%SystemDrive%\EVREM
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$RZ5FE5W
catalogue moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$RVWLRRI
catalogue moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$I2GNZDB.dat
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$IIL9LDD
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$IWAIAXV.lnk
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$R2GNZDB.dat
file moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$RIL9LDD
catalogue moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$RWAIAXV.lnk
file moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$IUUAIKS
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$IV4WBP1.xml
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$I1N7RYP.lnk
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$RUUAIKS
catalogue moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$RV4WBP1.xml
file moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$R1N7RYP.lnk
file moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$IZ24V4L.dll
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$I6XSO3L.xml
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$IQUIYIJ.lnk
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$RZ24V4L.dll
file moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$R6XSO3L.xml
file moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$RQUIYIJ.lnk
file moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$ISMY155.dll
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$I9PAJK7.xml
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$ISXCTQU
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$RSMY155.dll
file moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$R9PAJK7.xml
file moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$RSXCTQU
catalogue moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$I0CYF6F.dll
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$IO52MFQ.xml
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$R0CYF6F.dll
file moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$RO52MFQ.xml
file moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$I1I3OJJ.dll
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$I6J7UH7.xml
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$R1I3OJJ.dll
file moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$R6J7UH7.xml
file moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$I965G7I.exe
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$IFUBRFQ.xml
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$R965G7I.exe
file moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$RFUBRFQ.xml
file moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$IEBRHPQ.dll
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$ISTPOTJ.xml
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$REBRHPQ.dll
file moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$RSTPOTJ.xml
file moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$I85Q3FN.dll
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$IGRRA2D.xml
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$R85Q3FN.dll
file moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$RGRRA2D.xml
file moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$IQK67V7.dll
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$I53CSV1.xml
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$RQK67V7.dll
file moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$R53CSV1.xml
file moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$IICVPOP.dat
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$ISSHXED.ini
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$RICVPOP.dat
file moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$RSSHXED.ini
file moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$IONL293.exe
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$IJVLDEB.xml
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$RONL293.exe
file moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$RJVLDEB.xml
file moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$I4NW8DA.src
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$IDH7UAL
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$R4NW8DA.src
file moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$RDH7UAL
catalogue moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$INO35WD.dll
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$I6SKTOY
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$RNO35WD.dll
file moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$R6SKTOY
catalogue moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$IR9M22T.lnk
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$IHEGE7F.ini
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$RR9M22T.lnk
file moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$RHEGE7F.ini
file moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$IJ48RHL.lnk
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$IRDJCLB.log
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$I01LLX1.lnk
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$RJ48RHL.lnk
file moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$RRDJCLB.log
file moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$R01LLX1.lnk
file moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$IPXSI9Z.conf
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$RPXSI9Z.conf
file moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$IRTQKX5.xml
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$RRTQKX5.xml
file moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$I3EJW3X.png
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$IOYGO2J
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$R3EJW3X.png
file moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$ROYGO2J
catalogue moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$I6KOY6A
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$IOFDA9E
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$R6KOY6A
catalogue moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$ROFDA9E
catalogue moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$IS1P229
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$IPEP32F
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$RS1P229
catalogue moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$RPEP32F
catalogue moved
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$ICOVHGW.lnk
new file created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\MuiCache\24f
new registry key created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$I31BESD.ini
new file created
%SystemDrive%\$Recycle.Bin\%ID-USER-SID%\$RCOVHGW.lnk
file moved
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\MuiCache\24f\96383CDB
new registry key created