%SystemDrive%\Users\Public\Documents\microsoft
new catalogue created
%SystemDrive%\Users\Public\Documents\microsoft\IdentityCRL
new catalogue created
%SystemDrive%\Users\Public\Documents\microsoft\IdentityCRL\Production
new catalogue created
%APPDATA%\Microsoft\IdentityCRL
new catalogue created
%APPDATA%\Microsoft\IdentityCRL\Production
new catalogue created
%APPDATA%\Microsoft\MSN Messenger
new catalogue created
HKEY_USERS\%ID-USER-SID%\Software\IM Providers
new registry key created
HKEY_USERS\%ID-USER-SID%\Software\IM Providers\MSN Messenger
new registry key created
HKEY_USERS\%ID-USER-SID%\Software\IM Providers\MSN Messenger\\UpAndRunning
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\MuiCache\cc\63C768CF\\@%SystemRoot%\system32\dnsapi.dll,-103
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\MuiCache\cc\63C768CF\\@%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe,-124
new registry key parameter created
%USERPROFILE%\Tracing
new catalogue created
%USERPROFILE%\Tracing\WindowsLiveMessenger-uccapi-0.uccapilog
new file created
%USERPROFILE%\Tracing\WPPMedia
new catalogue created
%APPDATA%\Microsoft\Windows\Recent\CustomDestinations\9JK35AVSZVRFCNOEV44G.temp
new file created
%APPDATA%\Microsoft\MSN Messenger\4095105775
new catalogue created
%ALLUSERSPROFILE%\Microsoft\IdentityCRL\production\MetaConfig.xml
new file created
%APPDATA%\Microsoft\Windows\Recent\CustomDestinations\O3C798PEKA6TCEPPL2TK.temp
new file created
%APPDATA%\Microsoft\Windows\Recent\CustomDestinations\b06a975b62567622.customDestinations-ms~RF4e890a.TMP
new file created
%APPDATA%\Microsoft\Windows\Recent\CustomDestinations\b06a975b62567622.customDestinations-ms~RF4e890a.TMP
file renamed
%APPDATA%\Microsoft\Windows\Recent\CustomDestinations\UI6QRQAS7HNX1CB8X4BV.temp
new file created
%APPDATA%\Microsoft\Windows\Recent\CustomDestinations\b06a975b62567622.customDestinations-ms~RF4ea210.TMP
new file created
%APPDATA%\Microsoft\Windows\Recent\CustomDestinations\b06a975b62567622.customDestinations-ms~RF4ea210.TMP
file renamed
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\MuiCache\cc\63C768CF\\@%systemroot%\system32\FirewallControlPanel.dll,-12122
new registry key parameter created
%APPDATA%\Microsoft\Windows\Recent\CustomDestinations\BY5EQ629TD73VABKHI4V.temp
new file created
%APPDATA%\Microsoft\Windows\Recent\CustomDestinations\b06a975b62567622.customDestinations-ms~RF4ecb82.TMP
new file created
%APPDATA%\Microsoft\Windows\Recent\CustomDestinations\b06a975b62567622.customDestinations-ms~RF4ecb82.TMP
file renamed
%APPDATA%\Microsoft\Windows\Recent\CustomDestinations\YH5NYMDPEOG441EJ4EXS.temp
new file created
%APPDATA%\Microsoft\Windows\Recent\CustomDestinations\b06a975b62567622.customDestinations-ms~RF503fa3.TMP
new file created
%APPDATA%\Microsoft\Windows\Recent\CustomDestinations\b06a975b62567622.customDestinations-ms~RF503fa3.TMP
file renamed
%USERPROFILE%\Documents\Mis archivos recibidos
new catalogue created
%USERPROFILE%\Documents\Mis archivos recibidos\vicentegamerytelchicorojo4095105775
new catalogue created
%USERPROFILE%\Documents\Mis archivos recibidos\vicentegamerytelchicorojo4095105775\Historial
new catalogue created
%USERPROFILE%\Documents\Mis archivos recibidos\vicentegamerytelchicorojo4095105775\Historial\MessageLog.xsl
new file created
%USERPROFILE%\Documents\Mis archivos recibidos\vicentegamerytelchicorojo4095105775\Historial\00000000-0000-0000-0009-2b950795388d3279267587.xml
new file created
%USERPROFILE%\Documents\Mis archivos recibidos\vicentegamerytelchicorojo4095105775\Historial\msnCE75.tmp
new file created
%USERPROFILE%\Documents\Mis archivos recibidos\vicentegamerytelchicorojo4095105775\Historial\00000000-0000-0000-0009-2b950795388d3279267587.xml
file renamed
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\MuiCache\cc\63C768CF\\@C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\oregres.dll,-202
new registry key parameter created
%USERPROFILE%\Documents\Mis archivos recibidos\vicentegamerytelchicorojo4095105775\Historial\msn66A8.tmp
new file created
%USERPROFILE%\Documents\Mis archivos recibidos\vicentegamerytelchicorojo4095105775\Historial\msn7407.tmp
new file created
%USERPROFILE%\Documents\Mis archivos recibidos\vicentegamerytelchicorojo4095105775\Historial\msn76B8.tmp
new file created
%USERPROFILE%\Documents\Mis archivos recibidos\vicentegamerytelchicorojo4095105775\Historial\msn79B6.tmp
new file created
%USERPROFILE%\Documents\Mis archivos recibidos\vicentegamerytelchicorojo4095105775\Historial\msn7BEA.tmp
new file created
%USERPROFILE%\Documents\Mis archivos recibidos\vicentegamerytelchicorojo4095105775\Historial\msn7E6C.tmp
new file created
%USERPROFILE%\Documents\Mis archivos recibidos\vicentegamerytelchicorojo4095105775\Historial\msn815B.tmp
new file created
%USERPROFILE%\Documents\Mis archivos recibidos\vicentegamerytelchicorojo4095105775\Historial\msn840B.tmp
new file created
%USERPROFILE%\Documents\Mis archivos recibidos\vicentegamerytelchicorojo4095105775\Historial\msnAA32.tmp
new file created
%USERPROFILE%\Documents\Mis archivos recibidos\vicentegamerytelchicorojo4095105775\Historial\msnB1F3.tmp
new file created
%USERPROFILE%\Documents\Mis archivos recibidos\vicentegamerytelchicorojo4095105775\Historial\msnB446.tmp
new file created
%USERPROFILE%\Documents\Mis archivos recibidos\vicentegamerytelchicorojo4095105775\Historial\msnB65A.tmp
new file created
%USERPROFILE%\Documents\Mis archivos recibidos\vicentegamerytelchicorojo4095105775\Historial\msnB88E.tmp
new file created
%USERPROFILE%\Documents\Mis archivos recibidos\vicentegamerytelchicorojo4095105775\Historial\msnBE1C.tmp
new file created
%USERPROFILE%\Documents\Mis archivos recibidos\vicentegamerytelchicorojo4095105775\Historial\msnE74C.tmp
new file created
%USERPROFILE%\Documents\Mis archivos recibidos\vicentegamerytelchicorojo4095105775\Historial\msnB02A.tmp
new file created