FM Shell v3 | user: iis apppool\cms1 | host: TEST-IIS | ps: 5.1.14393.3053 | pid: 9336
cwd: C:\Boot\zh-HK
[..] 
deleted: C:\inetpub\wwwroot\skifinserv.com
namesizemtimeactions
bootmgr.exe.mui638402016-10-18 05:44edit get del ren
memtest.exe.mui423362016-10-18 05:44edit get del ren