Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Win32' = '%WINDIR%\calc.exe'
- <SYSTEM32>\rsopprov.exe
- <SYSTEM32>\rsnotify.exe
- <SYSTEM32>\rtcshare.exe
- <SYSTEM32>\rsvp.exe
- <SYSTEM32>\rsmui.exe
- <SYSTEM32>\rdshost.exe
- <SYSTEM32>\rdpclip.exe
- <SYSTEM32>\rsm.exe
- <SYSTEM32>\reg.exe
- <SYSTEM32>\sndrec32.exe
- <SYSTEM32>\smlogsvc.exe
- <SYSTEM32>\sol.exe
- <SYSTEM32>\sndvol32.exe
- <SYSTEM32>\sigverif.exe
- <SYSTEM32>\sdbinst.exe
- <SYSTEM32>\schtasks.exe
- <SYSTEM32>\shrpubw.exe
- <SYSTEM32>\sessmgr.exe
- <SYSTEM32>\rasphone.exe
- <SYSTEM32>\netsh.exe
- <SYSTEM32>\netdde.exe
- <SYSTEM32>\nslookup.exe
- <SYSTEM32>\notepad.exe
- <SYSTEM32>\net1.exe
- <SYSTEM32>\mshearts.exe
- <SYSTEM32>\mqtgsvc.exe
- <SYSTEM32>\narrator.exe
- <SYSTEM32>\mspaint.exe
- <SYSTEM32>\powercfg.exe
- <SYSTEM32>\packager.exe
- <SYSTEM32>\proquota.exe
- <SYSTEM32>\PresentationHost.exe
- <SYSTEM32>\osk.exe
- <SYSTEM32>\nwscript.exe
- <SYSTEM32>\ntvdm.exe
- <SYSTEM32>\openfiles.exe
- <SYSTEM32>\odbcconf.exe
- <SYSTEM32>\spider.exe
- <SYSTEM32>\oobe\oobebaln.exe
- <SYSTEM32>\wuauclt1.exe
- <SYSTEM32>\Restore\srdiag.exe
- <SYSTEM32>\Restore\rstrui.exe
- <SYSTEM32>\wuauclt.exe
- <SYSTEM32>\wiaacmgr.exe
- <SYSTEM32>\wextract.exe
- <SYSTEM32>\wscript.exe
- <SYSTEM32>\winmine.exe
- <SYSTEM32>\wbem\wmic.exe
- <SYSTEM32>\wbem\wmiapsrv.exe
- <Auxiliary element>
- <SYSTEM32>\wbem\wmiprvse.exe
- <SYSTEM32>\wbem\wmiadap.exe
- <SYSTEM32>\usmt\migwiz.exe
- <SYSTEM32>\usmt\migload.exe
- <SYSTEM32>\wbem\wbemtest.exe
- <SYSTEM32>\usmt\migwiz_a.exe
- <SYSTEM32>\w32tm.exe
- <SYSTEM32>\telnet.exe
- <SYSTEM32>\taskmgr.exe
- <SYSTEM32>\tlntsess.exe
- <SYSTEM32>\tlntadmn.exe
- <SYSTEM32>\tasklist.exe
- <SYSTEM32>\sysocmgr.exe
- <SYSTEM32>\syncapp.exe
- <SYSTEM32>\taskkill.exe
- <SYSTEM32>\systeminfo.exe
- <SYSTEM32>\utilman.exe
- <SYSTEM32>\usrshuta.exe
- <SYSTEM32>\vssvc.exe
- <SYSTEM32>\verifier.exe
- <SYSTEM32>\usrprbda.exe
- <SYSTEM32>\tourstart.exe
- <SYSTEM32>\tlntsvr.exe
- <SYSTEM32>\usrmlnka.exe
- <SYSTEM32>\tracerpt.exe
- %WINDIR%\pchealth\helpctr\binaries\HelpHost.exe
- %WINDIR%\pchealth\helpctr\binaries\HelpCtr.exe
- %WINDIR%\pchealth\helpctr\binaries\msconfig.exe
- %WINDIR%\pchealth\helpctr\binaries\HelpSvc.exe
- %WINDIR%\mui\muisetup.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\SetupUtility.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\SetupUtility.exe
- %WINDIR%\msagent\agentsvr.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
- <SYSTEM32>\charmap.exe
- <SYSTEM32>\calc.exe
- <SYSTEM32>\cleanmgr.exe
- <SYSTEM32>\cipher.exe
- <SYSTEM32>\bootcfg.exe
- <SYSTEM32>\accwiz.exe
- %WINDIR%\pchealth\UploadLB\Binaries\UploadM.exe
- <SYSTEM32>\blastcln.exe
- <SYSTEM32>\ahui.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\WsatConfig.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe
- %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\CasPol.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\aspnet_regsql.exe
- %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
- %WINDIR%\regedit.exe
- %WINDIR%\NOTEPAD.EXE
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\vbc.exe
- %WINDIR%\winhlp32.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ngen.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\DataSvcUtil.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ComSvcConfig.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ilasm.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\EdmGen.exe
- <SYSTEM32>\clipbrd.exe
- <SYSTEM32>\ipsec6.exe
- <SYSTEM32>\ipconfig.exe
- <SYSTEM32>\locator.exe
- <SYSTEM32>\ipv6.exe
- <SYSTEM32>\imapi.exe
- <SYSTEM32>\gpresult.exe
- <SYSTEM32>\getmac.exe
- <SYSTEM32>\iexpress.exe
- <SYSTEM32>\gpupdate.exe
- <SYSTEM32>\mmc.exe
- <SYSTEM32>\migpwd.exe
- <SYSTEM32>\mplay32.exe
- <SYSTEM32>\mobsync.exe
- <SYSTEM32>\makecab.exe
- <SYSTEM32>\logman.exe
- <SYSTEM32>\logagent.exe
- <SYSTEM32>\magnify.exe
- <SYSTEM32>\logonui.exe
- <SYSTEM32>\fsutil.exe
- <SYSTEM32>\dmadmin.exe
- <SYSTEM32>\diskpart.exe
- <SYSTEM32>\driverquery.exe
- <SYSTEM32>\dpvsetup.exe
- <SYSTEM32>\diantz.exe
- <SYSTEM32>\cmstp.exe
- <SYSTEM32>\cmdl32.exe
- <SYSTEM32>\dfrgntfs.exe
- <SYSTEM32>\dfrgfat.exe
- <SYSTEM32>\extrac32.exe
- <SYSTEM32>\eventtriggers.exe
- <SYSTEM32>\fsquirt.exe
- <SYSTEM32>\freecell.exe
- <SYSTEM32>\eventcreate.exe
- <SYSTEM32>\dvdplay.exe
- <SYSTEM32>\drwtsn32.exe
- <SYSTEM32>\eudcedit.exe
- <SYSTEM32>\dwwin.exe
- <SYSTEM32>\usmt\migwiz.exe with <SYSTEM32>\usmt\migwiz.exe.new
- <SYSTEM32>\dllcache\locator.exe with <SYSTEM32>\dllcache\locator.exe.new
- <SYSTEM32>\Restore\srdiag.exe with <SYSTEM32>\Restore\srdiag.exe.new
- <SYSTEM32>\usmt\migload.exe with <SYSTEM32>\usmt\migload.exe.new
- <SYSTEM32>\wbem\wmiadap.exe with <SYSTEM32>\wbem\wmiadap.exe.new
- <SYSTEM32>\wbem\wmiapsrv.exe with <SYSTEM32>\wbem\wmiapsrv.exe.new
- <SYSTEM32>\usmt\migwiz_a.exe with <SYSTEM32>\usmt\migwiz_a.exe.new
- <SYSTEM32>\wbem\wbemtest.exe with <SYSTEM32>\wbem\wbemtest.exe.new
- <SYSTEM32>\dllcache\imapi.exe with <SYSTEM32>\dllcache\imapi.exe.new
- <SYSTEM32>\dllcache\ipconfig.exe with <SYSTEM32>\dllcache\ipconfig.exe.new
- <SYSTEM32>\dllcache\gpupdate.exe with <SYSTEM32>\dllcache\gpupdate.exe.new
- <SYSTEM32>\dllcache\iexpress.exe with <SYSTEM32>\dllcache\iexpress.exe.new
- <SYSTEM32>\dllcache\ipv6.exe with <SYSTEM32>\dllcache\ipv6.exe.new
- <SYSTEM32>\Restore\rstrui.exe with <SYSTEM32>\Restore\rstrui.exe.new
- <SYSTEM32>\oobe\oobebaln.exe with <SYSTEM32>\oobe\oobebaln.exe.new
- <SYSTEM32>\dllcache\ipsec6.exe with <SYSTEM32>\dllcache\ipsec6.exe.new
- <SYSTEM32>\dllcache\mqtgsvc.exe with <SYSTEM32>\dllcache\mqtgsvc.exe.new
- <SYSTEM32>\dllcache\mshearts.exe with <SYSTEM32>\dllcache\mshearts.exe.new
- <SYSTEM32>\dllcache\mobsync.exe with <SYSTEM32>\dllcache\mobsync.exe.new
- <SYSTEM32>\dllcache\mplay32.exe with <SYSTEM32>\dllcache\mplay32.exe.new
- <SYSTEM32>\dllcache\net1.exe with <SYSTEM32>\dllcache\net1.exe.new
- <SYSTEM32>\dllcache\netdde.exe with <SYSTEM32>\dllcache\netdde.exe.new
- <SYSTEM32>\dllcache\mspaint.exe with <SYSTEM32>\dllcache\mspaint.exe.new
- <SYSTEM32>\dllcache\narrator.exe with <SYSTEM32>\dllcache\narrator.exe.new
- <SYSTEM32>\wbem\wmiprvse.exe with <SYSTEM32>\wbem\wmiprvse.exe.new
- <SYSTEM32>\dllcache\logman.exe with <SYSTEM32>\dllcache\logman.exe.new
- <SYSTEM32>\dllcache\logagent.exe with <SYSTEM32>\dllcache\logagent.exe.new
- <SYSTEM32>\wbem\wmic.exe with <SYSTEM32>\wbem\wmic.exe.new
- <SYSTEM32>\dllcache\makecab.exe with <SYSTEM32>\dllcache\makecab.exe.new
- <SYSTEM32>\dllcache\mmc.exe with <SYSTEM32>\dllcache\mmc.exe.new
- <SYSTEM32>\dllcache\logonui.exe with <SYSTEM32>\dllcache\logonui.exe.new
- <SYSTEM32>\dllcache\magnify.exe with <SYSTEM32>\dllcache\magnify.exe.new
- <SYSTEM32>\dllcache\gprslt.exe with <SYSTEM32>\dllcache\gprslt.exe.new
- <SYSTEM32>\tasklist.exe with <SYSTEM32>\tasklist.exe.new
- <SYSTEM32>\taskmgr.exe with <SYSTEM32>\taskmgr.exe.new
- <SYSTEM32>\taskkill.exe with <SYSTEM32>\taskkill.exe.new
- <SYSTEM32>\dllcache\evtrig.exe with <SYSTEM32>\dllcache\evtrig.exe.new
- <SYSTEM32>\tlntadmn.exe with <SYSTEM32>\tlntadmn.exe.new
- <SYSTEM32>\tlntsess.exe with <SYSTEM32>\tlntsess.exe.new
- <SYSTEM32>\dllcache\extrac32.exe with <SYSTEM32>\dllcache\extrac32.exe.new
- <SYSTEM32>\telnet.exe with <SYSTEM32>\telnet.exe.new
- <SYSTEM32>\dllcache\evcreate.exe with <SYSTEM32>\dllcache\evcreate.exe.new
- <SYSTEM32>\sol.exe with <SYSTEM32>\sol.exe.new
- <SYSTEM32>\sndrec32.exe with <SYSTEM32>\sndrec32.exe.new
- <SYSTEM32>\sndvol32.exe with <SYSTEM32>\sndvol32.exe.new
- <SYSTEM32>\sysocmgr.exe with <SYSTEM32>\sysocmgr.exe.new
- <SYSTEM32>\systeminfo.exe with <SYSTEM32>\systeminfo.exe.new
- <SYSTEM32>\spider.exe with <SYSTEM32>\spider.exe.new
- <SYSTEM32>\syncapp.exe with <SYSTEM32>\syncapp.exe.new
- <SYSTEM32>\dllcache\fsutil.exe with <SYSTEM32>\dllcache\fsutil.exe.new
- <SYSTEM32>\winmine.exe with <SYSTEM32>\winmine.exe.new
- <SYSTEM32>\wextract.exe with <SYSTEM32>\wextract.exe.new
- <SYSTEM32>\wiaacmgr.exe with <SYSTEM32>\wiaacmgr.exe.new
- <SYSTEM32>\wuauclt.exe with <SYSTEM32>\wuauclt.exe.new
- <SYSTEM32>\wuauclt1.exe with <SYSTEM32>\wuauclt1.exe.new
- <SYSTEM32>\dllcache\getmac.exe with <SYSTEM32>\dllcache\getmac.exe.new
- <SYSTEM32>\wscript.exe with <SYSTEM32>\wscript.exe.new
- <SYSTEM32>\tracerpt.exe with <SYSTEM32>\tracerpt.exe.new
- <SYSTEM32>\dllcache\freecell.exe with <SYSTEM32>\dllcache\freecell.exe.new
- <SYSTEM32>\tlntsvr.exe with <SYSTEM32>\tlntsvr.exe.new
- <SYSTEM32>\tourstart.exe with <SYSTEM32>\tourstart.exe.new
- <SYSTEM32>\vssvc.exe with <SYSTEM32>\vssvc.exe.new
- <SYSTEM32>\w32tm.exe with <SYSTEM32>\w32tm.exe.new
- <SYSTEM32>\utilman.exe with <SYSTEM32>\utilman.exe.new
- <SYSTEM32>\verifier.exe with <SYSTEM32>\verifier.exe.new
- <SYSTEM32>\dllcache\verifier.exe with <SYSTEM32>\dllcache\verifier.exe.new
- <SYSTEM32>\dllcache\vssvc.exe with <SYSTEM32>\dllcache\vssvc.exe.new
- <SYSTEM32>\dllcache\tracerpt.exe with <SYSTEM32>\dllcache\tracerpt.exe.new
- <SYSTEM32>\dllcache\utilman.exe with <SYSTEM32>\dllcache\utilman.exe.new
- <SYSTEM32>\dllcache\wiaacmgr.exe with <SYSTEM32>\dllcache\wiaacmgr.exe.new
- <SYSTEM32>\dllcache\winmine.exe with <SYSTEM32>\dllcache\winmine.exe.new
- <SYSTEM32>\dllcache\w32tm.exe with <SYSTEM32>\dllcache\w32tm.exe.new
- <SYSTEM32>\dllcache\wextract.exe with <SYSTEM32>\dllcache\wextract.exe.new
- <SYSTEM32>\dllcache\taskmgr.exe with <SYSTEM32>\dllcache\taskmgr.exe.new
- <SYSTEM32>\dllcache\telnet.exe with <SYSTEM32>\dllcache\telnet.exe.new
- <SYSTEM32>\dllcache\taskkill.exe with <SYSTEM32>\dllcache\taskkill.exe.new
- <SYSTEM32>\dllcache\tasklist.exe with <SYSTEM32>\dllcache\tasklist.exe.new
- <SYSTEM32>\dllcache\tlntsvr.exe with <SYSTEM32>\dllcache\tlntsvr.exe.new
- <SYSTEM32>\dllcache\tourstrt.exe with <SYSTEM32>\dllcache\tourstrt.exe.new
- <SYSTEM32>\dllcache\tlntadmn.exe with <SYSTEM32>\dllcache\tlntadmn.exe.new
- <SYSTEM32>\dllcache\tlntsess.exe with <SYSTEM32>\dllcache\tlntsess.exe.new
- <SYSTEM32>\dllcache\wmiadap.exe with <SYSTEM32>\dllcache\wmiadap.exe.new
- <SYSTEM32>\dllcache\wmiapsrv.exe with <SYSTEM32>\dllcache\wmiapsrv.exe.new
- <SYSTEM32>\dllcache\migwiz_a.exe with <SYSTEM32>\dllcache\migwiz_a.exe.new
- <SYSTEM32>\dllcache\wbemtest.exe with <SYSTEM32>\dllcache\wbemtest.exe.new
- <SYSTEM32>\dvdplay.exe with <SYSTEM32>\SET4.tmp
- <SYSTEM32>\usrmlnka.exe with <SYSTEM32>\SET8.tmp
- <SYSTEM32>\dllcache\wmic.exe with <SYSTEM32>\dllcache\wmic.exe.new
- <SYSTEM32>\dllcache\wmiprvse.exe with <SYSTEM32>\dllcache\wmiprvse.exe.new
- <SYSTEM32>\dllcache\wuauclt1.exe with <SYSTEM32>\dllcache\wuauclt1.exe.new
- <SYSTEM32>\dllcache\oobebaln.exe with <SYSTEM32>\dllcache\oobebaln.exe.new
- <SYSTEM32>\dllcache\wscript.exe with <SYSTEM32>\dllcache\wscript.exe.new
- <SYSTEM32>\dllcache\wuauclt.exe with <SYSTEM32>\dllcache\wuauclt.exe.new
- <SYSTEM32>\dllcache\migload.exe with <SYSTEM32>\dllcache\migload.exe.new
- <SYSTEM32>\dllcache\migwiz.exe with <SYSTEM32>\dllcache\migwiz.exe.new
- <SYSTEM32>\dllcache\rstrui.exe with <SYSTEM32>\dllcache\rstrui.exe.new
- <SYSTEM32>\dllcache\srdiag.exe with <SYSTEM32>\dllcache\srdiag.exe.new
- <SYSTEM32>\dllcache\sysinfo.exe with <SYSTEM32>\dllcache\sysinfo.exe.new
- <SYSTEM32>\dllcache\rasphone.exe with <SYSTEM32>\dllcache\rasphone.exe.new
- <SYSTEM32>\dllcache\rdpclip.exe with <SYSTEM32>\dllcache\rdpclip.exe.new
- <SYSTEM32>\dllcache\powercfg.exe with <SYSTEM32>\dllcache\powercfg.exe.new
- <SYSTEM32>\dllcache\proquota.exe with <SYSTEM32>\dllcache\proquota.exe.new
- <SYSTEM32>\dllcache\rsm.exe with <SYSTEM32>\dllcache\rsm.exe.new
- <SYSTEM32>\dllcache\rsmui.exe with <SYSTEM32>\dllcache\rsmui.exe.new
- <SYSTEM32>\dllcache\rdshost.exe with <SYSTEM32>\dllcache\rdshost.exe.new
- <SYSTEM32>\dllcache\reg.exe with <SYSTEM32>\dllcache\reg.exe.new
- <SYSTEM32>\dllcache\ntvdm.exe with <SYSTEM32>\dllcache\ntvdm.exe.new
- <SYSTEM32>\dllcache\nwscript.exe with <SYSTEM32>\dllcache\nwscript.exe.new
- <SYSTEM32>\dllcache\netsh.exe with <SYSTEM32>\dllcache\netsh.exe.new
- <SYSTEM32>\dllcache\nslookup.exe with <SYSTEM32>\dllcache\nslookup.exe.new
- <SYSTEM32>\dllcache\osk.exe with <SYSTEM32>\dllcache\osk.exe.new
- <SYSTEM32>\dllcache\packager.exe with <SYSTEM32>\dllcache\packager.exe.new
- <SYSTEM32>\dllcache\odbcconf.exe with <SYSTEM32>\dllcache\odbcconf.exe.new
- <SYSTEM32>\dllcache\opnfiles.exe with <SYSTEM32>\dllcache\opnfiles.exe.new
- <SYSTEM32>\dllcache\sndrec32.exe with <SYSTEM32>\dllcache\sndrec32.exe.new
- <SYSTEM32>\dllcache\sndvol32.exe with <SYSTEM32>\dllcache\sndvol32.exe.new
- <SYSTEM32>\dllcache\sigverif.exe with <SYSTEM32>\dllcache\sigverif.exe.new
- <SYSTEM32>\dllcache\smlogsvc.exe with <SYSTEM32>\dllcache\smlogsvc.exe.new
- <SYSTEM32>\dllcache\syncapp.exe with <SYSTEM32>\dllcache\syncapp.exe.new
- <SYSTEM32>\dllcache\sysocmgr.exe with <SYSTEM32>\dllcache\sysocmgr.exe.new
- <SYSTEM32>\dllcache\sol.exe with <SYSTEM32>\dllcache\sol.exe.new
- <SYSTEM32>\dllcache\spider.exe with <SYSTEM32>\dllcache\spider.exe.new
- <SYSTEM32>\dllcache\rsvp.exe with <SYSTEM32>\dllcache\rsvp.exe.new
- <SYSTEM32>\dllcache\rtcshare.exe with <SYSTEM32>\dllcache\rtcshare.exe.new
- <SYSTEM32>\dllcache\rsnotify.exe with <SYSTEM32>\dllcache\rsnotify.exe.new
- <SYSTEM32>\dllcache\rsopprov.exe with <SYSTEM32>\dllcache\rsopprov.exe.new
- <SYSTEM32>\dllcache\sessmgr.exe with <SYSTEM32>\dllcache\sessmgr.exe.new
- <SYSTEM32>\dllcache\shrpubw.exe with <SYSTEM32>\dllcache\shrpubw.exe.new
- <SYSTEM32>\dllcache\sctasks.exe with <SYSTEM32>\dllcache\sctasks.exe.new
- <SYSTEM32>\dllcache\sdbinst.exe with <SYSTEM32>\dllcache\sdbinst.exe.new
- <SYSTEM32>\dllcache\eudcedit.exe with <SYSTEM32>\dllcache\eudcedit.exe.new
- <SYSTEM32>\dllcache\agentsvr.exe with <SYSTEM32>\dllcache\agentsvr.exe.new
- <SYSTEM32>\dpvsetup.exe with <SYSTEM32>\dpvsetup.exe.new
- <SYSTEM32>\diskpart.exe with <SYSTEM32>\diskpart.exe.new
- <SYSTEM32>\dmadmin.exe with <SYSTEM32>\dmadmin.exe.new
- <SYSTEM32>\drwtsn32.exe with <SYSTEM32>\drwtsn32.exe.new
- <SYSTEM32>\dwwin.exe with <SYSTEM32>\dwwin.exe.new
- <SYSTEM32>\driverquery.exe with <SYSTEM32>\driverquery.exe.new
- <SYSTEM32>\dllcache\muisetup.exe with <SYSTEM32>\dllcache\muisetup.exe.new
- <SYSTEM32>\clipbrd.exe with <SYSTEM32>\clipbrd.exe.new
- <SYSTEM32>\cmdl32.exe with <SYSTEM32>\cmdl32.exe.new
- <SYSTEM32>\cipher.exe with <SYSTEM32>\cipher.exe.new
- <SYSTEM32>\cleanmgr.exe with <SYSTEM32>\cleanmgr.exe.new
- <SYSTEM32>\dfrgntfs.exe with <SYSTEM32>\dfrgntfs.exe.new
- <SYSTEM32>\diantz.exe with <SYSTEM32>\diantz.exe.new
- <SYSTEM32>\cmstp.exe with <SYSTEM32>\cmstp.exe.new
- <SYSTEM32>\dfrgfat.exe with <SYSTEM32>\dfrgfat.exe.new
- <SYSTEM32>\getmac.exe with <SYSTEM32>\getmac.exe.new
- <SYSTEM32>\dllcache\uploadm.exe with <SYSTEM32>\dllcache\uploadm.exe.new
- <SYSTEM32>\dllcache\msconfig.exe with <SYSTEM32>\dllcache\msconfig.exe.new
- <SYSTEM32>\fsutil.exe with <SYSTEM32>\fsutil.exe.new
- <SYSTEM32>\dllcache\accwiz.exe with <SYSTEM32>\dllcache\accwiz.exe.new
- <SYSTEM32>\iexpress.exe with <SYSTEM32>\iexpress.exe.new
- <SYSTEM32>\gpresult.exe with <SYSTEM32>\gpresult.exe.new
- <SYSTEM32>\gpupdate.exe with <SYSTEM32>\gpupdate.exe.new
- <SYSTEM32>\eventcreate.exe with <SYSTEM32>\eventcreate.exe.new
- <SYSTEM32>\dllcache\helphost.exe with <SYSTEM32>\dllcache\helphost.exe.new
- <SYSTEM32>\dllcache\helpctr.exe with <SYSTEM32>\dllcache\helpctr.exe.new
- <SYSTEM32>\eudcedit.exe with <SYSTEM32>\eudcedit.exe.new
- <SYSTEM32>\dllcache\helpsvc.exe with <SYSTEM32>\dllcache\helpsvc.exe.new
- <SYSTEM32>\freecell.exe with <SYSTEM32>\freecell.exe.new
- <SYSTEM32>\eventtriggers.exe with <SYSTEM32>\eventtriggers.exe.new
- <SYSTEM32>\extrac32.exe with <SYSTEM32>\extrac32.exe.new
- <SYSTEM32>\charmap.exe with <SYSTEM32>\charmap.exe.new
- <SYSTEM32>\dllcache\wab.exe with <SYSTEM32>\dllcache\wab.exe.new
- <SYSTEM32>\dllcache\migrate.exe with <SYSTEM32>\dllcache\migrate.exe.new
- <SYSTEM32>\dllcache\oemig50.exe with <SYSTEM32>\dllcache\oemig50.exe.new
- <SYSTEM32>\dllcache\setup50.exe with <SYSTEM32>\dllcache\setup50.exe.new
- <SYSTEM32>\dllcache\dialer.exe with <SYSTEM32>\dllcache\dialer.exe.new
- <SYSTEM32>\dllcache\wordpad.exe with <SYSTEM32>\dllcache\wordpad.exe.new
- <SYSTEM32>\dllcache\setup_wm.exe with <SYSTEM32>\dllcache\setup_wm.exe.new
- <SYSTEM32>\dllcache\wmplayer.exe with <SYSTEM32>\dllcache\wmplayer.exe.new
- %WINDIR%\winhlp32.exe with %WINDIR%\winhlp32.exe.new
- <SYSTEM32>\dllcache\iexplore.exe with <SYSTEM32>\dllcache\iexplore.exe.new
- %WINDIR%\NOTEPAD.EXE with %WINDIR%\notepad.exe.new
- %WINDIR%\regedit.exe with %WINDIR%\regedit.exe.new
- <SYSTEM32>\dllcache\icwtutor.exe with <SYSTEM32>\dllcache\icwtutor.exe.new
- <SYSTEM32>\dllcache\msimn.exe with <SYSTEM32>\dllcache\msimn.exe.new
- <SYSTEM32>\dllcache\icwconn1.exe with <SYSTEM32>\dllcache\icwconn1.exe.new
- <SYSTEM32>\dllcache\icwconn2.exe with <SYSTEM32>\dllcache\icwconn2.exe.new
- %WINDIR%\pchealth\UploadLB\Binaries\UploadM.exe with %WINDIR%\pchealth\UploadLB\Binaries\uploadm.exe.new
- <SYSTEM32>\accwiz.exe with <SYSTEM32>\accwiz.exe.new
- %WINDIR%\pchealth\helpctr\binaries\HelpSvc.exe with %WINDIR%\pchealth\helpctr\binaries\helpsvc.exe.new
- %WINDIR%\pchealth\helpctr\binaries\msconfig.exe with %WINDIR%\pchealth\helpctr\binaries\msconfig.exe.new
- <SYSTEM32>\bootcfg.exe with <SYSTEM32>\bootcfg.exe.new
- <SYSTEM32>\calc.exe with <SYSTEM32>\calc.exe.new
- <SYSTEM32>\ahui.exe with <SYSTEM32>\ahui.exe.new
- <SYSTEM32>\blastcln.exe with <SYSTEM32>\blastcln.exe.new
- <SYSTEM32>\dllcache\regedit.exe with <SYSTEM32>\dllcache\regedit.exe.new
- <SYSTEM32>\dllcache\winhlp32.exe with <SYSTEM32>\dllcache\winhlp32.exe.new
- <SYSTEM32>\dllcache\pinball.exe with <SYSTEM32>\dllcache\pinball.exe.new
- <SYSTEM32>\dllcache\notepad.exe with <SYSTEM32>\dllcache\notepad.exe.new
- %WINDIR%\pchealth\helpctr\binaries\HelpCtr.exe with %WINDIR%\pchealth\helpctr\binaries\helpctr.exe.new
- %WINDIR%\pchealth\helpctr\binaries\HelpHost.exe with %WINDIR%\pchealth\helpctr\binaries\helphost.exe.new
- %WINDIR%\msagent\agentsvr.exe with %WINDIR%\msagent\agentsvr.exe.new
- %WINDIR%\mui\muisetup.exe with %WINDIR%\mui\muisetup.exe.new
- <SYSTEM32>\powercfg.exe with <SYSTEM32>\powercfg.exe.new
- <SYSTEM32>\dllcache\dpvsetup.exe with <SYSTEM32>\dllcache\dpvsetup.exe.new
- <SYSTEM32>\osk.exe with <SYSTEM32>\osk.exe.new
- <SYSTEM32>\packager.exe with <SYSTEM32>\packager.exe.new
- <SYSTEM32>\rasphone.exe with <SYSTEM32>\rasphone.exe.new
- <SYSTEM32>\rdpclip.exe with <SYSTEM32>\rdpclip.exe.new
- <SYSTEM32>\proquota.exe with <SYSTEM32>\proquota.exe.new
- <SYSTEM32>\dllcache\drvqry.exe with <SYSTEM32>\dllcache\drvqry.exe.new
- <SYSTEM32>\ntvdm.exe with <SYSTEM32>\ntvdm.exe.new
- <SYSTEM32>\dllcache\diskpart.exe with <SYSTEM32>\dllcache\diskpart.exe.new
- <SYSTEM32>\dllcache\diantz.exe with <SYSTEM32>\dllcache\diantz.exe.new
- <SYSTEM32>\nslookup.exe with <SYSTEM32>\nslookup.exe.new
- <SYSTEM32>\dllcache\dmadmin.exe with <SYSTEM32>\dllcache\dmadmin.exe.new
- <SYSTEM32>\openfiles.exe with <SYSTEM32>\openfiles.exe.new
- <SYSTEM32>\nwscript.exe with <SYSTEM32>\nwscript.exe.new
- <SYSTEM32>\odbcconf.exe with <SYSTEM32>\odbcconf.exe.new
- <SYSTEM32>\schtasks.exe with <SYSTEM32>\schtasks.exe.new
- <SYSTEM32>\sdbinst.exe with <SYSTEM32>\sdbinst.exe.new
- <SYSTEM32>\rsvp.exe with <SYSTEM32>\rsvp.exe.new
- <SYSTEM32>\rtcshare.exe with <SYSTEM32>\rtcshare.exe.new
- <SYSTEM32>\sigverif.exe with <SYSTEM32>\sigverif.exe.new
- <SYSTEM32>\smlogsvc.exe with <SYSTEM32>\smlogsvc.exe.new
- <SYSTEM32>\sessmgr.exe with <SYSTEM32>\sessmgr.exe.new
- <SYSTEM32>\shrpubw.exe with <SYSTEM32>\shrpubw.exe.new
- <SYSTEM32>\dllcache\drwtsn32.exe with <SYSTEM32>\dllcache\drwtsn32.exe.new
- <SYSTEM32>\rsm.exe with <SYSTEM32>\rsm.exe.new
- <SYSTEM32>\rdshost.exe with <SYSTEM32>\rdshost.exe.new
- <SYSTEM32>\reg.exe with <SYSTEM32>\reg.exe.new
- <SYSTEM32>\rsopprov.exe with <SYSTEM32>\rsopprov.exe.new
- <SYSTEM32>\dllcache\dwwin.exe with <SYSTEM32>\dllcache\dwwin.exe.new
- <SYSTEM32>\rsmui.exe with <SYSTEM32>\rsmui.exe.new
- <SYSTEM32>\rsnotify.exe with <SYSTEM32>\rsnotify.exe.new
- <SYSTEM32>\notepad.exe with <SYSTEM32>\notepad.exe.new
- <SYSTEM32>\dllcache\calc.exe with <SYSTEM32>\dllcache\calc.exe.new
- <SYSTEM32>\logonui.exe with <SYSTEM32>\logonui.exe.new
- <SYSTEM32>\logagent.exe with <SYSTEM32>\logagent.exe.new
- <SYSTEM32>\logman.exe with <SYSTEM32>\logman.exe.new
- <SYSTEM32>\makecab.exe with <SYSTEM32>\makecab.exe.new
- <SYSTEM32>\dllcache\cipher.exe with <SYSTEM32>\dllcache\cipher.exe.new
- <SYSTEM32>\magnify.exe with <SYSTEM32>\magnify.exe.new
- <SYSTEM32>\dllcache\charmap.exe with <SYSTEM32>\dllcache\charmap.exe.new
- <SYSTEM32>\dllcache\ahui.exe with <SYSTEM32>\dllcache\ahui.exe.new
- <SYSTEM32>\ipsec6.exe with <SYSTEM32>\ipsec6.exe.new
- <SYSTEM32>\imapi.exe with <SYSTEM32>\imapi.exe.new
- <SYSTEM32>\ipconfig.exe with <SYSTEM32>\ipconfig.exe.new
- <SYSTEM32>\locator.exe with <SYSTEM32>\locator.exe.new
- <SYSTEM32>\dllcache\bootcfg.exe with <SYSTEM32>\dllcache\bootcfg.exe.new
- <SYSTEM32>\ipv6.exe with <SYSTEM32>\ipv6.exe.new
- <SYSTEM32>\dllcache\blastcln.exe with <SYSTEM32>\dllcache\blastcln.exe.new
- <SYSTEM32>\narrator.exe with <SYSTEM32>\narrator.exe.new
- <SYSTEM32>\dllcache\dfrgfat.exe with <SYSTEM32>\dllcache\dfrgfat.exe.new
- <SYSTEM32>\mspaint.exe with <SYSTEM32>\mspaint.exe.new
- <SYSTEM32>\dllcache\cmstp.exe with <SYSTEM32>\dllcache\cmstp.exe.new
- <SYSTEM32>\dllcache\dfrgntfs.exe with <SYSTEM32>\dllcache\dfrgntfs.exe.new
- <SYSTEM32>\netsh.exe with <SYSTEM32>\netsh.exe.new
- <SYSTEM32>\net1.exe with <SYSTEM32>\net1.exe.new
- <SYSTEM32>\netdde.exe with <SYSTEM32>\netdde.exe.new
- <SYSTEM32>\mobsync.exe with <SYSTEM32>\mobsync.exe.new
- <SYSTEM32>\mplay32.exe with <SYSTEM32>\mplay32.exe.new
- <SYSTEM32>\mmc.exe with <SYSTEM32>\mmc.exe.new
- <SYSTEM32>\dllcache\cleanmgr.exe with <SYSTEM32>\dllcache\cleanmgr.exe.new
- <SYSTEM32>\dllcache\cmdl32.exe with <SYSTEM32>\dllcache\cmdl32.exe.new
- <SYSTEM32>\mshearts.exe with <SYSTEM32>\mshearts.exe.new
- <SYSTEM32>\dllcache\clipbrd.exe with <SYSTEM32>\dllcache\clipbrd.exe.new
- <SYSTEM32>\mqtgsvc.exe with <SYSTEM32>\mqtgsvc.exe.new
- <SYSTEM32>\rasphone.exe.new
- <SYSTEM32>\rdpclip.exe.new
- <SYSTEM32>\rdshost.exe.new
- <SYSTEM32>\dllcache\dpvsetup.exe.new
- <SYSTEM32>\proquota.exe.new
- <SYSTEM32>\dllcache\drvqry.exe.new
- <SYSTEM32>\reg.exe.new
- <SYSTEM32>\rsnotify.exe.new
- <SYSTEM32>\rsopprov.exe.new
- <SYSTEM32>\dllcache\dwwin.exe.new
- <SYSTEM32>\dllcache\drwtsn32.exe.new
- <SYSTEM32>\rsm.exe.new
- <SYSTEM32>\rsmui.exe.new
- <SYSTEM32>\powercfg.exe.new
- <SYSTEM32>\dllcache\diantz.exe.new
- <SYSTEM32>\nslookup.exe.new
- <SYSTEM32>\ntvdm.exe.new
- <SYSTEM32>\dllcache\dfrgntfs.exe.new
- <SYSTEM32>\netsh.exe.new
- <SYSTEM32>\notepad.exe.new
- <SYSTEM32>\dllcache\diskpart.exe.new
- <SYSTEM32>\openfiles.exe.new
- <SYSTEM32>\osk.exe.new
- <SYSTEM32>\packager.exe.new
- <SYSTEM32>\nwscript.exe.new
- <SYSTEM32>\odbcconf.exe.new
- <SYSTEM32>\dllcache\dmadmin.exe.new
- <SYSTEM32>\rsvp.exe.new
- <SYSTEM32>\dllcache\evtrig.exe.new
- <SYSTEM32>\tasklist.exe.new
- <SYSTEM32>\taskmgr.exe.new
- <SYSTEM32>\sysocmgr.exe.new
- <SYSTEM32>\systeminfo.exe.new
- <SYSTEM32>\taskkill.exe.new
- <SYSTEM32>\dllcache\extrac32.exe.new
- <SYSTEM32>\tlntsvr.exe.new
- <SYSTEM32>\tourstart.exe.new
- <SYSTEM32>\tracerpt.exe.new
- <SYSTEM32>\telnet.exe.new
- <SYSTEM32>\tlntadmn.exe.new
- <SYSTEM32>\tlntsess.exe.new
- <SYSTEM32>\syncapp.exe.new
- <SYSTEM32>\sessmgr.exe.new
- <SYSTEM32>\shrpubw.exe.new
- <SYSTEM32>\sigverif.exe.new
- <SYSTEM32>\rtcshare.exe.new
- <SYSTEM32>\schtasks.exe.new
- <SYSTEM32>\sdbinst.exe.new
- <SYSTEM32>\smlogsvc.exe.new
- <SYSTEM32>\dllcache\evcreate.exe.new
- <SYSTEM32>\sol.exe.new
- <SYSTEM32>\spider.exe.new
- <SYSTEM32>\dllcache\eudcedit.exe.new
- <SYSTEM32>\sndrec32.exe.new
- <SYSTEM32>\sndvol32.exe.new
- <SYSTEM32>\netdde.exe.new
- <SYSTEM32>\dllcache\ahui.exe.new
- <SYSTEM32>\ipsec6.exe.new
- <SYSTEM32>\ipv6.exe.new
- <SYSTEM32>\imapi.exe.new
- <SYSTEM32>\ipconfig.exe.new
- <SYSTEM32>\oobe\oobebaln.exe
- <SYSTEM32>\Restore\rstrui.exe
- <SYSTEM32>\usmt\migwiz.exe
- <SYSTEM32>\locator.exe.new
- <SYSTEM32>\usmt\migwiz_a.exe
- <SYSTEM32>\Restore\srdiag.exe
- <SYSTEM32>\dllcache\blastcln.exe.new
- <SYSTEM32>\usmt\migload.exe
- <SYSTEM32>\iexpress.exe.new
- <SYSTEM32>\fsutil.exe.new
- <SYSTEM32>\winmine.exe
- <SYSTEM32>\getmac.exe.new
- <SYSTEM32>\wextract.exe
- <SYSTEM32>\dllcache\msconfig.exe.new
- <SYSTEM32>\wiaacmgr.exe
- <SYSTEM32>\wscript.exe
- <SYSTEM32>\gpresult.exe.new
- <SYSTEM32>\gpupdate.exe.new
- <SYSTEM32>\dllcache\accwiz.exe.new
- <SYSTEM32>\wuauclt.exe
- <SYSTEM32>\wuauclt1.exe
- <SYSTEM32>\dllcache\uploadm.exe.new
- <SYSTEM32>\wbem\wbemtest.exe
- <SYSTEM32>\mplay32.exe.new
- <SYSTEM32>\dllcache\clipbrd.exe.new
- <SYSTEM32>\mqtgsvc.exe.new
- <SYSTEM32>\mmc.exe.new
- <SYSTEM32>\dllcache\cleanmgr.exe.new
- <SYSTEM32>\mobsync.exe.new
- <SYSTEM32>\dllcache\cmdl32.exe.new
- <SYSTEM32>\narrator.exe.new
- <SYSTEM32>\dllcache\dfrgfat.exe.new
- <SYSTEM32>\net1.exe.new
- <SYSTEM32>\mshearts.exe.new
- <SYSTEM32>\mspaint.exe.new
- <SYSTEM32>\dllcache\cmstp.exe.new
- <SYSTEM32>\dllcache\cipher.exe.new
- <SYSTEM32>\logagent.exe.new
- <SYSTEM32>\wbem\wmic.exe
- <SYSTEM32>\wbem\wmiprvse.exe
- <SYSTEM32>\dllcache\bootcfg.exe.new
- <SYSTEM32>\wbem\wmiadap.exe
- <SYSTEM32>\wbem\wmiapsrv.exe
- <SYSTEM32>\logman.exe.new
- <SYSTEM32>\magnify.exe.new
- <SYSTEM32>\dllcache\charmap.exe.new
- <SYSTEM32>\makecab.exe.new
- <SYSTEM32>\dllcache\calc.exe.new
- <Auxiliary element>
- <SYSTEM32>\logonui.exe.new
- <SYSTEM32>\dllcache\sndvol32.exe.new
- <SYSTEM32>\dllcache\sol.exe.new
- <SYSTEM32>\dllcache\spider.exe.new
- <SYSTEM32>\dllcache\sigverif.exe.new
- <SYSTEM32>\dllcache\smlogsvc.exe.new
- <SYSTEM32>\dllcache\sndrec32.exe.new
- <SYSTEM32>\dllcache\syncapp.exe.new
- <SYSTEM32>\dllcache\tasklist.exe.new
- <SYSTEM32>\dllcache\taskmgr.exe.new
- <SYSTEM32>\dllcache\telnet.exe.new
- <SYSTEM32>\dllcache\sysocmgr.exe.new
- <SYSTEM32>\dllcache\sysinfo.exe.new
- <SYSTEM32>\dllcache\taskkill.exe.new
- <SYSTEM32>\dllcache\shrpubw.exe.new
- <SYSTEM32>\dllcache\reg.exe.new
- <SYSTEM32>\dllcache\rsm.exe.new
- <SYSTEM32>\dllcache\rsmui.exe.new
- <SYSTEM32>\dllcache\rasphone.exe.new
- <SYSTEM32>\dllcache\rdpclip.exe.new
- <SYSTEM32>\dllcache\rdshost.exe.new
- <SYSTEM32>\dllcache\rsnotify.exe.new
- <SYSTEM32>\dllcache\sctasks.exe.new
- <SYSTEM32>\dllcache\sdbinst.exe.new
- <SYSTEM32>\dllcache\sessmgr.exe.new
- <SYSTEM32>\dllcache\rsopprov.exe.new
- <SYSTEM32>\dllcache\rsvp.exe.new
- <SYSTEM32>\dllcache\rtcshare.exe.new
- <SYSTEM32>\dllcache\tlntadmn.exe.new
- <SYSTEM32>\dllcache\migload.exe.new
- <SYSTEM32>\dllcache\migwiz.exe.new
- <SYSTEM32>\dllcache\migwiz_a.exe.new
- <SYSTEM32>\dllcache\oobebaln.exe.new
- <SYSTEM32>\dllcache\rstrui.exe.new
- <SYSTEM32>\dllcache\srdiag.exe.new
- <SYSTEM32>\dllcache\wbemtest.exe.new
- <SYSTEM32>\dllcache\wmiprvse.exe.new
- <SYSTEM32>\SET4.tmp
- <SYSTEM32>\SET8.tmp
- <SYSTEM32>\dllcache\wmiadap.exe.new
- <SYSTEM32>\dllcache\wmiapsrv.exe.new
- <SYSTEM32>\dllcache\wmic.exe.new
- <SYSTEM32>\dllcache\wuauclt1.exe.new
- <SYSTEM32>\dllcache\tracerpt.exe.new
- <SYSTEM32>\dllcache\utilman.exe.new
- <SYSTEM32>\dllcache\verifier.exe.new
- <SYSTEM32>\dllcache\tlntsess.exe.new
- <SYSTEM32>\dllcache\tlntsvr.exe.new
- <SYSTEM32>\dllcache\tourstrt.exe.new
- <SYSTEM32>\dllcache\vssvc.exe.new
- <SYSTEM32>\dllcache\winmine.exe.new
- <SYSTEM32>\dllcache\wscript.exe.new
- <SYSTEM32>\dllcache\wuauclt.exe.new
- <SYSTEM32>\dllcache\w32tm.exe.new
- <SYSTEM32>\dllcache\wextract.exe.new
- <SYSTEM32>\dllcache\wiaacmgr.exe.new
- <SYSTEM32>\dllcache\proquota.exe.new
- <SYSTEM32>\dllcache\ipconfig.exe.new
- <SYSTEM32>\oobe\oobebaln.exe.new
- <SYSTEM32>\dllcache\ipsec6.exe.new
- <SYSTEM32>\dllcache\gpupdate.exe.new
- <SYSTEM32>\dllcache\iexpress.exe.new
- <SYSTEM32>\dllcache\imapi.exe.new
- <SYSTEM32>\dllcache\ipv6.exe.new
- <SYSTEM32>\usmt\migwiz.exe.new
- <SYSTEM32>\dllcache\locator.exe.new
- <SYSTEM32>\usmt\migwiz_a.exe.new
- <SYSTEM32>\Restore\rstrui.exe.new
- <SYSTEM32>\Restore\srdiag.exe.new
- <SYSTEM32>\usmt\migload.exe.new
- <SYSTEM32>\dllcache\gprslt.exe.new
- <SYSTEM32>\vssvc.exe.new
- <SYSTEM32>\w32tm.exe.new
- <SYSTEM32>\wextract.exe.new
- <SYSTEM32>\dllcache\freecell.exe.new
- <SYSTEM32>\utilman.exe.new
- <SYSTEM32>\verifier.exe.new
- <SYSTEM32>\wiaacmgr.exe.new
- <SYSTEM32>\wscript.exe.new
- <SYSTEM32>\wuauclt.exe.new
- <SYSTEM32>\wuauclt1.exe.new
- <SYSTEM32>\dllcache\fsutil.exe.new
- <SYSTEM32>\winmine.exe.new
- <SYSTEM32>\dllcache\getmac.exe.new
- <SYSTEM32>\wbem\wbemtest.exe.new
- <SYSTEM32>\dllcache\netdde.exe.new
- <SYSTEM32>\dllcache\netsh.exe.new
- <SYSTEM32>\dllcache\nslookup.exe.new
- <SYSTEM32>\dllcache\mspaint.exe.new
- <SYSTEM32>\dllcache\narrator.exe.new
- <SYSTEM32>\dllcache\net1.exe.new
- <SYSTEM32>\dllcache\ntvdm.exe.new
- <SYSTEM32>\dllcache\osk.exe.new
- <SYSTEM32>\dllcache\packager.exe.new
- <SYSTEM32>\dllcache\powercfg.exe.new
- <SYSTEM32>\dllcache\nwscript.exe.new
- <SYSTEM32>\dllcache\odbcconf.exe.new
- <SYSTEM32>\dllcache\opnfiles.exe.new
- <SYSTEM32>\dllcache\mshearts.exe.new
- <SYSTEM32>\wbem\wmic.exe.new
- <SYSTEM32>\wbem\wmiprvse.exe.new
- <SYSTEM32>\dllcache\logman.exe.new
- <SYSTEM32>\wbem\wmiadap.exe.new
- <SYSTEM32>\wbem\wmiapsrv.exe.new
- <SYSTEM32>\dllcache\logagent.exe.new
- <SYSTEM32>\dllcache\logonui.exe.new
- <SYSTEM32>\dllcache\mobsync.exe.new
- <SYSTEM32>\dllcache\mplay32.exe.new
- <SYSTEM32>\dllcache\mqtgsvc.exe.new
- <SYSTEM32>\dllcache\magnify.exe.new
- <SYSTEM32>\dllcache\makecab.exe.new
- <SYSTEM32>\dllcache\mmc.exe.new
- <SYSTEM32>\w32tm.exe
- <SYSTEM32>\dllcache\migrate.exe.new
- <SYSTEM32>\dllcache\setup_wm.exe.new
- <SYSTEM32>\dllcache\wmplayer.exe.new
- <SYSTEM32>\dllcache\setup50.exe.new
- %WINDIR%\pchealth\helpctr\binaries\msconfig.exe
- <SYSTEM32>\dllcache\wab.exe.new
- %WINDIR%\pchealth\UploadLB\Binaries\UploadM.exe
- <SYSTEM32>\dllcache\pinball.exe.new
- <SYSTEM32>\ahui.exe
- <SYSTEM32>\blastcln.exe
- <SYSTEM32>\dllcache\dialer.exe.new
- <SYSTEM32>\dllcache\wordpad.exe.new
- <SYSTEM32>\accwiz.exe
- %WINDIR%\pchealth\helpctr\binaries\HelpSvc.exe
- <SYSTEM32>\dllcache\icwconn1.exe.new
- <SYSTEM32>\dllcache\icwconn2.exe.new
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\SetupUtility.exe
- <SYSTEM32>\dllcache\iexplore.exe.new
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\SetupUtility.exe
- <SYSTEM32>\dllcache\icwtutor.exe.new
- %WINDIR%\pchealth\helpctr\binaries\HelpCtr.exe
- <SYSTEM32>\dllcache\oemig50.exe.new
- %WINDIR%\pchealth\helpctr\binaries\HelpHost.exe
- %WINDIR%\msagent\agentsvr.exe
- %WINDIR%\mui\muisetup.exe
- <SYSTEM32>\dllcache\msimn.exe.new
- <SYSTEM32>\bootcfg.exe
- <SYSTEM32>\driverquery.exe
- <SYSTEM32>\drwtsn32.exe
- %WINDIR%\mui\muisetup.exe.new
- <SYSTEM32>\dmadmin.exe
- %WINDIR%\msagent\agentsvr.exe.new
- <SYSTEM32>\dpvsetup.exe
- <SYSTEM32>\dvdplay.exe
- <SYSTEM32>\eventcreate.exe
- %WINDIR%\pchealth\helpctr\binaries\helphost.exe.new
- <SYSTEM32>\eventtriggers.exe
- <SYSTEM32>\dwwin.exe
- %WINDIR%\pchealth\helpctr\binaries\helpctr.exe.new
- <SYSTEM32>\eudcedit.exe
- <SYSTEM32>\dllcache\winhlp32.exe.new
- <SYSTEM32>\cipher.exe
- <SYSTEM32>\cleanmgr.exe
- <SYSTEM32>\clipbrd.exe
- <SYSTEM32>\dllcache\notepad.exe.new
- <SYSTEM32>\calc.exe
- <SYSTEM32>\charmap.exe
- <SYSTEM32>\dllcache\regedit.exe.new
- <SYSTEM32>\dfrgntfs.exe
- <SYSTEM32>\diantz.exe
- <SYSTEM32>\diskpart.exe
- <SYSTEM32>\cmdl32.exe
- <SYSTEM32>\cmstp.exe
- <SYSTEM32>\dfrgfat.exe
- %WINDIR%\winhlp32.exe.new
- %PROGRAM_FILES%\Windows NT\dialer.exe
- %PROGRAM_FILES%\Windows NT\Accessories\wordpad.exe
- %PROGRAM_FILES%\Windows NT\Pinball\PINBALL.EXE
- %PROGRAM_FILES%\Windows Media Player\migrate.exe
- %PROGRAM_FILES%\Windows Media Player\setup_wm.exe
- %PROGRAM_FILES%\Windows Media Player\wmplayer.exe
- %WINDIR%\NOTEPAD.EXE
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\icwconn1.exe.new
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\vbc.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\icwconn2.exe.new
- %WINDIR%\regedit.exe
- %WINDIR%\winhlp32.exe
- %PROGRAM_FILES%\Internet Explorer\iexplore.exe.new
- %PROGRAM_FILES%\Outlook Express\wab.exe
- %PROGRAM_FILES%\FireFox\updater.exe
- %PROGRAM_FILES%\FireFox\xpidl.exe
- %PROGRAM_FILES%\FireFox\uninstall\helper.exe
- %CommonProgramFiles%\Microsoft Shared\DW\DW20.EXE
- %PROGRAM_FILES%\FireFox\crashreporter.exe
- %PROGRAM_FILES%\FireFox\firefox.exe
- %PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE
- %PROGRAM_FILES%\Outlook Express\msimn.exe
- %PROGRAM_FILES%\Outlook Express\oemig50.exe
- %PROGRAM_FILES%\Outlook Express\setup50.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\icwconn1.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\icwconn2.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\icwtutor.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\icwtutor.exe.new
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ilasm.exe
- %PROGRAM_FILES%\Windows NT\Pinball\pinball.exe.new
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\DataSvcUtil.exe
- %PROGRAM_FILES%\Windows NT\Accessories\wordpad.exe.new
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\EdmGen.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
- %WINDIR%\regedit.exe.new
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\WsatConfig.exe
- %WINDIR%\notepad.exe.new
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ngen.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ComSvcConfig.exe
- %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
- %PROGRAM_FILES%\Outlook Express\wab.exe.new
- %PROGRAM_FILES%\Windows Media Player\migrate.exe.new
- %PROGRAM_FILES%\Outlook Express\msimn.exe.new
- %PROGRAM_FILES%\Outlook Express\oemig50.exe.new
- %PROGRAM_FILES%\Outlook Express\setup50.exe.new
- %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\aspnet_regsql.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\CasPol.exe
- %PROGRAM_FILES%\Windows NT\dialer.exe.new
- %PROGRAM_FILES%\Windows Media Player\setup_wm.exe.new
- %PROGRAM_FILES%\Windows Media Player\wmplayer.exe.new
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe
- <SYSTEM32>\rsvp.exe
- <SYSTEM32>\rtcshare.exe
- <SYSTEM32>\schtasks.exe
- <SYSTEM32>\rsnotify.exe
- <SYSTEM32>\rsopprov.exe
- <SYSTEM32>\dwwin.exe.new
- <SYSTEM32>\dllcache\helpctr.exe.new
- <SYSTEM32>\sigverif.exe
- <SYSTEM32>\smlogsvc.exe
- <SYSTEM32>\sndrec32.exe
- <SYSTEM32>\sdbinst.exe
- <SYSTEM32>\sessmgr.exe
- <SYSTEM32>\shrpubw.exe
- <SYSTEM32>\rsmui.exe
- <SYSTEM32>\dpvsetup.exe.new
- <SYSTEM32>\proquota.exe
- <SYSTEM32>\rasphone.exe
- <SYSTEM32>\dllcache\agentsvr.exe.new
- <SYSTEM32>\powercfg.exe
- <SYSTEM32>\PresentationHost.exe
- <SYSTEM32>\driverquery.exe.new
- <SYSTEM32>\reg.exe
- <SYSTEM32>\drwtsn32.exe.new
- <SYSTEM32>\rsm.exe
- <SYSTEM32>\rdpclip.exe
- <SYSTEM32>\rdshost.exe
- <SYSTEM32>\dllcache\muisetup.exe.new
- <SYSTEM32>\eudcedit.exe.new
- <SYSTEM32>\tourstart.exe
- <SYSTEM32>\dllcache\helpsvc.exe.new
- <SYSTEM32>\tracerpt.exe
- <SYSTEM32>\tlntadmn.exe
- <SYSTEM32>\tlntsess.exe
- <SYSTEM32>\tlntsvr.exe
- <SYSTEM32>\usrmlnka.exe
- <SYSTEM32>\utilman.exe
- <SYSTEM32>\verifier.exe
- <SYSTEM32>\vssvc.exe
- <SYSTEM32>\usrprbda.exe
- <SYSTEM32>\usrshuta.exe
- <SYSTEM32>\freecell.exe.new
- <SYSTEM32>\telnet.exe
- <SYSTEM32>\spider.exe
- <SYSTEM32>\dllcache\helphost.exe.new
- <SYSTEM32>\syncapp.exe
- <SYSTEM32>\sndvol32.exe
- <SYSTEM32>\eventcreate.exe.new
- <SYSTEM32>\sol.exe
- <SYSTEM32>\sysocmgr.exe
- <SYSTEM32>\tasklist.exe
- <SYSTEM32>\taskmgr.exe
- <SYSTEM32>\extrac32.exe.new
- <SYSTEM32>\systeminfo.exe
- <SYSTEM32>\taskkill.exe
- <SYSTEM32>\eventtriggers.exe.new
- <SYSTEM32>\packager.exe
- <SYSTEM32>\blastcln.exe.new
- <SYSTEM32>\locator.exe
- <SYSTEM32>\bootcfg.exe.new
- <SYSTEM32>\ahui.exe.new
- <SYSTEM32>\ipsec6.exe
- <SYSTEM32>\ipv6.exe
- <SYSTEM32>\logagent.exe
- <SYSTEM32>\magnify.exe
- <SYSTEM32>\charmap.exe.new
- <SYSTEM32>\makecab.exe
- <SYSTEM32>\logman.exe
- <SYSTEM32>\logonui.exe
- <SYSTEM32>\calc.exe.new
- <SYSTEM32>\ipconfig.exe
- <SYSTEM32>\fsquirt.exe
- %WINDIR%\pchealth\helpctr\binaries\msconfig.exe.new
- <SYSTEM32>\fsutil.exe
- <SYSTEM32>\extrac32.exe
- %WINDIR%\pchealth\helpctr\binaries\helpsvc.exe.new
- <SYSTEM32>\freecell.exe
- <SYSTEM32>\getmac.exe
- <SYSTEM32>\accwiz.exe.new
- <SYSTEM32>\iexpress.exe
- <SYSTEM32>\imapi.exe
- <SYSTEM32>\gpresult.exe
- %WINDIR%\pchealth\UploadLB\Binaries\uploadm.exe.new
- <SYSTEM32>\gpupdate.exe
- <SYSTEM32>\migpwd.exe
- <SYSTEM32>\notepad.exe
- <SYSTEM32>\nslookup.exe
- <SYSTEM32>\diantz.exe.new
- <SYSTEM32>\netdde.exe
- <SYSTEM32>\netsh.exe
- <SYSTEM32>\dfrgntfs.exe.new
- <SYSTEM32>\ntvdm.exe
- <SYSTEM32>\openfiles.exe
- <SYSTEM32>\dmadmin.exe.new
- <SYSTEM32>\osk.exe
- <SYSTEM32>\diskpart.exe.new
- <SYSTEM32>\nwscript.exe
- <SYSTEM32>\odbcconf.exe
- <SYSTEM32>\dfrgfat.exe.new
- <SYSTEM32>\cleanmgr.exe.new
- <SYSTEM32>\mplay32.exe
- <SYSTEM32>\clipbrd.exe.new
- <SYSTEM32>\cipher.exe.new
- <SYSTEM32>\mmc.exe
- <SYSTEM32>\mobsync.exe
- <SYSTEM32>\mqtgsvc.exe
- <SYSTEM32>\cmstp.exe.new
- <SYSTEM32>\narrator.exe
- <SYSTEM32>\net1.exe
- <SYSTEM32>\mshearts.exe
- <SYSTEM32>\cmdl32.exe.new
- <SYSTEM32>\mspaint.exe
- <SYSTEM32>\SET5.tmp
- <SYSTEM32>\SET4.tmp
- <SYSTEM32>\SET8.tmp
- %WINDIR%\LastGood\TMP6.tmp
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP15\RestorePointSize
- %WINDIR%\calc.exe
- %WINDIR%\LastGood\TMP2.tmp
- <SYSTEM32>\SET1.tmp
- <SYSTEM32>\SET5.tmp
- <SYSTEM32>\SET1.tmp
- from <SYSTEM32>\usrmlnka.exe to <SYSTEM32>\OLD7.tmp
- from <SYSTEM32>\dvdplay.exe to <SYSTEM32>\OLD3.tmp
- from <SYSTEM32>\dllcache\uploadm.exe.new to <SYSTEM32>\dllcache\uploadm.exe
- from <SYSTEM32>\dllcache\helpsvc.exe.new to <SYSTEM32>\dllcache\helpsvc.exe
- from %WINDIR%\LastGood\TMP6.tmp to %WINDIR%\LastGood\system32\usrmlnka.exe
- from %WINDIR%\LastGood\TMP2.tmp to %WINDIR%\LastGood\system32\dvdplay.exe
- from <SYSTEM32>\dllcache\helphost.exe.new to <SYSTEM32>\dllcache\helphost.exe
- from <SYSTEM32>\dllcache\pinball.exe.new to <SYSTEM32>\dllcache\pinball.exe
- from <SYSTEM32>\dllcache\iexplore.exe.new to <SYSTEM32>\dllcache\iexplore.exe
- from <SYSTEM32>\dllcache\helpctr.exe.new to <SYSTEM32>\dllcache\helpctr.exe
- from <SYSTEM32>\dllcache\notepad.exe.new to <SYSTEM32>\dllcache\notepad.exe
- ClassName: 'Indicator' WindowName: '(null)'