Trojan.Hosts.23547

Technical Information

To ensure autorun and distribution:

Modifies the following registry keys:

[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Google Chrome Updater (R)' = '%WINDIR%\PCHEALTH\'

Malicious functions:

To complicate detection of its presence in the operating system,

blocks execution of the following system utilities:

Windows Task Manager (Taskmgr)

Modifies file system :

Creates the following files:

%HOMEPATH%\My Documents\biblecamp.info.url
%HOMEPATH%\My Documents\bottleguy.com.url
%HOMEPATH%\My Documents\omglol.tk.url
%HOMEPATH%\My Documents\pressurespot.com.url
%HOMEPATH%\My Documents\stagparty.us.url
%HOMEPATH%\My Documents\mudfall.com.url
%HOMEPATH%\My Documents\thatshot.org.url
%HOMEPATH%\My Documents\youaresogay.com.url
%HOMEPATH%\My Documents\yourmom.org.url
%HOMEPATH%\My Documents\skindroop.com.url
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\fifo.log
%HOMEPATH%\My Documents\walkthedinosaur.com.url
%HOMEPATH%\My Documents\nutgobbler.com.url
%HOMEPATH%\My Documents\cherrycake.org.url
%HOMEPATH%\My Documents\melondude.com.url
%HOMEPATH%\My Documents\removed.us.url
%HOMEPATH%\My Documents\lolhello.com.url
%HOMEPATH%\My Documents\2guys1hole.com.url
%HOMEPATH%\My Documents\bagslap.com.url
%WINDIR%\pchealth\svchost.exe
%HOMEPATH%\My Documents\goatsemarathon.com.url
%HOMEPATH%\My Documents\charonboat.com.url
%HOMEPATH%\My Documents\goatse.cz.url
%HOMEPATH%\My Documents\1guy1mudpie.com.url
%HOMEPATH%\My Documents\fuck.org.url
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP15\RestorePointSize
%HOMEPATH%\My Documents\lemonparty.org.url
%HOMEPATH%\My Documents\meatspin.com.url
%HOMEPATH%\My Documents\vomitgirl.org.url
%HOMEPATH%\My Documents\2girls1cup.com.url

Deletes the following files:

<SYSTEM32>\oakley.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00052
<SYSTEM32>\ocmanage.dll
<SYSTEM32>\occache.dll
<SYSTEM32>\odbc32gt.dll
<SYSTEM32>\odbc32.dll
<SYSTEM32>\nwscript.exe
<SYSTEM32>\odbcad32.exe
<SYSTEM32>\odbccp32.dll
<SYSTEM32>\odbcconf.exe
<SYSTEM32>\odbccp32.cpl
<SYSTEM32>\objsel.dll
<SYSTEM32>\odbcconf.dll
<SYSTEM32>\odbcbcp.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00049
<SYSTEM32>\nwc.cpl.manifest
%WINDIR%\$NtUninstallKB942288-v3$\reg00047
<SYSTEM32>\nwprovau.dll
<SYSTEM32>\nwapi16.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00046
<SYSTEM32>\ntvdmd.dll
<SYSTEM32>\nwcfg.dll
<SYSTEM32>\nwapi32.dll
<SYSTEM32>\odbc16gt.dll
<SYSTEM32>\nwwks.dll
<SYSTEM32>\nw16.exe
<SYSTEM32>\nwc.cpl
%WINDIR%\$NtUninstallKB942288-v3$\reg00048
<SYSTEM32>\nwevent.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00057
<SYSTEM32>\ole2disp.dll
<SYSTEM32>\offfilt.dll
<SYSTEM32>\odpdx32.dll
<SYSTEM32>\odtext32.dll
<SYSTEM32>\oembios.dat
<SYSTEM32>\oembios.bin
<SYSTEM32>\olecli32.dll
<SYSTEM32>\olecnv32.dll
<SYSTEM32>\oledlg.dll
<SYSTEM32>\oleaccrc.dll
<SYSTEM32>\oembios.sig
<SYSTEM32>\ole2.dll
<SYSTEM32>\ole2nls.dll
<SYSTEM32>\odbctrac.dll
<SYSTEM32>\odbcji32.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00054
<SYSTEM32>\odfox32.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00053
<SYSTEM32>\odbcconf.rsp
<SYSTEM32>\odbccr32.dll
<SYSTEM32>\odbccu32.dll
<SYSTEM32>\oddbse32.dll
<SYSTEM32>\odexl32.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00056
<SYSTEM32>\odbcjt32.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00055
<SYSTEM32>\odbcp32r.dll
<SYSTEM32>\odbcint.dll
<SYSTEM32>\nusrmgr.cpl
<SYSTEM32>\ntdos.sys
<SYSTEM32>\ntdos411.sys
<SYSTEM32>\ntdos412.sys
<SYSTEM32>\ntdos404.sys
<SYSTEM32>\nslookup.exe
<SYSTEM32>\ntdll.dll
<SYSTEM32>\ntbackup.exe
<SYSTEM32>\ntdsbcli.dll
<SYSTEM32>\ntio.sys
<SYSTEM32>\ntio411.sys
<SYSTEM32>\ntdos804.sys
%WINDIR%\$NtUninstallKB942288-v3$\reg00039
%WINDIR%\$NtUninstallKB942288-v3$\reg00040
<SYSTEM32>\ntdsapi.dll
<SYSTEM32>\notepad.exe
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\wmerrenu.cat
%WINDIR%\$NtUninstallKB942288-v3$\reg00034
%WINDIR%\$NtUninstallKB942288-v3$\reg00035
<SYSTEM32>\noise.ita
<SYSTEM32>\noise.esn
<SYSTEM32>\noise.fra
<SYSTEM32>\noise.cht
<SYSTEM32>\nscompat.tlb
<SYSTEM32>\npptools.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00037
<SYSTEM32>\noise.tha
%WINDIR%\$NtUninstallKB942288-v3$\reg00036
<SYSTEM32>\noise.nld
<SYSTEM32>\noise.sve
<SYSTEM32>\ntmsmgr.dll
<SYSTEM32>\ntmsmgr.msc
<SYSTEM32>\ntmsoprq.msc
%WINDIR%\$NtUninstallKB942288-v3$\reg00045
<SYSTEM32>\ntmsapi.dll
<SYSTEM32>\ntmarta.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00044
<SYSTEM32>\ntsdexts.dll
<SYSTEM32>\ntmssvc.dll
<SYSTEM32>\ntprint.dll
<SYSTEM32>\ntvdm.exe
<SYSTEM32>\ntsd.exe
<SYSTEM32>\ntshrui.dll
<SYSTEM32>\ntoskrnl.exe
<SYSTEM32>\ntlanui2.dll
<SYSTEM32>\ntimage.gif
<SYSTEM32>\ntio412.sys
<SYSTEM32>\ntlanman.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00042
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\XpsEPSC.cat
<SYSTEM32>\ntio404.sys
%WINDIR%\$NtUninstallKB942288-v3$\reg00041
<SYSTEM32>\ntlsapi.dll
<SYSTEM32>\ntmsevt.dll
<SYSTEM32>\ntmsdba.dll
<SYSTEM32>\ntkrnlpa.exe
<SYSTEM32>\ntio804.sys
%WINDIR%\$NtUninstallKB942288-v3$\reg00043
<SYSTEM32>\ntlanui.dll
<SYSTEM32>\powercfg.cpl
<SYSTEM32>\CatRoot2\edb0000E.log
<SYSTEM32>\PresentationCFFRasterizerNative_v0300.dll
<SYSTEM32>\pngfilt.dll
<SYSTEM32>\pnrpnsp.dll
<SYSTEM32>\polstore.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00071
%WINDIR%\$NtUninstallKB942288-v3$\reg00072
<SYSTEM32>\powrprof.dll
<SYSTEM32>\print.exe
<SYSTEM32>\PresentationHost.exe
<SYSTEM32>\pmspl.dll
<SYSTEM32>\PresentationHostProxy.dll
<SYSTEM32>\PresentationNative_v0300.dll
<SYSTEM32>\plugin.ocx
<SYSTEM32>\perfwci.ini
<SYSTEM32>\photowiz.dll
<SYSTEM32>\CatRoot2\edb0000D.log
<SYSTEM32>\pid.dll
<SYSTEM32>\perfos.dll
<SYSTEM32>\perfts.dll
<SYSTEM32>\photometadatahandler.dll
<SYSTEM32>\pifmgr.dll
<SYSTEM32>\pjlmon.dll
<SYSTEM32>\plustab.dll
<SYSTEM32>\ping.exe
<SYSTEM32>\ping6.exe
%WINDIR%\$NtUninstallKB942288-v3$\reg00070
<SYSTEM32>\pidgen.dll
<SYSTEM32>\pschdprf.dll
<SYSTEM32>\psbase.dll
<SYSTEM32>\proxycfg.exe
<SYSTEM32>\proquota.exe
<SYSTEM32>\CatRoot2\edb00010.log
<SYSTEM32>\profmap.dll
<SYSTEM32>\progman.exe
<SYSTEM32>\pscript.sep
<SYSTEM32>\psnppagn.dll
<SYSTEM32>\pstorsvc.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00075
<SYSTEM32>\pschdcnt.h
<SYSTEM32>\psapi.dll
<SYSTEM32>\pschdprf.ini
%WINDIR%\$NtUninstallKB942288-v3$\reg00074
<SYSTEM32>\prncnfg.vbs
%WINDIR%\$NtUninstallKB942288-v3$\reg00073
<SYSTEM32>\prnqctl.vbs
<SYSTEM32>\CatRoot2\edb0000F.log
<SYSTEM32>\prflbmsg.dll
<SYSTEM32>\powercfg.exe
<SYSTEM32>\printui.dll
<SYSTEM32>\prntvpt.dll
<SYSTEM32>\proctexe.ocx
<SYSTEM32>\prodspec.ini
<SYSTEM32>\prnmngr.vbs
<SYSTEM32>\prnport.vbs
<SYSTEM32>\prndrvr.vbs
<SYSTEM32>\prnjobs.vbs
<SYSTEM32>\perfwci.h
%WINDIR%\$NtUninstallKB942288-v3$\reg00064
<SYSTEM32>\opengl32.dll
<SYSTEM32>\p2p.dll
<SYSTEM32>\osuninst.exe
<SYSTEM32>\olesvr.dll
<SYSTEM32>\p2pgasvc.dll
<SYSTEM32>\olepro32.dll
<SYSTEM32>\p2pgraph.dll
<SYSTEM32>\p2pnetsh.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00065
<SYSTEM32>\p2psvc.dll
<SYSTEM32>\osuninst.dll
<SYSTEM32>\osk.exe
<SYSTEM32>\CatRoot2\edb.chk
%WINDIR%\$NtUninstallKB942288-v3$\reg00063
%WINDIR%\$NtUninstallKB942288-v3$\reg00059
%WINDIR%\$NtUninstallKB942288-v3$\reg00060
<SYSTEM32>\oleaut32.dll
<SYSTEM32>\openfiles.exe
%WINDIR%\$NtUninstallKB942288-v3$\reg00058
<SYSTEM32>\oleacc.dll
<SYSTEM32>\CatRoot2\dberr.txt
<SYSTEM32>\olethk32.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00061
%WINDIR%\$NtUninstallKB942288-v3$\reg00062
<SYSTEM32>\olesvr32.dll
<SYSTEM32>\olecli.dll
<SYSTEM32>\ole32.dll
<SYSTEM32>\oleprn.dll
<SYSTEM32>\pautoenr.dll
<SYSTEM32>\perfi009.dat
<SYSTEM32>\perfmon.msc
<SYSTEM32>\perfh009.dat
<SYSTEM32>\perfctrs.dll
<SYSTEM32>\perfdisk.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00068
%WINDIR%\$NtUninstallKB942288-v3$\reg00069
<SYSTEM32>\perfproc.dll
<SYSTEM32>\PerfStringBackup.INI
<SYSTEM32>\perffilt.ini
<SYSTEM32>\perfmon.exe
<SYSTEM32>\perfnet.dll
<SYSTEM32>\perfnw.dll
<SYSTEM32>\perfci.ini
<SYSTEM32>\packager.exe
%WINDIR%\$NtUninstallKB942288-v3$\reg00066
<SYSTEM32>\pdh.dll
<SYSTEM32>\pathping.exe
<SYSTEM32>\pagefileconfig.vbs
<SYSTEM32>\paqsp.dll
<SYSTEM32>\panmap.dll
<SYSTEM32>\perffilt.h
<SYSTEM32>\perfci.h
%WINDIR%\$NtUninstallKB942288-v3$\reg00067
<SYSTEM32>\perfd009.dat
<SYSTEM32>\pentnt.exe
<SYSTEM32>\perfc009.dat
<SYSTEM32>\pcl.sep
<SYSTEM32>\nmmkcert.dll
<SYSTEM32>\msoert2.dll
<SYSTEM32>\mspatcha.dll
<SYSTEM32>\msobjs.dll
<SYSTEM32>\msoeacct.dll
<SYSTEM32>\msltus40.dll
<SYSTEM32>\msnsspc.dll
<SYSTEM32>\msorc32r.dll
<SYSTEM32>\msr2c.dll
%WINDIR%\$NtUninstallKB942288-v3$\msi.dll
<SYSTEM32>\msprivs.dll
<SYSTEM32>\msorcl32.dll
<SYSTEM32>\mspaint.exe
<SYSTEM32>\mspbde40.dll
<SYSTEM32>\mspmsp.dll
<SYSTEM32>\msnetobj.dll
<SYSTEM32>\msimsg.dll
<SYSTEM32>\msisip.dll
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\OEMBIOS.CAT
<SYSTEM32>\msihnd.dll
<SYSTEM32>\msidle.dll
<SYSTEM32>\msimg32.dll
<SYSTEM32>\MSIMTF.dll
<SYSTEM32>\msjetoledb40.dll
<SYSTEM32>\msls31.dll
<SYSTEM32>\mslbui.dll
<SYSTEM32>\msjet40.dll
<SYSTEM32>\msjter40.dll
<SYSTEM32>\msjint40.dll
<SYSTEM32>\msjtes40.dll
<SYSTEM32>\msswch.dll
%WINDIR%\$NtUninstallKB942288-v3$\msihnd.dll
<SYSTEM32>\msswchx.exe
<SYSTEM32>\mssip32.dll
<SYSTEM32>\mssign32.dll
<SYSTEM32>\msscript.ocx
<SYSTEM32>\msscp.dll
<SYSTEM32>\mstsc.exe
<SYSTEM32>\mstscax.dll
<SYSTEM32>\mstlsapi.dll
<SYSTEM32>\mstime.dll
<SYSTEM32>\mstext40.dll
<SYSTEM32>\mstinit.exe
<SYSTEM32>\mstask.dll
<SYSTEM32>\msrecr40.dll
<SYSTEM32>\msrating.dll
<SYSTEM32>\msratelc.dll
<SYSTEM32>\msrd3x40.dll
<SYSTEM32>\msr2cenu.dll
<SYSTEM32>\mspmsnsv.dll
<SYSTEM32>\msports.dll
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\PresentationFontCache.cat
<SYSTEM32>\msrd2x40.dll
<SYSTEM32>\msscds32.ax
<SYSTEM32>\msrepl40.dll
%WINDIR%\$NtUninstallKB942288-v3$\msiexec.exe
<SYSTEM32>\msrle32.dll
<SYSTEM32>\mssap.dll
<SYSTEM32>\msrclr40.dll
<SYSTEM32>\msiexec.exe
<SYSTEM32>\msdart.dll
<SYSTEM32>\MSCTFP.dll
<SYSTEM32>\msdadiag.dll
<SYSTEM32>\mscoree.dll
<SYSTEM32>\mscpx32r.dLL
<SYSTEM32>\MSCTF.dll
<SYSTEM32>\MSCTFIME.IME
<SYSTEM32>\msdatsrc.tlb
<SYSTEM32>\msdtcprx.dll
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5INF.CAT
<SYSTEM32>\msdtcprf.ini
<SYSTEM32>\mscpxl32.dLL
<SYSTEM32>\msdmo.dll
<SYSTEM32>\msdtc.exe
<SYSTEM32>\mscories.dll
<SYSTEM32>\msadp32.acm
<SYSTEM32>\msapsspc.dll
<SYSTEM32>\msasn1.dll
<SYSTEM32>\msafd.dll
<SYSTEM32>\msacm32.dll
<SYSTEM32>\msacm.dll
<SYSTEM32>\msadds32.ax
<SYSTEM32>\mscms.dll
<SYSTEM32>\mscorier.dll
<SYSTEM32>\mscdexnt.exe
<SYSTEM32>\msaud32.acm
<SYSTEM32>\msaudite.dll
<SYSTEM32>\mscat32.dll
<SYSTEM32>\msconf.dll
<SYSTEM32>\mshta.exe
<SYSTEM32>\msh263.drv
<SYSTEM32>\mshtml.tlb
<SYSTEM32>\mshtml.dll
<SYSTEM32>\msg.exe
<SYSTEM32>\msgsm32.acm
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NTPRINT.CAT
<SYSTEM32>\mshtmler.dll
<SYSTEM32>\mshtmled.dll
<SYSTEM32>\msieftp.dll
<SYSTEM32>\mshearts.exe
<SYSTEM32>\msident.dll
<SYSTEM32>\msi.dll
<SYSTEM32>\msidntld.dll
<SYSTEM32>\msh261.drv
<SYSTEM32>\msdxmlc.dll
<SYSTEM32>\msdtcuiu.dll
<SYSTEM32>\msftedit.dll
<SYSTEM32>\msdxm.ocx
<SYSTEM32>\msdtcprf.h
<SYSTEM32>\msdtctm.dll
<SYSTEM32>\msdtclog.dll
<SYSTEM32>\msgina.dll
<SYSTEM32>\msgsvc.dll
<SYSTEM32>\msg711.acm
<SYSTEM32>\msg723.acm
<SYSTEM32>\msencode.dll
<SYSTEM32>\msexcl40.dll
<SYSTEM32>\msexch40.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00026
<SYSTEM32>\netfxperf.dll
<SYSTEM32>\netdde.exe
<SYSTEM32>\net1.exe
<SYSTEM32>\net.hlp
<SYSTEM32>\ndptsp.tsp
<SYSTEM32>\netapi.dll
<SYSTEM32>\netman.dll
<SYSTEM32>\neth.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00027
<SYSTEM32>\netlogon.dll
<SYSTEM32>\netcfgx.dll
<SYSTEM32>\netapi32.dll
<SYSTEM32>\netevent.dll
<SYSTEM32>\nddenb32.dll
<SYSTEM32>\nbtstat.exe
<SYSTEM32>\narrhook.dll
<SYSTEM32>\ncpa.cpl.manifest
<SYSTEM32>\mydocs.dll
<SYSTEM32>\ncobjapi.dll
<SYSTEM32>\mtxlegih.dll
<SYSTEM32>\mtxoci.dll
<SYSTEM32>\nddeapir.exe
<SYSTEM32>\nddeapi.dll
<SYSTEM32>\net.exe
%WINDIR%\$NtUninstallKB942288-v3$\reg00025
<SYSTEM32>\ncpa.cpl
%WINDIR%\$NtUninstallKB942288-v3$\reg00024
<SYSTEM32>\ncxpnt.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00030
%WINDIR%\$NtUninstallKB942288-v3$\reg00031
%WINDIR%\$NtUninstallKB942288-v3$\reg00032
<SYSTEM32>\nlsfunc.exe
%WINDIR%\$NtUninstallKB942288-v3$\reg00029
<SYSTEM32>\nlhtml.dll
<SYSTEM32>\netui2.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00033
<SYSTEM32>\noise.enu
<SYSTEM32>\noise.eng
<SYSTEM32>\noise.deu
<SYSTEM32>\noise.chs
<SYSTEM32>\noise.dat
<SYSTEM32>\nmevtmsg.dll
<SYSTEM32>\newdev.dll
<SYSTEM32>\netid.dll
<SYSTEM32>\netrap.dll
<SYSTEM32>\netsetup.cpl
<SYSTEM32>\netmsg.dll
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WIC.cat
%WINDIR%\$NtUninstallKB942288-v3$\reg00028
<SYSTEM32>\netplwiz.dll
<SYSTEM32>\netware.drv
<SYSTEM32>\netshell.dll
<SYSTEM32>\netui1.dll
<SYSTEM32>\netsh.exe
<SYSTEM32>\netui0.dll
<SYSTEM32>\netsetup.exe
<SYSTEM32>\netstat.exe
<SYSTEM32>\narrator.exe
<SYSTEM32>\msvcrt.dll
<SYSTEM32>\msvideo.dll
<SYSTEM32>\msvidctl.dll
<SYSTEM32>\msvcrt20.dll
<SYSTEM32>\msvcr71.dll
%WINDIR%\$NtUninstallKB942288-v3$\msisip.dll
<SYSTEM32>\msvcr70.dll
<SYSTEM32>\msvidc32.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00014
<SYSTEM32>\msw3prt.dll
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\tabletpc.cat
<SYSTEM32>\msvfw32.dll
<SYSTEM32>\msvcrt40.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00013
<SYSTEM32>\msvcp71.dll
<SYSTEM32>\msv1_0.dll
<SYSTEM32>\msvcirt.dll
<SYSTEM32>\msvbvm50.dll
<SYSTEM32>\msvbvm60.dll
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\SP2.CAT
%WINDIR%\$NtUninstallKB942288-v3$\msimsg.dll
<SYSTEM32>\msutb.dll
<SYSTEM32>\msvcr100_clr0400.dll
<SYSTEM32>\msvcp60.dll
<SYSTEM32>\msvcr100d.dll
<SYSTEM32>\msvcr100.dll
<SYSTEM32>\msvcp100.dll
<SYSTEM32>\msvcp50.dll
<SYSTEM32>\msvcp100d.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00022
<SYSTEM32>\msxml6r.dll
<SYSTEM32>\msyuv.dll
<SYSTEM32>\msxml6.dll
<SYSTEM32>\msxml2r.dll
<SYSTEM32>\msxml3r.dll
<SYSTEM32>\msxml.dll
<SYSTEM32>\mtxex.dll
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\TimeStamp
<SYSTEM32>\mycomput.dll
<SYSTEM32>\mtxdm.dll
<SYSTEM32>\mtxclu.dll
<SYSTEM32>\msxmlr.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00023
%WINDIR%\$NtUninstallKB942288-v3$\reg00021
%WINDIR%\$NtUninstallKB942288-v3$\reg00017
<SYSTEM32>\mswmdm.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00018
%WINDIR%\$NtUninstallKB942288-v3$\reg00016
<SYSTEM32>\mswdat10.dll
<SYSTEM32>\mswebdvd.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00015
%WINDIR%\$NtUninstallKB942288-v3$\reg00020
<SYSTEM32>\msxbde40.dll
<SYSTEM32>\msxml3.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00019
<SYSTEM32>\mswsock.dll
<SYSTEM32>\mswstr10.dll
<SYSTEM32>\msxml2.dll
<SYSTEM32>\syncui.dll
<SYSTEM32>\sysinv.dll
<SYSTEM32>\sysedit.exe
%WINDIR%\$NtUninstallKB942288-v3$\reg00110
<SYSTEM32>\svcpack.dll
<SYSTEM32>\syncapp.exe
<SYSTEM32>\synceng.dll
<SYSTEM32>\sysprint.sep
<SYSTEM32>\syssetup.dll
<SYSTEM32>\sysmon.ocx
<SYSTEM32>\sysdm.cpl
<SYSTEM32>\syskey.exe
<SYSTEM32>\sysocmgr.exe
<SYSTEM32>\systeminfo.exe
<SYSTEM32>\sxs.dll
<SYSTEM32>\storprop.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00109
<SYSTEM32>\storage.dll
<SYSTEM32>\subrange.uce
<SYSTEM32>\stimon.exe
<SYSTEM32>\sti.dll
<SYSTEM32>\sti_ci.dll
<SYSTEM32>\swprv.dll
<SYSTEM32>\subst.exe
<SYSTEM32>\svchost.exe
<SYSTEM32>\strmdll.dll
<SYSTEM32>\stobject.dll
<SYSTEM32>\strmfilt.dll
<SYSTEM32>\streamci.dll
<SYSTEM32>\taskmgr.exe
<SYSTEM32>\tcpmib.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00114
<SYSTEM32>\tcpmon.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00112
<SYSTEM32>\tcmsetup.exe
%WINDIR%\$NtUninstallKB942288-v3$\reg00113
<SYSTEM32>\termcap
<SYSTEM32>\tftp.exe
<SYSTEM32>\termsrv.dll
<SYSTEM32>\tcpsvcs.exe
<SYSTEM32>\tcpmonui.dll
<SYSTEM32>\tdc.ocx
<SYSTEM32>\telephon.cpl
<SYSTEM32>\tcpmon.ini
<SYSTEM32>\systray.exe
%WINDIR%\$NtUninstallKB942288-v3$\reg00111
<SYSTEM32>\tapi3.dll
<SYSTEM32>\tapi.dll
<SYSTEM32>\sysprtj.sep
<SYSTEM32>\system.drv
<SYSTEM32>\t2embed.dll
<SYSTEM32>\tasklist.exe
<SYSTEM32>\taskman.exe
<SYSTEM32>\taskkill.exe
<SYSTEM32>\tapisrv.dll
<SYSTEM32>\tapi32.dll
<SYSTEM32>\tapiperf.dll
<SYSTEM32>\tapiui.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00108
<SYSTEM32>\spoolss.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00104
<SYSTEM32>\spmsg2.dll
<SYSTEM32>\spmsg.dll
<SYSTEM32>\spider.exe
<SYSTEM32>\spiisupd.exe
<SYSTEM32>\sound.drv
<SYSTEM32>\spoolsv.exe
<SYSTEM32>\spnpinst.exe
<SYSTEM32>\spupdsvc.exe
<SYSTEM32>\spnike.dll
<SYSTEM32>\sprio600.dll
<SYSTEM32>\sprestrt.exe
<SYSTEM32>\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\TimeStamp
<SYSTEM32>\sorttbls.nls
<SYSTEM32>\snmpsnap.dll
<SYSTEM32>\sndvol32.exe
<SYSTEM32>\sol.exe
%WINDIR%\$NtUninstallKB942288-v3$\reg00101
<SYSTEM32>\smbinst.exe
<SYSTEM32>\smlogsvc.exe
<SYSTEM32>\smss.exe
%WINDIR%\$NtUninstallKB942288-v3$\reg00102
<SYSTEM32>\sortkey.nls
%WINDIR%\$NtUninstallKB942288-v3$\reg00103
<SYSTEM32>\sort.exe
<SYSTEM32>\snmpapi.dll
<SYSTEM32>\sndrec32.exe
<SYSTEM32>\softpub.dll
<SYSTEM32>\ssmarque.scr
<SYSTEM32>\ssmypics.scr
<SYSTEM32>\ssflwbox.scr
<SYSTEM32>\ssbezier.scr
<SYSTEM32>\ssdpapi.dll
<SYSTEM32>\ssdpsrv.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00107
<SYSTEM32>\ssmyst.scr
<SYSTEM32>\stdole2.tlb
<SYSTEM32>\stdole32.tlb
<SYSTEM32>\ssstars.scr
<SYSTEM32>\sspipes.scr
<SYSTEM32>\sstext3d.scr
<SYSTEM32>\stclient.dll
<SYSTEM32>\ss3dfo.scr
<SYSTEM32>\srclient.dll
<SYSTEM32>\sqlsrv32.dll
<SYSTEM32>\sqlsrv32.rll
<SYSTEM32>\spxcoins.dll
<SYSTEM32>\sqlsodbc.chm
%WINDIR%\$NtUninstallKB942288-v3$\reg00105
<SYSTEM32>\sprio800.dll
<SYSTEM32>\sqlwoa.dll
<SYSTEM32>\srrstr.dll
<SYSTEM32>\sqlunirl.dll
<SYSTEM32>\srvsvc.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00106
<SYSTEM32>\srsvc.dll
<SYSTEM32>\sqlwid.dll
<SYSTEM32>\usrprbda.exe
<SYSTEM32>\usrv80a.dll
<SYSTEM32>\usrrtosa.dll
<SYSTEM32>\usrlogon.cmd
<SYSTEM32>\usrdtea.dll
<SYSTEM32>\usrmlnka.exe
<SYSTEM32>\usrcoina.dll
<SYSTEM32>\usrvpa.dll
<SYSTEM32>\usrvoica.dll
<SYSTEM32>\utilman.exe
<SYSTEM32>\usrv42a.dll
<SYSTEM32>\usrsvpia.dll
<SYSTEM32>\usrsdpia.dll
<SYSTEM32>\usrshuta.exe
<SYSTEM32>\usrfaxa.dll
<SYSTEM32>\usermode.dll
%WINDIR%\$NtUninstallKB942288-v3$\spuninst\spuninst.txt
<SYSTEM32>\user32.dll
<SYSTEM32>\userenv.dll
<SYSTEM32>\url.dll
<SYSTEM32>\ureg.dll
<SYSTEM32>\user.exe
<SYSTEM32>\usrcntra.dll
<SYSTEM32>\usrdpa.dll
<SYSTEM32>\usrlbva.dll
<SYSTEM32>\usp10.dll
%WINDIR%\$NtUninstallKB942288-v3$\spuninst\updspapi.dll
<SYSTEM32>\ups.exe
<SYSTEM32>\userinit.exe
%WINDIR%\$NtUninstallWIC$\spuninst\spuninst.inf
<SYSTEM32>\vcomp100.dll
<SYSTEM32>\ver.dll
<SYSTEM32>\verifier.dll
<SYSTEM32>\vclx60.bpl
<SYSTEM32>\vdmredir.dll
<SYSTEM32>\vcl70.bpl
<SYSTEM32>\vga.dll
<SYSTEM32>\vfp9rrus.dll
<SYSTEM32>\vfp9renu.dll
<SYSTEM32>\vfp9t.dll
<SYSTEM32>\vfp9r.dll
<SYSTEM32>\version.dll
<SYSTEM32>\verifier.exe
<SYSTEM32>\vdmdbg.dll
%WINDIR%\$NtUninstallWIC$\spuninst\spuninst.exe
<SYSTEM32>\v7vga.rom
<SYSTEM32>\vbicodec.ax
<SYSTEM32>\vbajet32.dll
<SYSTEM32>\utildll.dll
<SYSTEM32>\uxtheme.dll
<SYSTEM32>\ut.dll
<SYSTEM32>\vcl60.bpl
<SYSTEM32>\vcl120.bpl
<SYSTEM32>\vcl90.bpl
<SYSTEM32>\vcdex.dll
<SYSTEM32>\vbscript.dll
<SYSTEM32>\vbisurf.ax
<SYSTEM32>\vcl100.bpl
<SYSTEM32>\usbmon.dll
<SYSTEM32>\tsbyuv.dll
<SYSTEM32>\tsappcmp.dll
<SYSTEM32>\tscfgwmi.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00117
<SYSTEM32>\traffic.dll
<SYSTEM32>\tree.com
<SYSTEM32>\toolhelp.dll
%WINDIR%\$NtUninstallKB942288-v3$\spuninst\spuninst.exe
<SYSTEM32>\tsddd.dll
<SYSTEM32>\tsdiscon.exe
<SYSTEM32>\tsd32.dll
<SYSTEM32>\tscupgrd.exe
<SYSTEM32>\trkwks.dll
<SYSTEM32>\tscon.exe
<SYSTEM32>\tracert6.exe
<SYSTEM32>\timer.drv
<SYSTEM32>\timedate.cpl
<SYSTEM32>\tlntsess.exe
<SYSTEM32>\themeui.dll
<SYSTEM32>\telnet.exe
<SYSTEM32>\termmgr.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00115
<SYSTEM32>\tlntadmn.exe
<SYSTEM32>\tracerpt.exe
<SYSTEM32>\tracert.exe
<SYSTEM32>\tlntsvrp.dll
<SYSTEM32>\tourstart.exe
%WINDIR%\$NtUninstallKB942288-v3$\reg00116
<SYSTEM32>\tlntsvr.exe
<SYSTEM32>\unimdmat.dll
<SYSTEM32>\upnp.dll
<SYSTEM32>\unimdm.tsp
<SYSTEM32>\uniplat.dll
<SYSTEM32>\umandlg.dll
<SYSTEM32>\umpnpmgr.dll
<SYSTEM32>\umdmxfrm.dll
<SYSTEM32>\upnpui.dll
<SYSTEM32>\upnphost.dll
<SYSTEM32>\unicode.nls
<SYSTEM32>\urlmon.dll
<SYSTEM32>\untfs.dll
<SYSTEM32>\unlodctr.exe
<SYSTEM32>\upnpcont.exe
<SYSTEM32>\UIAutomationCore.dll
<SYSTEM32>\tsshutdn.exe
<SYSTEM32>\twext.dll
<SYSTEM32>\typeperf.exe
<SYSTEM32>\tssoft32.acm
<SYSTEM32>\tslabels.ini
<SYSTEM32>\tskill.exe
<SYSTEM32>\tslabels.h
%WINDIR%\$NtUninstallKB942288-v3$\spuninst\spuninst.inf
<SYSTEM32>\TsWpfWrp.exe
<SYSTEM32>\ulib.dll
<SYSTEM32>\txflog.dll
<SYSTEM32>\udhisapi.dll
<SYSTEM32>\ufat.dll
<SYSTEM32>\typelib.dll
<SYSTEM32>\smlogcfg.dll
<SYSTEM32>\reset.exe
<SYSTEM32>\rgb9rast_2.dll
<SYSTEM32>\replace.exe
<SYSTEM32>\resutils.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00082
<SYSTEM32>\rend.dll
<SYSTEM32>\rexec.exe
<SYSTEM32>\routetab.dll
<SYSTEM32>\riched20.dll
<SYSTEM32>\routemon.exe
%WINDIR%\$NtUninstallKB942288-v3$\reg00083
<SYSTEM32>\rnr20.dll
<SYSTEM32>\riched32.dll
<SYSTEM32>\route.exe
<SYSTEM32>\CatRoot2\edb00015.log
<SYSTEM32>\regapi.dll
<SYSTEM32>\regsvr32.exe
<SYSTEM32>\regini.exe
<SYSTEM32>\reg.exe
<SYSTEM32>\rdshost.exe
<SYSTEM32>\redir.exe
%WINDIR%\$NtUninstallKB942288-v3$\reg00081
<SYSTEM32>\regsvc.dll
<SYSTEM32>\remotesp.tsp
<SYSTEM32>\remotepg.dll
<SYSTEM32>\regwiz.exe
<SYSTEM32>\regedt32.exe
<SYSTEM32>\regwizc.dll
<SYSTEM32>\relog.exe
<SYSTEM32>\rsvpmsg.dll
<SYSTEM32>\rsopprov.exe
<SYSTEM32>\rsnotify.exe
<SYSTEM32>\rsmui.exe
<SYSTEM32>\rsop.msc
<SYSTEM32>\CatRoot2\res1.log
<SYSTEM32>\rsvpcnts.h
<SYSTEM32>\rtcshare.exe
<SYSTEM32>\CatRoot2\res2.log
<SYSTEM32>\rsvpsp.dll
<SYSTEM32>\rtl120.bpl
%WINDIR%\$NtUninstallKB942288-v3$\reg00085
<SYSTEM32>\rtl60.bpl
<SYSTEM32>\rsvpperf.dll
<SYSTEM32>\CatRoot2\edb00017.log
<SYSTEM32>\CatRoot2\edb00016.log
<SYSTEM32>\rsaci.rat
%WINDIR%\$NtUninstallKB942288-v3$\reg00084
<SYSTEM32>\rpcss.dll
<SYSTEM32>\rpcrt4.dll
<SYSTEM32>\rpcns4.dll
<SYSTEM32>\rsaenh.dll
<SYSTEM32>\rsmsink.exe
<SYSTEM32>\rsh.exe
<SYSTEM32>\rsfsaps.dll
<SYSTEM32>\rsmps.dll
<SYSTEM32>\rsm.exe
<SYSTEM32>\rshx32.dll
<SYSTEM32>\rsvp.exe
<SYSTEM32>\recover.exe
<SYSTEM32>\racpldlg.dll
<SYSTEM32>\query.dll
<SYSTEM32>\quartz.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00077
<SYSTEM32>\qprocess.exe
<SYSTEM32>\qr.dll
<SYSTEM32>\qwinsta.exe
<SYSTEM32>\rasdlg.dll
<SYSTEM32>\rasctrnm.h
<SYSTEM32>\rasman.dll
<SYSTEM32>\rasapi32.dll
<SYSTEM32>\rasadhlp.dll
<SYSTEM32>\CatRoot2\edb00013.log
<SYSTEM32>\rasauto.dll
<SYSTEM32>\qosname.dll
<SYSTEM32>\CatRoot2\edb00011.log
<SYSTEM32>\qcap.dll
<SYSTEM32>\qdv.dll
<SYSTEM32>\pubprn.vbs
<SYSTEM32>\pstorec.dll
<SYSTEM32>\qappsrv.exe
<SYSTEM32>\qasf.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00076
<SYSTEM32>\qmgr.dll
<SYSTEM32>\CatRoot2\edb00012.log
<SYSTEM32>\qmgrprxy.dll
<SYSTEM32>\qdvd.dll
<SYSTEM32>\qedwipes.dll
<SYSTEM32>\qedit.dll
<SYSTEM32>\rcimlby.exe
<SYSTEM32>\CatRoot2\edb00014.log
%WINDIR%\$NtUninstallKB942288-v3$\reg00080
<SYSTEM32>\rdchost.dll
<SYSTEM32>\rasppp.dll
<SYSTEM32>\rcbdyctl.dll
<SYSTEM32>\rastls.dll
<SYSTEM32>\rcp.exe
<SYSTEM32>\rdpdd.dll
<SYSTEM32>\rdsaddin.exe
<SYSTEM32>\rdpsnd.dll
<SYSTEM32>\rdpcfgex.dll
<SYSTEM32>\rdpclip.exe
<SYSTEM32>\rdpwsx.dll
<SYSTEM32>\rastapi.dll
<SYSTEM32>\rasctrs.dll
<SYSTEM32>\rasdial.exe
<SYSTEM32>\rasmontr.dll
<SYSTEM32>\rasctrs.ini
%WINDIR%\$NtUninstallKB942288-v3$\reg00078
<SYSTEM32>\rasautou.exe
<SYSTEM32>\raschap.dll
<SYSTEM32>\rasmxs.dll
<SYSTEM32>\rasrad.dll
<SYSTEM32>\rasser.dll
<SYSTEM32>\rassapi.dll
<SYSTEM32>\rasmans.dll
<SYSTEM32>\rasphone.exe
%WINDIR%\$NtUninstallKB942288-v3$\reg00079
<SYSTEM32>\share.exe
<SYSTEM32>\sfmapi.dll
<SYSTEM32>\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\TimeStamp
<SYSTEM32>\sfc.dll
<SYSTEM32>\setupapi.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00095
<SYSTEM32>\sfc.exe
<SYSTEM32>\shellstyle.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00096
<SYSTEM32>\sfcfiles.dll
<SYSTEM32>\shell.dll
<SYSTEM32>\shdocvw.dll
<SYSTEM32>\shdoclc.dll
<SYSTEM32>\shell32.dll
<SYSTEM32>\setup.exe
<SYSTEM32>\senscfg.dll
<SYSTEM32>\services.msc
<SYSTEM32>\services.exe
<SYSTEM32>\sens.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00093
<SYSTEM32>\serialui.dll
<SYSTEM32>\sendcmsg.dll
<SYSTEM32>\setup.bmp
<SYSTEM32>\setver.exe
<SYSTEM32>\setupdll.dll
<SYSTEM32>\sethc.exe
<SYSTEM32>\sessmgr.exe
<SYSTEM32>\serwvdrv.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00094
<SYSTEM32>\simpdata.tlb
<SYSTEM32>\skdll.dll
<SYSTEM32>\slayerxp.dll
<SYSTEM32>\sigtab.dll
<SYSTEM32>\sigverif.exe
%WINDIR%\$NtUninstallKB942288-v3$\reg00098
<SYSTEM32>\sisbkup.dll
<SYSTEM32>\slbiop.dll
<SYSTEM32>\sl_anet.acm
%WINDIR%\$NtUninstallKB942288-v3$\reg00100
%WINDIR%\$NtUninstallKB942288-v3$\reg00099
<SYSTEM32>\skeys.exe
<SYSTEM32>\slbrccsp.dll
<SYSTEM32>\slbcsp.dll
<SYSTEM32>\shscrap.dll
<SYSTEM32>\shiftjis.uce
<SYSTEM32>\shimeng.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00097
<SYSTEM32>\shgina.dll
<SYSTEM32>\shadow.exe
<SYSTEM32>\sfc_os.dll
<SYSTEM32>\shfolder.dll
<SYSTEM32>\shmgrate.exe
<SYSTEM32>\shutdown.exe
<SYSTEM32>\shrpubw.exe
<SYSTEM32>\shsvcs.dll
<SYSTEM32>\shlwapi.dll
<SYSTEM32>\shmedia.dll
<SYSTEM32>\shimgvw.dll
<SYSTEM32>\servdeps.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00088
<SYSTEM32>\samsrv.dll
<SYSTEM32>\scarddlg.dll
<SYSTEM32>\samlib.dll
<SYSTEM32>\rwinsta.exe
<SYSTEM32>\sbeio.dll
<SYSTEM32>\runonce.exe
%WINDIR%\$NtUninstallKB942288-v3$\reg00089
<SYSTEM32>\sc.exe
<SYSTEM32>\scardssp.dll
<SYSTEM32>\scardsvr.exe
<SYSTEM32>\sapi.cpl.manifest
<SYSTEM32>\savedump.exe
<SYSTEM32>\sbe.dll
<SYSTEM32>\safrslv.dll
<SYSTEM32>\rsvp.ini
<SYSTEM32>\rtl90.bpl
%WINDIR%\$NtUninstallKB942288-v3$\reg00086
<SYSTEM32>\rtipxmib.dll
<SYSTEM32>\rtl100.bpl
<SYSTEM32>\rtm.dll
<SYSTEM32>\rtutils.dll
<SYSTEM32>\rtl70.bpl
%WINDIR%\$NtUninstallKB942288-v3$\reg00087
<SYSTEM32>\safrcdlg.dll
<SYSTEM32>\runas.exe
<SYSTEM32>\rundll32.exe
<SYSTEM32>\CatRoot2\tmp.edb
<SYSTEM32>\safrdm.dll
<SYSTEM32>\sdbinst.exe
<SYSTEM32>\secedit.exe
<SYSTEM32>\secpol.msc
<SYSTEM32>\seclogon.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00091
<SYSTEM32>\sdpblb.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00092
<SYSTEM32>\secur32.dll
<SYSTEM32>\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb
<SYSTEM32>\sensapi.dll
<SYSTEM32>\sendmail.dll
<SYSTEM32>\security.dll
<SYSTEM32>\secupd.dat
<SYSTEM32>\secupd.sig
<SYSTEM32>\sclgntfy.dll
<SYSTEM32>\scesrv.dll
%WINDIR%\$NtUninstallKB942288-v3$\reg00090
<SYSTEM32>\schedsvc.dll
<SYSTEM32>\sccbase.dll
<SYSTEM32>\sccsccp.dll
<SYSTEM32>\scecli.dll
<SYSTEM32>\schannel.dll
<SYSTEM32>\scrrun.dll
<SYSTEM32>\scrnsave.scr
<SYSTEM32>\scredir.dll
<SYSTEM32>\schtasks.exe
<SYSTEM32>\scriptpw.dll
<SYSTEM32>\scrobj.dll
<SYSTEM32>\sdhcinst.dll
<SYSTEM32>\msacm32.drv
<SYSTEM32>\dfrgui.dll
<SYSTEM32>\dgsetup.dll
<SYSTEM32>\dgrpsetu.dll
<SYSTEM32>\dfshim.dll
<SYSTEM32>\dfrgsnap.dll
<SYSTEM32>\dfrgres.dll
<SYSTEM32>\dgnet.dll
<SYSTEM32>\dimap.dll
<SYSTEM32>\diactfrm.dll
<SYSTEM32>\dinput.dll
<SYSTEM32>\dhcpsapi.dll
<SYSTEM32>\diantz.exe
<SYSTEM32>\dhcpcsvc.dll
<SYSTEM32>\dhcpmon.dll
<SYSTEM32>\dfrgntfs.exe
<SYSTEM32>\deskperf.dll
<SYSTEM32>\defrag.exe
<SYSTEM32>\debug.exe
<SYSTEM32>\deskadp.dll
<SYSTEM32>\desk.cpl
<SYSTEM32>\desktop.ini
<SYSTEM32>\deskmon.dll
<SYSTEM32>\devmgr.dll
<SYSTEM32>\dfrg.msc
<SYSTEM32>\dfsshlex.dll
<SYSTEM32>\devenum.dll
<SYSTEM32>\ddrawex.dll
<SYSTEM32>\devmgmt.msc
<SYSTEM32>\dfrgfat.exe
<SYSTEM32>\dmintf.dll
<SYSTEM32>\dmloader.dll
<SYSTEM32>\dmremote.exe
<SYSTEM32>\dmime.dll
<SYSTEM32>\dmdskres.dll
<SYSTEM32>\dmband.dll
<SYSTEM32>\dmdskmgr.dll
<SYSTEM32>\dmutil.dll
<SYSTEM32>\dmusic.dll
<SYSTEM32>\dmsynth.dll
<SYSTEM32>\dmview.ocx
<SYSTEM32>\dmscript.dll
<SYSTEM32>\dmocx.dll
<SYSTEM32>\dmserver.dll
<SYSTEM32>\dmcompos.dll
<SYSTEM32>\diskcopy.com
<SYSTEM32>\diskcopy.dll
<SYSTEM32>\diskmgmt.msc
<SYSTEM32>\diskcomp.com
<SYSTEM32>\digest.dll
<SYSTEM32>\dinput8.dll
<SYSTEM32>\dispex.dll
<SYSTEM32>\dmdlgs.dll
<SYSTEM32>\dllhst3g.exe
<SYSTEM32>\dmconfig.dll
<SYSTEM32>\dmadmin.exe
<SYSTEM32>\diskperf.exe
<SYSTEM32>\diskpart.exe
<SYSTEM32>\dllhost.exe
<SYSTEM32>\ddraw.dll
<SYSTEM32>\c_855.nls
<SYSTEM32>\c_852.nls
<SYSTEM32>\c_857.nls
<SYSTEM32>\c_737.nls
<SYSTEM32>\c_500.nls
<SYSTEM32>\c_775.nls
<SYSTEM32>\c_850.nls
<SYSTEM32>\c_866.nls
<SYSTEM32>\c_869.nls
<SYSTEM32>\c_874.nls
<SYSTEM32>\c_865.nls
<SYSTEM32>\c_860.nls
<SYSTEM32>\c_861.nls
<SYSTEM32>\c_863.nls
<SYSTEM32>\c_28605.nls
<SYSTEM32>\c_28591.nls
<SYSTEM32>\c_28592.nls
<SYSTEM32>\C_28595.NLS
<SYSTEM32>\c_20905.nls
<SYSTEM32>\c_20127.nls
<SYSTEM32>\c_20261.nls
<SYSTEM32>\c_21866.nls
<SYSTEM32>\c_28599.nls
<SYSTEM32>\c_28603.nls
<SYSTEM32>\c_437.nls
<SYSTEM32>\C_28594.NLS
<SYSTEM32>\c_28593.nls
<SYSTEM32>\c_28598.nls
<SYSTEM32>\C_28597.NLS
<SYSTEM32>\dbgeng.dll
<SYSTEM32>\dbghelp.dll
<SYSTEM32>\Dcache.bin
<SYSTEM32>\davclnt.dll
<SYSTEM32>\dataclen.dll
<SYSTEM32>\datime.dll
<SYSTEM32>\daxctle.ocx
<SYSTEM32>\dcomcnfg.exe
<SYSTEM32>\dciman32.dll
<SYSTEM32>\dbnmpntw.dll
<SYSTEM32>\ddeml.dll
<SYSTEM32>\dbnetlib.dll
<SYSTEM32>\ddeshare.exe
<SYSTEM32>\dbmsrpcn.dll
<SYSTEM32>\d3dxof.dll
<SYSTEM32>\c_936.nls
<SYSTEM32>\d3d8thk.dll
<SYSTEM32>\d3d8.dll
<SYSTEM32>\c_950.nls
<SYSTEM32>\c_875.nls
<SYSTEM32>\c_932.nls
<SYSTEM32>\c_949.nls
<SYSTEM32>\d3drm.dll
<SYSTEM32>\d3dramp.dll
<SYSTEM32>\danim.dll
<SYSTEM32>\d3dpmesh.dll
<SYSTEM32>\d3d9.dll
<SYSTEM32>\d3dim700.dll
<SYSTEM32>\d3dim.dll
<SYSTEM32>\esentprf.ini
<SYSTEM32>\esentutl.exe
<SYSTEM32>\esentprf.hxx
<SYSTEM32>\ersvc.dll
<SYSTEM32>\esent97.dll
<SYSTEM32>\es.dll
<SYSTEM32>\esent.dll
<SYSTEM32>\eventcreate.exe
<SYSTEM32>\eventtriggers.exe
<SYSTEM32>\eventquery.vbs
<SYSTEM32>\eudcedit.exe
<SYSTEM32>\esentprf.dll
<SYSTEM32>\eventcls.dll
<SYSTEM32>\eula.txt
<SYSTEM32>\encdec.dll
<SYSTEM32>\efsadu.dll
<SYSTEM32>\dxtrans.dll
<SYSTEM32>\edit.hlp
<SYSTEM32>\dxtmsft.dll
<SYSTEM32>\dvdplay.exe
<SYSTEM32>\dx8vb.dll
<SYSTEM32>\dxmasf.dll
<SYSTEM32>\els.dll
<SYSTEM32>\EqnClass.Dll
<SYSTEM32>\encapi.dll
<SYSTEM32>\emptyregdb.dat
<SYSTEM32>\dxva2.dll
<SYSTEM32>\edit.com
<SYSTEM32>\edlin.exe
<SYSTEM32>\finger.exe
<SYSTEM32>\firewall.cpl
<SYSTEM32>\fldrclnr.dll
<SYSTEM32>\findstr.exe
<SYSTEM32>\filemgmt.dll
<SYSTEM32>\feclient.dll
<SYSTEM32>\fc.exe
<SYSTEM32>\freecell.exe
<SYSTEM32>\fontview.exe
<SYSTEM32>\fontsub.dll
<SYSTEM32>\FNTCACHE.DAT
<SYSTEM32>\fltlib.dll
<SYSTEM32>\find.exe
<SYSTEM32>\fltMc.exe
<SYSTEM32>\fixmapi.exe
<SYSTEM32>\exe2bin.exe
<SYSTEM32>\expand.exe
<SYSTEM32>\extrac32.exe
<SYSTEM32>\eventvwr.exe
<SYSTEM32>\eventvwr.msc
<SYSTEM32>\eventlog.dll
<SYSTEM32>\evr.dll
<SYSTEM32>\fastopen.exe
<SYSTEM32>\fdeploy.dll
<SYSTEM32>\faultrep.dll
<SYSTEM32>\exts.dll
<SYSTEM32>\extmgr.dll
<SYSTEM32>\fde.dll
<SYSTEM32>\expsrv.dll
<SYSTEM32>\dxdiagn.dll
<SYSTEM32>\dpserial.dll
<SYSTEM32>\dpnwsock.dll
<SYSTEM32>\dpvacm.dll
<SYSTEM32>\dpnlobby.dll
<SYSTEM32>\dpmodemx.dll
<SYSTEM32>\dpnaddr.dll
<SYSTEM32>\dpnhupnp.dll
<SYSTEM32>\drmclien.dll
<SYSTEM32>\dpwsockx.dll
<SYSTEM32>\drprov.dll
<SYSTEM32>\driverquery.exe
<SYSTEM32>\dpvvox.dll
<SYSTEM32>\dpvsetup.exe
<SYSTEM32>\dpvoice.dll
<SYSTEM32>\dpnsvr.exe
<SYSTEM32>\dnsrslvr.dll
<SYSTEM32>\dplay.dll
<SYSTEM32>\dpcdll.dll
<SYSTEM32>\docprop2.dll
<SYSTEM32>\dmstyle.dll
<SYSTEM32>\docprop.dll
<SYSTEM32>\dnsapi.dll
<SYSTEM32>\dpnhpast.dll
<SYSTEM32>\dpnmodem.dll
<SYSTEM32>\dplayx.dll
<SYSTEM32>\dpnet.dll
<SYSTEM32>\doskey.exe
<SYSTEM32>\dplaysvr.exe
<SYSTEM32>\dosx.exe
<SYSTEM32>\dssec.dll
<SYSTEM32>\dsuiext.dll
<SYSTEM32>\dssenh.dll
<SYSTEM32>\dsquery.dll
<SYSTEM32>\dsprop.dll
<SYSTEM32>\dsprpres.dll
<SYSTEM32>\dssec.dat
<SYSTEM32>\duser.dll
<SYSTEM32>\dvdupgrd.exe
<SYSTEM32>\dwwin.exe
<SYSTEM32>\dxdiag.exe
<SYSTEM32>\dswave.dll
<SYSTEM32>\dx7vb.dll
<SYSTEM32>\dumprep.exe
<SYSTEM32>\dsound3d.dll
<SYSTEM32>\drwtsn32.exe
<SYSTEM32>\drwatson.exe
<SYSTEM32>\ds32gt.dll
<SYSTEM32>\ds16gt.dLL
<SYSTEM32>\drmv2clt.dll
<SYSTEM32>\dpwsock.dll
<SYSTEM32>\drmstor.dll
<SYSTEM32>\dsound.vxd
<SYSTEM32>\dsdmo.dll
<SYSTEM32>\dsdmoprp.dll
<SYSTEM32>\dskquota.dll
<SYSTEM32>\dsauth.dll
<SYSTEM32>\dskquoui.dll
<SYSTEM32>\dsound.dll
<SYSTEM32>\c_20866.nls
<SYSTEM32>\bitsprx3.dll
<SYSTEM32>\blackbox.dll
<SYSTEM32>\blastcln.exe
<SYSTEM32>\bitsprx2.dll
<SYSTEM32>\bidispl.dll
<SYSTEM32>\bios1.rom
<SYSTEM32>\bios4.rom
<SYSTEM32>\bootvrfy.exe
<SYSTEM32>\borlndmm.dll
<SYSTEM32>\browselc.dll
<SYSTEM32>\bopomofo.uce
<SYSTEM32>\bootcfg.exe
<SYSTEM32>\bootvid.dll
<SYSTEM32>\bootok.exe
<SYSTEM32>\batt.dll
<SYSTEM32>\autolfn.exe
<SYSTEM32>\avicap.dll
<SYSTEM32>\avicap32.dll
<SYSTEM32>\AUTOEXEC.NT
<SYSTEM32>\autoconv.exe
<SYSTEM32>\autodisc.dll
<SYSTEM32>\autofmt.exe
<SYSTEM32>\avwav.dll
<SYSTEM32>\batmeter.dll
<SYSTEM32>\basesrv.dll
<SYSTEM32>\avmeter.dll
<SYSTEM32>\avifil32.dll
<SYSTEM32>\avifile.dll
<SYSTEM32>\avtapi.dll
<SYSTEM32>\cc3260mt.dll
<SYSTEM32>\cc3260.dll
<SYSTEM32>\cc3270.dll
<SYSTEM32>\cc3250mt.dll
<SYSTEM32>\catsrv.dll
<SYSTEM32>\catsrvut.dll
<SYSTEM32>\cc3250.dll
<SYSTEM32>\ccfgnt.dll
<SYSTEM32>\cc3290mt.dll
<SYSTEM32>\cdfview.dll
<SYSTEM32>\cc3280mt.dll
<SYSTEM32>\cc3280.dll
<SYSTEM32>\cc3270mt.dll
<SYSTEM32>\cc3290.dll
<SYSTEM32>\catsrvps.dll
<SYSTEM32>\bthserv.dll
<SYSTEM32>\bthprops.cpl
<SYSTEM32>\btpanui.dll
<SYSTEM32>\bthci.dll
<SYSTEM32>\browser.dll
<SYSTEM32>\browsewm.dll
<SYSTEM32>\browseui.dll
<SYSTEM32>\capesnpn.dll
<SYSTEM32>\calc.exe
<SYSTEM32>\cards.dll
<SYSTEM32>\cacls.exe
<SYSTEM32>\cabinet.dll
<SYSTEM32>\cabview.dll
<SYSTEM32>\camocx.dll
<SYSTEM32>\autochk.exe
<SYSTEM32>\adsmsext.dll
<SYSTEM32>\adsnds.dll
<SYSTEM32>\adsnt.dll
<SYSTEM32>\adsldpc.dll
<SYSTEM32>\admparse.dll
<SYSTEM32>\adptif.dll
<SYSTEM32>\adsldp.dll
<SYSTEM32>\alg.exe
<SYSTEM32>\alrsvc.dll
<SYSTEM32>\amcompat.tlb
<SYSTEM32>\ahui.exe
<SYSTEM32>\adsnw.dll
<SYSTEM32>\advapi32.dll
<SYSTEM32>\advpack.dll
<SYSTEM32>\actxprxy.dll
<SYSTEM32>\aaaamon.dll
<SYSTEM32>\access.cpl
<SYSTEM32>\acctres.dll
<SYSTEM32>\6to4svc.dll
<SYSTEM32>\$winnt$.inf
<SYSTEM32>\12520437.cpx
<SYSTEM32>\12520850.cpx
<SYSTEM32>\activeds.dll
<SYSTEM32>\activeds.tlb
<SYSTEM32>\actmovie.exe
<SYSTEM32>\aclui.dll
<SYSTEM32>\accwiz.exe
<SYSTEM32>\acelpdec.ax
<SYSTEM32>\acledit.dll
<SYSTEM32>\atl100.dll
<SYSTEM32>\atmadm.exe
<SYSTEM32>\atmfd.dll
<SYSTEM32>\atl.dll
<SYSTEM32>\asycfilt.dll
<SYSTEM32>\at.exe
<SYSTEM32>\atkctrs.dll
<SYSTEM32>\audiosrv.dll
<SYSTEM32>\auditusr.exe
<SYSTEM32>\authz.dll
<SYSTEM32>\attrib.exe
<SYSTEM32>\atmlib.dll
<SYSTEM32>\atmpvcno.dll
<SYSTEM32>\atrace.dll
<SYSTEM32>\asr_pfu.exe
<SYSTEM32>\appmgmts.dll
<SYSTEM32>\apphelp.dll
<SYSTEM32>\appmgr.dll
<SYSTEM32>\apcups.dll
<SYSTEM32>\amstream.dll
<SYSTEM32>\ansi.sys
<SYSTEM32>\append.exe
<SYSTEM32>\aspnet_counters.dll
<SYSTEM32>\asr_fmt.exe
<SYSTEM32>\asr_ldm.exe
<SYSTEM32>\asferror.dll
<SYSTEM32>\appwiz.cpl
<SYSTEM32>\arp.exe
<SYSTEM32>\asctrls.ocx
<SYSTEM32>\credui.dll
<SYSTEM32>\crtdll.dll
<SYSTEM32>\crypt32.dll
<SYSTEM32>\country.sys
<SYSTEM32>\convert.exe
<SYSTEM32>\control.exe
<SYSTEM32>\corpol.dll
<SYSTEM32>\cryptsvc.dll
<SYSTEM32>\cscdll.dll
<SYSTEM32>\cryptnet.dll
<SYSTEM32>\cryptui.dll
<SYSTEM32>\cryptdlg.dll
<SYSTEM32>\cryptdll.dll
<SYSTEM32>\cryptext.dll
<SYSTEM32>\console.dll
<SYSTEM32>\compobj.dll
<SYSTEM32>\comrepl.dll
<SYSTEM32>\comres.dll
<SYSTEM32>\compstui.dll
<SYSTEM32>\compact.exe
<SYSTEM32>\compmgmt.msc
<SYSTEM32>\compatUI.dll
<SYSTEM32>\CONFIG.TMP
<SYSTEM32>\confmsp.dll
<SYSTEM32>\conime.exe
<SYSTEM32>\comuid.dll
<SYSTEM32>\comsnap.dll
<SYSTEM32>\comsvcs.dll
<SYSTEM32>\CONFIG.NT
<SYSTEM32>\c_1026.nls
<SYSTEM32>\c_1250.nls
<SYSTEM32>\c_1251.nls
<SYSTEM32>\c_10081.nls
<SYSTEM32>\c_10079.nls
<SYSTEM32>\c_10029.nls
<SYSTEM32>\c_10082.nls
<SYSTEM32>\c_1257.nls
<SYSTEM32>\c_1256.nls
<SYSTEM32>\c_1258.nls
<SYSTEM32>\c_1255.nls
<SYSTEM32>\c_1252.nls
<SYSTEM32>\c_1253.nls
<SYSTEM32>\c_1254.nls
<SYSTEM32>\c_10010.nls
<SYSTEM32>\ctl3d32.dll
<SYSTEM32>\ctfmon.exe
<SYSTEM32>\ctl3dv2.dll
<SYSTEM32>\csrsrv.dll
<SYSTEM32>\cscui.dll
<SYSTEM32>\csrss.exe
<SYSTEM32>\csseqchk.dll
<SYSTEM32>\c_10006.nls
<SYSTEM32>\c_10007.nls
<SYSTEM32>\c_10017.nls
<SYSTEM32>\c_037.nls
<SYSTEM32>\ctype.nls
<SYSTEM32>\cygwin1.dll
<SYSTEM32>\c_10000.nls
<SYSTEM32>\1033\dwintl.dll
<SYSTEM32>\cipher.exe
<SYSTEM32>\cisvc.exe
<SYSTEM32>\clb.dll
<SYSTEM32>\ciadmin.dll
<SYSTEM32>\ciadv.msc
<SYSTEM32>\cidaemon.exe
<SYSTEM32>\ciodm.dll
<SYSTEM32>\cliconf.chm
<SYSTEM32>\cliconfg.rll
<SYSTEM32>\cliconfg.dll
<SYSTEM32>\cleanmgr.exe
<SYSTEM32>\clbcatex.dll
<SYSTEM32>\ckcnv.exe
<SYSTEM32>\clbcatq.dll
<SYSTEM32>\cic.dll
<SYSTEM32>\certcli.dll
<SYSTEM32>\certmgr.msc
<SYSTEM32>\certmgr.dll
<SYSTEM32>\cdplayer.exe.manifest
<SYSTEM32>\cdm.dll
<SYSTEM32>\cdmodem.dll
<SYSTEM32>\cdosys.dll
<SYSTEM32>\chcp.com
<SYSTEM32>\chkdsk.exe
<SYSTEM32>\chkntfs.exe
<SYSTEM32>\charmap.exe
<SYSTEM32>\cewmdm.dll
<SYSTEM32>\cfgmgr32.dll
<SYSTEM32>\cfgbkend.dll
<SYSTEM32>\cnetcfg.dll
<SYSTEM32>\cmstp.exe
<SYSTEM32>\comaddin.dll
<SYSTEM32>\colbact.dll
<SYSTEM32>\cmsetACL.dll
<SYSTEM32>\cnbjmon.dll
<SYSTEM32>\cnvfat.dll
<SYSTEM32>\commdlg.dll
<SYSTEM32>\comp.exe
<SYSTEM32>\comdlg32.dll
<SYSTEM32>\comm.drv
<SYSTEM32>\comctl32.dll
<SYSTEM32>\comcat.dll
<SYSTEM32>\command.com
<SYSTEM32>\cmutil.dll
<SYSTEM32>\cmcfg32.dll
<SYSTEM32>\cmd.exe
<SYSTEM32>\cmdial32.dll
<SYSTEM32>\clusapi.dll
<SYSTEM32>\clipsrv.exe
<SYSTEM32>\cliconfg.exe
<SYSTEM32>\clipbrd.exe
<SYSTEM32>\cmos.ram
<SYSTEM32>\cmpbk32.dll
<SYSTEM32>\cmprops.dll
<SYSTEM32>\cmmon32.exe
<SYSTEM32>\cmdlib.wsc
<SYSTEM32>\cmmgr32.hlp
<SYSTEM32>\cmdl32.exe
<SYSTEM32>\localsec.dll
<SYSTEM32>\loghours.dll
<SYSTEM32>\localui.dll
<SYSTEM32>\localspl.dll
<SYSTEM32>\lmrt.dll
<SYSTEM32>\locale.nls
<SYSTEM32>\loadperf.dll
<SYSTEM32>\logman.exe
<SYSTEM32>\logoff.exe
<SYSTEM32>\login.cmd
<SYSTEM32>\logon.scr
<SYSTEM32>\locator.exe
<SYSTEM32>\lodctr.exe
<SYSTEM32>\logagent.exe
<SYSTEM32>\loadfix.com
<SYSTEM32>\libpq82.dll
<SYSTEM32>\licdll.dll
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\msn7.cat
<SYSTEM32>\libmysql.dll
<SYSTEM32>\libintl3.dll
<SYSTEM32>\libisccc.dll
<SYSTEM32>\liblwres.dll
<SYSTEM32>\lights.exe
<SYSTEM32>\linkinfo.dll
<SYSTEM32>\lnkstub.exe
<SYSTEM32>\licwmi.dll
<SYSTEM32>\lmhsvc.dll
<SYSTEM32>\libxml2.dll
<SYSTEM32>\licmgr10.dll
<SYSTEM32>\makecab.exe
<SYSTEM32>\mapistub.dll
<SYSTEM32>\mcd32.dll
<SYSTEM32>\mapi32.dll
<SYSTEM32>\magnify.exe
<SYSTEM32>\main.cpl
<SYSTEM32>\mag_hook.dll
<SYSTEM32>\mciavi32.dll
<SYSTEM32>\mciqtz32.dll
<SYSTEM32>\mciwave.dll
<SYSTEM32>\mciole32.dll
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\MSTSWEB.CAT
<SYSTEM32>\mcdsrv32.dll
<SYSTEM32>\mciole16.dll
<SYSTEM32>\lzexpand.dll
<SYSTEM32>\lpq.exe
<SYSTEM32>\lpr.exe
<SYSTEM32>\lprmonui.dll
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\msn9.cat
<SYSTEM32>\logonui.exe.manifest
<SYSTEM32>\logonui.exe
<SYSTEM32>\lpk.dll
<SYSTEM32>\lsass.exe
<SYSTEM32>\l_except.nls
<SYSTEM32>\lusrmgr.msc
<SYSTEM32>\l_intl.nls
<SYSTEM32>\lprhelp.dll
<SYSTEM32>\lsasrv.dll
<SYSTEM32>\lz32.dll
<SYSTEM32>\libisccfg.dll
<SYSTEM32>\kbdtat.dll
<SYSTEM32>\kbdtuq.dll
<SYSTEM32>\kbdur.dll
<SYSTEM32>\kbdus.dll
<SYSTEM32>\kbdsmsfi.dll
<SYSTEM32>\kbdsw.dll
<SYSTEM32>\kbdtuf.dll
<SYSTEM32>\kbduk.dll
<SYSTEM32>\kbdukx.dll
<SYSTEM32>\kbdusx.dll
<SYSTEM32>\kbduzb.dll
<SYSTEM32>\kbdusl.dll
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\mediactr.cat
<SYSTEM32>\kbdusr.dll
<SYSTEM32>\kbdsl1.dll
<SYSTEM32>\kbdpo.dll
<SYSTEM32>\kbdro.dll
<SYSTEM32>\kbdru.dll
<SYSTEM32>\kbdpl1.dll
<SYSTEM32>\kbdnec.dll
<SYSTEM32>\kbdno.dll
<SYSTEM32>\kbdno1.dll
<SYSTEM32>\kbdsg.dll
<SYSTEM32>\kbdsmsno.dll
<SYSTEM32>\kbdsp.dll
<SYSTEM32>\kbdsl.dll
<SYSTEM32>\kbdpl.dll
<SYSTEM32>\kbdru1.dll
<SYSTEM32>\kbdsf.dll
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\MSMSGS.CAT
<SYSTEM32>\laprxy.dll
<SYSTEM32>\libgcc_s.dll
<SYSTEM32>\langwrbk.dll
<SYSTEM32>\label.exe
<SYSTEM32>\lanman.drv
<SYSTEM32>\libdns.dll
<SYSTEM32>\libgnarl-2009.dll
<SYSTEM32>\libintl-2.dll
<SYSTEM32>\libisc.dll
<SYSTEM32>\libgnat-2009.dll
<SYSTEM32>\libeay32.dll
<SYSTEM32>\libiconv-2.dll
<SYSTEM32>\libiconv2.dll
<SYSTEM32>\l3codecx.ax
<SYSTEM32>\kbdycl.dll
<SYSTEM32>\key01.sys
<SYSTEM32>\keyboard.sys
<SYSTEM32>\kernel32.dll
<SYSTEM32>\kd1394.dll
<SYSTEM32>\kbdycc.dll
<SYSTEM32>\keyboard.drv
<SYSTEM32>\korean.uce
<SYSTEM32>\l3codeca.acm
<SYSTEM32>\krnl386.exe
<SYSTEM32>\keymgr.dll
<SYSTEM32>\kerberos.dll
<SYSTEM32>\kdcom.dll
<SYSTEM32>\kmddsp.tsp
<SYSTEM32>\mpg2splt.ax
<SYSTEM32>\mpg4ds32.ax
<SYSTEM32>\mpg4dmod.dll
<SYSTEM32>\mouse.drv
<SYSTEM32>\mpeg2data.ax
<SYSTEM32>\mp43dmod.dll
<SYSTEM32>\mp4sdmod.dll
<SYSTEM32>\mprdim.dll
<SYSTEM32>\mqdscli.dll
<SYSTEM32>\mprapi.dll
<SYSTEM32>\mpr.dll
<SYSTEM32>\mplay32.exe
<SYSTEM32>\mpnotify.exe
<SYSTEM32>\mprddm.dll
<SYSTEM32>\mountvol.exe
<SYSTEM32>\mobsync.dll
<SYSTEM32>\mnmsrvc.exe
<SYSTEM32>\mobsync.exe
<SYSTEM32>\mmtask.tsk
<SYSTEM32>\mmsys.cpl
<SYSTEM32>\mmsystem.dll
<SYSTEM32>\mmutilse.dll
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\netfx.cat
<SYSTEM32>\more.com
<SYSTEM32>\moricons.dll
<SYSTEM32>\modex.dll
<SYSTEM32>\mnmdd.dll
<SYSTEM32>\modemui.dll
<SYSTEM32>\mode.com
<SYSTEM32>\mqtgsvc.exe
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5IIS.CAT
<SYSTEM32>\mqsnap.dll
<SYSTEM32>\mqrtdep.dll
<SYSTEM32>\mqprfsym.h
<SYSTEM32>\mqperf.dll
<SYSTEM32>\mqrt.dll
<SYSTEM32>\mqutil.dll
<SYSTEM32>\msaatext.dll
<SYSTEM32>\mrinfo.exe
<SYSTEM32>\mqtrig.dll
<SYSTEM32>\mqsvc.exe
<SYSTEM32>\mqsec.dll
<SYSTEM32>\mqupgrd.dll
<SYSTEM32>\mqqm.dll
<SYSTEM32>\mqad.dll
<SYSTEM32>\mqcertui.dll
<SYSTEM32>\mprmsg.dll
<SYSTEM32>\mqise.dll
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5.CAT
<SYSTEM32>\mqbkup.exe
<SYSTEM32>\mprui.dll
<SYSTEM32>\mqlogmgr.dll
<SYSTEM32>\mqoa10.tlb
<SYSTEM32>\mqperf.ini
<SYSTEM32>\mqoa20.tlb
<SYSTEM32>\mqgentr.dll
<SYSTEM32>\mqoa.dll
<SYSTEM32>\mqoa.tlb
<SYSTEM32>\mmfutil.dll
<SYSTEM32>\mfc100esn.dll
<SYSTEM32>\mfc100ita.dll
<SYSTEM32>\mfc100fra.dll
<SYSTEM32>\mfc100d.dll
<SYSTEM32>\mfc100enu.dll
<SYSTEM32>\mf3216.dll
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\msxpsdrv.CAT
<SYSTEM32>\mfc100ud.dll
<SYSTEM32>\mfc71u.dll
<SYSTEM32>\mfc71.dll
<SYSTEM32>\mfc40.dll
<SYSTEM32>\mfc100kor.dll
<SYSTEM32>\mfc100rus.dll
<SYSTEM32>\mfc100jpn.dll
<SYSTEM32>\mfc100chs.dll
<SYSTEM32>\mciseq.drv
<SYSTEM32>\mdhcp.dll
<SYSTEM32>\mciseq.dll
<SYSTEM32>\mcicda.dll
<SYSTEM32>\mchgrcoi.dll
<SYSTEM32>\mcastmib.dll
<SYSTEM32>\mciavi.drv
<SYSTEM32>\mfc100.dll
<SYSTEM32>\mfc100cht.dll
<SYSTEM32>\mfc100deu.dll
<SYSTEM32>\mdwmdmsp.dll
<SYSTEM32>\mdminst.dll
<SYSTEM32>\mciwave.drv
<SYSTEM32>\mem.exe
<SYSTEM32>\mlang.dll
<SYSTEM32>\mll_hp.dll
<SYSTEM32>\mmcshext.dll
<SYSTEM32>\mll_qic.dll
<SYSTEM32>\mingwm10.dll
<SYSTEM32>\mimefilt.dll
<SYSTEM32>\mll_mtf.dll
<SYSTEM32>\mmc.exe
<SYSTEM32>\mmdriver.inf
<SYSTEM32>\mmdrv.dll
<SYSTEM32>\mmcndmgr.dll
<SYSTEM32>\mlang.dat
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\MW770.CAT
<SYSTEM32>\mmcbase.dll
<SYSTEM32>\milcore.dll
<SYSTEM32>\mfcm100d.dll
<SYSTEM32>\mfcm100.dll
<SYSTEM32>\mfcsubs.dll
<SYSTEM32>\mfc42.dll
<SYSTEM32>\mfc40u.dll
<SYSTEM32>\mfc42u.dll
<SYSTEM32>\mfc100u.dll
<SYSTEM32>\midimap.dll
<SYSTEM32>\miglibnt.dll
<SYSTEM32>\migpwd.exe
<SYSTEM32>\mgmtapi.dll
<SYSTEM32>\mfcm100u.dll
<SYSTEM32>\mfcm100ud.dll
<SYSTEM32>\mib.bin
<SYSTEM32>\kbdne.dll
<SYSTEM32>\ideograf.uce
<SYSTEM32>\icwphbk.dll
<SYSTEM32>\ieakeng.dll
<SYSTEM32>\CatRoot\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\TimeStamp
<SYSTEM32>\icmui.dll
<SYSTEM32>\icmp.dll
<SYSTEM32>\ie4uinit.exe
<SYSTEM32>\ieencode.dll
<SYSTEM32>\iernonce.dll
<SYSTEM32>\iedkcs32.dll
<SYSTEM32>\ieakui.dll
<SYSTEM32>\idq.dll
<SYSTEM32>\icwdial.dll
<SYSTEM32>\ieaksie.dll
<SYSTEM32>\icfgnt5.dll
<SYSTEM32>\iassam.dll
<SYSTEM32>\iassdo.dll
<SYSTEM32>\iasrecst.dll
<SYSTEM32>\iasrad.dll
<SYSTEM32>\html.iec
<SYSTEM32>\iaspolcy.dll
<SYSTEM32>\iasnap.dll
<SYSTEM32>\icaapi.dll
<SYSTEM32>\iccvid.dll
<SYSTEM32>\icm32.dll
<SYSTEM32>\icardagt.exe
<SYSTEM32>\icardres.dll
<SYSTEM32>\iassvcs.dll
<SYSTEM32>\icardres.dll.mui
<SYSTEM32>\inetcplc.dll
<SYSTEM32>\inetmib1.dll
<SYSTEM32>\inetpp.dll
<SYSTEM32>\inetppui.dll
<SYSTEM32>\ifmon.dll
<SYSTEM32>\inetcomm.dll
<SYSTEM32>\inetcpl.cpl
<SYSTEM32>\infosoft.dll
<SYSTEM32>\intl.cpl
<SYSTEM32>\iologmsg.dll
<SYSTEM32>\ipconfig.exe
<SYSTEM32>\infocardapi.dll
<SYSTEM32>\infocardcpl.cpl
<SYSTEM32>\inetres.dll
<SYSTEM32>\ils.dll
<SYSTEM32>\iexpress.exe
<SYSTEM32>\ifsutil.dll
<SYSTEM32>\imm32.dll
<SYSTEM32>\igmpagnt.dll
<SYSTEM32>\iepeers.dll
<SYSTEM32>\iesetup.dll
<SYSTEM32>\ieuinit.inf
<SYSTEM32>\inetcfg.dll
<SYSTEM32>\iissuba.dll
<SYSTEM32>\imapi.exe
<SYSTEM32>\imagehlp.dll
<SYSTEM32>\imeshare.dll
<SYSTEM32>\imgutil.dll
<SYSTEM32>\imaadp32.acm
<SYSTEM32>\hypertrm.dll
<SYSTEM32>\geo.nls
<SYSTEM32>\gpkcsp.dll
<SYSTEM32>\getmac.exe
<SYSTEM32>\glu32.dll
<SYSTEM32>\gdi32.dll
<SYSTEM32>\gcdef.dll
<SYSTEM32>\gb2312.uce
<SYSTEM32>\getuname.dll
<SYSTEM32>\gptext.dll
<SYSTEM32>\gpkrsrc.dll
<SYSTEM32>\gpedit.msc
<SYSTEM32>\gpresult.exe
<SYSTEM32>\gpedit.dll
<SYSTEM32>\glmf32.dll
<SYSTEM32>\gdi.exe
<SYSTEM32>\fmifs.dll
<SYSTEM32>\fsquirt.exe
<SYSTEM32>\fsmgmt.msc
<SYSTEM32>\fontext.dll
<SYSTEM32>\framebuf.dll
<SYSTEM32>\format.com
<SYSTEM32>\forcedos.exe
<SYSTEM32>\ftsrch.dll
<SYSTEM32>\fsutil.exe
<SYSTEM32>\gdiplus.dll
<SYSTEM32>\g711codc.ax
<SYSTEM32>\ftp.exe
<SYSTEM32>\fwcfg.dll
<SYSTEM32>\fsusd.dll
<SYSTEM32>\homepage.inf
<SYSTEM32>\hnetmon.dll
<SYSTEM32>\htui.dll
<SYSTEM32>\hnetwiz.dll
<SYSTEM32>\hhsetup.dll
<SYSTEM32>\hostname.exe
<SYSTEM32>\hnetcfg.dll
<SYSTEM32>\iashlpr.dll
<SYSTEM32>\iac25_32.ax
<SYSTEM32>\iasads.dll
<SYSTEM32>\hticons.dll
<SYSTEM32>\hotplug.dll
<SYSTEM32>\httpapi.dll
<SYSTEM32>\iasacct.dll
<SYSTEM32>\hlink.dll
<SYSTEM32>\gpupdate.exe
<SYSTEM32>\h323.tsp
<SYSTEM32>\help.exe
<SYSTEM32>\graphics.pro
<SYSTEM32>\graftabl.com
<SYSTEM32>\graphics.com
<SYSTEM32>\grpconv.exe
<SYSTEM32>\himem.sys
<SYSTEM32>\h323msp.dll
<SYSTEM32>\hhctrl.ocx
<SYSTEM32>\hdwwiz.cpl
<SYSTEM32>\hid.dll
<SYSTEM32>\hidphone.tsp
<SYSTEM32>\hal.dll
<SYSTEM32>\kbddv.dll
<SYSTEM32>\kbdda.dll
<SYSTEM32>\kbdcz1.dll
<SYSTEM32>\kbdes.dll
<SYSTEM32>\kbdfi1.dll
<SYSTEM32>\kbdcz.dll
<SYSTEM32>\kbdfo.dll
<SYSTEM32>\kbdgkl.dll
<SYSTEM32>\kbdhe319.dll
<SYSTEM32>\kbdhe.dll
<SYSTEM32>\kbdgae.dll
<SYSTEM32>\kbdfi.dll
<SYSTEM32>\kbdfr.dll
<SYSTEM32>\kbdfc.dll
<SYSTEM32>\kbdest.dll
<SYSTEM32>\KBDAL.DLL
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB942288-v3.cat
<SYSTEM32>\kbdblr.dll
<SYSTEM32>\kb16.com
<SYSTEM32>\kbdbe.dll
<SYSTEM32>\kanji_2.uce
<SYSTEM32>\kbdbu.dll
<SYSTEM32>\kbdcz2.dll
<SYSTEM32>\kbdcr.dll
<SYSTEM32>\kbdcan.dll
<SYSTEM32>\kbdca.dll
<SYSTEM32>\kbdbene.dll
<SYSTEM32>\kbdbr.dll
<SYSTEM32>\kanji_1.uce
<SYSTEM32>\kbdla.dll
<SYSTEM32>\kbdmaori.dll
<SYSTEM32>\kbdmlt47.dll
<SYSTEM32>\kbdlt1.dll
<SYSTEM32>\kbdkaz.dll
<SYSTEM32>\kbdkyr.dll
<SYSTEM32>\kbdit142.dll
<SYSTEM32>\kbdmlt48.dll
<SYSTEM32>\kbdmac.dll
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\MAPIMIG.CAT
<SYSTEM32>\kbdmon.dll
<SYSTEM32>\kbdlt.dll
<SYSTEM32>\kbdlv.dll
<SYSTEM32>\kbdlv1.dll
<SYSTEM32>\kbdit.dll
<SYSTEM32>\kbdhe220.dll
<SYSTEM32>\kbdhela2.dll
<SYSTEM32>\kbdhept.dll
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB954550-v5.cat
<SYSTEM32>\kbdhela3.dll
<SYSTEM32>\kbdgr1.dll
<SYSTEM32>\kbdgr.dll
<SYSTEM32>\kbdhu1.dll
<SYSTEM32>\kbdinben.dll
<SYSTEM32>\kbdinmal.dll
<SYSTEM32>\kbdinbe1.dll
<SYSTEM32>\kbdhu.dll
<SYSTEM32>\kbdir.dll
<SYSTEM32>\kbdic.dll
<SYSTEM32>\kbdaze.dll
<SYSTEM32>\ipxmontr.dll
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\HPCRDP.CAT
<SYSTEM32>\ipxrtmgr.dll
<SYSTEM32>\ipsmsnap.dll
<SYSTEM32>\ipv6mon.dll
<SYSTEM32>\ipsec6.exe
<SYSTEM32>\ipv6.exe
<SYSTEM32>\ir41_32.ax
<SYSTEM32>\ir32_32.dll
<SYSTEM32>\ipxroute.exe
<SYSTEM32>\ipxpromn.dll
<SYSTEM32>\ipxrip.dll
<SYSTEM32>\ipxwan.dll
<SYSTEM32>\ipxsap.dll
<SYSTEM32>\ipsecsnp.dll
<SYSTEM32>\input.dll
<SYSTEM32>\initpki.dll
<SYSTEM32>\iphlpapi.dll
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\FP4.CAT
<SYSTEM32>\inseng.dll
<SYSTEM32>\instcat.sql
<SYSTEM32>\ipconf.tsp
<SYSTEM32>\iprop.dll
<SYSTEM32>\ipmontr.dll
<SYSTEM32>\ipsecsvc.dll
<SYSTEM32>\iprtrmgr.dll
<SYSTEM32>\ipnathlp.dll
<SYSTEM32>\ippromon.dll
<SYSTEM32>\iprtprio.dll
<SYSTEM32>\jgpl400.dll
<SYSTEM32>\jet500.dll
<SYSTEM32>\jobexec.dll
<SYSTEM32>\jgsh400.dll
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\IMS.CAT
<SYSTEM32>\iyuv_32.dll
<SYSTEM32>\jgaw400.dll
<SYSTEM32>\joy.cpl
<SYSTEM32>\jsproxy.dll
<SYSTEM32>\kbdazel.dll
<SYSTEM32>\jscript.dll
<SYSTEM32>\jgsd400.dll
<SYSTEM32>\jgdw400.dll
<SYSTEM32>\jgmd400.dll
<SYSTEM32>\ixsso.dll
<SYSTEM32>\isign32.dll
<SYSTEM32>\iuengine.dll
<SYSTEM32>\itss.dll
<SYSTEM32>\ir50_32.dll
<SYSTEM32>\ir41_qc.dll
<SYSTEM32>\ir41_qcx.dll
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\IASNT4.CAT
<SYSTEM32>\itircl.dll
<SYSTEM32>\irprops.cpl
<SYSTEM32>\ivfsrc.ax
<SYSTEM32>\isrdbg32.dll
<SYSTEM32>\ir50_qc.dll
<SYSTEM32>\irclass.dll
<SYSTEM32>\ir50_qcx.dll

Modifies the HOSTS file.

Miscellaneous:

Searches for the following windows:

ClassName: 'Shell_TrayWnd' WindowName: '(null)'

TECHNOLOGIES

TERMINOLOGIE

COURS ET EDU

MYTHES

Technical Information

Recommandations pour le traitement

Free trial