%SYSTEMROOT%\msds.dat
new file created
%SYSTEMROOT%\qrt2.reg
new file created
%SYSTEMROOT%\k3l3.dic
new file created
%LOCALAPPDATA%\VirtualStore\Program Files (x86)\VAG-COM\d3.bin
new file created
%LOCALAPPDATA%\VirtualStore\Program Files (x86)\VAG-COM\d1.bin
new file created
%LOCALAPPDATA%\VirtualStore\Program Files (x86)\VAG-COM\d2.bin
new file created
%LOCALAPPDATA%\VirtualStore\Program Files (x86)\VAG-COM\VAGCOM.CFG
new file created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\4\1\3\\1
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\4\1\3\1
new registry key created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\4\1\3\1\\0
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\4\1\3\1\0
new registry key created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\4\1\3\1\\MRUListEx
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\4\1\3\1\0\\NodeSlot
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\4\1\3\1\0\\MRUListEx
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\209
new registry key created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\209\Shell
new registry key created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\209\Shell\\KnownFolderDerivedFolderType
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\209\Shell\\SniffedFolderType
new registry key parameter created
%LOCALAPPDATA%\VirtualStore\Program Files (x86)\VAG-COM\Logs\LOG-01-004-011-xx my skoda.CSV
new file created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\209\ComDlgLegacy
new registry key created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\209\ComDlgLegacy\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}
new registry key created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\209\ComDlgLegacy\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\\Mode
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\209\ComDlgLegacy\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\\LogicalViewMode
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\209\ComDlgLegacy\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\\FFlags
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\209\ComDlgLegacy\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\\IconSize
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\209\ComDlgLegacy\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\\Sort
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\209\ComDlgLegacy\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\\ColInfo
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\209\ComDlgLegacy\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\\GroupView
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\209\ComDlgLegacy\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\\GroupByKey:FMTID
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\209\ComDlgLegacy\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\\GroupByKey:PID
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\209\ComDlgLegacy\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\\GroupByDirection
new registry key parameter created
%LOCALAPPDATA%\VirtualStore\Program Files (x86)\VAG-COM\Logs\LOG-01-004-011
new file created
%LOCALAPPDATA%\VirtualStore\Program Files (x86)\VAG-COM\Logs\LOG-01-004-011-xxx.csv
new file created
%USERPROFILE%\Desktop\LOG-01-004-011-xx my skoda.CSV - Shortcut.lnk
new file created
%LOCALAPPDATA%\VirtualStore\Program Files (x86)\VAG-COM\tst.bin
new file created
%LOCALAPPDATA%\VirtualStore\Windows\ADMIN
new file created
%LOCALAPPDATA%\VirtualStore\Windows\3333.vtd
new file created
%LOCALAPPDATA%\VirtualStore\Windows\msds.dat
new file created
%PROGRAMFILES(X86)%\VAG-COM\VAGCOM.CFG
new file created
%PROGRAMFILES(X86)%\VAG-COM\tst.bin
new file created
%PROGRAMFILES(X86)%\VAG-COM\Logs\DTC-01.txt
new file created
%SYSTEMROOT%\ADMIN
new file created
%SYSTEMROOT%\3333.vtd
new file created