Trojan.KillFiles.7782

Technical Information

Malicious functions:

Executes the following:

<SYSTEM32>\label.exe C:Попал ты...
<SYSTEM32>\net1.exe user %USERNAME%
<SYSTEM32>\msg.exe * %USERNAME% "КиБпуФИК =_)"
<SYSTEM32>\rundll32.exe shell32.dll,Activate_RunDLL
<SYSTEM32>\cmd.exe /c ""%TEMP%\1.tmp\test.bat""
<SYSTEM32>\chcp.com 1251
<SYSTEM32>\label.exe C:Угууу

Modifies file system :

Creates the following files:

%TEMP%\1.tmp\test.bat

Deletes the following files:

<SYSTEM32>\DirectX\Dinput\gr4001.png
<SYSTEM32>\DirectX\Dinput\gr4001.ini
<SYSTEM32>\DirectX\Dinput\gr4001_g.ini
<SYSTEM32>\DirectX\Dinput\gr4003.ini
<SYSTEM32>\DirectX\Dinput\gr4001_g.png
<SYSTEM32>\DirectX\Dinput\glmdiggp.png
<SYSTEM32>\DirectX\Dinput\glmdiggp.ini
<SYSTEM32>\DirectX\Dinput\gr3001.ini
<SYSTEM32>\DirectX\Dinput\gr3001_g.ini
<SYSTEM32>\DirectX\Dinput\gr3001.png
<SYSTEM32>\DirectX\Dinput\gr4003.png
<SYSTEM32>\DirectX\Dinput\lgc202.ini
<SYSTEM32>\DirectX\Dinput\ia3002_2.png
<SYSTEM32>\DirectX\Dinput\lgc202.png
<SYSTEM32>\DirectX\Dinput\lgc207.png
<SYSTEM32>\DirectX\Dinput\lgc207.ini
<SYSTEM32>\DirectX\Dinput\gr4005.png
<SYSTEM32>\DirectX\Dinput\gr4005.ini
<SYSTEM32>\DirectX\Dinput\hammer.ini
<SYSTEM32>\DirectX\Dinput\ia3002_1.png
<SYSTEM32>\DirectX\Dinput\ia3002.ini
<SYSTEM32>\dgrpsetu.dll
<SYSTEM32>\dgnet.dll
<SYSTEM32>\dgsetup.dll
<SYSTEM32>\dhcpmon.dll
<SYSTEM32>\dhcpcsvc.dll
<SYSTEM32>\dfrgsnap.dll
<SYSTEM32>\dfrgres.dll
<SYSTEM32>\dfrgui.dll
<SYSTEM32>\dfsshlex.dll
<SYSTEM32>\dfshim.dll
<SYSTEM32>\dhcpsapi.dll
<SYSTEM32>\DirectX\Dinput\actc094.ini
<SYSTEM32>\dinput8.dll
<SYSTEM32>\DirectX\Dinput\act_rs.png
<SYSTEM32>\DirectX\Dinput\glmda.png
<SYSTEM32>\DirectX\Dinput\glmda.ini
<SYSTEM32>\diantz.exe
<SYSTEM32>\diactfrm.dll
<SYSTEM32>\digest.dll
<SYSTEM32>\dinput.dll
<SYSTEM32>\dimap.dll
<SYSTEM32>\DirectX\Dinput\ms26_08.png
<SYSTEM32>\DirectX\Dinput\ms26_07.png
<SYSTEM32>\DirectX\Dinput\ms27.ini
<SYSTEM32>\DirectX\Dinput\ms27_1.png
<SYSTEM32>\DirectX\Dinput\ms27.png
<SYSTEM32>\DirectX\Dinput\ms26_03.png
<SYSTEM32>\DirectX\Dinput\ms26_02.png
<SYSTEM32>\DirectX\Dinput\ms26_04.png
<SYSTEM32>\DirectX\Dinput\ms26_06.png
<SYSTEM32>\DirectX\Dinput\ms26_05.png
<SYSTEM32>\DirectX\Dinput\ms27_2.png
<SYSTEM32>\DirectX\Dinput\ms28_2.png
<SYSTEM32>\DirectX\Dinput\ms28_1.png
<SYSTEM32>\DirectX\Dinput\ms28_3.png
<SYSTEM32>\DirectX\Dinput\ms28_5.png
<SYSTEM32>\DirectX\Dinput\ms28_4.png
<SYSTEM32>\DirectX\Dinput\ms27_4.png
<SYSTEM32>\DirectX\Dinput\ms27_3.png
<SYSTEM32>\DirectX\Dinput\ms27_5.png
<SYSTEM32>\DirectX\Dinput\ms28.png
<SYSTEM32>\DirectX\Dinput\ms28.ini
<SYSTEM32>\DirectX\Dinput\ms1b.ini
<SYSTEM32>\DirectX\Dinput\lgc291.png
<SYSTEM32>\DirectX\Dinput\ms1b.png
<SYSTEM32>\DirectX\Dinput\ms1b_02.png
<SYSTEM32>\DirectX\Dinput\ms1b_01.png
<SYSTEM32>\DirectX\Dinput\lgc209.png
<SYSTEM32>\DirectX\Dinput\lgc209.ini
<SYSTEM32>\DirectX\Dinput\lgc20a.ini
<SYSTEM32>\DirectX\Dinput\lgc291.ini
<SYSTEM32>\DirectX\Dinput\lgc20a.png
<SYSTEM32>\DirectX\Dinput\ms1b_03.png
<SYSTEM32>\DirectX\Dinput\ms1b_10.png
<SYSTEM32>\DirectX\Dinput\ms1b_09.png
<SYSTEM32>\DirectX\Dinput\ms26.ini
<SYSTEM32>\DirectX\Dinput\ms26_01.png
<SYSTEM32>\DirectX\Dinput\ms26.png
<SYSTEM32>\DirectX\Dinput\ms1b_05.png
<SYSTEM32>\DirectX\Dinput\ms1b_04.png
<SYSTEM32>\DirectX\Dinput\ms1b_06.png
<SYSTEM32>\DirectX\Dinput\ms1b_08.png
<SYSTEM32>\DirectX\Dinput\ms1b_07.png
<SYSTEM32>\c_737.nls
<SYSTEM32>\c_500.nls
<SYSTEM32>\c_775.nls
<SYSTEM32>\c_852.nls
<SYSTEM32>\c_850.nls
<SYSTEM32>\c_28599.nls
<SYSTEM32>\c_28598.nls
<SYSTEM32>\c_28603.nls
<SYSTEM32>\c_437.nls
<SYSTEM32>\c_28605.nls
<SYSTEM32>\c_855.nls
<SYSTEM32>\c_869.nls
<SYSTEM32>\c_866.nls
<SYSTEM32>\c_874.nls
<SYSTEM32>\c_932.nls
<SYSTEM32>\c_875.nls
<SYSTEM32>\c_860.nls
<SYSTEM32>\c_857.nls
<SYSTEM32>\c_861.nls
<SYSTEM32>\c_865.nls
<SYSTEM32>\c_863.nls
<SYSTEM32>\c_1255.nls
<SYSTEM32>\c_1254.nls
<SYSTEM32>\c_1256.nls
<SYSTEM32>\c_1258.nls
<SYSTEM32>\c_1257.nls
<SYSTEM32>\c_1250.nls
<SYSTEM32>\c_1026.nls
<SYSTEM32>\c_1251.nls
<SYSTEM32>\c_1253.nls
<SYSTEM32>\c_1252.nls
<SYSTEM32>\c_20127.nls
<SYSTEM32>\c_28593.nls
<SYSTEM32>\c_28592.nls
<SYSTEM32>\C_28594.NLS
<SYSTEM32>\C_28597.NLS
<SYSTEM32>\C_28595.NLS
<SYSTEM32>\c_20866.nls
<SYSTEM32>\c_20261.nls
<SYSTEM32>\c_20905.nls
<SYSTEM32>\c_28591.nls
<SYSTEM32>\c_21866.nls
<SYSTEM32>\ddraw.dll
<SYSTEM32>\ddeshare.exe
<SYSTEM32>\ddrawex.dll
<SYSTEM32>\defrag.exe
<SYSTEM32>\debug.exe
<SYSTEM32>\Dcache.bin
<SYSTEM32>\dbnmpntw.dll
<SYSTEM32>\dciman32.dll
<SYSTEM32>\ddeml.dll
<SYSTEM32>\dcomcnfg.exe
<SYSTEM32>\desk.cpl
<SYSTEM32>\devmgr.dll
<SYSTEM32>\devmgmt.msc
<SYSTEM32>\dfrg.msc
<SYSTEM32>\dfrgntfs.exe
<SYSTEM32>\dfrgfat.exe
<SYSTEM32>\deskmon.dll
<SYSTEM32>\deskadp.dll
<SYSTEM32>\deskperf.dll
<SYSTEM32>\devenum.dll
<SYSTEM32>\desktop.ini
<SYSTEM32>\d3dim.dll
<SYSTEM32>\d3d9.dll
<SYSTEM32>\d3dim700.dll
<SYSTEM32>\d3dramp.dll
<SYSTEM32>\d3dpmesh.dll
<SYSTEM32>\c_949.nls
<SYSTEM32>\c_936.nls
<SYSTEM32>\c_950.nls
<SYSTEM32>\d3d8thk.dll
<SYSTEM32>\d3d8.dll
<SYSTEM32>\d3drm.dll
<SYSTEM32>\dbgeng.dll
<SYSTEM32>\daxctle.ocx
<SYSTEM32>\dbghelp.dll
<SYSTEM32>\dbnetlib.dll
<SYSTEM32>\dbmsrpcn.dll
<SYSTEM32>\danim.dll
<SYSTEM32>\d3dxof.dll
<SYSTEM32>\dataclen.dll
<SYSTEM32>\davclnt.dll
<SYSTEM32>\datime.dll
<SYSTEM32>\DirectX\Dinput\sv2511.png
<SYSTEM32>\DirectX\Dinput\SV-262e4.png
<SYSTEM32>\DirectX\Dinput\sv2512.png
<SYSTEM32>\diskcopy.com
<SYSTEM32>\diskcomp.com
<SYSTEM32>\DirectX\Dinput\msprw_8.png
<SYSTEM32>\DirectX\Dinput\msprw_7.png
<SYSTEM32>\DirectX\Dinput\raiderpd.ini
<SYSTEM32>\DirectX\Dinput\SV-262e3.png
<SYSTEM32>\DirectX\Dinput\SV-262e1.png
<SYSTEM32>\diskcopy.dll
<SYSTEM32>\dllcache\HPCRDP.CAT
<SYSTEM32>\dllcache\FP4.CAT
<SYSTEM32>\dllcache\i8042prt.sys
<SYSTEM32>\dllcache\IMS.CAT
<SYSTEM32>\dllcache\IASNT4.CAT
<SYSTEM32>\diskpart.exe
<SYSTEM32>\diskmgmt.msc
<SYSTEM32>\diskperf.exe
<SYSTEM32>\dllcache\filterpipelineprintproc.dll
<SYSTEM32>\dispex.dll
<SYSTEM32>\DirectX\Dinput\msf1f_3.png
<SYSTEM32>\DirectX\Dinput\msf1f_2.png
<SYSTEM32>\DirectX\Dinput\msf1f_4.png
<SYSTEM32>\DirectX\Dinput\msf1f_6.png
<SYSTEM32>\DirectX\Dinput\msf1f_5.png
<SYSTEM32>\DirectX\Dinput\msf1f.ini
<SYSTEM32>\DirectX\Dinput\mse_g.ini
<SYSTEM32>\DirectX\Dinput\msf1f.png
<SYSTEM32>\DirectX\Dinput\msf1f_10.png
<SYSTEM32>\DirectX\Dinput\msf1f_1.png
<SYSTEM32>\DirectX\Dinput\msf1f_7.png
<SYSTEM32>\DirectX\Dinput\msprw_3.png
<SYSTEM32>\DirectX\Dinput\msprw_2.png
<SYSTEM32>\DirectX\Dinput\msprw_4.png
<SYSTEM32>\DirectX\Dinput\msprw_6.png
<SYSTEM32>\DirectX\Dinput\msprw_5.png
<SYSTEM32>\DirectX\Dinput\msf1f_9.png
<SYSTEM32>\DirectX\Dinput\msf1f_8.png
<SYSTEM32>\DirectX\Dinput\msprw.ini
<SYSTEM32>\DirectX\Dinput\msprw_1.png
<SYSTEM32>\DirectX\Dinput\msprw.png
<SYSTEM32>\dmdskmgr.dll
<SYSTEM32>\dmdlgs.dll
<SYSTEM32>\dmdskres.dll
<SYSTEM32>\dmintf.dll
<SYSTEM32>\dmime.dll
<SYSTEM32>\dmadmin.exe
<SYSTEM32>\dllhst3g.exe
<SYSTEM32>\dmband.dll
<SYSTEM32>\dmconfig.dll
<SYSTEM32>\dmcompos.dll
<SYSTEM32>\dmloader.dll
<SYSTEM32>\dmusic.dll
<SYSTEM32>\dmsynth.dll
<SYSTEM32>\dmutil.dll
<SYSTEM32>\dnsapi.dll
<SYSTEM32>\dmview.ocx
<SYSTEM32>\dmremote.exe
<SYSTEM32>\dmocx.dll
<SYSTEM32>\dmscript.dll
<SYSTEM32>\dmstyle.dll
<SYSTEM32>\dmserver.dll
<SYSTEM32>\dllcache\MSTSWEB.CAT
<SYSTEM32>\dllcache\msn9.cat
<SYSTEM32>\dllcache\MW770.CAT
<SYSTEM32>\dllcache\NT5.CAT
<SYSTEM32>\dllcache\netfx.cat
<SYSTEM32>\dllcache\mediactr.cat
<SYSTEM32>\dllcache\MAPIMIG.CAT
<SYSTEM32>\dllcache\mouclass.sys
<SYSTEM32>\dllcache\msn7.cat
<SYSTEM32>\dllcache\MSMSGS.CAT
<SYSTEM32>\dllcache\NT5IIS.CAT
<SYSTEM32>\dllcache\wmerrenu.cat
<SYSTEM32>\dllcache\tabletpc.cat
<SYSTEM32>\dllcache\xpsshhdr.dll
<SYSTEM32>\dllhost.exe
<SYSTEM32>\dllcache\xpssvcs.dll
<SYSTEM32>\dllcache\NTPRINT.CAT
<SYSTEM32>\dllcache\NT5INF.CAT
<SYSTEM32>\dllcache\OEMBIOS.CAT
<SYSTEM32>\dllcache\SP2.CAT
<SYSTEM32>\dllcache\printfilterpipelinesvc.exe
<SYSTEM32>\DirectX\Dinput\ms56_2.png
<SYSTEM32>\DirectX\Dinput\ms56_10.png
<SYSTEM32>\DirectX\Dinput\ms56_3.png
<SYSTEM32>\DirectX\Dinput\ms56_5.png
<SYSTEM32>\DirectX\Dinput\ms56_4.png
<SYSTEM32>\DirectX\Dinput\ms3b_t.png
<SYSTEM32>\DirectX\Dinput\ms3b_m.png
<SYSTEM32>\DirectX\Dinput\ms56.ini
<SYSTEM32>\DirectX\Dinput\ms56_1.png
<SYSTEM32>\DirectX\Dinput\ms56.png
<SYSTEM32>\DirectX\Dinput\ms56_6.png
<SYSTEM32>\DirectX\Dinput\ms6_10.png
<SYSTEM32>\DirectX\Dinput\ms6_1.png
<SYSTEM32>\DirectX\Dinput\ms6_2.png
<SYSTEM32>\DirectX\Dinput\ms6_4.png
<SYSTEM32>\DirectX\Dinput\ms6_3.png
<SYSTEM32>\DirectX\Dinput\ms56_8.png
<SYSTEM32>\DirectX\Dinput\ms56_7.png
<SYSTEM32>\DirectX\Dinput\ms56_9.png
<SYSTEM32>\DirectX\Dinput\ms6.png
<SYSTEM32>\DirectX\Dinput\ms6.ini
<SYSTEM32>\DirectX\Dinput\ms34_02.png
<SYSTEM32>\DirectX\Dinput\ms34_01.png
<SYSTEM32>\DirectX\Dinput\ms34_03.png
<SYSTEM32>\DirectX\Dinput\ms34_05.png
<SYSTEM32>\DirectX\Dinput\ms34_04.png
<SYSTEM32>\DirectX\Dinput\ms28_7.png
<SYSTEM32>\DirectX\Dinput\ms28_6.png
<SYSTEM32>\DirectX\Dinput\ms28_8.png
<SYSTEM32>\DirectX\Dinput\ms34.png
<SYSTEM32>\DirectX\Dinput\ms34.ini
<SYSTEM32>\DirectX\Dinput\ms34_06.png
<SYSTEM32>\DirectX\Dinput\ms3b_3.png
<SYSTEM32>\DirectX\Dinput\ms3b_2.png
<SYSTEM32>\DirectX\Dinput\ms3b_4.png
<SYSTEM32>\DirectX\Dinput\ms3b_c.png
<SYSTEM32>\DirectX\Dinput\ms3b_a.png
<SYSTEM32>\DirectX\Dinput\ms34_08.png
<SYSTEM32>\DirectX\Dinput\ms34_07.png
<SYSTEM32>\DirectX\Dinput\ms3b.ini
<SYSTEM32>\DirectX\Dinput\ms3b_1.png
<SYSTEM32>\DirectX\Dinput\ms3b.png
<SYSTEM32>\DirectX\Dinput\ms8_8.png
<SYSTEM32>\DirectX\Dinput\ms8_7.png
<SYSTEM32>\DirectX\Dinput\ms8_9.png
<SYSTEM32>\DirectX\Dinput\mse.ini
<SYSTEM32>\DirectX\Dinput\ms8_g.ini
<SYSTEM32>\DirectX\Dinput\ms8_3.png
<SYSTEM32>\DirectX\Dinput\ms8_2.png
<SYSTEM32>\DirectX\Dinput\ms8_4.png
<SYSTEM32>\DirectX\Dinput\ms8_6.png
<SYSTEM32>\DirectX\Dinput\ms8_5.png
<SYSTEM32>\DirectX\Dinput\mse.png
<SYSTEM32>\DirectX\Dinput\mse_6.png
<SYSTEM32>\DirectX\Dinput\mse_5.png
<SYSTEM32>\DirectX\Dinput\mse_7.png
<SYSTEM32>\DirectX\Dinput\mse_9.png
<SYSTEM32>\DirectX\Dinput\mse_8.png
<SYSTEM32>\DirectX\Dinput\mse_10.png
<SYSTEM32>\DirectX\Dinput\mse_1.png
<SYSTEM32>\DirectX\Dinput\mse_2.png
<SYSTEM32>\DirectX\Dinput\mse_4.png
<SYSTEM32>\DirectX\Dinput\mse_3.png
<SYSTEM32>\DirectX\Dinput\ms7.png
<SYSTEM32>\DirectX\Dinput\ms7.ini
<SYSTEM32>\DirectX\Dinput\ms7_1.png
<SYSTEM32>\DirectX\Dinput\ms7_3.png
<SYSTEM32>\DirectX\Dinput\ms7_2.png
<SYSTEM32>\DirectX\Dinput\ms6_6.png
<SYSTEM32>\DirectX\Dinput\ms6_5.png
<SYSTEM32>\DirectX\Dinput\ms6_7.png
<SYSTEM32>\DirectX\Dinput\ms6_9.png
<SYSTEM32>\DirectX\Dinput\ms6_8.png
<SYSTEM32>\DirectX\Dinput\ms7_4.png
<SYSTEM32>\DirectX\Dinput\ms8.ini
<SYSTEM32>\DirectX\Dinput\ms7_g.ini
<SYSTEM32>\DirectX\Dinput\ms8.png
<SYSTEM32>\DirectX\Dinput\ms8_10.png
<SYSTEM32>\DirectX\Dinput\ms8_1.png
<SYSTEM32>\DirectX\Dinput\ms7_6.png
<SYSTEM32>\DirectX\Dinput\ms7_5.png
<SYSTEM32>\DirectX\Dinput\ms7_7.png
<SYSTEM32>\DirectX\Dinput\ms7_9.png
<SYSTEM32>\DirectX\Dinput\ms7_8.png
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\mediactr.cat
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\MAPIMIG.CAT
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\MSMSGS.CAT
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\msn9.cat
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\msn7.cat
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\IASNT4.CAT
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\HPCRDP.CAT
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\IMS.CAT
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB954550-v5.cat
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB893803v2_wxp.cat
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\MSTSWEB.CAT
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NTPRINT.CAT
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5INF.CAT
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem0.CAT
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem2.CAT
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem1.CAT
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\MW770.CAT
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\msxpsdrv.CAT
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\netfx.cat
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5IIS.CAT
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT
<SYSTEM32>\browseui.dll
<SYSTEM32>\browser.dll
<SYSTEM32>\browsewm.dll
<SYSTEM32>\bthprops.cpl
<SYSTEM32>\bthci.dll
<SYSTEM32>\bootvid.dll
<SYSTEM32>\bootok.exe
<SYSTEM32>\bootvrfy.exe
<SYSTEM32>\browselc.dll
<SYSTEM32>\bopomofo.uce
<SYSTEM32>\bthserv.dll
<SYSTEM32>\capesnpn.dll
<SYSTEM32>\camocx.dll
<SYSTEM32>\cards.dll
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\FP4.CAT
<SYSTEM32>\CatRoot\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\TimeStamp
<SYSTEM32>\cabinet.dll
<SYSTEM32>\btpanui.dll
<SYSTEM32>\cabview.dll
<SYSTEM32>\calc.exe
<SYSTEM32>\cacls.exe
<SYSTEM32>\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb
<SYSTEM32>\CatRoot2\tmp.edb
<SYSTEM32>\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\TimeStamp
<SYSTEM32>\catsrv.dll
<SYSTEM32>\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\TimeStamp
<SYSTEM32>\CatRoot2\edb00017.log
<SYSTEM32>\CatRoot2\edb00016.log
<SYSTEM32>\CatRoot2\edb00018.log
<SYSTEM32>\CatRoot2\res2.log
<SYSTEM32>\CatRoot2\res1.log
<SYSTEM32>\catsrvps.dll
<SYSTEM32>\cdplayer.exe.manifest
<SYSTEM32>\cdosys.dll
<SYSTEM32>\certcli.dll
<SYSTEM32>\certmgr.msc
<SYSTEM32>\certmgr.dll
<SYSTEM32>\ccfgnt.dll
<SYSTEM32>\catsrvut.dll
<SYSTEM32>\cdfview.dll
<SYSTEM32>\cdmodem.dll
<SYSTEM32>\cdm.dll
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\SP2.CAT
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\OEMBIOS.CAT
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\tabletpc.cat
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WIC.cat
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\TimeStamp
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem4.CAT
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem3.CAT
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem5.CAT
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem7.CAT
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem6.CAT
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\wmerrenu.cat
<SYSTEM32>\CatRoot2\edb00012.log
<SYSTEM32>\CatRoot2\edb00011.log
<SYSTEM32>\CatRoot2\edb00013.log
<SYSTEM32>\CatRoot2\edb00015.log
<SYSTEM32>\CatRoot2\edb00014.log
<SYSTEM32>\CatRoot2\edb.chk
<SYSTEM32>\CatRoot2\dberr.txt
<SYSTEM32>\CatRoot2\edb0000E.log
<SYSTEM32>\CatRoot2\edb00010.log
<SYSTEM32>\CatRoot2\edb0000F.log
<SYSTEM32>\ahui.exe
<SYSTEM32>\advpack.dll
<SYSTEM32>\alg.exe
<SYSTEM32>\amcompat.tlb
<SYSTEM32>\alrsvc.dll
<SYSTEM32>\adsnds.dll
<SYSTEM32>\adsmsext.dll
<SYSTEM32>\adsnt.dll
<SYSTEM32>\advapi32.dll
<SYSTEM32>\adsnw.dll
<SYSTEM32>\amstream.dll
<SYSTEM32>\appwiz.cpl
<SYSTEM32>\appmgr.dll
<SYSTEM32>\arp.exe
<SYSTEM32>\asferror.dll
<SYSTEM32>\asctrls.ocx
<SYSTEM32>\apcups.dll
<SYSTEM32>\ansi.sys
<SYSTEM32>\append.exe
<SYSTEM32>\appmgmts.dll
<SYSTEM32>\apphelp.dll
<SYSTEM32>\aaaamon.dll
<SYSTEM32>\6to4svc.dll
<SYSTEM32>\access.cpl
<SYSTEM32>\accwiz.exe
<SYSTEM32>\acctres.dll
<SYSTEM32>\-1
<SYSTEM32>\$winnt$.inf
<SYSTEM32>\1033\dwintl.dll
<SYSTEM32>\12520850.cpx
<SYSTEM32>\12520437.cpx
<SYSTEM32>\acelpdec.ax
<SYSTEM32>\admparse.dll
<SYSTEM32>\actxprxy.dll
<SYSTEM32>\adptif.dll
<SYSTEM32>\adsldpc.dll
<SYSTEM32>\adsldp.dll
<SYSTEM32>\aclui.dll
<SYSTEM32>\acledit.dll
<SYSTEM32>\activeds.dll
<SYSTEM32>\actmovie.exe
<SYSTEM32>\activeds.tlb
<SYSTEM32>\avifile.dll
<SYSTEM32>\avifil32.dll
<SYSTEM32>\avmeter.dll
<SYSTEM32>\avwav.dll
<SYSTEM32>\avtapi.dll
<SYSTEM32>\autofmt.exe
<SYSTEM32>\AUTOEXEC.NT
<SYSTEM32>\autolfn.exe
<SYSTEM32>\avicap32.dll
<SYSTEM32>\avicap.dll
<SYSTEM32>\basesrv.dll
<SYSTEM32>\bitsprx3.dll
<SYSTEM32>\bitsprx2.dll
<SYSTEM32>\blackbox.dll
<SYSTEM32>\bootcfg.exe
<SYSTEM32>\blastcln.exe
<SYSTEM32>\batt.dll
<SYSTEM32>\batmeter.dll
<SYSTEM32>\bidispl.dll
<SYSTEM32>\bios4.rom
<SYSTEM32>\bios1.rom
<SYSTEM32>\atkctrs.dll
<SYSTEM32>\at.exe
<SYSTEM32>\atl.dll
<SYSTEM32>\atmadm.exe
<SYSTEM32>\atl100.dll
<SYSTEM32>\asr_fmt.exe
<SYSTEM32>\aspnet_counters.dll
<SYSTEM32>\asr_ldm.exe
<SYSTEM32>\asycfilt.dll
<SYSTEM32>\asr_pfu.exe
<SYSTEM32>\atmfd.dll
<SYSTEM32>\authz.dll
<SYSTEM32>\auditusr.exe
<SYSTEM32>\autochk.exe
<SYSTEM32>\autodisc.dll
<SYSTEM32>\autoconv.exe
<SYSTEM32>\atmpvcno.dll
<SYSTEM32>\atmlib.dll
<SYSTEM32>\atrace.dll
<SYSTEM32>\audiosrv.dll
<SYSTEM32>\attrib.exe
<SYSTEM32>\config\systemprofile\Start Menu\Programs\Accessories\Windows Explorer.lnk
<SYSTEM32>\config\systemprofile\Start Menu\Programs\Accessories\Tour Windows XP.lnk
<SYSTEM32>\config\systemprofile\Start Menu\Programs\desktop.ini
<SYSTEM32>\config\systemprofile\Start Menu\Programs\Startup\desktop.ini
<SYSTEM32>\config\systemprofile\Start Menu\Programs\Remote Assistance.lnk
<SYSTEM32>\config\systemprofile\Start Menu\Programs\Accessories\Entertainment\Windows Media Player.lnk
<SYSTEM32>\config\systemprofile\Start Menu\Programs\Accessories\Entertainment\desktop.ini
<SYSTEM32>\config\systemprofile\Start Menu\Programs\Accessories\Notepad.lnk
<SYSTEM32>\config\systemprofile\Start Menu\Programs\Accessories\Synchronize.lnk
<SYSTEM32>\config\systemprofile\Start Menu\Programs\Accessories\Program Compatibility Wizard.lnk
<SYSTEM32>\config\systemprofile\Start Menu\Programs\Windows Media Player.lnk
<SYSTEM32>\config\systemprofile\Templates\quattro.wb2
<SYSTEM32>\config\systemprofile\Templates\presenta.shw
<SYSTEM32>\config\systemprofile\Templates\sndrec.wav
<SYSTEM32>\config\systemprofile\Templates\winword2.doc
<SYSTEM32>\config\systemprofile\Templates\winword.doc
<SYSTEM32>\config\systemprofile\Templates\excel.xls
<SYSTEM32>\config\systemprofile\Templates\amipro.sam
<SYSTEM32>\config\systemprofile\Templates\excel4.xls
<SYSTEM32>\config\systemprofile\Templates\powerpnt.ppt
<SYSTEM32>\config\systemprofile\Templates\lotus.wk4
<SYSTEM32>\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SL6TKFAX\desktop.ini
<SYSTEM32>\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
<SYSTEM32>\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\ULU3YH2D\desktop.ini
<SYSTEM32>\config\systemprofile\SendTo\Compressed (zipped) Folder.ZFSendToTarget
<SYSTEM32>\config\systemprofile\Local Settings\Temporary Internet Files\desktop.ini
<SYSTEM32>\config\systemprofile\Local Settings\History\History.IE5\index.dat
<SYSTEM32>\config\systemprofile\Local Settings\History\History.IE5\desktop.ini
<SYSTEM32>\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\desktop.ini
<SYSTEM32>\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini
<SYSTEM32>\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\desktop.ini
<SYSTEM32>\config\systemprofile\SendTo\Desktop (create shortcut).DeskLink
<SYSTEM32>\config\systemprofile\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk
<SYSTEM32>\config\systemprofile\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk
<SYSTEM32>\config\systemprofile\Start Menu\Programs\Accessories\Accessibility\Utility Manager.lnk
<SYSTEM32>\config\systemprofile\Start Menu\Programs\Accessories\desktop.ini
<SYSTEM32>\config\systemprofile\Start Menu\Programs\Accessories\Command Prompt.lnk
<SYSTEM32>\config\systemprofile\SendTo\Mail Recipient.MAPIMail
<SYSTEM32>\config\systemprofile\SendTo\desktop.ini
<SYSTEM32>\config\systemprofile\Start Menu\desktop.ini
<SYSTEM32>\config\systemprofile\Start Menu\Programs\Accessories\Accessibility\Magnifier.lnk
<SYSTEM32>\config\systemprofile\Start Menu\Programs\Accessories\Accessibility\desktop.ini
<SYSTEM32>\csseqchk.dll
<SYSTEM32>\csrss.exe
<SYSTEM32>\ctfmon.exe
<SYSTEM32>\ctl3dv2.dll
<SYSTEM32>\ctl3d32.dll
<SYSTEM32>\cryptui.dll
<SYSTEM32>\cryptsvc.dll
<SYSTEM32>\cscdll.dll
<SYSTEM32>\csrsrv.dll
<SYSTEM32>\cscui.dll
<SYSTEM32>\ctype.nls
<SYSTEM32>\c_10029.nls
<SYSTEM32>\c_10017.nls
<SYSTEM32>\c_10079.nls
<SYSTEM32>\c_10082.nls
<SYSTEM32>\c_10081.nls
<SYSTEM32>\c_10000.nls
<SYSTEM32>\c_037.nls
<SYSTEM32>\c_10006.nls
<SYSTEM32>\c_10010.nls
<SYSTEM32>\c_10007.nls
<SYSTEM32>\CONFIG.TMP
<SYSTEM32>\CONFIG.NT
<SYSTEM32>\confmsp.dll
<SYSTEM32>\console.dll
<SYSTEM32>\conime.exe
<SYSTEM32>\config\systemprofile\Templates\wordpfct.wpg
<SYSTEM32>\config\systemprofile\Templates\wordpfct.wpd
<SYSTEM32>\config\TempKey.LOG
<SYSTEM32>\config\userdiff.LOG
<SYSTEM32>\config\userdiff
<SYSTEM32>\control.exe
<SYSTEM32>\cryptdlg.dll
<SYSTEM32>\crypt32.dll
<SYSTEM32>\cryptdll.dll
<SYSTEM32>\cryptnet.dll
<SYSTEM32>\cryptext.dll
<SYSTEM32>\corpol.dll
<SYSTEM32>\convert.exe
<SYSTEM32>\country.sys
<SYSTEM32>\crtdll.dll
<SYSTEM32>\credui.dll
<SYSTEM32>\cmd.exe
<SYSTEM32>\cmcfg32.dll
<SYSTEM32>\cmdial32.dll
<SYSTEM32>\cmdlib.wsc
<SYSTEM32>\cmdl32.exe
<SYSTEM32>\cliconfg.rll
<SYSTEM32>\cliconfg.exe
<SYSTEM32>\clipbrd.exe
<SYSTEM32>\clusapi.dll
<SYSTEM32>\clipsrv.exe
<SYSTEM32>\cmmgr32.hlp
<SYSTEM32>\cmutil.dll
<SYSTEM32>\cmstp.exe
<SYSTEM32>\cnbjmon.dll
<SYSTEM32>\cnvfat.dll
<SYSTEM32>\cnetcfg.dll
<SYSTEM32>\cmos.ram
<SYSTEM32>\cmmon32.exe
<SYSTEM32>\cmpbk32.dll
<SYSTEM32>\cmsetACL.dll
<SYSTEM32>\cmprops.dll
<SYSTEM32>\chkntfs.exe
<SYSTEM32>\chkdsk.exe
<SYSTEM32>\ciadmin.dll
<SYSTEM32>\cic.dll
<SYSTEM32>\ciadv.msc
<SYSTEM32>\cfgbkend.dll
<SYSTEM32>\cewmdm.dll
<SYSTEM32>\cfgmgr32.dll
<SYSTEM32>\chcp.com
<SYSTEM32>\charmap.exe
<SYSTEM32>\cidaemon.exe
<SYSTEM32>\clbcatq.dll
<SYSTEM32>\clbcatex.dll
<SYSTEM32>\cleanmgr.exe
<SYSTEM32>\cliconfg.dll
<SYSTEM32>\cliconf.chm
<SYSTEM32>\cipher.exe
<SYSTEM32>\ciodm.dll
<SYSTEM32>\cisvc.exe
<SYSTEM32>\clb.dll
<SYSTEM32>\ckcnv.exe
<SYSTEM32>\config\SecEvent.Evt
<SYSTEM32>\config\default.sav
<SYSTEM32>\config\software.sav
<SYSTEM32>\config\system.sav
<SYSTEM32>\config\SysEvent.Evt
<SYSTEM32>\comsnap.dll
<SYSTEM32>\comres.dll
<SYSTEM32>\comsvcs.dll
<SYSTEM32>\config\AppEvent.Evt
<SYSTEM32>\comuid.dll
<SYSTEM32>\config\systemprofile\Application Data\desktop.ini
<SYSTEM32>\config\systemprofile\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.DTD
<SYSTEM32>\config\systemprofile\Local Settings\Application Data\Microsoft\Media Player\CurrentDatabase_59R.wmdb
<SYSTEM32>\config\systemprofile\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.XML
<SYSTEM32>\config\systemprofile\Local Settings\History\desktop.ini
<SYSTEM32>\config\systemprofile\Local Settings\desktop.ini
<SYSTEM32>\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\MetaData\7B2238AACCEDC3F1FFE8E7EB5F575EC9
<SYSTEM32>\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\Content\7B2238AACCEDC3F1FFE8E7EB5F575EC9
<SYSTEM32>\config\systemprofile\Application Data\Microsoft\Internet Explorer\brndlog.bak
<SYSTEM32>\config\systemprofile\Cookies\index.dat
<SYSTEM32>\config\systemprofile\Application Data\Microsoft\Internet Explorer\brndlog.txt
<SYSTEM32>\Com\mtsadmin.tlb
<SYSTEM32>\Com\comrereg.exe
<SYSTEM32>\comaddin.dll
<SYSTEM32>\comctl32.dll
<SYSTEM32>\comcat.dll
<SYSTEM32>\Com\comadmin.dll
<SYSTEM32>\colbact.dll
<SYSTEM32>\Com\comempty.dat
<SYSTEM32>\Com\comrepl.exe
<SYSTEM32>\Com\comexp.msc
<SYSTEM32>\comdlg32.dll
<SYSTEM32>\compmgmt.msc
<SYSTEM32>\compatUI.dll
<SYSTEM32>\compobj.dll
<SYSTEM32>\comrepl.dll
<SYSTEM32>\compstui.dll
<SYSTEM32>\command.com
<SYSTEM32>\comm.drv
<SYSTEM32>\commdlg.dll
<SYSTEM32>\compact.exe
<SYSTEM32>\comp.exe

Moves the following system files:

from <SYSTEM32>\CatRoot2\edb.log to <SYSTEM32>\CatRoot2\edb00019.log

TECHNOLOGIES

TERMINOLOGIE

COURS ET EDU

MYTHES

Technical Information

Recommandations pour le traitement

Free trial