Check Browsers' LNK by Alex Dragokas & regist ver. 2.1.0.7 ( Beta ) OS: x64 Windows 10 (Home), 10.0.10586, Service Pack: 0 (SM=Personal + SingleUserTS, PT=Workstation) Time: 02.11.2016 - 15:58 Language: OS: English (0x409). Display: English (0x409). Non-Unicode: English (0x409). Codepage: OEM - c_437.nls (!) (Valid), ANSI - c_1252.nls (!) (Valid) Elevated: Yes User: Natascha (group: Administrator) on YAZZYBEE * Suspicious objects will be marked with prefix >>> =========================================================================== (((((( BROWSER shortcuts )))))) =========================================================================== [__________________________ With arguments _____________________________] >>> "C:\Users\Natascha\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\360c22b137d62ce9\Google Chrome.lnk" -> ["C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" =>> --profile-directory=ChromeDefaultData] [=========================================================================] (((((( Other shortcuts )))))) =========================================================================== [______________________ Suspicious ( low risk ) ________________________] - "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit\Reference Documentation.lnk" -> (the header is not LNK type) Header=0x5B7B30303032313441302D303030302D30303030 (201 bytes) -[script] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS\PC Diagnostics\Uninstall.lnk" -> ["C:\Program Files (x86)\ASUS\ASUS PC Diagnostics\Uninstall.bat"] -> start %SystemRoot%\system32\msiexec.exe %1 %2 %3¶ (cp: 20127) (MD5:DB0A7824CFB9F5C05CAEDBA82E53AFFA) -[HTTP] "C:\Users\Natascha\Users\Public\Desktop\ASUS\Entertainment\Build-a-lot 4 - Power Source.lnk" -> ["(Internet Explorer)" =>> hxxp://dts1.freeridegames.com/freeride_marketing/Partners/asus/asus.html?game=648250] -[HTTP] "C:\Users\Natascha\Users\Public\Desktop\ASUS\Entertainment\Delicious Emily's Childhood Memories.lnk" -> ["(Internet Explorer)" =>> hxxp://dts1.freeridegames.com/freeride_marketing/Partners/asus/asus.html?game=721350] -[HTTP] "C:\Users\Natascha\Users\Public\Desktop\ASUS\Entertainment\Jewel Quest Mysteries 2.lnk" -> ["(Internet Explorer)" =>> hxxp://dts1.freeridegames.com/freeride_marketing/Partners/asus/asus.html?game=652850] -[HTTP] "C:\Users\Natascha\Users\Public\Desktop\ASUS\Entertainment\Snark Busters - Welcome to the Club.lnk" -> ["(Internet Explorer)" =>> hxxp://dts1.freeridegames.com/freeride_marketing/Partners/asus/asus.html?game=700350] -[HTTP] "C:\Users\Natascha\Users\Public\Desktop\ASUS\Entertainment\The Treasures of Montezuma 3.lnk" -> ["(Internet Explorer)" =>> hxxp://dts1.freeridegames.com/freeride_marketing/Partners/asus/asus.html?game=729250] -[HTTP] "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\http--www.casacama.com-huren-zoeken-index.phpshowdetails=156.lnk" -> ["(Internet Explorer)" =>> hxxp://vvv.casacama.com/huren/zoeken/index.php?showdetails=156] -[HTTP] "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\http--www.casacama.com-huren-zoeken-index.phpshowdetails=170.lnk" -> ["(Internet Explorer)" =>> hxxp://vvv.casacama.com/huren/zoeken/index.php?showdetails=170] -[HTTP] "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\http--www.casacama.com-huren-zoeken-index.phpshowdetails=206.lnk" -> ["(Internet Explorer)" =>> hxxp://vvv.casacama.com/huren/zoeken/index.php?showdetails=206] -[HTTP] "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\http--www.facebook.com-photo.phpfbid=10151348530232073&set=a.487744692072.268897.687822072&type=1&ref=nf.lnk" -> ["(Internet Explorer)" =>> hxxp://vvv.facebook.com/photo.php?fbid=10151348530232073&set=a.487744692072.268897.687822072&type=1&ref=nf] -[HTTP] "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\http--www.fotovanrotterdam.nl-zoeken.php.lnk" -> ["(Internet Explorer)" =>> hxxp://vvv.fotovanrotterdam.nl/zoeken.php] -[HTTP] "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\http--www.xbox.com-.lnk" -> ["(Internet Explorer)" =>> hxxp://vvv.xbox.com/] -[HTTP] "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\https--www.adobe.com-cfusion-entitlement-index.cfmk=FA857A83-AC13-24D3-BB7B9CE17E4A34E2&loc=nl.lnk" -> ["(Internet Explorer)" =>> hxxps://vvv.adobe.com/cfusion/entitlement/index.cfm?k=FA857A83-AC13-24D3-BB7B9CE17E4A34E2&loc=nl] -[HTTP] "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Postkaarten Europa Nederland - Delcampe.net.lnk" -> ["(Internet Explorer)" =>> hxxp://ansichtkaarten.delcampe.net/page/category/language%2cD%2ccat%2c9915%2cvar%2c0-Nederland-Europa-Postkaarten.html] [_______________________ Target does not exist _________________________] >>> "C:\Users\Natascha\Users\Public\Desktop\ASUS\Entertainment\LifeFrame.lnk" -> ["C:\Program Files (x86)\ASUS\ASUS LifeFrame3\LifeFrame.exe"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Outlook.lnk" -> ["C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE" =>> /recycle] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Office\Recent\20000400.LNK" -> ["C:\Users\Natascha\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\21d08c8f5fb96318\120712-0049\Att\20000400"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Office\Recent\200008b4.LNK" -> ["C:\Users\Natascha\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\21d08c8f5fb96318\120712-0049\Att\200008b4"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Office\Recent\20001030.LNK" -> ["C:\Users\Natascha\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\21d08c8f5fb96318\120712-0049\Att\20001030"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Office\Recent\2000130d.LNK" -> ["C:\Users\Natascha\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\21d08c8f5fb96318\120712-0049\Att\2000130d"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Office\Recent\20001a7b.LNK" -> ["C:\Users\Natascha\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\21d08c8f5fb96318\120712-0049\Att\20001a7b"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Office\Recent\20001bb5.LNK" -> ["C:\Users\Natascha\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\21d08c8f5fb96318\120712-0049\Att\20001bb5"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Office\Recent\2000321e.LNK" -> ["C:\Users\Natascha\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\21d08c8f5fb96318\120712-0049\Att\2000321e"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Office\Recent\Activiteitenschema 2013.LNK" -> ["C:\Users\Natascha\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\21d08c8f5fb96318\120712-0049\Att\20000400\Activiteitenschema 2013.doc"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Office\Recent\begroting.LNK" -> ["C:\Users\Natascha\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\21d08c8f5fb96318\120712-0049\Att\2000321e\begroting.xls"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Office\Recent\budget.LNK" -> ["C:\Users\Natascha\Documents\Excel huiswerk\budget.xlsx"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Office\Recent\cv[1].LNK" -> ["C:\Users\Natascha\Desktop\cv[1].doc"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Office\Recent\Excel huiswerk.LNK" -> ["C:\Users\Natascha\Documents\Excel huiswerk"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Office\Recent\opgave 1.LNK" -> ["C:\Users\Natascha\Documents\Excel huiswerk\opgave 1.xlsx"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Office\Recent\poke.LNK" -> ["C:\Users\Natascha\Documents\poke.docx"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Office\Recent\project fundraising (1).LNK" -> ["C:\Users\Natascha\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\21d08c8f5fb96318\120712-0049\Att\2000321e\project fundraising (1).doc"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\00.Adobe.Dreamweaver.lnk" -> ["C:\Users\user1\Videos\Lynda.com - Adobe CS6 Essential Training Complete Collection\Lynda.com - Dreamweaver CS6 Essential Training\00.Adobe.Dreamweaver"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\00.Introduction.lnk" -> ["C:\Users\user1\Videos\Lynda.com - Adobe CS6 Essential Training Complete Collection\Lynda.com - Dreamweaver CS6 Essential Training\00.Introduction"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\01.The.Dreamweaver.Interface.lnk" -> ["C:\Users\user1\Videos\Lynda.com - Adobe CS6 Essential Training Complete Collection\Lynda.com - Dreamweaver CS6 Essential Training\01.The.Dreamweaver.Interface"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\01_07.lnk" -> ["C:\Users\user1\Videos\Lynda.com - Adobe CS6 Essential Training Complete Collection\Lynda.com - Dreamweaver CS6 Essential Training\Exercise Files\Ex_Files_DW_CS6_EssT\Exercise Files\Chapter_01\01_07"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\10.Things.I.Hate.About.You.(1999)720p.lnk" -> ["C:\Users\Natascha\Downloads\10 Things I Hate About You (1999)\10.Things.I.Hate.About.You.(1999)720p.mkv"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\13 Ghost's.DvDRiP-Lix.lnk" -> ["C:\Users\Natascha\Downloads\13 Ghost's.DvDRiP-Lix"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\13 Ghosts.lnk" -> ["C:\Users\Natascha\Downloads\13 Ghost's.DvDRiP-Lix\13 Ghosts.avi"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\2000321e.lnk" -> ["C:\Users\user1\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\21d08c8f5fb96318\120712-0049\Att\2000321e"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\20003b35.lnk" -> ["C:\Users\user1\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\21d08c8f5fb96318\120712-0049\Att\20003b35"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\375161_497646343622146_1255403419_n.lnk" -> ["C:\Users\Natascha\Dropbox\375161_497646343622146_1255403419_n.jpg"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\428036_497644426955671_1856314754_n.lnk" -> ["C:\Users\Natascha\Dropbox\428036_497644426955671_1856314754_n.jpg"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\5668-AI-MX.rar.lnk" -> ["C:\Users\Natascha\Downloads\5668-AI-MX.rar"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\97613_00_02_SC11_exercise.lnk" -> ["C:\Users\user1\Videos\Lynda.com - Adobe CS6 Essential Training Complete Collection\Lynda.com - Dreamweaver CS6 Essential Training\00.Introduction\97613_00_02_SC11_exercise.mov"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\97613_00_03_SC11_learning.lnk" -> ["C:\Users\user1\Videos\Lynda.com - Adobe CS6 Essential Training Complete Collection\Lynda.com - Dreamweaver CS6 Essential Training\00.Introduction\97613_00_03_SC11_learning.mov"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\97613_01_01_SC11_welcomeScreen.lnk" -> ["C:\Users\user1\Videos\Lynda.com - Adobe CS6 Essential Training Complete Collection\Lynda.com - Dreamweaver CS6 Essential Training\01.The.Dreamweaver.Interface\97613_01_01_SC11_welcomeScreen.mov"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\97613_01_02_SC11_interfaceDif.lnk" -> ["C:\Users\user1\Videos\Lynda.com - Adobe CS6 Essential Training Complete Collection\Lynda.com - Dreamweaver CS6 Essential Training\01.The.Dreamweaver.Interface\97613_01_02_SC11_interfaceDif.mov"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\97613_01_03_SC01_panels.lnk" -> ["C:\Users\user1\Videos\Lynda.com - Adobe CS6 Essential Training Complete Collection\Lynda.com - Dreamweaver CS6 Essential Training\01.The.Dreamweaver.Interface\97613_01_03_SC01_panels.mov"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\97613_01_04_SC11_workspace.lnk" -> ["C:\Users\user1\Videos\Lynda.com - Adobe CS6 Essential Training Complete Collection\Lynda.com - Dreamweaver CS6 Essential Training\01.The.Dreamweaver.Interface\97613_01_04_SC11_workspace.mov"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\97613_01_05_SC11_appToolbar.lnk" -> ["C:\Users\user1\Videos\Lynda.com - Adobe CS6 Essential Training Complete Collection\Lynda.com - Dreamweaver CS6 Essential Training\01.The.Dreamweaver.Interface\97613_01_05_SC11_appToolbar.mov"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\97613_01_06_SC11_docToolbar.lnk" -> ["C:\Users\user1\Videos\Lynda.com - Adobe CS6 Essential Training Complete Collection\Lynda.com - Dreamweaver CS6 Essential Training\01.The.Dreamweaver.Interface\97613_01_06_SC11_docToolbar.mov"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\97613_01_07_SC11_properties.lnk" -> ["C:\Users\user1\Videos\Lynda.com - Adobe CS6 Essential Training Complete Collection\Lynda.com - Dreamweaver CS6 Essential Training\01.The.Dreamweaver.Interface\97613_01_07_SC11_properties.mov"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\97613_01_08_SC11_insert.lnk" -> ["C:\Users\user1\Videos\Lynda.com - Adobe CS6 Essential Training Complete Collection\Lynda.com - Dreamweaver CS6 Essential Training\01.The.Dreamweaver.Interface\97613_01_08_SC11_insert.mov"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\About ships1.lnk" -> ["C:\Users\user1\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\21d08c8f5fb96318\120712-0049\Att\20001a7b\About ships1.pps"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\about.lnk" -> ["C:\Users\user1\Videos\Lynda.com - Adobe CS6 Essential Training Complete Collection\Lynda.com - Dreamweaver CS6 Essential Training\Exercise Files\Ex_Files_DW_CS6_EssT\Exercise Files\Chapter_01\01_07\about.htm"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Activiteitenschema 2013.lnk" -> ["C:\Users\Natascha\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\21d08c8f5fb96318\120712-0049\Att\20000400\Activiteitenschema 2013.doc"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Adobe Dreamweaver CS6 Digital Classroom V413HAV (2).lnk" -> ["C:\Users\Natascha\Downloads\Adobe Dreamweaver CS6 Digital Classroom V413HAV\Adobe Dreamweaver CS6 Digital Classroom V413HAV.pdf"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Airplane! [1980]-720p-BRrip-x264-StyLishSaLH (StyLish Release).lnk" -> ["C:\Users\user1\Downloads\Airplane! [1980]-720p-BRrip-x264-StyLishSaLH (StyLish Release)\Airplane! [1980]-720p-BRrip-x264-StyLishSaLH (StyLish Release).mp4"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Alles wat ik wil.lnk" -> ["C:\Users\user1\Documents\Alles wat ik wil.docx"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\attachment1.eml.lnk" -> ["C:\Users\Natascha\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\21d08c8f5fb96318\120712-0049\Att\20001bb5\attachment1.eml"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\bb foto's.lnk" -> ["C:\Users\user1\Pictures\Foto's\Suriname\bb foto's"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\beantwoording_uitleg_algemene_spelregels.lnk" -> ["C:\Users\user1\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\21d08c8f5fb96318\120712-0049\Att\20001300\beantwoording_uitleg_algemene_spelregels.pdf"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Bee.lnk" -> ["C:\Users\user1\Pictures\Foto's\Familie\Bee"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\begroting.lnk" -> ["C:\Users\user1\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\21d08c8f5fb96318\120712-0049\Att\2000321e\begroting.xls"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Berichtencentrale tips en trucs_bezoekers_willen_een_date.lnk" -> ["C:\Users\user1\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\21d08c8f5fb96318\120712-0049\Att\20001300\Berichtencentrale tips en trucs_bezoekers_willen_een_date.pdf"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\birthday and friends 2002 061.lnk" -> ["C:\Users\user1\Pictures\Foto's\Familie\Bee\birthday and friends 2002 061.jpg"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Bonaire.lnk" -> ["C:\Users\user1\Pictures\Foto's\Curacao 2005\Bonaire"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\bonaire42.lnk" -> ["C:\Users\user1\Pictures\Foto's\Curacao 2005\Bonaire\bonaire42.JPG"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Brickies.lnk" -> ["C:\Users\user1\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\21d08c8f5fb96318\120712-0049\Att\20000915\Brickies.WMV"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Bro & siss.lnk" -> ["C:\Users\user1\Pictures\Foto's\Familie\Bro & siss.JPG"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\budget.lnk" -> ["C:\Users\user1\Documents\Excel huiswerk\budget.xlsx"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\certificate.lnk" -> ["C:\Users\user1\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\21d08c8f5fb96318\120712-0049\Att\20002ef4\certificate.pdf"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\chapati.lnk" -> ["C:\Users\user1\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\21d08c8f5fb96318\120712-0049\Att\20000915\chapati.WMV"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\computercursus rooster.lnk" -> ["C:\Users\user1\Documents\Excel huiswerk\computercursus rooster.xlsx"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Containerschip Emma Maersk A1.lnk" -> ["C:\Users\user1\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\21d08c8f5fb96318\120712-0049\Att\200008b4\Containerschip Emma Maersk A1.pps"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\cv[1].lnk" -> ["C:\Users\Natascha\Desktop\cv[1].doc"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Dark.Skies.2013.DVDRip.XviD-PTpOWeR (2).lnk" -> ["C:\Users\Natascha\Downloads\Dark.Skies.2013.DVDRip.XviD-PTpOWeR"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Dark.Skies.2013.DVDRip.XviD-PTpOWeR.lnk" -> ["C:\Users\Natascha\Downloads\Dark.Skies.2013.DVDRip.XviD-PTpOWeR\Dark.Skies.2013.DVDRip.XviD-PTpOWeR.avi"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\decode_da_code_1.6.lnk" -> ["C:\Users\Natascha\Downloads\decode_da_code_1.6.zip"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Disconnect 2012 [Eng] DVDRip (XViD) (2).lnk" -> ["C:\Users\Natascha\Downloads\Disconnect 2012 [Eng] DVDRip (XViD)"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Disconnect 2012 [Eng] DVDRip (XViD) (3).lnk" -> ["C:\Users\Natascha\Downloads\Disconnect 2012 [Eng] DVDRip (XViD)\Disconnect 2012 [Eng] DVDRip (XViD).nfo"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Disconnect 2012 [Eng] DVDRip (XViD).lnk" -> ["C:\Users\Natascha\Downloads\Disconnect 2012 [Eng] DVDRip (XViD)\Disconnect 2012 [Eng] DVDRip (XViD).avi"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\dmd-exorcismer.lnk" -> ["D:\Movies\The Exorcism Of Emily Rose- UNRATED DVDRip XviD DiAMOND\dmd-exorcismer.avi"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\DMT NFO, Read before Playing.lnk" -> ["C:\Users\Natascha\Downloads\Alleen Maar Nette Mensen (2012) DVDrip (xvid) NL Gespr. DMT__\DMT NFO, Read before Playing.txt"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\DSC01193.lnk" -> ["C:\Users\user1\Pictures\Foto's\Suriname\M.P.S\DSC01193.JPG"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\DSC01645.lnk" -> ["C:\Users\user1\Desktop\dog business\foto's leden\Dexter\DSC01645.JPG"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\duitse_herder1.lnk" -> ["C:\Users\Natascha\Desktop\dog business\brochure\duitse_herder1.gif"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\duo.lnk" -> ["C:\Users\Natascha\Desktop\duo.docx"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Een+echte+vriend1.lnk" -> ["C:\Users\user1\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\21d08c8f5fb96318\120712-0049\Att\20001030\Een+echte+vriend1.pps"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Excel huiswerk.lnk" -> ["C:\Users\user1\Documents\Excel huiswerk"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Ex_Files_DW_CS6_EssT.lnk" -> ["C:\Users\user1\Videos\Lynda.com - Adobe CS6 Essential Training Complete Collection\Lynda.com - Dreamweaver CS6 Essential Training\Exercise Files\Ex_Files_DW_CS6_EssT.zip"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Familie.lnk" -> ["C:\Users\user1\Pictures\Foto's\Familie"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Friends.lnk" -> ["C:\Users\user1\Pictures\Foto's\Friends"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Grosse prend un bain.lnk" -> ["C:\Users\user1\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\21d08c8f5fb96318\120712-0049\Att\2000103b\Grosse prend un bain.wmv"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Hoe krijg je de poes binnen.lnk" -> ["C:\Users\user1\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\21d08c8f5fb96318\120712-0049\Att\200015b8\Hoe krijg je de poes binnen.wmv"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\I Can't Think Straight [2008] DVDRip [Dual Audio][Hindi+English][MTR] (Dev).lnk" -> ["C:\Users\Natascha\Downloads\I Can't Think Straight [2008] DVDRip [Dual Audio][Hindi+English][MTR] (Dev).mkv"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\index.lnk" -> ["C:\Users\Natascha\Desktop\Herder Club Suriname\index.html"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Jennie&Me @ Spain.lnk" -> ["C:\Users\user1\Pictures\Foto's\Friends\Jennie&Me @ Spain.jpg"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\LMS255.lnk" -> ["C:\Users\user1\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\21d08c8f5fb96318\120712-0049\Att\200026ae\LMS255.png"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\LMS546.lnk" -> ["C:\Users\user1\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\21d08c8f5fb96318\120712-0049\Att\200026ae\LMS546.png"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\LMS610 (1).lnk" -> ["C:\Users\user1\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\21d08c8f5fb96318\120712-0049\Att\20002710\LMS610 (1).png"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\LMS610.lnk" -> ["C:\Users\user1\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\21d08c8f5fb96318\120712-0049\Att\20002710\LMS610.png"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\LMS631.lnk" -> ["C:\Users\user1\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\21d08c8f5fb96318\120712-0049\Att\200026ae\LMS631.png"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Loving Annabelle.2006.DVDRip.XviD-VLiS (2).lnk" -> ["C:\Users\Natascha\Downloads\Loving Annabelle.2006.DVDRip.XviD-VLiS"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Loving Annabelle.2006.DVDRip.XviD-VLiS.lnk" -> ["C:\Users\Natascha\Downloads\Loving Annabelle.2006.DVDRip.XviD-VLiS\Loving Annabelle.2006.DVDRip.XviD-VLiS.avi"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\M.P.S.lnk" -> ["C:\Users\user1\Pictures\Foto's\Suriname\M.P.S"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Mama.2013.WEBRip.FIX.XviD.READNFO-THC.lnk" -> ["D:\Movies\[ www.UsaBit.com ] - Mama 2013 WEBRip FIX XviD READNFO-THC\Mama.2013.WEBRip.FIX.XviD.READNFO-THC.avi"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\message-skype-commartine.wigmans.lnk" -> ["(Internet Explorer)" =>> message-skype-com:martine.wigmans (unknown URI LNK)] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\MovieCollection.map.lnk" -> ["C:\Users\user1\Documents\CyberLink\LocalStorage_V2\DefaultMember\Misc\MovieCollection.map"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\ms-windows-storeInstallProgressPFN=HitcentsASUS.ForASUSDrawaStickmanEPICFree_k82ah1r79kh2y.lnk" -> ["(Internet Explorer)" =>> ms-windows-store:InstallProgress?PFN=HitcentsASUS.ForASUSDrawaStickmanEPICFree_k82ah1r79kh2y (unknown URI LNK)] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\ms-windows-storePDPPFN=Microsoft.SkypeApp_kzf8qxf38zg5c&sessionId=null.lnk" -> ["(Internet Explorer)" =>> ms-windows-store:PDP?PFN=Microsoft.SkypeApp_kzf8qxf38zg5c&sessionId=null (unknown URI LNK)] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Naughty siss.lnk" -> ["C:\Users\user1\Pictures\Foto's\Foto's fam. Bredius\Familie\Wigmans\Naughty siss.jpg"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Ontharen.lnk" -> ["C:\Users\user1\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\21d08c8f5fb96318\120712-0049\Att\20000657\Ontharen.wmv"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\opgave 1.lnk" -> ["C:\Users\user1\Documents\Excel huiswerk\opgave 1.xlsx"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\PICT0065.lnk" -> ["C:\Users\user1\Pictures\Foto's\spain\PICT0065.JPG"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\poke.lnk" -> ["C:\Users\user1\Documents\poke.docx"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\project fundraising (1).lnk" -> ["C:\Users\Natascha\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\21d08c8f5fb96318\120712-0049\Att\2000321e\project fundraising (1).doc"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\raak de twee ballen.lnk" -> ["C:\Users\user1\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\21d08c8f5fb96318\120712-0049\Att\20003b35\raak de twee ballen.wmv"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Read Me.lnk" -> ["C:\Users\Natascha\Downloads\Adobe Dreamweaver CS6 Digital Classroom V413HAV\Read Me.txt"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\README or despair (at installing this).lnk" -> ["C:\Users\Natascha\Downloads\Adobe Dreamweaver CS6 Crack .DLL Files\Patch\README or despair (at installing this).txt"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\setup.lnk" -> ["C:\Users\user1\Adobe Dreamweaver CS6\Adobe Dreamweaver CS6\resources\setup.xml"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Sex in de Natuur.lnk" -> ["C:\Users\user1\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\21d08c8f5fb96318\120712-0049\Att\2000130b\Sex in de Natuur.wmv"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Silent Hills (2006) [1080p].lnk" -> ["C:\Users\Natascha\Downloads\Silent Hills (2006) [1080p]"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Silent.Hill.2006.BluRay.1080p.x264.YIFY.lnk" -> ["C:\Users\Natascha\Downloads\Silent Hills (2006) [1080p]\Silent.Hill.2006.BluRay.1080p.x264.YIFY.mp4"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\sollicitatie.lnk" -> ["C:\Users\Natascha\Desktop\sollicitatie.docx"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\South Park Season 10 DvDrip-McTav.lnk" -> ["C:\Users\Natascha\Downloads\South Park Season 10 DvDrip-McTav"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\South Park [10.01] The Return of Chef.lnk" -> ["C:\Users\Natascha\Downloads\South Park Season 10 DvDrip-McTav\South Park [10.01] The Return of Chef.avi"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\spain.lnk" -> ["C:\Users\user1\Pictures\Foto's\spain"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Stephen King's It 1990 DVDRip Srkfan.lnk" -> ["C:\Users\Natascha\Downloads\Stephen King's It 1990 DVDRip Srkfan\Stephen King's It 1990 DVDRip Srkfan.mp4"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\The Exorcism of Emily Rose UNRATED (2005).lnk" -> ["C:\Users\Natascha\Downloads\The Exorcism of Emily Rose UNRATED (2005)"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\The Exorcism Of Emily Rose- UNRATED DVDRip XviD DiAMOND.lnk" -> ["D:\Movies\The Exorcism Of Emily Rose- UNRATED DVDRip XviD DiAMOND"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\The Haunting In Connecticut 2 Ghosts of Georgia (2013) NL Subs DD5.1 HDRip2DVD.lnk" -> ["C:\Users\Natascha\Downloads\The Haunting In Connecticut 2 Ghosts of Georgia (2013) NL Subs DD5.1 HDRip2DVD\The Haunting In Connecticut 2 Ghosts of Georgia (2013) NL Subs DD5.1 HDRip2DVD.nfo"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\The Ladies Man (Lewis, 1961).lnk" -> ["C:\Users\Natascha\Downloads\The Ladies Man (Lewis, 1961).avi"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\The Naked Gun III.lnk" -> ["C:\Users\Natascha\Downloads\The Naked Gun\The Naked Gun III.avi"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\The.Exorcism.of.Emily.Rose.UNRATED.2005.720p.BrRip.x264.BOKUTOX.YIFY.lnk" -> ["C:\Users\Natascha\Downloads\The Exorcism of Emily Rose UNRATED (2005)\The.Exorcism.of.Emily.Rose.UNRATED.2005.720p.BrRip.x264.BOKUTOX.YIFY.mp4"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\The.Possession.2012.DVDRip.XviD-RESiSTANCE.lnk" -> ["C:\Users\Natascha\Downloads\The.Possession.2012.DVDRip.XviD-RESiSTANCE.avi"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Torrent downloaded from Demonoid.com.lnk" -> ["C:\Users\Natascha\Downloads\10 Things I Hate About You (1999)\Torrent downloaded from Demonoid.com.txt"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Un-medaille-des-jo-mecontent111.lnk" -> ["C:\Users\user1\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\21d08c8f5fb96318\120712-0049\Att\200015b9\Un-medaille-des-jo-mecontent111.wmv"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\version.lnk" -> ["C:\Users\user1\Adobe Dreamweaver CS6\Adobe Dreamweaver CS6\resources\version.txt"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\VID 00001-20110611-1556.lnk" -> ["C:\Users\user1\Pictures\Foto's\Suriname\bb foto's\VID 00001-20110611-1556.3GP"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\VID 00002-20110804-1727.lnk" -> ["C:\Users\user1\Pictures\Foto's\Suriname\bb foto's\VID 00002-20110804-1727.3GP"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\VIDEO_TS.BUP.lnk" -> ["C:\Users\Natascha\Downloads\The Haunting In Connecticut 2 Ghosts of Georgia (2013) NL Subs DD5.1 HDRip2DVD\The Haunting In Connecticut 2 Ghosts of Georgia (2013) NL Subs DD5.1 HDRip2DVD\VIDEO_TS\VIDEO_TS.BUP"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\VIDEO_TS.lnk" -> ["C:\Users\Natascha\Downloads\The Haunting In Connecticut 2 Ghosts of Georgia (2013) NL Subs DD5.1 HDRip2DVD\The Haunting In Connecticut 2 Ghosts of Georgia (2013) NL Subs DD5.1 HDRip2DVD\VIDEO_TS\VIDEO_TS.IFO"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\VTS_01_0.lnk" -> ["C:\Users\Natascha\Downloads\The Haunting In Connecticut 2 Ghosts of Georgia (2013) NL Subs DD5.1 HDRip2DVD\The Haunting In Connecticut 2 Ghosts of Georgia (2013) NL Subs DD5.1 HDRip2DVD\VIDEO_TS\VTS_01_0.IFO"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\VTS_01_1.lnk" -> ["C:\Users\Natascha\Downloads\The Haunting In Connecticut 2 Ghosts of Georgia (2013) NL Subs DD5.1 HDRip2DVD\The Haunting In Connecticut 2 Ghosts of Georgia (2013) NL Subs DD5.1 HDRip2DVD\VIDEO_TS\VTS_01_1.VOB"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\VTS_02_1.lnk" -> ["C:\Users\Natascha\Downloads\The Haunting In Connecticut 2 Ghosts of Georgia (2013) NL Subs DD5.1 HDRip2DVD\The Haunting In Connecticut 2 Ghosts of Georgia (2013) NL Subs DD5.1 HDRip2DVD\VIDEO_TS\VTS_02_1.VOB"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\VTS_02_2.lnk" -> ["C:\Users\Natascha\Downloads\The Haunting In Connecticut 2 Ghosts of Georgia (2013) NL Subs DD5.1 HDRip2DVD\The Haunting In Connecticut 2 Ghosts of Georgia (2013) NL Subs DD5.1 HDRip2DVD\VIDEO_TS\VTS_02_2.VOB"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\VTS_02_3.lnk" -> ["C:\Users\Natascha\Downloads\The Haunting In Connecticut 2 Ghosts of Georgia (2013) NL Subs DD5.1 HDRip2DVD\The Haunting In Connecticut 2 Ghosts of Georgia (2013) NL Subs DD5.1 HDRip2DVD\VIDEO_TS\VTS_02_3.VOB"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\VTS_02_4.lnk" -> ["C:\Users\Natascha\Downloads\The Haunting In Connecticut 2 Ghosts of Georgia (2013) NL Subs DD5.1 HDRip2DVD\The Haunting In Connecticut 2 Ghosts of Georgia (2013) NL Subs DD5.1 HDRip2DVD\VIDEO_TS\VTS_02_4.VOB"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\wereld Belles_photos.lnk" -> ["C:\Users\user1\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\21d08c8f5fb96318\120712-0049\Att\2000130d\wereld Belles_photos.pps"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Wigmans.lnk" -> ["C:\Users\user1\Pictures\Foto's\Foto's fam. Bredius\Familie\Wigmans"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Worker Stuck In Ceiling - YouTube.lnk" -> ["C:\Users\user1\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\21d08c8f5fb96318\120712-0049\Att\20000656\Worker Stuck In Ceiling - YouTube.wmv"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\[ www.UsaBit.com ] - Mama 2013 WEBRip FIX XviD READNFO-THC.lnk" -> ["D:\Movies\[ www.UsaBit.com ] - Mama 2013 WEBRip FIX XviD READNFO-THC"] >>> "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\x264 Video Codec\Uninstall.lnk" -> ["C:\Program Files (x86)\x264 Video Codec\Uninstall.exe"] >>> "C:\ProgramData\Norton\{92622AAD-05E8-4459-B256-765CE1E929FB}\NST_2014.6.0.27\Norton Identity Safe.lnk" -> ["C:\Program Files (x86)\Norton Identity Safe\Engine\2014.6.0.27\coSAStub.exe" =>> /install /force] [__________________ Target on remote / network device __________________] - "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Office\Recent\dog business.LNK" -> ["\\YAZZYBEE-PC\Users\yazzybee\Desktop\dog business"] ( \\ - Remote disk ) - "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Office\Recent\TOSHIBA (F).LNK" -> ["F:\"] ( F:\ - Disconnected disk ) - "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Office\Recent\webplus x6.LNK" -> ["\\YAZZYBEE-PC\Users\yazzybee\Desktop\webplus x6"] ( \\ - Remote disk ) - "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Office\Recent\Woody.LNK" -> ["F:\dog business\foto's leden\Woody"] ( F:\ - Disconnected disk ) - "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\BEGIN.lnk" -> ["E:\BEGIN.INI"] ( E:\ - Disconnected disk ) - "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\companyname.lnk" -> ["\\YAZZYBEE-PC\Users\yazzybee\Desktop\dog business\companyname.docx"] ( \\ - Remote disk ) - "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\digitaal-paspoortaanvraagformulier.lnk" -> ["\\YAZZYBEE-PC\Users\yazzybee\Desktop\digitaal-paspoortaanvraagformulier.pdf"] ( \\ - Remote disk ) - "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Doc1.lnk" -> ["F:\Doc1.docx"] ( F:\ - Disconnected disk ) - "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Doc2.lnk" -> ["F:\Doc2.docx"] ( F:\ - Disconnected disk ) - "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\heliohost.lnk" -> ["\\YAZZYBEE-PC\Users\yazzybee\Desktop\heliohost.txt"] ( \\ - Remote disk ) - "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Licenses.lnk" -> ["\\YAZZYBEE-PC\Users\yazzybee\Desktop\webplus x6\Licenses.rtf"] ( \\ - Remote disk ) - "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\RAPLOGO.lnk" -> ["E:\RAPLOGO.BMP"] ( E:\ - Disconnected disk ) - "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\ReadMe (en-GB).lnk" -> ["\\YAZZYBEE-PC\Users\yazzybee\Desktop\webplus x6\ReadMe (en-GB).rtf"] ( \\ - Remote disk ) - "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\readme.lnk" -> ["\\YAZZYBEE-PC\Users\yazzybee\Desktop\webplus x6\_SERIALS FROM TBE and FOSI_\readme.txt"] ( \\ - Remote disk ) [__________________________ Cloud storages _____________________________] - "C:\Users\Natascha\AppData\Roaming\Microsoft\Windows\SendTo\Dropbox.lnk" -> ["I:\Dropbox"] -> ( target is on the removable device: Disconnected disk ) - "C:\Users\Natascha\Links\Dropbox.lnk" -> ["I:\Dropbox"] -> ( target is on the removable device: Disconnected disk ) - "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\Recent\Dropbox.lnk" -> ["C:\Users\Natascha\Dropbox"] - "C:\Users\Natascha\Users\user1\AppData\Roaming\Microsoft\Windows\SendTo\Dropbox.lnk" -> ["C:\Users\Natascha\Dropbox"] [=========================================================================] (((((( Other files and attributes )))))) =========================================================================== [__________________________ Hidden shortcuts ___________________________] -[h] "C:\Users\Natascha\Users\user1\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.SkypeApp_kzf8qxf38zg5c\App.lnk" -> [""] [=========================================================================] (((((( Internet shortcuts )))))) =========================================================================== - "C:\Users\Natascha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GitHub, Inc\GitHub online support.url" -> hxxps://help.github.com/desktop - "C:\Users\Natascha\Desktop\[Next_leveL]KMSAN140\Antivirus scan for KMSAuto Net.exe at UTC - VirusTotal.URL" -> hxxps://vvv.virustotal.com/en/file/5b945907fd7c981597f75d5545dd6743707ce973cf5751c4b65fa691eb936ddc/analysis/1443922995/ - "C:\Users\Natascha\Documents\New Folder\VectorOpenStock.com.url" -> hxxp://vvv.vectoropenstock.com/ - "C:\Users\Natascha\Favorites\Hongaarse Goulash Van Rudolph recept Smulweb.nl.url" -> file:///C:/Users/Natascha/AppData/Local/Packages/microsoft.windowscommunicationsapps_8wekyb3d8bbwe/LocalState/LiveComm/21d08c8f5fb96318/120712-0049/Att/20008921/Hongaarse Goulash Van Rudolph recept Smulweb_nl.mht - "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre - E-book Management\Get Involved.url" -> hxxp://calibre-ebook.com/get-involved - "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre - E-book Management\User Manual.url" -> hxxp://manual.calibre-ebook.com/ - "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Ultra\Online Help.URL" -> hxxp://ultra.daemon-help.com/ - "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kingo ROOT\Kingo ROOT on the Web.url" -> hxxp://vvv.kingoapp.com/ - "C:\Users\Natascha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GitHub, Inc\GitHub.appref-ms" -> ÿþhttp://github-windows.s3.amazonaws.com/GitHub.application#GitHub.application [_____________________________ Favorites _______________________________] - "C:\Users\Natascha\Favorites\Diarree bij de hond.url" -> hxxp://vvv.barfplaats.nl/forum/index.php?topic=66691.0 - "C:\Users\Natascha\Favorites\drawings of german shepherds - Google Search.url" -> hxxp://vvv.google.com/search?hl=en&site=imghp&tbm=isch&source=hp&biw=1366&bih=673&q=drawings+of+german+shepherds&oq=drawings+of+ger&gs_l=img.1.0.0l2j0i24l2.1967.10145.0.14784.15.11.0.4.4.0.213.2082.0j10j1.11.0...0.0...1ac.1.4.img.Bx_QfkCfXSQ#imgrc=cO7uhd - "C:\Users\Natascha\Favorites\Full Episode Player - South Park Studios.url" -> hxxp://vvv.southparkstudios.com/full-episodes - "C:\Users\Natascha\Favorites\GERMAN SHEPHERD by GILES ILLSLEY at STARVING ARTISTS.url" -> hxxp://starving-artists.net/index.htm?~illsley.htm - "C:\Users\Natascha\Favorites\HENRY by GILES ILLSLEY at STARVING ARTISTS.url" -> hxxp://starving-artists.net/GALLERIES/illsley/gi32.htm - "C:\Users\Natascha\Favorites\The Pirate Bay - The galaxy's most resilient bittorrent site.url" -> hxxp://pirateproxy.net/search/assasins creed 3/0/99/0 - "C:\Users\Natascha\FAVORI~1\THECOM~1.URL" ("C:\Users\Natascha\Favorites\▶ THE COMING (2008 version) - YouTube.url") -> hxxp://vvv.youtube.com/watch?v=Fu06Lxvoj4g&list=PLh8zLZtezyRFz7DY8ChtiL2ewaJ7mA3KT - "C:\Users\Natascha\Favorites\Lenovo Recommended Websites\Lenovo Cloud Storage by SugarSync.url" -> hxxps://vvv.sugarsync.com/affiliate/generic?l1=lenovo&l2=browser&url=hxxp://vvv.sugarsync.com/offers/lenovov1/ [____________________ Statistics ___________________] Threats found: 142 Files listed: 110412 (folders: 20454, shortcuts: 750) Time spent: 157 sec. (search: 143 sec.) Been verified: C:\Users\Natascha C:\Users\Administrator C:\Users\Default C:\Users\Public C:\ProgramData C:\Users\Default.migrated - NOT profile _____________________________ End of Log ________________________________ [______________________ Maximum of file objects __________________________] 1261 ( 1261 ) - C:\Users\Natascha\AppData\Local\Research In Motion\Application Loader\Cache\d6ae001d95bd2888dc6e48970018a1fb0f900e37\Java 1432 ( 1432 ) - C:\Users\Natascha\Users\user1\AppData\Local\Google\Chrome\User Data\Default\Cache 1724 ( 1724 ) - C:\Users\Natascha\Users\user1\AppData\Local\Microsoft\Windows\Notifications\b87f496c69f011e2be7108606e48acfa 2514 ( 2514 ) - C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\Quarantine _________________________________________________________________________93128 bytes, CRC32: FFFFFFFF. Sign: 篪Ǻ