XX  Y % DžZb1/ @tzres.dll,-572@tzres.dll,-571[ ]8ExplorerStartupLogC:\Users\Administrator\AppData\Local\Microsoft\Windows\Explorer\ExplorerStartupLog.etl @ y 8 /P _n30'|DQRa%%HYUP idn30'|DQRa^j^j!CnUP pdn30'|DQRawjwj0^nU )n30'|DQRaymamB\-ARC: AK: Determine if this process has write access to the state store. +n30'|DQRaymam\-ARC: AK: Result hr=0 fHasWriteAccess=1 fSingleSessionEnabled=1 cOtherSessions=0 sessionType=3 Tn30'|DQRa-L-Lc=/aC:\Users\Administrator\AppData\Local\Microsoft\Windows\Application Shortcuts  Xn30'|DQRa.L-Ln30'|DQRaSISI<4(&IOpI  l Bn30'|DQRaSISI4(&IOpI  l Cn30'|DQRaSISI\4(&IOpI  l oDn30'|DQRaSISIY4(&IOpI  l En30'|DQRaSISIg4(&IOpI  l En30'|DQRaSISI,4(&IOpI  l In30'|DQRaSISI"5(&IOpI  l Ln30'|DQRaSISI5(&IOpI  l Mn30'|DQRaSISId5(&IOpI  l )Nn30'|DQRaSISIA5(&IOpI  l Nn30'|DQRaSISI>5(&IOpI  l YOn30'|DQRaSISI5(&IOpI  l lQn30'|DQRaSISIO"5(&IOpI  l Tn30'|DQRaSISIc/5(&IOpI  l Vn30'|DQRaSISI55(&IOpI  l Vn30'|DQRaSISI[75(&IOpI  l \n30'|DQRaSISI>XO5(&IOpI l ^n30'|DQRaSISI+V5(&IOpI l x`n30'|DQRaSISI}^5(&IOpI l an30'|DQRaSISIa5(&IOpI l )dn30'|DQRaSISIBm5(&IOpI l fn30'|DQRaSISILw5(&IOpI l fhn30'|DQRaSISI85~5(&IOpI l in30'|DQRaSISI4Ѐ5(&IOpI l in30'|DQRaSISI1I5(&IOpI l ;jn30'|DQRaSISI5(&IOpI l qn30'|DQRaSISI5(&IOpI l tn30'|DQRaSISI5(&IOpI l tn30'|DQRaSISI5(&IOpI l un30'|DQRaSISIװ5(&IOpI l un30'|DQRaSISIV5(&IOpI   Z 8/8/l vn30'|DQRaSISI%5(&IOpI l ?xn30'|DQRaSISI˜5(&IOpI l |n30'|DQRaSISIW5(&IOpI l 6}n30'|DQRaSISI~w5(&IOpI l }n30'|DQRaSISI5(&IOpI l n~n30'|DQRaSISIU5(&IOpI l n30'|DQRaSISI"5(&IOpI l ;n30'|DQRaSISI~5(&IOpI l n30'|DQRaSISI?5(&IOpI l |n30'|DQRaSISI5(&IOpI l n30'|DQRaSISI5(&IOpI l vn30'|DQRaSISIu5(&IOpI l n30'|DQRaSISINV5(&IOpI l yn30'|DQRaSISIM6(&IOpI l 9n30'|DQRaSISI 6(&IOpI l n30'|DQRaSISI<6(&IOpI l n30'|DQRaSISI=6(&IOpI l n30'|DQRaSISI6(&IOpI l n30'|DQRaSISI%6(&IOpI  ºn30'|DQRa-L-L6C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Documents.library-msl n30'|DQRaSISIr6(&IOpI l n30'|DQRaSISI6(&IOpI   n30'|DQRa.L-L,w6C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Documents.library-ms0yl n30'|DQRaSISI66(&IOpI l bn30'|DQRaSISI9%6(&IOpI  n30'|DQRa-L-LN6C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Documents.library-msl n30'|DQRaSISIVj6(&IOpI l n30'|DQRaSISI~7(&IOpI l n30'|DQRaSISIx7(&IOpI   n30'|DQRa.L-L  7C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Documents.library-ms n30'|DQRa-L-L!^+7knownfolder:{FDD39AD0-238F-46AF-ADB4-6C85480369C7} n30'|DQRa-L-L+7C:\Users\Administrator\Documentsl Pn30'|DQRaSISIf17(&IOpI  n30'|DQRa.L-L27C:\Users\Administrator\Documents@P n30'|DQRa.L-L27knownfolder:{FDD39AD0-238F-46AF-ADB4-6C85480369C7}p\ 8n30'|DQRa/L/LI}57 =n30'|DQRa0L/L57C:\Users\Administrator\Desktop\ Ln30'|DQRa/L/L57 On30'|DQRa0L/LV57C:\Users\Administrator\Desktop hn30'|DQRa-L-L>7C:\Users\Administrator\Documents n30'|DQRa.L-L7C:\Users\Administrator\Documents\ pn30'|DQRa-L-L_7\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\Documents n30'|DQRa.L-L{7\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\Documents\ Sn30'|DQRa-L-L7\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\Documents n30'|DQRa.L-L#7\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\Documents n30'|DQRa-L-L<7shell:::{20D04FE0-3AEA-1069-A2D8-08002B30309D}\::{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}  n30'|DQRa.L-L17shell:::{20D04FE0-3AEA-1069-A2D8-08002B30309D}\::{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0} n30'|DQRa-L-L87C:\Users\Administrator\Documents n30'|DQRa.L-L 7C:\Users\Administrator\Documents\ n30'|DQRa-L-L7\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\Documents n30'|DQRa.L-LM7\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\Documents\  xh x 808/ n30'|DQRa-L-L7\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\Documents n30'|DQRa.L-L7\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\DocumentsP n30'|DQRa-L-L7\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\Documents n30'|DQRa.L-LXn7\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\Documents\ l n30'|DQRaSISIx7(&IOpI l : n30'|DQRaSISI%8(&IOpI l n30'|DQRaSISII8(&IOpI l R n30'|DQRaSISI 8(&IOpI l n30'|DQRaSISI 8(&IOpI l C n30'|DQRaSISI 8(&IOpI l n30'|DQRaSISI8(&IOpI l n30'|DQRaSISIx38(&IOpI l Mn30'|DQRaSISI!8(&IOpI l n30'|DQRaSISIuL$8(&IOpI  n30'|DQRa-L-L$8C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recentl /n30'|DQRaSISI)Z)8(&IOpI l n30'|DQRaSISIQ.8(&IOpI l kn30'|DQRaSISIJ28(&IOpI  n30'|DQRa.L-L338C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent s l n30'|DQRaSISIX<8(&IOpI l :n30'|DQRaSISI$I8(&IOpI l n30'|DQRaSISIP8(&IOpI l n30'|DQRaSISIoS8(&IOpI l Jn30'|DQRaSISIU8(&IOpI l n30'|DQRaSISI~_8(&IOpI l "n30'|DQRaSISIg8(&IOpI l E#n30'|DQRaSISIi8(&IOpI l #n30'|DQRaSISI;k8(&IOpI  o)n30'|DQRa-L-L{f8C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Pictures.library-msl *n30'|DQRaSISIvf8(&IOpI l ,n30'|DQRaSISI<8(&IOpI l ,n30'|DQRaSISI½8(&IOpI  j-n30'|DQRa.L-LG8C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Pictures.library-ms sPl /n30'|DQRaSISI8!8(&IOpI  3n30'|DQRa-L-L8C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Pictures.library-msl h4n30'|DQRaSISI;8(&IOpI l 5n30'|DQRaSISID̳8(&IOpI l 6n30'|DQRaSISI9.8(&IOpI  =7n30'|DQRa.L-L8C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Pictures.library-ms 9n30'|DQRa-L-L8knownfolder:{33E28130-4E1E-4676-835A-98395C3BC3BB} 9n30'|DQRa-L-L8C:\Users\Administrator\Picturesl ;n30'|DQRaSISI78(&IOpI  ;n30'|DQRa.L-LP8C:\Users\Administrator\Pictures ;n30'|DQRa.L-Lv8knownfolder:{33E28130-4E1E-4676-835A-98395C3BC3BB} p \ (<n30'|DQRa/L/L=8 ,<n30'|DQRa0L/LN8C:\Users\Administrator\Desktop\ 9<n30'|DQRa/L/L=8 ;<n30'|DQRa0L/LЉ8C:\Users\Administrator\Desktop f<n30'|DQRa-L-L38C:\Users\Administrator\Pictures <n30'|DQRa.L-LF8C:\Users\Administrator\Pictures0qp q?n30'|DQRa-L-LVc8\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\Pictures  ?n30'|DQRa.L-Ly`8\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\Pictures\0!    8 08/ I@n30'|DQRa-L-L8\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\Pictures  ~@n30'|DQRa.L-L×8\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\Pictures0q @n30'|DQRa-L-L 8shell:::{20D04FE0-3AEA-1069-A2D8-08002B30309D}\::{3ADD1653-EB32-4CB0-BBD7-DFA0ABB5ACCA}  zBn30'|DQRa.L-L8shell:::{20D04FE0-3AEA-1069-A2D8-08002B30309D}\::{3ADD1653-EB32-4CB0-BBD7-DFA0ABB5ACCA}@!0! Bn30'|DQRa-L-L8C:\Users\Administrator\Pictures Bn30'|DQRa.L-L8C:\Users\Administrator\Pictures0q0! Cn30'|DQRa-L-Lf8\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\Pictures  Cn30'|DQRa.L-LyF8\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\Pictures\ xDn30'|DQRa-L-L~8\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\Pictures  Dn30'|DQRa.L-LF8\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\Pictures0q0! VEn30'|DQRa-L-L8\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\Pictures  En30'|DQRa.L-L8\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\Pictures\!l Mn30'|DQRaSISI89(&IOpI l On30'|DQRaSISI߭9(&IOpI l On30'|DQRaSISI9(&IOpI l !Pn30'|DQRaSISIB"9(&IOpI l Pn30'|DQRaSISI9(&IOpI l Qn30'|DQRaSISI 9(&IOpI l Tn30'|DQRaSISII/9(&IOpI l Vn30'|DQRaSISI69(&IOpI l Wn30'|DQRaSISI89(&IOpI l Wn30'|DQRaSISI:9(&IOpI l Xn30'|DQRaSISI!<9(&IOpI l Xn30'|DQRaSISI>9(&IOpI l \n30'|DQRaSISI*L9(&IOpI l ]n30'|DQRaSISIhT9(&IOpI l ^n30'|DQRaSISI6V9(&IOpI l _n30'|DQRaSISIX9(&IOpI l _n30'|DQRaSISIZ9(&IOpI l `n30'|DQRaSISI\9(&IOpI l an30'|DQRaSISIb9(&IOpI l cn30'|DQRaSISIj9(&IOpI l dn30'|DQRaSISIm9(&IOpI l dn30'|DQRaSISIZo9(&IOpI l 8en30'|DQRaSISI|q9(&IOpI l en30'|DQRaSISIFs9(&IOpI  jn30'|DQRa-L-L9C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Videos.library-msl kn30'|DQRaSISI99(&IOpI l (mn30'|DQRaSISI=9(&IOpI l nn30'|DQRaSISI9(&IOpI  nn30'|DQRa.L-L 9C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Videos.library-ms s l pn30'|DQRaSISIߛ9(&IOpI  tn30'|DQRa-L-L9C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Videos.library-msl un30'|DQRaSISI`9(&IOpI l vn30'|DQRaSISIL9(&IOpI l wn30'|DQRaSISIr9(&IOpI  Vxn30'|DQRa.L-L9C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Videos.library-ms s (zn30'|DQRa-L-L4<9knownfolder:{18989B1D-99B5-455B-841C-AB7C74E4DDFC} 6zn30'|DQRa-L-L]s9C:\Users\Administrator\Videosl {n30'|DQRaSISIF9(&IOpI  {n30'|DQRa.L-Ln9C:\Users\Administrator\Videos0q    8@080 {n30'|DQRa.L-L39knownfolder:{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\p\ |n30'|DQRa/L/L9P |n30'|DQRa0L/LQ9PC:\Users\Administrator\Desktop\ '|n30'|DQRa/L/L:9P *|n30'|DQRa0L/L6D9PC:\Users\Administrator\Desktop U|n30'|DQRa-L-L9C:\Users\Administrator\Videos |n30'|DQRa.L-L9C:\Users\Administrator\Videos`p  Kn30'|DQRa-L-L9\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\Videos n30'|DQRa.L-Li9\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\Videos n30'|DQRa-L-L9\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\Videos Nn30'|DQRa.L-L9\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\Videos`0 _n30'|DQRa-L-L9shell:::{20D04FE0-3AEA-1069-A2D8-08002B30309D}\::{A0953C92-50DC-43BF-BE83-3742FED03C9C}  An30'|DQRa.L-L09shell:::{20D04FE0-3AEA-1069-A2D8-08002B30309D}\::{A0953C92-50DC-43BF-BE83-3742FED03C9C} !p n30'|DQRa-L-L۵9C:\Users\Administrator\Videos n30'|DQRa.L-L9C:\Users\Administrator\Videosp  tn30'|DQRa-L-Ll9\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\Videos n30'|DQRa.L-L=R9\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\VideosИp  <n30'|DQRa-L-Ls9\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\Videos nn30'|DQRa.L-LV9\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\VideosPP n30'|DQRa-L-L^.9\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\Videos Vn30'|DQRa.L-L9\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\Videosp  n30'|DQRa-L-L :C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Music.library-ms ]n30'|DQRa.L-L:C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Music.library-ms| l n30'|DQRaSISIV:(&IOpI  Ôn30'|DQRa-L-LĪ/:C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Music.library-msl qn30'|DQRaSISIa2:(&IOpI l ϖn30'|DQRaSISI7:(&IOpI l n30'|DQRaSISIHZ;:(&IOpI  En30'|DQRa.L-L=:C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Music.library-ms sp  n30'|DQRa-L-LD:knownfolder:{4BD8D571-6D19-48D3-BE97-422220080E43} n30'|DQRa-L-LMD:C:\Users\Administrator\Musicl n30'|DQRaSISI7J:(&IOpI  n30'|DQRa.L-LJfK:C:\Users\Administrator\Music`n  n30'|DQRa.L-L{K:knownfolder:{4BD8D571-6D19-48D3-BE97-422220080E43}\\ n30'|DQRa/L/LLNL: n30'|DQRa0L/L_L:C:\Users\Administrator\Desktop\ n30'|DQRa/L/LL: n30'|DQRa0L/LL:C:\Users\Administrator\Desktop +n30'|DQRa-L-LHM:C:\Users\Administrator\Music jn30'|DQRa.L-LFN:C:\Users\Administrator\Music` n30'|DQRa-L-L/X:\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\Music Mn30'|DQRa.L-LwY:\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\Music p F  8`08 0 n30'|DQRa-L-L.\:\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\Music n30'|DQRa.L-L]:\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\Music@!p +n30'|DQRa-L-LnH]:shell:::{20D04FE0-3AEA-1069-A2D8-08002B30309D}\::{1CF1260C-4DD0-4EBB-811F-33C572699FDE}  n30'|DQRa.L-Ld:shell:::{20D04FE0-3AEA-1069-A2D8-08002B30309D}\::{1CF1260C-4DD0-4EBB-811F-33C572699FDE}Ћ!  Vn30'|DQRa-L-Le:C:\Users\Administrator\Music n30'|DQRa.L-Lf:C:\Users\Administrator\Music\p Fn30'|DQRa-L-L^i:\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\Music ~n30'|DQRa.L-L9j:\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\Music\ n30'|DQRa-L-Ll:\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\Music <n30'|DQRa.L-L^m:\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\Music  n30'|DQRa-L-Lr:p:\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\Music n30'|DQRa.L-Lp:\\?\Volume{bb251ca9-84dc-11e8-80b3-806e6f6e6963}\Users\Administrator\Music\ l n30'|DQRaSISI:(&IOpI l n30'|DQRaSISIc:(&IOpI l ]n30'|DQRaSISI:(&IOpI l n30'|DQRaSISIXS:(&IOpI l n30'|DQRaSISIh:(&IOpI l n30'|DQRaSISI:(&IOpI l n30'|DQRaSISIZ:(&IOpI l =n30'|DQRaSISI!:(&IOpI  %n30'|DQRa-L-L2?C:\Users\Administrator\Searches\Indexed Locations.search-msl tn30'|DQRaSISI3{?(&IOpI l qn30'|DQRaSISI`?(&IOpI  n30'|DQRa.L-L?C:\Users\Administrator\Searches\Indexed Locations.search-ms-pl Qn30'|DQRaSISI?(&IOpI  n30'|DQRa-L-Lk?C:\Users\Administrator\Searches\Everywhere.search-msl n30'|DQRaSISI#??(&IOpI l n30'|DQRaSISIU?(&IOpI  ,n30'|DQRa.L-LL?C:\Users\Administrator\Searches\Everywhere.search-mspl n30'|DQRaSISI@(&IOpI  O n30'|DQRa-L-L @shell:::{323CA680-C24D-4099-B94D-446DD2D7249E} j n30'|DQRa-L-LF@C:\Users\Administrator\Desktopl n30'|DQRaSISI`-@(&IOpI  n30'|DQRa.L-Lr@C:\Users\Administrator\DesktopЄp n30'|DQRa-L-Lj@C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries 4n30'|DQRa.L-Lm@C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries|  @n30'|DQRa-L-Lޞ@C:\Users\Administrator\Documentsl n30'|DQRaSISI$@(&IOpI  n30'|DQRa.L-LX@C:\Users\Administrator\Documents  n30'|DQRa-L-L@C:\Users\Administrator\Musicl "n30'|DQRaSISI#&@(&IOpI  5n30'|DQRa.L-Lr@C:\Users\Administrator\Music! En30'|DQRa-L-L>@C:\Users\Administrator\Picturesl n30'|DQRaSISI)@(&IOpI  n30'|DQRa.L-Lcn@C:\Users\Administrator\Picturesн n30'|DQRa-L-Lq@C:\Users\Administrator\Videosl #n30'|DQRaSISI'@(&IOpI  5n30'|DQRa.L-L\p@C:\Users\Administrator\Videos0up  F  808@0 Gn30'|DQRa-L-L@C:\Users\Administrator\Downloadsl n30'|DQRaSISIB@(&IOpI  n30'|DQRa.L-L J@C:\Users\Administrator\Downloads`0~ n30'|DQRa-L-L @C:\Users\Administrator n30'|DQRa.L-Lh @C:\Users\Administrator { n30'|DQRa.L-LW{ @shell:::{323CA680-C24D-4099-B94D-446DD2D7249E}Pl Zn30'|DQRaSISIM&@(&IOpI l kn30'|DQRaSISIeJ.@(&IOpI l ,n30'|DQRaSISIL1@(&IOpI l n30'|DQRaSISI3@(&IOpI  n30'|DQRa-L-L6<@C:\Users\Administrator\Linksl "n30'|DQRaSISIq%A@(&IOpI l n30'|DQRaSISIE@(&IOpI  Fn30'|DQRa.L-LjE@C:\Users\Administrator\Links@*00P n30'|DQRavvyWL@P n30'|DQRawvCL@P Fn30'|DQRavvgM@P [n30'|DQRawvN@ n30'|DQRa-L-LhO@C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recentl sn30'|DQRaSISIVjV@(&IOpI l Hn30'|DQRaSISIQY@(&IOpI  n30'|DQRa.L-L>[@C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent@!  4n30'|DQRa-L-L%@C:\Users\Administrator\Links\RecentPlaces.lnk 4n30'|DQRa.L-L߯@C:\Users\Administrator\Links\RecentPlaces.lnk` 4n30'|DQRa-L-LHw@C:\Users\Administrator\Links\RecentPlaces.lnk 6n30'|DQRa.L-L @C:\Users\Administrator\Links\RecentPlaces.lnkR0 l 8n30'|DQRaSISIq@(&IOpI \ (9n30'|DQRa/L/L<@ ,9n30'|DQRa0L/L*]@C:\Users\Administrator\Desktop\ 69n30'|DQRa/L/Lt@f 9n30'|DQRa0L/Ly@LhbP 9n30'|DQRavv[@P 9n30'|DQRawvH@P 9:n30'|DQRavvρ@P N:n30'|DQRawv|@\ :n30'|DQRa/L/L7G@f ;n30'|DQRa0L/L@Lhb\ !;n30'|DQRa/L/L4"@ %;n30'|DQRa0L/L1@C:\Users\Administrator\Desktop\ 0=n30'|DQRa/L/L\@ 3=n30'|DQRa0L/L$i@C:\Users\Administrator\Desktop =n30'|DQRa-L-L0@C:\Users\Administrator\Desktopl N>n30'|DQRaSISI@(&IOpI l K?n30'|DQRaSISID@(&IOpI  z?n30'|DQRa.L-L@C:\Users\Administrator\Desktop0! s@n30'|DQRa-L-L*k@C:\Users\Administrator\Links\Desktop.lnk @n30'|DQRa.L-LH@C:\Users\Administrator\Links\Desktop.lnk`0 @n30'|DQRa-L-Le@C:\Users\Administrator\Links\Desktop.lnkl #Bn30'|DQRaSISIc+@(&IOpI  Bn30'|DQRa.L-Lx@C:\Users\Administrator\Links\Desktop.lnkR00!l Dn30'|DQRaSISI3@(&IOpI  Dn30'|DQRa-L-L-@shell:::{20D04FE0-3AEA-1069-A2D8-08002B30309D}\::{374DE290-123F-4565-9164-39C4925E467B}  Fn30'|DQRa.L-L9@shell:::{20D04FE0-3AEA-1069-A2D8-08002B30309D}\::{374DE290-123F-4565-9164-39C4925E467B}0!0 aGn30'|DQRa-L-L"@C:\Users\Administrator\Downloadsl Hn30'|DQRaSISI@(&IOpI l In30'|DQRaSISIA(&IOpI  ;In30'|DQRa.L-LAC:\Users\Administrator\Downloads0P In30'|DQRavvLAP In30'|DQRawvA  X  808`0P Jn30'|DQRavvVAP +Jn30'|DQRawvGA Jn30'|DQRa-L-LAC:\Users\Administrator\Downloads Jn30'|DQRa.L-LAC:\Users\Administrator\DownloadsP00 ~Mn30'|DQRa-L-LPAC:\Users\Administrator\Downloads Mn30'|DQRa.L-LAC:\Users\Administrator\Downloads0 .Vn30'|DQRa-L-LV5AC:\Users\Administrator\Links\Downloads.lnk ]Vn30'|DQRa.L-L6AC:\Users\Administrator\Links\Downloads.lnk`P Vn30'|DQRa-L-LK6AC:\Users\Administrator\Links\Downloads.lnkl Xn30'|DQRaSISIn30'|DQRaDC:\Windows\System32\rundll32.exe ?n30'|DQRa[DC:\Windows\System32\rundll32.exe ?n30'|DQRa>^DC:\Windows\System32\rundll32.exe Dn30'|DQRa%%j'D(&IOpIM rundll32.exe00000000  X 8080 n30'|DQRa%% "O "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iesetup.dll",IEHardenAdmin )n30'|DQRaTS%@O{A509B1A7-37EF-4b3f-8CFC-4F3A74704073}Administrator 0n30'|DQRaSS\O{A509B1A8-37EF-4b3f-8CFC-4F3A74704073}Administrator n30'|DQRa%% O"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iesetup.dll",IEHardenUser n30'|DQRa-L-L\OC:\Windows\System32\rundll32.exe un30'|DQRa.L-LpOC:\Windows\System32\rundll32.exeP1@@ n30'|DQRaPC:\Windows\System32\rundll32.exe | n30'|DQRamPC:\Windows\System32\rundll32.exe | n30'|DQRaPC:\Windows\System32\rundll32.exe pn30'|DQRa%%6`"P(&IOpIM rundll32.exe00000000 NFn30'|DQRa%% P "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iesetup.dll",IEHardenUser Fn30'|DQRaTS3P{A509B1A8-37EF-4b3f-8CFC-4F3A74704073}Administrator Fn30'|DQRaSSOP{C9E9A340-D1F1-11D0-821E-444553540600}Administrator Fn30'|DQRaSSP{de5aed00-a4bf-11d1-9948-00c04f98bbc9}Administrator Fn30'|DQRaSSP{E92B03AB-B707-11d2-9CBD-0000F87A369E}AdministratorP Fn30'|DQRaUU PP Fn30'|DQRaVU4P Fn30'|DQRaRQ2CPSoftware\Microsoft\Active Setup\Installed ComponentsP Fn30'|DQRaPOFPP In30'|DQRa%%QP Jn30'|DQRa%%QT cMn30'|DQRa|%*QP dMn30'|DQRa%%-QP mMn30'|DQRa%%QQX Pn30'|DQRamm ͦQO Pn30'|DQRaymamQQ-ARC: RefreshCache: smrcf=0x4fP Qn30'|DQRaJJ֬"QX cTn30'|DQRaJJ ).Q 2Un30'|DQRa-L-LWe1QC:\Users\Administrator\AppData\Local\Microsoft\Windows\Application Shortcutsl Xn30'|DQRaSISIQ=Q(&IOpI   bXn30'|DQRa.L-L&>QC:\Users\Administrator\AppData\Local\Microsoft\Windows\Application ShortcutsP 2@0P Yn30'|DQRaJJBQX Yn30'|DQRaJJDCQ Yn30'|DQRaymam)9CQ-ARC: Registered root#0 for change notification: id=0 TZn30'|DQRa-L-LEQC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menul ]n30'|DQRaSISI(PQ(&IOpI  @]n30'|DQRa.L-LDQQC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu20P ^n30'|DQRaJJVQX ^n30'|DQRaJJcVQ ^n30'|DQRaymamVVQ-ARC: Registered root#1 for change notification: id=1 2_n30'|DQRa-L-LodYQC:\ProgramData\Microsoft\Windows\Start Menul "`n30'|DQRaSISIc$]Q(&IOpI l an30'|DQRaSISIbaQ(&IOpI  Xan30'|DQRa.L-LuaQC:\ProgramData\Microsoft\Windows\Start Menu1`1P an30'|DQRaJJcQX an30'|DQRaJJzcQ an30'|DQRaymamL dQ-ARC: Registered root#3 for change notification: id=2P [bn30'|DQRaJJVfQX fbn30'|DQRaJJ5fQ kbn30'|DQRaymamBHfQ-ARC: Registered root#6 for change notification: id=3 $cn30'|DQRa-L-L4/iQC:\Users\Public\Desktopl hdn30'|DQRaSISIQ( {n30'|DQRa-L-L^%QC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned(( {n30'|DQRa.L-LQC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned60X( |n30'|DQRa JJ^VQ P( D}n30'|DQRavvήQP( [}n30'|DQRawv QP( ~}n30'|DQRavvEQP( }n30'|DQRawvQP( }n30'|DQRavvfQP( }n30'|DQRawv1QP( }n30'|DQRavvQP( }n30'|DQRawvMZQP( ~n30'|DQRavvQP( ~n30'|DQRawvQP( ;~n30'|DQRavvQP( M~n30'|DQRawvQP( l~n30'|DQRavvNQP( ~~n30'|DQRawv[Q ( 0( 8 180 men30'|DQRaymamPrQ-ARC: Registered root#7 for change notification: id=4 Vfn30'|DQRa-L-LuQC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinnedl in30'|DQRaSISIQ(&IOpI ( in30'|DQRa.L-LQC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned0 0P jn30'|DQRaJJQX jn30'|DQRaJJEQ jn30'|DQRaymamgaQ-ARC: Registered root#8 for change notification: id=5 jn30'|DQRaymamsQ-ARC: UpdateCache: smrcf=0x4fP jn30'|DQRawmmjvQP Aon30'|DQRaqmn Ql pn30'|DQRaSISI\-Q(&IOpI l n30'|DQRaSISIoQ(&IOpI l Zn30'|DQRaSISIQ(&IOpI l n30'|DQRaSISIEQ(&IOpI l n30'|DQRaSISIcQ(&IOpI l On30'|DQRaSISIQ(&IOpI  r xn30'|DQRa-L-L}QC:\Program Filesl 5n30'|DQRaSISIpQ(&IOpI ! [n30'|DQRa.L-Lg QC:\Program Files0 n30'|DQRamn SC:\Program Files\Internet Explorer\VisualElementsManifest.xmlNULL n30'|DQRamn WSC:\Program Files\Internet Explorer\iexplore.VisualElementsManifest.xmlNULLx n30'|DQRaTdPx n30'|DQRa!TdPP n30'|DQRavvg%TP n30'|DQRawvC4TP n30'|DQRavv\H4TP n30'|DQRawvV4T Fn30'|DQRa-L-L5TC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs  -n30'|DQRa.L-L4cATC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\ProgramsP59 vn30'|DQRa-L-LxwRTC:\ProgramData\Microsoft\Windows\Start Menu\Programsl in30'|DQRaSISICZT(&IOpI ! n30'|DQRa.L-L[TC:\ProgramData\Microsoft\Windows\Start Menu\Programs 0%9l n30'|DQRaSISIF`T(&IOpI " v!n30'|DQRamm vbTInternet ExplorerMicrosoft.InternetExplorer.Default !n30'|DQRazmmbTMicrosoft.InternetExplorer.Default #n30'|DQRa-L-LjTC:\Windows\system32\magnify.exe #n30'|DQRa.L-LPkTC:\Windows\system32\magnify.exe06` 9 +n30'|DQRa-L-LTC:\Windows\system32\magnify.exe +n30'|DQRa.L-LLTC:\Windows\system32\magnify.exe6@%9 .n30'|DQRa3I3IuTC:\Windows\system32\magnify.exe >in30'|DQRa4I3IUC:\Windows\system32\magnify.exe^ YKn30'|DQRamnL YNULL JP Kn30'|DQRavvS YP On30'|DQRawvܿYP On30'|DQRavvYP On30'|DQRawv6Y +Rn30'|DQRamm K%Y>e'Y\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\magnify.exe8 :Rn30'|DQRazmm%Y{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\magnify.exe Rn30'|DQRa-L-L b'YC:\Windows\system32\narrator.exe Rn30'|DQRa.L-L'YC:\Windows\system32\narrator.exe69 )Vn30'|DQRa-L-L@5YC:\Windows\system32\narrator.exe OVn30'|DQRa.L-Lo5YC:\Windows\system32\narrator.exep6@9 Xn30'|DQRa3I3I=?YC:\Windows\system32\narrator.exe En30'|DQRa4I3IydC:\Windows\system32\narrator.exe^ n30'|DQRamn0dNULL JP Nn30'|DQRavv1dP Sn30'|DQRawvM1d  ˥= 8`18 1P Xn30'|DQRavv1dP Zn30'|DQRawv 2d n30'|DQRamm ;jdC:\Windows\system32\osk.exe n30'|DQRa.L-L'?dC:\Windows\system32\osk.exe!9 n30'|DQRa-L-LvLdC:\Windows\system32\osk.exe 0n30'|DQRa.L-L]MdC:\Windows\system32\osk.exe!@%9 n30'|DQRa3I3I^WdC:\Windows\system32\osk.exe yn30'|DQRa4I3IfC:\Windows\system32\osk.exe^ Yn30'|DQRamnDDiNULL JP "Zn30'|DQRavvx%EiP 'Zn30'|DQRawvZ:EiP (Zn30'|DQRavv6=EiP *Zn30'|DQRawv EEi \n30'|DQRamm 1OiO\U^.v{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\osk.exe8 \n30'|DQRazmm>Oi{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\osk.exe ^n30'|DQRa-L-LiRWiC:\Windows\system32\notepad.exe ^n30'|DQRa.L-LWiC:\Windows\system32\notepad.exe`6`#9 n30'|DQRa-L-LC:\Windows\system32\dfrgui.exe in30'|DQRa.L-LCC:\Windows\system32\dfrgui.exe@61 fn30'|DQRa3I3I6ƒC:\Windows\system32\dfrgui.exe n30'|DQRa4I3IC:\Windows\system32\dfrgui.exe^ /n30'|DQRamn[1NULL{P gn30'|DQRavv92P mn30'|DQRawv&O2P mn30'|DQRavvQ2P on30'|DQRawvY2 n30'|DQRamm Е8xGrtetTOSqRhV{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\dfrgui.exe8 n30'|DQRazmm8{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\dfrgui.exe `n30'|DQRa-L-L>C:\Windows\system32\eventvwr.msc n30'|DQRa.L-L>C:\Windows\system32\eventvwr.msc61 #Tn30'|DQRa-L-Li(-C:\Windows\system32\eventvwr.msc KTn30'|DQRa.L-Lt-C:\Windows\system32\eventvwr.msc61^ ]Zn30'|DQRamn FNULL JP Zn30'|DQRavvFP Zn30'|DQRawvFP Zn30'|DQRavvFP Zn30'|DQRawvF \n30'|DQRamm 3KONNg whVMicrosoft.AutoGenerated.{4AB0E8D6-94A9-84BA-B051-FE8D294BD68C}8 \n30'|DQRazmmOMicrosoft.AutoGenerated.{4AB0E8D6-94A9-84BA-B051-FE8D294BD68C} gn30'|DQRa-L-L]yC:\Windows\system32\iscsicpl.exe Hgn30'|DQRa.L-LyC:\Windows\system32\iscsicpl.exew6 n30'|DQRa-L-L}bC:\Windows\system32\iscsicpl.exe n30'|DQRa.L-LfcC:\Windows\system32\iscsicpl.exe{6  n30'|DQRa3I3IjC:\Windows\system32\iscsicpl.exe n30'|DQRa4I3I|C:\Windows\system32\iscsicpl.exe^ Ln30'|DQRamn9NULL JP n30'|DQRavvi:P n30'|DQRawvS:P n30'|DQRavvq:P n30'|DQRawv: n30'|DQRamm @iSCSI Sw z^{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\iscsicpl.exe8 !n30'|DQRazmm A{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\iscsicpl.exe n30'|DQRa-L-L1DC:\Windows\system32\MdSched.exe @n30'|DQRa.L-LEC:\Windows\system32\MdSched.exey6  <6n30'|DQRa-L-LΌC:\Windows\system32\MdSched.exe f6n30'|DQRa.L-L7C:\Windows\system32\MdSched.exe06   !{ 8181 ^8n30'|DQRa3I3IrC:\Windows\system32\MdSched.exe ;Mn30'|DQRa4I3IC:\Windows\system32\MdSched.exe^ xPn30'|DQRamn|NULLYYYP Pn30'|DQRavvOP Pn30'|DQRawvdP Pn30'|DQRavvzgP Pn30'|DQRawvWo GRn30'|DQRamm %Windows QX[ʋe{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\MdSched.exe8 XRn30'|DQRazmm%{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\MdSched.exe BUn30'|DQRa-L-L61C:\Windows\syswow64\odbcad32.exe iUn30'|DQRa.L-LC2C:\Windows\syswow64\odbcad32.exe{6  02n30'|DQRa-L-LH_C:\Windows\syswow64\odbcad32.exe _2n30'|DQRa.L-LC:\Windows\syswow64\odbcad32.exey6  4n30'|DQRa3I3I bC:\Windows\syswow64\odbcad32.exe 8n30'|DQRa4I3I~C:\Windows\syswow64\odbcad32.exe^ n30'|DQRamn1NULL JP n30'|DQRavvP n30'|DQRawveP n30'|DQRavvVP n30'|DQRawv& n30'|DQRamm ǚODBC pencn(32 MO){D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\odbcad32.exe8 n30'|DQRazmmW{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\odbcad32.exe n30'|DQRa-L-L)㞟C:\Windows\system32\odbcad32.exe n30'|DQRa.L-L}C:\Windows\system32\odbcad32.exew6  n30'|DQRa-L-L7C:\Windows\system32\odbcad32.exe n30'|DQRa.L-Ld`8C:\Windows\system32\odbcad32.exew6p n30'|DQRa3I3I5?C:\Windows\system32\odbcad32.exe $n30'|DQRa4I3I -5C:\Windows\system32\odbcad32.exe^ n30'|DQRamnGNULL JP ՚n30'|DQRavvGP ܚn30'|DQRawv HP ݚn30'|DQRavvHP ߚn30'|DQRawvdH en30'|DQRamm p3NODBC pencn(64 MO){1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\odbcad32.exe8 rn30'|DQRazmmCfN{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\odbcad32.exe nn30'|DQRa-L-LWRC:\Windows\system32\perfmon.msc n30'|DQRa.L-LRC:\Windows\system32\perfmon.msc06 m)n30'|DQRa-L-LlRC:\Windows\system32\perfmon.msc )n30'|DQRa.L-LC:\Windows\system32\perfmon.msc6p^ Lzn30'|DQRamnťNULL{P zn30'|DQRavvhƥP zn30'|DQRawvFƥP zn30'|DQRavvjƥP zn30'|DQRawvƥ |n30'|DQRamm Υ'`vƉhVMicrosoft.AutoGenerated.{693A7C49-B19D-9E69-556A-06CB01C234C2}8 |n30'|DQRazmmϥMicrosoft.AutoGenerated.{693A7C49-B19D-9E69-556A-06CB01C234C2} }n30'|DQRa-L-LҥC:\Windows\system32\perfmon.exe }n30'|DQRa.L-LКӥC:\Windows\system32\perfmon.exe6 %n30'|DQRa-L-L0C:\Windows\system32\perfmon.exe Mn30'|DQRa.L-LrC:\Windows\system32\perfmon.exe6  n30'|DQRa3I3IwC:\Windows\system32\perfmon.exe yn30'|DQRa4I3IC:\Windows\system32\perfmon.exe^ n30'|DQRamnNULL{P n30'|DQRavvɤP n30'|DQRawvܤP n30'|DQRavvߤP n30'|DQRawvD礧 n30'|DQRamm ޮDnvƉhVMicrosoft.AutoGenerated.{8B5B34DF-CB74-294D-5DE2-53C565924C57}8 n30'|DQRazmmMicrosoft.AutoGenerated.{8B5B34DF-CB74-294D-5DE2-53C565924C57}  z 8281 n30'|DQRa-L-L*AC:\Windows\system32\secpol.msc n30'|DQRa.L-L鳧C:\Windows\system32\secpol.msc6P n30'|DQRa-L-L*C:\Windows\system32\secpol.msc n30'|DQRa.L-LqU+C:\Windows\system32\secpol.mscw6P ^ dn30'|DQRamn-2NULLYYYP n30'|DQRavv>3P n30'|DQRawv_3P n30'|DQRavv3P n30'|DQRawv=3 n30'|DQRamm + ;,g0W[hQV{euMicrosoft.AutoGenerated.{59C53B9F-8C05-CE7D-3F33-F762FAF86526}8 n30'|DQRazmmKW;Microsoft.AutoGenerated.{59C53B9F-8C05-CE7D-3F33-F762FAF86526} n30'|DQRa-L-L_@C:\Windows\system32\scw.exe 1n30'|DQRa.L-L`AC:\Windows\system32\scw.exe!  n30'|DQRa-L-LXC:\Windows\system32\scw.exe :n30'|DQRa.L-LYC:\Windows\system32\scw.exe!  .n30'|DQRa3I3I{VaC:\Windows\system32\scw.exe $n30'|DQRa4I3I,C:\Windows\system32\scw.exe^ ;n30'|DQRamn˰NULLYYYP <n30'|DQRavvṴP <n30'|DQRawv̰P <n30'|DQRavv'̰P <n30'|DQRawvh̰ =n30'|DQRamm "Ӱ[hQMnT[{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\scw.exe8 =n30'|DQRazmmӰ{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\scw.exe >n30'|DQRa-L-LװC:\Windows\system32\ServerManager.exe >n30'|DQRa.L-LNsذC:\Windows\system32\ServerManager.exe;0  n30'|DQRa-L-LQC:\Windows\system32\ServerManager.exe n30'|DQRa.L-LɄC:\Windows\system32\ServerManager.exe79  n30'|DQRa3I3I_C:\Windows\system32\ServerManager.exe n30'|DQRa4I3IC C:\Windows\system32\ServerManager.exe^ n30'|DQRamn%NULL JP 1n30'|DQRavv>aP 6n30'|DQRawvRtP 7n30'|DQRavv4wP 8n30'|DQRawvW~ ِn30'|DQRamm   gRhV{thV{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\ServerManager.exe8 n30'|DQRazmm9 {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\ServerManager.exe n30'|DQRa-L-L;$C:\Windows\system32\services.msc n30'|DQRa.L-L$C:\Windows\system32\services.mscp6P  %n30'|DQRa-L-L/mC:\Windows\system32\services.msc Qn30'|DQRa.L-LmC:\Windows\system32\services.mscp6 ^ n30'|DQRamnNULLP n30'|DQRavvoP n30'|DQRawvP n30'|DQRavv4P n30'|DQRawv n30'|DQRamm Ɍ gR{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\services.msc8 n30'|DQRazmm {1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\services.msc n30'|DQRa-L-LѐC:\Windows\system32\msconfig.exe 5n30'|DQRa.L-L+sC:\Windows\system32\msconfig.exe6: n30'|DQRa-L-LC:\Windows\system32\msconfig.exe n30'|DQRa.L-L&C:\Windows\system32\msconfig.exe6 : n30'|DQRa3I3I!JC:\Windows\system32\msconfig.exe n30'|DQRa4I3I'ZC:\Windows\system32\msconfig.exe^ "n30'|DQRamn8&hNULL JP #n30'|DQRavvhP #n30'|DQRawviP #n30'|DQRavv iP #n30'|DQRawv!i $n30'|DQRamm 9o|~Mn{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\msconfig.exe8 p@ p 8 281 $n30'|DQRazmmto{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\msconfig.exe %n30'|DQRa-L-L[sC:\Windows\system32\msinfo32.exe %n30'|DQRa.L-LsC:\Windows\system32\msinfo32.exe6`: ~n30'|DQRa-L-LY>C:\Windows\system32\msinfo32.exe n30'|DQRa.L-L@?C:\Windows\system32\msinfo32.exe6: n30'|DQRa3I3IFC:\Windows\system32\msinfo32.exe }n30'|DQRa4I3IC:\Windows\system32\msinfo32.exe^ n30'|DQRamnrNULL JP n30'|DQRavvsP n30'|DQRawvsP n30'|DQRavvsP n30'|DQRawvs xn30'|DQRamm }z|~Oo`{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\msinfo32.exe8 n30'|DQRazmmz{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\msinfo32.exe n30'|DQRa-L-LC:\Windows\system32\taskschd.msc n30'|DQRa.L-L2C:\Windows\system32\taskschd.msc6: ;n30'|DQRa-L-LŠC:\Windows\system32\taskschd.msc dn30'|DQRa.L-Lg-C:\Windows\system32\taskschd.msc6:^ fn30'|DQRamn6NULLYYYP n30'|DQRavvP n30'|DQRawvP n30'|DQRavvP n30'|DQRawv5 n30'|DQRamm gNRR z^Microsoft.AutoGenerated.{78016EAF-FAFF-4BD8-4884-2C8250D2671E}8 n30'|DQRazmm/Microsoft.AutoGenerated.{78016EAF-FAFF-4BD8-4884-2C8250D2671E} n30'|DQRa-L-LC:\Windows\system32\WF.msc n30'|DQRa.L-L(/C:\Windows\system32\WF.msc@!` : $n30'|DQRa-L-LM--C:\Windows\system32\WF.msc Mn30'|DQRa.L-L -C:\Windows\system32\WF.msc@!` :^ n30'|DQRamnCNULLG&P n30'|DQRavvDP n30'|DQRawv DP n30'|DQRavvDP n30'|DQRawv*D Un30'|DQRamm Iؚ~[hQ Windows 2kpX{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WF.msc8 bn30'|DQRazmm%J{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WF.mscx 5n30'|DQRa-L-LsQC:\Windows\SysWOW64 n30'|DQRa.L-LfTC:\Windows\SysWOW643 : - n30'|DQRa3I3IQ C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe n30'|DQRa4I3I$$C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe^ wn30'|DQRamnzNULL JP n30'|DQRavvdP n30'|DQRawvzP n30'|DQRavv}P n30'|DQRawvJ n30'|DQRaymamUfhRecentShortcutAdd: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows PowerShell (x86).lnk  mn30'|DQRamm NRWindows PowerShell (x86){D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\WindowsPowerShell\v1.0\powershell.exe0 n30'|DQRazmm{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\WindowsPowerShell\v1.0\powershell.exe n30'|DQRa-L-L#C:\Windows\syswow64\WindowsPowerShell\v1.0\PowerShell_ISE.exe n30'|DQRa.L-LrC:\Windows\syswow64\WindowsPowerShell\v1.0\PowerShell_ISE.exe: n30'|DQRa-L-LBC:\Windows\syswow64\WindowsPowerShell\v1.0\PowerShell_ISE.exe n30'|DQRa.L-L C:\Windows\syswow64\WindowsPowerShell\v1.0\PowerShell_ISE.exe: ~Tn30'|DQRa3I3I@.C:\Windows\syswow64\WindowsPowerShell\v1.0\PowerShell_ISE.exe !| 8@282 mn30'|DQRa4I3IC:\Windows\syswow64\WindowsPowerShell\v1.0\PowerShell_ISE.exe^ sn30'|DQRamnNULLP Psn30'|DQRavvܩP Usn30'|DQRawvUP Vsn30'|DQRavv@P Wsn30'|DQRawv0 tn30'|DQRamm rWindows PowerShell ISE (x86){D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\WindowsPowerShell\v1.0\PowerShell_ISE.exe8 un30'|DQRazmm{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\WindowsPowerShell\v1.0\PowerShell_ISE.exe vn30'|DQRa-L-LC:\Windows\system32\WindowsPowerShell\v1.0\PowerShell_ISE.exe ;vn30'|DQRa.L-LыC:\Windows\system32\WindowsPowerShell\v1.0\PowerShell_ISE.exe9 zn30'|DQRa-L-LC:\Windows\system32\WindowsPowerShell\v1.0\PowerShell_ISE.exe {n30'|DQRa.L-LC:\Windows\system32\WindowsPowerShell\v1.0\PowerShell_ISE.exe` : |n30'|DQRa3I3I+C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell_ISE.exe n30'|DQRa4I3IC:\Windows\system32\WindowsPowerShell\v1.0\PowerShell_ISE.exe^ n30'|DQRamn+~,NULLP ,n30'|DQRavvnL-P 1n30'|DQRawv_-P 1n30'|DQRavvb-P 3n30'|DQRawvi-$ n30'|DQRamm H3Windows PowerShell ISE{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WindowsPowerShell\v1.0\PowerShell_ISE.exe8 ͕n30'|DQRazmm3{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WindowsPowerShell\v1.0\PowerShell_ISE.exe ǖn30'|DQRa-L-L7C:\Windows\system32\wbadmin.msc n30'|DQRa.L-L]8C:\Windows\system32\wbadmin.msc6: n30'|DQRa-L-LFC:\Windows\system32\wbadmin.msc n30'|DQRa.L-L(GC:\Windows\system32\wbadmin.msc06 :^ n30'|DQRamnZNULLP ßn30'|DQRavv[P ȟn30'|DQRawvݽ[P ɟn30'|DQRavv[P ˟n30'|DQRawv3[ 6n30'|DQRamm "vaWindows Server Backup{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\wbadmin.msc8 Cn30'|DQRazmma{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\wbadmin.msc Ѥn30'|DQRa-L-LoC:\Windows\system32\taskmgr.exe n30'|DQRa.L-L|pC:\Windows\system32\taskmgr.exe06 : qn30'|DQRa-L-L"aC:\Windows\system32\taskmgr.exe n30'|DQRa.L-LC:\Windows\system32\taskmgr.exe6 : n30'|DQRa3I3In&C:\Windows\system32\taskmgr.exe n30'|DQRa4I3IJC:\Windows\system32\taskmgr.exe^ On30'|DQRamn*NULLP _On30'|DQRavvP Rn30'|DQRawv"&P Rn30'|DQRavv&P Rn30'|DQRawvx& Tn30'|DQRamm 0NR{thVMicrosoft.AutoGenerated.{5E8FC15D-96C5-8C7D-B1AF-2757B67E4C6D}8 Tn30'|DQRazmm<\0Microsoft.AutoGenerated.{5E8FC15D-96C5-8C7D-B1AF-2757B67E4C6D}x Vn30'|DQRa-L-L7C:\Windows\system32 Wn30'|DQRa.L-Lc;C:\Windows\system3239 _n30'|DQRa3I3IXC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe an30'|DQRa4I3IbcC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe^ n30'|DQRamnZNULL JP #n30'|DQRavv(P (n30'|DQRawv;P )n30'|DQRavv>P *n30'|DQRawv1F. n30'|DQRaymam!CUfhRecentShortcutAdd: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Windows PowerShell.lnk   828@2PH %?n30'|DQRa%%2H Mn30'|DQRa-L-LC:\Windows\system32\ServerManager.exeH CMn30'|DQRa.L-LΫC:\Windows\system32\ServerManager.exe>07PH Mn30'|DQRaamnLPH On30'|DQRabmn@H WPn30'|DQRa-L-LfC:\Windows\system32\ServerManager.exeH Pn30'|DQRa.L-LzC:\Windows\system32\ServerManager.exe>7PH Pn30'|DQRaamn PH Qn30'|DQRabmn$2H Rn30'|DQRa-L-L(C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcutsRH &Vn30'|DQRa.L-L65C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts0>7H +Wn30'|DQRa-L-LI9C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned(H Yn30'|DQRa.L-LSgCC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinnedp47 H Zn30'|DQRa-L-LLOGC:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Server Manager.lnk*H _n30'|DQRa.L-LZC:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Server Manager.lnkp>7H >`n30'|DQRa-L-L]C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative ToolsH bn30'|DQRa.L-L2hC:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Toolsh=7H cn30'|DQRa-L-L[lC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\:H fn30'|DQRa.L-L۶wC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\ >7 H fn30'|DQRa-L-LxC:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Server Manager.lnk*H bjn30'|DQRa.L-L%C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Server Manager.lnkp>7XH mn30'|DQRa-L-L?ٓC:\xH mn30'|DQRa.L-LC:\p9p7XH Vpn30'|DQRa-L-L#C:\xH bpn30'|DQRa.L-L&C:\97PH dsn30'|DQRavvm+PH sn30'|DQRawvnTH [wn30'|DQRaJJc >H cwn30'|DQRa-L-L'+C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Server Manager.lnk^H wn30'|DQRa.L-L.C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Server Manager.lnk@{P7PH wn30'|DQRaJJelH xn30'|DQRaSISIs(&IOpI &TH {n30'|DQRaJJ H {n30'|DQRa-L-L C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar8H !|n30'|DQRa.L-L!C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar ?p7PH 0|n30'|DQRaJJ]lH m|n30'|DQRaSISI+R(&IOpI &TH s|n30'|DQRaJJ@j PH ~n30'|DQRaJJTH n30'|DQRaJJ6PH n30'|DQRaJJl H _n30'|DQRaIIC:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Server Manager.lnkC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Server Manager.lnkTH n30'|DQRaJJRSPH n30'|DQRaJJ   8282 H n30'|DQRa-L-LRC:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Server Manager.lnklH n30'|DQRaSISIOr(&IOpI &lH گn30'|DQRaSISI|(&IOpI &lH n30'|DQRaSISI(&IOpI &*H 5n30'|DQRa.L-LtC:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Server Manager.lnk>7>H dn30'|DQRa-L-LF-C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Server Manager.lnklH n30'|DQRaSISI|(&IOpI &lH n30'|DQRaSISIl(&IOpI &lH n30'|DQRaSISI(&IOpI &lH xn30'|DQRaSISI|(&IOpI &^H -n30'|DQRa.L-L QC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Server Manager.lnk>7TH kn30'|DQRaJJ:J H xn30'|DQRa-L-L|C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar8H n30'|DQRa.L-LnC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar0?7PH ĺn30'|DQRaJJlH n30'|DQRaSISIۋ(&IOpI &TH n30'|DQRaJJo PH n30'|DQRaJJlH (n30'|DQRaSISIf<(&IOpI &H zn30'|DQRa-L-LC:\Windows\system32\ServerManager.exeH n30'|DQRa.L-LC:\Windows\system32\ServerManager.exe>7PH !n30'|DQRaamn!PH n30'|DQRabmnH &n30'|DQRa-L-L6C:\Program Files\Common FileslH n30'|DQRaSISI66(&IOpI &H rn30'|DQRa.L-LQyC:\Program Files\Common FilesP3p7H n30'|DQRa-L-LC:\Program Files (x86)\Common FilesH n30'|DQRa.L-LnC:\Program Files (x86)\Common Files=7~H n30'|DQRa-L-L|C:\Program Files (x86)H n30'|DQRa.L-LC:\Program Files (x86)pr:7H (n30'|DQRa-L-Lp>C:\Users\Administrator\AppData\RoaminglH n30'|DQRaSISIr(&IOpI &H n30'|DQRa.L-L}g C:\Users\Administrator\AppData\Roaming0,37nH n30'|DQRa-L-LyC:\ProgramDataH n30'|DQRa.L-LLC:\ProgramDatap=7fH wn30'|DQRa-L-LyC:\WindowsH n30'|DQRa.L-L@C:\Windows 707~H n30'|DQRa-L-LC:\Users\AdministratorH n30'|DQRa.L-L0C:\Users\Administratorp>7H n30'|DQRa-L-LC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick LaunchlH <n30'|DQRaSISIp!(&IOpI &lH %n30'|DQRaSISIx1%(&IOpI &H Rn30'|DQRa.L-L%C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch`z=7H bn30'|DQRa-L-L%&C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick LaunchH n30'|DQRa.L-L .C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick LaunchP}=P7TH n30'|DQRaJJ4PH n30'|DQRaJJ5TH n30'|DQRaJJ_ 5PH n30'|DQRaJJP7lH cn30'|DQRaUU+:(&IOpIN H Pn30'|DQRa-L-L=C:\Windows\system32\ServerManager.exeH vn30'|DQRa.L-Lv>C:\Windows\system32\ServerManager.exe>7 Q 8282PH n30'|DQRaamnv@PH n30'|DQRabmnTDTH n30'|DQRaJJ5FPH n30'|DQRaJJ[FTH n30'|DQRaJJFPH *n30'|DQRaJJEIlH n30'|DQRaSISI2L(&IOpI &PH fn30'|DQRaamn5ZPH n30'|DQRabmnS[PH n30'|DQRaamnLgPH n30'|DQRabmnhH @n30'|DQRa-L-LqC:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Windows PowerShell.lnklH n30'|DQRaSISIu(&IOpI &lH n30'|DQRaSISIEx(&IOpI &lH n30'|DQRaSISIz(&IOpI &"H n30'|DQRa.L-L5C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Windows PowerShell.lnka?7H n30'|DQRa-L-LBC:\ProgramData\Microsoft\Windows\Start Menu\Programs\System ToolsH n30'|DQRa.L-L؊C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools!P7H n30'|DQRa-L-LnjC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\:H n30'|DQRa.L-LwC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\ >7H n30'|DQRa-L-LC:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Windows PowerShell.lnk"H n30'|DQRa.L-LC:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Windows PowerShell.lnk47XH n30'|DQRa-L-LFC:\xH -n30'|DQRa.L-LSC:\9p7XH n30'|DQRa-L-LXC:\xH n30'|DQRa.L-LL C:\U?7PH Mn30'|DQRavvҽPH jn30'|DQRawvUTH n30'|DQRaJJn{FH n30'|DQRa-L-LC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows PowerShell.lnkfH <n30'|DQRa.L-LnC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows PowerShell.lnk`{P7PH Mn30'|DQRaJJyTH n30'|DQRaJJPH n30'|DQRaJJ H !n30'|DQRaII"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Windows PowerShell.lnkC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows PowerShell.lnkTH n30'|DQRaJJPH n30'|DQRaJJm2H n30'|DQRa-L-LC:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Windows PowerShell.lnk"H n30'|DQRa.L-LFC:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Windows PowerShell.lnk407PH 9n30'|DQRaamnPH n30'|DQRabmn"TH n30'|DQRaJJPH n30'|DQRaJJjWTH n30'|DQRaJJYPH  n30'|DQRaJJֻlH n30'|DQRaUU> (&IOpIN PH n30'|DQRaamn)!PH n30'|DQRabmn#>TH n30'|DQRaJJPH n30'|DQRaJJ TH n30'|DQRaJJM#PH 0n30'|DQRaJJ]\lH !n30'|DQRaSISI !(&IOpI &PH n30'|DQRaamn *PH Gn30'|DQRabmn-H n30'|DQRa-L-L?C:\Users\Administrator\SearcheslH tn30'|DQRaSISImF(&IOpI &H n30'|DQRa.L-LGC:\Users\Administrator\Searches@=7 0 Q0 8`28 2 n30'|DQRamm QWindows PowerShell{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WindowsPowerShell\v1.0\powershell.exe0 )n30'|DQRazmmn@{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\WindowsPowerShell\v1.0\powershell.exel n30'|DQRaSISIR(&IOpI %P n30'|DQRarmn W n30'|DQRaymam@-ARC: Committing updated cache to disk. Cache size=56104 n30'|DQRaymam^+-ARC: Loading cache to memory after committing updated cache to disk.` vn30'|DQRamm u> Z n30'|DQRaymam7-ARC: Change notify=8192; Item: (40000000) C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs; need scan=0 4n30'|DQRaymam5mE-ARC: Updated state store. Rebalanced=0, Commit hr=0x0. Cn30'|DQRa-L-LEshell:::{4234d49b-0245-4df3-b780-3893943456e1} Xn30'|DQRa.L-L*Ishell:::{4234d49b-0245-4df3-b780-3893943456e1}@9:T an30'|DQRaJJJP rn30'|DQRaJJfJ vn30'|DQRaymamtJ-ARC: Notify UPDATEDIR: 42 items changed during folder scan.T vn30'|DQRaJJvJP ,n30'|DQRaJJҌd ,n30'|DQRamm *+P 44n30'|DQRaxmmkl =n30'|DQRa%%6(&IOpIP >n30'|DQRa%%P v>n30'|DQRa%%v ~n30'|DQRaymam-ARC: RefreshCache: smrcf=0x10 ~n30'|DQRaymam'-ARC: Change notify=2; Item: (40010000) C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Server Manager.lnk; need scan=1 Bn30'|DQRaymamE-ARC: Change notify=8192; Item: (40000000) C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar; need scan=0 on30'|DQRaymamW-ARC: RefreshCache: smrcf=0x10 vn30'|DQRaymam u-ARC: Change notify=8192; Item: (40010000) C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Server Manager.lnk; need scan=1 n30'|DQRaymam/1-ARC: RefreshCache: smrcf=0x10 n30'|DQRaymamOS-ARC: Change notify=2; Item: (40010000) C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Server Manager.lnk; need scan=1 |n30'|DQRaymam/-ARC: Change notify=8192; Item: (40000000) C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar; need scan=0 n30'|DQRaymam2-ARC: RefreshCache: smrcf=0x10 n30'|DQRaymamK-ARC: Change notify=8192; Item: (40010000) C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Server Manager.lnk; need scan=1 n30'|DQRaymam-ARC: RefreshCache: smrcf=0x10 n30'|DQRaymam-ARC: Change notify=2; Item: (40010000) C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows PowerShell.lnk; need scan=1 On30'|DQRaymamBC-ARC: RefreshCache: smrcf=0x10 On30'|DQRaymam\-ARC: Change notify=2; Item: (40010000) C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk; need scan=1 ;Pn30'|DQRaymamȇ-ARC: Change notify=8192; Item: (40000000) C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar; need scan=0 `Pn30'|DQRaymam-ARC: RefreshCache: smrcf=0x10  Q  8382H n30'|DQRa-L-LHC:\Users\Administrator\ContactslH wn30'|DQRaSISIzN(&IOpI &H n30'|DQRa.L-LAOC:\Users\Administrator\ContactsY:07H n30'|DQRa-L-LOC:\Users\Administrator\FavoriteslH +n30'|DQRaSISIKU(&IOpI &H Vn30'|DQRa.L-LUC:\Users\Administrator\Favorites=7H n30'|DQRa-L-Lm`WC:\Users\Administrator\DocumentslH  n30'|DQRaSISI`\(&IOpI &H 6 n30'|DQRa.L-Lt]C:\Users\Administrator\Documents`=07H x n30'|DQRa-L-L~^C:\Users\Administrator\Saved GameslH !n30'|DQRaSISIc(&IOpI &H !n30'|DQRa.L-L`dC:\Users\Administrator\Saved Games#17~H h#n30'|DQRa-L-Ld>jC:\Users\AdministratorH H$n30'|DQRa.L-LMmC:\Users\Administrator0>7PH I'n30'|DQRaamnyPH (n30'|DQRabmn|(H @*n30'|DQRa-L-L0C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnklH ,n30'|DQRaSISIVɏ(&IOpI &lH -n30'|DQRaSISIó(&IOpI &HH 2n30'|DQRa.L-LC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk`|P7H 3n30'|DQRa-L-LsrC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools$H 7n30'|DQRa.L-L1C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools?07H 7n30'|DQRa-L-LC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\:H T:n30'|DQRa.L-LcC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\0l>p7(H f:n30'|DQRa-L-L5C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnkHH =n30'|DQRa.L-L^)C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk|7XH @n30'|DQRa-L-LMC:\xH @n30'|DQRa.L-LC:\97XH #Cn30'|DQRa-L-L*C:\xH /Cn30'|DQRa.L-Lm[C:\@}7PH En30'|DQRavvgPH Fn30'|DQRawv!TH In30'|DQRaJJ7<H In30'|DQRa-L-LWWC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk\H Jn30'|DQRa.L-LEC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk{7PH Jn30'|DQRaJJpTH Ln30'|DQRaJJl H Mn30'|DQRa-L-LuC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar8H AMn30'|DQRa.L-LC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar}` {PH OMn30'|DQRaJJlH Mn30'|DQRaSISI(&IOpI &TH Mn30'|DQRaJJ PH On30'|DQRaJJTH On30'|DQRaJJ4PH On30'|DQRaJJ _(H RPn30'|DQRaIIC:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnkC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk H Q 8@181P( ~n30'|DQRavv QP( ~n30'|DQRawvkQP( ~n30'|DQRavvQP( ~n30'|DQRawva6QP( n30'|DQRavvQP( n30'|DQRawvQP( 0n30'|DQRavvI\QP( An30'|DQRawvxQP( Zn30'|DQRavvQP( kn30'|DQRawvHQX( %n30'|DQRaJJBqs P( %n30'|DQRaJJ4sT( {n30'|DQRaJJJP( +n30'|DQRaJJyT( +n30'|DQRaJJ͊P( ,n30'|DQRaJJT( wn30'|DQRaJJѻP( wn30'|DQRaJJ3T( ;|n30'|DQRaJJa P( |n30'|DQRaJJ&T( |n30'|DQRaJJ? X( }n30'|DQRaJJP( L~n30'|DQRaJJX( N~n30'|DQRaJJ P( T~n30'|DQRaJJX( V~n30'|DQRaJJ P( Z~n30'|DQRaJJdP( ~n30'|DQRaJJT( n30'|DQRaJJuP( .n30'|DQRaJJST( ­n30'|DQRaJJP( ŭn30'|DQRaJJT( ̺n30'|DQRaJJ P( n30'|DQRaJJT( n30'|DQRaJJ\ X( Fn30'|DQRaJJζP( n30'|DQRaJJ^X( n30'|DQRaJJ)f P( n30'|DQRaJJyX( n30'|DQRaJJn P( n30'|DQRaJJ7P( n30'|DQRaJJT( *n30'|DQRaJJD5P( /n30'|DQRaJJY5T( 3n30'|DQRaJJgg5P( n30'|DQRaJJK7T( n30'|DQRaJJ8GP( n30'|DQRaJJHGT( n30'|DQRaJJeGP( n30'|DQRaJJIT( Wn30'|DQRaJJP( n30'|DQRaJJT( n30'|DQRaJJ"P( Fn30'|DQRaJJhT( n30'|DQRaJJYP( n30'|DQRaJJdT( n30'|DQRaJJחP( n30'|DQRaJJT( n30'|DQRaJJX( 7 n30'|DQRaJJWyP( n30'|DQRaJJP( n30'|DQRaJJKT( n30'|DQRaJJYP( n30'|DQRaJJjT( n30'|DQRaJJ wP( "n30'|DQRaJJ%T( Jn30'|DQRaJJ P( EJn30'|DQRaJJT( Mn30'|DQRaJJ P( Mn30'|DQRaJJT( Mn30'|DQRaJJD1 X( On30'|DQRaJJP( On30'|DQRaJJLX( On30'|DQRaJJ P( On30'|DQRaJJX( On30'|DQRaJJ P( On30'|DQRaJJoP( On30'|DQRaJJT( On30'|DQRaJJP( (Pn30'|DQRaJJ;T( Qn30'|DQRaJJ#P( Qn30'|DQRaJJR#T( ]n30'|DQRaJJ S P( ]n30'|DQRaJJ+TT( ]n30'|DQRaJJAT X( _n30'|DQRaJJXP( z_n30'|DQRaJJZZX( |_n30'|DQRaJJZ P( _n30'|DQRaJJZX( _n30'|DQRaJJԥZ P( _n30'|DQRaJJZP( _n30'|DQRaJJ[T( fn30'|DQRaJJxP( fn30'|DQRaJJO(xT( fn30'|DQRaJJ6xP( Tgn30'|DQRaJJ-yT( *on30'|DQRaJJC X S" 8@383TH Qn30'|DQRaJJzA#PH Qn30'|DQRaJJs#(H Qn30'|DQRa-L-LT$C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnklH Rn30'|DQRaSISI'(&IOpI &lH (Tn30'|DQRaSISI<-(&IOpI &lH Tn30'|DQRaSISI0(&IOpI &lH Un30'|DQRaSISI*3(&IOpI &lH \Vn30'|DQRaSISI 6(&IOpI &HH Wn30'|DQRa.L-L 8C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk? {<H 4Wn30'|DQRa-L-Ll9C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnklH Yn30'|DQRaSISIl5C(&IOpI &lH Zn30'|DQRaSISInF(&IOpI &\H ;[n30'|DQRa.L-LֈIC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk{ {TH 9]n30'|DQRaJJoQ H F]n30'|DQRa-L-LQC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar8H ]n30'|DQRa.L-LRC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar}@{PH ]n30'|DQRaJJ+RlH ]n30'|DQRaSISIrS(&IOpI &TH ]n30'|DQRaJJ:S PH _n30'|DQRaJJ\lH an30'|DQRaSISIc(&IOpI &PH Bcn30'|DQRaamn]iPH cn30'|DQRabmn `lTH fn30'|DQRaJJZwPH fn30'|DQRaJJrwTH fn30'|DQRaJJwPH agn30'|DQRaJJrzlH kn30'|DQRaUU|`(&IOpIN PH mn30'|DQRaamn!PH Xnn30'|DQRabmnTH on30'|DQRaJJaҘPH on30'|DQRaJJ TH on30'|DQRaJJUPH on30'|DQRaJJCPH pn30'|DQRaemnPH pn30'|DQRasmnPH pn30'|DQRatmnPH !pn30'|DQRafmn!PH n30'|DQRaII PH n30'|DQRaII TH n30'|DQRaJJO/PH n30'|DQRaJJc/PH Ԗn30'|DQRaIIy7PH n30'|DQRaII8PH %n30'|DQRaII.9PH n30'|DQRaIIKKPH n30'|DQRaIILPH n30'|DQRaIIkMPH Cn30'|DQRaII@MPH n30'|DQRaII,^PH ؠn30'|DQRa%%_PH qn30'|DQRa%%=H sn30'|DQRa3V3V(&IOpIk 000000000H sn30'|DQRa3V3VҪ(&IOpIk 000000000lH sn30'|DQRaUUA(&IOpIglH tn30'|DQRa&V&V6(&IOpIPH n30'|DQRaUU_lH n30'|DQRaUUx(&IOpIglH n30'|DQRa&V&V(&IOpIPH n30'|DQRaUUpPH n30'|DQRa?V?VXlH n30'|DQRa9V9VS;(&IOpIPH n30'|DQRa%%@lH 7n30'|DQRa_N_NH{A(&IOpIPH :n30'|DQRa%%APH n30'|DQRa%% lH n30'|DQRa=V=V(&IOpIqlH n30'|DQRa44,(&IOpI*lH n30'|DQRaUU+(&IOpI)lH n30'|DQRaUU2(&IOpIlH n30'|DQRaUU9(&IOpI( P ^Y&P 8383P as n30'|DQRaa )@ Qn30'|DQRaymam$--ARC: Paused/Resumed root#0 for change notification: Pause=1 Success=1@ Sn30'|DQRaymam)--ARC: Paused/Resumed root#1 for change notification: Pause=1 Success=1@ Tn30'|DQRaymam,--ARC: Paused/Resumed root#3 for change notification: Pause=1 Success=1@ Un30'|DQRaymam0--ARC: Paused/Resumed root#6 for change notification: Pause=1 Success=1@ Un30'|DQRaymamnd4--ARC: Paused/Resumed root#7 for change notification: Pause=1 Success=1@ Vn30'|DQRaymam :8--ARC: Paused/Resumed root#8 for change notification: Pause=1 Success=1T `n30'|DQRaHH^1*P bn30'|DQRaHHd1T@ &n30'|DQRa|%ʕw\P@ &n30'|DQRa%%w\@ o(n30'|DQRaymamZ~\-ARC: Paused/Resumed root#0 for change notification: Pause=0 Success=1@ )n30'|DQRaymamR\-ARC: Paused/Resumed root#1 for change notification: Pause=0 Success=1@ *n30'|DQRaymam\-ARC: Paused/Resumed root#3 for change notification: Pause=0 Success=1@ ,n30'|DQRaymam'\-ARC: Paused/Resumed root#6 for change notification: Pause=0 Success=1@ 5-n30'|DQRaymamxp\-ARC: Paused/Resumed root#7 for change notification: Pause=0 Success=1@ P.n30'|DQRaymameܕ\-ARC: Paused/Resumed root#8 for change notification: Pause=0 Success=1X@ W.n30'|DQRamm \ @ \.n30'|DQRaymam \-ARC: RefreshCache: smrcf=0x9@ d.n30'|DQRaymam.\-ARC: UpdateCache: smrcf=0x9P@ e.n30'|DQRawmm2\P@ /n30'|DQRaqmn ؚ\l@ j0n30'|DQRaSISI4G\(&IOpI &l@ 1n30'|DQRaSISI(\(&IOpI &l@ h2n30'|DQRaSISI?\(&IOpI &l@ O4n30'|DQRaSISIg\(&IOpI &l@ 4n30'|DQRaSISIe\(&IOpI &l@ 5n30'|DQRaSISID\(&IOpI &l@ 8n30'|DQRaSISI/\(&IOpI &l@ 8n30'|DQRaSISI2\(&IOpI &l@ Dn30'|DQRaSISI\(&IOpI &l@ MEn30'|DQRaSISIJ\(&IOpI &l@ Fn30'|DQRaSISI"\(&IOpI &l@ 3In30'|DQRaSISIg](&IOpI &l@ In30'|DQRaSISI](&IOpI &l@ Ln30'|DQRaSISI](&IOpI &l@ Xn30'|DQRaSISI>](&IOpI &@ in30'|DQRamn ]Microsoft.Windows.ExplorerP@ jn30'|DQRavvs]P@ Fon30'|DQRawv]P@ Gon30'|DQRavv丙]P@ Kon30'|DQRawv@ə]@ Dqn30'|DQRamm ]eNDn{thVMicrosoft.Windows.Explorer@ Qqn30'|DQRazmm]Microsoft.Windows.Explorer@ qn30'|DQRa-L-L]C:\Windows\system32\ServerManager.exe@ qn30'|DQRa.L-Lؕ]C:\Windows\system32\ServerManager.exe>W @ Ywn30'|DQRa-L-L]C:\Windows\system32\ServerManager.exe@ wn30'|DQRa.L-L]C:\Windows\system32\ServerManager.exe50d @ \yn30'|DQRa3I3I]C:\Windows\system32\ServerManager.exe@ {n30'|DQRa4I3I1]C:\Windows\system32\ServerManager.exe^@ x~n30'|DQRamn|]NULL JP@ ~n30'|DQRavvsX]P@ ~n30'|DQRawvk]P@ ~n30'|DQRavvn]P@ ~n30'|DQRawv4v]@ ΀n30'|DQRamm ] gRhV{thV{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\ServerManager.exe@ ܀n30'|DQRazmm]{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\ServerManager.exe x 8% 838`3P\ n30'|DQRa#P z[ n30'|DQRaJ) n30'|DQRa-L-L*shell:::{98F275B4-4FFF-11E0-89E2-7B86DFD72085} n30'|DQRa.L-L+shell:::{98F275B4-4FFF-11E0-89E2-7B86DFD72085}= = X !n30'|DQRaLM$/Szl !n30'|DQRaSISI{(&IOpI & G!n30'|DQRa-L-L{C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Librariesl M!n30'|DQRaSISI{(&IOpI &l !n30'|DQRaSISI{(&IOpI & !n30'|DQRa.L-L#{C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries5@A^  !n30'|DQRa-L-L/{C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Music.library-ms !n30'|DQRa.L-L:{C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Music.library-msp> `B^  !n30'|DQRa-L-LfG{C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Videos.library-ms !n30'|DQRa.L-LR{C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Videos.library-ms[ @^  !n30'|DQRa-L-L`{C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Pictures.library-ms !n30'|DQRa.L-L$Uk{C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Pictures.library-ms3[ >^  X"n30'|DQRa-L-L>}C:\Users\Administrator\Favoritesl 1Z"n30'|DQRaSISICaE}(&IOpI & eZ"n30'|DQRa.L-L1F}C:\Users\Administrator\FavoritesV >^  "n30'|DQRa-L-L(~shell:::{98F275B4-4FFF-11E0-89E2-7B86DFD72085} "n30'|DQRa.L-L*~shell:::{98F275B4-4FFF-11E0-89E2-7B86DFD72085}H^ `B^ X "n30'|DQRaLM|>~ "n30'|DQRa-L-L#C:\Windows\system32\eventvwr.msc "n30'|DQRa.L-LPoC:\Windows\system32\eventvwr.msc; p  UN#n30'|DQRa-L-LC:\Windows\system32\secpol.msc }N#n30'|DQRa.L-LGC:\Windows\system32\secpol.msc; p  U#n30'|DQRa-L-L74C:\Windows\system32\taskmgr.exe V#n30'|DQRa.L-L4C:\Windows\system32\taskmgr.exe@; p  ]#n30'|DQRa-L-LofSC:\Windows\system32\perfmon.msc ]#n30'|DQRa.L-L TC:\Windows\system32\perfmon.msc; pp  e#n30'|DQRa-L-LqC:\Windows\system32\taskschd.msc Ie#n30'|DQRa.L-LOqC:\Windows\system32\taskschd.msc@; 0p  >l#n30'|DQRa-L-L˖C:\Windows\system32\perfmon.exe fl#n30'|DQRa.L-L6C:\Windows\system32\perfmon.exe; p  s#n30'|DQRa-L-LCC:\Windows\system32\compmgmt.msc t#n30'|DQRa.L-L-㬁C:\Windows\system32\compmgmt.msc; Pp  .%n30'|DQRa-L-LMVUC:\Program Files\Internet Explorer\images\smallLogo.scale-100.pngl %n30'|DQRaSISIY(&IOpI &l %n30'|DQRaSISIK_(&IOpI ' ͡%n30'|DQRa.L-LcC:\Program Files\Internet Explorer\images\smallLogo.scale-100.png<p  %n30'|DQRa-L-LlԊC:\Windows\system32\control.exe %n30'|DQRa.L-LHՊC:\Windows\system32\control.exeМ; Јp  %n30'|DQRa-L-LC:\Windows\DesktopTileResources\images\logo.scale-100.pngl %n30'|DQRaSISI](&IOpI (l %n30'|DQRaSISI(&IOpI ) %n30'|DQRa.L-LC:\Windows\DesktopTileResources\images\logo.scale-100.pngP(}Јp  &n30'|DQRa-L-LC:\Windows\system32\mstsc.exe  ) 8 483 &n30'|DQRa.L-L8C:\Windows\system32\mstsc.exe; pp  &n30'|DQRa-L-LoHC:\Windows\system32\calc.exe 9&n30'|DQRa.L-L˂IC:\Windows\system32\calc.exep; p  >"&n30'|DQRa-L-LeC:\Windows\system32\cmd.exe f"&n30'|DQRa.L-L7fC:\Windows\system32\cmd.exeP^p  )&n30'|DQRa-L-Lp=C:\Windows\system32\comexp.msc )&n30'|DQRa.L-Lj߃C:\Windows\system32\comexp.mscp; pp  R1&n30'|DQRa-L-L䡌C:\Windows\system32\dfrgui.exe z1&n30'|DQRa.L-LyC:\Windows\system32\dfrgui.exe@; pp  8&n30'|DQRa-L-L쿌C:\Windows\system32\iscsicpl.exe 8&n30'|DQRa.L-LC:\Windows\system32\iscsicpl.exeб; p  %@&n30'|DQRa-L-L 2݌C:\Windows\system32\magnify.exe L@&n30'|DQRa.L-L1݌C:\Windows\system32\magnify.exeМ; Pp  G&n30'|DQRa-L-LC:\Windows\system32\MdSched.exe G&n30'|DQRa.L-L_C:\Windows\system32\MdSched.exe; Pp  N&n30'|DQRa-L-LĠC:\Windows\system32\msconfig.exe N&n30'|DQRa.L-LeAC:\Windows\system32\msconfig.exeМ; 0p  RU&n30'|DQRa-L-L1C:\Windows\system32\msinfo32.exe yU&n30'|DQRa.L-L2C:\Windows\system32\msinfo32.exeМ; 0p  5\&n30'|DQRa-L-LXrMC:\Windows\system32\mspaint.exe \\&n30'|DQRa.L-L2NC:\Windows\system32\mspaint.exeМ; Pp  |c&n30'|DQRa-L-LjC:\Windows\system32\narrator.exe c&n30'|DQRa.L-L.kC:\Windows\system32\narrator.exe; Pp  dj&n30'|DQRa-L-L,C:\Windows\system32\notepad.exe j&n30'|DQRa.L-L׆C:\Windows\system32\notepad.exe; Pp  q&n30'|DQRa-L-L]࣍C:\Windows\system32\odbcad32.exe q&n30'|DQRa.L-L8C:\Windows\system32\odbcad32.exeМ; 0p  y&n30'|DQRa-L-L#ÍC:\Windows\system32\osk.exe y&n30'|DQRa.L-LÍC:\Windows\system32\osk.exeP^p  &n30'|DQRa-L-LލC:\Windows\system32\psr.exe &n30'|DQRa.L-LjߍC:\Windows\system32\psr.exeqPp  &n30'|DQRa-L-LSC:\Windows\system32\scw.exe &n30'|DQRa.L-LC:\Windows\system32\scw.exePrPp  &n30'|DQRa-L-LGC:\Windows\system32\ServerManager.exe &n30'|DQRa.L-LC:\Windows\system32\ServerManager.exer 0p  &n30'|DQRa-L-L4C:\Windows\system32\services.msc !&n30'|DQRa.L-L#5C:\Windows\system32\services.mscp; Pp  z&n30'|DQRa-L-LRC:\Windows\system32\wbadmin.msc &n30'|DQRa.L-Lb"SC:\Windows\system32\wbadmin.msc; p  h&n30'|DQRa-L-L Ўp  K&n30'|DQRa-L-LɎC:\Program Files\Windows NT\Accessories\wordpad.exe v&n30'|DQRa.L-LtʎC:\Program Files\Windows NT\Accessories\wordpad.exeP(}Ўp  a&n30'|DQRa-L-L C:\Windows\syswow64\odbcad32.exe &n30'|DQRa.L-LhC:\Windows\syswow64\odbcad32.exe; p  &n30'|DQRa-L-L x'C:\Windows\syswow64\WindowsPowerShell\v1.0\PowerShell_ISE.exe ` [ 8/8@/Px n30'|DQRajjR7Px n30'|DQRakj:Px n30'|DQRajjل@Px Kn30'|DQRakjAPx fn30'|DQRarr7NPx un30'|DQRasr!qNPd E n30'|DQRaJJ&Xd n30'|DQRaJJm&Pd F n30'|DQRaJJ&Xd X n30'|DQRaJJ& Pd ( n30'|DQRa]H]H=(zd O n30'|DQRaee (CreateViewWindowzd Q n30'|DQRaee (CreateViewWindowPd H n30'|DQRaJJ/(Xd H n30'|DQRaJJ#( Pd i n30'|DQRaII)`d i n30'|DQRaII˺)5km/OPd l n30'|DQRaoIoInj)Pd Mn n30'|DQRapIoIѕ)Pd n n30'|DQRa{H{H3)d n n30'|DQRaee)CDefView::_pCollectionSinkV=; zd r n30'|DQRaee)OperationRunningzd r n30'|DQRaee")OperationRunning`d r n30'|DQRaII:)5km/OPd r n30'|DQRaJJ2i)Xd r n30'|DQRaJJe) Pd r n30'|DQRaIIɧ)zd r n30'|DQRaee, )CreateViewWindowzd r n30'|DQRaee)CreateViewWindowPd t n30'|DQRa^H]H)P n30'|DQRawH,pd bn30'|DQRaeeg1UpdateItemspd bn30'|DQRaee:g1UpdateItemspd cn30'|DQRaeewh1UpdateItemspd cn30'|DQRaeeh1UpdateItems~d cn30'|DQRaeeh1OperationCompleted~d cn30'|DQRaeeh1OperationCompleted`d *cn30'|DQRaIIFi15km/Ozd ,cn30'|DQRaeeKi1OperationRunningzd ,cn30'|DQRaeeNi1OperationRunningxd Ccn30'|DQRaeeǸi1; ~d bcn30'|DQRaee$j1OperationCompletedTd ecn30'|DQRaHHO0j1~d ecn30'|DQRaee2j1OperationCompletedPd cn30'|DQRa|H{H l1~d cn30'|DQRaeeZl1FirstPageDisplayedxd dn30'|DQRaee˘p1ContentsChangedxd en30'|DQRaeebp1ContentsChangedPd en30'|DQRa7I7I8p1xd en30'|DQRaeeBp1ContentsChangedTd en30'|DQRaHHp1xd en30'|DQRaee'p1ContentsChanged`d {en30'|DQRaIIr15km/OTd ?gn30'|DQRaHH7y1d "n30'|DQRa-L-Lbshell:::{98F275B4-4FFF-11E0-89E2-7B86DFD72085}d @"n30'|DQRa.L-Lshell:::{98F275B4-4FFF-11E0-89E2-7B86DFD72085} p P2Xd "n30'|DQRaLMId #n30'|DQRa-L-LExXshell:::{98F275B4-4FFF-11E0-89E2-7B86DFD72085}d ^#n30'|DQRa.L-LfZshell:::{98F275B4-4FFF-11E0-89E2-7B86DFD72085}u` 4Xd o##n30'|DQRaLM}[jd }#n30'|DQRa-L-LӁshell:::{98F275B4-4FFF-11E0-89E2-7B86DFD72085}d 8~#n30'|DQRa.L-L~Ձshell:::{98F275B4-4FFF-11E0-89E2-7B86DFD72085}@l pl Xd ̂#n30'|DQRaLMd #n30'|DQRa-L-LI~shell:::{98F275B4-4FFF-11E0-89E2-7B86DFD72085}d #n30'|DQRa.L-LH?shell:::{98F275B4-4FFF-11E0-89E2-7B86DFD72085}@l #l Xd i#n30'|DQRaLM@d &n30'|DQRa-L-Lrshell:::{98F275B4-4FFF-11E0-89E2-7B86DFD72085}d &n30'|DQRa.L-Ltshell:::{98F275B4-4FFF-11E0-89E2-7B86DFD72085}s; Xd ~&n30'|DQRaLMd 'n30'|DQRa-L-L,shell:::{98F275B4-4FFF-11E0-89E2-7B86DFD72085} 0 e! 8 382 vPn30'|DQRaymamt-ARC: Change notify=8192; Item: (40010000) C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk; need scan=1 _n30'|DQRaymam>[-ARC: RefreshCache: smrcf=0x10 _n30'|DQRaymam\[-ARC: Change notify=2; Item: (40010000) C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk; need scan=1 6`n30'|DQRaymamv]-ARC: Change notify=8192; Item: (40000000) C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar; need scan=0 ^`n30'|DQRaymam^-ARC: RefreshCache: smrcf=0x10 e`n30'|DQRaymam/^-ARC: Change notify=8192; Item: (40010000) C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk; need scan=1P n30'|DQRa%%bӇP [@n30'|DQRa@I@IiP i@n30'|DQRa@I@IAP r@n30'|DQRa@I@I3eP z@n30'|DQRa@I@ITX @n30'|DQRaHH=T0X jWn30'|DQRaHH3-LogonFrameworkRegistrationH On30'|DQRa%%%y-LogonFrameworkRegistrationZH On30'|DQRa%%|-SSO1tH Sn30'|DQRa%%(1DesktopApiSurfacetH (Sn30'|DQRa%%<)1TaskbarApiSurfacetH $n30'|DQRa%%.2TaskbarApiSurfacetH Qn30'|DQRa%%g2DesktopApiSurfacelH )n30'|DQRaRRᒛs x#)B}[dlH )n30'|DQRaRRX%s x#)B}[dlH QHn30'|DQRaRR#t x#)B}[FlH %Hn30'|DQRaRR3t x#)B}[FZH ^=Wn30'|DQRa%%PSSO1nH =Wn30'|DQRa%%NPStartMenuShownvH =Wn30'|DQRa%%PDesktopStartupAppsvH AWn30'|DQRa%% PDesktopStartupAppsH AWn30'|DQRa%%PCancelDesktopInitializationScenarioH #AWn30'|DQRa%%'PCancelDesktopInitializationScenarioH #AWn30'|DQRa%%+PSuspendDesktopStartupAppsH %AWn30'|DQRa%%1PSuspendDesktopStartupAppstH &AWn30'|DQRa%%4PDesktopAndTaskbar>H PWn30'|DQRa-L-L:QC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Server Manager.lnk^H nPWn30'|DQRa.L-L*WQC:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Server Manager.lnk`[ 7 H QWn30'|DQRa-L-L QC:\Windows\system32\ServerManager.exeH Q(&IOpIg powershell.exe 0(null)000000H \Wn30'|DQRaVVNQC:\Windows\system32\WindowsPowerShell\v1.0\powershell.exeXH ]Wn30'|DQRaVVBPQhH E]Wn30'|DQRaVVQQAZXH ]Wn30'|DQRaVV#SQhH B^Wn30'|DQRaVVZUQAZH ^Wn30'|DQRa VVx(&IOpI (Undefined) *Fn30'|DQRaIIC(&IOpI( (Undefined) +Fn30'|DQRaIIEI(&IOpI( (Undefined) -Fn30'|DQRaIIP(&IOpI( (Undefined) .Fn30'|DQRaIIV(&IOpI( (Undefined) 0Fn30'|DQRaII[(&IOpI( (Undefined) 1Fn30'|DQRaIIfa(&IOpI) (Undefined) 2Fn30'|DQRaIIee(&IOpI) (Undefined)h /n30'|DQRa|mm\StateChangeX +n30'|DQRawvӔ\P( [+n30'|DQRavv \P( s+n30'|DQRawvh\P( G,n30'|DQRavvӷ\P( [,n30'|DQRawvU\P( w,n30'|DQRavvx\P( ,n30'|DQRawv\P( \-n30'|DQRavv\P( q-n30'|DQRawv`\P( -n30'|DQRavvђ\P( -n30'|DQRawv2\P( .n30'|DQRavv0\P( .n30'|DQRawv;\P( .n30'|DQRavvz\P( .n30'|DQRawv\P 9#n30'|DQRaJJ6}X V#n30'|DQRaJJO} P( #n30'|DQRaJJ<~( 8%n30'|DQRa-L-L9=C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Printer Shortcuts( z%n30'|DQRa.L-L>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Printer Shortcuts@$ {X( g%n30'|DQRa JJU;B P( %n30'|DQRavvcDP( 0%n30'|DQRawv\EP( Z%n30'|DQRavvFP( u%n30'|DQRawvqFT( 8n30'|DQRaJJdr(P( '8n30'|DQRaJJ9)X( 98n30'|DQRaJJ)P( ?8n30'|DQRaJJ)X( @8n30'|DQRaJJ) P( B8n30'|DQRaJJ)X( B8n30'|DQRaJJ ) P( G8n30'|DQRaJJ~)P( sWn30'|DQRaJJq\Q( tWn30'|DQRa-L-L0QC:\Users\Public\Desktop( uWn30'|DQRa.L-LQC:\Users\Public\DesktopPh {X( uWn30'|DQRa JJQ P( )uWn30'|DQRaJJ6AQ( &vWn30'|DQRa-L-LJ5QC:\Users\Public\Desktop( JvWn30'|DQRa.L-LTĵQC:\Users\Public\DesktopPc {X( [vWn30'|DQRa JJ; QP( U Xn30'|DQRaJJIT\( Xn30'|DQRa/L/LI#T7 ( Xn30'|DQRa0L/L~6T7 C:\Users\Administrator\Desktop( Xn30'|DQRa-L-LUTC:\Users\Administrator\Desktop( Xn30'|DQRa.L-LTC:\Users\Administrator\Desktop ; {( IXn30'|DQRa-L-LɿTC:\Users\Public\Desktop( aXn30'|DQRa.L-L5#TC:\Users\Public\DesktopPh {X( mXn30'|DQRa JJQT 2Dž*!8@484 &n30'|DQRa.L-L>(C:\Windows\syswow64\WindowsPowerShell\v1.0\PowerShell_ISE.exen> Јp  iX'n30'|DQRa-L-L\C>C:\Windows\system32\@TileEmpty1x1Image.png Z'n30'|DQRa.L-LDC:\Windows\system32\@TileEmpty1x1Image.png`9@ Нp  j'n30'|DQRa-L-L`EғC:\Windows\system32\@TileEmpty1x1Image.png 'n30'|DQRa.L-LؓC:\Windows\system32\@TileEmpty1x1Image.png6@ p  (n30'|DQRa-L-LrHC:\Windows\system32\@TileEmpty1x1Image.png x(n30'|DQRa.L-LFNC:\Windows\system32\@TileEmpty1x1Image.pngp,@ p  (n30'|DQRa-L-LyCC:\Program Files\Internet Explorer\images\tileLogo.scale-80.png (n30'|DQRa.L-L "LC:\Program Files\Internet Explorer\images\tileLogo.scale-80.png<Ўp  ǽ(n30'|DQRa-L-LMӖC:\Windows\system32\@TileEmpty1x1Image.png P(n30'|DQRa.L-LٖC:\Windows\system32\@TileEmpty1x1Image.png`9@ 0p  4(n30'|DQRa-L-LlIC:\Windows\system32\@TileEmpty1x1Image.png (n30'|DQRa.L-LOC:\Windows\system32\@TileEmpty1x1Image.png-@ p  ((n30'|DQRa-L-Lw<C:\Windows\system32\@TileEmpty1x1Image.png (n30'|DQRa.L-LS×C:\Windows\system32\@TileEmpty1x1Image.png-@ p  0)n30'|DQRa-L-L>C:\Windows\system32\taskmgr.exe '1)n30'|DQRa.L-L;C:\Windows\system32\taskmgr.exe; p  2E)n30'|DQRa-L-L_gC:\Program Files\Internet Explorer\images\smallLogo.scale-80.png tG)n30'|DQRa.L-L[nC:\Program Files\Internet Explorer\images\smallLogo.scale-80.png@<p  V)n30'|DQRa-L-L{7C:\Windows\system32\ServerManager.exe V)n30'|DQRa.L-L-8C:\Windows\system32\ServerManager.exeo p  f)n30'|DQRa-L-L$uC:\Windows\DesktopTileResources\images\logo.scale-80.png &h)n30'|DQRa.L-Lp6}C:\Windows\DesktopTileResources\images\logo.scale-80.png+}0p  w)n30'|DQRa-L-L-GC:\Windows\system32\control.exe x)n30'|DQRa.L-L7C:\Windows\system32\control.exeМ; Јp