API tools faq
paste
AnonScRIPteR

FB Private video virus vs file log

AnonScRIPteR
Jul 8th, 2014
340
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 36.79 KB | None | 0 0
raw download clone embed print report
  1. Generated by Phrozen Windows Files Monitor v1.1 - TEST-PC
  2. Phrozen Software
  3. https://phrozensoft.com/
  4. ---
  5.  
  6. Exported tree contents ( 236 events)
  7. ------------------------------------------------
  8.  
  9. C:
  10. -->Windows
  11. -- -->System32
  12. -- -- -->config
  13. -- -- -- -->SYSTEM.LOG1
  14. -- -- -- -->SYSTEM
  15. -- -- -- -->SOFTWARE.LOG1
  16. -- -- -- -->SOFTWARE
  17. -- -- -- -->COMPONENTS.LOG1
  18. -- -- -- -->COMPONENTS
  19. -- -- -- -->COMPONENTS{6cced2ed-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms
  20. -- -- -- -->COMPONENTS{6cced2ed-6e01-11de-8bed-001e0bcd1824}.TM.blf
  21. -- -- -- -->(3:28:41 PM) COMPONENTS{6cced2ec-6e01-11de-8bed-001e0bcd1824}.TxR.0.regtrans-ms
  22. -- -- -- -->(3:28:41 PM) COMPONENTS{6cced2ec-6e01-11de-8bed-001e0bcd1824}.TxR.1.regtrans-ms
  23. -- -- -- -->(3:28:41 PM) COMPONENTS{6cced2ec-6e01-11de-8bed-001e0bcd1824}.TxR.2.regtrans-ms
  24. -- -- -- -->(3:28:41 PM) COMPONENTS{6cced2ec-6e01-11de-8bed-001e0bcd1824}.TxR.blf
  25. -- -- -->SMI
  26. -- -- -- -->Store
  27. -- -- -- -- -->Machine
  28. -- -- -- -- -- -->SCHEMA.DAT{e29ac73d-7037-11de-816d-001c23e25b76}.TMContainer00000000000000000001.regtrans-ms - [MD5:46205dc8d2b4ba12f29b0aa1b3c85276]
  29. -- -- -- -- -- -->SCHEMA.DAT{e29ac73d-7037-11de-816d-001c23e25b76}.TM.blf - [MD5:41b535c9fc538e1fa2d4a5c8ebc5b421]
  30. -- -- -- -- -- -->(3:28:41 PM) SCHEMA.DAT{e29ac73c-7037-11de-816d-001c23e25b76}.TxR.0.regtrans-ms
  31. -- -- -- -- -- -->(3:28:41 PM) SCHEMA.DAT{e29ac73c-7037-11de-816d-001c23e25b76}.TxR.1.regtrans-ms
  32. -- -- -- -- -- -->(3:28:41 PM) SCHEMA.DAT{e29ac73c-7037-11de-816d-001c23e25b76}.TxR.2.regtrans-ms
  33. -- -- -- -- -- -->(3:28:41 PM) SCHEMA.DAT{e29ac73c-7037-11de-816d-001c23e25b76}.TxR.blf
  34. -- -- -- -- -- -->SCHEMA.DAT - [MD5:febbdcc6c4e5949d4d8cf7a96473b346]
  35. -- -- -->LogFiles
  36. -- -- -- -->Scm
  37. -- -- -- -- -->6375cc1c-d975-48d2-9cd5-63db19b10d4a - [MD5:a10865d30243b35b9767d6441821d724]
  38. -- -- -->winevt
  39. -- -- -- -->Logs
  40. -- -- -- -- -->Microsoft-Windows-Resource-Exhaustion-Resolver%4Operational.evtx - [MD5:d41d8cd98f00b204e9800998ecf8427e]
  41. -- -->Temp
  42. -- -- -->(3:25:44 PM) TMP000000161E08289E08A5DC67
  43. -- -- -->(3:27:56 PM) TMP000000173C328372F8275F7D
  44. -- -- -->(3:30:30 PM) TMP000000185C92677ACA8D1717
  45. -- -->Prefetch
  46. -- -- -->CONSENT.EXE-531BD9EA.pf
  47. -- -- -->DLLHOST.EXE-766398D2.pf
  48. -- -- -->DLLHOST.EXE-5E46FA0D.pf
  49. -- -- -->SEARCHPROTOCOLHOST.EXE-0CB8CADE.pf
  50. -- -- -->SEARCHFILTERHOST.EXE-77482212.pf
  51. -- -- -->NOTEPAD.EXE-D8414F97.pf
  52. -- -- -->TASKMGR.EXE-5F5F473D.pf
  53. -- -- -->TASKHOST.EXE-7238F31D.pf
  54. -- -->SoftwareDistribution
  55. -- -- -->DataStore
  56. -- -- -- -->Logs
  57. -- -- -- -- -->edb.log -> edb0003A.log
  58. -- -- -- -- -->edb0003A.log -> edbtmp.log
  59. -- -- -- -- -->edbtmp.log -> edb.log
  60. -- -- -- -- -->edb.log -> edb0003B.log
  61. -- -- -- -- -->edbtmp.log -> edb.log
  62. -- -- -- -- -->edb0003B.log -> edbtmp.log
  63. -- -- -- -- -->edb.log -> edb0003C.log
  64. -- -- -- -- -->(3:27:39 PM) edb0003C.log
  65. -- -- -- -- -->edb.log -> edb0003D.log
  66. -- -- -- -- -->edbtmp.log -> edb.log
  67. -- -- -- -- -->edb.chk - [MD5:d9c3fc92ff5cd7d08cf33f4ed4a4c045]
  68. -- -- -- -- -->(3:27:39 PM) edb0003D.log
  69. -- -- -- -- -->edb00033.log -> edbtmp.log
  70. -- -- -- -- -->(3:26:13 PM) edb00034.log
  71. -- -- -- -- -->(3:26:13 PM) edb00035.log
  72. -- -- -- -- -->(3:26:13 PM) edb00036.log
  73. -- -- -- -- -->(3:26:13 PM) edb00037.log
  74. -- -- -- -- -->edb.log -> edb0003E.log
  75. -- -- -- -- -->(3:27:39 PM) edb0003E.log
  76. -- -- -- -- -->edb.log -> edb0003F.log
  77. -- -- -- -- -->(3:27:39 PM) edb0003F.log
  78. -- -- -- -- -->edb.log -> edb00040.log
  79. -- -- -- -- -->edbtmp.log -> edb.log
  80. -- -- -- -- -->edb00040.log -> edbtmp.log
  81. -- -- -- -- -->edb00038.log -> edbtmp.log
  82. -- -- -- -- -->(3:26:30 PM) edb00039.log
  83. -- -- -- -- -->edb.log -> edb00041.log
  84. -- -- -- -- -->(3:27:59 PM) edb00041.log
  85. -- -- -- -- -->edb.log -> edb00042.log
  86. -- -- -- -- -->edbtmp.log -> edb.log
  87. -- -- -- -- -->edb00042.log -> edbtmp.log
  88. -- -- -- -- -->edb.log -> edb00043.log
  89. -- -- -- -- -->edbtmp.log -> edb.log
  90. -- -- -- -- -->(3:28:21 PM) edb00043.log
  91. -- -- -- -- -->edb.log -> edb00044.log
  92. -- -- -- -- -->(3:28:21 PM) edb00044.log
  93. -- -- -- -- -->edb.log -> edb00045.log
  94. -- -- -- -- -->(3:28:21 PM) edb00045.log
  95. -- -- -- -- -->edb.log -> edb00046.log
  96. -- -- -- -- -->edbtmp.log -> edb.log
  97. -- -- -- -- -->edb00046.log
  98. -- -- -- -- -->edb.log -> edb00047.log
  99. -- -- -- -- -->edbtmp.log -> edb.log
  100. -- -- -- -- -->edb00047.log
  101. -- -- -- -- -->edb.log -> edb00048.log
  102. -- -- -- -- -->edb00048.log
  103. -- -- -- -- -->edb.log -> edb00049.log
  104. -- -- -- -- -->edbtmp.log -> edb.log
  105. -- -- -- -- -->edb00049.log
  106. -- -- -- -- -->edb.log -> edb0004A.log
  107. -- -- -- -- -->edb0004A.log
  108. -- -- -- -- -->edb.log -> edb0004B.log
  109. -- -- -- -- -->edb0004B.log
  110. -- -- -- -- -->edb.log -> edb0004C.log
  111. -- -- -- -- -->edb0004C.log
  112. -- -- -- -- -->edbtmp.log -> edb.log
  113. -- -- -- -- -->edb.log -> edb0004D.log
  114. -- -- -- -- -->edbtmp.log -> edb.log
  115. -- -- -- -- -->edb0004D.log -> edbtmp.log
  116. -- -- -- -- -->edb.log -> edb0004E.log
  117. -- -- -- -- -->(3:29:01 PM) edb0004E.log
  118. -- -- -- -- -->edb.log -> edb0004F.log
  119. -- -- -- -- -->(3:29:01 PM) edb0004F.log
  120. -- -- -- -- -->edb.log -> edb00050.log
  121. -- -- -- -- -->(3:29:01 PM) edb00050.log
  122. -- -- -- -- -->edb.log -> edb00051.log
  123. -- -- -- -- -->(3:29:01 PM) edb00051.log
  124. -- -- -- -- -->edb.log -> edb00056.log
  125. -- -- -- -- -->edbtmp.log -> edb.log
  126. -- -- -- -- -->edb00056.log -> edbtmp.log
  127. -- -- -- -- -->edb.log -> edb00057.log
  128. -- -- -- -- -->(3:30:53 PM) edb00057.log
  129. -- -- -- -- -->edb.log -> edb00058.log
  130. -- -- -- -- -->edbtmp.log -> edb.log
  131. -- -- -- -- -->(3:30:53 PM) edb00058.log
  132. -- -- -- -- -->edb.log -> edb00059.log
  133. -- -- -- -- -->(3:30:53 PM) edb00059.log
  134. -- -- -- -- -->edb.log -> edb0005A.log
  135. -- -- -- -- -->(3:30:53 PM) edb0005A.log
  136. -- -- -- -- -->edb.log -> edb0005B.log
  137. -- -- -- -- -->(3:30:53 PM) edb0005B.log
  138. -- -- -- -- -->edb.log -> edb0005C.log
  139. -- -- -- -- -->(3:30:53 PM) edb0005C.log
  140. -- -- -- -- -->edb.log -> edb0005D.log
  141. -- -- -- -- -->(3:30:53 PM) edb0005D.log
  142. -- -- -- -- -->edb.log -> edb0005E.log
  143. -- -- -- -- -->(3:30:53 PM) edb0005E.log
  144. -- -- -- -- -->edb.log -> edb0005F.log
  145. -- -- -- -- -->(3:30:53 PM) edb0005F.log
  146. -- -- -- -- -->edb.log -> edb00060.log
  147. -- -- -- -- -->(3:30:53 PM) edb00060.log
  148. -- -- -- -- -->edb.log -> edb00061.log
  149. -- -- -- -- -->edb00052.log -> edbtmp.log
  150. -- -- -- -- -->edbtmp.log -> edb.log
  151. -- -- -- -- -->(3:29:49 PM) edb00053.log
  152. -- -- -- -- -->(3:29:49 PM) edb00054.log
  153. -- -- -- -- -->(3:29:49 PM) edb00055.log
  154. -- -- -- -- -->edb00061.log - [MD5:2d3fe957f6a343ac51f27808a20ae577]
  155. -- -- -- -- -->edb.log -> edb00062.log
  156. -- -- -- -- -->edbtmp.log -> edb.log
  157. -- -- -- -- -->edb00062.log - [MD5:4300bcc4f6f92ace60270d73bdd808ff]
  158. -- -- -- -- -->edbtmp.log -> edb.log
  159. -- -- -- -- -->edb.log -> edb00063.log
  160. -- -- -- -- -->edb00063.log - [MD5:c7f036ab19744745ebf9cb1d37a06c4d]
  161. -- -- -- -- -->edb.log -> edb00064.log
  162. -- -- -- -- -->edb00064.log - [MD5:df5ea14c886bd1509c8e07232aebe829]
  163. -- -- -- -- -->edb.log -> edb00065.log
  164. -- -- -- -- -->edb00065.log - [MD5:2b7e8b76aa8e1c4a31a0d45ad9a04b57]
  165. -- -- -- -- -->edb.log -> edb00066.log
  166. -- -- -- -- -->edb00066.log - [MD5:3ef2e380fbde756ac13ca31b26d57ef5]
  167. -- -- -- -- -->edbtmp.log -> edb.log
  168. -- -- -- -- -->edb.log -> edb00067.log
  169. -- -- -- -- -->edb00067.log - [MD5:2a0d7e95f2637b05e2c1cff3df6fd342]
  170. -- -- -- -- -->edb.log -> edb00068.log
  171. -- -- -- -- -->edb00068.log - [MD5:7b363d0aece7b8090510d3b17fa752b1]
  172. -- -- -- -- -->edb.log -> edb00069.log
  173. -- -- -- -- -->edbtmp.log -> edb.log
  174. -- -- -- -- -->edb00069.log - [MD5:4be22864973e75cfc1f0caf904cb9c3e]
  175. -- -- -- -- -->edb.log - [MD5:d41d8cd98f00b204e9800998ecf8427e]
  176. -- -- -- -- -->edbtmp.log - [MD5:d41d8cd98f00b204e9800998ecf8427e]
  177. -- -->SERVIC~2
  178. -- -- -->NETWOR~1
  179. -- -- -- -->AppData
  180. -- -- -- -- -->Local
  181. -- -- -- -- -- -->Temp
  182. -- -- -- -- -- -- -->MpCmdRun.log
  183. -- -->winsxs
  184. -- -- -->Temp
  185. -- -- -- -->PendingRenames
  186. -- -- -- -- -->(3:28:39 PM) 18827c4afa9acf01b3000000240f840a.$$.cdf-ms
  187. -- -- -- -- -->(3:28:39 PM) 1cc3fb49fa9acf01a9000000240f840a._0000000000000000.cdf-ms
  188. -- -- -- -- -->(3:28:39 PM) 1cc3fb49fa9acf01aa000000240f840a.$$.cdf-ms
  189. -- -- -- -- -->(3:28:39 PM) 26a9834afa9acf01b4000000240f840a.$$_system32_21f9a9c4a2f8b514.cdf-ms
  190. -- -- -- -- -->(3:28:39 PM) 2aea024afa9acf01ab000000240f840a.$$_system32_21f9a9c4a2f8b514.cdf-ms
  191. -- -- -- -- -->(3:28:39 PM) 2c215b4afa9acf01b0000000240f840a.pending.xml
  192. -- -- -- -- -->(3:28:39 PM) 34d08a4afa9acf01b5000000240f840a.$$_system32_en-us_429cd25484dc6f94.cdf-ms
  193. -- -- -- -- -->(3:28:39 PM) 38110a4afa9acf01ac000000240f840a.$$_system32_en-us_429cd25484dc6f94.cdf-ms
  194. -- -- -- -- -->(3:28:39 PM) be1f7a4afa9acf01b2000000240f840a._0000000000000000.cdf-ms
  195. -- -->Logs
  196. -- -- -->CBS
  197. -- -- -- -->CBS.log - [MD5:d41d8cd98f00b204e9800998ecf8427e]
  198. -- -->AppCompat
  199. -- -- -->Programs
  200. -- -- -- -->RecentFileCache.bcf
  201. -- -->ServiceProfiles
  202. -- -- -->NetworkService
  203. -- -- -- -->AppData
  204. -- -- -- -- -->Local
  205. -- -- -- -- -- -->Microsoft
  206. -- -- -- -- -- -- -->Windows Media Player NSS
  207. -- -- -- -- -- -- -- -->3.0
  208. -- -- -- -- -- -- -- -- -->Icon Files
  209. -- -- -- -- -- -- -- -- -- -->6e9ebca3-8c96-4939-88a8-9e7d3fe9423f.png - [MD5:340cf64a0fbf561fee46ae2bb9c49b63]
  210. -->Users
  211. -- -->Test
  212. -- -- -->ntuser.dat.LOG1 - [MD5:d41d8cd98f00b204e9800998ecf8427e]
  213. -- -- -->NTUSER.DAT - [MD5:d41d8cd98f00b204e9800998ecf8427e]
  214. -- -- -->AppData
  215. -- -- -- -->Local
  216. -- -- -- -- -->Temp
  217. -- -- -- -- -- -->(3:30:39 PM) RDRB82C.tmp
  218. -- -- -- -- -- -->(3:30:51 PM) RDRB82C.tmp
  219. -- -- -- -- -- -->RDRB82C.tmp
  220. -- -- -- -- -- -- -->(3:30:51 PM) empty.txt
  221. -- -- -- -- -->Microsoft
  222. -- -- -- -- -- -->Windows
  223. -- -- -- -- -- -- -->UsrClass.dat.LOG1 - [MD5:d41d8cd98f00b204e9800998ecf8427e]
  224. -- -- -- -- -- -- -->UsrClass.dat - [MD5:d41d8cd98f00b204e9800998ecf8427e]
  225. -- -- -- -- -- -- -->History
  226. -- -- -- -- -- -- -- -->History.IE5
  227. -- -- -- -->Roaming
  228. -- -- -- -- -->Microsoft
  229. -- -- -- -- -- -->Windows
  230. -- -- -- -- -- -- -->Recent
  231. -- -- -- -- -- -- -- -->AutomaticDestinations
  232. -- -- -- -- -- -- -- -- -->1b4dd67f29cb1962.automaticDestinations-ms - [MD5:46c0797e8c6e2b572f115809969457c0]
  233. -- -- -- -- -- -- -- -- -->918e0ecb43d17e23.automaticDestinations-ms - [MD5:db786c01f65de7a391d729a5aaef4b2c]
  234. -- -- -- -- -- -- -- -->virus.lnk - [MD5:b67a8aece984646d4612d3cabcbb5400]
  235. -- -- -->Desktop
  236. -- -- -- -->(3:27:32 PM) virus.txt
  237. -- -- -- -->virus.txt - [MD5:b29556315d617d764d501c1c39c4b876]
  238. -->System Volume Information
  239. -- -->Syscache.hve.LOG1
  240. -- -->Syscache.hve
  241. -->ProgramData
  242. -- -->Microsoft
  243. -- -- -->RAC
  244. -- -- -- -->Temp
  245.  
  246.  
  247. Exported list contents ( 236 events)
  248. ------------------------------------------------
  249.  
  250. SYSTEM.LOG1 - Update File C:\Windows\System32\config\
  251. SYSTEM - Update File C:\Windows\System32\config\
  252. TMP000000161E08289E08A5DC67 - Create C:\Windows\Temp\
  253. Temp - Update File C:\Windows\
  254. TMP000000161E08289E08A5DC67 - Update File C:\Windows\Temp\
  255. CONSENT.EXE-531BD9EA.pf - Update File C:\Windows\Prefetch\
  256. SOFTWARE.LOG1 - Update File C:\Windows\System32\config\
  257. C:\ - Update Directory C:\
  258. DLLHOST.EXE-766398D2.pf - Update File C:\Windows\Prefetch\
  259. DLLHOST.EXE-766398D2.pf - Update File C:\Windows\Prefetch\
  260. TMP000000161E08289E08A5DC67 - Delete C:\Windows\Temp\
  261. edb.log edb0003A.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  262. edb0003A.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  263. edbtmp.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  264. edbtmp.log edb.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  265. edb.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  266. edbtmp.log - Create C:\Windows\SoftwareDistribution\DataStore\Logs\
  267. Logs - Update File C:\Windows\SoftwareDistribution\DataStore\
  268. ntuser.dat.LOG1 - Update File C:\Users\Test\
  269. NTUSER.DAT - Update File C:\Users\Test\
  270. edb.log edb0003B.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  271. edb0003B.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  272. edb.log edb0003C.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  273. edb0003C.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  274. edbtmp.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  275. edbtmp.log edb.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  276. edb.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  277. edbtmp.log - Create C:\Windows\SoftwareDistribution\DataStore\Logs\
  278. Logs - Update File C:\Windows\SoftwareDistribution\DataStore\
  279. MpCmdRun.log - Update File C:\Windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\
  280. ntuser.dat.LOG1 - Update File C:\Users\Test\
  281. NTUSER.DAT - Update File C:\Users\Test\
  282. edb.chk - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  283. edb.log edb0003D.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  284. edb0003D.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  285. edb00033.log edbtmp.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  286. edb00034.log - Delete C:\Windows\SoftwareDistribution\DataStore\Logs\
  287. edb00035.log - Delete C:\Windows\SoftwareDistribution\DataStore\Logs\
  288. edb00036.log - Delete C:\Windows\SoftwareDistribution\DataStore\Logs\
  289. edb00037.log - Delete C:\Windows\SoftwareDistribution\DataStore\Logs\
  290. edb.log edb0003E.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  291. edb0003E.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  292. edb.log edb0003F.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  293. edb0003F.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  294. edbtmp.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  295. edbtmp.log edb.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  296. edb.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  297. edbtmp.log - Create C:\Windows\SoftwareDistribution\DataStore\Logs\
  298. Logs - Update File C:\Windows\SoftwareDistribution\DataStore\
  299. edb.chk - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  300. edb.log edb00040.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  301. edb00040.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  302. edb00038.log edbtmp.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  303. edb00039.log - Delete C:\Windows\SoftwareDistribution\DataStore\Logs\
  304. edb.log edb00041.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  305. edb00041.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  306. edbtmp.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  307. edbtmp.log edb.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  308. edb.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  309. edbtmp.log - Create C:\Windows\SoftwareDistribution\DataStore\Logs\
  310. Logs - Update File C:\Windows\SoftwareDistribution\DataStore\
  311. SYSTEM.LOG1 - Update File C:\Windows\System32\config\
  312. SYSTEM - Update File C:\Windows\System32\config\
  313. ntuser.dat.LOG1 - Update File C:\Users\Test\
  314. NTUSER.DAT - Update File C:\Users\Test\
  315. ntuser.dat.LOG1 - Update File C:\Users\Test\
  316. NTUSER.DAT - Update File C:\Users\Test\
  317. Temp - Update File C:\Users\Test\AppData\Local\
  318. edb.chk - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  319. edb.log edb00042.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  320. edb00042.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  321. edbtmp.log edb.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  322. edb.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  323. edb0003A.log edbtmp.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  324. Logs - Update File C:\Windows\SoftwareDistribution\DataStore\
  325. edbtmp.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  326. UsrClass.dat.LOG1 - Update File C:\Users\Test\AppData\Local\Microsoft\Windows\
  327. UsrClass.dat - Update File C:\Users\Test\AppData\Local\Microsoft\Windows\
  328. ntuser.dat.LOG1 - Update File C:\Users\Test\
  329. NTUSER.DAT - Update File C:\Users\Test\
  330. UsrClass.dat.LOG1 - Update File C:\Users\Test\AppData\Local\Microsoft\Windows\
  331. UsrClass.dat - Update File C:\Users\Test\AppData\Local\Microsoft\Windows\
  332. edb.log edb00043.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  333. edb00043.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  334. edb.log edb00044.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  335. edb00044.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  336. edb.log edb00045.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  337. edb00045.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  338. edbtmp.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  339. edbtmp.log edb.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  340. edb.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  341. edbtmp.log - Create C:\Windows\SoftwareDistribution\DataStore\Logs\
  342. Logs - Update File C:\Windows\SoftwareDistribution\DataStore\
  343. DLLHOST.EXE-5E46FA0D.pf - Update File C:\Windows\Prefetch\
  344. Desktop - Update File C:\Users\Test\
  345. Temp - Update File C:\Windows\
  346. 1b4dd67f29cb1962.automaticDestinations-ms - Update File C:\Users\Test\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\
  347. virus.txt - Create C:\Users\Test\Desktop\
  348. virus.txt - Delete C:\Users\Test\Desktop\
  349. 1b4dd67f29cb1962.automaticDestinations-ms - Update File C:\Users\Test\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\
  350. virus.lnk - Create C:\Users\Test\AppData\Roaming\Microsoft\Windows\Recent\
  351. Recent - Update File C:\Users\Test\AppData\Roaming\Microsoft\Windows\
  352. virus.lnk - Update File C:\Users\Test\AppData\Roaming\Microsoft\Windows\Recent\
  353. - - Create
  354. - - Create
  355. - - Create
  356. edb.chk - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  357. History.IE5 - Update File C:\Users\Test\AppData\Local\Microsoft\Windows\History\
  358. Desktop - Update File C:\Users\Test\
  359. virus.txt - Create C:\Users\Test\Desktop\
  360. virus.txt - Update File C:\Users\Test\Desktop\
  361. ntuser.dat.LOG1 - Update File C:\Users\Test\
  362. NTUSER.DAT - Update File C:\Users\Test\
  363. edb.chk - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  364. edb.log edb00046.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  365. edb00046.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  366. edbtmp.log edb.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  367. edb.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  368. edb0003B.log edbtmp.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  369. Logs - Update File C:\Windows\SoftwareDistribution\DataStore\
  370. edbtmp.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  371. edb0003C.log - Delete C:\Windows\SoftwareDistribution\DataStore\Logs\
  372. edb0003D.log - Delete C:\Windows\SoftwareDistribution\DataStore\Logs\
  373. edb0003E.log - Delete C:\Windows\SoftwareDistribution\DataStore\Logs\
  374. edb0003F.log - Delete C:\Windows\SoftwareDistribution\DataStore\Logs\
  375. Logs - Update File C:\Windows\SoftwareDistribution\DataStore\
  376. UsrClass.dat.LOG1 - Update File C:\Users\Test\AppData\Local\Microsoft\Windows\
  377. UsrClass.dat - Update File C:\Users\Test\AppData\Local\Microsoft\Windows\
  378. SEARCHPROTOCOLHOST.EXE-0CB8CADE.pf - Update File C:\Windows\Prefetch\
  379. SEARCHFILTERHOST.EXE-77482212.pf - Update File C:\Windows\Prefetch\
  380. 918e0ecb43d17e23.automaticDestinations-ms - Update File C:\Users\Test\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\
  381. SYSTEM.LOG1 - Update File C:\Windows\System32\config\
  382. SYSTEM - Update File C:\Windows\System32\config\
  383. TMP000000173C328372F8275F7D - Create C:\Windows\Temp\
  384. Temp - Update File C:\Windows\
  385. TMP000000173C328372F8275F7D - Update File C:\Windows\Temp\
  386. ntuser.dat.LOG1 - Update File C:\Users\Test\
  387. NTUSER.DAT - Update File C:\Users\Test\
  388. TMP000000173C328372F8275F7D - Delete C:\Windows\Temp\
  389. NOTEPAD.EXE-D8414F97.pf - Update File C:\Windows\Prefetch\
  390. edb.log edb00047.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  391. edb00047.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  392. edb.log edb00048.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  393. edb00048.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  394. edbtmp.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  395. edbtmp.log edb.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  396. edb.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  397. edbtmp.log - Create C:\Windows\SoftwareDistribution\DataStore\Logs\
  398. Logs - Update File C:\Windows\SoftwareDistribution\DataStore\
  399. edb.log edb00049.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  400. edb00049.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  401. edb.chk - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  402. edb00040.log edbtmp.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  403. edb00041.log - Delete C:\Windows\SoftwareDistribution\DataStore\Logs\
  404. edb.log edb0004A.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  405. edb0004A.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  406. edbtmp.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  407. edbtmp.log edb.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  408. Logs - Update File C:\Windows\SoftwareDistribution\DataStore\
  409. edb.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  410. edb.log edb0004B.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  411. edb0004B.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  412. edb.log edb0004C.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  413. edb0004C.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  414. edbtmp.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  415. edbtmp.log edb.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  416. edb.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  417. edbtmp.log - Create C:\Windows\SoftwareDistribution\DataStore\Logs\
  418. Logs - Update File C:\Windows\SoftwareDistribution\DataStore\
  419. SYSTEM.LOG1 - Update File C:\Windows\System32\config\
  420. SYSTEM - Update File C:\Windows\System32\config\
  421. ntuser.dat.LOG1 - Update File C:\Users\Test\
  422. NTUSER.DAT - Update File C:\Users\Test\
  423. edb.chk - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  424. SOFTWARE.LOG1 - Update File C:\Windows\System32\config\
  425. SOFTWARE - Update File C:\Windows\System32\config\
  426. Syscache.hve.LOG1 - Update File C:\System Volume Information\
  427. Syscache.hve - Update File C:\System Volume Information\
  428. edb.log edb0004D.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  429. edb0004D.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  430. edb.log edb0004E.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  431. edb0004E.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  432. edb.chk - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  433. edb00042.log edbtmp.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  434. edb00043.log - Delete C:\Windows\SoftwareDistribution\DataStore\Logs\
  435. edb00044.log - Delete C:\Windows\SoftwareDistribution\DataStore\Logs\
  436. edb00045.log - Delete C:\Windows\SoftwareDistribution\DataStore\Logs\
  437. edb.log edb0004F.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  438. edb0004F.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  439. edb.log edb00050.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  440. edb00050.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  441. edb.log edb00051.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  442. edb00051.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  443. edbtmp.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  444. edbtmp.log edb.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  445. edb.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  446. edbtmp.log - Create C:\Windows\SoftwareDistribution\DataStore\Logs\
  447. Logs - Update File C:\Windows\SoftwareDistribution\DataStore\
  448. edb.chk - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  449. COMPONENTS.LOG1 - Update File C:\Windows\System32\config\
  450. COMPONENTS - Update File C:\Windows\System32\config\
  451. 18827c4afa9acf01b3000000240f840a.$$.cdf-ms - Delete C:\Windows\winsxs\Temp\PendingRenames\
  452. 1cc3fb49fa9acf01a9000000240f840a._0000000000000000.cdf-ms - Delete C:\Windows\winsxs\Temp\PendingRenames\
  453. 1cc3fb49fa9acf01aa000000240f840a.$$.cdf-ms - Delete C:\Windows\winsxs\Temp\PendingRenames\
  454. 26a9834afa9acf01b4000000240f840a.$$_system32_21f9a9c4a2f8b514.cdf-ms - Delete C:\Windows\winsxs\Temp\PendingRenames\
  455. 2aea024afa9acf01ab000000240f840a.$$_system32_21f9a9c4a2f8b514.cdf-ms - Delete C:\Windows\winsxs\Temp\PendingRenames\
  456. 2c215b4afa9acf01b0000000240f840a.pending.xml - Delete C:\Windows\winsxs\Temp\PendingRenames\
  457. 34d08a4afa9acf01b5000000240f840a.$$_system32_en-us_429cd25484dc6f94.cdf-ms - Delete C:\Windows\winsxs\Temp\PendingRenames\
  458. 38110a4afa9acf01ac000000240f840a.$$_system32_en-us_429cd25484dc6f94.cdf-ms - Delete C:\Windows\winsxs\Temp\PendingRenames\
  459. be1f7a4afa9acf01b2000000240f840a._0000000000000000.cdf-ms - Delete C:\Windows\winsxs\Temp\PendingRenames\
  460. PendingRenames - Update File C:\Windows\winsxs\Temp\
  461. COMPONENTS.LOG1 - Update File C:\Windows\System32\config\
  462. COMPONENTS - Update File C:\Windows\System32\config\
  463. SYSTEM.LOG1 - Update File C:\Windows\System32\config\
  464. SYSTEM - Update File C:\Windows\System32\config\
  465. SCHEMA.DAT{e29ac73d-7037-11de-816d-001c23e25b76}.TMContainer00000000000000000001.regtrans-ms - Update File C:\Windows\System32\SMI\Store\Machine\
  466. SCHEMA.DAT{e29ac73d-7037-11de-816d-001c23e25b76}.TM.blf - Update File C:\Windows\System32\SMI\Store\Machine\
  467. SCHEMA.DAT{e29ac73c-7037-11de-816d-001c23e25b76}.TxR.0.regtrans-ms - Delete C:\Windows\System32\SMI\Store\Machine\
  468. SCHEMA.DAT{e29ac73c-7037-11de-816d-001c23e25b76}.TxR.1.regtrans-ms - Delete C:\Windows\System32\SMI\Store\Machine\
  469. SCHEMA.DAT{e29ac73c-7037-11de-816d-001c23e25b76}.TxR.2.regtrans-ms - Delete C:\Windows\System32\SMI\Store\Machine\
  470. SCHEMA.DAT{e29ac73c-7037-11de-816d-001c23e25b76}.TxR.blf - Delete C:\Windows\System32\SMI\Store\Machine\
  471. SCHEMA.DAT - Update File C:\Windows\System32\SMI\Store\Machine\
  472. COMPONENTS{6cced2ed-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms - Update File C:\Windows\System32\config\
  473. COMPONENTS{6cced2ed-6e01-11de-8bed-001e0bcd1824}.TM.blf - Update File C:\Windows\System32\config\
  474. COMPONENTS{6cced2ec-6e01-11de-8bed-001e0bcd1824}.TxR.0.regtrans-ms - Delete C:\Windows\System32\config\
  475. COMPONENTS{6cced2ec-6e01-11de-8bed-001e0bcd1824}.TxR.1.regtrans-ms - Delete C:\Windows\System32\config\
  476. COMPONENTS{6cced2ec-6e01-11de-8bed-001e0bcd1824}.TxR.2.regtrans-ms - Delete C:\Windows\System32\config\
  477. COMPONENTS{6cced2ec-6e01-11de-8bed-001e0bcd1824}.TxR.blf - Delete C:\Windows\System32\config\
  478. COMPONENTS - Update File C:\Windows\System32\config\
  479. Machine - Update File C:\Windows\System32\SMI\Store\
  480. SOFTWARE.LOG1 - Update File C:\Windows\System32\config\
  481. SOFTWARE - Update File C:\Windows\System32\config\
  482. CBS.log - Update File C:\Windows\Logs\CBS\
  483. C:\ - Update Directory C:\
  484. SYSTEM.LOG1 - Update File C:\Windows\System32\config\
  485. SYSTEM - Update File C:\Windows\System32\config\
  486. edb.chk - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  487. edb.log edb00056.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  488. edb00056.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  489. edb0004D.log edbtmp.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  490. edb0004E.log - Delete C:\Windows\SoftwareDistribution\DataStore\Logs\
  491. edb0004F.log - Delete C:\Windows\SoftwareDistribution\DataStore\Logs\
  492. edb00050.log - Delete C:\Windows\SoftwareDistribution\DataStore\Logs\
  493. edb00051.log - Delete C:\Windows\SoftwareDistribution\DataStore\Logs\
  494. edb.log edb00057.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  495. edb00057.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  496. edbtmp.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  497. edbtmp.log edb.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  498. edb.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  499. edbtmp.log - Create C:\Windows\SoftwareDistribution\DataStore\Logs\
  500. Logs - Update File C:\Windows\SoftwareDistribution\DataStore\
  501. ntuser.dat.LOG1 - Update File C:\Users\Test\
  502. NTUSER.DAT - Update File C:\Users\Test\
  503. RecentFileCache.bcf - Update File C:\Windows\AppCompat\Programs\
  504. Syscache.hve.LOG1 - Update File C:\System Volume Information\
  505. Syscache.hve - Update File C:\System Volume Information\
  506. edb.log edb00058.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  507. edb00058.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  508. edb.log edb00059.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  509. edb00059.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  510. edb.log edb0005A.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  511. edb0005A.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  512. edb.log edb0005B.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  513. edb0005B.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  514. edb.log edb0005C.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  515. edb0005C.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  516. edb.log edb0005D.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  517. edb0005D.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  518. edb.log edb0005E.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  519. edb0005E.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  520. edb.log edb0005F.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  521. edb0005F.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  522. edbtmp.log - Create C:\Windows\SoftwareDistribution\DataStore\Logs\
  523. edb.log edb00060.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  524. edb00060.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  525. edbtmp.log edb.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  526. edb.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  527. edb.chk - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  528. edb00052.log edbtmp.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  529. edbtmp.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  530. edb00053.log - Delete C:\Windows\SoftwareDistribution\DataStore\Logs\
  531. edb00054.log - Delete C:\Windows\SoftwareDistribution\DataStore\Logs\
  532. edb00055.log - Delete C:\Windows\SoftwareDistribution\DataStore\Logs\
  533. Logs - Update File C:\Windows\SoftwareDistribution\DataStore\
  534. TASKMGR.EXE-5F5F473D.pf - Create C:\Windows\Prefetch\
  535. Prefetch - Update File C:\Windows\
  536. TASKMGR.EXE-5F5F473D.pf - Update File C:\Windows\Prefetch\
  537. TMP000000185C92677ACA8D1717 - Create C:\Windows\Temp\
  538. Temp - Update File C:\Windows\
  539. TMP000000185C92677ACA8D1717 - Update File C:\Windows\Temp\
  540. SYSTEM.LOG1 - Update File C:\Windows\System32\config\
  541. SYSTEM - Update File C:\Windows\System32\config\
  542. CONSENT.EXE-531BD9EA.pf - Update File C:\Windows\Prefetch\
  543. edb.log edb00061.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  544. edb00061.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  545. edbtmp.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  546. edbtmp.log edb.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  547. edb.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  548. edbtmp.log - Create C:\Windows\SoftwareDistribution\DataStore\Logs\
  549. Logs - Update File C:\Windows\SoftwareDistribution\DataStore\
  550. ntuser.dat.LOG1 - Update File C:\Users\Test\
  551. NTUSER.DAT - Update File C:\Users\Test\
  552. DLLHOST.EXE-766398D2.pf - Update File C:\Windows\Prefetch\
  553. DLLHOST.EXE-766398D2.pf - Update File C:\Windows\Prefetch\
  554. SOFTWARE.LOG1 - Update File C:\Windows\System32\config\
  555. SOFTWARE - Update File C:\Windows\System32\config\
  556. TASKMGR.EXE-5F5F473D.pf - Update File C:\Windows\Prefetch\
  557. edb.chk - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  558. TMP000000185C92677ACA8D1717 - Delete C:\Windows\Temp\
  559. ntuser.dat.LOG1 - Update File C:\Users\Test\
  560. NTUSER.DAT - Update File C:\Users\Test\
  561. Temp - Update File C:\Windows\
  562. Temp - Update File C:\ProgramData\Microsoft\RAC\
  563. SOFTWARE.LOG1 - Update File C:\Windows\System32\config\
  564. SOFTWARE - Update File C:\Windows\System32\config\
  565. 6375cc1c-d975-48d2-9cd5-63db19b10d4a - Update File C:\Windows\System32\LogFiles\Scm\
  566. RDRB82C.tmp - New Directory C:\Users\Test\AppData\Local\Temp\
  567. RDRB82C.tmp - Create C:\Users\Test\AppData\Local\Temp\
  568. RDRB82C.tmp - Delete C:\Users\Test\AppData\Local\Temp\
  569. Temp - Update File C:\Users\Test\AppData\Local\
  570. empty.txt - Create C:\Users\Test\AppData\Local\Temp\RDRB82C.tmp\
  571. RDRB82C.tmp - Update File C:\Users\Test\AppData\Local\Temp\
  572. Microsoft-Windows-Resource-Exhaustion-Resolver%4Operational.evtx - Create C:\Windows\System32\winevt\Logs\
  573. Logs - Update File C:\Windows\System32\winevt\
  574. Microsoft-Windows-Resource-Exhaustion-Resolver%4Operational.evtx - Update File C:\Windows\System32\winevt\Logs\
  575. TASKHOST.EXE-7238F31D.pf - Update File C:\Windows\Prefetch\
  576. RDRB82C.tmp - Delete Directory C:\Users\Test\AppData\Local\Temp\
  577. 6e9ebca3-8c96-4939-88a8-9e7d3fe9423f.png - Update File C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows Media Player NSS\3.0\Icon Files\
  578. empty.txt - Delete C:\Users\Test\AppData\Local\Temp\RDRB82C.tmp\
  579. edb.log edb00062.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  580. edb00062.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  581. edbtmp.log edb.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  582. edb00056.log edbtmp.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  583. edbtmp.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  584. edb00057.log - Delete C:\Windows\SoftwareDistribution\DataStore\Logs\
  585. edb00058.log - Delete C:\Windows\SoftwareDistribution\DataStore\Logs\
  586. edb00059.log - Delete C:\Windows\SoftwareDistribution\DataStore\Logs\
  587. edb0005A.log - Delete C:\Windows\SoftwareDistribution\DataStore\Logs\
  588. edb0005B.log - Delete C:\Windows\SoftwareDistribution\DataStore\Logs\
  589. edb0005C.log - Delete C:\Windows\SoftwareDistribution\DataStore\Logs\
  590. edb0005D.log - Delete C:\Windows\SoftwareDistribution\DataStore\Logs\
  591. edb0005E.log - Delete C:\Windows\SoftwareDistribution\DataStore\Logs\
  592. edb0005F.log - Delete C:\Windows\SoftwareDistribution\DataStore\Logs\
  593. edb00060.log - Delete C:\Windows\SoftwareDistribution\DataStore\Logs\
  594. edb.log edb00063.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  595. edb00063.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  596. edb.log edb00064.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  597. edb00064.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  598. SYSTEM.LOG1 - Update File C:\Windows\System32\config\
  599. edb.log edb00065.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  600. edb00065.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  601. Temp - Update File C:\Users\Test\AppData\Local\
  602. SYSTEM - Update File C:\Windows\System32\config\
  603. edb.log edb00066.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  604. edb00066.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  605. edbtmp.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  606. edbtmp.log edb.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  607. edbtmp.log - Create C:\Windows\SoftwareDistribution\DataStore\Logs\
  608. Logs - Update File C:\Windows\SoftwareDistribution\DataStore\
  609. edb.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  610. edb.log edb00067.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  611. edb00067.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  612. edb.log edb00068.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  613. edb00068.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  614. edbtmp.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  615. edbtmp.log edb.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  616. edb.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  617. edbtmp.log - Create C:\Windows\SoftwareDistribution\DataStore\Logs\
  618. Logs - Update File C:\Windows\SoftwareDistribution\DataStore\
  619. edb.log edb00069.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  620. edb00069.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  621. edbtmp.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  622. edbtmp.log edb.log Rename File C:\Windows\SoftwareDistribution\DataStore\Logs\
  623. edb.log - Update File C:\Windows\SoftwareDistribution\DataStore\Logs\
  624. edbtmp.log - Create C:\Windows\SoftwareDistribution\DataStore\Logs\
  625. Logs - Update File C:\Windows\SoftwareDistribution\DataStore\
  626. SOFTWARE.LOG1 - Update File C:\Windows\System32\config\
  627. SOFTWARE - Update File C:\Windows\System32\config\
  628.  
  629.  
  630.  
  631. ------------------------------------------------
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!