdn30'|DQRaSISI96e(&IOpI inl\Xn30'|DQRaSISI1G6e(&IOpI l\X0n30'|DQRaSISIGK6e(&IOpI Ral\Xn30'|DQRaSISI3O6e(&IOpI ivl\Xt n30'|DQRaSISIR6e(&IOpI Ql\Xbn30'|DQRaSISIV6e(&IOpI le\Xsn30'|DQRa-L-L56eC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Documents.library-msl\XUn30'|DQRaSISI6e(&IOpI C9l\Xn30'|DQRaSISIЩ6e(&IOpI d \Xn30'|DQRa.L-L6eC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Documents.library-msPPl\X$n30'|DQRaSISI6e(&IOpI l\XQn30'|DQRaSISII6e(&IOpI \A\X>}n30'|DQRa-L-LF7eC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Documents.library-msl\Xn30'|DQRaSISIyJ7e(&IOpI trl\Xn30'|DQRaSISIR7e(&IOpI 22l\Xkn30'|DQRaSISI(X7e(&IOpI X \XMn30'|DQRa.L-L{e\7eC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Documents.library-msX\X)n30'|DQRa-L-L7eknownfolder:{FDD39AD0-238F-46AF-ADB4-6C85480369C7}a\Xf*n30'|DQRa-L-LTs7eC:\Users\Administrator\Documentsedl\X38n30'|DQRaSISIр7e(&IOpI tr\X9n30'|DQRa.L-Lz7eC:\Users\Administrator\Documents!]min\X:n30'|DQRa.L-L{7eknownfolder:{FDD39AD0-238F-46AF-ADB4-6C85480369C7}0U\\X<n30'|DQRa/L/LV7eN20\X<n30'|DQRa0L/Lw7eNC:\Users\Administrator\Desktop\\X;=n30'|DQRa/L/L7eNA\X[=n30'|DQRa0L/L7eNC:\Users\Administrator\Desktop5\Xhn30'|DQRa-L-LF7eC:\Users\Administrator\Documents89B\Xjn30'|DQRa.L-L`7eC:\Users\Administrator\Documentsp&p]\X̱n30'|DQRa-L-LY!8e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\Documents1\X[αn30'|DQRa.L-L-"8e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\DocumentspFT  t 8?\Xӱn30'|DQRa-L-L,J&8e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\DocumentsS\X+ֱn30'|DQRa.L-L'8e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\DocumentsA\E\Xֱn30'|DQRa-L-L#T(8eshell:::{20D04FE0-3AEA-1069-A2D8-08002B30309D}\::{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0} \Xn30'|DQRa.L-L=<28eshell:::{20D04FE0-3AEA-1069-A2D8-08002B30309D}\::{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}PZ\\Xn30'|DQRa-L-Ll38eC:\Users\Administrator\Documents \X&n30'|DQRa.L-L@58eC:\Users\Administrator\Documents}\"hd\Xn30'|DQRa-L-L88e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\Documents#\Xn30'|DQRa.L-L :8e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\Documents@N\W\Xn30'|DQRa-L-L&=8e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\Documents\X8n30'|DQRa.L-L|9>8e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\Documents0@\ \XFn30'|DQRa-L-L1B8e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\Documents-\Xn30'|DQRa.L-L\KC8e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\DocumentsRUl\X(n30'|DQRaSISIU8e(&IOpI Ral\X[1n30'|DQRaSISIuc8e(&IOpI l\X^7n30'|DQRaSISIAg8e(&IOpI l\X:=n30'|DQRaSISI(ik8e(&IOpI l\XBn30'|DQRaSISI>n8e(&IOpI &Il\X'Hn30'|DQRaSISIr8e(&IOpI &Il\X]n30'|DQRaSISI8e(&IOpI &Il\Xmn30'|DQRaSISI48e(&IOpI C7l\Xsn30'|DQRaSISI68e(&IOpI l\Xyn30'|DQRaSISI8e(&IOpI 1-\X}zn30'|DQRa-L-LԂ8eC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recentl\Xn30'|DQRaSISI;8e(&IOpI l\Xyn30'|DQRaSISI|8e(&IOpI inl\Xәn30'|DQRaSISI 8e(&IOpI 4B\Xn30'|DQRa.L-L48eC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent}pWl\Xn30'|DQRaSISII8e(&IOpI l\Xn30'|DQRaSISI8e(&IOpI inl\Xn30'|DQRaSISIUL8e(&IOpI fdl\Xn30'|DQRaSISIw8e(&IOpI l\Xn30'|DQRaSISIL8e(&IOpI 1-l\X2n30'|DQRaSISI<) 9e(&IOpI Ral\XCn30'|DQRaSISI 89e(&IOpI bcl\XJn30'|DQRaSISI'9e(&IOpI l\X4Pn30'|DQRaSISIt9e(&IOpI or\X*n30'|DQRa-L-LV:eC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Pictures.library-msl\Xn30'|DQRaSISI:e(&IOpI inl\X!n30'|DQRaSISI,:e(&IOpI &Il\Xn30'|DQRaSISIӨ:e(&IOpI &I\Xn30'|DQRa.L-Lkv:eC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Pictures.library-msTal\Xn30'|DQRaSISI:e(&IOpI Ra\Xn30'|DQRa-L-LT:eC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Pictures.library-msl\Xn30'|DQRaSISI:e(&IOpI l\Xn30'|DQRaSISIJ:e(&IOpI l\XJn30'|DQRaSISI9:e(&IOpI \Xn30'|DQRa.L-L.:eC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Pictures.library-mspW\Xn30'|DQRa-L-Lib:eknownfolder:{33E28130-4E1E-4676-835A-98395C3BC3BB}I\Xun30'|DQRa-L-L:eC:\Users\Administrator\Pictures  8 8 ?l\Xs+n30'|DQRaSISI@:e(&IOpI '|D\X,n30'|DQRa.L-L<:eC:\Users\Administrator\PicturesСQ\XM-n30'|DQRa.L-Ls:eknownfolder:{33E28130-4E1E-4676-835A-98395C3BC3BB}PP\\X.n30'|DQRa/L/LEl;eORa\X.n30'|DQRa0L/L;eOC:\Users\Administrator\DesktopI\\Xu/n30'|DQRa/L/Li;eO\X/n30'|DQRa0L/L;eOC:\Users\Administrator\Desktop\X!1n30'|DQRa-L-L;eC:\Users\Administrator\Pictures\X4n30'|DQRa.L-L$;eC:\Users\Administrator\PicturesA0X\XJn30'|DQRa-L-LF;e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\Pictures \XLn30'|DQRa.L-L;e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\PicturesDW\XQn30'|DQRa-L-LY;e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\Pictures \XSn30'|DQRa.L-L;e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\PicturesLT\X+Tn30'|DQRa-L-L;eshell:::{20D04FE0-3AEA-1069-A2D8-08002B30309D}\::{3ADD1653-EB32-4CB0-BBD7-DFA0ABB5ACCA} \Xbn30'|DQRa.L-LL";eshell:::{20D04FE0-3AEA-1069-A2D8-08002B30309D}\::{3ADD1653-EB32-4CB0-BBD7-DFA0ABB5ACCA}@`U\Xvdn30'|DQRa-L-Lۑ#;eC:\Users\Administrator\Pictures\X;fn30'|DQRa.L-L5$;eC:\Users\Administrator\Pictures@C[\Xkn30'|DQRa-L-L}c(;e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\Pictures \Xmn30'|DQRa.L-LÈ);e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\PicturesHpQRa\X`rn30'|DQRa-L-Lt,;e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\Picturesro \Xtn30'|DQRa.L-L<-;e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\Pictures=[\Xyn30'|DQRa-L-L1;e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\Picturesib \X{n30'|DQRa.L-Le2;e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\PicturesDQl\Xn30'|DQRaSISIy;e(&IOpI l\Xn30'|DQRaSISI\Ą;e(&IOpI inl\Xn30'|DQRaSISIX;e(&IOpI Ral\Xqn30'|DQRaSISIyT;e(&IOpI Ral\X n30'|DQRaSISI;e(&IOpI Ral\X]n30'|DQRaSISIz;e(&IOpI Ral\Xn30'|DQRaSISIpWr\\XMPn30'|DQRa/L/L9 =eNe\X{Pn30'|DQRa0L/LU =eNC:\Users\Administrator\Desktopc\\XPn30'|DQRa/L/L =eN-L\XQn30'|DQRa0L/La =eNC:\Users\Administrator\Desktopr\XRn30'|DQRa-L-L=eC:\Users\Administrator\Videose0\XTn30'|DQRa.L-L!0=eC:\Users\Administrator\Videos![X\Xin30'|DQRa-L-L=e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\Videos\Xkn30'|DQRa.L-L2=e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\Videos!\\Xpn30'|DQRa-L-L ^"=e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\Videos\XJrn30'|DQRa.L-L|#=e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\VideosP.T\Xrn30'|DQRa-L-L#=eshell:::{20D04FE0-3AEA-1069-A2D8-08002B30309D}\::{A0953C92-50DC-43BF-BE83-3742FED03C9C} \Xn30'|DQRa.L-L,=eshell:::{20D04FE0-3AEA-1069-A2D8-08002B30309D}\::{A0953C92-50DC-43BF-BE83-3742FED03C9C}ZT\Xn30'|DQRa-L-L".=eC:\Users\Administrator\Videos'|D\XMn30'|DQRa.L-L-G/=eC:\Users\Administrator\VideosP.Ut\X$n30'|DQRa-L-L3=e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\Videos\X苹n30'|DQRa.L-LA4=e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\Videos!\\Xn30'|DQRa-L-L$Z7=e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\Videos\XHn30'|DQRa.L-Ln8=e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\VideosP.T\X.n30'|DQRa-L-LL<=e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\Videos\Xיn30'|DQRa.L-L`==e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\Videos ]\X]n30'|DQRa-L-LM=eC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Music.library-ms\X-n30'|DQRa.L-L=eC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Music.library-msPlPPl\X?n30'|DQRaSISI=e(&IOpI rs\Xcn30'|DQRa-L-L.=eC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Music.library-msl\X1in30'|DQRaSISI'=e(&IOpI &Il\Xun30'|DQRaSISIS=e(&IOpI &Il\X~n30'|DQRaSISI=e(&IOpI \U\X.n30'|DQRa.L-L}+=eC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Music.library-msT\Xn30'|DQRa-L-Le=eknownfolder:{4BD8D571-6D19-48D3-BE97-422220080E43}\Xn30'|DQRa-L-L${=eC:\Users\Administrator\Music 80 b 8 8 ?l\Xn30'|DQRaSISI/=e(&IOpI \Xn30'|DQRa.L-L=eC:\Users\Administrator\Music`8pW\Xtn30'|DQRa.L-LR=eknownfolder:{4BD8D571-6D19-48D3-BE97-422220080E43}0@T\\Xءn30'|DQRa/L/L<=eP\Xn30'|DQRa0L/L`X=ePC:\Users\Administrator\Desktop\\Xrn30'|DQRa/L/L=eP\Xn30'|DQRa0L/L˳=ePC:\Users\Administrator\Desktop\Xn30'|DQRa-L-L^=eC:\Users\Administrator\Music\Xܥn30'|DQRa.L-LS=eC:\Users\Administrator\MusicT\XNn30'|DQRa-L-LC=e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\Music\X2n30'|DQRa.L-LF=e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\MusicT\X=n30'|DQRa-L-La=e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\Music\Xºn30'|DQRa.L-L=e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\MusicU\Xún30'|DQRa-L-LU>eshell:::{20D04FE0-3AEA-1069-A2D8-08002B30309D}\::{1CF1260C-4DD0-4EBB-811F-33C572699FDE} \X-Ѻn30'|DQRa.L-Lx? >eshell:::{20D04FE0-3AEA-1069-A2D8-08002B30309D}\::{1CF1260C-4DD0-4EBB-811F-33C572699FDE}@[Q\X$Ӻn30'|DQRa-L-L >eC:\Users\Administrator\Music\XHպn30'|DQRa.L-L >eC:\Users\Administrator\Music]\X ۺn30'|DQRa-L-L߿>e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\Music\Xܺn30'|DQRa.L-L>e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\MusicT\Xn30'|DQRa-L-LI>e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\Music\Xgn30'|DQRa.L-LLD>e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\Musicp]\Xvn30'|DQRa-L-L #>e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\Music\X*n30'|DQRa.L-L(?>e\\?\Volume{071e00f0-1402-11e4-80b8-806e6f6e6963}\Users\Administrator\MusicP0[l\Xln30'|DQRaSISI,>e(&IOpI l\Xn30'|DQRaSISI؉7>e(&IOpI l\Xn30'|DQRaSISI5;>e(&IOpI l\X#n30'|DQRaSISIa?>e(&IOpI l\X`n30'|DQRaSISIg>e(&IOpI l\XBqn30'|DQRaSISIxr>e(&IOpI l\X"wn30'|DQRaSISIu>e(&IOpI l\X|n30'|DQRaSISI'y>e(&IOpI \Xn30'|DQRa-L-LNr@eC:\Users\Administrator\Searches\Indexed Locations.search-msl\Xn30'|DQRaSISIiy@e(&IOpI l\X]n30'|DQRaSISI@e(&IOpI \Xn30'|DQRa.L-L^^@eC:\Users\Administrator\Searches\Indexed Locations.search-ms mTl\Xn30'|DQRaSISIh}@e(&IOpI \X"ھn30'|DQRa-L-L@eC:\Users\Administrator\Searches\Everywhere.search-msl\Xn30'|DQRaSISI,˱@e(&IOpI l\Xkn30'|DQRaSISI@e(&IOpI \X{n30'|DQRa.L-Lv@eC:\Users\Administrator\Searches\Everywhere.search-ms}0Xl\X<n30'|DQRaSISI@e(&IOpI \Xn30'|DQRa-L-L@eshell:::{323CA680-C24D-4099-B94D-446DD2D7249E}\Xn30'|DQRa-L-LO@eC:\Users\Administrator\Desktopl\Xn30'|DQRaSISI@e(&IOpI \X<n30'|DQRa.L-LC@eC:\Users\Administrator\DesktopT\Xn30'|DQRa-L-L @eC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries ` `  8 ?\X;n30'|DQRa.L-L=@eC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries}Qu\Xn30'|DQRa-L-L@eC:\Users\Administrator\Documents33El\Xn30'|DQRaSISI3@e(&IOpI \Xn30'|DQRa.L-Ĺ@eC:\Users\Administrator\DocumentsT\XVn30'|DQRa-L-Lh@eC:\Users\Administrator\Musicl\Xn30'|DQRaSISI<@e(&IOpI \X n30'|DQRa.L-L@eC:\Users\Administrator\Music p]nis\X.!n30'|DQRa-L-Lu@eC:\Users\Administrator\Picturesl\X$n30'|DQRaSISIgi@e(&IOpI -L\Xk%n30'|DQRa.L-L@eC:\Users\Administrator\Pictures pQ\X&n30'|DQRa-L-L@@eC:\Users\Administrator\Videos02l\X)n30'|DQRaSISI@e(&IOpI \XA*n30'|DQRa.L-Lx@eC:\Users\Administrator\Videos]80\X*n30'|DQRa-L-Ll@eC:\Users\Administrator\Downloadsl\X2.n30'|DQRaSISIY@e(&IOpI e6\X.n30'|DQRa.L-Ll@eC:\Users\Administrator\DownloadsP]~\XH0n30'|DQRa-L-L@eC:\Users\Administrator-\X1n30'|DQRa.L-L!@eC:\Users\AdministratorWE\XY1n30'|DQRa.L-L@eshell:::{323CA680-C24D-4099-B94D-446DD2D7249E}`Q|Dl\X;n30'|DQRaSISI@e(&IOpI sl\XLn30'|DQRaSISI?w@e(&IOpI isl\XQn30'|DQRaSISI[@e(&IOpI -Ll\XWn30'|DQRaSISI@e(&IOpI e6\Xphn30'|DQRa-L-L= AeC:\Users\Administrator\Links);el\Xqn30'|DQRaSISIAe(&IOpI 3}l\XOzn30'|DQRaSISItAe(&IOpI X\X{n30'|DQRa.L-LhAeC:\Users\Administrator\LinksRTs\AP\Xn30'|DQRavv;AeP\Xn30'|DQRawvn30'|DQRaSISIM/5De(&IOpI '|D\\X@n30'|DQRa/L/L#j6De@NX\XI@n30'|DQRa0L/L6De@NC:\Users\Administrator\Desktop\\X@n30'|DQRa/L/Lֳ6De@NSIp\Xmn30'|DQRa0L/LSDe@NDesktopP\Xmn30'|DQRavv2TDeP\Xnn30'|DQRawvTDeP\XRqn30'|DQRavvVDeP\X:rn30'|DQRawv.>WDe\\X1wn30'|DQRa/L/LZDeOXp\X:xn30'|DQRa0L/L{,[DeODesktop\\XIyn30'|DQRa/L/L-[DeO\Xvyn30'|DQRa0L/L[DeOC:\Users\Administrator\DesktopSI\\Xn30'|DQRa/L/L}uDe`M'|D\Xn30'|DQRa0L/LuDe`MC:\Users\Administrator\Desktop\Xn30'|DQRa-L-LwDeC:\Users\Administrator\Desktopl\Xan30'|DQRaSISI|De(&IOpI isl\Xn30'|DQRaSISILDe(&IOpI eo\Xwn30'|DQRa.L-LHDeC:\Users\Administrator\Desktop0X|D\Xļn30'|DQRa-L-LDeC:\Users\Administrator\Links\Desktop.lnk&I  $  8@?8?\Xn30'|DQRa.L-LDeC:\Users\Administrator\Links\Desktop.lnkp]Lib\Xon30'|DQRa-L-LF̉DeC:\Users\Administrator\Links\Desktop.lnkl\Xn30'|DQRaSISIۑDe(&IOpI \Xn30'|DQRa.L-L/DeC:\Users\Administrator\Links\Desktop.lnkipWl\Xn30'|DQRaSISIϠDe(&IOpI \X[n30'|DQRa-L-LDeshell:::{20D04FE0-3AEA-1069-A2D8-08002B30309D}\::{374DE290-123F-4565-9164-39C4925E467B} \Xnn30'|DQRa.L-L5Deshell:::{20D04FE0-3AEA-1069-A2D8-08002B30309D}\::{374DE290-123F-4565-9164-39C4925E467B} bX\Xn30'|DQRa-L-L7DeC:\Users\Administrator\Downloadsl\Xn30'|DQRaSISI<(De(&IOpI eol\Xn30'|DQRaSISI.De(&IOpI \X6n30'|DQRa.L-L!ֶDeC:\Users\Administrator\Downloads0pQP\X+n30'|DQRavv nDeP\X; n30'|DQRawvDeP\X n30'|DQRavvDeP\X n30'|DQRawvy{De\XLn30'|DQRa-L-LiFDeC:\Users\Administrator\Downloadspc\XOn30'|DQRa.L-L@DeC:\Users\Administrator\DownloadsT\Xdn30'|DQRa-L-L&DeC:\Users\Administrator\Downloads\X:gn30'|DQRa.L-LЬDeC:\Users\Administrator\Downloads`p]rat\XPn30'|DQRa-L-LL3LEeC:\Users\Administrator\Links\Downloads.lnk0\Xn30'|DQRa.L-LMEeC:\Users\Administrator\Links\Downloads.lnkT\Xn30'|DQRa-L-LDMEeC:\Users\Administrator\Links\Downloads.lnkl\Xwn30'|DQRaSISIVEe(&IOpI lu\Xn30'|DQRa.L-L$YEeC:\Users\Administrator\Links\Downloads.lnk op]l\X{n30'|DQRaSISIM1eEe(&IOpI 3}l\XZn30'|DQRaSISIHEe(&IOpI l\XFkn30'|DQRaSISIEe(&IOpI 9-\Xn30'|DQRa-L-LLڳEeC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\SendTol\X݌n30'|DQRaSISIAEe(&IOpI -5l\Xn30'|DQRaSISIBEe(&IOpI l\Xn30'|DQRaSISIwEe(&IOpI eo\XTn30'|DQRa.L-LgEeC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\SendTopi0[\Xn30'|DQRa-L-L> FeC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Documents.library-msl\X&n30'|DQRaSISI7Fe(&IOpI \A \X,n30'|DQRa.L-L4 FeC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Documents.library-msPpWP\XCIn30'|DQRavvJ3FeP\XSn30'|DQRawv9Fe\Xan30'|DQRa-L-Lna3Geshell:::{323CA680-C24D-4099-B94D-446DD2D7249E}\Xn30'|DQRa.L-LS;Geshell:::{323CA680-C24D-4099-B94D-446DD2D7249E}pW|Dl\Xn30'|DQRaSISIFGe(&IOpI 80\\X< n30'|DQRa/L/LْZGe0O \Xt n30'|DQRa0L/LֳZGe0OC:\Users\Administrator\Desktopa\Xxn30'|DQRaTSfGe{89820200-ECBD-11cf-8B85-00AA005B4340}Administrator\X-yn30'|DQRaSS)Ge{89B4C1CD-B018-4511-B0A1-5476DBF70820}Administrator\Xp}n30'|DQRa%% /GeC:\Windows\System32\Rundll32.exe C:\Windows\System32\mscories.dll,Installis\X~n30'|DQRa-L-LGeC:\Windows\System32\Rundll32.exeX\Xn30'|DQRa.L-LGeC:\Windows\System32\Rundll32.exe p]@@&I\Xtn30'|DQRaGeC:\Windows\System32\rundll32.exeX\Xn30'|DQRaXGeC:\Windows\System32\rundll32.execro\Xn30'|DQRaGeC:\Windows\System32\rundll32.exeQRa\X(n30'|DQRa%%He(&IOpIM Rundll32.exe00000000s    8 ?\Xdsn30'|DQRa%% (IelC:\Windows\System32\Rundll32.exe C:\Windows\System32\mscories.dll,Install\Xtn30'|DQRaTSmIe{89B4C1CD-B018-4511-B0A1-5476DBF70820}Administrator9-4\XEun30'|DQRaSS/Ie{9381D8F2-0288-11D0-9501-00AA00B911A5}AdministratorX\Xun30'|DQRaSSCIe{A509B1A7-37EF-4b3f-8CFC-4F3A74704073}Administrator/L\X9{n30'|DQRa%% Ie"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iesetup.dll",IEHardenAdmina\X{n30'|DQRa-L-L>gIeC:\Windows\System32\rundll32.exe-L\Xn30'|DQRa.L-L$IeC:\Windows\System32\rundll32.exe p]@@\Xn30'|DQRaIeC:\Windows\System32\rundll32.exestr\Xcn30'|DQRa9IeC:\Windows\System32\rundll32.exe402\Xzn30'|DQRaIeC:\Windows\System32\rundll32.exeX\X.n30'|DQRa%%O;Je(&IOpIM rundll32.exe00000000\XZn30'|DQRa%% 7Tet"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iesetup.dll",IEHardenAdminX\X\n30'|DQRaTS6Te{A509B1A7-37EF-4b3f-8CFC-4F3A74704073}AdministratorD0-\X>]n30'|DQRaSSGTe{A509B1A8-37EF-4b3f-8CFC-4F3A74704073}Administrator2D8\Xjn30'|DQRa%% FTe"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iesetup.dll",IEHardenUserdm\XJkn30'|DQRa-L-L-TeC:\Windows\System32\rundll32.exenis\Xzn30'|DQRa.L-L=TeC:\Windows\System32\rundll32.exe0X@@f0-\Xn30'|DQRagTeC:\Windows\System32\rundll32.exeQRa\XLn30'|DQRaD UeC:\Windows\System32\rundll32.exes\A\Xgn30'|DQRaVUeC:\Windows\System32\rundll32.exe\X2n30'|DQRa%%Ue(&IOpIM rundll32.exe00000000\\Xn30'|DQRa%% Ve|"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iesetup.dll",IEHardenUser\X٘n30'|DQRaTSAVe{A509B1A8-37EF-4b3f-8CFC-4F3A74704073}Administrator30'|D\Xn30'|DQRaSSjVe{C9E9A340-D1F1-11D0-821E-444553540600}AdministratorMus\Xn30'|DQRaSSVe{de5aed00-a4bf-11d1-9948-00c04f98bbc9}AdministratorQRa\Xn30'|DQRaSS,Ve{E92B03AB-B707-11d2-9CBD-0000F87A369E}AdministratorP\X|n30'|DQRaUUQVeP\Xn30'|DQRaVUYVe\Xn30'|DQRaRQVeSoftware\Microsoft\Active Setup\Installed ComponentsP\X3n30'|DQRaPOCVeP\Xn30'|DQRa%%"lVeP\Xn30'|DQRa%%/jmVeThX,n30'|DQRa%~Ve\ST\X-n30'|DQRa|%VeXP\X-n30'|DQRa%%VeP\X .n30'|DQRa%%VeX\Xn30'|DQRamm 0VeO\Xn30'|DQRaymamVe-ARC: RefreshCache: smrcf=0x4feP\X%n30'|DQRaJJ!WePXGn30'|DQRabbIr8WePXVn30'|DQRacbnBWeX\XmWn30'|DQRaJJBWe0\Xh^n30'|DQRa-L-L;GWeC:\Users\Administrator\AppData\Local\Microsoft\Windows\Application Shortcutsl\Xwn30'|DQRaSISIWWe(&IOpI dm \Xyn30'|DQRa.L-LV&YWeC:\Users\Administrator\AppData\Local\Microsoft\Windows\Application ShortcutsP.p]QRaP\Xn30'|DQRaJJu^WeX\X_n30'|DQRaJJ^We0\Xn30'|DQRaymam1^We-ARC: Registered root#0 for change notification: id=0\Xn30'|DQRa-L-LObWeC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menul\XXn30'|DQRaSISIqWe(&IOpI at\X"n30'|DQRa.L-LrWeC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start MenuW H   8 ?P\Xn30'|DQRaJJpxWeX\X3n30'|DQRaJJxWe0\X}n30'|DQRaymamyWe-ARC: Registered root#1 for change notification: id=1is\Xn30'|DQRa-L-L|WeC:\ProgramData\Microsoft\Windows\Start Menul\Xn30'|DQRaSISI@ We(&IOpI \Dl\Xn30'|DQRaSISIqWe(&IOpI \Xn30'|DQRa.L-LWeC:\ProgramData\Microsoft\Windows\Start MenuP0[P\Xn30'|DQRaJJy{WeX\Xn30'|DQRaJJ(ɉWe0\XZn30'|DQRaymam,We-ARC: Registered root#3 for change notification: id=2RaP\Xn30'|DQRaJJWeX\Xn30'|DQRaJJ_We0\Xn30'|DQRaymamWe-ARC: Registered root#6 for change notification: id=3is\Xn30'|DQRa-L-L+WeC:\Users\Public\Desktopl\Xn30'|DQRaSISIȘWe(&IOpI rsl\Xn30'|DQRaSISITWe(&IOpI '|D\Xn30'|DQRa.L-LwWeC:\Users\Public\DesktopP\Xn30'|DQRaJJoםWeX\X4n30'|DQRaJJ+We0\Xzn30'|DQRaymamYWe-ARC: Registered root#7 for change notification: id=4dm\Xn30'|DQRa-L-LXWeC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinnedl\Xn30'|DQRaSISIGWe(&IOpI Q(\X n30'|DQRa.L-L0WeC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User PinnedpQP\XOn30'|DQRaJJͭWeX\Xn30'|DQRaJJDWe0\X"n30'|DQRaymam5We-ARC: Registered root#8 for change notification: id=5SI\XOn30'|DQRaymamQWe-ARC: UpdateCache: smrcf=0x4fP\X_n30'|DQRawmm0\WeP\X1n30'|DQRaqmn gWel\X =n30'|DQRaSISIAWe(&IOpI el\X>Jn30'|DQRaSISIWe(&IOpI Xl\XOn30'|DQRaSISISWe(&IOpI vl\XTn30'|DQRaSISIWe(&IOpI l\X#[n30'|DQRaSISIWe(&IOpI wsl\X`n30'|DQRaSISI XeXn30'|DQRa-L-L XeC:\Users\Administrator\DesktopXn30'|DQRa.L-L"XeC:\Users\Administrator\Desktop 0|DXGn30'|DQRa-L-L#XeC:\Users\Public\DesktopXn30'|DQRa.L-LR$XeC:\Users\Public\DesktopX"n30'|DQRa-L-L$%Xeshell:::{20D04FE0-3AEA-1069-A2D8-08002B30309D}\::{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0} Xn30'|DQRa.L-LT3Xeshell:::{20D04FE0-3AEA-1069-A2D8-08002B30309D}\::{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0} mXPn30'|DQRa-L-L#/4XeC:\Users\Administrator\DocumentsXVn30'|DQRa.L-L'4XeC:\Users\Administrator\Documents PXn30'|DQRa-L-L(I6XeC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Network ShortcutsXn30'|DQRa.L-L7XeC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Network ShortcutspzpsX+n30'|DQRa-L-LN5uXeC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Printer ShortcutsX-n30'|DQRa.L-L[uvXeC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Printer ShortcutscжSIPX1n30'|DQRaN@yXePXn30'|DQRakhXePXn30'|DQRaJJXeXn30'|DQRa-L-L-XeC:\Users\Public\DesktopX)n30'|DQRa.L-LWXeC:\Users\Public\Desktop XX/n30'|DQRa JJ6Xe$  ~7 8@?8?PXn30'|DQRaJJ$XeXn30'|DQRa-L-LytXeC:\Users\Administrator\AppData\Local\Microsoft\Windows\Application Shortcutsrat Xn30'|DQRa.L-LAXeC:\Users\Administrator\AppData\Local\Microsoft\Windows\Application Shortcutsc0nisXX6n30'|DQRa JJXe$PXn30'|DQRaJJXeXn30'|DQRa-L-L[XeC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start MenuXn30'|DQRa.L-LXeC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu@ XXSn30'|DQRa JJ[.Xe$PXn30'|DQRaJJtXeX n30'|DQRa-L-L~YeC:\ProgramData\Microsoft\Windows\Start MenuX n30'|DQRa.L-L"YeC:\ProgramData\Microsoft\Windows\Start Menu@ XXn30'|DQRa JJ Ye$PXpn30'|DQRaJJK YeXn30'|DQRa-L-LYeC:\Users\Administrator\DesktopX n30'|DQRa.L-LYeC:\Users\Administrator\DesktopP0|DXX&n30'|DQRa JJm}Ye$PX&n30'|DQRaJJYeX1n30'|DQRa-L-L? YeC:\Users\Public\DesktopX2n30'|DQRa.L-Lu!YeC:\Users\Public\Desktop  0XX6n30'|DQRa JJ?C$Ye$PXh7n30'|DQRaJJԉ$YeXHn30'|DQRa-L-L/YeC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned(XJn30'|DQRa.L-L 0YeC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned XXQn30'|DQRa JJ5Ye$PXTn30'|DQRavv7YePXUn30'|DQRawv\8YePXIWn30'|DQRavvhk9YePXXn30'|DQRawv9YePXYn30'|DQRavv;YePXZn30'|DQRawv;YePX\n30'|DQRavvނYePX&_n30'|DQRawv/>YePX`n30'|DQRavvy~?YePXkan30'|DQRawv) @YePX cn30'|DQRavvAYePXcn30'|DQRawv?AYePX5en30'|DQRavvBYePXen30'|DQRawvCYePXgn30'|DQRavv4 DYePXHhn30'|DQRawvLDYePXin30'|DQRavvxEYePXkjn30'|DQRawvEYePXkn30'|DQRavvFYePXln30'|DQRawvpGYePXnn30'|DQRavvfUHYePXnn30'|DQRawvpHYe\Xtn30'|DQRamn 1ZeC:\Program Files\Internet Explorer\VisualElementsManifest.xmlNULL\X\#n30'|DQRamn fZeC:\Program Files\Internet Explorer\iexplore.VisualElementsManifest.xmlNULLx\Xn30'|DQRaZedPx\Xn30'|DQRaɶZedPP\XHn30'|DQRavvG'ZeP\Xn30'|DQRawv [eP\Xn30'|DQRavvܘ[eP\XNn30'|DQRawvt[e\Xn30'|DQRa-L-Lk[eC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs89B \X]3n30'|DQRa.L-L[eC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\ProgramsP ws\\XyTn30'|DQRa-L-Lar.[eC:\ProgramData\Microsoft\Windows\Start Menu\Programsundl\Xfn30'|DQRaSISIn:[e(&IOpI !\W\Xnhn30'|DQRa.L-Le;[eC:\ProgramData\Microsoft\Windows\Start Menu\ProgramsVundl\Xrn30'|DQRaSISI\B[e(&IOpI "\W\X xn30'|DQRamm ԽE[eInternet ExplorerMicrosoft.InternetExplorer.Defaultd\Xxn30'|DQRazmmEF[eMicrosoft.InternetExplorer.Default2.e\Xn30'|DQRa-L-L;P[eC:\Windows\system32\magnify.exe ( 0# 8 ?\X9n30'|DQRa.L-LP[eC:\Windows\system32\magnify.exe@)0\Xn30'|DQRa-L-LCQ\eC:\Windows\system32\magnify.exe\Xn30'|DQRa.L-LR\eC:\Windows\system32\magnify.exeP\X*n30'|DQRa3I3INb\eC:\Windows\system32\magnify.exe\Xn30'|DQRa4I3I\eC:\Windows\system32\magnify.exe^\X@n30'|DQRamn$_eNULL JP\XCn30'|DQRavv_eP\X@in30'|DQRawvC)_eP\Xbin30'|DQRavvf)_eP\Xin30'|DQRawvk)_e\Xzn30'|DQRamm |"5_eMagnifier{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\magnify.exe8\X){n30'|DQRazmmTz5_e{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\magnify.exe\X~n30'|DQRa-L-L7_eC:\Windows\system32\narrator.exe\Xn30'|DQRa.L-L.8_eC:\Windows\system32\narrator.exe@)&I\X n30'|DQRa-L-L{I_eC:\Windows\system32\narrator.exe0\X-n30'|DQRa.L-LrJ_eC:\Windows\system32\narrator.exe$0Sys\XEn30'|DQRa3I3IVT_eC:\Windows\system32\narrator.exe\Xn30'|DQRa4I3IW`eC:\Windows\system32\narrator.exeQRa^\Xun30'|DQRamn=aeNULL J3P\X6n30'|DQRavvɴ>aeP\Xtn30'|DQRawv>aeP\Xn30'|DQRavvs>aeP\Xn30'|DQRawv>ae\Xn30'|DQRamm 1JaeNarrator{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\narrator.exe8\XDn30'|DQRazmmJae{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\narrator.exe\XLn30'|DQRa-L-LX,MaeC:\Windows\system32\osk.exe\Xnn30'|DQRa.L-LvMaeC:\Windows\system32\osk.exe p\Xn30'|DQRa-L-L^aeC:\Windows\system32\osk.exe\Xn30'|DQRa.L-L`_aeC:\Windows\system32\osk.exe \Xn30'|DQRa3I3IuaeC:\Windows\system32\osk.exe\X׽n30'|DQRa4I3I`aeC:\Windows\system32\osk.exe^\XLn30'|DQRamnL]beNULL J4P\XSNn30'|DQRavv8^beP\XNn30'|DQRawve^^beP\XNn30'|DQRavv/j^beP\XNn30'|DQRawvz^be\X_n30'|DQRamm ibeOn-Screen Keyboard{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\osk.exe8\Xd`n30'|DQRazmm< jbe{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\osk.exeVe\Xlon30'|DQRa-L-LsbeC:\Windows\system32\notepad.exe\Xpn30'|DQRa.L-LtbeC:\Windows\system32\notepad.exep\Xn30'|DQRa-L-LPbeC:\Windows\system32\notepad.exe\Xn30'|DQRa.L-LbeC:\Windows\system32\notepad.exe\Xn30'|DQRa3I3ImbeC:\Windows\system32\notepad.exe\X2sn30'|DQRa4I3I;ceC:\Windows\system32\notepad.exe^\Xn30'|DQRamnioZceNULLP\Xn30'|DQRavv\ceP\Xn30'|DQRawvtceP\X n30'|DQRavvitceP\X:n30'|DQRawvVuce\Xs n30'|DQRamm ceNotepad{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\notepad.exe8r\A\X n30'|DQRazmmX\ce{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\notepad.exe\X0n30'|DQRa-L-LY3ceC:\Windows\system32\control.exe\X2n30'|DQRa.L-LceC:\Windows\system32\control.exe`!P\XKn30'|DQRa-L-L.ceC:\Windows\system32\control.exe\XLn30'|DQRa.L-LoceC:\Windows\system32\control.exe \XZn30'|DQRa3I3I ceC:\Windows\system32\control.exe\XGn30'|DQRa4I3ILPdeC:\Windows\system32\control.exe\Xgn30'|DQRamnVeeMicrosoft.Windows.AdministrativeTools JP\Xn30'|DQRavv eeP\Xn30'|DQRawv fe x x 8 ?P\X+n30'|DQRavvH feP\X]n30'|DQRawv| fe\Xn30'|DQRamm ffeAdministrative ToolsMicrosoft.Windows.AdministrativeTools9\Xn30'|DQRazmmimfeMicrosoft.Windows.AdministrativeTools\Xln30'|DQRa-L-LfeC:\Windows\system32\cmd.exe\Xn30'|DQRa.L-LfeC:\Windows\system32\cmd.exe @{ \X n30'|DQRa-L-Lg(feC:\Windows\system32\cmd.exe\X6n30'|DQRa.L-L()feC:\Windows\system32\cmd.exe  z \XD=n30'|DQRa3I3I@feC:\Windows\system32\cmd.exe\Xn30'|DQRa4I3It;}feC:\Windows\system32\cmd.exe^\X n30'|DQRamnp@feNULLYYYP\XU n30'|DQRavvXfeP\X n30'|DQRawv|feP\X n30'|DQRavv~feP\X n30'|DQRawvƗfe\Xn30'|DQRamm XfeCommand Prompt{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\cmd.exe8\X+n30'|DQRazmmfe{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\cmd.exe30'|D\Xun30'|DQRamn HgeMicrosoft.Windows.Computer JP\X,n30'|DQRavv3IgeP\Xjn30'|DQRawvJgeP\X|n30'|DQRavvJgeP\Xn30'|DQRawv6$Jge\Xn30'|DQRamm |UgeThis PCMicrosoft.Windows.Computer930'|D\XZn30'|DQRazmmUgeMicrosoft.Windows.ComputerWe\Xn30'|DQRamngeMicrosoft.Windows.ControlPanel Jr\QP\Xn30'|DQRavv/geP\Xn30'|DQRawvgeP\Xn30'|DQRavv>geP\Xn30'|DQRawvge\Xn30'|DQRamm mgeControl PanelMicrosoft.Windows.ControlPanel9\Xn30'|DQRazmmgeMicrosoft.Windows.ControlPanelWe\Xn30'|DQRamnV}heMicrosoft.Windows.ExplorerSIP\Xrn30'|DQRavv&t~heP\Xn30'|DQRawvȘ~heP\Xn30'|DQRavv~heP\Xةn30'|DQRawv~he\Xn30'|DQRamm FheFile ExplorerMicrosoft.Windows.Explorer9I\X|n30'|DQRazmm6heMicrosoft.Windows.Explorer\X.n30'|DQRamnI}ieMicrosoft.Windows.Helppane30'|DP\Xa0n30'|DQRavvm~ieP\X0n30'|DQRawvK~ieP\X0n30'|DQRavvE~ieP\X0n30'|DQRawvd~ie\XAn30'|DQRamm ډieHelp and SupportMicrosoft.Windows.Helppane9Ra\XOBn30'|DQRazmm,(ieMicrosoft.Windows.Helppane\X?n30'|DQRamnH0jeMicrosoft.Windows.Shell.RunDialog JP\XAn30'|DQRavvf1jeP\XAn30'|DQRawv1jeP\X Bn30'|DQRavv1jeP\X"Bn30'|DQRawv1je\XFn30'|DQRamm G4jeRunMicrosoft.Windows.Shell.RunDialog9\XGn30'|DQRazmm4jeMicrosoft.Windows.Shell.RunDialogl\Xkmn30'|DQRaSISINje(&IOpI #l\Xғn30'|DQRaSISI*gje(&IOpI $'|DP\XQn30'|DQRavv;keP\X}n30'|DQRawvuKkeP\Xn30'|DQRavv4KkeP\Xn30'|DQRawvyKke\Xn30'|DQRamm SRkeDesktopMicrosoft.Windows.Desktopm\Xn30'|DQRazmm%RkeMicrosoft.Windows.Desktop\Xn30'|DQRa-L-L< bkeC:\Windows\system32\rundll32.exenis\XLn30'|DQRa.L-LpbkeC:\Windows\system32\rundll32.exe`!` vXeP\Xn30'|DQRavvÃhkeP\Xn30'|DQRawvhkeP\X+n30'|DQRavvhkeP\XAn30'|DQRawvEhke\X'n30'|DQRamm okeSearchWindows.UI.Searchmx\X(n30'|DQRazmmokeWindows.UI.Searchl\X<n30'|DQRaSISIMW}ke(&IOpI %sk 8  8@?8?\XUn30'|DQRa-L-LkeC:\Windows\system32\calc.exeXe\X2Wn30'|DQRa.L-LkeC:\Windows\system32\calc.exe`!@~ rat\Xqn30'|DQRa-L-LYkeC:\Windows\system32\calc.exea\L\Xrn30'|DQRa.L-LĠkeC:\Windows\system32\calc.exe${ J\Xxn30'|DQRa3I3I"keC:\Windows\system32\calc.exe\XLn30'|DQRa4I3I˨leC:\Windows\system32\calc.execro^\Xn30'|DQRamn]}BmeNULL-LP\Xun30'|DQRavv&@DmeP\X!n30'|DQRawvUmeP\X?n30'|DQRavvUmeP\Xnn30'|DQRawvUme\Xn30'|DQRamm (^meCalculator{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\calc.exe8t M\Xn30'|DQRazmm~^me{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\calc.exe@ \X0n30'|DQRa-L-LulmeC:\Windows\system32\mspaint.exe\X2n30'|DQRa.L-L|3mmeC:\Windows\system32\mspaint.exe z \XKn30'|DQRa-L-L~meC:\Windows\system32\mspaint.exe\XLn30'|DQRa.L-L ~meC:\Windows\system32\mspaint.exe} \Xnn30'|DQRa3I3ImeC:\Windows\system32\mspaint.exe\XOn30'|DQRa4I3Iy$\ueC:\Windows\system32\mspaint.exe^\X6n30'|DQRamnǴveNULLP\Xn30'|DQRavvcveP\XIn30'|DQRawvveP\X^n30'|DQRavv\veP\Xvn30'|DQRawvve\X~n30'|DQRamm XvePaint{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\mspaint.exe8R\Xln30'|DQRazmmive{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\mspaint.exeQRa\Xn30'|DQRa-L-L/iweC:\Windows\system32\mstsc.exeX\Xn30'|DQRa.L-Lk_weC:\Windows\system32\mstsc.exe@)`y '|D\X.n30'|DQRa-L-L=weC:\Windows\system32\mstsc.exeX\Xfn30'|DQRa.L-LweC:\Windows\system32\mstsc.exe w '|D\XD n30'|DQRa3I3IKweC:\Windows\system32\mstsc.exeX\X]n30'|DQRa4I3IH"xeC:\Windows\system32\mstsc.exe\XTVn30'|DQRamnxeMicrosoft.Windows.RemoteDesktop JP\XXn30'|DQRavvxeP\XXn30'|DQRawv/xeP\XXn30'|DQRavvr}eP\Xn30'|DQRavvKOr}eP\Xn30'|DQRawv nr}e\X´n30'|DQRamm y}eComponent Services{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\comexp.msc8.\XQn30'|DQRazmmlz}e{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\comexp.msc\X n30'|DQRa-L-Lی}eC:\Windows\system32\compmgmt.msc\X<n30'|DQRa.L-L>}eC:\Windows\system32\compmgmt.msc  QRa\X{n30'|DQRa-L-L 6~eC:\Windows\system32\compmgmt.msc\Xn30'|DQRa.L-Lɘ7~eC:\Windows\system32\compmgmt.msc`! ^be^\X>rn30'|DQRamnM`~eNULL JP\X1tn30'|DQRavv~eP\Xutn30'|DQRawv@̞~eP\Xtn30'|DQRavvמ~eP\Xtn30'|DQRawv^~e\Xn30'|DQRamm ~eComputer ManagementMicrosoft.AutoGenerated.{8ABD94FB-E7D6-84A6-A997-C918EDDE0AE5}8ndo\Xn30'|DQRazmm~eMicrosoft.AutoGenerated.{8ABD94FB-E7D6-84A6-A997-C918EDDE0AE5}\X/n30'|DQRa-L-L0V~eC:\Windows\system32\dfrgui.exe.\XYn30'|DQRa.L-L~eC:\Windows\system32\dfrgui.exe z \Xn30'|DQRa-L-L/YeC:\Windows\system32\dfrgui.exe.\XNn30'|DQRa.L-L3YeC:\Windows\system32\dfrgui.exe~ \Xsn30'|DQRa3I3I6eeC:\Windows\system32\dfrgui.exe\X)n30'|DQRa4I3I@eC:\Windows\system32\dfrgui.exe^\Xn30'|DQRamnuReNULL{P\XͶn30'|DQRavv |eP\X n30'|DQRawveP\Xn30'|DQRavveP\X5n30'|DQRawvoe\X'n30'|DQRamm F>"eDefragment and Optimize Drives{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\dfrgui.exe8\Xn30'|DQRazmm"e{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\dfrgui.exe\Xn30'|DQRa-L-LV3eC:\Windows\system32\eventvwr.msc30'|D\Xn30'|DQRa.L-L3eC:\Windows\system32\eventvwr.msc QRa\X n30'|DQRa-L-Lb݀eC:\Windows\system32\eventvwr.msc3I\X* n30'|DQRa.L-Lp'ހeC:\Windows\system32\eventvwr.msc@) icr^\Xq!n30'|DQRamnb;eNULL JP\XCs!n30'|DQRavvIKĊeMicrosoft.AutoGenerated.{C804BBA7-FA5F-CBF7-8B55-2096E5F972CB}77-\X *0n30'|DQRa-L-LފeC:\Windows\system32\secpol.msc\X]+0n30'|DQRa.L-LߊeC:\Windows\system32\secpol.msc a\X1n30'|DQRa-L-LeC:\Windows\system32\secpol.msca\X1n30'|DQRa.L-LoeC:\Windows\system32\secpol.msc a^\X2n30'|DQRamn?eNULLYYYxP\X2n30'|DQRavv$eP\Xo2n30'|DQRawv썌eP\X2n30'|DQRavveP\X2n30'|DQRawv e\X2n30'|DQRamm ߛeLocal Security PolicyMicrosoft.AutoGenerated.{BD3F924E-55FB-A1BA-9DE6-B50F9F2460AC}8i\X2n30'|DQRazmmeMicrosoft.AutoGenerated.{BD3F924E-55FB-A1BA-9DE6-B50F9F2460AC}\X2n30'|DQRa-L-L"eC:\Windows\system32\scw.exe\X2n30'|DQRa.L-LeC:\Windows\system32\scw.exe  \XV4n30'|DQRa-L-LeC:\Windows\system32\scw.exe\XY4n30'|DQRa.L-LU#eC:\Windows\system32\scw.exe  \Xw4n30'|DQRa3I3I/eC:\Windows\system32\scw.exe\X5n30'|DQRa4I3IeC:\Windows\system32\scw.exe^\Xs5n30'|DQRamn+tteNULLYYY|DP\X5n30'|DQRavvveP\XP5n30'|DQRawvLveP\Xg5n30'|DQRavv{[veP\X5n30'|DQRawvkve\XƵ5n30'|DQRamm TreSecurity Configuration Wizard{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\scw.exe8\X{5n30'|DQRazmm䀎e{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\scw.exe\Xq5n30'|DQRa-L-L>eC:\Windows\system32\ServerManager.exe\X5n30'|DQRa.L-L[&eC:\Windows\system32\ServerManager.exe= e\X6n30'|DQRa-L-L89eC:\Windows\system32\ServerManager.exeRa\X6n30'|DQRa.L-LΝ:eC:\Windows\system32\ServerManager.exe= -L\X6n30'|DQRa3I3IIHeC:\Windows\system32\ServerManager.exe\X~7n30'|DQRa4I3IeC:\Windows\system32\ServerManager.exeor^\X7n30'|DQRamn}eNULL JP\X7n30'|DQRavvƿeP\X7n30'|DQRawv|eP\Xӝ7n30'|DQRavveP\X7n30'|DQRawv e\Xm7n30'|DQRamm >ȏeServer Manager{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\ServerManager.exe8  4" 8 ?\X(7n30'|DQRazmm^ɏe{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\ServerManager.exe\X7n30'|DQRa-L-L|tُeC:\Windows\system32\services.mscX\X7n30'|DQRa.L-LOCڏeC:\Windows\system32\services.msc  -6A\XV9n30'|DQRa-L-LHeC:\Windows\system32\services.msc\XX9n30'|DQRa.L-L;eC:\Windows\system32\services.msc  \wo^\X9n30'|DQRamn}LeNULLP\X9n30'|DQRavv NeP\X9n30'|DQRawv/NeP\X9n30'|DQRavv;NeP\X)9n30'|DQRawv\KNe\X :n30'|DQRamm ?sUeServices{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\services.msc8.\X :n30'|DQRazmmUe{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\services.msc\X;:n30'|DQRa-L-LceC:\Windows\system32\msconfig.exev\Xc :n30'|DQRa.L-L7deC:\Windows\system32\msconfig.exe @ \Xb ;n30'|DQRa-L-LW eC:\Windows\system32\msconfig.exemsc\X!;n30'|DQRa.L-LI) eC:\Windows\system32\msconfig.exe` n.m\X2;n30'|DQRa3I3IeC:\Windows\system32\msconfig.exep.m\XG;n30'|DQRa4I3I\qeC:\Windows\system32\msconfig.exec^\Xo;n30'|DQRamng悒eNULL JP\XD;n30'|DQRavveP\X;n30'|DQRawvS;eP\X;n30'|DQRavv GeP\X;n30'|DQRawvhVe\XH;n30'|DQRamm NeSystem Configuration{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\msconfig.exe8a\X;n30'|DQRazmm e{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\msconfig.exe\X;n30'|DQRa-L-L9ieC:\Windows\system32\msinfo32.exe8.\X=;n30'|DQRa.L-L@eC:\Windows\system32\msinfo32.exe \X<n30'|DQRa-L-LeC:\Windows\system32\msinfo32.exe\X<n30'|DQRa.L-L6NeC:\Windows\system32\msinfo32.exe`! QRa\X<n30'|DQRa3I3IB(eC:\Windows\system32\msinfo32.exe\X J=n30'|DQRa4I3IveC:\Windows\system32\msinfo32.exe`!^\Xs=n30'|DQRamn^ȓeNULL JP\X<=n30'|DQRavvq!ʓeP\Xy=n30'|DQRawvEʓeP\X=n30'|DQRavvQʓeP\X=n30'|DQRawv`ʓe\X=n30'|DQRamm ӓeSystem Information{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\msinfo32.exe86-8\X+=n30'|DQRazmmӓe{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\msinfo32.exeAB\X=n30'|DQRa-L-L@eC:\Windows\system32\taskschd.msc\X=n30'|DQRa.L-LueC:\Windows\system32\taskschd.msc$ ste\X>n30'|DQRa-L-L)eC:\Windows\system32\taskschd.msc:\W\X>n30'|DQRa.L-L-eC:\Windows\system32\taskschd.msc  frg^\XC>n30'|DQRamn-`eNULLYYY3IP\X~E>n30'|DQRavv}eP\XE>n30'|DQRawvleP\XE>n30'|DQRavveP\XE>n30'|DQRawve\XV>n30'|DQRamm Y&eTask SchedulerMicrosoft.AutoGenerated.{C1C6F8AC-40A3-0F5C-146F-65A9DC70BBB4}8\XV>n30'|DQRazmmf&eMicrosoft.AutoGenerated.{C1C6F8AC-40A3-0F5C-146F-65A9DC70BBB4}tim\Xl>n30'|DQRa-L-LM5eC:\Windows\system32\WF.msc\Xn>n30'|DQRa.L-L 6eC:\Windows\system32\WF.msc  x\Xx?n30'|DQRa-L-LUeC:\Windows\system32\WF.mscn\Xy?n30'|DQRa.L-L\eC:\Windows\system32\WF.msc  c^\X?n30'|DQRamneNULLG&P\X?n30'|DQRavveP\X'?n30'|DQRawv eP\X9?n30'|DQRavveP\XP?n30'|DQRawv$e h W& 8 ?\X?n30'|DQRamm eWindows Firewall with Advanced Security{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WF.msc8\XeP\XYn30'|DQRawv&^e~\XEYn30'|DQRaymameUfhRecentShortcutAdd: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VMware\VMware Tools\dmarrer la journalisation de statistiques de la VM.lnk:\XYn30'|DQRamm Medmarrer la journalisation de statistiques de la VMMicrosoft.AutoGenerated.{14A21382-6511-3324-B505-306A7D8FF83A}0ndo\XcYn30'|DQRazmm/ReMicrosoft.AutoGenerated.{14A21382-6511-3324-B505-306A7D8FF83A}l\XYn30'|DQRaSISI:e(&IOpI %2\P\XHYn30'|DQRarmn H+e\X1Yn30'|DQRaymamx0e-ARC: Committing updated cache to disk. Cache size=60104\X]n30'|DQRaymam Je-ARC: Loading cache to memory after committing updated cache to disk.`\Xlan30'|DQRamm e \Xfn30'|DQRaymam-+e-ARC: Updated state store. Rebalanced=0, Commit hr=0x0.\Xfn30'|DQRa-L-L0+eshell:::{4234d49b-0245-4df3-b780-3893943456e1}e\Xfn30'|DQRa.L-L_/eshell:::{4234d49b-0245-4df3-b780-3893943456e1}`T\Xzfn30'|DQRaJJ0eP\XFfn30'|DQRaJJ0e\Xpfn30'|DQRaymam<0e-ARC: Notify UPDATEDIR: 43 items changed during folder scan.T\Xfn30'|DQRaJJs0eTXufn30'|DQRaJJ+a1ePXSfn30'|DQRaJJ7ɃeTXfn30'|DQRaJJeXXXfn30'|DQRaJJe PX7fn30'|DQRaJJ"eZ\Xfn30'|DQRaymam1e-ARC: Change notify=8192; Item: (40000000) C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs; need scan=0AC1PX~fn30'|DQRaJJ( 8 ?P\Xfn30'|DQRaJJed\Xfn30'|DQRamm -e+,erP\X\-eP\Xgn30'|DQRa%%V.ePXqgn30'|DQRa%%H7elhX3hn30'|DQRao%o% e(&IOpI_lhX5hn30'|DQRau%u%e(&IOpI$eslhXWhn30'|DQRaq%q%oe(&IOpI`E7lhXXhn30'|DQRaZZ-e(&IOpI,UXlhXMZhn30'|DQRaZZ3e(&IOpI-colhXu[hn30'|DQRaZZݩe(&IOpI.1\WlhX_hn30'|DQRaII巬e(&IOpIcXhX_hn30'|DQRaIIϬe(&IOpIh (Undefined)hX`hn30'|DQRaII䬯e(&IOpIl (Undefined)hX7`hn30'|DQRaIIae(&IOpIm (Undefined)hXV`hn30'|DQRaIIq e(&IOpIn (Undefined)hXq`hn30'|DQRaII>e(&IOpId (Undefined)hX`hn30'|DQRaIIk1e(&IOpIo (Undefined)hX`hn30'|DQRaIIqCe(&IOpIf (Undefined)hX`hn30'|DQRaIIUe(&IOpIe (Undefined)hX`hn30'|DQRaIIOhe(&IOpIg (Undefined)hX`hn30'|DQRaII7ze(&IOpIj (Undefined)hXahn30'|DQRaII拭e(&IOpIq (Undefined)hX2ahn30'|DQRaIIe(&IOpIp (Undefined)hXMahn30'|DQRaII8e(&IOpIk (Undefined)hXhahn30'|DQRaII_e(&IOpIi (Undefined)hXahn30'|DQRaIIwӭe(&IOpI (Undefined)hXahn30'|DQRaIIp歯e(&IOpI( (Undefined)hXahn30'|DQRaIIe(&IOpI( (Undefined)hXahn30'|DQRaIII e(&IOpI( (Undefined)hXFdhn30'|DQRaII/e(&IOpI( (Undefined)hXndhn30'|DQRaII>e(&IOpI( (Undefined)hXdhn30'|DQRaIIiЯe(&IOpI) (Undefined)hXdhn30'|DQRaII寯e(&IOpI) (Undefined)X۞hn30'|DQRa-L-L=֯eC:\Windows\system32\ServerManager.exe{X8hn30'|DQRa.L-L֯eC:\Windows\system32\ServerManager.exePXhn30'|DQRaamnگePXhn30'|DQRabmnC߯eXhn30'|DQRa-L-LwIeC:\Windows\system32\ServerManager.exeXѸhn30'|DQRa.L-LeC:\Windows\system32\ServerManager.exeePXhn30'|DQRaamnnePXhn30'|DQRabmne2Xhn30'|DQRa-L-L|eC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts>RXhn30'|DQRa.L-LeC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts@  oftXhn30'|DQRa-L-Lk eC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned(XWin30'|DQRa.L-LLeC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned Xin30'|DQRa-L-L$eC:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Server Manager.lnke*X[@in30'|DQRa.L-LU?eC:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Server Manager.lnk ?X Gin30'|DQRa-L-L/DeC:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools P >m[ 8 ?X|_in30'|DQRa.L-LX$TeC:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Toolsj`X^din30'|DQRa-L-LUWeC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\64:X>in30'|DQRa.L-LieC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\P 0\p Xin30'|DQRa-L-LieC:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Server Manager.lnkQRa*Xin30'|DQRa.L-L<~eC:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Server Manager.lnk XXin30'|DQRa-L-LeC:\xXin30'|DQRa.L-LeC:\@XXAin30'|DQRa-L-Ln硰eC:\xXin30'|DQRa.L-L.eC:\@PXin30'|DQRavvoePXin30'|DQRawveTXpjn30'|DQRaJJ+ưe\p>Xjn30'|DQRa-L-L+ưeC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Server Manager.lnk-L^Xrjn30'|DQRa.L-LǰeC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Server Manager.lnk`x`SPXjn30'|DQRaJJUȰelXjn30'|DQRaSISIFbͰe(&IOpI &erTX="jn30'|DQRaJJӰePX#jn30'|DQRaJJ԰eTXqڎn30'|DQRaJJe ISXێn30'|DQRa-L-LweC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar8Xގn30'|DQRa.L-LUeC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBarlPXn30'|DQRaJJ.elXXn30'|DQRaSISI!e(&IOpI &eTXn30'|DQRaJJ=\e TXn30'|DQRaJJ e PX>n30'|DQRaJJ^xeTXn30'|DQRaJJдe elXXn30'|DQRaJJkePX&n30'|DQRaJJ%eXXTn30'|DQRaJJe PXn30'|DQRaJJ&eXXn30'|DQRaJJ6e PXn30'|DQRaJJUe\Xn30'|DQRaymamPe-ARC: RefreshCache: smrcf=0x10P\Xn30'|DQRaymam9`e-ARC: Change notify=2; Item: (40010000) C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Server Manager.lnk; need scan=1\XE n30'|DQRaymam<6e-ARC: Change notify=8192; Item: (40000000) C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar; need scan=0\X n30'|DQRaymam_e-ARC: RefreshCache: smrcf=0x10x\X n30'|DQRaymam;e-ARC: Change notify=8192; Item: (40010000) C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Server Manager.lnk; need scan=1PX n30'|DQRaJJEePXSn30'|DQRaJJ eTXn30'|DQRaJJu]eowPXn30'|DQRaJJO^e X n30'|DQRaIIe(&IOpI &  >m[ @? 8@?8?lXn30'|DQRaSISIԲe(&IOpI & B*X6n30'|DQRa.L-L|!eC:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Server Manager.lnk @c>X7n30'|DQRa-L-LaeC:\Windows Mt~X*n30'|DQRa-L-L,aeC:\Users\AdministratornXY1n30'|DQRa.L-LfeC:\Users\AdministratorJ  ] 8`?8 ?Xj9n30'|DQRa-L-LfkeC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick LaunchlXHn30'|DQRaSISI$ve(&IOpI &lXQQn30'|DQRaSISIT{e(&IOpI &XXRn30'|DQRa.L-L|eC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick LaunchYXjSn30'|DQRa-L-L|eC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick LaunchX^hn30'|DQRa.L-L්eC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick LaunchjTXrn30'|DQRaJJ4rePX6sn30'|DQRaJJ|̑eTXJsn30'|DQRaJJ%ؑeTXsn30'|DQRaJJDFeE7PXMtn30'|DQRaJJeTX{tn30'|DQRaJJޟePXvn30'|DQRaJJ$ePX|wn30'|DQRaJJelX9}n30'|DQRaUU^e(&IOpIN Xn30'|DQRa-L-L˜eC:\Windows\system32\ServerManager.exeXn30'|DQRa.L-LeC:\Windows\system32\ServerManager.exe&IPX׈n30'|DQRaamnePXn30'|DQRabmneTXn30'|DQRaJJePXn30'|DQRaJJeTX&n30'|DQRaJJeinTXÕn30'|DQRaJJkePX n30'|DQRaJJDeTX7n30'|DQRaJJeinPX5n30'|DQRaJJePX옑n30'|DQRaJJ}elXn30'|DQRaSISIGϮe(&IOpI &PXn30'|DQRaamn_6ePXdn30'|DQRabmn/ePX)ӑn30'|DQRaamnmePX[Ցn30'|DQRabmneX`n30'|DQRa-L-L>/eC:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Windows PowerShell.lnklXn30'|DQRaSISIŊe(&IOpI &elXn30'|DQRaSISI#e(&IOpI &IlXn30'|DQRaSISIe(&IOpI &'|D"XH n30'|DQRa.L-L,deC:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Windows PowerShell.lnkXn30'|DQRa-L-LeC:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools'|DX&$n30'|DQRa.L-L#eC:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Toolsp&exX7)n30'|DQRa-L-LeC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\:XCn30'|DQRa.L-L)eC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\`[ `:\WXCn30'|DQRa-L-L)9eC:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Windows PowerShell.lnk"XXn30'|DQRa.L-L,(eC:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Windows PowerShell.lnkkortXXin30'|DQRa-L-Lp2eC:\xXin30'|DQRa.L-L3eC:\XXy|n30'|DQRa-L-L?eC:\xX|n30'|DQRa.L-L;?eC:\ @PX>n30'|DQRavv hNePX@n30'|DQRawv OeTXQn30'|DQRaJJmbeRaFXn30'|DQRa-L-LbeC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows PowerShell.lnkfXMn30'|DQRa.L-LL deC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows PowerShell.lnkMPXѴn30'|DQRaJJ`deTX n30'|DQRaJJeePXn30'|DQRaJJ'fe  1` 8@? X绒n30'|DQRaIIieC:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Windows PowerShell.lnkC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows PowerShell.lnkTX ’n30'|DQRaJJ mePX]Òn30'|DQRaJJmeTXÒn30'|DQRaJJhnePXȒn30'|DQRaJJ@qeTX8Ӓn30'|DQRaJJJxePXӒn30'|DQRaJJxeXFՒn30'|DQRa-L-LEyeC:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Windows PowerShell.lnk"XKn30'|DQRa.L-LieC:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Windows PowerShell.lnkkPXn30'|DQRaamnePX<n30'|DQRabmneTXx.n30'|DQRaJJ ePX.n30'|DQRaJJG\eTX /n30'|DQRaJJHgeTX/n30'|DQRaJJӴePX/n30'|DQRaJJpeTX0n30'|DQRaJJePX<0n30'|DQRaJJ-eTX^0n30'|DQRaJJCeXX5n30'|DQRaJJePX9n30'|DQRaJJARe\X;n30'|DQRaymam}e-ARC: RefreshCache: smrcf=0x10\X<n30'|DQRaymamKe-ARC: Change notify=2; Item: (40010000) C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows PowerShell.lnk; need scan=1PX<n30'|DQRaJJiyePX=n30'|DQRaJJFelXCn30'|DQRaUUe(&IOpIN PXWn30'|DQRaamn0ePX*Zn30'|DQRabmn3eTX=_n30'|DQRaJJePX_n30'|DQRaJJNeTX_n30'|DQRaJJYeTXq`n30'|DQRaJJQePX`n30'|DQRaJJeTXan30'|DQRaJJ~ePX cn30'|DQRaJJDsePXcn30'|DQRaJJQelX]kn30'|DQRaSISIqe(&IOpI &PX~n30'|DQRaamnePX䄓n30'|DQRabmn~eXڣn30'|DQRa-L-LpeC:\Users\Administrator\SearcheslXn30'|DQRaSISI e(&IOpI &Xon30'|DQRa.L-Lp eC:\Users\Administrator\SearchesXn30'|DQRa-L-LVs eC:\Users\Administrator\ContactslX`“n30'|DQRaSISI!e(&IOpI &XÓn30'|DQRa.L-L>eC:\Users\Administrator\Contacts` X8œn30'|DQRa-L-L/eC:\Users\Administrator\FavoriteslXѓn30'|DQRaSISIae(&IOpI &Xғn30'|DQRa.L-LeC:\Users\Administrator\Favoritesp`X7Փn30'|DQRa-L-L66!eC:\Users\Administrator\DocumentslXn30'|DQRaSISIJ)e(&IOpI &Xn30'|DQRa.L-Lv>*eC:\Users\Administrator\DocumentsPXn30'|DQRa-L-Lv+eC:\Users\Administrator\Saved GameslXn30'|DQRaSISIV3e(&IOpI &X9n30'|DQRa.L-L44eC:\Users\Administrator\Saved Games~Xn30'|DQRa-L-LT:eC:\Users\AdministratorX%n30'|DQRa.L-L8L?eC:\Users\Administrator0PXn30'|DQRaamnMePXn30'|DQRabmn Qe(X3n30'|DQRa-L-L,^eC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnklXJn30'|DQRaSISIǯme(&IOpI &lXPn30'|DQRaSISI4qe(&IOpI &HX/vn30'|DQRa.L-LYeC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk) @h 1`@ 8 ?X+|n30'|DQRa-L-L刎eC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools$XTn30'|DQRa.L-L[eC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools0`Xn30'|DQRa-L-LU7eC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\:Xn30'|DQRa.L-LeC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\E i(Xn30'|DQRa-L-L{heC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnkHX~֔n30'|DQRa.L-LeC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk@ @XXWn30'|DQRa-L-L>eC:\xXn30'|DQRa.L-LeC:\@`XXn30'|DQRa-L-L-eC:\xX}n30'|DQRa.L-LLxeC:\PXn30'|DQRavvAIePXn30'|DQRawvdePX*n30'|DQRa;eTXn30'|DQRaJJ&edm<Xn30'|DQRa-L-LTgeC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk\Xkn30'|DQRa.L-LeC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk@ePXn30'|DQRaJJeTX:ϖn30'|DQRaJJ(e \RXϖn30'|DQRa-L-L }eC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar8Xhіn30'|DQRa.L-LeC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBarPXіn30'|DQRaJJelX-Ԗn30'|DQRaSISI0ee(&IOpI &TXԖn30'|DQRaJJКe TXږn30'|DQRaJJeePXVݖn30'|DQRaJJXaeTXݖn30'|DQRaJJde PXߖn30'|DQRaJJ eTXߖn30'|DQRaJJe XXn30'|DQRaJJc%ePXn30'|DQRaJJN-(eXXn30'|DQRaJJD(e PX7n30'|DQRaJJm(eXXKn30'|DQRaJJz(e PXyn30'|DQRaJJ(e\X|n30'|DQRaymam)e-ARC: RefreshCache: smrcf=0x10u\Xn30'|DQRaymam *e-ARC: Change notify=2; Item: (40010000) C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk; need scan=1 \Xn30'|DQRaymam,e-ARC: Change notify=8192; Item: (40000000) C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar; need scan=0\X0n30'|DQRaymam-e-ARC: RefreshCache: smrcf=0x10 \Xtn30'|DQRaymam-e-ARC: Change notify=8192; Item: (40010000) C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk; need scan=1ePXrn30'|DQRaJJz.ePXC n30'|DQRaJJ&:eTX n30'|DQRaJJf:eSePX n30'|DQRaJJ:e(X n30'|DQRaII۩eTXn30'|DQRaJJIDeerPX9n30'|DQRaJJDe H +b 8@?8?(Xn30'|DQRa-L-LpEeC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnklX!n30'|DQRaSISIHJe(&IOpI &lX.n30'|DQRaSISIRe(&IOpI &dmlX37n30'|DQRaSISIC;Xe(&IOpI &\QlXb>n30'|DQRaSISI\e(&IOpI &lX En30'|DQRaSISIZae(&IOpI &HXKn30'|DQRa.L-LEeeC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk `<XHLn30'|DQRa-L-L0feC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnklX_cn30'|DQRaSISI0(ue(&IOpI &lXmn30'|DQRaSISI{e(&IOpI &dm\Xrn30'|DQRa.L-LM:eC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnkPrftTXn30'|DQRaJJe d\X!n30'|DQRa-L-Ls>eC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar8Xn30'|DQRa.L-LJeC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBarp PX8n30'|DQRaJJelXYn30'|DQRaSISIIe(&IOpI &'|DTXn30'|DQRaJJBe '|DTXn30'|DQRaJJeRaPX-n30'|DQRaJJ3eTXjn30'|DQRaJJ[e RaPXn30'|DQRaJJߐeTXn30'|DQRaJJ'e RaXX\n30'|DQRaJJT0ePXCn30'|DQRaJJeXXgn30'|DQRaJJfәe PXn30'|DQRaJJeXXn30'|DQRaJJYe PX雗n30'|DQRaJJ(e\Xn30'|DQRaymambe-ARC: RefreshCache: smrcf=0x10=\Xn30'|DQRaymame-ARC: Change notify=2; Item: (40010000) C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk; need scan=1\X䡗n30'|DQRaymame-ARC: Change notify=8192; Item: (40000000) C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar; need scan=0\X.n30'|DQRaymamwe-ARC: RefreshCache: smrcf=0x10|D\Xsn30'|DQRaymam(e-ARC: Change notify=8192; Item: (40010000) C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk; need scan=1tePXun30'|DQRaJJSŸePX˧n30'|DQRaJJnelXn30'|DQRaSISIxe(&IOpI &'|DPXƗn30'|DQRaamnePX&̗n30'|DQRabmn`¹eTXgn30'|DQRaJJePXn30'|DQRaJJeTXn30'|DQRaJJeXTXn30'|DQRaJJqe FPXn30'|DQRaJJ4eTXn30'|DQRaJJex8PXAn30'|DQRaJJ&ePXn30'|DQRaJJ?elXB n30'|DQRaUUe(&IOpIN PXn30'|DQRaamnePXn30'|DQRabmneTX$!n30'|DQRaJJhePX!n30'|DQRaJJ+eImmersiveShellmd\X 'n30'|DQRafPi\X*n30'|DQRa,,DfC:\Windows\web\wallpaper\Windows\img0.jpgd\X$ n30'|DQRa3fPXt$n30'|DQRa?fPXl*n30'|DQRa&fd\X/sn30'|DQRajfXPX+n30'|DQRaJJ/fXX+n30'|DQRaJJݽ/fPX,n30'|DQRaJJ /fXX,n30'|DQRaJJQ/f PX,n30'|DQRaJJ-/fX,n30'|DQRa-L-Lc/fC:\Users\Public\DesktopX ,n30'|DQRa.L-L:J/fC:\Users\Public\DesktopYXXX ,n30'|DQRa JJB/fPX2!,n30'|DQRaJJ /fXm%,n30'|DQRa-L-Lu/fC:\Users\Public\DesktopXB&,n30'|DQRa.L-L_/fC:\Users\Public\DesktopPYXXX&,n30'|DQRa JJ/f PX.n30'|DQRa]H]HW1fzXK.n30'|DQRaee1fCreateViewWindowzXr.n30'|DQRaeeѦ1fCreateViewWindow30'|DPX1n30'|DQRaJJ93fXXS1n30'|DQRaJJf3f PX1n30'|DQRaJJ@3fXX1n30'|DQRa JJV3f PXm4n30'|DQRaII' H5f`X6n4n30'|DQRaIIoH5f5km/OPX4n30'|DQRaoIoI# 5n30'|DQRaJJP5fXX55n30'|DQRa JJҳ5f P X(An30'|DQRaޯ>f X:Fn30'|DQRa-L-L!@fshell:::{98F275B4-4FFF-11E0-89E2-7B86DFD72085} XFn30'|DQRa.L-La@fshell:::{98F275B4-4FFF-11E0-89E2-7B86DFD72085}Pa`-LP XtHn30'|DQRa@eBfP XHn30'|DQRa::QBfP XHn30'|DQRa I IzBfP X In30'|DQRa I I^6BfP X In30'|DQRauHuHՊBfT X-In30'|DQRavHuH]GBf+dmT Xb2In30'|DQRaHH-DBf+RaP XGIn30'|DQRa;:kBfP XJn30'|DQRaHH*DfpX4pn30'|DQRaee\fUpdateItemspXVpn30'|DQRaee\fUpdateItemspXpn30'|DQRaeeQ*\fUpdateItemspX1pn30'|DQRaee6\fUpdateItems~X`pn30'|DQRaeevV\fOperationCompleted|D~Xspn30'|DQRaeea\fOperationCompleted`Xpn30'|DQRaII~\f5km/OzX pn30'|DQRaee\fOperationRunningratzXpn30'|DQRaee\fOperationRunning:exXpn30'|DQRaeej\fg_~Xpn30'|DQRaee@\fOperationCompletedTXpn30'|DQRaHHU\f'|D~Xpn30'|DQRaeeo_\fOperationCompletedPXFpn30'|DQRa|H{HE\f~X^pn30'|DQRaee\fFirstPageDisplayed.xXkpn30'|DQRaeem\fContentsChangedxXpn30'|DQRaee\fContentsChangedPXpn30'|DQRa7I7I\fxXpn30'|DQRaee\fContentsChangedTXpn30'|DQRaHHp\fk  *! 8 ?xXpn30'|DQRaee\fContentsChanged`Xpn30'|DQRaII΍\f5km/OTXpn30'|DQRaHH)\fRaP XG&qn30'|DQRa ]fnX}~n30'|DQRa%%O0efImmersiveShellsnX~n30'|DQRa%%efDesktopVisible-LnX~n30'|DQRa%%&efStartMenuShownMX~n30'|DQRa%%nefLogonFrameworkRegistrationX~n30'|DQRa%%efLogonFrameworkRegistrationRZX~n30'|DQRa%%E efSSO1ch\P X~n30'|DQRaffXsn30'|DQRaymam'ff-ARC: Paused/Resumed root#0 for change notification: Pause=1 Success=1gX=n30'|DQRaymamH.ff-ARC: Paused/Resumed root#1 for change notification: Pause=1 Success=1iX&n30'|DQRaymam5ff-ARC: Paused/Resumed root#3 for change notification: Pause=1 Success=1-LX/n30'|DQRaymam:ff-ARC: Paused/Resumed root#6 for change notification: Pause=1 Success=1X[8n30'|DQRaymam@ff-ARC: Paused/Resumed root#7 for change notification: Pause=1 Success=1XAn30'|DQRaymamFff-ARC: Paused/Resumed root#8 for change notification: Pause=1 Success=1tX?n30'|DQRa%%ErfDesktopApiSurfacerstX9@n30'|DQRa%%2rfTaskbarApiSurface\QP( XP>n30'|DQRa@\sftX9n30'|DQRa%%WsfTaskbarApiSurfacersX Xxn30'|DQRaLMeg\xfP8 Xn30'|DQRaDDtxfX8 X#n30'|DQRaMM'yfP8 XQn30'|DQRaED*yfl Xcܜn30'|DQRaSISI^yf(&IOpI & Xn30'|DQRa-L-LpYyfC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\l Xn30'|DQRaSISIbyf(&IOpI &l X n30'|DQRaSISIyf(&IOpI &nt Xn30'|DQRa.L-LyfC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\LibrariesX  a Xt)n30'|DQRa-L-L_nyfC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Music.library-ms X*Cn30'|DQRa.L-LEyfC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Music.library-ms^  XZn30'|DQRa-L-LkEyfC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Videos.library-ms30'|D Xtn30'|DQRa.L-L zfC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Videos.library-ms (e X,n30'|DQRa-L-LWzfC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Pictures.library-msh Xdn30'|DQRa.L-L/zfC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Pictures.library-ms e X\n30'|DQRa-L-LD~fC:\Users\Administrator\Favoritesnotl Xjn30'|DQRaSISI~f(&IOpI &at Xln30'|DQRa.L-LƜ~fC:\Users\Administrator\Favorites` X X n30'|DQRa-L-L{fshell:::{98F275B4-4FFF-11E0-89E2-7B86DFD72085}am Xn30'|DQRa.L-Lfshell:::{98F275B4-4FFF-11E0-89E2-7B86DFD72085}] sX X4n30'|DQRaLMfP8 X6n30'|DQRaDDfX8 XTn30'|DQRaMMv_fP8 XUn30'|DQRaEDE_fX笳n30'|DQRa-L-Lfshell:::{98F275B4-4FFF-11E0-89E2-7B86DFD72085}XTn30'|DQRa.L-L[fshell:::{98F275B4-4FFF-11E0-89E2-7B86DFD72085}d \XXҳn30'|DQRaLM&fP8 Xӳn30'|DQRaDDѝfX8 Xn30'|DQRaMM₉fP8 Xn30'|DQRaEDfXDn30'|DQRa-L-Lfshell:::{98F275B4-4FFF-11E0-89E2-7B86DFD72085}X$Hn30'|DQRa.L-Lyfshell:::{98F275B4-4FFF-11E0-89E2-7B86DFD72085}0j @ XXkn30'|DQRaLMjf X ۈZ"X 8@?8?P8 Xln30'|DQRaDDxfX8 Xn30'|DQRaMM'ڍfP8 XJn30'|DQRaEDڍf XHͻn30'|DQRa-L-L{FfC:\Windows\system32\perfmon.msc Xλn30'|DQRa.L-LfC:\Windows\system32\perfmon.mscPa`  X?n30'|DQRa-L-LSofC:\Windows\system32\compmgmt.msc&I Xmn30'|DQRa.L-LFpfC:\Windows\system32\compmgmt.msca -L Xn30'|DQRa-L-LrϦfC:\Windows\system32\taskmgr.exe Xn30'|DQRa.L-LfC:\Windows\system32\taskmgr.exea`  X$n30'|DQRa-L-La!̎fC:\Windows\system32\eventvwr.mscrne X%n30'|DQRa.L-L̎fC:\Windows\system32\eventvwr.mscPa@  X[n30'|DQRa-L-LfC:\Windows\system32\secpol.mscI X\n30'|DQRa.L-LKfC:\Windows\system32\secpol.msca i Xxn30'|DQRa-L-LfC:\Windows\system32\taskschd.mscore Xn30'|DQRa.L-Ls]fC:\Windows\system32\taskschd.mscPa -L Xb˽n30'|DQRa-L-LD9fC:\Windows\system32\perfmon.exe X̽n30'|DQRa.L-Lv:fC:\Windows\system32\perfmon.exea@ X:n30'|DQRa-L-L)fshell:::{98F275B4-4FFF-11E0-89E2-7B86DFD72085}\X>n30'|DQRa.L-LJ,fshell:::{98F275B4-4FFF-11E0-89E2-7B86DFD72085}P XX dn30'|DQRaLMxDfP8 Xagn30'|DQRaDDXGfX8 X n30'|DQRaMMafP8 X;n30'|DQRaEDj+fXn30'|DQRa-L-Lfshell:::{98F275B4-4FFF-11E0-89E2-7B86DFD72085}Xpn30'|DQRa.L-Lfshell:::{98F275B4-4FFF-11E0-89E2-7B86DFD72085}M XXpn30'|DQRaLM#fP8 Xn30'|DQRaDD]e4fX8 Xn30'|DQRaMM"fP8 Xn30'|DQRaED?fP$ Xn30'|DQRaJJfX$ Xn30'|DQRaJJf PXn30'|DQRaJJ_f\Xqn30'|DQRa-L-LfC:\Windows\web\wallpaper\Windows\img0.jpgEx\X@n30'|DQRa.L-L%TfC:\Windows\web\wallpaper\Windows\img0.jpgZD \Xn30'|DQRa-L-LڗfC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper\X$n30'|DQRa.L-L&vfC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper Xn30'|DQRa-L-LbfC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Printer ShortcutstXn30'|DQRa.L-LSGfC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Printer ShortcutsD |DXXn30'|DQRa JJ@f PXvn30'|DQRavvzfPXn30'|DQRawvnfPXn30'|DQRavvfPXn30'|DQRawv(ftXwn30'|DQRa%%pEfDesktopApiSurfaceRa Xn30'|DQRa-L-LjfC:\Program Files\Internet Explorer\images\smallLogo.scale-100.pngl Xwn30'|DQRaSISIf(&IOpI &l XwYn30'|DQRaSISI(f(&IOpI ' Xbn30'|DQRa.L-L.fC:\Program Files\Internet Explorer\images\smallLogo.scale-100.png  '|D Xn30'|DQRa-L-LjfC:\Windows\system32\control.exe Xn30'|DQRa.L-LZfC:\Windows\system32\control.exe4  Xn30'|DQRa-L-L'fC:\Windows\DesktopTileResources\images\logo.scale-100.pngJl Xn30'|DQRaSISI䒴f(&IOpI (l Xen30'|DQRaSISI# f(&IOpI ) Xn30'|DQRa.L-LfC:\Windows\DesktopTileResources\images\logo.scale-100.png0H XX X=vn30'|DQRa-L-Lr#fC:\Windows\system32\mstsc.exe  M_# 8`?8 ? Xwn30'|DQRa.L-LfC:\Windows\system32\mstsc.exeG XX Xn30'|DQRa-L-L:fC:\Windows\system32\calc.exe X"n30'|DQRa.L-L;fC:\Windows\system32\calc.exe4 X X$*n30'|DQRa-L-L^fC:\Windows\system32\cmd.exe XN+n30'|DQRa.L-L~_fC:\Windows\system32\cmd.exe X Xedn30'|DQRa-L-LfC:\Windows\system32\comexp.mscI Xen30'|DQRa.L-LՅfC:\Windows\system32\comexp.mscE X XĤn30'|DQRa-L-L8fC:\Windows\system32\dfrgui.exeI Xn30'|DQRa.L-LfC:\Windows\system32\dfrgui.exe0? X Xn30'|DQRa-L-LvfC:\Windows\system32\iscsicpl.exe X!n30'|DQRa.L-L6fC:\Windows\system32\iscsicpl.exeN X  X)*n30'|DQRa-L-LzfC:\Windows\system32\magnify.exe XM+n30'|DQRa.L-L)MfC:\Windows\system32\magnify.exe`3 X Xndn30'|DQRa-L-L,fC:\Windows\system32\MdSched.exe Xen30'|DQRa.L-Lt-fC:\Windows\system32\MdSched.exe4 X Xɛn30'|DQRa-L-LPfC:\Windows\system32\msconfig.exe Xn30'|DQRa.L-LQfC:\Windows\system32\msconfig.exeG `Xe Xn30'|DQRa-L-LswfC:\Windows\system32\msinfo32.exe X n30'|DQRa.L-LwfC:\Windows\system32\msinfo32.exePL `X=V X'n30'|DQRa-L-LZfC:\Windows\system32\mspaint.exe XOn30'|DQRa.L-LifC:\Windows\system32\mspaint.exeN X XTn30'|DQRa-L-Ls*ʺfC:\Windows\system32\narrator.exe XVn30'|DQRa.L-LʺfC:\Windows\system32\narrator.exeM X30'|D XΌn30'|DQRa-L-LgfC:\Windows\system32\notepad.exe Xn30'|DQRa.L-L3fC:\Windows\system32\notepad.exeM X X7n30'|DQRa-L-LfC:\Windows\system32\odbcad32.exe X_n30'|DQRa.L-LfC:\Windows\system32\odbcad32.exe0? X30'|D Xjn30'|DQRa-L-LCfC:\Windows\system32\osk.exe Xn30'|DQRa.L-LbDfC:\Windows\system32\osk.exe` X XDn30'|DQRa-L-L7gfC:\Windows\system32\psr.exe XEn30'|DQRa.L-LgfC:\Windows\system32\psr.exe` X Xg~n30'|DQRa-L-LfC:\Windows\system32\scw.exe Xn30'|DQRa.L-LfC:\Windows\system32\scw.exe X X9n30'|DQRa-L-LJ۰fC:\Windows\system32\ServerManager.exe Xcn30'|DQRa.L-L_fC:\Windows\system32\ServerManager.exe1 X-L X<n30'|DQRa-L-L&ػfC:\Windows\system32\services.msc30'|D Xjn30'|DQRa.L-LػfC:\Windows\system32\services.mscM XX X-n30'|DQRa-L-LYfC:\Windows\system32\wbadmin.msc X/n30'|DQRa.L-LfC:\Windows\system32\wbadmin.msc0? X Xxn30'|DQRa-L-Lu0fC:\Windows\system32\WF.mscd XGyn30'|DQRa.L-L61fC:\Windows\system32\WF.msc` X X%n30'|DQRa-L-L fC:\Windows\system32\WindowsPowerShell\v1.0\PowerShell_ISE.exe-L X&n30'|DQRa.L-LfC:\Windows\system32\WindowsPowerShell\v1.0\PowerShell_ISE.exe 5 X\W Xqn30'|DQRa-L-L*zӼfC:\Program Files\Windows NT\Accessories\wordpad.exe XNrn30'|DQRa.L-LDԼfC:\Program Files\Windows NT\Accessories\wordpad.exeH X Xn30'|DQRa-L-LufC:\Windows\syswow64\odbcad32.exe Xǭn30'|DQRa.L-Ln5fC:\Windows\syswow64\odbcad32.exe< Xes\ Xn30'|DQRa-L-LfC:\Windows\syswow64\WindowsPowerShell\v1.0\PowerShell_ISE.exe\W h #$h 8@? Xn30'|DQRa.L-LVfC:\Windows\syswow64\WindowsPowerShell\v1.0\PowerShell_ISE.exe; `XXJn30'|DQRa-L-L0ΰfshell:::{98F275B4-4FFF-11E0-89E2-7B86DFD72085}XVNn30'|DQRa.L-Lٔfshell:::{98F275B4-4FFF-11E0-89E2-7B86DFD72085}P@XXXvn30'|DQRaLM;fP8 Xԅn30'|DQRaDDC׾fX8 Xn30'|DQRaMMfP8 Xn30'|DQRaEDfX~n30'|DQRa-L-Lњfshell:::{98F275B4-4FFF-11E0-89E2-7B86DFD72085}X#n30'|DQRa.L-L㣠fshell:::{98F275B4-4FFF-11E0-89E2-7B86DFD72085}^`XaXXAn30'|DQRaLMfP8 X Gn30'|DQRaDDfX8 Xn30'|DQRaMMfP8 Xn30'|DQRaED)f\X!n30'|DQRa-L-LA9fC:\Windows\web\wallpaper\Windows\img0.jpg\Xz!n30'|DQRa.L-L]͓fC:\Windows\web\wallpaper\Windows\img0.jpg]D@X\XC!n30'|DQRa-L-LƎfC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper\X!n30'|DQRa.L-LfC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper0 0`lX-n30'|DQRaRRcf3q劗?ClX-n30'|DQRaRR3kf3q劗?ClX2n30'|DQRaRRƏfs x#)B}[dlXe3n30'|DQRaRRp9fs x#)B}[d X4n30'|DQRa-L-LLfC:\Windows\system32\@TileEmpty1x1Image.pngoI X4n30'|DQRa.L-LcfC:\Windows\system32\@TileEmpty1x1Image.png] `fTXݕ4n30'|DQRaJJf XPX4n30'|DQRaJJՏ fTX4n30'|DQRaJJhf \X}On30'|DQRaymamkf-ARC: RefreshCache: smrcf=0x0PX~On30'|DQRaJJf8 XOn30'|DQRaymam+f-ARC: UpdateCache: smrcf=0x030'|DP8 X7On30'|DQRawmmUfP8 XmOn30'|DQRaqmn ʧfl8 XlOn30'|DQRaSISIf(&IOpI )Vi8 XSn30'|DQRamn;fMicrosoft.Windows.Explorer30'|DP8 Xu+Sn30'|DQRavvkjfP8 XTSn30'|DQRawvcc"fP8 XTSn30'|DQRavvbs"fP8 XTSn30'|DQRawvy"f8 X`Sn30'|DQRa-L-L)fC:\ProgramData\Microsoft\Windows\Start Menu\Programs-4Fl8 X#lSn30'|DQRaSISI1f(&IOpI )l8 XtSn30'|DQRaSISI_a7f(&IOpI )l8 X{Sn30'|DQRaSISI;f(&IOpI )8 XH}Sn30'|DQRa.L-LLfC:\Users\Administrator\Musicel8 XSn30'|DQRaSISINf(&IOpI )'|D8 XSn30'|DQRa.L-LuOfC:\Users\Administrator\Music` `d8 X!Sn30'|DQRa-L-LIQfC:\Users\Administrator\Picturesl8 X%Sn30'|DQRaSISIwTf(&IOpI )Ra8 XSn30'|DQRa.L-LTfC:\Users\Administrator\Pictures@ p`8 XxSn30'|DQRa-L-LUKWfC:\Users\Administrator\VideosRal8 XwSn30'|DQRaSISIYf(&IOpI )'|D  5% 8 ?8 XTSn30'|DQRa.L-LxZfC:\Users\Administrator\Videos< `8 XSn30'|DQRa-L-L\fC:\Users\Administrator\Downloadsql8 XSn30'|DQRaSISIQ_f(&IOpI )8 XoSn30'|DQRa.L-L_fC:\Users\Administrator\Downloads`H `Xl8 XSn30'|DQRaSISI^ef(&IOpI )X8 XͿSn30'|DQRamm ݊hfFile ExplorerMicrosoft.Windows.Explorer%8 XPSn30'|DQRazmmhfMicrosoft.Windows.Explorer8 X^Sn30'|DQRa-L-L kfC:\Windows\system32\ServerManager.exeRa8 XiSn30'|DQRa.L-L34lfC:\Windows\system32\ServerManager.exe3 б`8 XySn30'|DQRa-L-L">fC:\Windows\system32\ServerManager.exeif8 XSn30'|DQRa.L-LfC:\Windows\system32\ServerManager.exep Ы`3 8 XiSn30'|DQRa3I3IfC:\Windows\system32\ServerManager.exe8 XTn30'|DQRa4I3IɷfC:\Windows\system32\ServerManager.exe^8 X"Tn30'|DQRamn[>fNULL JdP8 Xy$Tn30'|DQRavvrfP8 X$Tn30'|DQRawvfP8 X$Tn30'|DQRavvfP8 X$Tn30'|DQRawvf8 XL4Tn30'|DQRamm ҴfServer Manager{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\ServerManager.exesk8 X4Tn30'|DQRazmm.&f{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\ServerManager.exekx8 XTn30'|DQRarmn f8 XxTn30'|DQRaymamHS f-ARC: Committing updated cache to disk. Cache size=57608ows8 Xwn30'|DQRaymam g-ARC: Loading cache to memory after committing updated cache to disk.\Md8 Xwn30'|DQRamm g,,P8 Xwn30'|DQRaxmmJb g X|[xn30'|DQRa-L-L&` gC:\Windows\system32\@TileEmpty1x1Image.pngu~ Xmxn30'|DQRa-L-Ll gC:\Users\Administrators Xnxn30'|DQRa.L-Lm gC:\Users\Administrator@0` Xoxn30'|DQRa.L-Lym gC:\Windows\system32\@TileEmpty1x1Image.pngZ ` Xbxn30'|DQRa-L-LNA gC:\Windows\ToastData\Windows.SystemToast.AutoPlay.lnkrs XϏyn30'|DQRa-L-L* gC:\Windows\system32\@TileEmpty1x1Image.png X5yn30'|DQRa.L-Lh4 gC:\Windows\system32\@TileEmpty1x1Image.pngV `F X,zn30'|DQRa-L-L)[ gC:\Windows\system32\@TileEmpty1x1Image.png X.zn30'|DQRa.L-L gC:\Windows\system32\@TileEmpty1x1Image.pngl `l XE|n30'|DQRaSISI* g(&IOpI *Ra X!|n30'|DQRa.L-L%q gC:\Windows\ToastData\Windows.SystemToast.AutoPlay.lnk 0`el X|n30'|DQRa-L-L@ gC:\Program Files\Internet Explorer\images\tileLogo.scale-80.pngl XA|n30'|DQRaSISI> g(&IOpI *'|Dl X"|n30'|DQRaSISI" g(&IOpI * X|n30'|DQRa.L-L( gC:\Program Files\Internet Explorer\images\tileLogo.scale-80.png X X}n30'|DQRa-L-L* gC:\Windows\explorer.exe X}n30'|DQRa.L-L gC:\Windows\explorer.exe"cp`  & 8@?8? X}n30'|DQRa-L-L1 gC:\Windows\ToastData\Windows.SystemToast.Devices.lnk X}n30'|DQRa.L-L) gC:\Windows\ToastData\Windows.SystemToast.Devices.lnk p` X~n30'|DQRa-L-L$ gC:\Windows\system32\@TileEmpty1x1Image.png X*~n30'|DQRa.L-LH. gC:\Windows\system32\@TileEmpty1x1Image.pngn 0` XC~n30'|DQRa-L-LZ> gC:\Windows\explorer.exe XD~n30'|DQRa.L-LK? gC:\Windows\explorer.exe!c0` XK~n30'|DQRa-L-L%VD gC:\Windows\ToastData\Windows.SystemToast.Explorer.lnkRa XPZ~n30'|DQRa.L-LZM gC:\Windows\ToastData\Windows.SystemToast.Explorer.lnk\`te X;Un30'|DQRa-L-L6 gC:\Windows\system32\@TileEmpty1x1Image.pngo Xcn30'|DQRa.L-L+ gC:\Windows\system32\@TileEmpty1x1Image.png _ X Xn30'|DQRa-L-LvgC:\Windows\explorer.exe X n30'|DQRa.L-L^wgC:\Windows\explorer.exeOcP` X(n30'|DQRa-L-L|gC:\Windows\ToastData\Windows.SystemToast.OpenWith.lnk2\ Xl7n30'|DQRa.L-LgC:\Windows\ToastData\Windows.SystemToast.OpenWith.lnkp 0` X%n30'|DQRa-L-LV'gC:\Windows\system32\OpenWith.exe}\ XZn30'|DQRa.L-LRgC:\Windows\system32\OpenWith.exeG `P  Xrn30'|DQRa-L-LgC:\Windows\ToastData\Windows.SystemToast.Print.Notification.lnk Xn30'|DQRa.L-L4gC:\Windows\ToastData\Windows.SystemToast.Print.Notification.lnk2P`P, XLn30'|DQRag XBn30'|DQRa-L-L dgC:\Windows\explorer.exe Xgn30'|DQRa.L-L"gC:\Windows\explorer.exeAc` Xn30'|DQRa-L-LgC:\Windows\ToastData\Windows.SystemToast.RasToastNotifier.lnk X*n30'|DQRa.L-Lb%gC:\Windows\ToastData\Windows.SystemToast.RasToastNotifier.lnk P`X X!n30'|DQRa-L-LXgC:\Windows\system32\RasApi32.dll:\W XUn30'|DQRa.L-LgC:\Windows\system32\RasApi32.dllN P`s\w X[n30'|DQRa-L-LQgC:\Windows\ToastData\Windows.SystemToast.Share.lnkU X΁n30'|DQRa.L-LgC:\Windows\ToastData\Windows.SystemToast.Share.lnkHP` XOn30'|DQRa-L-LQ#gC:\Windows\explorer.exe XPn30'|DQRa.L-LJgC:\Windows\explorer.exe:c  Xn30'|DQRa-L-L)gC:\Windows\system32\control.exe Xsn30'|DQRa.L-Ly*gC:\Windows\system32\control.exeA  XMn30'|DQRa-L-LҳgC:\Windows\system32\ServerManager.exeJ Xn30'|DQRa.L-LgC:\Windows\system32\ServerManager.exe  X_ޅn30'|DQRa-L-L9gC:\Program Files\Internet Explorer\images\smallLogo.scale-80.png% Xn30'|DQRa.L-LsrGgC:\Program Files\Internet Explorer\images\smallLogo.scale-80.png `XllLP Xn30'|DQRaUa g Xqn30'|DQRa-L-LgC:\Windows\system32\taskmgr.exe X5sn30'|DQRa.L-LgC:\Windows\system32\taskmgr.exe4 X Xɕn30'|DQRa-L-L gC:\Windows\DesktopTileResources\images\logo.scale-80.png:\Wl Xԕn30'|DQRaSISIg(&IOpI *l XPٕn30'|DQRaSISI+g(&IOpI * XLn30'|DQRa.L-L7[gC:\Windows\DesktopTileResources\images\logo.scale-80.pngH@X\Xۗn30'|DQRa-L-LgC:\Windows\web\wallpaper\Windows\img0.jpg\X|ݗn30'|DQRa.L-LgC:\Windows\web\wallpaper\Windows\img0.jpgM Xo.\Xqn30'|DQRa-L-LgC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper h D' 8`?8 ?\Xn30'|DQRa.L-LaHgC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper @XP XBn30'|DQRa  ~b+gP Xn30'|DQRa  +gT` Xjn30'|DQRaJJ*%=g'|DP` X?ln30'|DQRaJJ%=gTX'n30'|DQRaJJߏ8=gfPXn30'|DQRaJJ 9=gXXn30'|DQRaJJY9=gPXn30'|DQRaJJJ9=gXXn30'|DQRaJJ9=g PX'n30'|DQRaJJ9=gXX8n30'|DQRaJJ9=g PXWn30'|DQRaJJ9=gTX+n30'|DQRa|%^G^g\sPX?n30'|DQRa%%iG^gPXn30'|DQRavvaQ^gPXn30'|DQRawv[R^gPXn30'|DQRavvxS^gPXun30'|DQRawvS^gXFn30'|DQRaymamT^g-ARC: Paused/Resumed root#0 for change notification: Pause=0 Success=1PX$n30'|DQRavvZ^gPX9%n30'|DQRawvϲ[^gPX&n30'|DQRavv\^gPX'n30'|DQRawvM]]^gXp(n30'|DQRaymamB]^g-ARC: Paused/Resumed root#1 for change notification: Pause=0 Success=1\PX81n30'|DQRavv7c^gPX$2n30'|DQRawvo(d^gPX3n30'|DQRavv@e^gPX4n30'|DQRawvNe^gXP5n30'|DQRaymamn30'|DQRawvSl^gPX@n30'|DQRavvm^gPXqAn30'|DQRawv!-n^gX-Bn30'|DQRaymamn^g-ARC: Paused/Resumed root#6 for change notification: Pause=0 Success=1PXlJn30'|DQRavvt^gPXKn30'|DQRawvt^gPXXMn30'|DQRavvku^gPX*Nn30'|DQRawv v^gXNn30'|DQRaymamv^g-ARC: Paused/Resumed root#7 for change notification: Pause=0 Success=1sPXWn30'|DQRavv|^gPXXn30'|DQRawvN}^gPX(Zn30'|DQRavv]~^gPXZn30'|DQRawvS~^gX[n30'|DQRaymamQ^g-ARC: Paused/Resumed root#8 for change notification: Pause=0 Success=1XX[n30'|DQRamm ^g X1\n30'|DQRaymam^g-ARC: RefreshCache: smrcf=0x9\sXa\n30'|DQRaymamy^g-ARC: UpdateCache: smrcf=0x9PXr\n30'|DQRawmm^gPXdn30'|DQRaqmn ݄^glXjn30'|DQRaSISIA^g(&IOpI *-LlXotn30'|DQRaSISI攏^g(&IOpI *lXyn30'|DQRaSISI^g(&IOpI *telX·n30'|DQRaSISIC^g(&IOpI *'|DlXbn30'|DQRaSISI^g(&IOpI *sclXn30'|DQRaSISIq_^g(&IOpI *\slXn30'|DQRaSISIن^g(&IOpI *'|DlXn30'|DQRaSISI8^g(&IOpI *clXn30'|DQRaSISI^g(&IOpI *telXn30'|DQRaSISI ^g(&IOpI *-LlXi.n30'|DQRaSISIZ _g(&IOpI *lXn30'|DQRaSISII_g(&IOpI *PXRn30'|DQRarmn B]_gXn30'|DQRaymamPc_g-ARC: Committing updated cache to disk. Cache size=63320QRahhXn30'|DQRa|mmjMv_gStateChangeXhXn30'|DQRa~mmv_gXhX~n30'|DQRa}mm>{_gfhXn30'|DQRa|mmL|_gAppInstallXhXn30'|DQRa~mmR|_gXhXn30'|DQRa}mmR_gXA n30'|DQRaymamU.lg-ARC: Loading cache to memory after committing updated cache to disk.'|DdXJ n30'|DQRamm ϐ4lg,,32PX;Y n30'|DQRaxmm=lgX n30'|DQRa-L-LeZlgshell:::{4234d49b-0245-4df3-b780-3893943456e1}W @ g}(@ 8@?X n30'|DQRa.L-L\lgshell:::{4234d49b-0245-4df3-b780-3893943456e1}T T` Xq n30'|DQRaJJ`ìg` Xq n30'|DQRa-L-LdĬgC:\Users\Administrator\AppData\Local\Microsoft\Windows\Burn` Xq n30'|DQRa.L-LŬgC:\Users\Administrator\AppData\Local\Microsoft\Windows\Burn6 ЊP` Xq n30'|DQRaJJiƬgT` Xq n30'|DQRaJJɬgX` Xsq n30'|DQRa-L-LʬgC:\Users\Administrator\AppData\Local\Microsoft\Windows\Burn\Burn7B8` Xq n30'|DQRa.L-LYˬgC:\Users\Administrator\AppData\Local\Microsoft\Windows\Burn\Burn/ XP` XPq n30'|DQRaJJWˬgl` X.r n30'|DQRaSISI׬g(&IOpI +RaT` Xr n30'|DQRaJJ Xg Ra` Xbr n30'|DQRa-L-LgC:\Users\Administrator\AppData\Local\Microsoft\Windows\Burn\Burn` X:r n30'|DQRa.L-L~gC:\Users\Administrator\AppData\Local\Microsoft\Windows\Burn\Burn [ pP` Xr n30'|DQRaJJ7gl` Xr n30'|DQRaSISIHg(&IOpI +rl` X r n30'|DQRaSISI(g(&IOpI +isl` X&r n30'|DQRaSISI(g(&IOpI +odl` X>,r n30'|DQRaSISIŘg(&IOpI +l` X1r n30'|DQRaSISIFg(&IOpI +TX9r n30'|DQRaJJIrg'|DPXCgDesktopStartupAppsvX n30'|DQRa%% gDesktopStartupAppsnX n30'|DQRa%%xgCancelDesktopInitializationScenarioX n30'|DQRa%%gCancelDesktopInitializationScenarioX n30'|DQRa%%gSuspendDesktopStartupAppsisX n30'|DQRa%%*gSuspendDesktopStartupAppsftX+ n30'|DQRa%%5gDesktopAndTaskbarRaXQ n30'|DQRa-L-LHgC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User PinnedlXZ n30'|DQRaSISIg(&IOpI +\PlX_h n30'|DQRaSISI4g(&IOpI +pIlXq n30'|DQRaSISIFIg(&IOpI +rs(Xw n30'|DQRa.L-LgC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned p N) 8 ?>Xx n30'|DQRa-L-LgC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Server Manager.lnks^X#{ n30'|DQRa.L-L|gC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Server Manager.lnk8 SIXO n30'|DQRa-L-L/gC:\Windows\system32\ServerManager.exexpXr n30'|DQRa.L-LgC:\Windows\system32\ServerManager.exe ExX= n30'|DQRaQNQNng(&IOpIg ServerManager.exe 0(null)000000X( n30'|DQRa-L-LgC:\Windows\system32\ServerManager.exe-LX5 n30'|DQRa.L-LAQgC:\Windows\system32\ServerManager.exe p`Xښ n30'|DQRaVV"C gC:\Windows\system32\ServerManager.exeXXI n30'|DQRaVVZ ghX( n30'|DQRaVV `g@,Xۡ n30'|DQRa VVjgt C:\Windows\system32\ServerManager.exeFX n30'|DQRa-L-LygC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows PowerShell.lnkfX¥ n30'|DQRa.L-LegC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows PowerShell.lnkL p`BX% n30'|DQRaQNQNrvg(&IOpIg powershell.exe 0(null)000000\WX7Ӟ n30'|DQRaVV(*/gC:\Windows\system32\WindowsPowerShell\v1.0\powershell.exeerXX7מ n30'|DQRaVV=1ghX؞ n30'|DQRaVVO2g@ZXXMڞ n30'|DQRaVV3ghX۞ n30'|DQRaVV4g@ZXܞ n30'|DQRa VV[H5gt C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exeB<X$ޞ n30'|DQRa-L-LeO6gC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnksh\XJ n30'|DQRa.L-Lѷ7gC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnkMX n30'|DQRaVVKg::{52205FD8-5DFB-447D-801A-D0B52F2E83E1}e=5XX n30'|DQRaVVbNghX n30'|DQRaVVOg@XX$ n30'|DQRaVV&QghX n30'|DQRaVV>`Rg@X` n30'|DQRa VVESgt::{52205FD8-5DFB-447D-801A-D0B52F2E83E1}aPX} n30'|DQRaJJOUgXXC n30'|DQRaJJSUg rPX n30'|DQRaJJVgXX2 n30'|DQRaJJWg>P X n30'|DQRa^g X2 n30'|DQRa-L-LmgC:\Windows\system32\ServerManager.exe X4 n30'|DQRa.L-LngC:\Windows\system32\ServerManager.exe OPXC n30'|DQRaJJ(xgXD n30'|DQRa-L-LxygC:\Users\Administrator\DesktopllXS n30'|DQRaSISIg(&IOpI +RaXT n30'|DQRa.L-L[gC:\Users\Administrator\DesktoppU -LXY n30'|DQRa-L-LISgC:\Users\Public\DesktoplXc n30'|DQRaSISI)ʍg(&IOpI +&IlX&j n30'|DQRaSISIg(&IOpI +\WXk n30'|DQRa.L-LgC:\Users\Public\Desktop XUp n30'|DQRa-L-L- gC:\Users\Public\DesktopX6q n30'|DQRa.L-LgC:\Users\Public\Desktop XXq n30'|DQRa JJg |PX?r n30'|DQRaJJRFgX"v n30'|DQRa-L-LՙgC:\Users\Public\DesktopXv n30'|DQRa.L-LTgC:\Users\Public\Desktop XXQw n30'|DQRa JJxg|P\X n30'|DQRaIIjg -b* !8@?8? XП n30'|DQRa3I3I+gC:\Windows\system32\ServerManager.exest X n30'|DQRa4I3I/gC:\Windows\system32\ServerManager.exeinP\XN n30'|DQRa@I@Iw?'gP\XN n30'|DQRa@I@IՉ'gP\XN n30'|DQRa@I@I'gP\XZO n30'|DQRa@I@I (gX\XtO n30'|DQRaHH(g0X\XO n30'|DQRaHH'(g0P\XQ n30'|DQRaIIR)gP\XU n30'|DQRa{H{Hp+g\XXV n30'|DQRaeeƢ,gCDefView::_pCollectionSinkVQ  Xi n30'|DQRa3I3I*gC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe XP n30'|DQRa4I3Ix4gC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe-LP\Xiq n30'|DQRaJJgX\XVr n30'|DQRaJJmg@P\X{w n30'|DQRaIIgP\Xw n30'|DQRaIIgPX n30'|DQRaJJg\Xф n30'|DQRa/L/Lg` X n30'|DQRa0L/Lϲg` C:\Users\Administrator\DesktopXX n30'|DQRa-L-LgC:\Users\Administrator\DesktopX\ n30'|DQRa.L-LOgC:\Users\Administrator\Desktop@; nX n30'|DQRa-L-LnʹgC:\Users\Public\DesktopXԈ n30'|DQRa.L-LNgC:\Users\Public\Desktop PXXP n30'|DQRa JJg$d\Xö n30'|DQRa~g\TtX6 n30'|DQRa%%gDesktopAndTaskbarXxXL n30'|DQRa%%gSignalDesktopSwitchPX n30'|DQRa_j^jgPX n30'|DQRa%%Ѥg