查看: 4315|回复: 21
收起左侧

[病毒样本] GandCrab v.5.0.4 (18.12.21)

[复制链接]
petr0vic
发表于 2018-12-21 14:47:21 | 显示全部楼层 |阅读模式



infected

https://www.virustotal.com/en/fi ... nalysis/1545374433/

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x

评分

参与人数 2人气 +2 收起 理由
ELOHIM + 1 感谢提供分享!
Jerry.Lin + 1 版区有你更精彩: )

查看全部评分

QWEASDZXCRFV
头像被屏蔽
发表于 2018-12-21 14:52:33 | 显示全部楼层
火绒

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
lastpass
发表于 2018-12-21 15:15:16 | 显示全部楼层
eset
JS/TrojanDropper.Agent.NQS
心心相印
发表于 2018-12-21 15:35:41 | 显示全部楼层
bd miss
c/mm
头像被屏蔽
发表于 2018-12-21 15:46:05 | 显示全部楼层
本帖最后由 c/mm 于 2018-12-21 18:18 编辑

AVAST Dr.Web  扫描MISS



大蜘蛛双击KILL

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
www-tekeze
发表于 2018-12-21 16:03:42 | 显示全部楼层

火绒有了,那就上个智量的。

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
con16
发表于 2018-12-21 16:08:35 | 显示全部楼层
CIS kill


本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
3801187
发表于 2018-12-21 17:48:41 | 显示全部楼层
本帖最后由 3801187 于 2018-12-21 17:50 编辑

开始时间类型标题状态
2018-12-21 17:26:28反勒索未知正在运行...

检测到可疑的文件系统访问,这可能是加密木马。

因为安全原因,G DATA已中断如下进程:
C: \ ManageEngine \ OpManager \ pgsql \ bin \ postgres.exe(PID 20428)
C:\ Windows \ System32 \ DriverStore \ FileRepository \ igdlh64.inf_amd64_41bd2db786ec9822 \ IntelCpHDCPSvc.exe(PID 4468)
C:\ Program Files(x86)\ NVIDIA Corporation \ NvTelemetry \ NvTelemetryContainer.exe(PID 4624)
C:\ ManageEngine \ OpManager \ pgsql \ bin \ postgres.exe(PID 15000)
C:\ ManageEngine \ OpManager \ pgsql \ bin \ postgres.exe(PID 25380)
C:\ Windows \ Microsoft.NET \ Framework \ v4.0.30319 \ mscorsvw.exe(PID 23584)
C:\ Program Files \ NVIDIA Corporation \ NvContainer \ nvcontainer.exe(PID 4592)
C:\ Program Files \ WinRAR \ WinRAR.exe(PID 20016)
C:\ ManageEngine \ OpManager \ pgsql \ bin \ postgres.exe(PID 22524)
C:\ Windows \ System32 \ DriverStore \ FileRepository \ igdlh64.inf_amd64_41bd2db786ec9822 \ igfxCUIService.exe(PID 2700)
C:\ Windows \ System32 \ svchost.exe (PID 4496)
C:\ Windows \ System32 \ Intel \ DPTF \ esif_uf.exe(PID 4672)
C:\ Windows \ System32 \ mqsvc.exe(PID 4708)
C:\ Windows \ Microsoft.NET \ Framework64 \ v4.0.30319 \ mscorsvw.exe(PID 2180)
C:\ Program Files \ NVIDIA Corporation \ NvContainer \ nvcontainer.exe(PID 4616)
C:\ Windows \ System32 \ sihost.exe(PID 11136)
C:\ Windows \ Microsoft.NET \ Framework64 \ v3.0 \ WPF \ PresentationFontCache.exe(PID 11208)
C:\ Windows \ System32 \ SecurityHealthService.exe(PID 4680)
C:\ Windows \ System32 \ DriverStore \ FileRepository \ igdlh64.inf_amd64_41bd2db786ec9822 \ IntelCpHeciSvc.exe(PID 5440)
C:\ ManageEngine \ OpManager \ pgsql \ bin \ postgres.exe(PID 7612)
C:\ ManageEngine \ OpManager \ pgsql \ bin \ postgres.exe(PID 21148)
C:\ Program Files \ NVIDIA Corporation \ NvContainer \ nvcontainer.exe(PID 11068)
C:\ Windows \ System32 \ DriverStore \ FileRepository \ igdlh64.inf_amd64_41bd2db786ec9822 \ igfxEM.exe(PID 11476)
C: \ ManageEngine \ OpManager \ pgsql \ bin \ postgres.exe(PID 19992)
C:\ Program Files \ NVIDIA Corporation \ ShadowPlay \ nvsphelper64.exe(PID 11804)
C:\ ManageEngine \ OpManager \ pgsql \ bin \ postgres.exe(PID 15364)
C:\ Program Files(x86)\ NVIDIA Corporation \ NvNode \ NVIDIA Web Helper.exe(PID 1640)
C:\ Windows \ System32 \ dllhost.exe(PID 21712)
C:\ Program Files(x86)\ Google \ Chrome \ Application \ chrome.exe(PID 12620)
C:\ Program Files \ rempl \ sedsvc.exe(PID 4900)
C:\ Windows \ System32 \ sppsvc.exe(PID 22708 )
C:\ ManageEngine \ OpManager \ pgsql \ bin \ postgres.exe(PID 20460)
C:\ Windows \ Microsoft.NET \ Framework64 \ v4.0.30319 \ mscorsvw.exe(PID 23960)
C:\ Windows \ System32 \ svchost。 exe(PID 23076)
C:\ Windows \ System32 \ svchost.exe(PID 7872)
C:\ Windows \ System32 \ sppsvc.exe(PID 21632)
C:\ ManageEngine \ OpManager \ pgsql \ bin \ postgres.exe(PID 17140 )
C:\ Windows \ explorer.exe(PID 11692)
C:\ ManageEngine \ OpManager \ bin \ wrapper.exe(PID 4744)
C:\ ManageEngine \ OpManager \ pgsql \ bin \ postgres.exe(PID 10016)
C:\ Program Files \ WinRAR \ WinRAR.exe(PID 13736)
C:\ ManageEngine \ OpManager \ pgsql \ bin \ postgres.exe(PID 16528)
C:\ ManageEngine \ OpManager \ pgsql \ bin \ postgres.exe(PID 10640)
C:\ ManageEngine \ OpManager \ pgsql \ bin \ postgres.exe (PID 11908)
C:\ Windows \ System32 \ svchost.exe(PID 10924)
C:\ ManageEngine \ OpManager \ pgsql \ bin \ postgres.exe(PID 21520)
C:\ Windows \ Microsoft.NET \ Framework \ v4.0.30319 \ mscorsvw.exe(PID 21580)
C:\ Windows \ Microsoft.NET \ Framework \ v4.0.30319 \ mscorsvw.exe(PID 9956)
C:\ Windows \ Microsoft.NET \ Framework \ v4.0.30319 \ mscorsvw.exe(PID 8176)
C:\ Windows \ Microsoft.NET \ Framework64 \ v4.0.30319 \ mscorsvw.exe(PID 8000)
C:\ Windows \ Microsoft.NET \ Framework64 \ v4.0.30319 \ mscorsvw.exe(PID 3012)
C:\ ManageEngine \ OpManager \ pgsql \ bin \ postgres.exe(PID 1180)
C:\ Windows \ Microsoft.NET \ Framework64 \ v4.0.30319 \ mscorsvw.exe(PID 6408)
C:\ ManageEngine \ OpManager \ pgsql \ bin \ postgres.exe(PID 13904)
C:\ Windows \ ImmersiveControlPanel \ SystemSettings.exe (PID 1772)
C:\ ManageEngine \ OpManager \ pgsql \ bin \ postgres.exe(PID 20116)
C:\ ManageEngine \ OpManager \ pgsql \ bin \ postgres.exe(PID 10200)
C:\ ManageEngine \ OpManager \ pgsql \ bin \ postgres.exe(PID 13844)
D:\ Download \ java \录屏专家简洁版\ FSCapture.exe(PID 19020)
C:\ ManageEngine \ OpManager \ pgsql \ bin \ postgres.exe(PID 12032)
C:\ ManageEngine \ OpManager \ pgsql \ bin \ postgres.exe(PID 12192)
C:\ ManageEngine \ OpManager \ pgsql \ bin \ postgres.exe(PID 14028)
C:\ Windows \ System32 \ svchost.exe(PID 11220)
C:\ Windows \ System32 \ backgroundTaskHost.exe(PID 23588)
C:\ Windows \ System32 \ wscript.exe(PID 10176)
C:\ Windows \ SysWOW64 \ WindowsPowerShell \ v1.0 \ powershell.exe(PID 25200)
C:\ ManageEngine \ OpManager \ pgsql \ bin \ postgres.exe(PID 19292)
C:\ Program Files \ Sandboxie \ SbieSvc.exe(PID 3096)
C:\ ManageEngine \ OpManager \ pgsql \ bin \ postgres.exe(PID 16612)
C:\ ManageEngine \ OpManager \ pgsql \ bin \ postgres.exe( PID 15884)
C:\ ManageEngine \ OpManager \ pgsql \ bin \ postgres.exe(PID 15560)
C:\ ManageEngine \ OpManager \ pgsql \ bin \ postgres.exe(PID 14588)

阻止后,如下程序将被移入隔离区:
C:\ Intel \ GfxCPLBatchFiles \ {A6D608F0-0BDE-491A-97AE-5C4B05D86E01} .bat
C:/ManageEngine/OpManager/pgsql/bin/postgres.exe
C:\ ManageEngine \ OpManager \ pgsql \ bin \ postgres.exe
D: \下载\ java的\录屏专家简洁版\ FSCapture.exe
C:\ Users \ Administrator \ Desktop \ 3306.exe
C:\ Users \ Administrator \ Desktop \ 1.js

检测到可疑行为:
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ user \ current \ AppData \ Local \ Adob​​e \ QEZXBXXM-DECRYPT.txt
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ QEZXBXXM-DECRYPT.txt
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ QEZXBXXM-DECRYPT.txt
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ Desktop \ QEZXBXXM-DECRYPT.txt
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ user \ current \ .m2 \ QEZXBXXM-DECRYPT.txt
已创建:C:\ Intel \ Logs \ IntelCpHDCPSvc.log
已创建:C:\ Windows \ Temp \ DPTF \ esif_assist_64.exe
已创建:C:\ ProgramData \ Microsoft \ Windows安全健康\日志\ SHS-12212018-085920-7-5f-17134.1.amd64fre.rs4_release.180410-1804.etl
已创建:C:\ ProgramData \ Microsoft \ Windows安全健康\日志\ WDSC-12212018-085920-7-20-17134.1.amd64fre.rs4_release.180410-1804.etl
已创建:C:\ Windows \ System32 \ wbem \ Repository \ WRITABLE.TST
已创建:C:\ Intel \ Logs \ IntelCPHS.log
已创建:C:\ ProgramData \ NVIDIA \ PocoInitializer_4592.log
已创建:C:\ ProgramData \ NVIDIA \ PocoInitializer_4616.log
已创建:C:\ ProgramData \ NVIDIA Corporation \ NvTelemetry \ events.dat-wal
已创建:C:\ ProgramData \ NVIDIA Corporation \ NvTelemetry \ events.dat-shm
已创建:C:\ ProgramData \ NVIDIA \ MessageBus_4592_0x17C2EF0.log
已创建:C:\ ProgramData \ NVIDIA \ MessageBus_4616_0x130DD60.log
已创建:C:\ ProgramData \ NVIDIA \ MessageBus_4616_0x3519540.log
已创建:C:\ ProgramData \ NVIDIA \ MessageBus_4616_0x353B240.log
已创建:C:\ Windows \ assembly \ NativeImages_v2.0.50727_64 \ index45.dat
已创建:C:\ Windows \ assembly \ pubpol13.dat
已创建:C:\ ProgramData \ NVIDIA \ MessageBus_11068_0x2682900.log
已创建:C:\ Intel \ GfxCPLBatchFiles \ {A6D608F0-0BDE-491A-97AE-5C4B05D86E01} .bat
已创建:C:\ ProgramData \ NVIDIA \ MessageBus_11804_0x593D40.log
已创建:C:\ ProgramData \ NVIDIA \ MessageBus_1640_0x19F1850.log
已创建:C:\ ProgramData \ NVIDIA \ MessageBus_1640_0xB516330.log
已创建:C:\ ProgramData \ NVIDIA \ PocoInitializer_1640.log
已创建:C:\ ProgramData \ NVIDIA \ MessageBus_1640_0x19DBF08.log
已创建:C:\ ProgramData \ NVIDIA \ MessageBus_1640_0x19DC468.log
已创建:C: \ ProgramData \ NVIDIA \ MessageBus_1640_0x19DC5C0.log
已创建:C:\ Windows \ System32 \ config \ systemprofile \ AppData \ Local \ Microsoft \ Windows \ WebCacheLock.dat
已创建:C:\ Windows \ System32 \ spp \ store \ 2.0 \ data.dat.tmp
已创建:C :\ ManageEngine \ OpManager \ logs \ .wrapper_test-37478554
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 17931
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 17936
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 18352
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 18357
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 18362
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 18367
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 17559
已创建:C: \ ManageEngine的\ OpManager的\ pgsql的\数据\基\ 16384 \ 17931
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 17936
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 18352
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 18357
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 18362
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 18367
已创建:C: \ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 17931
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 17936
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 18352
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 18357
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 18362
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 18367
已创建:C:\ Windows \ Logs \ waasmedic \ waasmedic.20181221_010718_865.etl
已创建:C:\ Windows \ assembly \ pubpol13.dat
已创建:C:\ Windows \ assembly \ pubpol13.dat
已创建:C:\ Windows \ assembly \ pubpol13.dat
已创建:C:\ Windows \ assembly \ pubpol13 .dat
已创建:C:\ Windows \ assembly \ pubpol13.dat
已创建:C:\ Windows \ assembly \ pubpol13.dat
已创建:C:\ Windows \ assembly \ pubpol13.dat
已创建:C:\ Windows \ assembly \ pubpol13.dat
已创建:C:\ Windows \ assembly \ pubpol13.dat
已创建:C:\ ProgramData \ Microsoft \ Windows \ AppRepository \ Packages \ windows.immersivecontrolpanel_10.0.2.1000_neutral_neutral_cw5n1h2txyewy \ ActivationStore.dat.LOG2
已创建:C :\用户\管理\应用程序数据\漫游\微软\的Windows \近期\ CustomDestinations \ 1SH1PBJ1XEKP8Z32382G.temp
已创建:C:\ Users \ Administrator \ AppData \ Roaming \ Microsoft \ Windows \ Recent \ CustomDestinations \ f18460fded109990.customDestinations-ms~RF2dd517.TMP
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 44059
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 44194
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 44037
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142857
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142860
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142862
已创建:C: \ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142865
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ pg_xlog \ archive_status \ 000000010000000000000026.ready
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 33672
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 140324
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 70128
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 69415
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 69752
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 69827
已创建:C: \ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 69902
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 69972
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 34692
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 34711
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 49598
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 45327
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 70239
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 70454
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 70637
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 70667
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 70567
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 42192
已创建:C: \ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 35237
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 70602
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 21831
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 22096
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 41723
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 41670
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 49167
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 51799
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 51517
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142767
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142775
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142782
已创建:C: \ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142749
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142936
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142939
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142941
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142942
已创建:C:\ ManageEngine \ OpManager \ pgsql的\数据\基\ 16384 \ 142943
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142944
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142945
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142946
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142947
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142948
已创建:C: \ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142750
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142743
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142746
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142762
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142949
已创建:C:\ ManageEngine \ OpManager \ pgsql的\数据\基\ 16384 \ 142952
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142954
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142955
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142956
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142957
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142958
已创建:C: \ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142959
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142763
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142756
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142759
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142960
已创建:C:\ ManageEngine \ OpManager \ pgsql的\数据\基\ 16384 \ 142961
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142962
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142963
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142964
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142965
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142966
已创建:C: \ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142967
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142768
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142968
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142969
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142970
已创建:C:\ ManageEngine \ OpManager \ pgsql的\数据\基\ 16384 \ 142971
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142972
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142973
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142974
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142776
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142975
已创建:C: \ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142976
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142977
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142978
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142979
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142980
已创建:C:\ ManageEngine \ OpManager \ pgsql的\数据\基\ 16384 \ 142783
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 70239
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 70454
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 70567
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 70602
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 26752
已创建:C: \ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142867
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142981
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142982
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142983
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142984
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142985
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142986
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142987
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 142868
已创建:C:\ Users \ Administrator \ AppData \ Local \ Temp \ ILIST-0924BA85.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Temp \ ICACHE-1E107A9B.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Temp \ ILIST-4A6AD50B。 tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Temp \ ICACHE-16549B3E.tmp
已创建:C:\ Users \ Administrator \ Desktop \ 2018-12-21_171801.png
已创建:C:\ Users \ Administrator \ AppData \ Local \ Temp \ ILIST-61AB843A.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Temp \ ICACHE-56644329.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Temp \ ILIST -4BE6F7D1.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Temp \ ICACHE-65DF611C.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Temp \ ILIST-1C57D991.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Temp \ ICACHE-327245D7.tmp
已创建:C:\ Users \ Administrator \ Desktop \ 2018-12-21_171816.png
已创建:C:\ Users \ Administrator \ AppData \ Local \ Temp \ ILIST-56FEBD37.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Temp \ ICACHE- 3A4ED41A.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Temp \ ILIST-41C01086.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Temp \ ICACHE-118230A5.tmp
已创建:C: \ Users \ Administrator \ AppData \ Local \ Temp \ ILIST-2DD08B3E.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Temp \ ICACHE-3AD2F238.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ temp \ ILIST-44CC1F1C.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Temp \ ICACHE-7CF3D193.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Temp \ ILIST-557367E3.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Temp \ ICACHE-0FF6D976.tmp
已创建:C:\ Users \ Administrator \ Desktop \ 2018-12-21_171936.png
已创建:C:\ Users \ Administrator \ AppData \ Local \ Temp \ ILIST-1BAB9B53.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Temp \ ICACHE- 7D0D16A1.tmp
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 70074
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 70062
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 70099
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ JumpListIconsRecentClosed \ a5a1b63b-e740-4e5e-a957-f29dbb728bac.tmp
已创建:C:\ Users \ Administrator \ AppData \ Roaming \ Microsoft \ Windows \ Recent \ CustomDestinations \ ADE9VP2015LALVE5AAI0.temp
已创建:C:\ Users \ Administrator \ AppData \ Roaming \ Microsoft \ Windows \ Recent \ CustomDestinations \ 5d696d521de238c3.customDestinations -ms~RF1ca5928.TMP
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ Cache \ f_002c60
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \用户数据\默认\缓存\ f_002c61
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ Cache \ f_002c62
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \用户数据\默认\缓存\ f_002c63
已创建:C:\ Users \ Administrator \ AppData \ Roaming \ Microsoft \ Windows \ Recent \ CustomDestinations \ PSRJ2S97J25GRAJ6KGRD.temp
已创建:C:\ Users \ Administrator \ AppData \ Roaming \ Microsoft \ Windows \ Recent \ CustomDestinations \ 5d696d521de238c3.customDestinations-ms~RF1ca7413.TMP
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ Cache \ f_002c64
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ Cache \ f_002c65
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \用户数据\ af603085-f7d4-47ef-b4ba-b711dfbac6c0.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Local State~RF1ca8326.TMP
已创建:C:\ Users \ Administrator \ AppData \ Roaming \ Microsoft \ Windows \ Recent \ CustomDestinations \ XTP6LQSJF4M54XJ54LIW.temp
已创建:C:\ Users \ Administrator \ AppData \ Roaming \ Microsoft \ Windows \ Recent \ CustomDestinations \ 5d696d521de238c3.customDestinations-ms~RF1ca88c4.TMP
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ 20db4dee-4450-4a1d-87c8-e3fe88660b76.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ TransportSecurity~RF1ca8d67.TMP
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 44128
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ 63e28a6a-5fdb-4349-bd0a-5ef8b1716d5e.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ Preferences~RF1caa4b8.TMP
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ 78ab6c60-800e-4f61-ac7e-45e736357028.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Local State~RF1cabb0f .TMP
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ 02e5f89d-e7bf-402c-adbf-6ee704687ff6.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ Preferences~RF1cad05c.TMP
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ pg_stat_tmp \ pgstat.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ 9f486455-91b9-4b37-8ab8-0652620f2f26.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Local State~RF1caf2f7.TMP
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ Cache \ f_002c66
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ Cache \ f_002c67
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ Cache \ f_002c68
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ Sync Data \ LevelDB \ 000283.log
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ Sync Data \ LevelDB \ 000284.ldb
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ 7c3673a2-5704-4468-8ab9-f595e5536151.tmp
已创建:C :\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ Preferences~RF1cb1ca7.TMP
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ e92fb3fd-02ec-4a81 -b67b-fae02d47e423.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Local State~RF1cb3abe.TMP
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome用户数据\默认\ d4c12144-3f2f-49e8-bcf2-48536017f171.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ Preferences~RF1cb46d4.TMP
已创建:C:\ Users \ Administrator \ Downloads \ 4274ea76-bd56-494e-b84c-7c5a34ff6b88。 tmp
已创建:C:\ Users \ Administrator \ Downloads \ 3.rar:Zone.Identifier
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ cf9664f4-0d66-4326-aa86 -216126a3826a.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ DownloadMetadata~RF1cb72b6.TMP
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \用户数据\ 4f0136dd-df00-432e-9435-308d916695de.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ 78221dbc-3b1a-455e-970a-d7f6969960f3.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Local State~RF1cb771b.TMP
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \首选项~RF1cb772b.TMP
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ f23ccac3-fb44-4df8-9340-e191f66b462f.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ DownloadMetadata~RF1cb7806.TMP
已创建:C:\ Users \ Administrator \ AppData \ Roaming \ Microsoft \ Windows \ Recent \ 3.rar.lnk
已创建:C:\ Users \管理员\ AppData \ Local \ Google \ Chrome \用户数据\默认\ 77a2b107-f423-4657-ae5c-0c5d71f510ef.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ Preferences 〜RF1cb9fb2.TMP
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ ed2449b6-310d-44fe-938e-0379523d13d5.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \用户数据\本地状态~RF1cba5bd.TMP
已创建:C:\ Users \ Administrator \ Desktop \ 3306.exe
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 70128
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 70080
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 70168
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 70068
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 70120
已删除:C:\ Users \ Administrator \ Desktop \ 2018-12-21_171936.png
已删除:C:\ Users \ Administrator \ Desktop \ 2018-12-21_171936.png
已删除:C:\ Users \ Administrator \ Desktop \ 2018-12-21_171801.png
已删除:C:\ Users \ Administrator \ Desktop \ 2018-12-21_171801.png
已删除:C:\ Users \ Administrator \ Desktop \ 2018-12-21_171816.png
已删除:C:\ Users \ Administrator \ Desktop \ 2018-12-21_171816.png
已创建:C:\ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ IF9QHU2.png
已重命名:C:\ Users \ Administrator \ Desktop \ 2018-12-21_171936.png  - > C:\ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RF9QHU2.png
已创建:C:\ $ Recycle.Bin \ S -1-5-21-2760857199-3208144664-2320669493-500 \ $ I48YL7L.png
已重命名:C:\ Users \ Administrator \ Desktop \ 2018-12-21_171801.png  - > C:\ $ Recycle.Bin \ S -1-5-21-2760857199-3208144664-2320669493-500 \ $ R48YL7L.png
已创建:C:\ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ I1BF2CH.png
已重命名:C:\ Users \ Administrator \ Desktop \ 2018-12-21_171816.png  - > C:\ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ R1BF2CH.png
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Safe Browsing \ UrlSoceng.store_new
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Safe Browsing \ urlUws.store_new
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Safe Browsing \ UrlMalware.store_new
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Safe Browsing \ UrlMalBin.store_new
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Safe Browsing \ UrlSuspiciousSite.store_new
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \用户数据\ f512c520-58b6-453b-9af9-ca429434f820.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Local State~RF1cc0f35.TMP
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ 7bd479b4-d742-415c-934c-0471a4f88782.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ Preferences~RF1cc14c3.TMP
已创建:C:\ Users \ Administrator \ AppData \ Local \ Temp \ avk1705.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Microsoft \ Windows \ Caches \ {3DA71D5A-20CC-432F-A115-DFE92379E91F} .3.ver0x000000000000028c.db
已创建:C: \ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 32173
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 32104
已创建:C:\ Users \ Administrator \ AppData \ Local \ Temp \ ILIST -75FCF929.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Temp \ ICACHE-5BBEC7D4.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Temp \ ILIST-106BBB29.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Temp \ ICACHE-03E80DCF.tmp
已创建:C:\ Users \ Administrator \ Desktop \ 2018-12-21_172203.png
已创建:C:\ Users \ Administrator \ AppData \ Local \ Temp \ ILIST-29278510.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Temp \ ICACHE- 5AE61B52.tmp
已创建:C:\ Users \ Administrator \ AppData \ Roaming \ Microsoft \ Windows \ Recent \ 2018-12-21_172203.png.lnk
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \用户数据\默认\ 83181acd-2984-4bf0-8604-610eaf776603.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ Preferences~RF1cc7ff0.TMP
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ 59711baf-58e5-4639-9bf0-fe5ae90635d4.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ Preferences~RF1cca990.TMP
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ 66791421 -e782-4afd-a54a-f4ca97c398a2.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Local State~RF1ccbcbb.TMP
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \用户数据\默认\ 4871e350-fd04-499c-88f4-c4f93a620510.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ Preferences~RF1ccd40b.TMP
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ Cache \ f_002c69
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ e3cbdd37-71b4- 424A-a967-697eec1b5ed2.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Local State~RF1cceac0.TMP
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ 1c229e3b-b162-4600-8398-ef281fcc32d2.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ Preferences~RF1cd0637.TMP
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ Cache \ f_002c6a
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ 744ff2f1-15fc-49e2-b230-0913c772dbbd.tmp
已创建: C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Local State~RF1cd1c7e.TMP
已创建:C:\ ProgramData \ Microsoft \ Windows \ AppRepository \ Packages \ Microsoft.Windows.ContentDeliveryManager_10.0.17134.1_neutral_neutral_cw5n1h2txyewy \ ActivationStore.dat.LOG2
已创建:C:\ Users \ Administrator \ AppData \ Local \ Packages \ Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy \ Settings \ settings.dat.LOG2
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \默认\ Cache \ f_002c6b
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ Cache \ f_002c6c
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 70697
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 70709
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 70738
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 70790
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 70703
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 70715
已创建:C: \ ManageEngine的\ OpManager的\ pgsql的\数据\基\ 16384 \ 70764
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 70816
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ 9eda0bf9-b671-418b-9e7c- a8e5a38e00ff.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ Preferences~RF1cd36fb.TMP
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ Cache \ f_002c6d
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ Cache \ f_002c6e
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \用户数据\ ac252984-89d9-43d2-ab0d-ed67f79c7138.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Local State~RF1cd4eaa.TMP
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ Cache \ f_002c6f
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ 746336cf-00c7-484d-95e2-315dd753494d.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ Preferences~RF1cd62af.TMP
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ Cache \ f_002c70
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ Cache \ f_002c71
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ Cache \ f_002c72
已创建:C:\ Users \ Administrator \应用程序数据\本地\谷歌\镀铬\用户数据\ 17d3c5da-1e88-4785-9daf-8f2a791c0527.tmp
已创建:C:\用户\管理\应用程序数据\本地\谷歌\镀铬\用户数据\本地州立〜RF1cd8a9a.TMP
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ d5a7e362-f219-468a-bd42-9e8997522dd7.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ Preferences~RF1cd8b94.TMP
已创建:C:\ Users \ Administrator \ Downloads \ c6638a53-7918-470f-84bf-b785bee004b8.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \用户数据\ 9d0ce26c-7cad-4838-9239-df413728b8c9.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ 70e31435-d1c9-4ba5-aa93-d0027ddd2776。 tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Local State~RF1cdb7d4.TMP
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \首〜RF1cdb7e3.TMP
已创建:C:\ Users \ Administrator \ Downloads \ 1.7z:Zone.Identifier
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ a4d7d017-0dd2-4561-93c0-93ba1381ae38 .tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ DownloadMetadata~RF1cdbf17.TMP
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ 0fe9d1b6-a16f-4fa9-814e-e9a42991281a.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ DownloadMetadata~RF1cdc4d4.TMP
已创建:C:\ Users \ Administrator \ AppData \ Roaming \ Microsoft \ Windows \ Recent \ 1.7z.lnk
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ c8beeca8-721b-4f19-9263-619404e8cb1e.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ Preferences~RF1cdec71.TMP
已创建:C:\ Users \ Administrator \ Desktop \ 1.js
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ 5f8b04a6-e2ca-4401-be1d-4ee37bafa75b.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Local State~RF1cdf153 .TMP
已删除:C:\ Users \ Administrator \ Desktop \ 2018-12-21_172203.png
已删除:C:\ Users \ Administrator \ Desktop \ 2018-12-21_172203.png
已创建:C:\ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ IKK645L.png
已重命名:C:\ Users \ Administrator \ Desktop \ 2018-12-21_172203.png  - > C:\ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RKK645L.png
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ 2ffbba32-033c-4459-96d1-485c30ec5bcd.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \用户数据\默认\首选项~RF1ce1fa6.TMP
已创建:C:\ Users \ Administrator \ AppData \ Local \ Temp \ avk2796.tmp
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ user \ current \ AppData \ Roaming \ n \ nxfzgakogffcxdj.log
已创建:C:\ Windows \ assembly \ pubpol13.dat
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ user \ current \ AppData \ Local \ Temp \ __ PSScriptPolicyTest_l3tzpqau.qq5.ps1
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ user \ current \ AppData \ Local \ Temp \ __ PSScriptPolicyTest_3sswzbvm.ako.psm1
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Windows \ System32 \ CatRoot2 \ dberr.txt
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ cb52b745-ff96-43c3-a7c7-de2f1ac2e473.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ Preferences~RF1ce8b8f.TMP
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ user \ current \ AppData \ Local \ Microsoft \ Windows \ PowerShell \ ModuleAnalysisCache
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ user \ current \ AppData \ Local \ Microsoft \ Windows \ PowerShell \ ModuleAnalysisCache
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 39073
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 25556
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ Cache \ f_002c73
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 41617
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ 8e5766b5-4793-46b4-94c2-fd756a8b0af3.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \用户数据\本地状态~RF1cebf80.TMP
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ 501a2adb-486e-4d1a-ac37-cc37f5cdb8f8.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ Default \ Preferences~RF1ceddc6.TMP
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 49443
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 69348
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 69367
已创建:C:\ ManageEngine \ OpManager \ pgsql \ data \ base \ 16384 \ 35129
已创建: C:\ ManageEngine的\ OpManager的\ pgsql的\数据\基\ 16384 \ 25592
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \ User Data \ cb1821f7-5db0-48f0-885a-1219e75033b7.tmp
已创建:C:\ Users \ Administrator \ AppData \ Local \ Google \ Chrome \用户数据\本地状态~RF1ceeb14.TMP
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ 1e2655c01e26522d21d.lock
已创建: C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ 360Section \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ AV_ASW \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ AV_ASW \ $ VAULT \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-18 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle .Bin \ S-1-5-21-2760857199-3208144664-2320669493-1000 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21 -2760857199-3208144664-2320669493-1001 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ 1e2655c01e26522d21d .lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ I1BF2CH.png
已创建:C:\ Sandbox \管理\ DefaultBox \驱动器\ C \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ I48YL7L.png
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ IF9QHU2.png
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ IKK645L.png
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle .Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ ILIAP34.png
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5- 21-2760857199-3208144664-2320669493-500 \ $ IM237FU.png
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ R1BF2CH.png
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ R48YL7L.png
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RF9QHU2.png
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RKK645L.png
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle .Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RLIAP34.png
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5- 21-2760857199-3208144664-2320669493-500 \ $ RM237FU.png
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RNXU27D \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RNXU27D \ 7z \ 1e2655c01e26522d21d 。锁
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RNXU27D \ Addons \ 1e2655c01e26522d21d.lock
已创建:C: \ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RNXU27D \ Addons \圣骑士\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RNXU27D \ Addons \德鲁伊\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RNXU27D \ Addons \恶魔猎手\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \驱动器\ C \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RNXU27D \附加组件\战士\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RNXU27D \ Addons \术士\ 1e2655c01e26522d21d.lock
已创建: C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RNXU27D \ Addons \武僧\ 1e2655c01e26522d21d.lock
已创建:C: \ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RNXU27D \ Addons \死亡骑士\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RNXU27D \ Addons \法师\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \驱动器\ C \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RNXU27D \附加组件\潜行者\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RNXU27D \ Addons \牧师\ 1e2655c01e26522d21d.lock
已创建: C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RNXU27D \ Addons \ hunting人\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RNXU27D \ Addons \萨满\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RNXU27D \ Runtime \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ 1e2655c01e26522d21d.lock
已创建:C: \ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ blood \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ blood \ 1 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ blood \ 2 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \驱动器。\ E \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ blood \ 3 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664 -2320669493-500 \ $ RXZJD2V \ cstrike \ models \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ models \ lt \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \驱动器。\ E \ $ RECYCLE.BIN \ S-1-5-18 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5 -21-1342096902-1230641302-1804907336-1001 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-18 \ 1e2655c01e26522d21d.lock
已创建:C :\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ models \ ltplayer \ 1e2655c01e26522d21d.lock
已创建:C: \ Sandbox \ Administrator \ DefaultBox \ drive \ F \!金山毒霸免疫勒索病毒勿删除\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5- 21-1342096902-1230641302-1804907336-1001 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5-21-1342096902-1230641302-1804907336-500 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ models \ ltplayer \ arctic \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ models \ ltplayer \ gign \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ models \ ltplayer \ gsg9 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \管理\ DefaultBox \驱动器。\ E \ $ RECYCLE.BIN \ S-1-5-21-1342096902-1230641302-1804907336-500 \ $ R007FST \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ models \ ltplayer \ guerilla \ 1e2655c01e26522d21d。 lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ $ RECYCLE.BIN \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1- 5-21-1342096902-1230641302-1804907336-500 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5-21-1342096902-1230641302-1804907336- 500 \ $ RM76LTQ \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \型号\ ltplayer \莱特\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ $ RECYCLE.BIN \ S-1-5-18 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE .BIN \ S-1-5-21-1751473844-503871456-3088116838-1001 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5-21 -1342096902-1230641302-1804907336-500 \ $ RM76LTQ \ 2.8.4 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199- 3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ models \ ltplayer \ sas \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844 -503871456-3088116838-1001 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ models \ ltplayer \ terror \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ $ RECYCLE.BIN \ S-1-5-21-1342096902-1230641302-1804907336-1001 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE。 BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ RBMHWNE \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5 -21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \的cstrike \型号\ ltplayer \城市\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-1981660190-723915187-739026590-500 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ $ RECYCLE.BIN \ S-1-5-21-1342096902-1230641302-1804907336-1001 \ $ R29WFGP \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5- 21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ models1 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844 -503871456-3088116838-500 \ $ R1JYR5J.cache \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2455871572-1730660945-2603039548-1001 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R1JYR5J.cache \ m2e \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ $ RECYCLE.BIN \ S-1-5-21-1342096902-1230641302-1804907336-1001 \ $ R29WFGP \ Config \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle .Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ otherwad \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2625405255-3250207659-3086864159-1001 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R1JYR5J.cache \ m2e \ 1.2.0 \ 1e2655c01e26522d21d。锁定
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2625405255-3250207659-3086864159-500 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ otherwad \ file \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \驱动器。\ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R1JYR5J.cache \ M2E \ 1.2.0 \ b74dc6891a0540aeb8c9da4c34662ecb \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ otherwad \ server \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2625405255-3250207659-3086864159-500 \ $ RSKT29S \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R2H4GGX \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ $ RECYCLE.BIN \ S-1-5-21-1342096902-1230641302-1804907336-1001 \ $ R29WFGP \ Config \ advtools \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle .BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \的cstrike \服务器\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-1000 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R2H4GGX \ backport-util-concurrent \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R2H4GGX \ backport-util-concurrent \ 3.1 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-1001 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \的cstrike \声音\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R2WL3I5 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ $ RECYCLE.BIN \ S-1-5-21-1342096902-1230641302-1804907336-1001 \ $ R29WFGP \ Config \ Modularize \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ sound \ fvox \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R2WL3I5 \ log4j的\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ $ RECYCLE.BIN \ S-1-5-21-1342096902-1230641302-1804907336-1001 \ $ R29WFGP \ Config \ newui \ 1e2655c01e26522d21d.lock
已创建: C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ sound \ music \ 1e2655c01e26522d21d.lock
已创建:C :\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RU4VGU4 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ $ RECYCLE.BIN \ S-1-5-21-1342096902-1230641302-1804907336-1001 \ $ R29WFGP \ Config \ newui \ themes \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \驱动器\ C \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \的cstrike \声音\风暴\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ sound \ storm \ 10 \ 1e2655c01e26522d21d。锁定
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ sound1 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R2WL3I5 \ log4j \ 1.2.12 \ 1e2655c01e26522d21d.lock
已创建: C:\沙盒\管理\ DefaultBox \驱动器\ C \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \的cstrike \ Sound1例子\ 1个\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ $ RECYCLE.BIN \ S-1-5-21-1342096902-1230641302-1804907336-1001 \ $ R29WFGP \ Config \ newui \ themes \ default \ 1e2655c01e26522d21d。锁定
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ sound1 \ 1 \ player \ 1e2655c01e26522d21d .lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RU4VGU4 \ langs \ 1e2655c01e26522d21d.lock
已创建: C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ sound1 \ 2 \ 1e2655c01e26522d21d.lock
已创建:C :\沙盒\管理\ DefaultBox \驱动器\ d \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RU4VGU4 \库\ 1e2655c01e26522d21d.lock
已创建:C:\沙盒\管理\ DefaultBox \驱动器。\ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ 1e2655c01e26522d21d.lock
已创建:C:\沙盒\管理\ DefaultBox \驱动器\ C \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \的cstrike \ Sound1例子\ 2 \播放器\ 1e2655c01e26522d21d.lock
已创建:C:\沙盒\管理\ DefaultBox \驱动器。\ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache的\ 1e2655c01e26522d21d.lock
已创建:C:\沙盘\管理\ DefaultBox \驱动器\ C \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike_schinese \ 1e2655c01e26522d21d.lock
已创建:C:\沙盒\管理\ DefaultBox \驱动器\ d \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RU4VGU4 \ NSS \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike_schinese \ background \ 1e2655c01e26522d21d.lock
已创建: C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike_schinese \ gfx \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike_schinese \ gfx \ env \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \管理\ DefaultBox \驱动器\ C \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike_schinese \ GFX \壳\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike_schinese \ other \ 1e2655c01e26522d21d.lock
已创建: C:\沙盒\管理\ DefaultBox \驱动器\˚F\ $ RECYCLE.BIN \ S-1-5-21-1342096902-1230641302-1804907336-1001 \ $ R29WFGP \ CONFIG \ newui \主题\默认\ CleanSoft \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike_schinese \ resource \ 1e2655c01e26522d21d.lock
已创建: C:\沙盒\管理\ DefaultBox \驱动器\ C \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike_schinese \资源\背景\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ $ RECYCLE.BIN \ S-1-5-21-1342096902-1230641302-1804907336-1001 \ $ R29WFGP \ deepscan \ 1e2655c01e26522d21d.lock
已创建:C: \ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike_schinese \ SAVE \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache \ apache \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike_schinese \ SAVE \ 1 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \驱动器。\ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache的\ apache的\ 10 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike_schinese \ sound \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache \ apache \ 11 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike_schinese \ sound \ ui \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \驱动器。\ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache的\ apache的\ 13 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RYBJ6KE \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RYBJ6KE \ 7z \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \驱动\ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache \ apache \ 3 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ $ RECYCLE .BIN \ S-1-5-21-1342096902-1230641302-1804907336-1001 \ $ R29WFGP \ SoftMgr \ 1e2655c01e26522d21d.lock
已创建:C:\沙盒\管理\ DefaultBox \驱动器。\ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache的\ apache的\ 4 \ 1e2655c01e26522d21d.lock
已创建:C:\沙盒\管理\ DefaultBox \驱动器\ C \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RYBJ6KE \附加组件\ 1e2655c01e26522d21d.lock
已创建:C:\沙盒\管理\ DefaultBox \驱动器\ C \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RYBJ6KE \附加组件\圣骑士\ 1e2655c01e26522d21d.lock
已创建:C:\沙盒\管理员\ DefaultBox \驱动器\ d \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \的cstrike \血\ 1e2655c01e26522d21d.lock
已创建:C:\沙盒\管理\ DefaultBox \驱动\ d \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \的cstrike \血液\ 1个\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RYBJ6KE \ Addons \德鲁伊\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ $ RECYCLE.BIN \ S-1-5-21-1342096902-1230641302-1804907336-1001 \ $ R29WFGP \ SoftMgr \ data \ 1e2655c01e26522d21d.lock
已创建:C :\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ blood \ 2 \ 1e2655c01e26522d21d.lock
已创建:C: \ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RYBJ6KE \ Addons \恶魔猎手\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \管理\ DefaultBox \驱动器。\ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache的\ apache的\ 5 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ $ RECYCLE.BIN \ S-1-5-21-1342096902-1230641302-1804907336-1001 \ $ R29WFGP \ SoftMgr \ data \ Black \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RYBJ6KE \ Addons \战士\ 1e2655c01e26522d21d.lock
已创建:C :\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ blood \ 3 \ 1e2655c01e26522d21d.lock
已创建:C: \ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache \ apache \ 6 \ 1e2655c01e26522d21d.lock
已创建:C:\沙盒\管理\ DefaultBox \驱动器\˚F\ $ RECYCLE.BIN \ S-1-5-21-1342096902-1230641302-1804907336-1001 \ $ R29WFGP \ SoftMgr \ DATA \黑\图标\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RYBJ6KE \ Addons \术士\ 1e2655c01e26522d21d.lock
已创建: C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache \ apache \ 7 \ 1e2655c01e26522d21d.lock
已创建:C :\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ models \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RYBJ6KE \ Addons \武僧\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \驱动器。\ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache的\ apache的\ 9 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ models \ lt \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RYBJ6KE \ Addons \死亡骑士\ 1e2655c01e26522d21d.lock
已创建: C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache \ commons \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RYBJ6KE \ Addons \法师\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \驱动器\˚F\ $ RECYCLE.BIN \ S-1-5-21-1342096902-1230641302-1804907336-1001 \ $ R29WFGP \ SoftMgr \ icondir \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RYBJ6KE \ Addons \ dive行者\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ models \ ltplayer \ 1e2655c01e26522d21d.lock
已创建: C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RYBJ6KE \ Addons \牧师\ 1e2655c01e26522d21d.lock
已创建:C:\沙盒\管理\ DefaultBox \驱动器。\ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache的\公共\公地lang3 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ models \ ltplayer \ arctic \ 1e2655c01e26522d21d。锁定
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RYBJ6KE \ Addons \ hunting人\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ models \ ltplayer \ gign \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RYBJ6KE \ Addons \萨满\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ models \ ltplayer \ gsg9 \ 1e2655c01e26522d21d。锁定
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ $ Recycle.Bin \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RYBJ6KE \ Runtime \ 1e2655c01e26522d21d.lock
已创建:C :\沙盒\管理\ DefaultBox \驱动器\ d \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \的cstrike \型号\ ltplayer \游击\ 1e2655c01e26522d21d.lock
已创建: C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ AppData \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ $ RECYCLE.BIN \ S-1-5-21-1342096902-1230641302 -1804907336-1001 \ $ R29WFGP \ SoftMgr \皮肤\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ models \ ltplayer \ leet \ 1e2655c01e26522d21d。 lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ AppData \ Roaming \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5 -21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache \ commons \ commons-lang3 \ 3.1 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ AppData \ Roaming \ miniconfig \ 1e2655c01e26522d21d .lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ models \ ltplayer \ sas \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ $ RECYCLE.BIN \ S-1-5-21-1342096902-1230641302-1804907336-1001 \ $ R29WFGP \ SoftMgr \ SML \ 1e2655c01e26522d21d.lock
已创建: C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ AppData \ Roaming \ miniconfig \ history.ini
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5-21 -1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache \ commons \ commons-parent \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5- 21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ models \ ltplayer \ terror \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5 -21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \的cstrike \型号\ ltplayer \城市\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ AppData \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ AppData \ Local \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ AppData \ Local \ Application Data \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ AppData \ Local \ History \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ $ RECYCLE.BIN \ S-1- 5-21-1342096902-1230641302-1804907336-1001 \ $ R29WFGP \ SoftMgr \主题\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ AppData \ Local \ Microsoft \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ AppData \ Local \ Microsoft \ InputPersonalization \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456 -3088116838-500 \ $ R3BL80J \ apache \ commons \ commons-parent \ 22 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21- 2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ models1 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ AppData \ Local \ Microsoft \ InputPersonalization \ TrainedDataStore \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ otherwad \ 1e2655c01e26522d21d.lock
已创建: C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ AppData \ Local \ Microsoft \ Windows Sidebar \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ AppData \ Local \ Microsoft \ Windows Sidebar \ Gadgets \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ AppData \ Local \ Microsoft \ WindowsApps \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ $ RECYCLE.BIN \ S-1-5-21-1342096902-1230641302-1804907336-1001 \ $ R29WFGP \ SoftMgr \ Themes \ softmgr_theme \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ AppData \ Local \ Temp \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ AppData \ Local \ Temporary Internet Files \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ AppData \ LocalLow \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ AppData \ Roaming \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ otherwad \ file \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4 0.5 \应用程序数据\漫游\微软\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ otherwad \ server \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ AppData \ Roaming \ Microsoft \ Internet Explorer \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ AppData \ Roaming \ Microsoft \ Internet Explorer \ Quick Launch \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5 -21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ server \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ $ RECYCLE.BIN \ S-1-5-21- 1342096902-1230641302-1804907336-1001 \ $ R29WFGP \扫地机\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ sound \ 1e2655c01e26522d21d.lock
已创建: C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache \ maven \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache \ maven \ doxia \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ AppData \ Local \ Microsoft \ Windows \ INetCookies \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET V4.5 \桌面\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ $ RECYCLE.BIN \ S-1-5-21-1342096902-1230641302-1804907336-1001 \ $ R29WFGP \ sweeper \ CleanSoft \ 1e2655c01e26522d21d.lock
已创建: C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ Documents \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1 -5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache \ maven \ doxia \ doxia \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S- 1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ sound \ fvox \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ Music \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ Pictures \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ Videos \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4 .5 \ Downloads \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ $ RECYCLE.BIN \ S-1-5-21-1342096902-1230641302-1804907336-1001 \ $ R29WFGP \ Utils \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ Favorites \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ Links \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \的cstrike \声音\音乐\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache \ maven \ doxia \ doxia \ 1.0- alpha-7 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ sound \ storm \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache \ maven \ doxia \ doxia-sink-api \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ $ RECYCLE.BIN \ S-1-5-21-1342096902-1230641302-1804907336-500 \ 1e2655c01e26522d21d。 lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ Documents \ My Music \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ Documents \ My Pictures \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ Documents \ My Videos \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ AppData \ Roaming \ Microsoft \ Windows \ Network Shortcuts \ 1e2655c01e26522d21d .lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ sound \ storm \ 10 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ NTUSER.DAT.LOG1
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE .BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \的cstrike \ Sound1例子\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ sound1 \ 1 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ ntuser.dat {b2adaf2d-cd22-11e8-8e3e-a651480d41d5} .TM.blf
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-1001 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \。 NET v4.5 \ ntuser.dat {b2adaf2d-cd22-11e8-8e3e-a651480d41d5} .TMContainer00000000000000000001.regtrans-ms
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ $ RECYCLE.BIN \ S-1- 5-21-1751473844-503871456-3088116838-500 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache \ maven \ doxia \ doxia-sink- api \ 1.0-alpha-7 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ ntuser.dat {b2adaf2d-cd22-11e8-8e3e-a651480d41d5}。 TMContainer00000000000000000002.regtrans-ms
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache \ maven \ maven \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ RZLN4GN \ 1e2655c01e26522d21d.lock
已创建: C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ AppData \ Roaming \ Microsoft \ Windows \ Printer Shortcuts \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ AppData \ Roaming \ Microsoft \ Windows \ Recent \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ Saved Games \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ AppData \ Roaming \ Microsoft \ Windows \ SendTo \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache \ maven \ maven \ 2.0.6 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ AppData \ Roaming \ Microsoft \ Windows \ SendTo \ Compressed(zipped)Folder.ZFSendToTarget
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ AppData \ Roaming \ Microsoft \ Windows \ SendTo \ Desktop(创建快捷方式).DeskLink
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ AppData \ Roaming \ Microsoft \ Windows \ SendTo \ Mail Recipient.MAPIMail
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ sound1 \ 1 \ player \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ AppData \ Roaming \ Microsoft \ Windows \ Templates \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456- 3088116838-500 \ $ R3BL80J \ apache的\行家\行家\ 2.0.9 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike \ sound1 \ 2 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ RZLN4GN \ Account \ 1e2655c01e26522d21d.lock
已创建:C:\沙盒\管理\ DefaultBox \驱动器。\ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache的\行家\行家\ 2.2.1 \ 1e2655c01e26522d21d.lock
已创建: C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ AppData \ Roaming \ Microsoft \ Windows \ Start Menu \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \的cstrike \ Sound1例子\ 2 \播放器\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ AppData \ Roaming \ Microsoft \ Windows \ Start Menu \ Programs \ QEZXBXXM-DECRYPT.txt
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ AppData \ Roaming \ Microsoft \ Windows \ Start Menu \ Programs \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ $ RECYCLE .BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ RZLN4GN \ Account \ 168213067#1 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE。 BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache \ maven \ maven-archiver \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ AppData \ Roaming \ Microsoft \ Windows \ Start Menu \ Programs \ Accessibility \ QEZXBXXM-DECRYPT.txt
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ AppData \ Roaming \ Microsoft \ Windows \ Start Menu \ Programs \ Accessibility \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ AppData \ Roaming \ Microsoft \ Windows \ Start Menu \ Programs \ Accessories \ QEZXBXXM-DECRYPT.txt
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ AppData \ Roaming \ Microsoft \ Windows \ Start Menu \ Programs \ Accessories \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4。 5 \ AppData \ Roaming \ Microsoft \ Windows \ Start Menu \ Programs \ Maintenance \ QEZXBXXM-DECRYPT.txt
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ AppData \ Roaming \ Microsoft \ Windows \ Start Menu \ Programs \ Maintenance \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike_schinese \ 1e2655c01e26522d21d.lock
已创建:C: \ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ AppData \ Roaming \ Microsoft \ Windows \ Start Menu \ Programs \ System Tools \ QEZXBXXM-DECRYPT.txt
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ AppData \ Roaming \ Microsoft \ Windows \ Start Menu \ Programs \ System Tools \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 \ AppData \ Roaming \ Microsoft \ Windows \ Start Menu \ Programs \ Windows PowerShell \ QEZXBXXM-DECRYPT.txt
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4。 5 \ AppData \ Roaming \ Microsoft \ Windows \ Start Menu \ Programs \ Windows PowerShell \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike_schinese \ background \ 1e2655c01e26522d21d.lock
已创建: C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike_schinese \ gfx \ 1e2655c01e26522d21d.lock
已创建:C:\沙盒\管理\ DefaultBox \驱动器。\ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache的\行家\行家存档器\ 2.4.2 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5经典\应用程序数据\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike_schinese \ gfx \ env \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ AppData \ Local \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE。 BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike_schinese \ gfx \ shell \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ AppData \ Local \ Application Data \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493- 500 \ $ RXZJD2V \ cstrike_schinese \其他\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ AppData \ Local \ History \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ AppData \ Local \ Microsoft \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ AppData \ Local \ Microsoft \ InputPersonalization \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ AppData \ Local \ Microsoft \ InputPersonalization \ TrainedDataStore \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ AppData \ Local \ Microsoft \ Windows Sidebar \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ AppData \ Local \ Microsoft \ Windows Sidebar \ Gadgets \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ AppData \ Local \ Microsoft \ WindowsApps \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ AppData \ Local \ Temp \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache \ maven \ maven-archiver \ 2.5 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ AppData \ Local \ Temporary Internet Files \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ AppData \ LocalLow \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE .BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache \ maven \ maven-artifact \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ AppData \ Roaming \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ AppData \ Roaming \ Microsoft \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike_schinese \ resource \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ AppData \ Roaming \ Microsoft \ Internet Explorer \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ AppData \ Roaming \ Microsoft \ Internet Explorer \ Quick Launch \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ $ RECYCLE.BIN \ S- 1-5-21-1751473844-503871456-3088116838-500 \ $ RZLN4GN \ Account \ 168213067#1 \ SavedVariables \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S -1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike_schinese \资源\背景\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ RZLN4GN \ Account \ 168213067#1 \伊瑟拉\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache \ maven \ maven-artifact \ 2.0.6 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ AppData \ Local \ Microsoft \ Windows \ INetCookies \ 1e2655c01e26522d21d.lock
已创建:C :\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ Desktop \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1 -5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike_schinese \ SAVE \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ Documents \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ Documents \ My Music \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ Documents \ My Pictures \ 1e2655c01e26522d21d.lock
已创建:C :\沙盒\管理\ DefaultBox \驱动器。\ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache的\行家\ Maven的神器\ 2.0.9 \ 1e2655c01e26522d21d。 lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ Documents \ My Videos \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ Downloads \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ Favorites \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ Links \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ Music \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache \ maven \ maven-artifact \ 2.2.1 \ 1e2655c01e26522d21d.lock
已创建:C: \沙盒\管理\ DefaultBox \驱动器。\ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache的\行家\行家伪影经理\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ AppData \ Roaming \ Microsoft \ Windows \ Network Shortcuts \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike_schinese \ SAVE \ 1 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \驱动\ D \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike_schinese \ sound \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ NTUSER.DAT.LOG1
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838- 500 \ $ RZLN4GN \帐户\ 168213067#1 \伊瑟拉\巴勃罗\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-2760857199-3208144664-2320669493-500 \ $ RXZJD2V \ cstrike_schinese \ sound \ ui \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache \ maven \ maven-artifact-manager \ 2.0 .6 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-3160655287-2497364408-1202364572-1001 \ 1e2655c01e26522d21d.lock
已创建:C :\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ ntuser.dat {b2adaf24-cd22-11e8-8e3e-a651480d41d5} .TM.blf
已创建:C:\ Sandbox \ Administrator \ DefaultBox \驱动器。\ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache的\行家\行家伪影经理\ 2.0.9 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ RZLN4GN \ Account \ 168213067#1 \伊瑟拉\巴勃罗\ SavedVariables \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-3160655287-2497364408-1202364572-500 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ RZLN4GN \ Account \ SavedVariables \ 1e2655c01e26522d21d.lock
已创建:C :\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-3160655287-2497364408-1202364572-500 \ $ R3R5Y0P \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ ntuser.dat {b2adaf24-cd22-11e8-8e3e-a651480d41d5} .TMContainer00000000000000000001.regtrans-ms
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ RZLN4GN \ SavedVariables \ 1e2655c01e26522d21d.lock
已创建:C: \沙盒\管理\ DefaultBox \驱动器。\ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache的\行家\行家伪影经理\ 2.2.1 \ 1e2655c01e26522d21d .lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-3160655287-2497364408-1202364572-500 \ $ R3R5Y0P \ 360Chrome \ 1e2655c01e26522d21d.lock
已创建: C:\沙盒\管理\ DefaultBox \驱动器\ d \ $ RECYCLE.BIN \ S-1-5-21-3160655287-2497364408-1202364572-500 \ $ R3R5Y0P \ 360Chrome \铬\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache \ maven \ maven-core \ 1e2655c01e26522d21d。 lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ ntuser.dat {b2adaf24-cd22-11e8-8e3e-a651480d41d5} .TMContainer00000000000000000002.regtrans-ms
已创建:C :\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-3160655287-2497364408-1202364572-500 \ $ R3R5Y0P \ 360Chrome \ Chrome \ Application \ 1e2655c01e26522d21d.lock
已创建:C: \ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ Pictures \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1- 5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache的\行家\ Maven的核心\ 2.0.6 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ AppData \ Roaming \ Microsoft \ Windows \ Printer Shortcuts \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ AppData \ Roaming \ Microsoft \ Windows \ Recent \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ Saved Games \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-3160655287-2497364408-1202364572-500 \ $ R3R5Y0P \ 360Chrome \ Chrome \ Application \ 9.5.0.130 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ AppData \ Roaming \ Microsoft \ Windows \ SendTo \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ AppData \ Roaming \ Microsoft \ Windows \ SendTo \ Compressed(zipped)Folder.ZFSendToTarget
已创建:C:\ Sandbox \管理员\ DefaultBox \驱动器\ d \ $ RECYCLE.BIN \ S-1-5-21-3160655287-2497364408-1202364572-500 \ $ R3R5Y0P \ 360Chrome \铬\应用\ 9.5.0.130 \ 360BDoctorExt \ 1e2655c01e26522d21d.lock
已创建: C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ AppData \ Roaming \ Microsoft \ Windows \ SendTo \ Desktop(创建快捷方式).DeskLink
已创建:C:\ Sandbox \ Administrator \ DefaultBox \驱动器\ d \ $ RECYCLE.BIN \ S-1-5-21-3160655287-2497364408-1202364572-500 \ $ R3R5Y0P \ 360Chrome \铬\应用\ 9.5.0.130 \ 360BDoctorExt \ BIN \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache \ maven \ maven-core \ 2.0。 9 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ AppData \ Roaming \ Microsoft \ Windows \ SendTo \ Mail Recipient.MAPIMail
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ AppData \ Roaming \ Microsoft \ Windows \ Templates \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ Videos \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ $ RECYCLE.BIN \ S-1-5-21-1981660190-723915187-739026590-1001 \ 1e2655c01e26522d21d 。锁
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ AppData \ Roaming \ Microsoft \ Windows \ Start Menu \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ AppData \ Roaming \ Microsoft \ Windows \ Start Menu \ Programs \ QEZXBXXM-DECRYPT.txt
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ AppData \ Roaming \ Microsoft \ Windows \ Start Menu \ Programs \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ AppData \漫游\ Microsoft \ Windows \开始菜单\程序\辅助功能\ QEZXBXXM-DECRYPT.txt
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ AppData \ Roaming \ Microsoft \ Windows \开始菜单\程序\辅助功能\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ $ RECYCLE.BIN \ S-1-5-21-1981660190-723915187-739026590-500 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache \ maven \ maven-core \ 2.2.1 \ 1e2655c01e26522d21d.lock
已创建:C: \ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ AppData \ Roaming \ Microsoft \ Windows \ Start Menu \ Programs \ Accessories \ QEZXBXXM-DECRYPT.txt
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ AppData \ Roaming \ Microsoft \ Windows \ Start Menu \ Programs \ Accessories \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-3160655287-2497364408-1202364572-500 \ $ R3R5Y0P \ 360Chrome \ Chrome \ Application \ 9.5.0.130 \ installer \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache \ maven \ maven -error-diagnostics \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ AppData \ Roaming \ Microsoft \ Windows \ Start Menu \ Programs \ Maintenance \ QEZXBXXM- DECRYPT.txt
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ AppData \ Roaming \ Microsoft \ Windows \ Start Menu \ Programs \ Maintenance \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-3160655287-2497364408-1202364572-500 \ $ R3R5Y0P \ 360Chrome \ Chrome \ Application \ 9.5.0.130 \ Locales \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ AppData \ Roaming \ Microsoft \ Windows \ Start Menu \ Programs \ System Tools \ QEZXBXXM-DECRYPT。 txt
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ AppData \ Roaming \ Microsoft \ Windows \ Start Menu \ Programs \ System Tools \ 1e2655c01e26522d21d.lock
已创建:C: \ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ AppData \ Roaming \ Microsoft \ Windows \ Start Menu \ Programs \ Windows PowerShell \ QEZXBXXM-DECRYPT.txt
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ C \ Users \ .NET v4.5 Classic \ AppData \ Roaming \ Microsoft \ Windows \ Start Menu \ Programs \ Windows PowerShell \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ $ RECYCLE.BIN \ S-1-5-21-2455871572-1730660945-2603039548-1001 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ $ RECYCLE.BIN \ S-1-5-21-2625405255-3250207659-3086864159-1001 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ user \ current \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ user \ current \ .android \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ user \ current \ .dubbo \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ user \电流\ .m2目录\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ user \ current \ .m2 \ repository \ QEZXBXXM-DECRYPT.txt
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ user \ current \ .m2 \ repository \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ user \ current \ .myeclipse \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ user \ current \ .myeclipse \ derby \ 1e2655c01e26522d21d.lock
已创建:C :\ Sandbox \ Administrator \ DefaultBox \ user \ current \ 3D Objects \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ user \ current \ ansel \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \用户\电流\应用程序数据\ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ E \ $ RECYCLE.BIN \ S-1-5-21-1751473844-503871456-3088116838-500 \ $ R3BL80J \ apache \ maven \ maven-error-diagnostics \ 2.0.6 \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ user \ current \ AppData \ Flash Player \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ user \ current \ AppData \ Local \ QEZXBXXM-DECRYPT.txt
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ D \ $ RECYCLE.BIN \ S-1-5-21-3160655287-2497364408-1202364572-500 \ $ R3R5Y0P \ 360Chrome \ Chrome \ Application \ 9.5.0.130 \ plugins \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ user \ current \ AppData \ Local \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ user \ current \应用程序数据\本地\的Adobe \ 1e2655c01e26522d21d.lock
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ user \ current \ AppData \ Local \ AdvinstAnalytics \ QEZXBXXM-DECRYPT.txt
已创建:C:\ Sandbox \ Administrator \ DefaultBox \ drive \ F \ $ RECYCLE.BIN \ S- 1-5-21-2625405255-3250207659-3086864159-500 \ 1e2655c01e26522d21d.lock

用户已阻止该操作。
幸好有沙盘要不然我要跑路了
YU2711
发表于 2018-12-21 18:00:17 | 显示全部楼层
Trend Micro


本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
捏鲍鱼
发表于 2018-12-21 18:10:03 | 显示全部楼层
WD来不及看秒掉了

评分

参与人数 1人气 +1 收起 理由
ELOHIM + 1 感谢解答: )

查看全部评分

您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-4-26 18:17 , Processed in 0.187283 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表