c:\windows\system32\slchook.dll
C:\ProgramData\Microsoft\Secure\Icons\IconsCacheHelper.dll
c:\programdata\hamfkleboegfmcnneggeklfeakhgjbch\manifest.json
c:\users\user_pc\downloads\ddt_tr_tr.exe
c:\users\user_pc\downloads\eurotrucksimulator2.exe
c:\users\user_pc\downloads\facebook_watch_video_(1).exe
c:\users\user_pc\downloads\facebook_watch_video_x7.exe
c:\users\user_pc\downloads\freemakevideoconvertersetup.exe
c:\users\user_pc\downloads\onaylanmayan 549287.crdownload
c:\users\user_pc\downloads\photoscape3.7-tamindir.exe
c:\users\user_pc\downloads\pro-evolution-soccer-2015-reloaded-full-torrent-i_id3116707ids1s.exe
c:\users\user_pc\downloads\sony vegas pro 12 keygen.zip.exe
c:\users\user_pc\downloads\tikla_sex_izle.exe
c:\users\user_pc\downloads\programs\skzprvlup3.64.wt.part.rar_29tbl.exe
c:\programdata\application data\giemelgpjjpddllihioggnnjpkgblale\manifest.json
c:\programdata\application data\hamfkleboegfmcnneggeklfeakhgjbch\manifest.json
c:\programdata\application data\hnldckbbmbeoeapdokkfffmcibeadghi\manifest.json
c:\programdata\application data\jpgedmmlhodhdcpmpfcifjhnckjeoome\manifest.json
c:\programdata\application data\microsoft\windows defender\localcopy\{a54ea10b-9623-b1bc-4857-8039e1254cb3}-tmpe13d.exe
c:\programdata\giemelgpjjpddllihioggnnjpkgblale\manifest.json
c:\programdata\hnldckbbmbeoeapdokkfffmcibeadghi\manifest.json
c:\programdata\jpgedmmlhodhdcpmpfcifjhnckjeoome\manifest.json
c:\programdata\microsoft\windows defender\localcopy\{a54ea10b-9623-b1bc-4857-8039e1254cb3}-tmpe13d.exe
c:\users\user_pc\appdata\local\ohdics\tmpa1ae.exe
c:\users\user_pc\appdata\local\ohdics\tmpab24.exe
c:\users\user_pc\appdata\local\ohdics\tmpab25.exe
c:\users\user_pc\appdata\local\ohdics\tmpb536.exe
c:\users\user_pc\appdata\local\ohdics\tmpbf19.exe
c:\users\user_pc\appdata\local\otics\acropdf.dll
c:\users\user_pc\appdata\local\otics\far.dll
c:\users\user_pc\appdata\local\otics\rwdesignerservices.dll
c:\users\user_pc\appdata\local\yandex\yandexbrowser\user data\default\extensions\bbglkiiiofelplniblholffbhhjmdhhi\1.26.84_0\manifest.json
c:\users\user_pc\appdata\local\yandex\yandexbrowser\user data\default\extensions\elmggllmmdmjlbkfnbpmmfaofkihmcag\1.26.35_0\manifest.json
c:\users\user_pc\appdata\roaming\337\bombom\traydownloader.exe
c:\users\user_pc\appdata\roaming\mozilla\firefox\profiles\nahd6ha2.default\extensions\staged\df@u5kbfpd.com\install.rdf
c:\users\user_pc\appdata\roaming\mozilla\firefox\profiles\nahd6ha2.default\extensions\staged\p@5fmwne.edu\install.rdf
c:\users\user_pc\appdata\roaming\mozilla\firefox\profiles\nahd6ha2.default\extensions\staged\zgij@hnuypg.edu\install.rdf
c:\users\user_pc\appdata\roaming\opera software\opera stable\extensions\elmggllmmdmjlbkfnbpmmfaofkihmcag\1.26.35_0\manifest.json
c:\program files (x86)\adobe\4003c40b-bc02-49de-8053-4b9448476540.dll
c:\program files (x86)\adobe\b5bc8bd1-bc98-4e9b-95ae-09208bca1d06.dll
c:\program files (x86)\homepage\instl2.exe
c:\program files (x86)\homepage\unstl.exe
c:\program files (x86)\pro evolution soccer 2015\steam_api.dll
c:\programdata\application data\giemelgpjjpddllihioggnnjpkgblale\content.js
c:\programdata\application data\hnldckbbmbeoeapdokkfffmcibeadghi\content.js
c:\programdata\application data\jpgedmmlhodhdcpmpfcifjhnckjeoome\content.js
c:\programdata\giemelgpjjpddllihioggnnjpkgblale\content.js
c:\programdata\hnldckbbmbeoeapdokkfffmcibeadghi\content.js
c:\programdata\jpgedmmlhodhdcpmpfcifjhnckjeoome\content.js