Trojan.KillFiles.14153

Technical Information

Malicious functions:

Attempts to shut down the Windows operating system.

Modifies file system :

Creates the following files:

\Device\HarddiskVolume3\music\Би2\Би-2 - Елочный сок.mp3
\Device\HarddiskVolume3\music\Агент Смит\2007 Город Не Спит\index.txt
\Device\HarddiskVolume3\music\Би2\Би-2 - Моя любовь.mp3
\Device\HarddiskVolume3\music\Тату\Liudi invalidy\01 - Люди инвалиды (intro).mp3
\Device\HarddiskVolume3\music\Би2\Би-2 - Последний герой.mp3
\Device\HarddiskVolume3\music\Агент Смит\2007 Город Не Спит\cover.jpg
\Device\HarddiskVolume3\music\Агент Смит\2007 Город Не Спит\02-agent_smith_-_gorod_ne_spit.mp3
\Device\HarddiskVolume3\music\Агент Смит\2007 Город Не Спит\01-agent_smith_-_perekrestok.mp3
\Device\HarddiskVolume3\music\Агент Смит\2007 Город Не Спит\03-agent_smith_-_preved.mp3
\Device\HarddiskVolume3\music\Агент Смит\2007 Город Не Спит\11-agent_smith_-_10_let_nazad.mp3
\Device\HarddiskVolume3\music\Агент Смит\2007 Город Не Спит\04-agent_smith_-_ya_zdes'.mp3
\Device\HarddiskVolume3\music\Тату\Liudi invalidy\02 - Новая модель.mp3
\Device\HarddiskVolume3\music\Тату\Liudi invalidy\10 - Что Не Хватает.mp3
\Device\HarddiskVolume3\music\Тату\Liudi invalidy\09 - All about us.mp3
\Device\HarddiskVolume3\music\Тату\Liudi invalidy\11 - Люди инвалиды.mp3
C:\tmp.tmp
<Current directory>\$$a.bat
\Device\HarddiskVolume3\music\Тату\Liudi invalidy\08 - Вся Моя Любовь.mp3
\Device\HarddiskVolume3\music\Тату\Liudi invalidy\04 - Loves Me Not.mp3
\Device\HarddiskVolume3\music\Тату\Liudi invalidy\03 - Обезьянка Ноль.mp3
\Device\HarddiskVolume3\music\Тату\Liudi invalidy\05 - Космос.mp3
\Device\HarddiskVolume3\music\Тату\Liudi invalidy\07 - Ничья.mp3
\Device\HarddiskVolume3\music\Тату\Liudi invalidy\06 - Ты согласна.mp3
\Device\HarddiskVolume3\music\Armin van Buuren\Armin van Buuren - 10 years\Bonus\02 Armin van Buuren - Communication (Original).mp3
\Device\HarddiskVolume3\music\Armin van Buuren\Armin van Buuren - 10 years\Bonus\01 Armin van Buuren - Sail (Carl B Remix).mp3
\Device\HarddiskVolume3\music\Armin van Buuren\Armin van Buuren - 10 years\Bonus\03 Armin van Buuren - Sound Of Goodbye (Above & Beyond Remix).mp3
\Device\HarddiskVolume3\music\Armin van Buuren\Armin van Buuren - 10 years\Bonus\Armin van Buuren - 10 Years.m3u
\Device\HarddiskVolume3\music\Armin van Buuren\Armin van Buuren - 10 years\Bonus\04 Armin van Buuren - Blue Fear (Agnelli & Nelson Remix).mp3
\Device\HarddiskVolume3\books\Программирование на языке Visual C++ - 2009.pdf
\Device\Mup\BVNSEUHJ*\MAILSLOT\NET\NETLOGON
%TEMP%\crux_remake.ini
<Current directory>\tmp.txt
\Device\HarddiskVolume3\books\SpeakOutWorkbook.pdf
\Device\HarddiskVolume3\books\SpeakOut.pdf
\Device\HarddiskVolume3\music\Armin van Buuren\Armin van Buuren - 10 years\CD1\01 Armin van Buuren - Hymne.mp3
\Device\HarddiskVolume3\music\DJ Nil Виниловые пляски - Жара\05 Martin Solveig - Rocking Music (rmx).mp3
\Device\HarddiskVolume3\music\DJ Nil Виниловые пляски - Жара\04 Bananarama - Move In My Direction (The Lovefreekz Club Mix).mp3
\Device\HarddiskVolume3\music\DJ Nil Виниловые пляски - Жара\13 Modjo - Lady Hear Me Tonight 2006 (Choo Choo's Original Recipe Mix).mp3
\Device\HarddiskVolume3\music\DJ Nil Виниловые пляски - Жара\zara.jpg
\Device\HarddiskVolume3\music\DJ Nil Виниловые пляски - Жара\Nil_zara.nfo
\Device\HarddiskVolume3\music\DJ Nil Виниловые пляски - Жара\03 Justin Solveig - I Like Something Better.mp3
\Device\HarddiskVolume3\music\Armin van Buuren\Armin van Buuren - 10 years\CD1\03 Armin van Buuren - Love You More (feat. Racoon).mp3
\Device\HarddiskVolume3\music\Armin van Buuren\Armin van Buuren - 10 years\CD1\02 Armin van Buuren - Sail.mp3
\Device\HarddiskVolume3\music\Armin van Buuren\Armin van Buuren - 10 years\CD1\05 Armin van Buuren - Yet Another Day (feat. Ray Wilson).mp3
\Device\HarddiskVolume3\music\DJ Nil Виниловые пляски - Жара\02 Bob Sinclar feat. Steve Edwards - World Hold On.mp3
\Device\HarddiskVolume3\music\DJ Nil Виниловые пляски - Жара\01 Sunlounger - White Sand (DJ Shah's Original Mix).mp3

Deletes the following files:

<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_302.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_301.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_300.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_303.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_311.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_310.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_309.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_298.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_292.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_291.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_290.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_293.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_297.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_295.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_294.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_312.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_326.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_325.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_324.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_327.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_331.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_329.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_328.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_323.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_317.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_316.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_315.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_318.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_321.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_320.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_319.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_289.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBIC4_8.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBIC4_7.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBIC4_6.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBMR284.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBPC4_1.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBMR310.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBMR285.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBIC4_5.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR346.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR342.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR339.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBIC4_1.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBIC4_4.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBIC4_3.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBIC4_2.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBPC4_2.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_284.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_283.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_282.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_285.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_288.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_287.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_286.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_281.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBPV4.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBPV3.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBPCOMM.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_274.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_280.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_279.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_276.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\HPZ3Awn7.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\hpfprw73.dll.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\HPFIME50.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\HPZEVW71.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\hpzlaw71.dll.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\HPZEVWN7.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\hpzevw72.dll.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\hpfiew73.dll.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\hpD5400t.dll.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\hpd2600t.dll.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\hpc6300t.dll.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\hpd7500t.dll.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\hpfiew71.dll.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\hpfevw73.dll.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\hpf4400t.dll.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\HPZLAwn7.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\kyw7fr04.dll.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\kyw7fr03.dll.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\KYW7FR02.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\KYW7FRES.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\lxkpsui.dll.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\lxkpclui.dll.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\lxkpclrs.dll.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\KO0C0001.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\hpzprw72.dll.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\hpzprw71.dll.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\HPZLSWN7.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\HPZPRwn7.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\jnwdui.dll.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\HPZUIWN7.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\HPZUIW71.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\hpc5500t.dll.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_342.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_341.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_340.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_346.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\EP7RES01.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\EP7RES00.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNN0B007.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_339.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_334.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_333.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_332.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_335.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_338.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_337.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBP_336.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\EP7UIP00.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\hpb8500t.dll.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\hp8500nt.dll.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\hp8500gt.dll.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\hpc309at.dll.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\hpc5300t.dll.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\hpc4600t.dll.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\hpc4500t.dll.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\hp8500at.dll.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\hp6000at.dll.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\FXUCU001.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\FXSRES.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\hp6000nt.dll.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\hp8000at.dll.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\hp6500nt.dll.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\hp6500at.dll.mui
<SYSTEM32>\migwiz\replacementmanifests\Microsoft-Windows-GameUXMig\gameuxmig.dll
<SYSTEM32>\Macromed\Flash\plugin.vch
<SYSTEM32>\Macromed\Flash\NPSWF32_14_0_0_145.dll
<SYSTEM32>\Msdtc\MSDTC.LOG
<SYSTEM32>\NetworkList\Icons\{39E06F95-B345-445C-9304-A1FBB62795F6}_16.bin
<SYSTEM32>\MUI\0409\mscoreer.dll
<SYSTEM32>\Msdtc\Trace\dtctrace.log
<SYSTEM32>\Macromed\Flash\mms.cfg
<SYSTEM32>\Macromed\Flash\FlashInstall.log
<SYSTEM32>\LogFiles\WMI\Terminal-Services-Unified-APIs.etl
<SYSTEM32>\LogFiles\WMI\Terminal-Services-SessionEnv.etl
<SYSTEM32>\Macromed\Flash\flashplayer.xpt
<SYSTEM32>\Macromed\Flash\FlashUtil32_14_0_0_145_Plugin.exe
<SYSTEM32>\Macromed\Flash\FlashPlayerUpdateService.exe
<SYSTEM32>\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe
<SYSTEM32>\NetworkList\Icons\{39E06F95-B345-445C-9304-A1FBB62795F6}_24.bin
<SYSTEM32>\spool\drivers\w32x86\3\FXSRES.DLL
<SYSTEM32>\spool\drivers\w32x86\3\FXSDRV.DLL
<SYSTEM32>\spool\drivers\w32x86\3\FXSAPI.DLL
<SYSTEM32>\spool\drivers\w32x86\3\FXSTIFF.DLL
<SYSTEM32>\spool\drivers\w32x86\3\JNWDRV.dll
<SYSTEM32>\spool\drivers\w32x86\3\FXSWZRD.DLL
<SYSTEM32>\spool\drivers\w32x86\3\FXSUI.DLL
<SYSTEM32>\SMI\Store\Machine\SCHEMA.DAT
<SYSTEM32>\NetworkList\Icons\{61DE2BA6-9FED-4726-A751-275C25836724}_16.bin
<SYSTEM32>\NetworkList\Icons\{39E06F95-B345-445C-9304-A1FBB62795F6}_48.bin
<SYSTEM32>\NetworkList\Icons\{39E06F95-B345-445C-9304-A1FBB62795F6}_32.bin
<SYSTEM32>\NetworkList\Icons\{61DE2BA6-9FED-4726-A751-275C25836724}_24.bin
<SYSTEM32>\Recovery\ReAgent.xml
<SYSTEM32>\NetworkList\Icons\{61DE2BA6-9FED-4726-A751-275C25836724}_48.bin
<SYSTEM32>\NetworkList\Icons\{61DE2BA6-9FED-4726-A751-275C25836724}_32.bin
<SYSTEM32>\LogFiles\WMI\Terminal-Services-RPC-Client.etl
<SYSTEM32>\LogFiles\Scm\d3cf771c-0fad-4305-b74a-61eee285d6b0
<SYSTEM32>\LogFiles\Scm\d21f6024-191f-4454-bbbc-09a650da2549
<SYSTEM32>\LogFiles\Scm\cc99c307-6ad4-4fe5-afd8-ad22a19dfb5d
<SYSTEM32>\LogFiles\Scm\d622195c-d680-4fea-9c56-59660c7c9e94
<SYSTEM32>\LogFiles\Scm\de8699d2-8a05-42f7-8a85-5162af47d26a
<SYSTEM32>\LogFiles\Scm\d8bb5b7f-d0ca-4f67-a3d7-73e1d05f63da
<SYSTEM32>\LogFiles\Scm\d7f79455-96c8-40de-99bc-ec5a32ee6a54
<SYSTEM32>\LogFiles\Scm\c90440a0-6d8f-423f-8f42-83eef05ce708
<SYSTEM32>\LogFiles\Scm\ae29f049-46e9-4ad8-9674-367d92f03827
<SYSTEM32>\LogFiles\Scm\ab771a9f-fb0f-4fa1-8b5f-48186615901e
<SYSTEM32>\LogFiles\Scm\a8f5ef20-3b8b-47a6-bf61-750e1bfe084b
<SYSTEM32>\LogFiles\Scm\b02dde9d-28c9-4de8-beb8-21fa61b9722d
<SYSTEM32>\LogFiles\Scm\be9725df-ce03-4d6d-9862-d7a98b23ad8f
<SYSTEM32>\LogFiles\Scm\bba67ad0-4ba0-4b44-827b-ff419b70c057
<SYSTEM32>\LogFiles\Scm\b50f5cf4-2f50-4ea3-a053-017565cae104
<SYSTEM32>\LogFiles\Scm\de8bae53-2809-4f75-85ef-427d364b9b2c
<SYSTEM32>\LogFiles\Scm\SCM.EVM.2
<SYSTEM32>\LogFiles\Scm\SCM.EVM.1
<SYSTEM32>\LogFiles\Scm\SCM.EVM
<SYSTEM32>\LogFiles\Scm\SCM.EVM.3
<SYSTEM32>\LogFiles\WMI\Terminal-Services-IP-Virtualization.etl
<SYSTEM32>\LogFiles\WMI\Terminal-Services-Core.etl
<SYSTEM32>\LogFiles\Scm\SCM.EVM.4
<SYSTEM32>\LogFiles\Scm\ffb8486a-9861-4b82-be38-c7f8fb1b6605
<SYSTEM32>\LogFiles\Scm\e8164c0d-216c-4b6b-9eb8-31bf958b8014
<SYSTEM32>\LogFiles\Scm\e79b2998-8f63-451a-a56d-26edc0a5098a
<SYSTEM32>\LogFiles\Scm\e6f3a527-8b0b-43fa-94eb-584032761924
<SYSTEM32>\LogFiles\Scm\e9e508c5-cd42-41eb-a336-410712c64ddb
<SYSTEM32>\LogFiles\Scm\f93c7104-998a-4a38-b935-775a3138b3c3
<SYSTEM32>\LogFiles\Scm\f1369a11-e983-4458-b390-712efa1cba44
<SYSTEM32>\LogFiles\Scm\edcb0c28-83e6-4f24-b18d-78264550a908
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR302.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR301.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR300.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR303.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR311.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR310.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR309.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR297.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR289.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR288.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR286.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR290.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR294.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR293.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR292.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR312.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR331.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR328.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR327.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR332.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR335.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR334.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR333.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR326.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR318.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR316.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR315.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR319.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR325.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR323.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR320.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR285.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\UNIDRV.DLL
<SYSTEM32>\spool\drivers\w32x86\3\STDSCHMX.GDL
<SYSTEM32>\spool\drivers\w32x86\3\STDSCHEM.GDL
<SYSTEM32>\spool\drivers\w32x86\3\unidrv.hlp
<SYSTEM32>\spool\drivers\w32x86\3\XPSSVCS.DLL
<SYSTEM32>\spool\drivers\w32x86\3\UNIRES.DLL
<SYSTEM32>\spool\drivers\w32x86\3\unidrvui.dll
<SYSTEM32>\spool\drivers\w32x86\3\STDNAMES.GPD
<SYSTEM32>\spool\drivers\w32x86\3\mxdwdui.BUD
<SYSTEM32>\spool\drivers\w32x86\3\mxdwdrv.dll
<SYSTEM32>\spool\drivers\w32x86\3\jnwdui.dll
<SYSTEM32>\spool\drivers\w32x86\3\mxdwdui.dll
<SYSTEM32>\spool\drivers\w32x86\3\STDDTYPE.GDL
<SYSTEM32>\spool\drivers\w32x86\3\mxdwdui.ini
<SYSTEM32>\spool\drivers\w32x86\3\mxdwdui.gpd
<SYSTEM32>\spool\drivers\w32x86\3\en-US\BRCI06UI.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR280.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR276.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR274.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR281.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR284.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR283.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR282.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\CNBBR273.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\BRCLUI05.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\brci14ui.dll.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\brci08ui.dll.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\BRCLUI06.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\BRUUI23A.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\BRPTUI2.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\brmzui13.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\LXKXLRES.DLL.mui
<SYSTEM32>\wdi\perftrack\Microsoft-Windows-Documents-Events.ptxml
<SYSTEM32>\wdi\perftrack\LDDMCore.ptxml
<SYSTEM32>\wdi\perftrack\ieframe.ptxml
<SYSTEM32>\wdi\perftrack\Microsoft-Windows-IE-F12-Provider.ptxml
<SYSTEM32>\wdi\perftrack\Microsoft-Windows-TabletPC-InputPanel-Events.ptxml
<SYSTEM32>\wdi\perftrack\Microsoft-Windows-NCSI.ptxml
<SYSTEM32>\wdi\perftrack\Microsoft-Windows-IE-HTMLRendering.ptxml
<SYSTEM32>\wdi\perftrack\Help-DataLayer.ptxml
<SYSTEM32>\wdi\perftrack\DXP-DeviceExperience.ptxml
<SYSTEM32>\wdi\perftrack\DriverFrameworks-UserMode.ptxml
<SYSTEM32>\wdi\perftrack\DisplaySwitch.ptxml
<SYSTEM32>\wdi\perftrack\ErrorReportingConsole.ptxml
<SYSTEM32>\wdi\perftrack\HealthCenterInstrumentation.ptxml
<SYSTEM32>\wdi\perftrack\HealthCenterCPLInstrumentation.ptxml
<SYSTEM32>\wdi\perftrack\ETWInstrumentation.ptxml
<SYSTEM32>\wdi\perftrack\Microsoft-Windows-VAN.ptxml
<SYSTEM32>\wdi\perftrack\provsvc.ptxml
<SYSTEM32>\wdi\perftrack\profsvc.ptxml
<SYSTEM32>\wdi\perftrack\prod_WMPPlayer.ptxml
<SYSTEM32>\wdi\perftrack\Services.ptxml
<SYSTEM32>\wdi\perftrack\Spux.ptxml
<SYSTEM32>\wdi\perftrack\Sidebar.ptxml
<SYSTEM32>\wdi\perftrack\ShellCoreInstrumentation.ptxml
<SYSTEM32>\wdi\perftrack\prod_Audio-AudioCore.ptxml
<SYSTEM32>\wdi\perftrack\NetworkConnectionsFolder.ptxml
<SYSTEM32>\wdi\perftrack\msdt.events.ptxml
<SYSTEM32>\wdi\perftrack\Microsoft-Windows-WLANConnectionFlow.ptxml
<SYSTEM32>\wdi\perftrack\NetworkDiagnosticsFramework.ptxml
<SYSTEM32>\wdi\perftrack\powercpl.ptxml
<SYSTEM32>\wdi\perftrack\NlaSvc.ptxml
<SYSTEM32>\wdi\perftrack\NetworkProfile.ptxml
<SYSTEM32>\wdi\perftrack\Display.ptxml
<SYSTEM32>\wbem\AutoRecover\807DD20ADF6F5D5EEA0C4E4CF016E69E.mof
<SYSTEM32>\wbem\AutoRecover\7C45C8B7490D3AD44A961494C7FBFAFD.mof
<SYSTEM32>\wbem\AutoRecover\779E080B33F322115205BB50F1E0B8D1.mof
<SYSTEM32>\wbem\AutoRecover\BBF206490BAA431B592F9A13534F43F6.mof
<SYSTEM32>\wbem\Performance\WmiApRpl.h
<SYSTEM32>\wbem\AutoRecover\D361F8B496FD6DAF7BEEF497E09C0DC1.mof
<SYSTEM32>\wbem\AutoRecover\CF881EBD6F50B8BAA9BD57DC3DAC5CB2.mof
<SYSTEM32>\wbem\AutoRecover\6F8564A71977AE6B940705DCC4847A8D.mof
<SYSTEM32>\wbem\AutoRecover\32C943873CC624333BD0BF2A77384240.mof
<SYSTEM32>\wbem\AutoRecover\2B8B1A8B0ACD3EE28B421D3918DC1F29.mof
<SYSTEM32>\wbem\AutoRecover\26A5A04A346330E389400293E01228AC.mof
<SYSTEM32>\wbem\AutoRecover\3FA3650B664BC96A8672EC85A7AE4225.mof
<SYSTEM32>\wbem\AutoRecover\6792FDA793556851BD20EA3DD8BD4F6B.mof
<SYSTEM32>\wbem\AutoRecover\542DC56D520FDDEDA279A0D2F398203D.mof
<SYSTEM32>\wbem\AutoRecover\47DDFF7276CF8C08F181DD23AF67B868.mof
<SYSTEM32>\wbem\Performance\WmiApRpl.ini
<SYSTEM32>\wdi\perftrack\comdlg32.ptxml
<SYSTEM32>\wdi\perftrack\authui.ptxml
<SYSTEM32>\wdi\perftrack\AppInfoEvents.ptxml
<SYSTEM32>\wdi\perftrack\Core-Fundamentals-ClientPerformance-Perftrack.ptxml
<SYSTEM32>\wdi\perftrack\DiagCpl.Events.ptxml
<SYSTEM32>\wdi\perftrack\DhcpClientDll.ptxml
<SYSTEM32>\wdi\perftrack\DeviceUx.ptxml
<SYSTEM32>\wdi\perftrack\AltTab.ptxml
<SYSTEM32>\wdi\LogFiles\BootCKCL.etl
<SYSTEM32>\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
<SYSTEM32>\wdi\BootPerformanceDiagnostics_SystemData.bin
<SYSTEM32>\wdi\LogFiles\ShutdownCKCL.etl
<SYSTEM32>\wdi\LogFiles\WdiContextLog.etl.003
<SYSTEM32>\wdi\LogFiles\WdiContextLog.etl.002
<SYSTEM32>\wdi\LogFiles\WdiContextLog.etl.001
<SYSTEM32>\winevt\Logs\Microsoft-Windows-CAPI2%4Operational.evtx
<SYSTEM32>\winevt\Logs\Microsoft-Windows-Application Server-Applications%4Operational.evtx
<SYSTEM32>\winevt\Logs\Microsoft-Windows-Application Server-Applications%4Admin.evtx
<SYSTEM32>\winevt\Logs\Microsoft-Windows-Diagnosis-Scripted%4Admin.evtx
<SYSTEM32>\winevt\Logs\Microsoft-Windows-International%4Operational.evtx
<SYSTEM32>\winevt\Logs\Microsoft-Windows-HomeGroup Control Panel%4Operational.evtx
<SYSTEM32>\winevt\Logs\Microsoft-Windows-Diagnosis-Scripted%4Operational.evtx
<SYSTEM32>\WindowsPowerShell\v1.0\Modules\PSDiagnostics\PSDiagnostics.psm1
<SYSTEM32>\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{e5607352-def8-4b17-b059-eeee8970ea4c}\snapshot.etl
<SYSTEM32>\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{c683a045-14da-4d4f-9649-745760e60f5b}\snapshot.etl
<SYSTEM32>\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{bf4e45be-8be5-43b1-9051-55a2f1bf1ea8}\snapshot.etl
<SYSTEM32>\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{e5c28919-fc45-4f24-962f-e757e9e8c03a}\snapshot.etl
<SYSTEM32>\WindowsPowerShell\v1.0\Modules\PSDiagnostics\PSDiagnostics.psd1
<SYSTEM32>\WindowsPowerShell\v1.0\Examples\profile.ps1
<SYSTEM32>\wfp\wfpdiag.etl
<SYSTEM32>\winevt\Logs\Microsoft-Windows-International-RegionalOptionsControlPanel%4Operational.evtx
<SYSTEM32>\winevt\Logs\Microsoft-Windows-UAC-FileVirtualization%4Operational.evtx
<SYSTEM32>\winevt\Logs\Microsoft-Windows-RestartManager%4Operational.evtx
<SYSTEM32>\winevt\Logs\Microsoft-Windows-Resource-Exhaustion-Resolver%4Operational.evtx
<SYSTEM32>\winevt\Logs\Microsoft-Windows-Windows Defender%4Operational.evtx
<Current directory>\tmp.txt
<SYSTEM32>\winevt\Logs\Setup.evtx
<SYSTEM32>\winevt\Logs\Microsoft-Windows-WindowsSystemAssessmentTool%4Operational.evtx
<SYSTEM32>\winevt\Logs\Microsoft-Windows-ReliabilityAnalysisComponent%4Operational.evtx
<SYSTEM32>\winevt\Logs\Microsoft-Windows-MUI%4Admin.evtx
<SYSTEM32>\winevt\Logs\Microsoft-Windows-LanguagePackSetup%4Operational.evtx
<SYSTEM32>\winevt\Logs\Microsoft-Windows-Known Folders API Service.evtx
<SYSTEM32>\winevt\Logs\Microsoft-Windows-MUI%4Operational.evtx
<SYSTEM32>\winevt\Logs\Microsoft-Windows-ReadyBoost%4Operational.evtx
<SYSTEM32>\winevt\Logs\Microsoft-Windows-PrintService%4Admin.evtx
<SYSTEM32>\winevt\Logs\Microsoft-Windows-NetworkLocationWizard%4Operational.evtx
<SYSTEM32>\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{b9474ad9-40db-404e-a4cb-ae8f448d8c1d}\snapshot.etl
<SYSTEM32>\wdi\perftrack\Wlansvc.ptxml
<SYSTEM32>\wdi\perftrack\WinlogonEvents.ptxml
<SYSTEM32>\wdi\perftrack\WinINet.ETW.ptxml
<SYSTEM32>\wdi\perftrack\WpdCoreInstrumentation.ptxml
<SYSTEM32>\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{0d92a2a0-13d3-4d6a-a690-d7b03e24d399}\snapshot.etl
<SYSTEM32>\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-892523515-1518344882-2423736544-500_UserData.bin
<SYSTEM32>\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2832440558-3064306045-1455513625-1000_UserData.bin
<SYSTEM32>\wdi\perftrack\wdc.events.ptxml
<SYSTEM32>\wdi\perftrack\themecpl.ptxml
<SYSTEM32>\wdi\perftrack\taskmgr.events.ptxml
<SYSTEM32>\wdi\perftrack\StobjectInstrumentation.ptxml
<SYSTEM32>\wdi\perftrack\timedate.ptxml
<SYSTEM32>\wdi\perftrack\VolumeControl.ptxml
<SYSTEM32>\wdi\perftrack\userplugplayetw.ptxml
<SYSTEM32>\wdi\perftrack\UIAutomationCore.ptxml
<SYSTEM32>\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{1387953f-a239-4e8d-9cab-2997fb78838b}\snapshot.etl
<SYSTEM32>\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{a2d198a5-f9a8-4969-a60b-583c0a4dd826}\snapshot.etl
<SYSTEM32>\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{99fbe054-73c6-4495-870f-b5f4f5ef8b91}\snapshot.etl
<SYSTEM32>\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{93c7dd99-296f-4dce-8e1f-fc51be19187c}\snapshot.etl
<SYSTEM32>\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{a881f0e4-d3a5-40da-b8fb-3e66a58d2b94}\snapshot.etl
<SYSTEM32>\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{b7820c82-88ad-46df-a1f1-5e6184fd1f5c}\snapshot.etl
<SYSTEM32>\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{ab2dcef1-097f-41bf-8b61-75b7559e68ce}\snapshot.etl
<SYSTEM32>\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{a89f41ca-f915-4283-8c58-985203063322}\snapshot.etl
<SYSTEM32>\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{6559a69c-9267-4d17-83e4-9d6003662f57}\snapshot.etl
<SYSTEM32>\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{2d9445e3-d7ce-4802-84c4-9f718ab5f87b}\snapshot.etl
<SYSTEM32>\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{2035b93e-2b8f-4065-8803-c83b7d6b000d}\snapshot.etl
<SYSTEM32>\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{142c8377-f57f-475d-b2d2-c74b0ef6158a}\snapshot.etl
<SYSTEM32>\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{3ff756f6-b905-480e-be12-5d15d2557f6a}\snapshot.etl
<SYSTEM32>\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{5d838116-6994-4626-b020-53aa56e2d836}\snapshot.etl
<SYSTEM32>\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{5c23522a-2b9f-4400-8bca-fd63c632f30b}\snapshot.etl
<SYSTEM32>\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{48a8043e-2cbb-4b9b-b8a0-f89f04cac6c2}\snapshot.etl
<SYSTEM32>\Tasks\Microsoft\Windows\Active Directory Rights Management Services Client\AD RMS Rights Policy Template Management (Automated)
<SYSTEM32>\Tasks\{B988DF37-E928-4622-BA20-B79599E43131}
<SYSTEM32>\Tasks\{9F465C85-253C-4AE0-ACA1-65DE2E3D93C6}
<SYSTEM32>\Tasks\Microsoft\Windows\Active Directory Rights Management Services Client\AD RMS Rights Policy Template Management (Manual)
<SYSTEM32>\Tasks\Microsoft\Windows\Application Experience\AitAgent
<SYSTEM32>\Tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck
<SYSTEM32>\Tasks\Microsoft\Windows\AppID\PolicyConverter
<SYSTEM32>\Tasks\startup_bat
<SYSTEM32>\sysprep\Panther\IE\setupact.log
<SYSTEM32>\sysprep\Panther\IE\diagwrn.xml
<SYSTEM32>\sysprep\Panther\IE\diagerr.xml
<SYSTEM32>\sysprep\Panther\IE\setuperr.log
<SYSTEM32>\Tasks\Opera scheduled Autoupdate 1407412009
<SYSTEM32>\Tasks\GoogleUpdateTaskMachineUA
<SYSTEM32>\Tasks\GoogleUpdateTaskMachineCore
<SYSTEM32>\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater
<SYSTEM32>\Tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector
<SYSTEM32>\Tasks\Microsoft\Windows\Diagnosis\Scheduled
<SYSTEM32>\Tasks\Microsoft\Windows\Defrag\ScheduledDefrag
<SYSTEM32>\Tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver
<SYSTEM32>\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch
<SYSTEM32>\Tasks\Microsoft\Windows\Maintenance\WinSAT
<SYSTEM32>\Tasks\Microsoft\Windows\Location\Notifications
<SYSTEM32>\Tasks\Microsoft\Windows\Customer Experience Improvement Program\UsbCeip
<SYSTEM32>\Tasks\Microsoft\Windows\CertificateServicesClient\SystemTask
<SYSTEM32>\Tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask
<SYSTEM32>\Tasks\Microsoft\Windows\Autochk\Proxy
<SYSTEM32>\Tasks\Microsoft\Windows\CertificateServicesClient\UserTask
<SYSTEM32>\Tasks\Microsoft\Windows\Customer Experience Improvement Program\KernelCeipTask
<SYSTEM32>\Tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator
<SYSTEM32>\Tasks\Microsoft\Windows\CertificateServicesClient\UserTask-Roam
<SYSTEM32>\spool\prtprocs\w32x86\en-US\LXKPTPRC.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\RIARES7.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\PSCRIPT5.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\PS5UI.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\RIAUI17.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\SH_1_RES.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\RIPSUI7.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\RIAUI27.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\PCLXL.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\OKDTERES.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\OK9IBRES.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\LXKXLUI.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\OKDTURES.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\PCL5URES.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\PCL5ERES.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\PCL4RES.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\SODPPUI2.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\PCC\prnms001.inf_x86_neutral_a1ff1bc29207b04f.cab
<SYSTEM32>\spool\drivers\w32x86\PCC\ntprint.inf_x86_neutral_88459cb66b0e2d44.cab
<SYSTEM32>\spool\drivers\w32x86\3\mui\0409\UNIDRV.HLP
<SYSTEM32>\spool\drivers\w32x86\PCC\prnms002.inf_x86_neutral_36c16a14ad707821.cab
<SYSTEM32>\spool\prtprocs\w32x86\winprint.dll
<SYSTEM32>\spool\prtprocs\w32x86\jnwppr.dll
<SYSTEM32>\spool\drivers\w32x86\PCC\prnms002.inf_x86_neutral_baa1493e6380688b.cab
<SYSTEM32>\spool\drivers\w32x86\3\mui\0409\TTYUI.HLP
<SYSTEM32>\spool\drivers\w32x86\3\en-US\TTYRES.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\tsprint.dll.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\tsmxuui3.dll.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\TTYUI.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\mui\0409\PSCRIPT.HLP
<SYSTEM32>\spool\drivers\w32x86\3\en-US\UNIRES.DLL.mui
<SYSTEM32>\spool\drivers\w32x86\3\en-US\UNIDRVUI.DLL.mui
<SYSTEM32>\Tasks\Microsoft\Windows\Task Manager\Interactive
<SYSTEM32>\Tasks\Microsoft\Windows\SystemRestore\SR
<SYSTEM32>\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask
<SYSTEM32>\Tasks\Microsoft\Windows\Tcpip\IpAddressConflict1
<SYSTEM32>\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime
<SYSTEM32>\Tasks\Microsoft\Windows\TextServicesFramework\MsCtfMonitor
<SYSTEM32>\Tasks\Microsoft\Windows\Tcpip\IpAddressConflict2
<SYSTEM32>\Tasks\Microsoft\Windows\SideShow\SystemDataProviders
<SYSTEM32>\Tasks\Microsoft\Windows\Shell\WindowsParentalControls
<SYSTEM32>\Tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask
<SYSTEM32>\Tasks\Microsoft\Windows\Registry\RegIdleBackup
<SYSTEM32>\Tasks\Microsoft\Windows\Shell\WindowsParentalControlsMigration
<SYSTEM32>\Tasks\Microsoft\Windows\SideShow\SessionAgent
<SYSTEM32>\Tasks\Microsoft\Windows\SideShow\GadgetManager
<SYSTEM32>\Tasks\Microsoft\Windows\SideShow\AutoWake
<SYSTEM32>\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig
<SYSTEM32>\Tasks\WPD\SqmUpload_S-1-5-21-2832440558-3064306045-1455513625-1000
<SYSTEM32>\Tasks\Microsoft\Windows\Wininet\CacheTask
<SYSTEM32>\Tasks\Microsoft\Windows\WindowsColorSystem\Calibration Loader
<SYSTEM32>\URTTEMP\regtlib.exe
<SYSTEM32>\wbem\AutoRecover\1BA88ACB624E02A260404A9D8F7BD8E5.mof
<SYSTEM32>\wbem\ServiceModel.mof.uninstall
<SYSTEM32>\wbem\ServiceModel.mof
<SYSTEM32>\Tasks\Microsoft\Windows\WindowsBackup\ConfigNotification
<SYSTEM32>\Tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTask
<SYSTEM32>\Tasks\Microsoft\Windows\WDI\ResolutionHost
<SYSTEM32>\Tasks\Microsoft\Windows\User Profile Service\HiveUploadTask
<SYSTEM32>\Tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline
<SYSTEM32>\Tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary
<SYSTEM32>\Tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange
<SYSTEM32>\Tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting
<SYSTEM32>\Tasks\Microsoft\Windows\Ras\MobilityManager
<SYSTEM32>\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1
<SYSTEM32>\Tasks\Microsoft\Windows\Media Center\PBDADiscovery
<SYSTEM32>\Tasks\Microsoft\Windows\Media Center\OCURDiscovery
<SYSTEM32>\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2
<SYSTEM32>\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask
<SYSTEM32>\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask
<SYSTEM32>\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry
<SYSTEM32>\Tasks\Microsoft\Windows\Media Center\OCURActivate
<SYSTEM32>\Tasks\Microsoft\Windows\Media Center\ehDRMInit
<SYSTEM32>\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks
<SYSTEM32>\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService
<SYSTEM32>\Tasks\Microsoft\Windows\Media Center\InstallPlayReady
<SYSTEM32>\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask
<SYSTEM32>\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask
<SYSTEM32>\Tasks\Microsoft\Windows\Media Center\mcupdate
<SYSTEM32>\Tasks\Microsoft\Windows\Media Center\RecordingRestart
<SYSTEM32>\Tasks\Microsoft\Windows\Offline Files\Background Synchronization
<SYSTEM32>\Tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo
<SYSTEM32>\Tasks\Microsoft\Windows\Multimedia\SystemSoundsService
<SYSTEM32>\Tasks\Microsoft\Windows\Offline Files\Logon Synchronization
<SYSTEM32>\Tasks\Microsoft\Windows\RAC\RacTask
<SYSTEM32>\Tasks\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem
<SYSTEM32>\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor
<SYSTEM32>\Tasks\Microsoft\Windows\MUI\LPRemove
<SYSTEM32>\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask
<SYSTEM32>\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot
<SYSTEM32>\Tasks\Microsoft\Windows\Media Center\RegisterSearch
<SYSTEM32>\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath
<SYSTEM32>\Tasks\Microsoft\Windows\MobilePC\HotStart
<SYSTEM32>\Tasks\Microsoft\Windows\MemoryDiagnostic\DecompressionFailureDetector
<SYSTEM32>\Tasks\Microsoft\Windows\MemoryDiagnostic\CorruptionDetector
<SYSTEM32>\LogFiles\Scm\a6394592-54ce-4e93-8d64-1a068f462632
<SYSTEM32>\RichTx32.Ocx
<SYSTEM32>\picclp32.ocx
<SYSTEM32>\PerfStringBackup.INI
<SYSTEM32>\streamci.dll
<SYSTEM32>\ticrf.rat
<SYSTEM32>\tabctl32.ocx
<SYSTEM32>\sysinfo.ocx
<SYSTEM32>\perfi009.dat
<SYSTEM32>\noise.kor
<SYSTEM32>\NOISE.DAT
<SYSTEM32>\NOISE.CHT
<SYSTEM32>\NOISE.THA
<SYSTEM32>\perfh009.dat
<SYSTEM32>\perfd009.dat
<SYSTEM32>\perfc009.dat
<SYSTEM32>\umstartup.etl
<SYSTEM32>\VmbusCoinstaller.dll
<SYSTEM32>\vfpodbc.dll
<SYSTEM32>\vcomp120.dll
<SYSTEM32>\vmbuspipe.dll
<SYSTEM32>\vmicres.dll
<SYSTEM32>\VmdCoinstall.dll
<SYSTEM32>\vmbusres.dll
<SYSTEM32>\vcomp110.dll
<SYSTEM32>\vcamp110.dll
<SYSTEM32>\usermode.dll
<SYSTEM32>\umstartup000.etl
<SYSTEM32>\vcamp120.dll
<SYSTEM32>\vcomp100.dll
<SYSTEM32>\vccorlib120.dll
<SYSTEM32>\vccorlib110.dll
<SYSTEM32>\NOISE.CHS
<SYSTEM32>\mshtmpgr.dll
<SYSTEM32>\MSHTMPGD.DLL
<SYSTEM32>\mshflxgd.ocx
<SYSTEM32>\msinet.ocx
<SYSTEM32>\msrdc20.ocx
<SYSTEM32>\msmask32.ocx
<SYSTEM32>\msmapi32.ocx
<SYSTEM32>\MSFlxGrd.Ocx
<SYSTEM32>\msdatgrd.ocx
<SYSTEM32>\mscomm32.ocx
<SYSTEM32>\mscomctl.ocx
<SYSTEM32>\msdatlst.ocx
<SYSTEM32>\msdbrptr.dll
<SYSTEM32>\MSDBRpt.DLL
<SYSTEM32>\msdatrep.ocx
<SYSTEM32>\msrdo20.dll
<SYSTEM32>\msvcr110_clr0400.dll
<SYSTEM32>\msvcr110.dll
<SYSTEM32>\msvcr100_clr0400.dll
<SYSTEM32>\msvcr120.dll
<SYSTEM32>\Network_LLU.log
<SYSTEM32>\mswinsck.ocx
<SYSTEM32>\mswcrun.dll
<SYSTEM32>\msvcr100.dll
<SYSTEM32>\msstkprp.dll
<SYSTEM32>\msstdfmt.dll
C:\tmp.tmp
<SYSTEM32>\msvcp100.dll
<SYSTEM32>\msvcp120.dll
<SYSTEM32>\msvcp110_clr0400.dll
<SYSTEM32>\msvcp110.dll
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep002.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00z.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00y.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep003.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep00a.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep005.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep004.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00x.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00e.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00d.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00c.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00f.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00i.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00h.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00g.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep00b.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prngt004.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prngt003.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prngt002.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnhp002.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnhp005.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnhp004.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnhp003.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnge001.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep00e.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep00d.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep00c.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep00f.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnfx002.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep00l.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep00g.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00b.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-LocalPack-US-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-LocalPack-GB-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-LocalPack-CA-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-LocalPack-ZA-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntexe.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-LocalPack-AU-Package~31bf3856ad364e35~x86~~6.1.7601.17514.cat
<SYSTEM32>\vmstorfltres.dll
<SYSTEM32>\vmictimeprovider.dll
<SYSTEM32>\vmicsvc.exe
<SYSTEM32>\wbclsdsr.ocx
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Refresh-LanguagePack-Package~31bf3856ad364e35~x86~en-US~6.1.7601.17514.cat
<SYSTEM32>\<Auxiliary name>.dll
<SYSTEM32>\WindowsAccessBridge.dll
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntph.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnbr008.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnbr007.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnbr006.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnbr009.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00a.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca003.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnbr00a.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnbr005.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2534111_SP1~31bf3856ad364e35~x86~~6.1.1.0.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2534111~31bf3856ad364e35~x86~~6.1.1.0.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntprint.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2534111~31bf3856ad364e35~x86~~6.1.1.0.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnbr004.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnbr003.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnbr002.cat
<SYSTEM32>\aspnet_counters.dll
\Device\HarddiskVolume3\music\Тату\Liudi invalidy\11 - Люди инвалиды.mp3
\Device\HarddiskVolume3\music\Тату\Liudi invalidy\10 - Что Не Хватает.mp3
<SYSTEM32>\atl100.dll
<SYSTEM32>\brcoinst.dll
<SYSTEM32>\autoexec.nt
<SYSTEM32>\atl110.dll
\Device\HarddiskVolume3\music\Тату\Liudi invalidy\09 - All about us.mp3
\Device\HarddiskVolume3\music\Тату\Liudi invalidy\04 - Loves Me Not.mp3
\Device\HarddiskVolume3\music\Тату\Liudi invalidy\03 - Обезьянка Ноль.mp3
\Device\HarddiskVolume3\music\Тату\Liudi invalidy\02 - Новая модель.mp3
\Device\HarddiskVolume3\music\Тату\Liudi invalidy\05 - Космос.mp3
\Device\HarddiskVolume3\music\Тату\Liudi invalidy\08 - Вся Моя Любовь.mp3
\Device\HarddiskVolume3\music\Тату\Liudi invalidy\07 - Ничья.mp3
\Device\HarddiskVolume3\music\Тату\Liudi invalidy\06 - Ты согласна.mp3
<SYSTEM32>\CIRCoInst.dll
<SYSTEM32>\FlashPlayerApp.exe
<SYSTEM32>\dssec.dat
<SYSTEM32>\dmvscres.dll
<SYSTEM32>\FlashPlayerCPLApp.cpl
<SYSTEM32>\icrav03.rat
<SYSTEM32>\IcCoinstall.dll
<SYSTEM32>\FNTCACHE.DAT
<SYSTEM32>\dblist32.ocx
<SYSTEM32>\comctl32.ocx
<SYSTEM32>\comct332.ocx
<SYSTEM32>\comct232.ocx
<SYSTEM32>\comdlg32.ocx
<SYSTEM32>\dbgrid32.ocx
<SYSTEM32>\dbadapt.dll
<SYSTEM32>\config.nt
\Device\HarddiskVolume3\music\Тату\Liudi invalidy\01 - Люди инвалиды (intro).mp3
\Device\HarddiskVolume3\music\Armin van Buuren\Armin van Buuren - 10 years\CD1\02 Armin van Buuren - Sail.mp3
\Device\HarddiskVolume3\music\Armin van Buuren\Armin van Buuren - 10 years\CD1\01 Armin van Buuren - Hymne.mp3
\Device\HarddiskVolume3\music\Armin van Buuren\Armin van Buuren - 10 years\Bonus\Armin van Buuren - 10 Years.m3u
\Device\HarddiskVolume3\music\Armin van Buuren\Armin van Buuren - 10 years\CD1\03 Armin van Buuren - Love You More (feat. Racoon).mp3
\Device\HarddiskVolume3\music\DJ Nil Виниловые пляски - Жара\02 Bob Sinclar feat. Steve Edwards - World Hold On.mp3
\Device\HarddiskVolume3\music\DJ Nil Виниловые пляски - Жара\01 Sunlounger - White Sand (DJ Shah's Original Mix).mp3
\Device\HarddiskVolume3\music\Armin van Buuren\Armin van Buuren - 10 years\CD1\05 Armin van Buuren - Yet Another Day (feat. Ray Wilson).mp3
\Device\HarddiskVolume3\music\Armin van Buuren\Armin van Buuren - 10 years\Bonus\04 Armin van Buuren - Blue Fear (Agnelli & Nelson Remix).mp3
\Device\HarddiskVolume3\books\SpeakOutWorkbook.pdf
\Device\HarddiskVolume3\books\SpeakOut.pdf
%TEMP%\crux_remake.ini
\Device\HarddiskVolume3\books\Программирование на языке Visual C++ - 2009.pdf
\Device\HarddiskVolume3\music\Armin van Buuren\Armin van Buuren - 10 years\Bonus\03 Armin van Buuren - Sound Of Goodbye (Above & Beyond Remix).mp3
\Device\HarddiskVolume3\music\Armin van Buuren\Armin van Buuren - 10 years\Bonus\02 Armin van Buuren - Communication (Original).mp3
\Device\HarddiskVolume3\music\Armin van Buuren\Armin van Buuren - 10 years\Bonus\01 Armin van Buuren - Sail (Carl B Remix).mp3
\Device\HarddiskVolume3\music\DJ Nil Виниловые пляски - Жара\03 Justin Solveig - I Like Something Better.mp3
\Device\HarddiskVolume3\music\Агент Смит\2007 Город Не Спит\cover.jpg
\Device\HarddiskVolume3\music\Агент Смит\2007 Город Не Спит\11-agent_smith_-_10_let_nazad.mp3
\Device\HarddiskVolume3\music\Агент Смит\2007 Город Не Спит\04-agent_smith_-_ya_zdes'.mp3
\Device\HarddiskVolume3\music\Агент Смит\2007 Город Не Спит\index.txt
\Device\HarddiskVolume3\music\Би2\Би-2 - Последний герой.mp3
\Device\HarddiskVolume3\music\Би2\Би-2 - Моя любовь.mp3
\Device\HarddiskVolume3\music\Би2\Би-2 - Елочный сок.mp3
\Device\HarddiskVolume3\music\Агент Смит\2007 Город Не Спит\03-agent_smith_-_preved.mp3
\Device\HarddiskVolume3\music\DJ Nil Виниловые пляски - Жара\13 Modjo - Lady Hear Me Tonight 2006 (Choo Choo's Original Recipe Mix).mp3
\Device\HarddiskVolume3\music\DJ Nil Виниловые пляски - Жара\05 Martin Solveig - Rocking Music (rmx).mp3
\Device\HarddiskVolume3\music\DJ Nil Виниловые пляски - Жара\04 Bananarama - Move In My Direction (The Lovefreekz Club Mix).mp3
\Device\HarddiskVolume3\music\DJ Nil Виниловые пляски - Жара\Nil_zara.nfo
\Device\HarddiskVolume3\music\Агент Смит\2007 Город Не Спит\02-agent_smith_-_gorod_ne_spit.mp3
\Device\HarddiskVolume3\music\Агент Смит\2007 Город Не Спит\01-agent_smith_-_perekrestok.mp3
\Device\HarddiskVolume3\music\DJ Nil Виниловые пляски - Жара\zara.jpg
<SYSTEM32>\mfc120ita.dll
<SYSTEM32>\mfc120fra.dll
<SYSTEM32>\mfc120esn.dll
<SYSTEM32>\mfc120jpn.dll
<SYSTEM32>\mfc120u.dll
<SYSTEM32>\mfc120rus.dll
<SYSTEM32>\mfc120kor.dll
<SYSTEM32>\mfc120enu.dll
<SYSTEM32>\mfc110u.dll
<SYSTEM32>\mfc110rus.dll
<SYSTEM32>\mfc110kor.dll
<SYSTEM32>\mfc120.dll
<SYSTEM32>\mfc120deu.dll
<SYSTEM32>\mfc120cht.dll
<SYSTEM32>\mfc120chs.dll
<SYSTEM32>\mfcm100.dll
<SYSTEM32>\msbind.dll
<SYSTEM32>\msadodc.ocx
<SYSTEM32>\msaddndr.dll
<SYSTEM32>\mscdrun.dll
<SYSTEM32>\mscomct2.ocx
<SYSTEM32>\msclmd.dll
<SYSTEM32>\mschrt20.ocx
<SYSTEM32>\MRT.exe
<SYSTEM32>\mfcm110u.dll
<SYSTEM32>\mfcm110.dll
<SYSTEM32>\mfcm100u.dll
<SYSTEM32>\mfcm120.dll
<SYSTEM32>\MpSigStub.exe
<SYSTEM32>\migwiz.lnk
<SYSTEM32>\mfcm120u.dll
<SYSTEM32>\mfc110jpn.dll
<SYSTEM32>\mci32.ocx
<SYSTEM32>\mapisvc.inf
<SYSTEM32>\Local_LLU.log
<SYSTEM32>\mfc100.dll
<SYSTEM32>\mfc100deu.dll
<SYSTEM32>\mfc100cht.dll
<SYSTEM32>\mfc100chs.dll
<SYSTEM32>\LocalGroupAdminAdd.log
<SYSTEM32>\java.exe
<SYSTEM32>\iscsilog.dll
<SYSTEM32>\InstallPackage_ETW.Log
<SYSTEM32>\javaw.exe
<SYSTEM32>\license.rtf
<SYSTEM32>\korwbrkr.lex
<SYSTEM32>\javaws.exe
<SYSTEM32>\mfc100enu.dll
<SYSTEM32>\mfc110deu.dll
<SYSTEM32>\mfc110cht.dll
<SYSTEM32>\mfc110chs.dll
<SYSTEM32>\mfc110enu.dll
<SYSTEM32>\mfc110ita.dll
<SYSTEM32>\mfc110fra.dll
<SYSTEM32>\mfc110esn.dll
<SYSTEM32>\mfc110.dll
<SYSTEM32>\mfc100ita.dll
<SYSTEM32>\mfc100fra.dll
<SYSTEM32>\mfc100esn.dll
<SYSTEM32>\mfc100jpn.dll
<SYSTEM32>\mfc100u.dll
<SYSTEM32>\mfc100rus.dll
<SYSTEM32>\mfc100kor.dll
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnin002.cat
<DRIVERS>\usbprint.sys
<DRIVERS>\usbport.sys
<DRIVERS>\usbohci.sys
<DRIVERS>\USBSTOR.SYS
<DRIVERS>\VIAAGP.SYS
<DRIVERS>\vhdmp.sys
<DRIVERS>\usbuhci.sys
<DRIVERS>\usbehci.sys
<DRIVERS>\UAGP35.SYS
<DRIVERS>\tsusbhub.sys
<DRIVERS>\TsUsbGD.sys
<DRIVERS>\ULIAGPKX.SYS
<DRIVERS>\usbd.sys
<DRIVERS>\usbcir.sys
<DRIVERS>\umpass.sys
<DRIVERS>\viac7.sys
<DRIVERS>\<Auxiliary name>xirtnet.sys
<DRIVERS>\wmiacpi.sys
<DRIVERS>\winhv.sys
<DRIVERS>\etc\hosts
<DRIVERS>\etc\protocol
<DRIVERS>\etc\networks
<DRIVERS>\etc\lmhosts.sam
<DRIVERS>\wd.sys
<DRIVERS>\VMBusHID.sys
<DRIVERS>\vmbus.sys
<DRIVERS>\viaide.sys
<DRIVERS>\vms3cap.sys
<DRIVERS>\wacompen.sys
<DRIVERS>\vsmraid.sys
<DRIVERS>\vmstorfl.sys
<DRIVERS>\terminpt.sys
<DRIVERS>\NV_AGP.SYS
<DRIVERS>\nvstor.sys
<DRIVERS>\nvraid.sys
<DRIVERS>\ohci1394.sys
<DRIVERS>\pnpmem.sys
<DRIVERS>\pcmcia.sys
<DRIVERS>\pciide.sys
<DRIVERS>\nfrd960.sys
<DRIVERS>\mpio.sys
<DRIVERS>\mouhid.sys
<DRIVERS>\MegaSR.sys
<DRIVERS>\msahci.sys
<DRIVERS>\MTConfig.sys
<DRIVERS>\msiscsi.sys
<DRIVERS>\msdsm.sys
<DRIVERS>\processr.sys
<DRIVERS>\sisraid4.sys
<DRIVERS>\sisraid2.sys
<DRIVERS>\SISAGP.SYS
<DRIVERS>\stexstor.sys
<DRIVERS>\Synth3dVsc.sys
<DRIVERS>\swenum.sys
<DRIVERS>\storvsc.sys
<DRIVERS>\sfloppy.sys
<DRIVERS>\sbp2port.sys
<DRIVERS>\ql40xx.sys
<DRIVERS>\ql2300.sys
<DRIVERS>\secdrv.sys
<DRIVERS>\sffp_sd.sys
<DRIVERS>\sffp_mmc.sys
<DRIVERS>\sffdisk.sys
<SYSTEM32>\LogFiles\Scm\6375cc1c-d975-48d2-9cd5-63db19b10d4a
<SYSTEM32>\LogFiles\Scm\62174e36-1225-4e0f-9141-31f98fb983f4
<SYSTEM32>\LogFiles\Scm\60158c7a-6808-42cd-95ee-afd9a57925db
<SYSTEM32>\LogFiles\Scm\6aef0c98-2cb4-4b67-8c70-4c977c7355cc
<SYSTEM32>\LogFiles\Scm\73259f86-29d6-42ff-b1e7-634f6e40d4f8
<SYSTEM32>\LogFiles\Scm\731e9c62-95b5-4c8c-ab64-4cc591c9ff5b
<SYSTEM32>\LogFiles\Scm\6b7ac694-8d6d-481b-9dd8-2a3a741ada6d
<SYSTEM32>\LogFiles\Scm\5f5e3a90-2577-4bd2-8dcc-1dd28c095380
<SYSTEM32>\LogFiles\Scm\560d8248-bb31-4d2d-9d53-d4558b779025
<SYSTEM32>\LogFiles\Scm\55f0f12e-4648-456b-9dfa-5e1fde7ccbef
<SYSTEM32>\LogFiles\Scm\53dda93d-d393-4216-a3dc-9c93c8c0c882
<SYSTEM32>\LogFiles\Scm\565d7174-2ccc-4cb8-ad10-23e6ef368043
<SYSTEM32>\LogFiles\Scm\5c2c622f-70e9-4194-a7da-033e827365ad
<SYSTEM32>\LogFiles\Scm\5b184694-64c3-4633-94c5-945b3fa561d6
<SYSTEM32>\LogFiles\Scm\575cae3e-3874-4725-bc62-45dd0e8687ca
<SYSTEM32>\LogFiles\Scm\7411cbe2-7358-49bc-8ec8-07aca8e6a7e3
<SYSTEM32>\LogFiles\Scm\9f54b95f-5096-4803-ae61-e9b3ac5b616d
<SYSTEM32>\LogFiles\Scm\9efacbe6-a797-4905-a0c6-014cd3000dbb
<SYSTEM32>\LogFiles\Scm\9b75c702-ea13-406a-badb-6c588ee4375b
<SYSTEM32>\LogFiles\Scm\a1cfa52f-06f2-418d-addb-cd6456d66f43
<SYSTEM32>\LogFiles\Scm\a52f0a69-b2b2-44fc-b7d7-bd0b9268f410
<SYSTEM32>\LogFiles\Scm\a316e645-1c56-45a6-bd6a-7dca79778090
<SYSTEM32>\LogFiles\Scm\a2cfb6f3-b3ae-4971-8e29-c415be22d2e5
<SYSTEM32>\LogFiles\Scm\9334c323-f100-4656-9ba0-e4aa69c0f9c2
<SYSTEM32>\LogFiles\Scm\80be8772-1892-468f-9fb9-8eadb8178437
<SYSTEM32>\LogFiles\Scm\7e9be00e-9051-4afe-8883-af4eab247731
<SYSTEM32>\LogFiles\Scm\7d3c7871-a917-4ef0-82e8-5f0a96423051
<SYSTEM32>\LogFiles\Scm\85dacd78-b274-451b-bee6-47a36a46fc5a
<SYSTEM32>\LogFiles\Scm\8d6de41b-38ad-486e-942e-b2ef8b641f13
<SYSTEM32>\LogFiles\Scm\8905ecd8-016f-4dc2-90e6-a5f1fa6a841a
<SYSTEM32>\LogFiles\Scm\885029b6-6494-4fca-8e6a-e0020b6bc7ae
<SYSTEM32>\LogFiles\Scm\50fb5a03-0e1e-48de-b8a1-bee9d7d2cd0f
<SYSTEM32>\LogFiles\Scm\071d41b6-8806-4eb0-b661-6cb67be6e86e
<SYSTEM32>\LogFiles\Scm\05ee699f-ab25-42d8-8781-558c5d1d2fad
<SYSTEM32>\LogFiles\Scm\04f26a7e-c471-4759-90ba-408398e117d7
<SYSTEM32>\LogFiles\Scm\09cb7976-3413-4641-99bf-76855237d5b3
<SYSTEM32>\LogFiles\Scm\0cfd7696-63aa-4b69-883c-b1a5f65977c9
<SYSTEM32>\LogFiles\Scm\0b1d1593-54a1-453b-910d-428f1457addc
<SYSTEM32>\LogFiles\Scm\09fcea2c-ee97-483c-adf1-e2754fdfc113
<SYSTEM32>\LogFiles\AIT\AitEventLog.etl.005
<SYSTEM32>\ias\dnary.xsd
<SYSTEM32>\en-US\dfshim.dll.mui
<DRIVERS>\etc\services
<SYSTEM32>\LogFiles\AIT\AitEventLog.etl.001
<SYSTEM32>\LogFiles\AIT\AitEventLog.etl.004
<SYSTEM32>\LogFiles\AIT\AitEventLog.etl.003
<SYSTEM32>\LogFiles\AIT\AitEventLog.etl.002
<SYSTEM32>\LogFiles\Scm\0d9b5d92-3a22-486d-a887-3aa21597cf27
<SYSTEM32>\LogFiles\Scm\367f930a-a3db-4112-b1f1-50e92a171c88
<SYSTEM32>\LogFiles\Scm\329f0b7b-f82b-46b7-90bb-639a62b26360
<SYSTEM32>\LogFiles\Scm\2c59ecaf-3a27-4640-9f4b-519b05bdd70f
<SYSTEM32>\LogFiles\Scm\4040e761-8758-4007-b2fe-142b24bf4b16
<SYSTEM32>\LogFiles\Scm\4c520067-fc4d-4032-95f7-c3ec8c7a9997
<SYSTEM32>\LogFiles\Scm\4378cc62-92d5-487d-bb64-7486cdf555ab
<SYSTEM32>\LogFiles\Scm\41992cd9-27ec-4936-8551-d2df6f224140
<SYSTEM32>\LogFiles\Scm\2bd05ba6-988d-4bd3-a9cd-9a39f80af524
<SYSTEM32>\LogFiles\Scm\18e6d428-d26c-4169-bedf-3b5bddc952f6
<SYSTEM32>\LogFiles\Scm\13725d45-a746-4ec0-998c-9aa4c437aa2c
<SYSTEM32>\LogFiles\Scm\0e12083c-0335-49db-9542-ba1ec6d83ecc
<SYSTEM32>\LogFiles\Scm\1ec9510d-a439-4950-9399-b6399edf9ea7
<SYSTEM32>\LogFiles\Scm\25bf1701-eff3-495b-9a27-d81e95b7e766
<SYSTEM32>\LogFiles\Scm\24fa84a0-e087-48ec-bc51-2b9c4c815d78
<SYSTEM32>\LogFiles\Scm\2375f586-1009-41fb-b54e-30d8af2b781d
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnrc003.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnrc002.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnok002.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnrc004.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnrc007.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnrc006.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnrc005.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnod002.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx00z.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx00y.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx00x.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnms002.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnnr004.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnnr003.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnnr002.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnrc00a.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnxx002.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnts003.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnts002.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\windows-legacy-whql.cat
<SYSTEM32>\catroot2\edb00478.log
<SYSTEM32>\catroot2\edb.chk
<SYSTEM32>\catroot2\dberr.txt
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnsv004.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnsa002.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnrc00c.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnrc00b.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnsh002.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnsv003.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnsv002.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnso002.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx00w.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnky006.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnky005.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnky004.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnky007.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnle002.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnky009.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnky008.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnky003.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnkm002.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnin004.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnin003.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnkm003.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnky002.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnkm005.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnkm004.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnle003.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx00b.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx00a.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx009.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx00c.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx00v.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx00e.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx00d.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx008.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx003.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx002.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnle004.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx004.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx007.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx006.cat
<SYSTEM32>\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx005.cat
<DRIVERS>\errdev.sys
<DRIVERS>\elxstor.sys
<DRIVERS>\E1G60I32.sys
<DRIVERS>\evbdx.sys
<DRIVERS>\hcw85cir.sys
<DRIVERS>\GAGP30KX.SYS
<DRIVERS>\<Auxiliary name>.sys
<DRIVERS>\dmvsc.sys
<DRIVERS>\circlass.sys
<DRIVERS>\bxvbdx.sys
<DRIVERS>\bthmodem.sys
<DRIVERS>\cmdide.sys
<DRIVERS>\djsvs.sys
<DRIVERS>\crcdisk.sys
<DRIVERS>\compbatt.sys
<DRIVERS>\hdaudbus.sys
<DRIVERS>\lsi_fc.sys
<DRIVERS>\kbdhid.sys
<DRIVERS>\isapnp.sys
<DRIVERS>\lsi_sas.sys
<DRIVERS>\megasas.sys
<DRIVERS>\lsi_scsi.sys
<DRIVERS>\lsi_sas2.sys
<DRIVERS>\IPMIDrv.sys
<DRIVERS>\hidir.sys
<DRIVERS>\hidbth.sys
<DRIVERS>\hidbatt.sys
<DRIVERS>\HpSAMD.sys
<DRIVERS>\intelide.sys
<DRIVERS>\iirsp.sys
<DRIVERS>\iaStorV.sys
<DRIVERS>\BrUsbSer.sys
<DRIVERS>\acpipmi.sys
<DRIVERS>\1394ohci.sys
<DRIVERS>\1394bus.sys
<DRIVERS>\adp94xx.sys
<DRIVERS>\aliide.sys
<DRIVERS>\adpu320.sys
<DRIVERS>\adpahci.sys
<SYSTEM32>\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9RWDBUUX\IDR_XML_DEFAULT_TRANSFORM[1]
<SYSTEM32>\CodeIntegrity\bootcat.cache
<SYSTEM32>\catroot2\edbres00002.jrs
<SYSTEM32>\catroot2\edbres00001.jrs
<SYSTEM32>\config\BCD-Template
<SYSTEM32>\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat
<SYSTEM32>\config\systemprofile\ntuser.dat
<SYSTEM32>\config\COMPONENTS
<DRIVERS>\AMDAGP.SYS
<DRIVERS>\BrFiltLo.sys
<DRIVERS>\blbdrive.sys
<DRIVERS>\b57nd60x.sys
<DRIVERS>\BrFiltUp.sys
<DRIVERS>\BrUsbMdm.sys
<DRIVERS>\BrSerWdm.sys
<DRIVERS>\BrSerId.sys
<DRIVERS>\arcsas.sys
<DRIVERS>\amdppm.sys
<DRIVERS>\amdk8.sys
<DRIVERS>\amdide.sys
<DRIVERS>\amdsata.sys
<DRIVERS>\arc.sys
<DRIVERS>\amdxata.sys
<DRIVERS>\amdsbs.sys

Deletes itself.

Miscellaneous:

Searches for the following windows:

ClassName: 'MS_WINHELP' WindowName: ''

TECHNOLOGIES

TERMINOLOGIE

COURS ET EDU

MYTHES

Technical Information

Recommandations pour le traitement

Free trial